last executing test programs: 19.23267024s ago: executing program 3 (id=6276): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x10001030, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2, 0x103) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18.164535046s ago: executing program 3 (id=6278): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 16.677841616s ago: executing program 3 (id=6282): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="646f74732c646f74732c646f74732c636865636b3d72656c617865642c616c6c6f775f7574696d653d30303030303030303030000000000000000030303030302c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d7374726963742c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c646f74732c646f74732c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c6e6f646f74732c646f74732c666d61736b3d30303030303030303030303030303030303030303030322c6e6f646f74732c646f74732c666c7573682c6e6f646f74732c636865636b3d6e6f726d616c2c0079c7cebee7a0df8765ffc536c4e752679b645307d1bf097e07b8e261bb27d1bb80ee490fc501e4f230ddf1483b11ac5c39a93cfc3ba360037c79a9be063a3bf5015e3d6a8cad0e98ccb29619c51c44ec612fc7ff44fa8cf7759eada764c43ba9d602a958bd209ace3df01c3dae04baa94aedc5515da8160ae0"], 0xfd, 0x1c8, &(0x7f0000002540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/54, 0x36) getdents64(r0, 0xfffffffffffffffe, 0x29) 16.397696808s ago: executing program 3 (id=6283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.813561206s ago: executing program 3 (id=6286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffff4b8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) 15.496251631s ago: executing program 3 (id=6288): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x840) 10.446180338s ago: executing program 0 (id=6305): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 8.727203326s ago: executing program 0 (id=6308): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) io_setup(0xffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0) r3 = gettid() r4 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4}) io_uring_enter(r4, 0x1, 0x2, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 5.603935358s ago: executing program 0 (id=6314): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1600008, &(0x7f00000000c0)={[{@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@force}, {@uid}, {@nls={'nls', 0x3d, 'cp1255'}}, {@nodecompose}, {@barrier}]}, 0x3, 0x632, &(0x7f0000000800)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 5.45727754s ago: executing program 0 (id=6315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x552}}, './file0\x00'}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x501400, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000140)={0x60000008}) 5.33645547s ago: executing program 1 (id=6316): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 5.304036832s ago: executing program 0 (id=6317): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') 4.255726237s ago: executing program 1 (id=6320): socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 3.451409862s ago: executing program 0 (id=6322): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) io_setup(0xffff, 0x0) r3 = gettid() r4 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4}) io_uring_enter(r4, 0x1, 0x2, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 3.275286706s ago: executing program 1 (id=6323): syz_emit_ethernet(0x52, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000000206010800000000000000000000000005000400000000080900020073797a31000000000c004e710800124000000000050005000a0000"], 0x58}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, {0xa, 0x4e24, 0x0, @local, 0x7}, 0xffffffffffffffff, {[0x6, 0x8, 0x1ff, 0x2e, 0x2, 0x7, 0x2, 0x81]}}, 0x5c) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.97658494s ago: executing program 1 (id=6324): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1600008, &(0x7f00000000c0)={[{@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@force}, {@uid}, {@nls={'nls', 0x3d, 'cp1255'}}, {@nodecompose}, {@barrier}]}, 0x3, 0x632, &(0x7f0000000800)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2.85592692s ago: executing program 1 (id=6326): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x400, 0x38, 0xffffffffffffffff, 0x0) 1.680276355s ago: executing program 1 (id=6329): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.562908214s ago: executing program 2 (id=6330): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x42, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}}, 0x24040084) 1.373579899s ago: executing program 2 (id=6331): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x818}, 0x24000041) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000002000000014001a80100005800c000180"], 0x34}}, 0x0) 1.324699473s ago: executing program 2 (id=6332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5b}}, 0x10) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x3}}, 0x20) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) socket$inet(0x2, 0x2, 0x0) 400.225988ms ago: executing program 2 (id=6333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 338.966722ms ago: executing program 32 (id=6288): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x840) 130.75561ms ago: executing program 2 (id=6335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x552}}, './file0\x00'}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x501400, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000140)={0x60000008}) 0s ago: executing program 2 (id=6336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): ial bus timeout: status=0x00 [ 1732.921816][T12797] gspca_stk1135: Sensor write failed [ 1732.944206][T12797] gspca_stk1135: serial bus timeout: status=0x00 [ 1732.966508][T12797] gspca_stk1135: Sensor write failed [ 1732.996119][T12797] stk1135: probe of 2-1:0.73 failed with error -71 [ 1733.070162][T12797] usb 2-1: USB disconnect, device number 7 [ 1733.602545][T24712] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5466'. [ 1733.845062][T24714] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1734.623182][T12797] usb 4-1: USB disconnect, device number 29 [ 1735.039414][T12805] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1735.219555][ T54] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1735.239313][T12805] usb 2-1: Using ep0 maxpacket: 32 [ 1735.252473][T12805] usb 2-1: config 0 has an invalid interface number: 73 but max is 0 [ 1735.269406][T12805] usb 2-1: config 0 has no interface number 0 [ 1735.276301][T12805] usb 2-1: too many endpoints for config 0 interface 73 altsetting 118: 194, using maximum allowed: 30 [ 1735.299405][T12805] usb 2-1: config 0 interface 73 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 1735.313385][T12805] usb 2-1: config 0 interface 73 has no altsetting 0 [ 1735.323654][T12805] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1735.333826][T12805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.342561][T12805] usb 2-1: Product: syz [ 1735.346889][T12805] usb 2-1: Manufacturer: syz [ 1735.351709][T12805] usb 2-1: SerialNumber: syz [ 1735.362378][T12805] usb 2-1: config 0 descriptor?? [ 1735.409545][ T54] usb 4-1: Using ep0 maxpacket: 16 [ 1735.424165][ T54] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1735.437399][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.458609][ T54] usb 4-1: config 0 descriptor?? [ 1735.471492][ T54] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1735.595938][T12805] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1735.609048][T12805] gspca_stk1135: reg_w 0x2 err -71 [ 1735.618476][T12805] gspca_stk1135: serial bus timeout: status=0x00 [ 1735.625438][T12805] gspca_stk1135: Sensor write failed [ 1735.632111][T12805] gspca_stk1135: serial bus timeout: status=0x00 [ 1735.638668][T12805] gspca_stk1135: Sensor write failed [ 1735.645250][T12805] gspca_stk1135: serial bus timeout: status=0x00 [ 1735.652636][T12805] gspca_stk1135: Sensor read failed [ 1735.658264][T12805] gspca_stk1135: serial bus timeout: status=0x00 [ 1735.665131][T12805] gspca_stk1135: Sensor read failed [ 1735.677416][T12805] gspca_stk1135: Detected sensor type unknown (0x0) [ 1735.684907][T12805] gspca_stk1135: serial bus timeout: status=0x00 [ 1735.705421][T12805] gspca_stk1135: Sensor read failed [ 1735.711541][T12805] gspca_stk1135: serial bus timeout: status=0x00 [ 1735.718197][T12805] gspca_stk1135: Sensor read failed [ 1735.724139][T12805] gspca_stk1135: serial bus timeout: status=0x00 [ 1735.731585][T12805] gspca_stk1135: Sensor write failed [ 1735.737156][T12805] gspca_stk1135: serial bus timeout: status=0x00 [ 1735.744250][T12805] gspca_stk1135: Sensor write failed [ 1735.750241][T12805] stk1135: probe of 2-1:0.73 failed with error -71 [ 1735.764923][T12805] usb 2-1: USB disconnect, device number 8 [ 1736.107694][T24744] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1736.722824][T12805] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1736.929359][T12805] usb 2-1: Using ep0 maxpacket: 16 [ 1736.939880][ T9394] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1736.979499][T12805] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.001361][T12805] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1737.039621][T12805] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1737.074702][T12805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.087697][T12805] usb 2-1: config 0 descriptor?? [ 1737.187314][ T9394] usb 3-1: config 0 has no interfaces? [ 1737.220204][ T9394] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1737.230131][ T9394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.249410][ T9394] usb 3-1: Product: syz [ 1737.253795][ T9394] usb 3-1: Manufacturer: syz [ 1737.264868][ T9394] usb 3-1: SerialNumber: syz [ 1737.277470][ T9394] usb 3-1: config 0 descriptor?? [ 1737.502030][ T54] gspca_sonixj: reg_r err -32 [ 1737.530602][ T54] sonixj: probe of 4-1:0.0 failed with error -32 [ 1737.559449][T12805] nzxt-smart2 0003:1E71:2009.0045: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1737.935583][ T54] usb 2-1: USB disconnect, device number 9 [ 1738.081700][T24779] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1738.591637][ T54] usb 4-1: USB disconnect, device number 30 [ 1738.939338][T12805] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1739.079360][ T54] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1739.119341][T12805] usb 2-1: Using ep0 maxpacket: 8 [ 1739.127184][T12805] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1739.139027][T12805] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1739.148310][T12805] usb 2-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1739.156950][T12805] usb 2-1: Product: syz [ 1739.161204][T12805] usb 2-1: Manufacturer: syz [ 1739.166176][T12805] usb 2-1: SerialNumber: syz [ 1739.173619][T12805] usb 2-1: config 0 descriptor?? [ 1739.272547][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.283780][ T54] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1739.293177][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.304319][ T54] usb 4-1: config 0 descriptor?? [ 1739.522784][T24795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1739.535539][T24795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.610240][T12805] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1739.618312][T12805] gspca_sunplus: reg_w_riv err -71 [ 1739.629680][T12805] sunplus: probe of 2-1:0.0 failed with error -71 [ 1739.655630][T12805] usb 2-1: USB disconnect, device number 10 [ 1739.755346][ T54] usbhid 4-1:0.0: can't add hid device: -71 [ 1739.763856][T12799] usb 3-1: USB disconnect, device number 13 [ 1739.769368][ T54] usbhid: probe of 4-1:0.0 failed with error -71 [ 1739.802753][ T54] usb 4-1: USB disconnect, device number 31 [ 1740.479556][T12799] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1740.629352][ T54] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1740.689353][T12799] usb 2-1: Using ep0 maxpacket: 16 [ 1740.699448][T12799] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1740.722155][T12799] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1740.738969][T12799] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1740.759926][T12799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.793695][T12799] usb 2-1: config 0 descriptor?? [ 1740.819628][ T54] usb 3-1: Using ep0 maxpacket: 16 [ 1740.838218][ T54] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1740.873895][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.930250][ T54] usb 3-1: config 0 descriptor?? [ 1740.962944][ T54] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1741.249770][T12799] nzxt-smart2 0003:1E71:2009.0046: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1741.643712][T12805] usb 2-1: USB disconnect, device number 11 [ 1742.349593][T12797] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1742.605938][T12797] usb 4-1: config 0 has no interfaces? [ 1742.619307][T12797] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1742.636974][T12797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.645930][T12797] usb 4-1: Product: syz [ 1742.650562][T12797] usb 4-1: Manufacturer: syz [ 1742.656425][T12797] usb 4-1: SerialNumber: syz [ 1742.672567][T12797] usb 4-1: config 0 descriptor?? [ 1743.015952][ T54] gspca_sonixj: reg_r err -32 [ 1743.020864][ T54] sonixj: probe of 3-1:0.0 failed with error -32 [ 1743.890246][T24867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5514'. [ 1744.057957][ T5829] usb 3-1: USB disconnect, device number 14 [ 1744.449356][T12805] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1744.639414][T12805] usb 2-1: Using ep0 maxpacket: 16 [ 1744.648905][T12805] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.675618][T12805] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1744.683686][T12805] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1744.702027][T12805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.721342][T12805] usb 2-1: config 0 descriptor?? [ 1745.165171][T12805] nzxt-smart2 0003:1E71:2009.0047: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1745.789590][T24896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5523'. [ 1745.879144][T12805] usb 4-1: USB disconnect, device number 32 [ 1747.212469][ T54] usb 2-1: USB disconnect, device number 12 [ 1747.309530][T12799] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1747.499314][T12799] usb 3-1: Using ep0 maxpacket: 16 [ 1747.510736][T12799] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.543221][T12799] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1747.559486][T12799] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1747.568783][T12799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.604729][T24929] tipc: Enabled bearer , priority 0 [ 1747.611260][T12799] usb 3-1: config 0 descriptor?? [ 1747.620362][T24929] syzkaller0: entered promiscuous mode [ 1747.637369][T24929] syzkaller0: entered allmulticast mode [ 1747.662710][T24929] tipc: Resetting bearer [ 1747.694243][T24928] tipc: Resetting bearer [ 1747.731989][T24928] tipc: Disabling bearer [ 1747.742927][T24927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5532'. [ 1748.064558][T12799] nzxt-smart2 0003:1E71:2009.0048: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1748.339517][T12797] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1748.459634][T12799] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1748.537201][T12801] usb 3-1: USB disconnect, device number 15 [ 1748.559063][T12797] usb 4-1: config 0 has no interfaces? [ 1748.591241][T12797] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1748.602491][T12797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.611180][T12797] usb 4-1: Product: syz [ 1748.618435][T12797] usb 4-1: Manufacturer: syz [ 1748.633393][T12797] usb 4-1: SerialNumber: syz [ 1748.644464][T12797] usb 4-1: config 0 descriptor?? [ 1748.659311][T12799] usb 1-1: Using ep0 maxpacket: 16 [ 1748.682263][T12799] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.707102][T12799] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1748.722595][T12799] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1748.741338][T12799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.755722][T12799] usb 1-1: config 0 descriptor?? [ 1749.202080][T12799] nzxt-smart2 0003:1E71:2009.0049: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1749.651615][T24964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5542'. [ 1751.239866][T12799] usb 1-1: USB disconnect, device number 19 [ 1751.250808][T12805] usb 4-1: USB disconnect, device number 33 [ 1751.266695][T12797] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1751.479433][T12797] usb 2-1: Using ep0 maxpacket: 8 [ 1751.490059][T12797] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1751.500192][T24987] tipc: Enabled bearer , priority 0 [ 1751.507108][T12797] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1751.510713][T24987] syzkaller0: entered promiscuous mode [ 1751.516620][T12797] usb 2-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1751.527309][T24987] syzkaller0: entered allmulticast mode [ 1751.531387][T12797] usb 2-1: Product: syz [ 1751.552221][T12797] usb 2-1: Manufacturer: syz [ 1751.561387][T12797] usb 2-1: SerialNumber: syz [ 1751.578842][T24987] tipc: Resetting bearer [ 1751.578985][T12797] usb 2-1: config 0 descriptor?? [ 1751.597626][T24985] tipc: Resetting bearer [ 1751.660297][T24985] tipc: Disabling bearer [ 1751.719513][T24990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5551'. [ 1752.024577][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1752.034993][T12797] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1752.043765][T12797] gspca_sunplus: reg_w_riv err -71 [ 1752.056315][T12797] sunplus: probe of 2-1:0.0 failed with error -71 [ 1752.074911][T12797] usb 2-1: USB disconnect, device number 13 [ 1752.656039][T12797] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1752.887464][T12797] usb 1-1: Using ep0 maxpacket: 16 [ 1752.911048][T12797] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.963786][T12797] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1752.975107][T12797] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1752.988704][T12797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.071951][T12797] usb 1-1: config 0 descriptor?? [ 1753.233724][T25021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5561'. [ 1753.553571][T12797] nzxt-smart2 0003:1E71:2009.004A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1754.518406][T25039] loop2: detected capacity change from 0 to 7 [ 1754.526221][T25039] Dev loop2: unable to read RDB block 7 [ 1754.536554][T25039] loop2: unable to read partition table [ 1754.542910][T25039] loop2: partition table beyond EOD, truncated [ 1754.553922][T25039] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1754.612034][ T5155] Dev loop2: unable to read RDB block 7 [ 1754.630714][T25041] syzkaller0: entered promiscuous mode [ 1754.634235][ T5155] loop2: unable to read partition table [ 1754.636322][T25041] syzkaller0: entered allmulticast mode [ 1754.653346][ T5155] loop2: partition table beyond EOD, truncated [ 1754.976871][T25050] kvm: pic: non byte write [ 1755.403690][ T5829] usb 1-1: USB disconnect, device number 20 [ 1755.522632][T25063] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1755.549732][T25063] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1756.711799][T25076] loop2: detected capacity change from 0 to 7 [ 1756.720537][ T5798] Dev loop2: unable to read RDB block 7 [ 1756.727633][ T5798] loop2: unable to read partition table [ 1756.734413][ T5798] loop2: partition table beyond EOD, truncated [ 1756.749296][T25076] Dev loop2: unable to read RDB block 7 [ 1756.755614][T25076] loop2: unable to read partition table [ 1756.771491][T25076] loop2: partition table beyond EOD, truncated [ 1756.796600][T25076] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1756.829136][T25078] tipc: New replicast peer: 255.255.255.255 [ 1756.861952][T25078] tipc: Enabled bearer , priority 10 [ 1756.936872][T25078] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5577'. [ 1757.366996][T25084] kvm: pic: non byte write [ 1757.450985][T12805] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1757.649935][T12805] usb 3-1: Using ep0 maxpacket: 16 [ 1757.667840][T12805] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1757.689161][T12805] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1757.699042][T12805] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1757.714939][T12805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.728542][T12805] usb 3-1: config 0 descriptor?? [ 1757.959365][T12804] tipc: Node number set to 1908065402 [ 1758.158528][T12805] nzxt-smart2 0003:1E71:2009.004B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1758.663257][T20588] usb 3-1: USB disconnect, device number 16 [ 1759.244569][T25114] kvm: pic: non byte write [ 1759.319384][T20588] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1759.519599][T20588] usb 4-1: Using ep0 maxpacket: 16 [ 1759.550676][T20588] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.573171][T20588] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1759.602524][T20588] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1759.645692][T25126] netlink: 'syz.2.5592': attribute type 2 has an invalid length. [ 1759.659658][T20588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.668154][T25126] netlink: 'syz.2.5592': attribute type 8 has an invalid length. [ 1759.689323][T20588] usb 4-1: config 0 descriptor?? [ 1759.718326][T25126] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5592'. [ 1759.757438][ T5101] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1759.767508][ T5101] CPU: 1 PID: 5101 Comm: kworker/u5:1 Not tainted 6.6.102-syzkaller #0 [ 1759.777131][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1759.787700][ T5101] Workqueue: hci1 hci_rx_work [ 1759.792639][ T5101] Call Trace: [ 1759.796147][ T5101] [ 1759.799138][ T5101] dump_stack_lvl+0x16c/0x230 [ 1759.803887][ T5101] ? show_regs_print_info+0x20/0x20 [ 1759.809337][ T5101] ? load_image+0x3b0/0x3b0 [ 1759.814102][ T5101] sysfs_create_dir_ns+0x256/0x280 [ 1759.819296][ T5101] ? hci_rx_work+0x43a/0xd80 [ 1759.824050][ T5101] ? sysfs_warn_dup+0xa0/0xa0 [ 1759.828802][ T5101] ? do_raw_spin_unlock+0x121/0x230 [ 1759.834083][ T5101] kobject_add_internal+0x6b8/0xc70 [ 1759.839634][ T5101] kobject_add+0x156/0x220 [ 1759.844458][ T5101] ? __rwlock_init+0x150/0x150 [ 1759.849377][ T5101] ? kobject_init+0x1e0/0x1e0 [ 1759.854150][ T5101] ? _raw_spin_unlock+0x28/0x40 [ 1759.859103][ T5101] ? get_device_parent+0x366/0x390 [ 1759.864290][ T5101] device_add+0x408/0xc20 [ 1759.868785][ T5101] hci_conn_add_sysfs+0xd5/0x1e0 [ 1759.873795][ T5101] le_conn_complete_evt+0xc37/0x1220 [ 1759.879404][ T5101] ? hci_event_packet+0x4a7/0x1210 [ 1759.884671][ T5101] ? trace_contention_end+0x39/0xe0 [ 1759.890198][ T5101] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1759.896493][ T5101] ? __copy_skb_header+0xa7/0x550 [ 1759.901803][ T5101] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1759.907581][ T5101] ? skb_pull_data+0xfb/0x200 [ 1759.912323][ T5101] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1759.918706][ T5101] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 1759.925298][ T5101] ? hci_remote_host_features_evt+0x160/0x160 [ 1759.931579][ T5101] hci_event_packet+0x795/0x1210 [ 1759.936768][ T5101] ? bis_list+0x290/0x290 [ 1759.941246][ T5101] ? lockdep_hardirqs_on+0x98/0x150 [ 1759.946575][ T5101] ? hci_send_to_monitor+0xd7/0x4f0 [ 1759.951998][ T5101] hci_rx_work+0x43a/0xd80 [ 1759.956823][ T5101] ? process_scheduled_works+0x957/0x15b0 [ 1759.962661][ T5101] process_scheduled_works+0xa45/0x15b0 [ 1759.968246][ T5101] ? assign_work+0x400/0x400 [ 1759.972868][ T5101] ? assign_work+0x39e/0x400 [ 1759.977506][ T5101] worker_thread+0xa55/0xfc0 [ 1759.982184][ T5101] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1759.988218][ T5101] ? _raw_spin_unlock+0x40/0x40 [ 1759.993092][ T5101] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1759.999175][ T5101] kthread+0x2fa/0x390 [ 1760.003483][ T5101] ? pr_cont_work+0x560/0x560 [ 1760.008358][ T5101] ? kthread_blkcg+0xd0/0xd0 [ 1760.013124][ T5101] ret_from_fork+0x48/0x80 [ 1760.017576][ T5101] ? kthread_blkcg+0xd0/0xd0 [ 1760.022400][ T5101] ret_from_fork_asm+0x11/0x20 [ 1760.027315][ T5101] [ 1760.040369][ T5101] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1760.056363][ T5101] Bluetooth: hci1: failed to register connection device [ 1760.350436][T20588] nzxt-smart2 0003:1E71:2009.004C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1762.068074][T12799] usb 4-1: USB disconnect, device number 34 [ 1762.090042][ T5101] Bluetooth: hci1: command 0x0406 tx timeout [ 1762.536614][T25143] pim6reg: entered allmulticast mode [ 1762.623037][ T27] audit: type=1400 audit(1755739955.319:82): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1762.924102][T25151] loop2: detected capacity change from 0 to 7 [ 1762.941713][ T5798] Dev loop2: unable to read RDB block 7 [ 1762.947748][ T5798] loop2: unable to read partition table [ 1762.956667][ T5798] loop2: partition table beyond EOD, truncated [ 1762.971502][T25151] Dev loop2: unable to read RDB block 7 [ 1762.980660][T25151] loop2: unable to read partition table [ 1762.991430][T25151] loop2: partition table beyond EOD, truncated [ 1762.999419][T12804] usb 3-1: Using ep0 maxpacket: 16 [ 1763.011097][T12804] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1763.035907][T25151] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1763.057235][T12804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1763.072641][T12804] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1763.111898][T12804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.149459][T12804] usb 3-1: config 0 descriptor?? [ 1763.583229][T12804] nzxt-smart2 0003:1E71:2009.004D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1764.089512][T20588] usb 3-1: USB disconnect, device number 17 [ 1764.926048][T25130] Set syz1 is full, maxelem 65536 reached [ 1766.416179][T25198] loop2: detected capacity change from 0 to 7 [ 1766.444971][T25198] Dev loop2: unable to read RDB block 7 [ 1766.456084][T25198] loop2: unable to read partition table [ 1766.469651][T25198] loop2: partition table beyond EOD, truncated [ 1766.480080][T25198] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1766.582938][ T5829] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1766.812839][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 1766.847956][ T5829] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1766.875406][ T5829] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1766.883547][ T5829] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1766.899947][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.940680][ T5829] usb 1-1: config 0 descriptor?? [ 1767.377771][ T5829] nzxt-smart2 0003:1E71:2009.004E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1767.860762][ T5829] usb 1-1: USB disconnect, device number 21 [ 1768.893633][T25237] gretap0: entered promiscuous mode [ 1768.909960][T25237] vlan2: entered promiscuous mode [ 1769.667932][T25253] tipc: Enabled bearer , priority 0 [ 1769.680325][T25253] syzkaller0: entered promiscuous mode [ 1769.698461][T25253] syzkaller0: entered allmulticast mode [ 1769.871980][T25257] tipc: Resetting bearer [ 1769.930687][T25252] tipc: Resetting bearer [ 1770.029700][T25252] tipc: Disabling bearer [ 1771.248807][T25280] loop2: detected capacity change from 0 to 7 [ 1771.281577][T25280] Dev loop2: unable to read RDB block 7 [ 1771.287332][T25280] loop2: unable to read partition table [ 1771.315098][T25280] loop2: partition table beyond EOD, truncated [ 1771.331773][T25280] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1771.347234][ T27] audit: type=1400 audit(1755739964.039:83): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F041 [ 1771.577871][T25294] fuse: Bad value for 'fd' [ 1772.831405][T25315] loop2: detected capacity change from 0 to 7 [ 1772.840479][T25315] Dev loop2: unable to read RDB block 7 [ 1772.846611][T25315] loop2: unable to read partition table [ 1772.853325][T25315] loop2: partition table beyond EOD, truncated [ 1772.861795][T25315] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1772.997002][T25318] tipc: Enabled bearer , priority 0 [ 1773.004211][ T5829] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1773.032616][T25318] tipc: Resetting bearer [ 1773.061290][T25317] tipc: Disabling bearer [ 1773.160057][T25324] fuse: Bad value for 'fd' [ 1773.176015][ T5829] usb 4-1: device descriptor read/64, error -71 [ 1773.299446][T12799] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1773.449346][ T5829] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1773.469343][T20588] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1773.501915][T12799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.513017][T12799] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1773.522502][T12799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.532368][T12799] usb 2-1: config 0 descriptor?? [ 1773.541363][T12799] pwc: Askey VC010 type 2 USB webcam detected. [ 1773.599789][ T5829] usb 4-1: device descriptor read/64, error -71 [ 1773.649676][T20588] usb 1-1: Using ep0 maxpacket: 16 [ 1773.658123][T20588] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1773.666716][T20588] usb 1-1: can't read configurations, error -61 [ 1773.740537][ T5829] usb usb4-port1: attempt power cycle [ 1773.819412][T20588] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1774.019747][T20588] usb 1-1: Using ep0 maxpacket: 16 [ 1774.047787][T20588] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1774.064308][T20588] usb 1-1: can't read configurations, error -61 [ 1774.087111][T20588] usb usb1-port1: attempt power cycle [ 1774.159424][ T5829] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1774.189943][T25335] delete_channel: no stack [ 1774.201353][T12799] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1774.211029][ T5829] usb 4-1: device descriptor read/8, error -71 [ 1774.228293][T12799] pwc: recv_control_msg error -71 req 02 val 2700 [ 1774.259815][T12799] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1774.276969][T12799] pwc: recv_control_msg error -71 req 04 val 1000 [ 1774.315158][T12799] pwc: recv_control_msg error -71 req 04 val 1300 [ 1774.337797][T12799] pwc: recv_control_msg error -71 req 04 val 1400 [ 1774.357742][T12799] pwc: recv_control_msg error -71 req 02 val 2000 [ 1774.375211][T12799] pwc: recv_control_msg error -71 req 02 val 2100 [ 1774.393163][T12799] pwc: recv_control_msg error -71 req 04 val 1500 [ 1774.417811][T12799] pwc: recv_control_msg error -71 req 02 val 2500 [ 1774.434651][T12799] pwc: recv_control_msg error -71 req 02 val 2400 [ 1774.443326][T12799] pwc: recv_control_msg error -71 req 02 val 2600 [ 1774.450888][T12799] pwc: recv_control_msg error -71 req 02 val 2900 [ 1774.457975][T12799] pwc: recv_control_msg error -71 req 02 val 2800 [ 1774.466517][T12799] pwc: recv_control_msg error -71 req 04 val 1100 [ 1774.475976][T12799] pwc: recv_control_msg error -71 req 04 val 1200 [ 1774.479456][ T5829] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1774.506284][T12799] pwc: Registered as video103. [ 1774.511718][T20588] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1774.550710][T12799] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 1774.557398][ T5829] usb 4-1: device descriptor read/8, error -71 [ 1774.580587][T20588] usb 1-1: Using ep0 maxpacket: 16 [ 1774.608627][T20588] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1774.628914][T12799] usb 2-1: USB disconnect, device number 14 [ 1774.638008][T20588] usb 1-1: can't read configurations, error -61 [ 1774.738309][ T5829] usb usb4-port1: unable to enumerate USB device [ 1774.839613][T20588] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1774.900056][T20588] usb 1-1: Using ep0 maxpacket: 16 [ 1774.920174][T20588] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1774.929445][T20588] usb 1-1: can't read configurations, error -61 [ 1774.938911][T20588] usb usb1-port1: unable to enumerate USB device [ 1775.231165][T25341] loop2: detected capacity change from 0 to 7 [ 1775.248294][T25341] Dev loop2: unable to read RDB block 7 [ 1775.254317][T25341] loop2: unable to read partition table [ 1775.265349][T25341] loop2: partition table beyond EOD, truncated [ 1775.272312][T25341] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1775.996918][T25351] fuse: Bad value for 'fd' [ 1776.509787][T12804] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1776.619629][T25369] kvm: pic: non byte write [ 1776.691566][T12804] usb 2-1: Using ep0 maxpacket: 16 [ 1776.701647][T12804] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1776.733648][T12804] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1776.760433][T12804] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1776.773683][T12804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.786512][T12804] usb 2-1: config 0 descriptor?? [ 1777.242479][T12804] nzxt-smart2 0003:1E71:2009.004F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1777.329597][T20588] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1777.479335][T12805] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1777.559545][T20588] usb 4-1: Using ep0 maxpacket: 16 [ 1777.581876][T20588] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1777.592721][T20588] usb 4-1: can't read configurations, error -61 [ 1777.669419][T12805] usb 1-1: Using ep0 maxpacket: 16 [ 1777.679539][T12799] usb 2-1: USB disconnect, device number 15 [ 1777.689727][T12805] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1777.722417][T12805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.747364][T12805] usb 1-1: config 0 descriptor?? [ 1777.760435][T12805] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1777.769556][T20588] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1777.959497][T20588] usb 4-1: Using ep0 maxpacket: 16 [ 1777.972187][T20588] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1777.985476][T20588] usb 4-1: can't read configurations, error -61 [ 1777.998234][T20588] usb usb4-port1: attempt power cycle [ 1778.423344][T20588] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1778.460906][T20588] usb 4-1: Using ep0 maxpacket: 16 [ 1778.471051][T20588] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1778.484566][T20588] usb 4-1: can't read configurations, error -61 [ 1778.649605][T20588] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1778.679366][ T5829] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1778.690772][T20588] usb 4-1: Using ep0 maxpacket: 16 [ 1778.705746][T20588] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1778.718848][T20588] usb 4-1: can't read configurations, error -61 [ 1778.735433][T20588] usb usb4-port1: unable to enumerate USB device [ 1778.872438][ T5829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.893385][ T5829] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1778.905207][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.922570][ T5829] usb 2-1: config 0 descriptor?? [ 1778.935661][ T5829] pwc: Askey VC010 type 2 USB webcam detected. [ 1779.783924][T12805] gspca_sonixj: reg_r err -32 [ 1779.788904][T12805] sonixj: probe of 1-1:0.0 failed with error -32 [ 1780.850294][T12804] usb 1-1: USB disconnect, device number 26 [ 1781.532384][T25432] syzkaller0: entered promiscuous mode [ 1781.538238][T25432] syzkaller0: entered allmulticast mode [ 1781.860810][T25394] delete_channel: no stack [ 1781.871071][ T5829] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1781.900163][ T5829] pwc: recv_control_msg error -71 req 02 val 2700 [ 1781.929773][ T5829] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1781.945157][ T5829] pwc: recv_control_msg error -71 req 04 val 1000 [ 1781.965836][ T5829] pwc: recv_control_msg error -71 req 04 val 1300 [ 1781.989714][ T5829] pwc: recv_control_msg error -71 req 04 val 1400 [ 1782.014106][ T5829] pwc: recv_control_msg error -71 req 02 val 2000 [ 1782.038369][ T5829] pwc: recv_control_msg error -71 req 02 val 2100 [ 1782.049048][ T5829] pwc: recv_control_msg error -71 req 04 val 1500 [ 1782.065609][ T5829] pwc: recv_control_msg error -71 req 02 val 2500 [ 1782.085872][ T5829] pwc: recv_control_msg error -71 req 02 val 2400 [ 1782.097514][ T5829] pwc: recv_control_msg error -71 req 02 val 2600 [ 1782.125258][ T5829] pwc: recv_control_msg error -71 req 02 val 2900 [ 1782.149790][ T5829] pwc: recv_control_msg error -71 req 02 val 2800 [ 1782.171555][ T5829] pwc: recv_control_msg error -71 req 04 val 1100 [ 1782.182383][ T5829] pwc: recv_control_msg error -71 req 04 val 1200 [ 1782.200287][ T5829] pwc: Registered as video103. [ 1782.208661][ T5829] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 1782.307493][ T5829] usb 2-1: USB disconnect, device number 16 [ 1782.469577][T20588] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1782.792039][T20588] usb 1-1: config 0 has no interfaces? [ 1782.852101][T20588] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1782.871182][T20588] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.917170][T20588] usb 1-1: Product: syz [ 1782.948185][T20588] usb 1-1: Manufacturer: syz [ 1782.965820][T20588] usb 1-1: SerialNumber: syz [ 1783.030021][T20588] usb 1-1: config 0 descriptor?? [ 1784.298564][ T27] audit: type=1800 audit(1755739976.989:84): pid=25468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5704" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1785.573498][T20588] usb 1-1: USB disconnect, device number 27 [ 1785.999516][ T54] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1786.171242][T25496] loop2: detected capacity change from 0 to 7 [ 1786.207419][T25496] Dev loop2: unable to read RDB block 7 [ 1786.219354][ T54] usb 2-1: Using ep0 maxpacket: 16 [ 1786.227447][ T54] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1786.251323][ T54] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1786.258200][ T54] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1786.278222][T25496] loop2: unable to read partition table [ 1786.284509][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.293228][T25496] loop2: partition table beyond EOD, truncated [ 1786.313091][T25496] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1786.372020][ T54] usb 2-1: config 0 descriptor?? [ 1786.652485][T25501] vxcan1: entered allmulticast mode [ 1786.813917][ T54] nzxt-smart2 0003:1E71:2009.0050: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1788.658388][T25517] syzkaller0: entered promiscuous mode [ 1788.683231][T25517] syzkaller0: entered allmulticast mode [ 1788.751607][T12801] usb 2-1: USB disconnect, device number 17 [ 1788.851436][T25457] Set syz1 is full, maxelem 65536 reached [ 1789.610058][T25543] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 1789.618189][T25543] vlan0: entered promiscuous mode [ 1789.766597][T25546] fuse: Bad value for 'fd' [ 1789.771482][T12797] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1789.779532][ T54] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1789.853901][T25548] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1789.876286][T25548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.885360][T25548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.949501][ T54] usb 1-1: device descriptor read/64, error -71 [ 1789.981063][T12797] usb 3-1: config 0 has no interfaces? [ 1789.995892][T12797] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1790.021278][T12797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.030388][T12797] usb 3-1: Product: syz [ 1790.034739][T12797] usb 3-1: Manufacturer: syz [ 1790.041892][T12797] usb 3-1: SerialNumber: syz [ 1790.053471][T12797] usb 3-1: config 0 descriptor?? [ 1790.249492][ T54] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1790.347158][T25537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5723'. [ 1790.439595][ T54] usb 1-1: device descriptor read/64, error -71 [ 1790.561793][ T54] usb usb1-port1: attempt power cycle [ 1790.879593][ T5829] usb 3-1: USB disconnect, device number 18 [ 1790.979360][ T54] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1791.032363][ T54] usb 1-1: device descriptor read/8, error -71 [ 1791.294160][T25571] sctp: [Deprecated]: syz.2.5736 (pid 25571) Use of int in maxseg socket option. [ 1791.294160][T25571] Use struct sctp_assoc_value instead [ 1791.300768][ T54] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1791.339119][T25573] loop2: detected capacity change from 0 to 7 [ 1791.350934][ T54] usb 1-1: device descriptor read/8, error -71 [ 1791.357988][ T5798] Dev loop2: unable to read RDB block 7 [ 1791.365401][ T5798] loop2: unable to read partition table [ 1791.375778][ T5798] loop2: partition table beyond EOD, truncated [ 1791.404178][T25573] Dev loop2: unable to read RDB block 7 [ 1791.411277][T25573] loop2: unable to read partition table [ 1791.418062][T25573] loop2: partition table beyond EOD, truncated [ 1791.430748][T25573] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1791.489695][ T54] usb usb1-port1: unable to enumerate USB device [ 1791.773999][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.780523][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.159894][ T5829] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1793.229306][ T54] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1793.384243][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 1793.439710][ T5829] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.457201][ T54] usb 2-1: Using ep0 maxpacket: 32 [ 1793.484300][ T5829] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1793.497827][ T54] usb 2-1: config 0 has an invalid interface number: 73 but max is 0 [ 1793.527041][ T5829] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1793.542005][ T54] usb 2-1: config 0 has no interface number 0 [ 1793.572781][ T54] usb 2-1: too many endpoints for config 0 interface 73 altsetting 118: 194, using maximum allowed: 30 [ 1793.598353][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.628279][ T54] usb 2-1: config 0 interface 73 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 1793.650906][ T5829] usb 1-1: config 0 descriptor?? [ 1793.684379][ T54] usb 2-1: config 0 interface 73 has no altsetting 0 [ 1793.697168][ T54] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1793.710364][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.718856][ T54] usb 2-1: Product: syz [ 1793.725093][ T54] usb 2-1: Manufacturer: syz [ 1793.730288][ T54] usb 2-1: SerialNumber: syz [ 1793.740270][ T54] usb 2-1: config 0 descriptor?? [ 1793.972422][ T54] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1793.991842][ T54] gspca_stk1135: reg_w 0x2 err -71 [ 1794.007287][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1794.024831][ T54] gspca_stk1135: Sensor write failed [ 1794.039517][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1794.059343][ T54] gspca_stk1135: Sensor write failed [ 1794.066705][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1794.090057][ T54] gspca_stk1135: Sensor read failed [ 1794.096079][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1794.114766][ T54] gspca_stk1135: Sensor read failed [ 1794.120617][ T54] gspca_stk1135: Detected sensor type unknown (0x0) [ 1794.127582][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1794.134893][ T54] gspca_stk1135: Sensor read failed [ 1794.141111][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1794.148338][ T54] gspca_stk1135: Sensor read failed [ 1794.154901][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1794.169169][ T54] gspca_stk1135: Sensor write failed [ 1794.175552][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1794.189318][ T54] gspca_stk1135: Sensor write failed [ 1794.196739][ T54] stk1135: probe of 2-1:0.73 failed with error -71 [ 1794.219815][ T54] usb 2-1: USB disconnect, device number 18 [ 1794.271757][ T5829] usbhid 1-1:0.0: can't add hid device: -71 [ 1794.281314][ T5829] usbhid: probe of 1-1:0.0 failed with error -71 [ 1794.303929][ T5829] usb 1-1: USB disconnect, device number 32 [ 1794.689590][ T9394] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1794.893397][ T9394] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1794.959492][ T9394] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.000623][ T9394] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1795.065030][ T9394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.118372][ T9394] usb 4-1: config 0 descriptor?? [ 1795.535581][T25667] loop2: detected capacity change from 0 to 7 [ 1795.571672][T25667] Dev loop2: unable to read RDB block 7 [ 1795.614289][ T9394] usbhid 4-1:0.0: can't add hid device: -32 [ 1795.628097][T25667] loop2: unable to read partition table [ 1795.632662][ T9394] usbhid: probe of 4-1:0.0 failed with error -32 [ 1795.655518][T25667] loop2: partition table beyond EOD, truncated [ 1795.664156][ T9394] usb 4-1: USB disconnect, device number 43 [ 1795.665450][T25667] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1796.189349][ T9394] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1796.379488][ T9394] usb 2-1: Using ep0 maxpacket: 16 [ 1796.398444][ T9394] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.438549][ T9394] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1796.472282][ T9394] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1796.496295][ T9394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.545776][ T9394] usb 2-1: config 0 descriptor?? [ 1797.212475][ T9394] usbhid 2-1:0.0: can't add hid device: -71 [ 1797.287159][ T9394] usbhid: probe of 2-1:0.0 failed with error -71 [ 1797.408872][ T9394] usb 2-1: USB disconnect, device number 19 [ 1797.605887][ T5101] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1797.788100][T25716] tipc: Enabled bearer , priority 0 [ 1797.836154][T25716] tipc: Resetting bearer [ 1797.898025][T25715] tipc: Disabling bearer [ 1798.654118][ T5101] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1799.108064][T25756] loop2: detected capacity change from 0 to 7 [ 1799.174129][T25756] Dev loop2: unable to read RDB block 7 [ 1799.212675][T25756] loop2: unable to read partition table [ 1799.246823][T25756] loop2: partition table beyond EOD, truncated [ 1799.250352][T25761] tipc: Enabled bearer , priority 0 [ 1799.265173][T25753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 1799.274870][T25756] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1799.298812][T25761] tipc: Resetting bearer [ 1799.387218][T25760] tipc: Disabling bearer [ 1800.641569][T25787] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 1800.698975][T25791] loop2: detected capacity change from 0 to 7 [ 1800.715962][T25787] vlan0: entered promiscuous mode [ 1800.721761][T25791] Dev loop2: unable to read RDB block 7 [ 1800.739462][T25791] loop2: unable to read partition table [ 1800.774897][T25791] loop2: partition table beyond EOD, truncated [ 1800.814220][T25791] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1801.332113][ T9394] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1801.439495][T25811] usb usb8: usbfs: process 25811 (syz.0.5822) did not claim interface 0 before use [ 1801.551939][ T9394] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.579530][ T9394] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1801.593025][ T9394] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1801.610074][ T9394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.637533][ T9394] usb 3-1: config 0 descriptor?? [ 1801.863466][T12801] usb 3-1: USB disconnect, device number 19 [ 1802.499504][T12801] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1802.615076][T25832] kvm: pic: non byte write [ 1802.699396][T12801] usb 3-1: Using ep0 maxpacket: 16 [ 1802.706827][T12801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1802.718132][T12801] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1802.727515][T12801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.737868][T12801] usb 3-1: config 0 descriptor?? [ 1803.167724][T12801] mcp2221 0003:04D8:00DD.0051: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1803.357516][T12801] usb 3-1: USB disconnect, device number 20 [ 1803.708322][T25843] tipc: Enabled bearer , priority 0 [ 1803.742305][T25843] tipc: Resetting bearer [ 1803.810587][T25842] tipc: Disabling bearer [ 1804.526150][T25863] kvm: pic: non byte write [ 1804.666426][T25868] vlan2: entered promiscuous mode [ 1804.672234][T25868] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 1804.887140][T25875] loop2: detected capacity change from 0 to 7 [ 1804.896934][ T5798] Dev loop2: unable to read RDB block 7 [ 1804.904913][ T5798] loop2: unable to read partition table [ 1804.912120][ T5798] loop2: partition table beyond EOD, truncated [ 1804.920429][T25875] Dev loop2: unable to read RDB block 7 [ 1804.926725][T25875] loop2: unable to read partition table [ 1804.934947][T25875] loop2: partition table beyond EOD, truncated [ 1804.941782][T25875] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1805.809300][T12801] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1805.969473][ T9394] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1806.139307][T12801] usb 1-1: Using ep0 maxpacket: 16 [ 1806.197961][T12801] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1806.209469][ T9394] usb 2-1: Using ep0 maxpacket: 16 [ 1806.226830][T12801] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1806.256647][T12801] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1806.283151][T12801] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1806.304176][T12801] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1806.329125][T12801] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1806.360770][T12801] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1806.394702][T12801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.460779][T12801] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1809.229344][ T5829] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1809.351291][T12801] ums-sddr09: probe of 1-1:1.0 failed with error -22 [ 1809.389809][T12801] usb 1-1: USB disconnect, device number 33 [ 1809.471596][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1809.495672][T25933] vlan2: entered promiscuous mode [ 1809.536310][ T9394] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1809.546722][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1809.562753][T25933] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 1809.576922][ T5829] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1809.588018][ T9394] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1809.597892][ T9394] usb 2-1: can't read configurations, error -71 [ 1809.605384][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.655362][ T5829] usb 3-1: config 0 descriptor?? [ 1809.863359][T25941] kvm: user requested TSC rate below hardware speed [ 1809.873403][T25941] kvm: vcpu 0: requested 40 ns lapic timer period limited to 200000 ns [ 1809.883188][T25941] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (200000 ns). Using initial count to start timer. [ 1810.128338][T25946] kvm: pic: non byte write [ 1810.283973][ T5829] usbhid 3-1:0.0: can't add hid device: -32 [ 1810.301959][ T5829] usbhid: probe of 3-1:0.0 failed with error -32 [ 1810.314993][ T5829] usb 3-1: USB disconnect, device number 21 [ 1811.853981][T25978] kvm: user requested TSC rate below hardware speed [ 1811.868635][T25978] kvm: vcpu 0: requested 40 ns lapic timer period limited to 200000 ns [ 1811.888002][T25978] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (200000 ns). Using initial count to start timer. [ 1812.409517][T12801] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1812.656441][T12801] usb 2-1: Using ep0 maxpacket: 16 [ 1812.669655][T12801] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1812.684295][T12801] usb 2-1: config 0 has no interface number 0 [ 1812.700976][T12801] usb 2-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 1812.742951][T12801] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1812.775578][T12801] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1812.789753][T12801] usb 2-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 1812.804231][T12801] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1812.836510][T12801] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1812.846767][T12801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.855787][T12801] usb 2-1: Product: syz [ 1812.862127][T12801] usb 2-1: Manufacturer: syz [ 1812.866861][T12801] usb 2-1: SerialNumber: syz [ 1812.893207][T12801] usb 2-1: config 0 descriptor?? [ 1812.899626][T25986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1812.907771][T25986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1813.149848][T25986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1813.193740][T25986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1813.807697][T12801] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1813.820467][T12799] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1814.032224][T12799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1814.073643][T12799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1814.104258][T12799] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1814.129392][T12799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.169866][T12799] usb 3-1: config 0 descriptor?? [ 1814.870369][T12801] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1814.929283][T12801] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 1814.973874][T12799] usbhid 3-1:0.0: can't add hid device: -32 [ 1815.019842][T12799] usbhid: probe of 3-1:0.0 failed with error -32 [ 1815.029728][T12801] CoreChips: probe of 2-1:0.41 failed with error -71 [ 1815.065856][T12799] usb 3-1: USB disconnect, device number 22 [ 1815.072476][T12801] usb 2-1: USB disconnect, device number 22 [ 1816.014119][T26010] kvm: user requested TSC rate below hardware speed [ 1816.789369][ T9394] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1816.939318][ T9394] usb 2-1: device descriptor read/64, error -71 [ 1817.212157][ T9394] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1817.319356][ T54] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1817.376975][ T9394] usb 2-1: device descriptor read/64, error -71 [ 1817.502649][ T9394] usb usb2-port1: attempt power cycle [ 1817.510443][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.522579][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.533436][ T54] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1817.542660][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.555200][ T54] usb 1-1: config 0 descriptor?? [ 1817.935923][ T9394] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1817.970835][ T9394] usb 2-1: device descriptor read/8, error -71 [ 1818.174886][ T54] usbhid 1-1:0.0: can't add hid device: -32 [ 1818.182863][ T54] usbhid: probe of 1-1:0.0 failed with error -32 [ 1818.191847][ T54] usb 1-1: USB disconnect, device number 34 [ 1818.241021][ T9394] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1818.283906][ T9394] usb 2-1: device descriptor read/8, error -71 [ 1818.411511][ T9394] usb usb2-port1: unable to enumerate USB device [ 1819.275019][T26042] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 1819.284201][T26042] vlan2: entered promiscuous mode [ 1819.423648][T26044] kvm: user requested TSC rate below hardware speed [ 1819.449399][T24262] Bluetooth: hci0: command 0x0406 tx timeout [ 1820.211558][T26069] kvm: user requested TSC rate below hardware speed [ 1820.719561][T12799] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1820.890360][T12799] usb 2-1: device descriptor read/64, error -71 [ 1821.169423][T12799] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1821.319474][T12799] usb 2-1: device descriptor read/64, error -71 [ 1821.439766][T12799] usb usb2-port1: attempt power cycle [ 1821.861206][T12799] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1821.900297][T12799] usb 2-1: device descriptor read/8, error -71 [ 1822.182779][T12799] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1822.219850][T12799] usb 2-1: device descriptor read/8, error -71 [ 1822.346557][T12799] usb usb2-port1: unable to enumerate USB device [ 1823.021909][T26097] kvm: user requested TSC rate below hardware speed [ 1823.631982][T26105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5922'. [ 1823.641660][T26105] netlink: set zone limit has 8 unknown bytes [ 1824.096481][ T27] audit: type=1400 audit(1755740016.789:85): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 16 bytes leftover after parsing attributes in process `syz.2.5927'. [ 1824.599529][ T54] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1824.609548][T12799] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1824.760627][T12799] usb 4-1: device descriptor read/64, error -71 [ 1824.809405][ T54] usb 3-1: Using ep0 maxpacket: 16 [ 1824.816509][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1824.829246][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1824.841694][ T54] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1824.852641][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.871870][ T54] usb 3-1: config 0 descriptor?? [ 1825.031374][T12799] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1825.201718][T12799] usb 4-1: device descriptor read/64, error -71 [ 1825.319918][ T54] corsair 0003:1B1C:1B02.0052: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1825.344640][T12799] usb usb4-port1: attempt power cycle [ 1825.750045][T20588] usb 3-1: USB disconnect, device number 23 [ 1825.782926][T12799] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1825.821430][T12799] usb 4-1: device descriptor read/8, error -71 [ 1826.099474][T12799] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1826.141850][T12799] usb 4-1: device descriptor read/8, error -71 [ 1826.261840][T12799] usb usb4-port1: unable to enumerate USB device [ 1827.432622][ T27] audit: type=1400 audit(1755740020.129:86): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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tipc: Enabled bearer , priority 0 [ 1827.773976][T26152] syzkaller0: entered promiscuous mode [ 1827.782791][T26152] syzkaller0: entered allmulticast mode [ 1827.791866][T26154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5941'. [ 1827.852170][T26152] tipc: Resetting bearer [ 1827.893966][T26151] tipc: Resetting bearer [ 1827.967675][T26151] tipc: Disabling bearer [ 1828.376934][ T27] audit: type=1400 audit(1755740021.069:87): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F041 [ 1828.569485][ T54] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1828.838223][T26176] batadv0: entered promiscuous mode [ 1828.853568][T26176] vlan2: entered promiscuous mode [ 1828.919540][ T54] usb 2-1: device descriptor read/64, error -71 [ 1829.199445][ T54] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1829.369473][ T54] usb 2-1: device descriptor read/64, error -71 [ 1829.489509][ T54] usb usb2-port1: attempt power cycle [ 1829.899397][ T54] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1829.933182][ T54] usb 2-1: device descriptor read/8, error -71 [ 1830.209420][ T54] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1830.240171][ T54] usb 2-1: device descriptor read/8, error -71 [ 1830.302703][ T27] audit: type=1400 audit(1755740022.999:88): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb usb2-port1: unable to enumerate USB device [ 1830.604915][T26197] kvm: user requested TSC rate below hardware speed [ 1830.623214][T26197] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 1830.931818][T26207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5959'. [ 1830.943036][T26207] netlink: set zone limit has 8 unknown bytes [ 1832.044081][T26219] loop2: detected capacity change from 0 to 7 [ 1832.099717][T26219] Dev loop2: unable to read RDB block 7 [ 1832.118427][T26219] loop2: unable to read partition table [ 1832.149597][T26219] loop2: partition table beyond EOD, truncated [ 1832.170769][T26219] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1832.589349][ T27] audit: type=1400 audit(1755740025.279:89): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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loop2: detected capacity change from 0 to 7 [ 1834.382006][T26249] Dev loop2: unable to read RDB block 7 [ 1834.392720][T26249] loop2: unable to read partition table [ 1834.433451][T26249] loop2: partition table beyond EOD, truncated [ 1834.465571][T26249] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1834.869701][T26252] vivid-003: disconnect [ 1835.047647][ T27] audit: type=1400 audit(1755740027.739:90): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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vivid-003: reconnect [ 1835.834161][T26274] 8021q: VLANs not supported on ip6gre0 [ 1837.599307][T12796] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1837.795688][T12796] usb 4-1: Using ep0 maxpacket: 32 [ 1837.815424][T12796] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1837.861056][T12796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.889327][T12796] usb 4-1: Product: syz [ 1837.894768][T12796] usb 4-1: Manufacturer: syz [ 1837.911928][T12796] usb 4-1: SerialNumber: syz [ 1837.949412][T12796] usb 4-1: config 0 descriptor?? [ 1837.973090][T12796] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1838.468292][T26307] syz_tun: entered promiscuous mode [ 1838.474428][T26307] vlan2: entered promiscuous mode [ 1838.819295][ T54] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1839.009417][ T54] usb 1-1: Using ep0 maxpacket: 16 [ 1839.031388][ T54] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1839.045366][ T54] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1839.059668][ T54] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1839.070529][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.088256][ T54] usb 1-1: config 0 descriptor?? [ 1839.714629][ T54] usbhid 1-1:0.0: can't add hid device: -71 [ 1839.725652][ T54] usbhid: probe of 1-1:0.0 failed with error -71 [ 1839.741151][ T54] usb 1-1: USB disconnect, device number 35 [ 1839.986432][T12796] gspca_stk1135: reg_w 0x203 err -71 [ 1840.000012][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.007845][T12796] gspca_stk1135: Sensor write failed [ 1840.013831][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.020873][T12796] gspca_stk1135: Sensor write failed [ 1840.026404][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.042498][T12796] gspca_stk1135: Sensor read failed [ 1840.043956][T26329] kvm: user requested TSC rate below hardware speed [ 1840.048037][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.069021][T12796] gspca_stk1135: Sensor read failed [ 1840.074727][T12796] gspca_stk1135: Detected sensor type unknown (0x0) [ 1840.085355][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.092593][T12796] gspca_stk1135: Sensor read failed [ 1840.097936][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.107516][T12796] gspca_stk1135: Sensor read failed [ 1840.113145][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.125777][T12796] gspca_stk1135: Sensor write failed [ 1840.131347][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.137740][T12796] gspca_stk1135: Sensor write failed [ 1840.145469][T12796] stk1135: probe of 4-1:0.0 failed with error -71 [ 1840.158257][T12796] usb 4-1: USB disconnect, device number 48 [ 1842.528872][T26358] kvm: user requested TSC rate below hardware speed [ 1842.558659][T26358] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 1843.269304][T12799] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1843.469353][T12799] usb 2-1: Using ep0 maxpacket: 16 [ 1843.495204][T12799] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.527474][T12799] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1843.546713][T12799] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1843.585479][T12799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.627312][T12799] usb 2-1: config 0 descriptor?? [ 1843.717531][T26376] kvm: user requested TSC rate below hardware speed [ 1843.728505][T26376] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 1844.247176][T12799] usbhid 2-1:0.0: can't add hid device: -71 [ 1844.261019][T12799] usbhid: probe of 2-1:0.0 failed with error -71 [ 1844.288315][T12799] usb 2-1: USB disconnect, device number 35 [ 1845.362380][T26393] syzkaller0: entered promiscuous mode [ 1845.372138][T26393] syzkaller0: entered allmulticast mode [ 1845.948778][T26386] loop3: detected capacity change from 0 to 131072 [ 1845.976843][T26386] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 150994945) [ 1845.990747][T26386] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1846.018839][T26386] F2FS-fs (loop3): invalid crc value [ 1846.068278][T26386] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1846.288174][T26386] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1846.314116][T26386] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1848.347478][T26423] syzkaller0: entered promiscuous mode [ 1848.379591][T26423] syzkaller0: entered allmulticast mode [ 1849.083551][T26441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6035'. [ 1851.764726][T26460] syzkaller0: entered promiscuous mode [ 1851.779853][T26460] syzkaller0: entered allmulticast mode [ 1852.008619][T26469] tipc: Enabled bearer , priority 0 [ 1852.085606][T26470] syzkaller0: entered promiscuous mode [ 1852.102982][T26470] syzkaller0: entered allmulticast mode [ 1852.227053][T26470] tipc: Resetting bearer [ 1852.298913][T26467] tipc: Resetting bearer [ 1852.490698][T26467] tipc: Disabling bearer [ 1852.667579][T26483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6049'. [ 1852.781598][T12797] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1852.979333][T12797] usb 2-1: Using ep0 maxpacket: 32 [ 1852.996561][T12797] usb 2-1: config 0 has an invalid interface number: 73 but max is 0 [ 1853.034587][T12797] usb 2-1: config 0 has no interface number 0 [ 1853.060641][T12797] usb 2-1: too many endpoints for config 0 interface 73 altsetting 118: 194, using maximum allowed: 30 [ 1853.090414][T12797] usb 2-1: config 0 interface 73 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 1853.153797][T12797] usb 2-1: config 0 interface 73 has no altsetting 0 [ 1853.166048][T12797] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1853.178805][T12797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.188700][T12797] usb 2-1: Product: syz [ 1853.193066][T12797] usb 2-1: Manufacturer: syz [ 1853.197940][T12797] usb 2-1: SerialNumber: syz [ 1853.330147][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.351431][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.369059][T12797] usb 2-1: config 0 descriptor?? [ 1853.805184][T12797] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1853.843877][T12797] gspca_stk1135: reg_w 0x2 err -71 [ 1853.871141][T12797] gspca_stk1135: serial bus timeout: status=0x00 [ 1853.902385][T12797] gspca_stk1135: Sensor write failed [ 1853.938766][T12797] gspca_stk1135: serial bus timeout: status=0x00 [ 1853.969234][T12797] gspca_stk1135: Sensor write failed [ 1853.975330][T12797] gspca_stk1135: serial bus timeout: status=0x00 [ 1854.015151][T12797] gspca_stk1135: Sensor read failed [ 1854.032395][T12797] gspca_stk1135: serial bus timeout: status=0x00 [ 1854.039031][T12797] gspca_stk1135: Sensor read failed [ 1854.052274][T12797] gspca_stk1135: Detected sensor type unknown (0x0) [ 1854.059073][T12797] gspca_stk1135: serial bus timeout: status=0x00 [ 1854.105262][T12797] gspca_stk1135: Sensor read failed [ 1854.113271][T12797] gspca_stk1135: serial bus timeout: status=0x00 [ 1854.125763][T12797] gspca_stk1135: Sensor read failed [ 1854.131486][T12797] gspca_stk1135: serial bus timeout: status=0x00 [ 1854.137864][T12797] gspca_stk1135: Sensor write failed [ 1854.149890][T12797] gspca_stk1135: serial bus timeout: status=0x00 [ 1854.156380][T12797] gspca_stk1135: Sensor write failed [ 1854.170494][T12797] stk1135: probe of 2-1:0.73 failed with error -71 [ 1854.186223][T12797] usb 2-1: USB disconnect, device number 36 [ 1855.509257][T12796] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1855.844841][T12796] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1855.856120][T12796] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1855.866017][T12796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.669940][T12796] usb 3-1: config 0 descriptor?? [ 1856.732695][T12796] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1856.956713][T12797] usb 3-1: USB disconnect, device number 24 [ 1857.208769][T26554] vlan0: entered promiscuous mode [ 1857.311229][T26556] syzkaller0: entered promiscuous mode [ 1857.316789][T26556] syzkaller0: entered allmulticast mode [ 1857.672802][T12797] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1857.869353][T12797] usb 3-1: Using ep0 maxpacket: 16 [ 1857.886328][T12797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.898766][T12797] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1857.908444][T12797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.017893][T12797] usb 3-1: config 0 descriptor?? [ 1858.621672][T12797] usbhid 3-1:0.0: can't add hid device: -71 [ 1858.627882][T12797] usbhid: probe of 3-1:0.0 failed with error -71 [ 1858.642645][T12797] usb 3-1: USB disconnect, device number 25 [ 1859.365106][T26591] syzkaller0: entered promiscuous mode [ 1859.390742][T26591] syzkaller0: entered allmulticast mode [ 1859.631708][T26567] loop1: detected capacity change from 0 to 32768 [ 1859.707577][T26567] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1859.835294][T26567] XFS (loop1): Ending clean mount [ 1859.863103][T26567] XFS (loop1): Quotacheck needed: Please wait. [ 1859.966989][T26567] XFS (loop1): Quotacheck: Done. [ 1860.102330][T26590] loop3: detected capacity change from 0 to 32768 [ 1860.199369][T26590] (syz.3.6083,26590,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1860.243775][T26590] (syz.3.6083,26590,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1860.354261][T26590] (syz.3.6083,26590,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1860.374804][T26590] JBD2: Ignoring recovery information on journal [ 1860.814187][T26590] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1860.983246][T22176] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1862.260757][T24050] ocfs2: Unmounting device (7,3) on (node local) [ 1862.642206][T26649] loop2: detected capacity change from 0 to 1024 [ 1862.668424][T26649] EXT4-fs: Ignoring removed oldalloc option [ 1862.686965][T26649] EXT4-fs: Ignoring removed orlov option [ 1862.726317][T26649] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1862.820073][T26649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1862.929369][T12797] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1863.109450][T12797] usb 2-1: Using ep0 maxpacket: 16 [ 1863.116510][T12797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1863.135918][T12797] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1863.156633][T12797] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1863.197460][T12797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.236575][T12797] usb 2-1: config 0 descriptor?? [ 1863.359369][T12796] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1863.600419][T12796] usb 4-1: config 0 has no interfaces? [ 1863.659649][T12796] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1863.692715][T12796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.710237][T12796] usb 4-1: Product: syz [ 1863.714828][T12796] usb 4-1: Manufacturer: syz [ 1863.735144][T12796] usb 4-1: SerialNumber: syz [ 1863.752306][T12796] usb 4-1: config 0 descriptor?? [ 1864.014520][T21482] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1865.657833][ T9394] usb 2-1: USB disconnect, device number 37 [ 1865.733546][T12797] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1865.755029][T26693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6110'. [ 1865.769572][T12799] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1865.949393][T12797] usb 1-1: Using ep0 maxpacket: 8 [ 1865.961315][T12799] usb 3-1: Using ep0 maxpacket: 32 [ 1865.972159][T12797] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1865.985920][T12799] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1866.022339][T12797] usb 1-1: config 0 has no interface number 0 [ 1866.039494][T12799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.047723][T12799] usb 3-1: Product: syz [ 1866.081191][T12797] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 1866.119220][T12799] usb 3-1: Manufacturer: syz [ 1866.137584][T12797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.201082][T12799] usb 3-1: SerialNumber: syz [ 1866.259507][ T9394] usb 4-1: USB disconnect, device number 49 [ 1866.269126][T12797] usb 1-1: Product: syz [ 1866.274055][T12797] usb 1-1: Manufacturer: syz [ 1866.282892][T12799] usb 3-1: config 0 descriptor?? [ 1866.311067][T12799] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1866.318787][T12797] usb 1-1: SerialNumber: syz [ 1866.341774][T12797] usb 1-1: config 0 descriptor?? [ 1866.373822][T12797] redrat3 1-1:0.31: Couldn't find all endpoints [ 1867.262166][T26711] kvm: user requested TSC rate below hardware speed [ 1867.316063][T26711] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 1867.979617][ T9394] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1868.189433][ T9394] usb 4-1: Using ep0 maxpacket: 16 [ 1868.200902][ T9394] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.219465][ T9394] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1868.250901][ T9394] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1868.257770][ T9394] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1868.284795][ T9394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.305421][ T9394] usb 4-1: config 0 descriptor?? [ 1868.323288][ T9394] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1868.328899][T12799] gspca_stk1135: reg_w 0x203 err -71 [ 1868.351308][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1868.388824][T12799] gspca_stk1135: Sensor write failed [ 1868.399360][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1868.419419][T12799] gspca_stk1135: Sensor write failed [ 1868.425172][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1868.449254][T12799] gspca_stk1135: Sensor read failed [ 1868.459278][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1868.466039][T12799] gspca_stk1135: Sensor read failed [ 1868.479325][T12799] gspca_stk1135: Detected sensor type unknown (0x0) [ 1868.486189][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1868.508486][T12797] usb 1-1: USB disconnect, device number 36 [ 1868.524235][T12799] gspca_stk1135: Sensor read failed [ 1868.545661][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1868.556879][T12799] gspca_stk1135: Sensor read failed [ 1868.567645][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1868.578631][T12799] gspca_stk1135: Sensor write failed [ 1868.588842][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1868.595797][T12799] gspca_stk1135: Sensor write failed [ 1868.605368][T12799] stk1135: probe of 3-1:0.0 failed with error -71 [ 1868.624610][T12799] usb 3-1: USB disconnect, device number 26 [ 1868.969496][T20588] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1869.032103][T26738] kvm: user requested TSC rate below hardware speed [ 1869.052285][T26738] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 1869.187512][T20588] usb 2-1: config 0 has no interfaces? [ 1870.626803][T20588] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1870.679232][T20588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.750400][T20588] usb 2-1: Product: syz [ 1870.781709][T20588] usb 2-1: Manufacturer: syz [ 1870.933434][T20588] usb 2-1: SerialNumber: syz [ 1871.123206][T20588] usb 2-1: config 0 descriptor?? [ 1871.572389][T26819] fuse: Bad value for 'fd' [ 1871.667900][ T54] usb 4-1: USB disconnect, device number 50 [ 1871.839380][ T9394] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1872.039341][ T9394] usb 3-1: Using ep0 maxpacket: 8 [ 1872.056377][ T9394] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1872.081285][ T9394] usb 3-1: config 0 has no interface number 0 [ 1872.103019][ T9394] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 1872.121370][ T9394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.145052][ T9394] usb 3-1: Product: syz [ 1872.153905][ T9394] usb 3-1: Manufacturer: syz [ 1872.173315][ T9394] usb 3-1: SerialNumber: syz [ 1872.178986][T26832] kvm: user requested TSC rate below hardware speed [ 1872.204631][ T9394] usb 3-1: config 0 descriptor?? [ 1872.226919][ T9394] redrat3 3-1:0.31: Couldn't find all endpoints [ 1872.253559][T26832] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 1872.397840][T26839] fuse: Bad value for 'fd' [ 1872.759545][T12799] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1873.549333][T12799] usb 4-1: Using ep0 maxpacket: 16 [ 1873.561328][T12799] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1873.602925][T12799] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1873.671198][T12799] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1873.694023][T12799] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1873.719248][T12799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.742876][T12799] usb 4-1: config 0 descriptor?? [ 1873.765260][T12799] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1873.827604][T12799] usb 2-1: USB disconnect, device number 38 [ 1874.323463][T26859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6150'. [ 1874.427658][T12799] usb 3-1: USB disconnect, device number 27 [ 1875.154940][T26878] loop2: detected capacity change from 0 to 1024 [ 1875.565402][T26884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6159'. [ 1875.758488][T12804] usb 4-1: USB disconnect, device number 51 [ 1875.898164][T26897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6165'. [ 1875.957330][T26900] syz_tun: entered promiscuous mode [ 1875.966092][T26900] vlan2: entered promiscuous mode [ 1876.309404][T20588] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1876.540214][T20588] usb 3-1: Using ep0 maxpacket: 8 [ 1876.573238][T20588] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1876.589357][T20588] usb 3-1: config 0 has no interface number 0 [ 1876.612024][T20588] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 1876.634983][T20588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.657081][T20588] usb 3-1: Product: syz [ 1876.669350][T20588] usb 3-1: Manufacturer: syz [ 1876.674128][T20588] usb 3-1: SerialNumber: syz [ 1876.703549][T20588] usb 3-1: config 0 descriptor?? [ 1876.731140][T20588] redrat3 3-1:0.31: Couldn't find all endpoints [ 1876.761390][T26910] loop1: detected capacity change from 0 to 4096 [ 1876.844829][T26913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6170'. [ 1876.888596][T26910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1877.114391][T26910] fs-verity: sha256 using implementation "sha256-avx2" [ 1877.374462][T26920] loop3: detected capacity change from 0 to 32768 [ 1877.397109][T26920] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.6171 (26920) [ 1877.456000][T26920] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1877.472169][T26920] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1877.485608][T26920] BTRFS info (device loop3): force clearing of disk cache [ 1877.494337][T26920] BTRFS info (device loop3): enabling auto defrag [ 1877.502864][T26920] BTRFS info (device loop3): max_inline at 0 [ 1877.510866][T26920] BTRFS info (device loop3): enabling disk space caching [ 1877.518174][T26920] BTRFS info (device loop3): disk space caching is enabled [ 1877.534839][T26910] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1877.997417][T26920] BTRFS info (device loop3): enabling ssd optimizations [ 1878.077262][T26920] BTRFS info (device loop3): rebuilding free space tree [ 1878.122663][T26920] BTRFS info (device loop3): disabling free space tree [ 1878.138097][T26920] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1878.166107][T26920] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1878.176930][T12799] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1878.402935][T12799] usb 1-1: Using ep0 maxpacket: 16 [ 1878.584057][T12799] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1878.600611][T12799] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1878.617236][T12799] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1878.624721][T12799] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1879.520134][T12799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.534064][T12799] usb 1-1: config 0 descriptor?? [ 1879.558286][T12799] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1879.794317][ T1086] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 1880.025053][T12797] usb 3-1: USB disconnect, device number 28 [ 1880.224753][T24050] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1880.808852][T26958] loop3: detected capacity change from 0 to 1024 [ 1881.301269][T26961] loop3: detected capacity change from 0 to 256 [ 1881.398315][T26961] FAT-fs (loop3): Directory bread(block 64) failed [ 1881.415216][T26961] FAT-fs (loop3): Directory bread(block 65) failed [ 1881.439809][T26961] FAT-fs (loop3): Directory bread(block 66) failed [ 1881.469320][T26961] FAT-fs (loop3): Directory bread(block 67) failed [ 1881.488648][T26961] FAT-fs (loop3): Directory bread(block 68) failed [ 1881.499313][T26961] FAT-fs (loop3): Directory bread(block 69) failed [ 1881.507416][T26961] FAT-fs (loop3): Directory bread(block 70) failed [ 1881.535613][T26961] FAT-fs (loop3): Directory bread(block 71) failed [ 1881.550070][T26961] FAT-fs (loop3): Directory bread(block 72) failed [ 1881.560324][T26961] FAT-fs (loop3): Directory bread(block 73) failed [ 1881.569368][T12797] usb 1-1: USB disconnect, device number 37 [ 1882.479386][T12797] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1882.603070][T12801] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1882.727886][T12797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.796941][T12797] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1882.871493][T12801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.916833][T12797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.984410][T12801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1883.110673][T12797] usb 4-1: config 0 descriptor?? [ 1883.129361][T12801] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1883.179702][T12801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.231236][T12801] usb 2-1: config 0 descriptor?? [ 1883.347091][T12797] usbhid 4-1:0.0: can't add hid device: -71 [ 1883.359791][T12797] usbhid: probe of 4-1:0.0 failed with error -71 [ 1883.387128][T12797] usb 4-1: USB disconnect, device number 52 [ 1883.442729][T26978] kvm: user requested TSC rate below hardware speed [ 1883.452389][T26978] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 1883.685545][T12801] cp2112 0003:10C4:EA90.0053: unknown main item tag 0x0 [ 1883.703349][T12801] cp2112 0003:10C4:EA90.0053: unknown main item tag 0x0 [ 1883.719487][T12801] cp2112 0003:10C4:EA90.0053: unknown main item tag 0x0 [ 1883.737005][T12801] cp2112 0003:10C4:EA90.0053: unknown main item tag 0x0 [ 1883.747207][T12801] cp2112 0003:10C4:EA90.0053: unknown main item tag 0x0 [ 1883.767597][T12801] cp2112 0003:10C4:EA90.0053: unknown main item tag 0x0 [ 1883.777773][T12801] cp2112 0003:10C4:EA90.0053: unknown main item tag 0x0 [ 1883.801331][T12801] cp2112 0003:10C4:EA90.0053: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1883.890765][T12801] cp2112 0003:10C4:EA90.0053: error requesting version [ 1883.940770][T12801] cp2112: probe of 0003:10C4:EA90.0053 failed with error -32 [ 1885.609381][T12801] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1885.911555][T12801] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1885.920209][T12801] usb 4-1: not running at top speed; connect to a high speed hub [ 1885.935536][T12801] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.946008][T12801] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1886.609322][T12801] usb 4-1: config 1 has no interface number 1 [ 1886.615655][T12801] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1886.659466][T12799] usb 2-1: USB disconnect, device number 39 [ 1886.681046][T12801] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1886.704944][T12801] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1886.715607][T12801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.731297][T12801] usb 4-1: Product: syz [ 1886.735639][T12801] usb 4-1: Manufacturer: syz [ 1886.751964][T12801] usb 4-1: SerialNumber: syz [ 1886.993166][T12801] hub 4-1:1.0: Invalid hub with more than one config or interface [ 1887.029242][T12801] hub: probe of 4-1:1.0 failed with error -22 [ 1887.114239][T12801] usb 4-1: USB disconnect, device number 53 [ 1887.946440][T27035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6201'. [ 1888.159296][T27038] syz_tun: entered promiscuous mode [ 1888.168304][T27038] vlan2: entered promiscuous mode [ 1888.667562][T27032] loop2: detected capacity change from 0 to 40427 [ 1888.711387][T27032] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 1888.733621][T27032] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1888.771331][T27032] F2FS-fs (loop2): invalid crc value [ 1888.908013][T27032] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1888.921688][T27032] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1889.174508][T27046] tipc: Enabled bearer , priority 0 [ 1889.200522][T27046] syzkaller0: entered promiscuous mode [ 1889.216526][T27046] syzkaller0: entered allmulticast mode [ 1889.251367][T27046] tipc: Resetting bearer [ 1889.268888][T21482] bio_check_eod: 182 callbacks suppressed [ 1889.268908][T21482] syz-executor: attempt to access beyond end of device [ 1889.268908][T21482] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1889.293824][T27045] tipc: Resetting bearer [ 1889.302517][T21482] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1889.329346][ T9394] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1889.377955][T27045] tipc: Disabling bearer [ 1889.561286][ T9394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1889.573079][ T9394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1889.584009][ T9394] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1889.605755][ T9394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.612551][T27052] nbd3: detected capacity change from 0 to 4 [ 1889.653495][ T9394] usb 2-1: config 0 descriptor?? [ 1889.704557][T27053] block nbd3: shutting down sockets [ 1889.729905][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1889.739090][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1889.756119][T12356] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1889.768182][T12356] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1889.780582][ T5798] ldm_validate_partition_table(): Disk read failed. [ 1889.798348][ T5798] Dev nbd3: unable to read RDB block 0 [ 1889.804372][ T5798] nbd3: unable to read partition table [ 1889.816905][ T5798] nbd3: partition table beyond EOD, truncated [ 1889.983377][T27060] loop3: detected capacity change from 0 to 1024 [ 1890.058065][T27060] overlay: filesystem on ./bus not supported [ 1890.083947][ T9394] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1890.095728][ T1086] hfsplus: b-tree write err: -5, ino 4 [ 1890.107412][ T9394] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1890.117939][ T9394] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1890.130586][ T9394] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1890.137716][ T9394] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1890.149360][T12796] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1890.161087][ T9394] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1890.168615][ T9394] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1890.200766][ T9394] cp2112 0003:10C4:EA90.0054: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1890.344708][ T9394] cp2112 0003:10C4:EA90.0054: error requesting version [ 1890.381174][ T9394] cp2112: probe of 0003:10C4:EA90.0054 failed with error -32 [ 1890.630365][T12796] usb 3-1: Using ep0 maxpacket: 32 [ 1890.655507][T12796] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1890.665345][T12796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.683650][T12796] usb 3-1: Product: syz [ 1891.365694][T12796] usb 3-1: Manufacturer: syz [ 1891.370824][T12796] usb 3-1: SerialNumber: syz [ 1891.433687][T12796] usb 3-1: config 0 descriptor?? [ 1891.480957][T12796] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1892.738687][T27081] loop3: detected capacity change from 0 to 32768 [ 1892.756924][T27081] jfs: Unrecognized mount option "" or missing value [ 1892.909434][T12796] gspca_stk1135: reg_w 0x0 err -110 [ 1892.919676][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1892.926115][T12796] gspca_stk1135: Sensor write failed [ 1892.933839][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1892.941492][T12796] gspca_stk1135: Sensor write failed [ 1892.946949][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1892.953691][T12796] gspca_stk1135: Sensor read failed [ 1892.959806][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1892.966189][T12796] gspca_stk1135: Sensor read failed [ 1893.034848][T12796] gspca_stk1135: Detected sensor type unknown (0x0) [ 1893.070881][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1893.084945][T12796] gspca_stk1135: Sensor read failed [ 1893.102391][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1893.117883][T12796] gspca_stk1135: Sensor read failed [ 1893.180563][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1893.207004][T12796] gspca_stk1135: Sensor write failed [ 1893.221462][T12796] gspca_stk1135: serial bus timeout: status=0x00 [ 1893.237012][T12796] gspca_stk1135: Sensor write failed [ 1893.248142][T12796] stk1135: probe of 3-1:0.0 failed with error -110 [ 1893.992193][T12801] usb 3-1: USB disconnect, device number 29 [ 1894.899061][T12799] usb 2-1: USB disconnect, device number 40 [ 1895.027005][T27101] loop2: detected capacity change from 0 to 1024 [ 1895.108119][T27101] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1895.179435][T27101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1895.268712][T27108] kvm: user requested TSC rate below hardware speed [ 1895.284567][T27108] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 1896.654656][T21482] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1896.857381][T27127] loop3: detected capacity change from 0 to 256 [ 1896.913511][T27127] FAT-fs (loop3): Directory bread(block 64) failed [ 1896.939572][T27127] FAT-fs (loop3): Directory bread(block 65) failed [ 1896.946285][T27127] FAT-fs (loop3): Directory bread(block 66) failed [ 1896.961315][T27129] tipc: Enabled bearer , priority 0 [ 1896.979716][T27127] FAT-fs (loop3): Directory bread(block 67) failed [ 1896.999034][T27127] FAT-fs (loop3): Directory bread(block 68) failed [ 1897.000890][T27129] syzkaller0: entered promiscuous mode [ 1897.008237][T27127] FAT-fs (loop3): Directory bread(block 69) failed [ 1897.018374][T27127] FAT-fs (loop3): Directory bread(block 70) failed [ 1897.036067][T27129] syzkaller0: entered allmulticast mode [ 1897.048711][T27127] FAT-fs (loop3): Directory bread(block 71) failed [ 1897.062063][T27127] FAT-fs (loop3): Directory bread(block 72) failed [ 1897.068751][T27127] FAT-fs (loop3): Directory bread(block 73) failed [ 1897.096037][T27132] loop1: detected capacity change from 0 to 4096 [ 1897.140527][T27129] tipc: Resetting bearer [ 1897.152769][T27128] tipc: Resetting bearer [ 1897.174376][T27132] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1897.237103][T27128] tipc: Disabling bearer [ 1897.243180][T12799] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1897.395796][T27135] vlan2: entered promiscuous mode [ 1897.446452][T12799] usb 3-1: Using ep0 maxpacket: 32 [ 1897.466123][T12799] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1897.499656][T12799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.518410][T12799] usb 3-1: Product: syz [ 1897.528552][T12799] usb 3-1: Manufacturer: syz [ 1897.556987][T12799] usb 3-1: SerialNumber: syz [ 1897.573726][T12799] usb 3-1: config 0 descriptor?? [ 1897.593474][T12799] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1899.428140][T27162] loop3: detected capacity change from 0 to 64 [ 1899.971071][T12799] gspca_stk1135: reg_w 0x203 err -71 [ 1900.006183][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1900.056195][T12799] gspca_stk1135: Sensor write failed [ 1900.076563][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1900.106352][T12799] gspca_stk1135: Sensor write failed [ 1900.135555][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1900.164142][T12799] gspca_stk1135: Sensor read failed [ 1900.177284][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1900.186172][T12799] gspca_stk1135: Sensor read failed [ 1900.199487][T12799] gspca_stk1135: Detected sensor type unknown (0x0) [ 1900.206233][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1900.216805][T27171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6246'. [ 1900.229458][T12799] gspca_stk1135: Sensor read failed [ 1900.238657][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1900.249452][T12799] gspca_stk1135: Sensor read failed [ 1900.254738][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1900.284237][T12799] gspca_stk1135: Sensor write failed [ 1900.293001][T12799] gspca_stk1135: serial bus timeout: status=0x00 [ 1900.310374][T12799] gspca_stk1135: Sensor write failed [ 1900.315882][T12799] stk1135: probe of 3-1:0.0 failed with error -71 [ 1900.337804][T12799] usb 3-1: USB disconnect, device number 30 [ 1901.917337][T27177] loop3: detected capacity change from 0 to 32768 [ 1901.931380][T27194] loop2: detected capacity change from 0 to 16 [ 1901.938726][T27194] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1901.998585][ T5798] udevd[5798]: incorrect cramfs checksum on /dev/loop2 [ 1902.024961][T27177] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1902.455681][T27196] loop1: detected capacity change from 0 to 8192 [ 1902.694219][T27196] loop1: [ICS] [ 1902.759414][T24050] ocfs2: Unmounting device (7,3) on (node local) [ 1903.356960][T27213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6261'. [ 1903.859403][T12796] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1903.899051][T12799] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1904.053840][ T5101] Bluetooth: hci1: unexpected event for opcode 0x200b [ 1904.061208][T12801] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1904.169632][T12799] usb 2-1: Using ep0 maxpacket: 16 [ 1904.188210][T12799] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1904.200466][T12799] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1904.207528][T12799] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1904.739338][T12796] usb 3-1: Using ep0 maxpacket: 8 [ 1904.797524][T12799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.811691][T12801] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1904.822365][T12801] usb 4-1: not running at top speed; connect to a high speed hub [ 1904.827254][T12796] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1904.840866][T12799] usb 2-1: config 0 descriptor?? [ 1904.859881][T12801] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1904.870586][T12799] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1904.874671][T12796] usb 3-1: config 0 has no interface number 0 [ 1904.887422][T12801] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1904.896531][T12801] usb 4-1: config 1 has no interface number 1 [ 1904.903144][T12801] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1904.919798][T12801] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1904.927358][T12796] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 1904.958400][T12796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.976861][T12796] usb 3-1: Product: syz [ 1904.987061][T12796] usb 3-1: Manufacturer: syz [ 1904.997306][T12796] usb 3-1: SerialNumber: syz [ 1905.011315][T12796] usb 3-1: config 0 descriptor?? [ 1905.030611][T12796] redrat3 3-1:0.31: Couldn't find all endpoints [ 1905.061194][T12801] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1905.112437][T27235] tipc: Enabled bearer , priority 0 [ 1905.122648][T27235] syzkaller0: entered promiscuous mode [ 1905.128145][T27235] syzkaller0: entered allmulticast mode [ 1905.138949][T12801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.148274][T27235] tipc: Resetting bearer [ 1905.159647][T27234] tipc: Resetting bearer [ 1905.186309][T27234] tipc: Disabling bearer [ 1905.199078][T12801] usb 4-1: Product: syz [ 1905.203803][T12801] usb 4-1: Manufacturer: syz [ 1905.208512][T12801] usb 4-1: SerialNumber: syz [ 1905.486856][T12801] hub 4-1:1.0: Invalid hub with more than one config or interface [ 1905.495089][T12801] hub: probe of 4-1:1.0 failed with error -22 [ 1905.523999][T12801] usb 4-1: USB disconnect, device number 54 [ 1906.395224][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1906.474281][T27244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6271'. [ 1906.863463][T12801] usb 3-1: USB disconnect, device number 31 [ 1906.872841][T27252] kvm: user requested TSC rate below hardware speed [ 1906.915220][T27252] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 1906.963912][T27256] syzkaller0: entered promiscuous mode [ 1906.978408][T27256] syzkaller0: entered allmulticast mode [ 1908.209335][T12797] usb 2-1: USB disconnect, device number 41 [ 1908.468960][T27265] loop2: detected capacity change from 0 to 4096 [ 1908.536172][T27265] ntfs3: loop2: failed to replay log file. Can't mount rw! [ 1909.812012][T27280] loop3: detected capacity change from 0 to 256 [ 1909.888614][T27277] loop1: detected capacity change from 0 to 4096 [ 1910.027870][T27277] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1910.558054][T27287] loop1: detected capacity change from 0 to 2048 [ 1910.582063][T27287] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1910.639112][T27289] syzkaller0: entered promiscuous mode [ 1910.646480][T27289] syzkaller0: entered allmulticast mode [ 1910.653344][T27291] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1911.032837][T27295] nbd3: detected capacity change from 0 to 4 [ 1912.042215][ T5101] block nbd3: Receive control failed (result -104) [ 1912.517497][T27321] loop1: detected capacity change from 0 to 4096 [ 1912.528322][T27321] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1912.611513][T27321] ntfs3: loop1: Failed to load $Extend (-22). [ 1912.625768][T27321] ntfs3: loop1: Failed to initialize $Extend. [ 1912.924525][T12804] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 1912.974133][T12804] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1914.426687][T27346] loop2: detected capacity change from 0 to 24 [ 1914.437406][T27346] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1914.471178][T27346] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1914.720232][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.726997][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.225751][T27348] loop2: detected capacity change from 0 to 256 [ 1915.350248][T27348] FAT-fs (loop2): Directory bread(block 64) failed [ 1915.367149][T27348] FAT-fs (loop2): Directory bread(block 65) failed [ 1915.398447][T27348] FAT-fs (loop2): Directory bread(block 66) failed [ 1915.405489][T27348] FAT-fs (loop2): Directory bread(block 67) failed [ 1915.424727][T27348] FAT-fs (loop2): Directory bread(block 68) failed [ 1915.434424][T27348] FAT-fs (loop2): Directory bread(block 69) failed [ 1915.442127][T27348] FAT-fs (loop2): Directory bread(block 70) failed [ 1915.455082][T27348] FAT-fs (loop2): Directory bread(block 71) failed [ 1915.462332][T27348] FAT-fs (loop2): Directory bread(block 72) failed [ 1915.469008][T27348] FAT-fs (loop2): Directory bread(block 73) failed [ 1917.126968][T27352] loop1: detected capacity change from 0 to 32768 [ 1917.172484][T27352] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1917.365531][T27352] XFS (loop1): Ending clean mount [ 1917.404809][T27352] XFS (loop1): Quotacheck needed: Please wait. [ 1917.497903][T27352] XFS (loop1): Quotacheck: Done. [ 1918.304757][T22176] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1918.489711][T12797] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1918.689280][T12796] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1918.747445][T12797] usb 1-1: config 0 has no interfaces? [ 1918.763006][T12797] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1918.778820][T12797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.790707][T12797] usb 1-1: Product: syz [ 1918.794869][T12797] usb 1-1: Manufacturer: syz [ 1918.803096][T12797] usb 1-1: SerialNumber: syz [ 1918.815507][T12797] usb 1-1: config 0 descriptor?? [ 1918.883765][T12796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1918.904180][T12796] usb 3-1: not running at top speed; connect to a high speed hub [ 1918.922234][T12796] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1918.943159][T12796] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1918.960196][T12796] usb 3-1: config 1 has no interface number 1 [ 1918.966403][T12796] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1918.986346][T12796] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1919.007137][T12796] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1919.016458][T12796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.029449][T12796] usb 3-1: Product: syz [ 1919.038370][T12796] usb 3-1: Manufacturer: syz [ 1919.043869][T12796] usb 3-1: SerialNumber: syz [ 1919.267644][T12796] hub 3-1:1.0: Invalid hub with more than one config or interface [ 1919.279015][T12796] hub: probe of 3-1:1.0 failed with error -22 [ 1919.297381][T12796] usb 3-1: USB disconnect, device number 32 [ 1920.751114][T12799] usb 1-1: USB disconnect, device number 38 [ 1921.359280][T12799] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1921.496089][T27412] tipc: Enabled bearer , priority 0 [ 1921.509507][T27412] syzkaller0: entered promiscuous mode [ 1921.515616][T27412] syzkaller0: entered allmulticast mode [ 1921.559267][T12799] usb 1-1: Using ep0 maxpacket: 16 [ 1921.565666][T27411] tipc: Resetting bearer [ 1921.567026][T12799] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1921.589692][T12799] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.626722][T12799] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1921.633952][T12799] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1921.645518][T12799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.655514][T27411] tipc: Disabling bearer [ 1921.656672][T12799] usb 1-1: config 0 descriptor?? [ 1922.120000][T12799] nzxt-smart2 0003:1E71:2009.0056: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1922.369338][T12799] usb 1-1: USB disconnect, device number 39 [ 1922.526381][T27414] loop2: detected capacity change from 0 to 40427 [ 1922.545249][T27414] F2FS-fs (loop2): invalid crc value [ 1922.558936][T27414] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1922.654559][T27414] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1922.830478][T21482] syz-executor: attempt to access beyond end of device [ 1922.830478][T21482] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1922.847423][T21482] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1923.403026][T27434] loop1: detected capacity change from 0 to 1024 [ 1923.429431][T12797] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1923.603625][T27440] tipc: Enabled bearer , priority 0 [ 1923.615851][T27440] syzkaller0: entered promiscuous mode [ 1923.623434][T27440] syzkaller0: entered allmulticast mode [ 1923.676966][T27439] tipc: Resetting bearer [ 1923.794333][T12797] usb 1-1: config 0 has no interfaces? [ 1923.814808][T27439] tipc: Disabling bearer [ 1923.834502][T12797] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1923.862751][T12797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.912107][T12797] usb 1-1: Product: syz [ 1923.923402][T12797] usb 1-1: Manufacturer: syz [ 1923.962152][T12797] usb 1-1: SerialNumber: syz [ 1923.985298][T12797] usb 1-1: config 0 descriptor?? [ 1924.865234][T27450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6330'. [ 1924.939292][ T54] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1924.987342][T27452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6331'. [ 1925.169374][ T54] usb 2-1: Using ep0 maxpacket: 32 [ 1925.188809][ T54] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1925.226736][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.235893][ T54] usb 2-1: Product: syz [ 1925.247460][ T54] usb 2-1: Manufacturer: syz [ 1925.252962][ T54] usb 2-1: SerialNumber: syz [ 1925.268762][ T54] usb 2-1: config 0 descriptor?? [ 1925.278759][ T54] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1926.437733][T27463] tipc: Enabled bearer , priority 0 [ 1926.446532][T27463] syzkaller0: entered promiscuous mode [ 1926.453077][T27463] syzkaller0: entered allmulticast mode [ 1926.498273][T27462] tipc: Resetting bearer [ 1926.537270][T24262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1926.569608][T27462] tipc: Disabling bearer [ 1926.575512][T24262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1926.585906][T24262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1926.597187][T24262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1926.607671][T24262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1926.615647][T24262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1926.774045][T26035] usb 1-1: USB disconnect, device number 40 [ 1927.104503][T27464] chnl_net:caif_netlink_parms(): no params data found [ 1927.245661][T27464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1927.254270][T27464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.262756][T27464] bridge_slave_0: entered allmulticast mode [ 1927.271436][T27464] bridge_slave_0: entered promiscuous mode [ 1927.282453][T27464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1927.291049][T27464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.298515][T27464] bridge_slave_1: entered allmulticast mode [ 1927.307318][T27464] bridge_slave_1: entered promiscuous mode [ 1927.374874][ T54] gspca_stk1135: reg_w 0x203 err -71 [ 1927.390435][T27464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1927.399883][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1927.406251][ T54] gspca_stk1135: Sensor write failed [ 1927.419051][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1927.426865][ T54] gspca_stk1135: Sensor write failed [ 1927.428862][T27464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1927.432896][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1927.448942][ T54] gspca_stk1135: Sensor read failed [ 1927.455851][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1927.462627][ T54] gspca_stk1135: Sensor read failed [ 1927.468038][ T54] gspca_stk1135: Detected sensor type unknown (0x0) [ 1927.475214][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1927.487172][ T54] gspca_stk1135: Sensor read failed [ 1927.492952][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1927.500066][ T54] gspca_stk1135: Sensor read failed [ 1927.505476][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1927.516356][ T54] gspca_stk1135: Sensor write failed [ 1927.522011][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 1927.528825][ T54] gspca_stk1135: Sensor write failed [ 1927.542031][T27464] team0: Port device team_slave_0 added [ 1927.542773][ T54] stk1135: probe of 2-1:0.0 failed with error -71 [ 1927.567809][ T54] usb 2-1: USB disconnect, device number 42 [ 1927.568647][T27464] team0: Port device team_slave_1 added [ 1927.651359][T27464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1927.658606][T27464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1927.687957][T27464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1927.702917][T27464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1927.710461][T27464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1927.736720][T27464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1927.848150][T27464] hsr_slave_0: entered promiscuous mode [ 1927.864519][T27464] hsr_slave_1: entered promiscuous mode [ 1927.880107][T27464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1927.888799][T27464] Cannot create hsr debugfs directory [ 1928.060039][T27479] syzkaller0: entered promiscuous mode [ 1928.066468][T27479] syzkaller0: entered allmulticast mode [ 1928.396920][T27488] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1928.731620][ T5101] Bluetooth: hci2: command tx timeout [ 1929.233541][T27464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1929.249962][T27464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1929.266656][T27464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1929.281504][T27464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1929.434410][T27464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1929.472050][T27464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1929.496824][T26803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1929.503988][T26803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1929.538321][T26803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1929.545475][T26803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1929.892157][T27464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1930.278091][T27464] veth0_vlan: entered promiscuous mode [ 1930.293234][T27464] veth1_vlan: entered promiscuous mode [ 1930.322327][T27464] veth0_macvtap: entered promiscuous mode [ 1930.334509][T27464] veth1_macvtap: entered promiscuous mode [ 1930.351376][T27464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.363268][T27464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.373173][T27464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.386919][T27464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.397712][T27464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.408298][T27464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.418536][T27464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.429452][T27464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.441023][T27464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1930.458348][T27464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1930.468990][T27464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.480986][T27464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1930.492370][T27464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.502446][T27464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1930.513665][T27464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.523911][T27464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1930.534475][T27464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.546030][T27464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1930.558995][T27464] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.568314][T27464] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.578212][T27464] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.587847][T27464] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.703309][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.714671][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.736419][T26779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.751643][T26779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.819999][ T5101] Bluetooth: hci2: command tx timeout [ 1932.889332][ T5101] Bluetooth: hci2: command tx timeout [ 1934.972895][ T5101] Bluetooth: hci2: command tx timeout [ 1941.536222][T12358] block nbd3: Possible stuck request ffff888022188000: control (read@0,2048B). Runtime 30 seconds [ 1971.618784][T12358] block nbd3: Possible stuck request ffff888022188000: control (read@0,2048B). Runtime 60 seconds [ 1976.092319][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.098708][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2001.690347][T12358] block nbd3: Possible stuck request ffff888022188000: control (read@0,2048B). Runtime 90 seconds [ 2031.769535][T12358] block nbd3: Possible stuck request ffff888022188000: control (read@0,2048B). Runtime 120 seconds [ 2037.532184][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.539023][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2049.853568][T24262] Bluetooth: hci2: command 0x0406 tx timeout [ 2054.809450][ T28] INFO: task syz.3.6288:27302 blocked for more than 143 seconds. [ 2054.817222][ T28] Not tainted 6.6.102-syzkaller #0 [ 2054.822907][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2054.831736][ T28] task:syz.3.6288 state:D stack:27912 pid:27302 ppid:24050 flags:0x00004004 [ 2054.841162][ T28] Call Trace: [ 2054.844485][ T28] [ 2054.847456][ T28] __schedule+0x14d2/0x44d0 [ 2054.852514][ T28] ? asan.module_dtor+0x20/0x20 [ 2054.857413][ T28] ? __mutex_lock+0x6b2/0xcc0 [ 2054.862234][ T28] ? __mutex_trylock_common+0x84/0x250 [ 2054.867834][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2054.874215][ T28] schedule+0xbd/0x170 [ 2054.878411][ T28] schedule_preempt_disabled+0x13/0x20 [ 2054.883992][ T28] __mutex_lock+0x6b7/0xcc0 [ 2054.888515][ T28] ? __mutex_lock+0x4e8/0xcc0 [ 2054.893365][ T28] ? blkdev_get_by_dev+0x121/0x600 [ 2054.898484][ T28] ? mutex_lock_nested+0x20/0x20 [ 2054.903611][ T28] ? iput+0x347/0x920 [ 2054.907618][ T28] ? ilookup+0x1c4/0x200 [ 2054.911897][ T28] ? disk_block_events+0xa7/0x120 [ 2054.916924][ T28] ? blkdev_get_by_dev+0xf7/0x600 [ 2054.922069][ T28] blkdev_get_by_dev+0x121/0x600 [ 2054.927035][ T28] blkdev_open+0x152/0x360 [ 2054.931530][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 2054.936163][ T28] do_dentry_open+0x8c6/0x1500 [ 2054.941041][ T28] path_openat+0x274b/0x3190 [ 2054.945674][ T28] ? do_filp_open+0x3d0/0x3d0 [ 2054.950644][ T28] do_filp_open+0x1c5/0x3d0 [ 2054.955295][ T28] ? vfs_tmpfile+0x490/0x490 [ 2054.960044][ T28] ? _raw_spin_unlock+0x28/0x40 [ 2054.964940][ T28] ? alloc_fd+0x58f/0x630 [ 2054.971781][ T28] do_sys_openat2+0x12c/0x1c0 [ 2054.976638][ T28] ? _raw_spin_unlock+0x40/0x40 [ 2054.982073][ T28] ? do_sys_open+0xe0/0xe0 [ 2054.986540][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2054.992748][ T28] ? lock_chain_count+0x20/0x20 [ 2054.997729][ T28] ? lock_chain_count+0x20/0x20 [ 2055.002860][ T28] __x64_sys_openat+0x139/0x160 [ 2055.007756][ T28] do_syscall_64+0x55/0xb0 [ 2055.012372][ T28] ? clear_bhb_loop+0x40/0x90 [ 2055.017081][ T28] ? clear_bhb_loop+0x40/0x90 [ 2055.021821][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2055.027724][ T28] RIP: 0033:0x7fe2a6f8d550 [ 2055.032249][ T28] RSP: 002b:00007fe2a7d20b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2055.040749][ T28] RAX: ffffffffffffffda RBX: 0000000000000840 RCX: 00007fe2a6f8d550 [ 2055.048749][ T28] RDX: 0000000000000840 RSI: 00007fe2a7d20c10 RDI: 00000000ffffff9c [ 2055.057252][ T28] RBP: 00007fe2a7d20c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 2055.065451][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 2055.073638][ T28] R13: 00007fe2a71b6128 R14: 00007fe2a71b6090 R15: 00007ffeaeace878 [ 2055.081727][ T28] [ 2055.084754][ T28] [ 2055.084754][ T28] Showing all locks held in the system: [ 2055.092524][ T28] 1 lock held by khungtaskd/28: [ 2055.097383][ T28] #0: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2055.107306][ T28] 1 lock held by udevd/5155: [ 2055.112045][ T28] #0: ffff88802205b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2055.122242][ T28] 2 locks held by getty/5550: [ 2055.126951][ T28] #0: ffff88823bd368a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2055.136884][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 2055.147302][ T28] 1 lock held by udevd/5798: [ 2055.152226][ T28] #0: ffff88802205b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2055.162592][ T28] 1 lock held by syz.3.6288/27295: [ 2055.167927][ T28] #0: ffff88802205b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xff/0x760 [ 2055.177340][ T28] 1 lock held by syz.3.6288/27302: [ 2055.182656][ T28] #0: ffff88802205b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2055.192854][ T28] [ 2055.195190][ T28] ============================================= [ 2055.195190][ T28] [ 2055.203683][ T28] NMI backtrace for cpu 0 [ 2055.208026][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.6.102-syzkaller #0 [ 2055.215916][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2055.225973][ T28] Call Trace: [ 2055.229257][ T28] [ 2055.232212][ T28] dump_stack_lvl+0x16c/0x230 [ 2055.236896][ T28] ? preempt_count_add+0x91/0x1a0 [ 2055.241934][ T28] ? show_regs_print_info+0x20/0x20 [ 2055.247128][ T28] ? load_image+0x3b0/0x3b0 [ 2055.251645][ T28] nmi_cpu_backtrace+0x39b/0x3d0 [ 2055.256570][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2055.262822][ T28] ? _printk+0xd0/0x110 [ 2055.266999][ T28] ? load_image+0x3b0/0x3b0 [ 2055.271528][ T28] ? load_image+0x3b0/0x3b0 [ 2055.276046][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2055.282131][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2055.288122][ T28] watchdog+0xf41/0xf80 [ 2055.292299][ T28] ? watchdog+0x1e1/0xf80 [ 2055.296647][ T28] kthread+0x2fa/0x390 [ 2055.300725][ T28] ? hungtask_pm_notify+0x90/0x90 [ 2055.305854][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2055.310536][ T28] ret_from_fork+0x48/0x80 [ 2055.314957][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2055.319566][ T28] ret_from_fork_asm+0x11/0x20 [ 2055.324355][ T28] [ 2055.328089][ T28] Sending NMI from CPU 0 to CPUs 1: [ 2055.333476][ C1] NMI backtrace for cpu 1 [ 2055.333487][ C1] CPU: 1 PID: 23584 Comm: kworker/u4:4 Not tainted 6.6.102-syzkaller #0 [ 2055.333504][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2055.333513][ C1] Workqueue: bat_events batadv_nc_worker [ 2055.333537][ C1] RIP: 0010:__lock_acquire+0x41b/0x7c80 [ 2055.333558][ C1] Code: 60 10 4c 89 e0 48 c1 e8 03 48 89 84 24 e0 00 00 00 42 80 3c 00 00 74 12 4c 89 e7 e8 ff ca 75 00 49 b8 00 00 00 00 00 fc ff df <4c> 89 64 24 68 48 8b 84 24 88 00 00 00 49 89 46 10 49 83 c6 18 4c [ 2055.333571][ C1] RSP: 0018:ffffc9000b9ff7c0 EFLAGS: 00000046 [ 2055.333584][ C1] RAX: 1ffff110063a08e8 RBX: 0000000000000000 RCX: 1ffff110063a08ea [ 2055.333595][ C1] RDX: ffff888031d04728 RSI: 0000000000000002 RDI: ffff888031d04738 [ 2055.333607][ C1] RBP: ffffc9000b9ffa08 R08: dffffc0000000000 R09: 0000000000000000 [ 2055.333617][ C1] R10: dffffc0000000000 R11: fffffbfff1c95106 R12: ffff888031d04740 [ 2055.333629][ C1] R13: 0000000000000021 R14: ffff888031d04730 R15: 0000000000000000 [ 2055.333639][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2055.333653][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2055.333664][ C1] CR2: 0000562832551660 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 2055.333680][ C1] Call Trace: [ 2055.333686][ C1] [ 2055.333704][ C1] ? verify_lock_unused+0x140/0x140 [ 2055.333721][ C1] ? bond_mii_monitor+0x2b90/0x2d00 [ 2055.333742][ C1] ? verify_lock_unused+0x140/0x140 [ 2055.333763][ C1] lock_acquire+0x197/0x410 [ 2055.333778][ C1] ? batadv_nc_worker+0xd2/0x610 [ 2055.333798][ C1] ? batadv_nc_worker+0xd2/0x610 [ 2055.333815][ C1] ? read_lock_is_recursive+0x20/0x20 [ 2055.333831][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2055.333850][ C1] ? batadv_nc_worker+0xd2/0x610 [ 2055.333867][ C1] batadv_nc_worker+0xef/0x610 [ 2055.333883][ C1] ? batadv_nc_worker+0xd2/0x610 [ 2055.333901][ C1] ? process_scheduled_works+0x957/0x15b0 [ 2055.333919][ C1] process_scheduled_works+0xa45/0x15b0 [ 2055.333946][ C1] ? assign_work+0x400/0x400 [ 2055.333965][ C1] ? assign_work+0x39e/0x400 [ 2055.333983][ C1] worker_thread+0xa55/0xfc0 [ 2055.334000][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2055.334022][ C1] ? _raw_spin_unlock+0x40/0x40 [ 2055.334040][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 2055.334076][ C1] kthread+0x2fa/0x390 [ 2055.334090][ C1] ? pr_cont_work+0x560/0x560 [ 2055.334107][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2055.334121][ C1] ret_from_fork+0x48/0x80 [ 2055.334137][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2055.334151][ C1] ret_from_fork_asm+0x11/0x20 [ 2055.334175][ C1] [ 2055.334784][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2055.599089][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.6.102-syzkaller #0 [ 2055.607084][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2055.617297][ T28] Call Trace: [ 2055.620690][ T28] [ 2055.623633][ T28] dump_stack_lvl+0x16c/0x230 [ 2055.628332][ T28] ? show_regs_print_info+0x20/0x20 [ 2055.633541][ T28] ? load_image+0x3b0/0x3b0 [ 2055.638067][ T28] panic+0x2c0/0x710 [ 2055.641986][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 2055.647860][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 2055.652460][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 2055.658013][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2055.664273][ T28] watchdog+0xf80/0xf80 [ 2055.668448][ T28] ? watchdog+0x1e1/0xf80 [ 2055.672794][ T28] kthread+0x2fa/0x390 [ 2055.676866][ T28] ? hungtask_pm_notify+0x90/0x90 [ 2055.681900][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2055.686580][ T28] ret_from_fork+0x48/0x80 [ 2055.691002][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2055.695597][ T28] ret_from_fork_asm+0x11/0x20 [ 2055.700413][ T28] [ 2055.703682][ T28] Kernel Offset: disabled [ 2055.708083][ T28] Rebooting in 86400 seconds..