last executing test programs: 10.689889478s ago: executing program 3 (id=6794): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000001cc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20044800}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x8000}], 0x2, 0x0) r2 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = msgget$private(0x0, 0xab) msgrcv(r6, 0x0, 0x0, 0x0, 0x2800) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r7 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080)=0x3ff, 0x4) connect$caif(r7, &(0x7f0000000100)=@rfm={0x25, 0x0, "d034e68fae880aca9de7751355b0eb74"}, 0x18) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 8.386065973s ago: executing program 3 (id=6796): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f00000002c0)=""/208, 0xd0) syz_usb_disconnect(0xffffffffffffffff) 7.047939403s ago: executing program 1 (id=6800): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) 6.989126764s ago: executing program 1 (id=6801): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000001cc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20044800}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x8000}], 0x2, 0x0) r2 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = msgget$private(0x0, 0xab) msgrcv(r6, 0x0, 0x0, 0x0, 0x2800) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r7 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080)=0x3ff, 0x4) connect$caif(r7, &(0x7f0000000100)=@rfm={0x25, 0x0, "d034e68fae880aca9de7751355b0eb74"}, 0x18) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 6.005813149s ago: executing program 1 (id=6804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r1, @ANYBLOB="01002dbd700000000000100000001800018014000200776c616e310000000000000000000000080009000000000008000800000076bee10000"], 0x3c}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0x7942fdd49c6addaf) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000880)={{}, 0xfe}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) sendmsg$netlink(r0, &(0x7f0000000280)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000080)={0x18, 0x20, 0x100, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x13d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x18}, {&(0x7f00000004c0)={0x1dc, 0x15, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@generic="aea7e9085bb869a50a83a70becf294d9a349d1dd88c1280bcc92367b3f333d91a332800541739c693736c45ec3f1c77e5356dc59de98ea07cabace0552007457dec6f665f3296a9df31210ef1c656e6e", @nested={0x34, 0x141, 0x0, 0x1, [@nested={0x4, 0x8c}, @typed={0x8, 0x68, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic, @nested={0x4, 0x9d}, @typed={0x6, 0xdc, 0x0, 0x0, @str='^\x00'}, @typed={0x14, 0x147, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x77}]}, @nested={0x140, 0x143, 0x0, 0x1, [@nested={0x4, 0x1}, @nested={0x4, 0x8e}, @nested={0x4, 0x63}, @generic="aa1e219b1950fde082a1e55ab8c9565d6aec99e82d2cb5c60ab4b560350fe3487db3d655a2938832832dacb76d9861db2d19742cae84545b5d119ed19dc44d3eb10b23b729ca89eb56be6e646687b620c1d9d1991d9a4df90dc31da4ec2ae639bfa930db6efd6e0c9824a2d17a4611284205c118e0f3b0d2fbc2f64667bd36c4bdacaafe6f74072e525128699c9233dc", @typed={0x98, 0xa2, 0x0, 0x0, @binary="52710449ba815a07764d0618089e1cb9ba8ac0d5154feed63b982699625db1c1b87e537fdd3e230f03be1e15206faf45c22a5d3f1b5493a48c495ebf81d157a2c457bd2aabbcc67f21a8bdf55487389e8debcdd3746344dc2282a9fc59fcdab0d1a3d2ebcf1641b0264d125c7192923d49937ab2e8db691ea2fe55d97fab501ebd80c707e0acf91c481a357924e3b0f1e74ac6c7"}, @typed={0x4, 0x111}, @nested={0x4, 0x77}]}, @typed={0x8, 0x3d, 0x0, 0x0, @pid}]}, 0x1dc}], 0x2, &(0x7f0000000200)=[@rights={{0x10}}], 0x10, 0x1}, 0x0) ioprio_set$pid(0x1, 0x0, 0x2004) read(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x40, 0x10, 0x1a, "b6ac4ada95adcdc81183604ec87d631277bba94f5c65ab7890ac"}, 0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) 5.633047065s ago: executing program 2 (id=6810): socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 5.561650776s ago: executing program 2 (id=6811): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$qrtrtun(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) fanotify_init(0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e080039503230"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r5, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 4.889855606s ago: executing program 3 (id=6812): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000001cc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20044800}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x8000}], 0x2, 0x0) r2 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = msgget$private(0x0, 0xab) msgrcv(r5, 0x0, 0x0, 0x0, 0x2800) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r6 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080)=0x3ff, 0x4) connect$caif(r6, &(0x7f0000000100)=@rfm={0x25, 0x0, "d034e68fae880aca9de7751355b0eb74"}, 0x18) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 4.127484437s ago: executing program 0 (id=6815): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() syz_pidfd_open(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 4.042518929s ago: executing program 0 (id=6816): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000440)={0x77, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r3, 0x0, r2}) 3.929914771s ago: executing program 3 (id=6817): openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11d8, @void, @value}, 0x94) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0x30, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x32, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x21000000}}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(0x0, 0x76, 0x101301) unshare(0x22020600) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x11) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 3.929253171s ago: executing program 0 (id=6818): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() syz_pidfd_open(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) 3.868196172s ago: executing program 0 (id=6819): socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 3.651047155s ago: executing program 0 (id=6820): mkdirat(0xffffffffffffff9c, 0x0, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) close(0xffffffffffffffff) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, &(0x7f00000003c0)=""/219, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000340)="747369587e0a4e47adce", 0xa}], 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000640)=""/102392, 0x18ff8) pipe2$9p(0x0, 0x880) sync() sync() 2.859223437s ago: executing program 1 (id=6821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 2.813049367s ago: executing program 0 (id=6822): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) mkdirat(r1, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1, 0x10}, 0x8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @tick=0x80000, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0xfb, 0x0, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @time=@tick=0xfffffffe}], 0x38) 2.215479137s ago: executing program 2 (id=6823): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000300)=@known='security.selinux\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = io_uring_setup(0x5e69, &(0x7f0000000100)={0x0, 0x1084, 0x40, 0x10000003, 0x2c3}) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000280), 0x0) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) 2.215035677s ago: executing program 3 (id=6824): r0 = io_uring_setup(0x177f, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.200534592s ago: executing program 2 (id=6825): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, &(0x7f0000000100), 0x48) 1.013701875s ago: executing program 1 (id=6826): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000001cc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20044800}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x8000}], 0x2, 0x0) r2 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = msgget$private(0x0, 0xab) msgrcv(r5, 0x0, 0x0, 0x0, 0x2800) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r6 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080)=0x3ff, 0x4) connect$caif(r6, &(0x7f0000000100)=@rfm={0x25, 0x0, "d034e68fae880aca9de7751355b0eb74"}, 0x18) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 208.900527ms ago: executing program 3 (id=6827): syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 208.630218ms ago: executing program 2 (id=6828): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000200)=[@rights={{0x10}}], 0x10, 0x1}, 0x0) 33.87804ms ago: executing program 2 (id=6829): r0 = socket(0x15, 0x802, 0x8) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000000)={0x28, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) 0s ago: executing program 1 (id=6830): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x120, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xf8, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) kernel console output (not intermixed with test programs): SB disconnect, device number 35 [ 1320.697889][ T28] audit: type=1326 audit(1750134932.905:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22284 comm="syz.2.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1324.635941][T20612] Bluetooth: hci0: command tx timeout [ 1325.811207][T22385] IPv6: Can't replace route, no match found [ 1327.717032][T22416] syz.1.5214[22416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1327.717409][T22416] syz.1.5214[22416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1328.436039][ T27] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1328.838243][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 1328.916495][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.036685][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1329.145071][ T27] usb 2-1: config 0 has no interface number 0 [ 1329.224969][ T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1329.339136][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.513924][ T27] usb 2-1: config 0 descriptor?? [ 1329.662006][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1330.083745][ T27] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 1331.394107][ T8] usb 2-1: USB disconnect, device number 36 [ 1333.266400][T14019] Bluetooth: hci2: command 0x0406 tx timeout [ 1335.346471][T22467] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1336.016338][T22469] hub 9-0:1.0: USB hub found [ 1336.022146][T22469] hub 9-0:1.0: 1 port detected [ 1336.615426][T22473] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1337.366603][T22478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5233'. [ 1340.070721][T22509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5239'. [ 1344.326467][T22550] hub 9-0:1.0: USB hub found [ 1344.332240][T22550] hub 9-0:1.0: 1 port detected [ 1344.636478][T22557] syz.3.5258[22557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1344.636907][T22557] syz.3.5258[22557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1346.970730][T21279] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1347.175680][T21279] usb 4-1: Using ep0 maxpacket: 16 [ 1347.187101][T21279] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.202270][T21279] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1347.213674][T21279] usb 4-1: config 0 has no interface number 0 [ 1347.220428][T21279] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1347.230263][T21279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.241467][T21279] usb 4-1: config 0 descriptor?? [ 1347.251454][T21279] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1347.278788][T21279] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 1347.575203][T21279] usb 4-1: USB disconnect, device number 36 [ 1351.791428][T22609] syz.3.5272: attempt to access beyond end of device [ 1351.791428][T22609] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1355.645736][T22658] IPv6: Can't replace route, no match found [ 1356.364979][T22662] hub 9-0:1.0: USB hub found [ 1356.370850][T22662] hub 9-0:1.0: 1 port detected [ 1357.444945][T22680] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1358.407557][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5297'. [ 1358.886085][T14019] Bluetooth: hci0: command 0x0406 tx timeout [ 1360.214601][T22717] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1361.286903][T22729] hub 9-0:1.0: USB hub found [ 1361.292817][T22729] hub 9-0:1.0: 1 port detected [ 1361.910081][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.919611][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.062609][ T8] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1362.772805][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.985892][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1363.018164][ T8] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1363.045069][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.060172][ T8] usb 4-1: Product: syz [ 1363.075567][ T8] usb 4-1: Manufacturer: syz [ 1363.093427][ T8] usb 4-1: SerialNumber: syz [ 1363.224562][ T8] usb 4-1: config 0 descriptor?? [ 1363.244648][ T8] usb 4-1: ucan: probing device on interface #0 [ 1363.264918][ T8] usb 4-1: ucan: invalid EP count (0) [ 1363.275520][ T8] usb 4-1: ucan: probe failed; try to update the device firmware [ 1363.465886][T20802] usb 4-1: USB disconnect, device number 37 [ 1364.201295][T22760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5322'. [ 1364.210486][T22760] nbd: must specify at least one socket [ 1365.538185][ T8] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1365.649545][T22789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5333'. [ 1365.659494][T22789] nbd: must specify at least one socket [ 1365.730052][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.740742][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1365.783395][ T8] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1365.793455][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.797531][T22791] IPv6: Can't replace route, no match found [ 1365.816007][ T8] usb 1-1: Product: syz [ 1365.820407][ T8] usb 1-1: Manufacturer: syz [ 1365.825012][ T8] usb 1-1: SerialNumber: syz [ 1365.838901][ T8] usb 1-1: config 0 descriptor?? [ 1365.847246][ T8] usb 1-1: ucan: probing device on interface #0 [ 1365.857927][ T8] usb 1-1: ucan: invalid EP count (0) [ 1365.863410][ T8] usb 1-1: ucan: probe failed; try to update the device firmware [ 1366.052553][T18204] usb 1-1: USB disconnect, device number 36 [ 1370.682945][T22839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5348'. [ 1370.935206][T22844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5351'. [ 1372.389064][T22868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5360'. [ 1373.396190][T22879] IPv6: Can't replace route, no match found [ 1374.525332][T22895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5369'. [ 1374.576245][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 1374.576260][ T28] audit: type=1800 audit(1750134988.625:74): pid=22895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5369" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1375.114407][T22906] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1377.214335][T22932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5380'. [ 1378.335920][T18204] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1378.505642][T18204] usb 3-1: device descriptor read/64, error -71 [ 1378.874675][T22944] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1378.905806][T18204] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1379.150287][T18204] usb 3-1: device descriptor read/64, error -71 [ 1379.591150][T18204] usb usb3-port1: attempt power cycle [ 1379.727628][T22952] syz.0.5387: attempt to access beyond end of device [ 1379.727628][T22952] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1380.005743][T18204] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1380.049480][T18204] usb 3-1: device descriptor read/8, error -71 [ 1380.345654][T18204] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1381.220906][T18204] usb 3-1: device descriptor read/8, error -71 [ 1381.437534][T18204] usb usb3-port1: unable to enumerate USB device [ 1382.667768][T22967] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1385.904499][T23003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5399'. [ 1385.993861][T23016] IPv6: Can't replace route, no match found [ 1390.512350][T23060] IPv6: Can't replace route, no match found [ 1392.292930][T23071] hub 9-0:1.0: USB hub found [ 1392.298758][T23071] hub 9-0:1.0: 1 port detected [ 1403.507299][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5444'. [ 1408.047223][T23204] IPv6: Can't replace route, no match found [ 1408.095970][T23206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5456'. [ 1411.407338][T23236] syz.1.5464[23236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1411.408103][T23236] syz.1.5464[23236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1413.525678][T20802] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1413.653702][T23240] IPv6: Can't replace route, no match found [ 1413.716296][T23242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5467'. [ 1413.735582][T20802] usb 2-1: Using ep0 maxpacket: 16 [ 1413.762788][T20802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.803696][T20802] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1413.843639][T20802] usb 2-1: config 0 has no interface number 0 [ 1413.870827][T20802] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1413.888573][T20802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.922184][T20802] usb 2-1: config 0 descriptor?? [ 1414.412968][T20802] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1414.505330][T20802] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 1414.672776][T20802] usb 2-1: USB disconnect, device number 37 [ 1415.845886][T23263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5471'. [ 1416.656467][T23260] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1417.062577][T23279] syz.0.5477[23279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1417.063123][T23279] syz.0.5477[23279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1417.455762][T20802] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1417.857183][T20802] usb 1-1: Using ep0 maxpacket: 16 [ 1417.914958][T20802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.011309][T20802] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1418.097503][T20802] usb 1-1: config 0 has no interface number 0 [ 1418.153122][T20802] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1418.251603][T20802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.385851][T20802] usb 1-1: config 0 descriptor?? [ 1418.511923][T20802] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1419.842166][T20802] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 1419.931273][T23288] (syz.2.5480,23288,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1419.940287][T23288] (syz.2.5480,23288,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1420.829338][ T27] usb 1-1: USB disconnect, device number 37 [ 1421.870472][T23302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5483'. [ 1423.446058][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.476064][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.576953][T23323] syz.0.5489[23323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1423.577113][T23323] syz.0.5489[23323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1424.317694][T17059] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1425.145731][T17059] usb 1-1: Using ep0 maxpacket: 16 [ 1425.208580][T17059] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.456932][T17059] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1426.345544][T17059] usb 1-1: config 0 has no interface number 0 [ 1426.395698][T17059] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1426.418149][T17059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.464872][T23330] syz.3.5491[23330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1426.465368][T23330] syz.3.5491[23330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1427.221106][T17059] usb 1-1: config 0 descriptor?? [ 1428.325638][T17059] usb 1-1: can't set config #0, error -71 [ 1428.337459][T17059] usb 1-1: USB disconnect, device number 38 [ 1428.343161][T23332] IPv6: Can't replace route, no match found [ 1428.425628][T20802] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1429.090801][T23348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5494'. [ 1429.135004][T20802] usb 4-1: Using ep0 maxpacket: 16 [ 1429.154607][T20802] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.175498][T20802] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1429.184656][T20802] usb 4-1: config 0 has no interface number 0 [ 1429.205596][T20802] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1429.244093][T20802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.281911][T20802] usb 4-1: config 0 descriptor?? [ 1429.306001][T20802] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1429.362600][T20802] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 1429.738426][ T8] usb 4-1: USB disconnect, device number 38 [ 1430.819268][T23369] (syz.2.5502,23369,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1430.828453][T23369] (syz.2.5502,23369,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1433.197037][T23396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5507'. [ 1434.188037][T23405] IPv6: Can't replace route, no match found [ 1434.601348][T23412] (syz.2.5513,23412,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1434.610169][T23412] (syz.2.5513,23412,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1435.129100][T20612] Bluetooth: hci0: command 0x0406 tx timeout [ 1435.310614][T23417] syz.3.5515[23417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1435.311025][T23417] syz.3.5515[23417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1435.691419][T20802] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1436.105663][T20802] usb 4-1: Using ep0 maxpacket: 16 [ 1436.188691][T20802] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.535112][T20802] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1437.565870][T20802] usb 4-1: config 0 has no interface number 0 [ 1437.572019][T20802] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1437.598295][T20802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.607159][T23428] IPv6: Can't replace route, no match found [ 1437.630234][T20802] usb 4-1: config 0 descriptor?? [ 1437.662775][T20802] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1437.728179][T20802] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 1437.819416][T20099] usb 4-1: USB disconnect, device number 39 [ 1439.950289][T23462] syz.1.5529[23462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1439.950486][T23462] syz.1.5529[23462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1440.325778][T13152] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1440.805713][T13152] usb 2-1: Using ep0 maxpacket: 16 [ 1440.873950][T13152] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.014425][T13152] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1441.142912][T13152] usb 2-1: config 0 has no interface number 0 [ 1441.250276][T13152] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1441.386985][T13152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.600595][T13152] usb 2-1: config 0 descriptor?? [ 1442.891162][T13152] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1442.970677][T23466] (syz.3.5530,23466,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1442.979647][T23466] (syz.3.5530,23466,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1443.819982][T13152] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 1444.250713][T23472] syz.3.5532[23472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1444.251108][T23472] syz.3.5532[23472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1444.354162][T13152] usb 2-1: USB disconnect, device number 38 [ 1444.605921][T20099] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1444.886586][T20099] usb 4-1: Using ep0 maxpacket: 16 [ 1444.938350][T20099] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.209718][T20099] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1445.323432][T20099] usb 4-1: config 0 has no interface number 0 [ 1446.463415][T20099] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1446.495596][T20099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.507312][T20099] usb 4-1: config 0 descriptor?? [ 1446.514814][T20099] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1446.654033][T20099] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 1446.708185][T20099] usb 4-1: USB disconnect, device number 40 [ 1447.506493][T23502] IPv6: Can't replace route, no match found [ 1447.656371][T23505] syz.1.5542[23505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1447.656796][T23505] syz.1.5542[23505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1449.465663][T17059] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1449.845646][T17059] usb 2-1: Using ep0 maxpacket: 16 [ 1449.872763][T23514] syz.2.5546[23514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1449.873271][T23514] syz.2.5546[23514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1451.732988][T17059] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.195704][T17059] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1452.243747][T17059] usb 2-1: config 0 has no interface number 0 [ 1452.251338][T17059] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1452.263795][T12635] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1452.287100][T17059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.303385][T17059] usb 2-1: config 0 descriptor?? [ 1452.318153][T17059] usb 2-1: can't set config #0, error -71 [ 1452.329404][T17059] usb 2-1: USB disconnect, device number 39 [ 1452.495550][T12635] usb 3-1: Using ep0 maxpacket: 16 [ 1452.508965][T12635] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.535604][T12635] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1452.559893][T12635] usb 3-1: config 0 has no interface number 0 [ 1452.582032][T12635] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1452.616086][T12635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.633043][T12635] usb 3-1: config 0 descriptor?? [ 1452.650321][T12635] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1452.687473][T12635] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 1452.919376][T12635] usb 3-1: USB disconnect, device number 30 [ 1454.176150][T23543] syz.0.5555[23543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1454.176235][T23543] syz.0.5555[23543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1454.466350][T12635] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1454.935632][T12635] usb 1-1: Using ep0 maxpacket: 16 [ 1454.955579][T12635] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.970185][T12635] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1454.979877][T12635] usb 1-1: config 0 has no interface number 0 [ 1455.112094][T12635] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1455.141154][T12635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.180771][T12635] usb 1-1: config 0 descriptor?? [ 1455.193203][T12635] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1455.340085][T12635] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 1455.445323][T20099] usb 1-1: USB disconnect, device number 39 [ 1456.787939][T20099] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1457.141577][T20099] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.153061][T20099] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1457.189293][T20099] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1457.199504][T20099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.207936][T20099] usb 2-1: Product: syz [ 1457.212361][T20099] usb 2-1: Manufacturer: syz [ 1457.217315][T20099] usb 2-1: SerialNumber: syz [ 1457.278581][T20099] usb 2-1: config 0 descriptor?? [ 1458.365689][ T28] audit: type=1326 audit(1750135072.365:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23585 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1458.396946][T12635] usb 2-1: USB disconnect, device number 40 [ 1458.424566][ T28] audit: type=1326 audit(1750135072.365:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23585 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1458.509999][ T28] audit: type=1326 audit(1750135072.365:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23585 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1458.581775][ T28] audit: type=1326 audit(1750135072.365:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23585 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1458.610057][ T28] audit: type=1326 audit(1750135072.365:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23585 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1458.637369][ T28] audit: type=1326 audit(1750135072.365:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23585 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1458.664449][ T28] audit: type=1326 audit(1750135072.365:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23585 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1458.734001][ T28] audit: type=1326 audit(1750135072.365:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23585 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1458.769524][ T28] audit: type=1326 audit(1750135072.365:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23585 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1458.814731][ T28] audit: type=1326 audit(1750135072.365:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23585 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1461.706516][T23642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5590'. [ 1464.306395][ T1113] kworker/dying (1113) used greatest stack depth: 19816 bytes left [ 1465.116048][T23676] (syz.1.5602,23676,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1465.124858][T23676] (syz.1.5602,23676,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1467.500084][T23701] syz.2.5607: attempt to access beyond end of device [ 1467.500084][T23701] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1468.706601][T23717] IPv6: Can't replace route, no match found [ 1469.796107][T23736] IPv6: Can't replace route, no match found [ 1471.874424][T23751] syz.3.5626: attempt to access beyond end of device [ 1471.874424][T23751] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1473.251264][T23766] IPv6: Can't replace route, no match found [ 1474.650997][T23780] Bluetooth: MGMT ver 1.22 [ 1475.324148][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 1475.324190][ T28] audit: type=1326 audit(1750135089.375:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.2.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1475.985531][T20612] Bluetooth: hci0: command 0x0406 tx timeout [ 1475.991769][ T28] audit: type=1326 audit(1750135089.405:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.2.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1476.014026][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.021156][ T28] audit: type=1326 audit(1750135089.405:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.2.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1476.043627][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.050236][ T28] audit: type=1326 audit(1750135089.405:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.2.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1476.073075][ T28] audit: type=1326 audit(1750135089.405:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.2.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1476.095456][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.139628][ T28] audit: type=1326 audit(1750135089.405:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.2.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1476.161978][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.211829][ T28] audit: type=1326 audit(1750135089.415:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.2.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1476.712914][ T28] audit: type=1326 audit(1750135089.415:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.2.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1476.970507][ T28] audit: type=1326 audit(1750135089.415:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.2.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1477.013808][ T28] audit: type=1326 audit(1750135089.415:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.2.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1477.126880][T23804] IPv6: Can't replace route, no match found [ 1479.490592][T23839] (syz.3.5650,23839,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1479.500671][T23839] (syz.3.5650,23839,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1479.590492][T23838] IPv6: Can't replace route, no match found [ 1482.098565][T23874] syz.3.5664[23874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1482.098643][T23874] syz.3.5664[23874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1482.270573][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1482.270586][ T28] audit: type=1326 audit(1750135096.325:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23859 comm="syz.0.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5db8e929 code=0x7fc00000 [ 1482.485571][T12635] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1482.673307][T23885] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1482.684095][T12635] usb 4-1: Using ep0 maxpacket: 16 [ 1482.694984][T12635] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.908654][T12635] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1482.972216][T12635] usb 4-1: config 0 has no interface number 0 [ 1483.038007][T12635] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1483.098310][T12635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.160305][T12635] usb 4-1: config 0 descriptor?? [ 1483.210782][T12635] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1483.471075][T12635] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 1483.508483][T12635] usb 4-1: USB disconnect, device number 41 [ 1484.806451][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.812803][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.198727][ T28] audit: type=1326 audit(1750135100.255:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.0.5673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5db8e929 code=0x7fc00000 [ 1488.318076][T23945] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1491.475619][T23977] syz.3.5698[23977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1491.475744][T23977] syz.3.5698[23977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1492.236451][T13152] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1492.465661][T13152] usb 4-1: Using ep0 maxpacket: 16 [ 1492.476745][T13152] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.495510][T13152] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1492.511482][T13152] usb 4-1: config 0 has no interface number 0 [ 1492.517955][T13152] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1492.531720][T13152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.547270][T13152] usb 4-1: config 0 descriptor?? [ 1493.320589][T13152] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1493.340010][T13152] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 1493.707271][T24012] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1494.474247][T20802] usb 4-1: USB disconnect, device number 42 [ 1498.060008][T24060] (syz.2.5727,24060,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1498.068959][T24060] (syz.2.5727,24060,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1499.267518][T24069] binder: BINDER_SET_CONTEXT_MGR already set [ 1499.274055][T24069] binder: 24068:24069 ioctl 4018620d 200000000040 returned -16 [ 1501.877555][T24091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5737'. [ 1503.081836][T24099] binder: BINDER_SET_CONTEXT_MGR already set [ 1503.087997][T24099] binder: 24097:24099 ioctl 4018620d 200000000040 returned -16 [ 1507.450043][T24145] syz.3.5755: attempt to access beyond end of device [ 1507.450043][T24145] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1511.777738][T24185] syz.3.5768: attempt to access beyond end of device [ 1511.777738][T24185] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1513.181147][ T28] audit: type=1326 audit(1750135127.235:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24206 comm="syz.1.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7da78e929 code=0x7fc00000 [ 1513.278127][ T28] audit: type=1326 audit(1750135127.235:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24206 comm="syz.1.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb7da78e929 code=0x7fc00000 [ 1514.127828][ T28] audit: type=1326 audit(1750135127.235:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24206 comm="syz.1.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7da78e929 code=0x7fc00000 [ 1514.396103][T24232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5780'. [ 1514.438533][T24231] syz.3.5781: attempt to access beyond end of device [ 1514.438533][T24231] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1514.473196][T24218] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1516.583781][ T28] audit: type=1326 audit(1750135130.595:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24247 comm="syz.0.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5db8e929 code=0x7fc00000 [ 1516.606147][ C1] vkms_vblank_simulate: vblank timer overrun [ 1517.216018][T24270] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1518.107436][T24280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5795'. [ 1518.267225][T24285] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1518.965213][T24288] binder: BINDER_SET_CONTEXT_MGR already set [ 1518.971322][T24288] binder: 24287:24288 ioctl 4018620d 200000000040 returned -16 [ 1519.218420][ T28] audit: type=1326 audit(1750135133.275:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24283 comm="syz.1.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7da78e929 code=0x7fc00000 [ 1523.781679][T24323] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1533.698559][T24404] syz.3.5833: attempt to access beyond end of device [ 1533.698559][T24404] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1534.855557][ T788] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1535.045578][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 1535.063433][ T788] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1535.085678][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.093890][ T788] usb 2-1: Product: syz [ 1535.103728][ T788] usb 2-1: Manufacturer: syz [ 1535.108729][ T788] usb 2-1: SerialNumber: syz [ 1535.136877][ T788] usb 2-1: config 0 descriptor?? [ 1535.376750][ T788] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1535.447354][T24424] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1537.441339][T24430] (syz.0.5840,24430,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1537.450355][T24430] (syz.0.5840,24430,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1537.767958][ T788] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1537.802284][ T788] usb 2-1: USB disconnect, device number 41 [ 1538.648007][ T28] audit: type=1326 audit(1750135152.705:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24433 comm="syz.2.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1539.925996][T24469] syz.3.5854: attempt to access beyond end of device [ 1539.925996][T24469] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1540.374080][T24477] syz.2.5858[24477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1540.374162][T24477] syz.2.5858[24477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1540.765746][T13152] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1541.279230][ T28] audit: type=1326 audit(1750135155.335:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24476 comm="syz.1.5859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7da78e929 code=0x7fc00000 [ 1541.615712][T13152] usb 3-1: Using ep0 maxpacket: 16 [ 1541.625300][T13152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.636481][T13152] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1541.646107][T13152] usb 3-1: config 0 has no interface number 0 [ 1541.653370][T13152] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1541.663352][T13152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.685214][T13152] usb 3-1: config 0 descriptor?? [ 1541.733713][T13152] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1541.813378][T13152] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 1541.991506][ T788] usb 3-1: USB disconnect, device number 31 [ 1542.035083][T24491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5861'. [ 1543.755534][T24519] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1546.294046][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.312462][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.865567][T20612] Bluetooth: hci0: command 0x0406 tx timeout [ 1549.915532][T23611] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1550.105659][T23611] usb 1-1: Using ep0 maxpacket: 8 [ 1550.197917][T23611] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1550.300619][T23611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.404776][T23611] usb 1-1: Product: syz [ 1550.462052][T23611] usb 1-1: Manufacturer: syz [ 1550.513080][T23611] usb 1-1: SerialNumber: syz [ 1550.637016][T23611] usb 1-1: config 0 descriptor?? [ 1550.912913][T23611] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1551.140055][T24587] syz.3.5891[24587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1551.140154][T24587] syz.3.5891[24587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1552.166372][T20802] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1553.347889][T23611] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1553.356752][T20802] usb 4-1: Using ep0 maxpacket: 16 [ 1553.358948][T23611] usb 1-1: USB disconnect, device number 40 [ 1553.374151][T20802] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.395632][T20802] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1553.404777][T20802] usb 4-1: config 0 has no interface number 0 [ 1553.414746][T20802] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1553.431712][T20802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.442890][T20802] usb 4-1: config 0 descriptor?? [ 1553.633792][T20802] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1553.650053][T20802] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 1554.243997][T20802] usb 4-1: USB disconnect, device number 43 [ 1554.845534][T20802] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1556.042964][T20802] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.285468][T20802] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1556.296669][T20802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.307626][T20802] usb 4-1: config 0 descriptor?? [ 1556.314653][T20802] pwc: Askey VC010 type 2 USB webcam detected. [ 1556.519442][T20802] pwc: send_video_command error -71 [ 1556.524767][T20802] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1556.538778][T20802] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 1556.592181][T20802] usb 4-1: USB disconnect, device number 44 [ 1557.145535][T20802] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1558.817370][T24650] syz.1.5908[24650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1558.817459][T24650] syz.1.5908[24650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1559.595866][T17059] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1560.303112][T17059] usb 2-1: Using ep0 maxpacket: 16 [ 1560.927869][T17059] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.950809][T17059] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1560.960103][T17059] usb 2-1: config 0 has no interface number 0 [ 1560.995652][T17059] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1561.043020][T17059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.115878][T17059] usb 2-1: config 0 descriptor?? [ 1561.160184][T17059] usb 2-1: can't set config #0, error -71 [ 1561.180778][T17059] usb 2-1: USB disconnect, device number 42 [ 1564.407131][T24703] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 1565.994048][T24713] syz.3.5926[24713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1565.994470][T24713] syz.3.5926[24713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1567.161778][T24714] syz.1.5925[24714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1567.355555][T23611] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1567.790442][T24714] syz.1.5925[24714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1568.235774][T17059] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1568.865728][T23611] usb 4-1: Using ep0 maxpacket: 16 [ 1568.889812][T23611] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.915424][T23611] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1568.934843][T23611] usb 4-1: config 0 has no interface number 0 [ 1568.949193][T17059] usb 2-1: Using ep0 maxpacket: 16 [ 1568.961388][T23611] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1569.016694][T23611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.032318][T17059] usb 2-1: device descriptor read/all, error -71 [ 1569.061759][T23611] usb 4-1: config 0 descriptor?? [ 1569.077920][T23611] usb 4-1: can't set config #0, error -71 [ 1569.100242][T23611] usb 4-1: USB disconnect, device number 46 [ 1570.476750][T24742] syz.3.5936: attempt to access beyond end of device [ 1570.476750][T24742] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1571.315282][T17059] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1571.334035][T24749] (syz.2.5932,24749,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1571.357350][T24749] (syz.2.5932,24749,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1571.647510][T17059] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.675487][T17059] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1571.684574][T17059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.707622][T17059] usb 2-1: config 0 descriptor?? [ 1571.727533][T17059] pwc: Askey VC010 type 2 USB webcam detected. [ 1571.817044][T24755] syz.3.5939[24755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1571.817171][T24755] syz.3.5939[24755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1572.133063][T17059] pwc: send_video_command error -71 [ 1572.225719][T20802] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1572.320550][T17059] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1572.411379][T17059] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 1572.496240][T20802] usb 4-1: Using ep0 maxpacket: 16 [ 1572.541909][T17059] usb 2-1: USB disconnect, device number 44 [ 1572.569717][T20802] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.694913][T20802] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1572.788205][T20802] usb 4-1: config 0 has no interface number 0 [ 1572.848272][T20802] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1572.948169][T20802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.087049][T20802] usb 4-1: config 0 descriptor?? [ 1573.121413][T17059] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1573.258443][T20802] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1573.886246][T20802] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 1574.514021][T17059] usb 2-1: device descriptor read/all, error -71 [ 1575.916186][ T788] usb 4-1: USB disconnect, device number 47 [ 1576.561438][T24775] syz.1.5944: attempt to access beyond end of device [ 1576.561438][T24775] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1576.600446][T24781] binder: BINDER_SET_CONTEXT_MGR already set [ 1576.609165][T24781] binder: 24778:24781 ioctl 4018620d 200000000040 returned -16 [ 1577.602632][ T28] audit: type=1326 audit(1750135191.655:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24776 comm="syz.2.5946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d4f8e929 code=0x7fc00000 [ 1582.383758][T24822] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5955'. [ 1584.004665][T24834] syz.2.5957: attempt to access beyond end of device [ 1584.004665][T24834] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1587.797307][T24869] syz.3.5969: attempt to access beyond end of device [ 1587.797307][T24869] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1588.038374][T24875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5970'. [ 1590.184289][T24894] syz.1.5975[24894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1590.184669][T24894] syz.1.5975[24894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1591.585457][T20612] Bluetooth: hci0: command 0x0406 tx timeout [ 1592.075527][ T788] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1592.385525][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 1593.582439][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.761498][ T788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1593.852740][ T788] usb 2-1: config 0 has no interface number 0 [ 1594.057214][ T788] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1594.151222][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.175228][ T788] usb 2-1: config 0 descriptor?? [ 1594.318955][ T788] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1594.338657][ T788] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 1595.244165][T13152] usb 2-1: USB disconnect, device number 47 [ 1595.573793][T24923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5984'. [ 1598.552844][T24961] syz.0.5995[24961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1598.553239][T24961] syz.0.5995[24961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1600.337055][T24963] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1600.435457][T24759] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1601.316817][T24759] usb 1-1: Using ep0 maxpacket: 16 [ 1601.389613][T24759] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.445401][T24759] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1601.473230][T24759] usb 1-1: config 0 has no interface number 0 [ 1601.510210][T24759] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1601.564658][T24759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.598610][T24759] usb 1-1: config 0 descriptor?? [ 1601.605512][T24759] usb 1-1: can't set config #0, error -71 [ 1601.626106][T24759] usb 1-1: USB disconnect, device number 41 [ 1601.775550][T13152] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1602.189467][T13152] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.272861][T13152] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1602.380460][T13152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.546730][T13152] usb 4-1: config 0 descriptor?? [ 1602.811231][T13152] pwc: Askey VC010 type 2 USB webcam detected. [ 1602.835875][T13152] pwc: send_video_command error -71 [ 1602.841161][T13152] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1602.852950][T13152] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 1602.862479][T13152] usb 4-1: USB disconnect, device number 48 [ 1603.190363][T24991] (syz.1.6004,24991,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1603.200509][T24991] (syz.1.6004,24991,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1604.015547][T13152] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1604.912093][T13152] usb 4-1: device descriptor read/all, error -71 [ 1604.970319][T25007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6010'. [ 1605.049459][T25010] syz.3.6011: attempt to access beyond end of device [ 1605.049459][T25010] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1605.498819][T25015] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 1605.512790][T25015] trusted_key: encrypted_key: insufficient parameters specified [ 1607.672704][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1609.061114][T25041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6020'. [ 1610.271194][T25055] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 1610.283896][T25055] trusted_key: encrypted_key: insufficient parameters specified [ 1611.301075][T25063] syz.2.6024: attempt to access beyond end of device [ 1611.301075][T25063] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1612.995467][T24759] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1614.358279][T24759] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1614.381557][T24759] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1614.416516][T24759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1614.444765][T24759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1614.470007][T24759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1614.483522][T24759] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1614.502482][T24759] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1614.514327][T24759] usb 2-1: Product: syz [ 1614.528393][T24759] usb 2-1: Manufacturer: syz [ 1615.043353][T24759] cdc_wdm 2-1:1.0: skipping garbage [ 1615.064601][T24759] cdc_wdm 2-1:1.0: skipping garbage [ 1615.117914][T24759] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1615.134417][T24759] cdc_wdm 2-1:1.0: Unknown control protocol [ 1615.291782][T24759] usb 2-1: USB disconnect, device number 48 [ 1618.603497][T25127] syz.2.6042[25127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1618.603902][T25127] syz.2.6042[25127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1620.525512][T17059] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1621.275453][T17059] usb 3-1: Using ep0 maxpacket: 16 [ 1621.289136][T17059] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.319731][T17059] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1621.352606][T17059] usb 3-1: config 0 has no interface number 0 [ 1621.381580][T17059] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1621.403943][T17059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.451510][T17059] usb 3-1: config 0 descriptor?? [ 1621.480146][T17059] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1621.528989][T17059] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 1621.712027][T17059] usb 3-1: USB disconnect, device number 32 [ 1624.928770][T25165] syz.3.6053: attempt to access beyond end of device [ 1624.928770][T25165] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1625.894363][T25169] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1627.301850][T25195] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1629.316216][T25211] syz.3.6069: attempt to access beyond end of device [ 1629.316216][T25211] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1633.674948][T25250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6079'. [ 1638.378550][T25298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6094'. [ 1642.945648][ T8] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1643.169794][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.290566][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1643.300038][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.310519][ T8] usb 4-1: config 0 descriptor?? [ 1643.319178][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 1643.922668][ T8] pwc: send_video_command error -71 [ 1643.943009][ T8] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1643.953200][ T8] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 1643.981069][ T8] usb 4-1: USB disconnect, device number 51 [ 1644.087628][T25324] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6101'. [ 1645.065567][ T8] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1645.101504][T25334] (syz.0.6104,25334,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1645.110390][T25334] (syz.0.6104,25334,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1645.368987][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.535019][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1645.612529][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.629554][ T8] usb 4-1: config 0 descriptor?? [ 1645.641735][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 1645.709947][ T8] pwc: send_video_command error -71 [ 1645.728564][ T8] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1645.784504][ T8] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 1645.842359][ T8] usb 4-1: USB disconnect, device number 52 [ 1646.314637][T25352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6108'. [ 1651.361799][T25407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6124'. [ 1652.207433][T25415] syz.3.6126[25415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1652.207825][T25415] syz.3.6126[25415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1654.035460][ T788] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1654.327551][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 1654.361978][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.394657][ T788] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1654.411228][ T788] usb 4-1: config 0 has no interface number 0 [ 1654.765004][ T788] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1654.774605][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.800140][ T788] usb 4-1: config 0 descriptor?? [ 1656.539647][ T788] usb 4-1: can't set config #0, error -71 [ 1656.585792][ T788] usb 4-1: USB disconnect, device number 53 [ 1657.825891][ T788] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1658.028037][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.062080][ T788] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1658.089101][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.101237][ T788] usb 4-1: config 0 descriptor?? [ 1658.301465][ T788] pwc: Askey VC010 type 2 USB webcam detected. [ 1658.991694][T25454] syz.1.6137[25454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1658.992112][T25454] syz.1.6137[25454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1659.011438][ T788] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1659.387984][T23611] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1659.656675][T23611] usb 2-1: Using ep0 maxpacket: 16 [ 1659.732495][T23611] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.853389][T23611] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1659.972840][T23611] usb 2-1: config 0 has no interface number 0 [ 1660.056435][T23611] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1660.180523][T23611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.350651][T23611] usb 2-1: config 0 descriptor?? [ 1660.517477][T23611] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1660.963753][T23611] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 1661.291923][T25457] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1663.161837][ T788] pwc: recv_control_msg error -71 req 02 val 2700 [ 1663.171787][ T788] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1663.182463][ T788] pwc: recv_control_msg error -71 req 04 val 1000 [ 1663.195433][ T788] pwc: recv_control_msg error -71 req 04 val 1300 [ 1663.219168][ T788] pwc: recv_control_msg error -71 req 04 val 1400 [ 1663.235971][ T788] pwc: recv_control_msg error -71 req 02 val 2000 [ 1663.247756][ T788] pwc: recv_control_msg error -71 req 02 val 2100 [ 1663.265909][ T788] pwc: recv_control_msg error -71 req 04 val 1500 [ 1663.271537][T18204] usb 2-1: USB disconnect, device number 49 [ 1663.275849][ T788] pwc: recv_control_msg error -71 req 02 val 2500 [ 1663.285517][ T788] pwc: recv_control_msg error -71 req 02 val 2400 [ 1663.299059][ T788] pwc: recv_control_msg error -71 req 02 val 2600 [ 1663.315462][ T788] pwc: recv_control_msg error -71 req 02 val 2900 [ 1663.325870][ T788] pwc: recv_control_msg error -71 req 02 val 2800 [ 1663.339441][ T788] pwc: recv_control_msg error -71 req 04 val 1100 [ 1663.355885][ T788] pwc: recv_control_msg error -71 req 04 val 1200 [ 1663.376400][ T788] pwc: Registered as video103. [ 1663.405188][ T788] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 1663.477880][ T788] usb 4-1: USB disconnect, device number 54 [ 1665.481715][T25490] (syz.2.6145,25490,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1665.490841][T25490] (syz.2.6145,25490,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1666.425501][T17059] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1666.627576][T17059] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.684342][T17059] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1666.714347][T17059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.795829][T17059] usb 1-1: config 0 descriptor?? [ 1666.818413][T17059] pwc: Askey VC010 type 2 USB webcam detected. [ 1667.406033][T17059] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1667.624124][T17059] pwc: recv_control_msg error -71 req 02 val 2700 [ 1667.863006][T17059] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1667.951954][T17059] pwc: recv_control_msg error -71 req 04 val 1000 [ 1668.016821][T17059] pwc: recv_control_msg error -71 req 04 val 1300 [ 1668.091290][T17059] pwc: recv_control_msg error -71 req 04 val 1400 [ 1668.159608][T17059] pwc: recv_control_msg error -71 req 02 val 2000 [ 1668.189688][T17059] pwc: recv_control_msg error -71 req 02 val 2100 [ 1668.239312][T17059] pwc: recv_control_msg error -71 req 04 val 1500 [ 1669.114298][T17059] pwc: recv_control_msg error -71 req 02 val 2500 [ 1669.172084][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.205972][T17059] pwc: recv_control_msg error -71 req 02 val 2400 [ 1669.234427][T17059] pwc: recv_control_msg error -71 req 02 val 2600 [ 1669.281427][T17059] pwc: recv_control_msg error -71 req 02 val 2900 [ 1669.326684][T17059] pwc: recv_control_msg error -71 req 02 val 2800 [ 1669.359901][T17059] pwc: recv_control_msg error -71 req 04 val 1100 [ 1669.380204][T17059] pwc: recv_control_msg error -71 req 04 val 1200 [ 1669.418708][T17059] pwc: Registered as video103. [ 1669.424942][T17059] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 1669.490793][T17059] usb 1-1: USB disconnect, device number 42 [ 1672.296678][T24759] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1672.756913][T24759] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1673.506102][T20612] Bluetooth: hci0: command 0x0406 tx timeout [ 1673.522454][T24759] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1673.532561][T24759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.552848][T24759] usb 3-1: config 0 descriptor?? [ 1673.561279][T24759] pwc: Askey VC010 type 2 USB webcam detected. [ 1674.678506][T24759] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1674.685722][T24759] pwc: recv_control_msg error -71 req 02 val 2700 [ 1674.705459][T24759] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1674.715150][T24759] pwc: recv_control_msg error -71 req 04 val 1000 [ 1674.775569][T24759] pwc: recv_control_msg error -71 req 04 val 1300 [ 1674.834574][T24759] pwc: recv_control_msg error -71 req 04 val 1400 [ 1674.965244][T24759] pwc: recv_control_msg error -71 req 02 val 2000 [ 1675.032893][T24759] pwc: recv_control_msg error -71 req 02 val 2100 [ 1675.047779][T24759] pwc: recv_control_msg error -71 req 04 val 1500 [ 1675.069540][T24759] pwc: recv_control_msg error -71 req 02 val 2500 [ 1675.325583][T24759] pwc: recv_control_msg error -71 req 02 val 2400 [ 1675.334059][T24759] pwc: recv_control_msg error -71 req 02 val 2600 [ 1675.345446][T18204] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1675.361415][T24759] pwc: recv_control_msg error -71 req 02 val 2900 [ 1675.380614][T24759] pwc: recv_control_msg error -71 req 02 val 2800 [ 1675.406041][T24759] pwc: recv_control_msg error -71 req 04 val 1100 [ 1675.423658][T24759] pwc: recv_control_msg error -71 req 04 val 1200 [ 1675.442697][T24759] pwc: Registered as video103. [ 1675.484779][T24759] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 1675.500697][T24759] usb 3-1: USB disconnect, device number 33 [ 1675.635408][T18204] usb 1-1: Using ep0 maxpacket: 8 [ 1676.775219][T18204] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1676.827636][T18204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.836023][T18204] usb 1-1: Product: syz [ 1676.836041][T18204] usb 1-1: Manufacturer: syz [ 1676.836054][T18204] usb 1-1: SerialNumber: syz [ 1676.849622][T18204] usb 1-1: config 0 descriptor?? [ 1676.939320][T25579] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6170'. [ 1677.119286][T18204] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1679.418157][T18204] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -110 [ 1680.073850][ T788] usb 1-1: USB disconnect, device number 43 [ 1683.305399][T18204] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1685.535658][T18204] usb 2-1: Using ep0 maxpacket: 8 [ 1685.549628][T18204] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1686.192547][T18204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.212133][T18204] usb 2-1: Product: syz [ 1686.221165][T18204] usb 2-1: Manufacturer: syz [ 1686.237142][T18204] usb 2-1: SerialNumber: syz [ 1686.282294][T18204] usb 2-1: config 0 descriptor?? [ 1686.288114][T18204] usb 2-1: can't set config #0, error -71 [ 1686.298200][T18204] usb 2-1: USB disconnect, device number 50 [ 1686.516769][T25643] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6187'. [ 1690.817055][T18204] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1691.065666][T25681] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6199'. [ 1691.184266][T18204] usb 4-1: Using ep0 maxpacket: 8 [ 1691.194262][T18204] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1691.204229][T18204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.292520][T18204] usb 4-1: Product: syz [ 1691.386506][T18204] usb 4-1: Manufacturer: syz [ 1691.446274][T18204] usb 4-1: SerialNumber: syz [ 1691.797795][T18204] usb 4-1: config 0 descriptor?? [ 1692.027834][T18204] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1693.877712][T25705] syz.0.6203: attempt to access beyond end of device [ 1693.877712][T25705] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1694.114502][T18204] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1694.130409][T18204] usb 4-1: USB disconnect, device number 55 [ 1696.829022][T25728] process 'syz.2.6210' launched './file0' with NULL argv: empty string added [ 1700.583058][T25778] syz.0.6229: attempt to access beyond end of device [ 1700.583058][T25778] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1700.957746][T25782] syz.3.6230[25782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1700.958078][T25782] syz.3.6230[25782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1702.765409][T18204] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1703.125605][T18204] usb 4-1: Using ep0 maxpacket: 16 [ 1703.143384][T18204] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.166453][T18204] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1703.185379][T18204] usb 4-1: config 0 has no interface number 0 [ 1703.203128][T18204] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1703.215444][T18204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.250096][T18204] usb 4-1: config 0 descriptor?? [ 1703.269701][T18204] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1703.314285][T18204] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 1703.365418][ T788] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1703.496111][ T8] usb 4-1: USB disconnect, device number 56 [ 1703.585485][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 1703.607557][ T788] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1703.625517][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.633728][ T788] usb 2-1: Product: syz [ 1703.638193][ T788] usb 2-1: Manufacturer: syz [ 1703.642816][ T788] usb 2-1: SerialNumber: syz [ 1703.653518][ T788] usb 2-1: config 0 descriptor?? [ 1703.866412][ T788] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1705.781678][ T788] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1705.799066][ T788] usb 2-1: USB disconnect, device number 51 [ 1706.415197][T25827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6246'. [ 1708.465481][T18204] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1708.625464][T18204] usb 1-1: device descriptor read/64, error -71 [ 1708.905968][T18204] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1709.878545][T18204] usb 1-1: device descriptor read/64, error -71 [ 1710.056696][T18204] usb usb1-port1: attempt power cycle [ 1710.545632][T18204] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1710.600595][T18204] usb 1-1: device descriptor read/8, error -71 [ 1710.945610][T18204] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1710.986191][T18204] usb 1-1: device descriptor read/8, error -71 [ 1711.161910][T18204] usb usb1-port1: unable to enumerate USB device [ 1716.845588][ T8] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1716.872232][T25935] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6277'. [ 1716.995726][ T8] usb 4-1: device descriptor read/64, error -71 [ 1717.715454][ T8] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1717.995906][ T8] usb 4-1: device descriptor read/64, error -71 [ 1718.581092][ T8] usb usb4-port1: attempt power cycle [ 1719.135533][ T8] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1719.178937][ T8] usb 4-1: device descriptor read/8, error -71 [ 1719.224972][T25958] (syz.1.6283,25958,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1719.233788][T25958] (syz.1.6283,25958,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1719.449803][ T8] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1719.489506][ T8] usb 4-1: device descriptor read/8, error -71 [ 1719.615924][ T8] usb usb4-port1: unable to enumerate USB device [ 1721.545679][ T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1722.459739][ T8] usb 3-1: device descriptor read/64, error -71 [ 1722.825397][ T8] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1722.986608][ T8] usb 3-1: device descriptor read/64, error -71 [ 1723.106888][ T8] usb usb3-port1: attempt power cycle [ 1723.515465][ T8] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1723.566480][ T8] usb 3-1: device descriptor read/8, error -71 [ 1723.865539][ T8] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1723.920476][ T8] usb 3-1: device descriptor read/8, error -71 [ 1724.050724][T26014] (syz.1.6299,26014,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1724.059578][T26014] (syz.1.6299,26014,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1724.491852][ T8] usb usb3-port1: unable to enumerate USB device [ 1726.905495][T20099] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1727.115456][T20099] usb 1-1: device descriptor read/64, error -71 [ 1727.527519][T20099] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1728.215399][T20099] usb 1-1: device descriptor read/64, error -71 [ 1728.355524][T20099] usb usb1-port1: attempt power cycle [ 1728.795507][T20099] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1728.840507][T20099] usb 1-1: device descriptor read/8, error -71 [ 1729.066652][T26069] (syz.1.6317,26069,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1729.075611][T26069] (syz.1.6317,26069,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1729.285455][T20099] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1729.297178][T17059] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1729.316192][T20099] usb 1-1: device descriptor read/8, error -71 [ 1729.380048][T26072] syz.3.6318: attempt to access beyond end of device [ 1729.380048][T26072] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1729.435880][T20099] usb usb1-port1: unable to enumerate USB device [ 1729.531373][T17059] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1729.563722][T17059] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1729.585236][T17059] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1729.628385][T17059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.689378][T26067] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1729.709663][T17059] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1730.561488][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1732.976350][T17059] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1733.005095][T24759] usb 3-1: USB disconnect, device number 38 [ 1733.175613][T17059] usb 4-1: device descriptor read/64, error -71 [ 1733.221485][T26113] syz.2.6330[26113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1733.221873][T26113] syz.2.6330[26113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1733.756476][T17059] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1733.935598][T24759] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1734.319526][T17059] usb 4-1: device descriptor read/64, error -71 [ 1734.385970][T24759] usb 3-1: Using ep0 maxpacket: 16 [ 1734.789058][T24759] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.824632][T17059] usb usb4-port1: attempt power cycle [ 1734.921454][T24759] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1735.118953][T24759] usb 3-1: config 0 has no interface number 0 [ 1735.405724][T17059] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1735.441076][T24759] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1735.455585][T24759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.466292][T24759] usb 3-1: config 0 descriptor?? [ 1735.475146][T24759] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1735.485418][T17059] usb 4-1: device descriptor read/8, error -71 [ 1735.520630][T24759] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 1735.780840][T23611] usb 3-1: USB disconnect, device number 39 [ 1735.786154][T17059] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1736.005451][T17059] usb 4-1: device not accepting address 64, error -71 [ 1736.012535][T17059] usb usb4-port1: unable to enumerate USB device [ 1736.513662][T26137] loop6: detected capacity change from 0 to 524287999 [ 1736.610837][ C1] blk_print_req_error: 7 callbacks suppressed [ 1736.610855][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1736.626250][ C1] buffer_io_error: 7 callbacks suppressed [ 1736.626264][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1736.642031][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1736.651350][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1736.697806][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1736.707178][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1736.835788][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1736.845049][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1736.856938][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1736.866188][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1736.894786][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1736.904154][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1736.936153][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1736.945457][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1737.124181][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1737.133414][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1737.208032][T26137] ldm_validate_partition_table(): Disk read failed. [ 1737.266147][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1737.275463][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1737.284896][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1737.294199][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1737.341825][T26137] Dev loop6: unable to read RDB block 0 [ 1737.385601][T26137] loop6: unable to read partition table [ 1737.397915][T26137] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1737.776120][T23768] Bluetooth: hci0: command 0x0406 tx timeout [ 1737.821441][T26158] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6346'. [ 1738.014019][T26164] (syz.0.6345,26164,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1738.015388][T23611] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1738.023024][T26164] (syz.0.6345,26164,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1738.185522][T23611] usb 4-1: device descriptor read/64, error -71 [ 1738.465555][T23611] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1738.646465][T23611] usb 4-1: device descriptor read/64, error -71 [ 1738.889958][T26171] syz.2.6348[26171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1738.890609][T26171] syz.2.6348[26171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1738.905656][T23611] usb usb4-port1: attempt power cycle [ 1739.335508][T20802] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1739.585717][T20802] usb 3-1: Using ep0 maxpacket: 16 [ 1739.661429][T20802] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.758619][T20802] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1739.858775][T20802] usb 3-1: config 0 has no interface number 0 [ 1739.922150][T20802] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1740.017608][T20802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.144031][T20802] usb 3-1: config 0 descriptor?? [ 1740.299619][T20802] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1740.712866][T20802] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 1741.882702][T20802] usb 3-1: USB disconnect, device number 40 [ 1742.318891][T26194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6355'. [ 1743.014008][T23611] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1743.640602][T26212] syz.0.6361[26212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1743.640680][T26212] syz.0.6361[26212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1743.652847][T23611] usb 4-1: no configurations [ 1743.681967][T23611] usb 4-1: can't read configurations, error -22 [ 1744.006779][T23611] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1744.029039][T26217] (syz.1.6362,26217,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1744.037996][T26217] (syz.1.6362,26217,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1744.066623][T23611] usb 4-1: no configurations [ 1744.071368][T23611] usb 4-1: can't read configurations, error -22 [ 1744.085598][T23611] usb usb4-port1: unable to enumerate USB device [ 1744.195516][T12635] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1744.405366][T12635] usb 1-1: Using ep0 maxpacket: 16 [ 1744.421138][T12635] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.437995][T12635] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1744.463377][T12635] usb 1-1: config 0 has no interface number 0 [ 1744.480884][T12635] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1744.495533][T12635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.507608][T12635] usb 1-1: config 0 descriptor?? [ 1744.517668][T12635] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1744.539723][T12635] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 1744.729286][T12635] usb 1-1: USB disconnect, device number 52 [ 1744.745076][T26223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6365'. [ 1745.700600][T26241] warning: `syz.0.6370' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1746.781802][T26254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6374'. [ 1749.285394][T20099] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1749.513327][T20099] usb 1-1: no configurations [ 1749.518132][T20099] usb 1-1: can't read configurations, error -22 [ 1749.706619][T20099] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1749.956290][T20099] usb 1-1: no configurations [ 1749.961038][T20099] usb 1-1: can't read configurations, error -22 [ 1749.975792][T20099] usb usb1-port1: attempt power cycle [ 1750.052493][T26290] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1750.406270][T20099] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1750.482179][T20099] usb 1-1: no configurations [ 1750.497851][T20099] usb 1-1: can't read configurations, error -22 [ 1750.956336][T20099] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1751.006067][T20099] usb 1-1: no configurations [ 1751.010710][T20099] usb 1-1: can't read configurations, error -22 [ 1751.017541][T20099] usb usb1-port1: unable to enumerate USB device [ 1753.126130][T26326] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1754.985529][T20099] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1755.005364][T12635] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1755.188092][T20099] usb 2-1: no configurations [ 1755.192760][T20099] usb 2-1: can't read configurations, error -22 [ 1755.195479][T12635] usb 4-1: Using ep0 maxpacket: 32 [ 1755.206116][T12635] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1755.218672][T12635] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1755.228122][T12635] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1755.236569][T12635] usb 4-1: Product: syz [ 1755.240780][T12635] usb 4-1: Manufacturer: syz [ 1755.245675][T12635] usb 4-1: SerialNumber: syz [ 1755.252562][T12635] usb 4-1: config 0 descriptor?? [ 1755.260147][T26340] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1755.269828][T12635] hub 4-1:0.0: bad descriptor, ignoring hub [ 1755.276929][T12635] hub: probe of 4-1:0.0 failed with error -5 [ 1755.345506][T20099] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1755.526278][T20099] usb 2-1: no configurations [ 1755.530959][T20099] usb 2-1: can't read configurations, error -22 [ 1755.537964][T20099] usb usb2-port1: attempt power cycle [ 1755.796774][T26175] usb 4-1: USB disconnect, device number 69 [ 1755.955415][T20099] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1755.986954][T20099] usb 2-1: no configurations [ 1755.991646][T20099] usb 2-1: can't read configurations, error -22 [ 1756.146461][T20099] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1756.186875][T20099] usb 2-1: no configurations [ 1756.191771][T20099] usb 2-1: can't read configurations, error -22 [ 1756.198899][T20099] usb usb2-port1: unable to enumerate USB device [ 1759.750459][T12635] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1759.983841][T12635] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.215515][T12635] usb 3-1: config 0 has no interfaces? [ 1760.221146][T12635] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1760.257672][T12635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.371737][T26398] (syz.3.6420,26398,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1760.380858][T26398] (syz.3.6420,26398,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1760.494058][T12635] usb 3-1: config 0 descriptor?? [ 1760.853572][T26172] usb 3-1: USB disconnect, device number 41 [ 1762.936900][T26434] (syz.2.6431,26434,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1762.946124][T26434] (syz.2.6431,26434,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1765.153803][T26450] syz.3.6435[26450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1765.153884][T26450] syz.3.6435[26450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1765.488019][T26172] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1765.845549][T26172] usb 4-1: Using ep0 maxpacket: 16 [ 1765.858316][T26172] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.878279][T26172] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1765.890163][T26172] usb 4-1: config 0 has no interface number 0 [ 1765.909977][T26172] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1765.982748][T26172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.024351][T26172] usb 4-1: config 0 descriptor?? [ 1766.036929][T26172] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1766.170218][T26172] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 1766.975574][T26172] usb 4-1: USB disconnect, device number 70 [ 1769.815546][T12635] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1769.860816][T26503] syz.1.6453[26503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1769.860898][T26503] syz.1.6453[26503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1770.074969][T12635] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1770.259235][T12635] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1770.268983][T12635] usb 3-1: can't read configurations, error -71 [ 1770.948622][T18204] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1771.135348][T18204] usb 2-1: Using ep0 maxpacket: 16 [ 1771.142825][T18204] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.158070][T18204] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1771.168801][T18204] usb 2-1: config 0 has no interface number 0 [ 1771.183273][T18204] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1771.194781][T18204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.210125][T18204] usb 2-1: config 0 descriptor?? [ 1772.128580][T18204] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1772.261704][T18204] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 1772.311778][T18204] usb 2-1: USB disconnect, device number 56 [ 1773.738598][T26545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6463'. [ 1774.785374][T20099] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1775.750182][T26566] syz.3.6469[26566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1775.750687][T26566] syz.3.6469[26566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1775.799450][T20099] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1775.882278][T20099] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1775.918066][T20099] usb 3-1: can't read configurations, error -71 [ 1776.145487][T13152] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1777.087081][T13152] usb 4-1: Using ep0 maxpacket: 16 [ 1777.386772][T13152] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.397353][T13152] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1777.406968][T13152] usb 4-1: config 0 has no interface number 0 [ 1777.425167][T13152] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1777.435372][T13152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.449359][T13152] usb 4-1: config 0 descriptor?? [ 1777.461379][T13152] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1777.491075][T13152] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 1777.681770][T26175] usb 4-1: USB disconnect, device number 71 [ 1778.205881][T26175] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1778.407906][T26175] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.421991][T26175] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1778.432367][T26175] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1778.449398][T26175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.475398][T26175] usb 2-1: config 0 descriptor?? [ 1778.687006][T26175] usb 2-1: USB disconnect, device number 57 [ 1778.700634][T26603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6482'. [ 1780.043181][T26618] (syz.3.6485,26618,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1780.052015][T26618] (syz.3.6485,26618,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1780.477717][T26625] syz.1.6489[26625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1780.477795][T26625] syz.1.6489[26625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1780.766061][T26175] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1780.975451][T26175] usb 2-1: Using ep0 maxpacket: 16 [ 1780.991533][T26175] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.025016][T26175] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1781.055475][T26175] usb 2-1: config 0 has no interface number 0 [ 1781.065204][T26175] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1781.075359][T26175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.087918][T26175] usb 2-1: config 0 descriptor?? [ 1781.101216][T26175] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1781.130092][T26175] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 1781.321033][T26175] usb 2-1: USB disconnect, device number 58 [ 1781.690103][T26638] QAT: Stopping all acceleration devices. [ 1782.651834][T26175] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1782.852263][T26175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1782.880619][T26175] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 1782.905607][T26175] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1782.923456][T26175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.943791][T26175] usb 4-1: Product: syz [ 1782.952038][T26175] usb 4-1: Manufacturer: syz [ 1782.959693][T26175] usb 4-1: SerialNumber: syz [ 1782.979328][T26175] usb 4-1: config 0 descriptor?? [ 1783.011432][T26638] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1783.049134][T26638] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1783.097220][T26175] usb 4-1: ucan: probing device on interface #0 [ 1783.141454][T26175] usb 4-1: ucan: invalid EP count (1) [ 1783.151196][T26175] usb 4-1: ucan: probe failed; try to update the device firmware [ 1783.669469][T26667] syz.2.6504[26667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1783.669797][T26667] syz.2.6504[26667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1785.458111][T12635] usb 4-1: USB disconnect, device number 72 [ 1785.625463][T23611] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1785.845429][T23611] usb 3-1: Using ep0 maxpacket: 16 [ 1785.861947][T23611] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1785.895010][T23611] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1785.919647][T23611] usb 3-1: config 0 has no interface number 0 [ 1785.938025][T23611] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1785.955836][T23611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.981180][T23611] usb 3-1: config 0 descriptor?? [ 1786.009718][T23611] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1786.064618][T23611] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 1786.408756][T26677] blktrace: Concurrent blktraces are not allowed on loop0 [ 1787.012012][T23611] usb 3-1: USB disconnect, device number 46 [ 1787.826516][T26682] blktrace: Concurrent blktraces are not allowed on loop0 [ 1788.437595][T20802] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1788.729642][T20802] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.798654][T20802] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1788.811174][T20802] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1788.820443][T20802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.837647][T20802] usb 4-1: config 0 descriptor?? [ 1789.389574][T20802] usb 4-1: USB disconnect, device number 73 [ 1791.991234][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1793.871678][T26761] (syz.1.6534,26761,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1793.880571][T26761] (syz.1.6534,26761,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1796.811387][T26802] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6548'. [ 1796.848702][T26802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6548'. [ 1797.841611][T26806] (syz.3.6549,26806,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1797.850377][T26806] (syz.3.6549,26806,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1800.385492][T23611] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1800.645420][T23611] usb 4-1: Using ep0 maxpacket: 8 [ 1800.830945][T23611] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1800.842542][T23611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.002220][T23611] usb 4-1: Product: syz [ 1801.006577][T23611] usb 4-1: Manufacturer: syz [ 1801.011317][T23611] usb 4-1: SerialNumber: syz [ 1801.023494][T23611] usb 4-1: config 0 descriptor?? [ 1801.717046][T23611] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1802.062975][T26856] blktrace: Concurrent blktraces are not allowed on loop0 [ 1802.700067][T20802] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1802.935478][T23611] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1803.687530][T20802] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.701237][T20802] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1803.713111][T20802] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1803.733504][T20802] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1803.743539][T20802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1803.751865][T20802] usb 3-1: Product: syz [ 1803.757134][T20802] usb 3-1: Manufacturer: syz [ 1803.761797][T20802] usb 3-1: SerialNumber: syz [ 1803.773439][T20802] usb 3-1: config 0 descriptor?? [ 1803.789880][T20802] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 1803.800415][T20802] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 1803.808264][T20802] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1803.984506][T20802] usb 4-1: USB disconnect, device number 74 [ 1804.026241][T12635] usb 3-1: USB disconnect, device number 47 [ 1804.137337][T26868] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1807.645898][T26904] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1808.035345][T18204] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1808.043227][T23611] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1808.606476][T23611] usb 4-1: Using ep0 maxpacket: 32 [ 1808.623077][T18204] usb 1-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 1808.634473][T18204] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1808.639927][T26915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6587'. [ 1808.645005][T23611] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1808.659995][T26915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6587'. [ 1808.665743][T18204] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1808.673580][T26915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6587'. [ 1808.691219][T18204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1808.703072][T23611] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1808.714628][T23611] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1808.723101][T18204] usb 1-1: SerialNumber: syz [ 1808.732019][T23611] usb 4-1: Product: syz [ 1808.737646][T18204] usb 1-1: config 0 descriptor?? [ 1808.742998][T23611] usb 4-1: Manufacturer: syz [ 1808.749254][T23611] usb 4-1: SerialNumber: syz [ 1808.760773][T23611] usb 4-1: config 0 descriptor?? [ 1808.767395][T26900] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1808.776583][T23611] hub 4-1:0.0: bad descriptor, ignoring hub [ 1808.782690][T23611] hub: probe of 4-1:0.0 failed with error -5 [ 1809.100192][T26921] (syz.2.6589,26921,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1809.109150][T26921] (syz.2.6589,26921,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1809.618990][T12635] usb 4-1: USB disconnect, device number 75 [ 1809.949523][T26908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1809.967128][T26908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1809.999263][T18204] usb 1-1: 0:2 : does not exist [ 1810.010202][T18204] usb 1-1: unit 203 not found! [ 1810.030201][T18204] usb 1-1: USB disconnect, device number 57 [ 1810.864916][T26938] syz.1.6595[26938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1810.864993][T26938] syz.1.6595[26938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1810.910169][T26940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6596'. [ 1810.935984][T26940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6596'. [ 1810.965410][T26940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6596'. [ 1811.012756][T26943] syz.3.6597[26943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1811.012837][T26943] syz.3.6597[26943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1811.155356][T12635] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1811.405362][T12635] usb 2-1: Using ep0 maxpacket: 16 [ 1811.414446][T12635] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.424973][T12635] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1811.442339][T12635] usb 2-1: config 0 has no interface number 0 [ 1811.448929][T12635] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1811.462768][T26172] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1811.470618][T12635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.488381][T12635] usb 2-1: config 0 descriptor?? [ 1811.501824][T12635] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1811.529952][T12635] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 1811.665586][T26172] usb 4-1: Using ep0 maxpacket: 16 [ 1811.690641][T26172] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.713824][T18204] usb 2-1: USB disconnect, device number 59 [ 1811.720197][T26172] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1811.733290][T26172] usb 4-1: config 0 has no interface number 0 [ 1811.739760][T26172] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1811.749157][T26172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.759761][T26172] usb 4-1: config 0 descriptor?? [ 1811.771859][T26172] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1811.817372][T26172] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 1812.020737][T26172] usb 4-1: USB disconnect, device number 76 [ 1814.321912][T26965] QAT: Stopping all acceleration devices. [ 1814.610459][T26977] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6609'. [ 1815.814540][T26990] blktrace: Concurrent blktraces are not allowed on loop4 [ 1816.827272][T26998] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1816.921365][T27000] syz.3.6615[27000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1816.921450][T27000] syz.3.6615[27000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1817.465457][T18204] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1817.695448][T18204] usb 4-1: Using ep0 maxpacket: 16 [ 1817.712992][T18204] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.728789][T18204] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1817.739038][T18204] usb 4-1: config 0 has no interface number 0 [ 1817.749580][T18204] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1817.760458][T18204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.787801][T18204] usb 4-1: config 0 descriptor?? [ 1817.811004][T18204] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1817.856776][T18204] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 1818.089084][T12635] usb 4-1: USB disconnect, device number 77 [ 1818.843838][T27024] blktrace: Concurrent blktraces are not allowed on loop0 [ 1820.501390][T27043] blktrace: Concurrent blktraces are not allowed on loop6 [ 1821.805422][T20802] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1821.866978][T27052] fuse: Bad value for 'fd' [ 1821.985518][T20802] usb 4-1: Using ep0 maxpacket: 32 [ 1821.992577][T20802] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1822.007651][T20802] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1822.019027][T20802] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1822.045354][T20802] usb 4-1: Product: syz [ 1822.049564][T20802] usb 4-1: Manufacturer: syz [ 1822.054178][T20802] usb 4-1: SerialNumber: syz [ 1822.079451][T20802] usb 4-1: config 0 descriptor?? [ 1822.085213][T27049] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1822.127150][T20802] hub 4-1:0.0: bad descriptor, ignoring hub [ 1822.133117][T20802] hub: probe of 4-1:0.0 failed with error -5 [ 1822.546452][T18204] usb 4-1: USB disconnect, device number 78 [ 1823.392862][T27071] syz.2.6638[27071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1823.392948][T27071] syz.2.6638[27071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1823.905562][T18204] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1824.215552][T18204] usb 3-1: Using ep0 maxpacket: 16 [ 1824.276131][T18204] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.286895][T18204] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1824.295980][T18204] usb 3-1: config 0 has no interface number 0 [ 1824.302483][T18204] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1824.313179][T18204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.449681][T18204] usb 3-1: config 0 descriptor?? [ 1824.854073][T18204] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1824.876627][T18204] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 1825.163215][T26172] usb 3-1: USB disconnect, device number 48 [ 1825.326328][T20802] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1825.943848][T20802] usb 1-1: Using ep0 maxpacket: 32 [ 1825.960150][T27096] syz.3.6648[27096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1825.960227][T27096] syz.3.6648[27096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1825.983046][T20802] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1826.008088][T20802] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1826.018784][T20802] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1826.027075][T20802] usb 1-1: Product: syz [ 1826.031247][T20802] usb 1-1: Manufacturer: syz [ 1826.036025][T20802] usb 1-1: SerialNumber: syz [ 1826.042040][T20802] usb 1-1: config 0 descriptor?? [ 1826.049966][T27090] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1826.058530][T20802] hub 1-1:0.0: bad descriptor, ignoring hub [ 1826.064467][T20802] hub: probe of 1-1:0.0 failed with error -5 [ 1826.245381][T12635] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1826.445362][T12635] usb 4-1: Using ep0 maxpacket: 16 [ 1826.512529][T12635] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.531284][T12635] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1826.543068][T12635] usb 4-1: config 0 has no interface number 0 [ 1826.552316][T12635] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1826.616471][T13152] usb 1-1: USB disconnect, device number 58 [ 1827.288028][T12635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.305696][T12635] usb 4-1: config 0 descriptor?? [ 1827.315017][T12635] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1827.355852][T12635] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 1827.429792][T27109] QAT: Stopping all acceleration devices. [ 1827.532235][T12635] usb 4-1: USB disconnect, device number 79 [ 1827.676858][T13152] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1827.725884][T18204] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1827.865357][T13152] usb 3-1: Using ep0 maxpacket: 32 [ 1827.872146][T13152] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1827.885472][T13152] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1827.894573][T13152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.908571][T13152] usb 3-1: config 0 descriptor?? [ 1827.914157][T27107] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1827.922638][T13152] hub 3-1:0.0: bad descriptor, ignoring hub [ 1827.928828][T13152] hub: probe of 3-1:0.0 failed with error -5 [ 1827.937206][T13152] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1827.948791][T18204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1827.960173][T18204] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 1827.972873][T18204] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1827.983313][T18204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.991924][T18204] usb 1-1: Product: syz [ 1827.996402][T18204] usb 1-1: Manufacturer: syz [ 1828.001036][T18204] usb 1-1: SerialNumber: syz [ 1828.007823][T18204] usb 1-1: config 0 descriptor?? [ 1828.013334][T27109] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1828.020966][T27109] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1828.029226][T18204] usb 1-1: ucan: probing device on interface #0 [ 1828.035543][T18204] usb 1-1: ucan: invalid EP count (1) [ 1828.040934][T18204] usb 1-1: ucan: probe failed; try to update the device firmware [ 1832.254771][T20802] usb 1-1: USB disconnect, device number 59 [ 1832.415690][T12635] usb 3-1: USB disconnect, device number 49 [ 1832.745503][T20802] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1832.945390][T20802] usb 1-1: Using ep0 maxpacket: 32 [ 1833.049177][T20802] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1833.078144][T20802] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1833.093074][T20802] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1833.136948][T20802] usb 1-1: Product: syz [ 1833.141502][T20802] usb 1-1: Manufacturer: syz [ 1833.198997][T20802] usb 1-1: SerialNumber: syz [ 1833.739837][T20802] usb 1-1: config 0 descriptor?? [ 1833.755842][T27149] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1833.838956][T20802] hub 1-1:0.0: bad descriptor, ignoring hub [ 1833.860054][T20802] hub: probe of 1-1:0.0 failed with error -5 [ 1834.455706][T13152] usb 1-1: USB disconnect, device number 60 [ 1834.670557][T27179] QAT: Stopping all acceleration devices. [ 1834.945494][T20802] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1835.031836][T27183] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1835.146901][T20802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1835.220857][T20802] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 1835.236215][T20802] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1835.255536][T20802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.270406][T20802] usb 4-1: Product: syz [ 1835.275009][T20802] usb 4-1: Manufacturer: syz [ 1835.290374][T20802] usb 4-1: SerialNumber: syz [ 1835.324053][T20802] usb 4-1: config 0 descriptor?? [ 1835.337216][T27179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1835.344482][T27179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1835.372890][T20802] usb 4-1: ucan: probing device on interface #0 [ 1835.396821][T20802] usb 4-1: ucan: invalid EP count (1) [ 1835.402258][T20802] usb 4-1: ucan: probe failed; try to update the device firmware [ 1835.683972][T27199] syz.0.6679[27199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1835.684061][T27199] syz.0.6679[27199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1835.837795][T27206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6681'. [ 1835.985520][T23611] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1836.220185][T23611] usb 1-1: Using ep0 maxpacket: 16 [ 1836.231707][T23611] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1836.245625][T23611] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1836.256143][T23611] usb 1-1: config 0 has no interface number 0 [ 1836.262286][T23611] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1836.271825][T23611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.282589][T23611] usb 1-1: config 0 descriptor?? [ 1836.291916][T23611] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1836.310840][T23611] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 1836.502259][T20802] usb 1-1: USB disconnect, device number 61 [ 1838.367927][T23611] usb 4-1: USB disconnect, device number 80 [ 1838.578259][T27229] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6687'. [ 1840.495326][T27253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6695'. [ 1840.929019][T27257] syz.2.6696[27257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1840.929099][T27257] syz.2.6696[27257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1841.225504][T23611] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1841.425753][T23611] usb 3-1: Using ep0 maxpacket: 16 [ 1841.435477][T23611] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.452462][T23611] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1841.462590][T23611] usb 3-1: config 0 has no interface number 0 [ 1841.473972][T23611] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1841.483869][T23611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.494742][T23611] usb 3-1: config 0 descriptor?? [ 1841.523113][T23611] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1841.571462][T12635] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1841.638151][T23611] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 1841.647153][T27278] loop6: detected capacity change from 0 to 524287999 [ 1841.672689][ C0] blk_print_req_error: 7 callbacks suppressed [ 1841.672718][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1841.688252][ C0] buffer_io_error: 7 callbacks suppressed [ 1841.688261][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1841.791977][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1841.801291][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1841.812870][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1841.822146][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1841.835633][T11430] lo_write_bvec: 54 callbacks suppressed [ 1841.836705][T11430] loop: Write error at byte offset 1, length 1024. [ 1841.863292][T11430] loop: Write error at byte offset 521217, length 4096. [ 1841.870400][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1841.870427][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1841.892904][ C0] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 1841.902999][ C0] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 1841.916326][T12635] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.926751][T12635] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1841.938081][T12635] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1841.953949][T12635] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1841.988569][ T27] usb 3-1: USB disconnect, device number 50 [ 1842.008282][T11430] loop: Write error at byte offset 1045505, length 4096. [ 1842.024528][T12635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1842.026152][ C1] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1842.041067][T12635] usb 4-1: Product: syz [ 1842.042762][ C1] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1842.056937][T11430] loop: Write error at byte offset 1569793, length 4096. [ 1842.064416][ C0] I/O error, dev loop6, sector 3066 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 1842.078590][T11430] loop: Write error at byte offset 2094081, length 4096. [ 1842.087917][T12635] usb 4-1: Manufacturer: syz [ 1842.093882][T11430] loop: Write error at byte offset 2618369, length 4096. [ 1842.103773][T12635] usb 4-1: SerialNumber: syz [ 1842.160645][T11430] loop: Write error at byte offset 3142657, length 4096. [ 1842.171788][T27282] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6704'. [ 1842.238063][T12635] usb 4-1: config 0 descriptor?? [ 1842.261937][T11430] loop: Write error at byte offset 3666945, length 4096. [ 1842.359290][T12635] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 1842.367251][T11430] loop: Write error at byte offset 4191233, length 4096. [ 1842.393821][T12635] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 1842.395070][T11430] loop: Write error at byte offset 4715521, length 4096. [ 1842.402679][T12635] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1842.432316][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.569975][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.580766][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.590345][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.599581][T12635] usb 4-1: USB disconnect, device number 81 [ 1842.627289][T27278] ldm_validate_partition_table(): Disk read failed. [ 1842.634046][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.648857][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.657314][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.665829][T27278] Dev loop6: unable to read RDB block 0 [ 1842.672447][T27278] loop6: unable to read partition table [ 1842.679780][T27278] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1843.912317][T27297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6707'. [ 1845.699689][T27320] syz.1.6716[27320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1845.699769][T27320] syz.1.6716[27320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1845.995418][T12635] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1846.206090][T12635] usb 2-1: Using ep0 maxpacket: 16 [ 1846.215808][T12635] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.228515][T12635] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 1846.243170][T12635] usb 2-1: config 0 has no interface number 0 [ 1846.254233][T12635] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 1846.264865][T12635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.279086][T12635] usb 2-1: config 0 descriptor?? [ 1846.292477][T12635] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1846.324756][T12635] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 1846.505519][T12635] usb 2-1: USB disconnect, device number 60 [ 1847.324294][T27331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6719'. [ 1851.457922][T27372] fuse: Bad value for 'fd' [ 1853.446118][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.109476][T27401] binder: 27400:27401 ioctl 4018620d 0 returned -22 [ 1854.117502][T27402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6741'. [ 1856.964056][T27429] binder: 27428:27429 ioctl 4018620d 0 returned -22 [ 1856.994355][T27431] QAT: Stopping all acceleration devices. [ 1857.305352][T26175] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1857.498450][T26175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1857.521821][T26175] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 1857.535706][T26175] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1857.549200][T26175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.560330][T26175] usb 3-1: Product: syz [ 1857.564592][T26175] usb 3-1: Manufacturer: syz [ 1857.574140][T26175] usb 3-1: SerialNumber: syz [ 1857.619255][T26175] usb 3-1: config 0 descriptor?? [ 1857.642969][T27431] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1857.652910][T27431] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1857.895597][T26175] usb 3-1: ucan: probing device on interface #0 [ 1857.904081][T26175] usb 3-1: ucan: invalid EP count (1) [ 1857.910774][T26175] usb 3-1: ucan: probe failed; try to update the device firmware [ 1858.421560][T27454] mmap: syz.3.6762 (27454) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1859.788443][T27475] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6769'. [ 1860.642644][T23611] usb 3-1: USB disconnect, device number 51 [ 1860.806719][T20802] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1860.985535][T20802] usb 4-1: device descriptor read/64, error -71 [ 1861.535787][T20802] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1865.463791][T27520] QAT: Stopping all acceleration devices. [ 1866.145560][T26172] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1866.337194][T26172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1866.835699][T26172] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 1867.025833][T26172] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1867.041873][T26172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.123518][T26172] usb 1-1: Product: syz [ 1867.159502][T26172] usb 1-1: Manufacturer: syz [ 1867.183541][T26172] usb 1-1: SerialNumber: syz [ 1867.202148][T26172] usb 1-1: config 0 descriptor?? [ 1867.220017][T27520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1867.256293][T27520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1867.270537][T26172] usb 1-1: ucan: probing device on interface #0 [ 1867.288973][T26172] usb 1-1: ucan: invalid EP count (1) [ 1867.299161][T26172] usb 1-1: ucan: probe failed; try to update the device firmware [ 1867.521886][T27543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6786'. [ 1867.534170][T27543] bridge_slave_1: left allmulticast mode [ 1867.540636][T27543] bridge_slave_1: left promiscuous mode [ 1867.547525][T27543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.609700][T27543] bridge_slave_0: left allmulticast mode [ 1867.642929][T27543] bridge_slave_0: left promiscuous mode [ 1867.669567][T27543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.525307][T26172] usb 1-1: USB disconnect, device number 62 [ 1871.135430][T13152] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1871.737759][T13152] usb 4-1: device descriptor read/64, error -71 [ 1872.010766][T13152] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1872.195353][T13152] usb 4-1: device descriptor read/64, error -71 [ 1872.215470][T27577] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6802'. [ 1872.385753][T13152] usb usb4-port1: attempt power cycle [ 1872.805392][T13152] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1872.846170][T13152] usb 4-1: device descriptor read/8, error -71 [ 1873.034456][T27584] QAT: Stopping all acceleration devices. [ 1873.125637][T13152] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1873.166203][T13152] usb 4-1: device descriptor read/8, error -71 [ 1873.282064][T27590] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1873.305674][T13152] usb usb4-port1: unable to enumerate USB device [ 1873.315429][T20802] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1873.522281][T20802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1873.562568][T20802] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 1873.588673][T20802] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1873.598312][T20802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.609114][T20802] usb 2-1: Product: syz [ 1873.613441][T20802] usb 2-1: Manufacturer: syz [ 1873.622329][T20802] usb 2-1: SerialNumber: syz [ 1873.804368][T20802] usb 2-1: config 0 descriptor?? [ 1873.857141][T27584] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1873.986425][T27584] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1874.059838][T20802] usb 2-1: ucan: probing device on interface #0 [ 1874.100316][T20802] usb 2-1: ucan: invalid EP count (1) [ 1874.106971][T20802] usb 2-1: ucan: probe failed; try to update the device firmware [ 1874.314630][T27605] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6813'. [ 1874.475352][T26172] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1874.657948][T26172] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1874.667227][T26172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.677679][T26172] usb 3-1: config 0 descriptor?? [ 1874.684695][T26172] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1875.021314][T27612] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1875.033815][T27612] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1875.086045][T26172] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1875.164080][T27617] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6817'. [ 1876.157238][ T788] usb 2-1: USB disconnect, device number 61 [ 1876.208036][T26172] gspca_cpia1: usb_control_msg 02, error -71 [ 1876.229705][T26172] gspca_cpia1: usb_control_msg 05, error -71 [ 1876.237195][T26172] cpia1 3-1:0.0: unexpected systemstate: 00 [ 1876.249348][T26172] usb 3-1: USB disconnect, device number 52 [ 1878.900198][T27634] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 1878.900198][T27634] program syz.0.6822 not setting count and/or reply_len properly [ 1879.280117][T12635] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1879.935386][T12635] usb 4-1: device descriptor read/64, error -71 [ 1880.215867][T12635] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1880.588617][T12635] usb 4-1: device descriptor read/64, error -71 [ 1880.785671][T12635] usb usb4-port1: attempt power cycle [ 1881.867129][T12635] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1881.905585][T12635] usb 4-1: device descriptor read/8, error -71 [ 1914.868421][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.309461][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.747949][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2078.705930][ T5808] kworker/dying (5808) used greatest stack depth: 19352 bytes left [ 2099.190007][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.629157][ T1286] ieee802154 phy0 wpan0: encryption failed: -22