last executing test programs: 1m25.6944023s ago: executing program 4 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) socket$inet6(0xa, 0x2, 0x3a) write(r1, &(0x7f0000000240)='1\x00', 0x1) syz_open_procfs(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1', 0x1) 1m25.476972945s ago: executing program 4 (id=213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m24.87929876s ago: executing program 4 (id=220): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000580)=0xa300010) 1m24.584551657s ago: executing program 4 (id=221): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x141) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='p:s/_ ./file0:0', 0xf) 1m24.227423046s ago: executing program 4 (id=222): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 1m20.311285984s ago: executing program 4 (id=231): syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x32, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000007c0)={'fscrypt:', @auto=[0x36, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x5, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x39, 0x30, 0x30, 0x66, 0x30, 0x38, 0x30, 0x30, 0x31, 0x39, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x6f, 0x30, 0x62, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x35, 0x30, 0x32, 0x30, 0x30, 0x32, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$user(&(0x7f0000000540), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000240)="1d", 0x6, r0) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000400), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000d00)="3e12", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r3}, 0x0, 0x0, 0x0) 1m19.888571744s ago: executing program 32 (id=231): syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x32, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000007c0)={'fscrypt:', @auto=[0x36, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x5, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x39, 0x30, 0x30, 0x66, 0x30, 0x38, 0x30, 0x30, 0x31, 0x39, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x6f, 0x30, 0x62, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x35, 0x30, 0x32, 0x30, 0x30, 0x32, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$user(&(0x7f0000000540), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000240)="1d", 0x6, r0) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000400), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000d00)="3e12", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r3}, 0x0, 0x0, 0x0) 5.900260605s ago: executing program 3 (id=881): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r1, &(0x7f00000006c0)=@tipc=@id, &(0x7f0000000740)=0x80) 5.28715444s ago: executing program 3 (id=885): connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) 4.49947621s ago: executing program 1 (id=893): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x2, 0x7fff8000}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x5) 3.521373403s ago: executing program 3 (id=899): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 3.359472298s ago: executing program 1 (id=901): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0xe35, &(0x7f00000001c0)={0x0, 0xb561, 0x800, 0x2, 0x10}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000380)=@in6={0xa, 0x4e20, 0x4, @loopback, 0x1}}) io_uring_enter(r1, 0x5, 0x1, 0x1, 0x0, 0x1) 3.359270587s ago: executing program 2 (id=902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0x9, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) 3.338458428s ago: executing program 5 (id=903): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0\x00'}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 3.245986381s ago: executing program 3 (id=904): syz_open_dev$sndctrl(&(0x7f0000000100), 0xf32, 0x101400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) syz_io_uring_setup(0x18d7, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80009) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x35, 0x24, 0xd0f, 0x70bd28, 0xfffffffc, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_BASE_RATE64={0xfffffffffffffc83, 0x2, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) ioctl$HIDIOCGFLAG(r7, 0x8004480e, &(0x7f0000000140)) 3.147507473s ago: executing program 0 (id=905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000fac0)={0x0, 0x0, &(0x7f000000fa80)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) 3.147317303s ago: executing program 1 (id=906): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0xfffffffe, 0x0) 3.140750713s ago: executing program 5 (id=907): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') close_range(r0, 0xffffffffffffffff, 0x0) 3.120369304s ago: executing program 2 (id=908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888, 0x20}]}}}}}}}, 0x0) 2.503567329s ago: executing program 2 (id=909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000019c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 2.503446369s ago: executing program 0 (id=910): r0 = syz_open_dev$vbi(&(0x7f0000000300), 0x1, 0x2) ppoll(&(0x7f0000000240)=[{r0, 0xbc}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) 2.45541703s ago: executing program 5 (id=911): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c900"], 0x22) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) accept(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) 2.356061952s ago: executing program 1 (id=912): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5800003a, r0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x8e2fe, 0x114) fallocate(r2, 0x0, 0x0, 0x1000f4) 2.163503277s ago: executing program 2 (id=913): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = fanotify_init(0x1a, 0x800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r1, 0x641, 0x1028, r2, 0x0) 1.970439332s ago: executing program 1 (id=914): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x400, 0x1, 0x233}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3a4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x800, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.425337205s ago: executing program 5 (id=915): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24008814) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 1.351511697s ago: executing program 0 (id=916): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001a3434d38ff03000000020000"], 0x24}}, 0x0) 1.141432062s ago: executing program 3 (id=917): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x200000000) 1.140378222s ago: executing program 0 (id=918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d80", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 384.282941ms ago: executing program 5 (id=919): setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000004000000040000000a"], 0x50) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c00028005000100980000003c0003800c00028005000100110000002c00018014000300fe80000000000000000000000000002a14000400ff010000000000000000000000000001300002802c00018014000300ff"], 0xbc}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x5b, &(0x7f00000001c0)}, 0x10) 313.228712ms ago: executing program 2 (id=920): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) read(r2, &(0x7f0000001000)=""/8192, 0x2000) 267.415223ms ago: executing program 0 (id=921): r0 = socket(0x1e, 0x4, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000140)) 263.454574ms ago: executing program 3 (id=922): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ed) rmdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac1.usb0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x15, 0x0, 0x3, 0x3000006, 'U\x00', "1575a859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "fa0700f22b42a3023be516d1"]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, 0x0) 244.297404ms ago: executing program 1 (id=923): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31]}}]}) 135.442227ms ago: executing program 5 (id=924): pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) socket(0x27, 0x800, 0xffff6959) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) close_range(r0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 62.321339ms ago: executing program 0 (id=925): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3c, 0x2, 0x4, "d02066000000000000000000565c000f30807278f8983c3c0a31965ebd9ca8ac", 0x20363059}) 0s ago: executing program 2 (id=926): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)="7465b6fcb6030f6d67bc9fca17fe5a5e53c9b7872138f8e825d27468616e646c652048", 0x23) kernel console output (not intermixed with test programs): oth: hci1: command 0x040f tx timeout [ 86.292102][ T4285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.301737][ T4297] Bluetooth: hci0: command 0x040f tx timeout [ 86.315573][ T4285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.334640][ T4289] device veth1_macvtap entered promiscuous mode [ 86.345883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.364625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.372810][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 86.379225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.397607][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.409121][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.422032][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.438024][ T4293] device veth0_vlan entered promiscuous mode [ 86.444701][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 86.444712][ T4297] Bluetooth: hci2: command 0x040f tx timeout [ 86.466568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.474867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.484105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.492649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.513702][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.525655][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.537194][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.561874][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.580987][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.591459][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.627959][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.649795][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.676799][ T4293] device veth1_vlan entered promiscuous mode [ 86.685843][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.694301][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.723541][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.732382][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.755444][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.776920][ T4284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.789982][ T4284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.808996][ T4284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.820088][ T4284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.914673][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.935549][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.982856][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.003381][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.034128][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.071304][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.082280][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.118730][ T4289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.129030][ T4289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.138105][ T4289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.147060][ T4289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.181153][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.195654][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.204777][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.214953][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.253216][ T4293] device veth0_macvtap entered promiscuous mode [ 87.269128][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.278794][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.287635][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.305312][ T4298] device veth0_vlan entered promiscuous mode [ 87.313563][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.321590][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.361929][ T4293] device veth1_macvtap entered promiscuous mode [ 87.382182][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.394474][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.402411][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.412369][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.442594][ T4298] device veth1_vlan entered promiscuous mode [ 87.479390][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.496007][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.522014][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.552874][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.562733][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.579154][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.593554][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.604280][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.616973][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.625078][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.639159][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.648219][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.656671][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.665871][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.697190][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.708801][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.720464][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.732330][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.743337][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.753968][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.765630][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.773881][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.782427][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.794997][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.808024][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.824748][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.832616][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.852036][ T4298] device veth0_macvtap entered promiscuous mode [ 87.866322][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.879434][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.898550][ T4293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.915818][ T4293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.928524][ T4293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.940213][ T4293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.956458][ T4298] device veth1_macvtap entered promiscuous mode [ 87.982523][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.022137][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.053430][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.061287][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.106219][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.117794][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.130081][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.140853][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.151359][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.175726][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.187552][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.198772][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.211696][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.219451][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.228628][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.244343][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.268964][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.289330][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.291480][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.316242][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.324447][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.334943][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.345609][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.355647][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.363521][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 88.369842][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.372117][ T4294] Bluetooth: hci1: command 0x0419 tx timeout [ 88.391236][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.404029][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.419308][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.434509][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.443218][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 88.451385][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.467766][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.510839][ T4298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.523522][ T4294] Bluetooth: hci2: command 0x0419 tx timeout [ 88.529596][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 88.537809][ T4298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.552841][ T4298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.561641][ T4298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.823022][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.830898][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.845948][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.864537][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.883828][ T4382] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 88.904330][ T4382] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 88.923729][ T4382] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 88.931794][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.934160][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.950213][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.954973][ T4382] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 88.967240][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.991347][ T4382] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 89.001318][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.031392][ T4382] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 89.049988][ T4382] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 89.057752][ T4386] binder_alloc: 4385: pid 4385 spamming oneway? 2 buffers allocated for a total size of 5120 [ 89.081167][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.097654][ T4382] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 89.118241][ T4382] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 89.119580][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.136676][ T4382] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 89.151814][ T4382] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 89.177760][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.210527][ T4382] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 89.239606][ T4382] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 89.263099][ T4382] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 89.292987][ T4382] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 89.313838][ T4382] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 89.352383][ T4382] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 89.377052][ T4382] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 89.394541][ T4382] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 89.401179][ T4382] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 89.421281][ T4382] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 89.450951][ T4382] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 89.478358][ T4382] comedi comedi0: 8255: I/O port conflict (0xa,4) [ 89.499948][ T4382] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 89.520450][ T4382] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 89.794384][ T4404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 90.190811][ T4422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 90.206665][ T4416] netlink: 'syz.1.21': attribute type 11 has an invalid length. [ 90.763460][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.980968][ T7] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 91.000635][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.061582][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 91.108214][ T7] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.151357][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.203324][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.232286][ T4459] device batadv_slave_1 entered promiscuous mode [ 91.249717][ T4458] device batadv_slave_1 left promiscuous mode [ 91.289982][ T7] usb 4-1: invalid MIDI out EP 0 [ 91.415367][ T4466] device vti0 entered promiscuous mode [ 91.497028][ T7] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 91.543590][ T7] usb 4-1: USB disconnect, device number 2 [ 91.623087][ T4333] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.726519][ T27] cfg80211: failed to load regulatory.db [ 91.819486][ T4473] udevd[4473]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.835707][ T4333] usb 1-1: Using ep0 maxpacket: 16 [ 91.843589][ T4333] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.873269][ T4482] binder_alloc: 4481: pid 4481 spamming oneway? 2 buffers allocated for a total size of 5120 [ 91.915498][ T4333] usb 1-1: config 0 interface 0 has no altsetting 0 [ 91.922157][ T4333] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 91.954191][ T4484] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.972704][ T4333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.996113][ T4333] usb 1-1: config 0 descriptor?? [ 92.454412][ T4333] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 92.553308][ T4503] capability: warning: `syz.1.59' uses deprecated v2 capabilities in a way that may be insecure [ 92.838499][ T4333] usb 1-1: USB disconnect, device number 2 [ 92.892619][ T4506] fido_id[4506]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 95.005572][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 95.017950][ T27] hid-generic 0005:0B57:05DF.0002: item fetching failed at offset 0/1 [ 95.048642][ T27] hid-generic: probe of 0005:0B57:05DF.0002 failed with error -22 [ 95.409815][ T4631] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f800 [ 95.548818][ T4636] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 95.575098][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.634794][ T4639] syz.1.110 uses obsolete (PF_INET,SOCK_PACKET) [ 95.750385][ T4636] CIFS: Attempting to mount \\127.0.0.1\share [ 95.767948][ T4636] CIFS: VFS: No username specified [ 95.905989][ T4652] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.977212][ T4652] kvm: pic: non byte read [ 96.017898][ T4652] kvm: pic: level sensitive irq not supported [ 96.018438][ T4652] kvm: pic: non byte read [ 96.035893][ T4652] kvm: pic: level sensitive irq not supported [ 96.036015][ T4652] kvm: pic: non byte read [ 96.048040][ T4652] kvm: pic: level sensitive irq not supported [ 96.048144][ T4652] kvm: pic: non byte read [ 96.059280][ T4652] kvm: pic: level sensitive irq not supported [ 96.059426][ T4652] kvm: pic: non byte read [ 96.135448][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 96.149124][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 96.180643][ T4666] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 96.180789][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 96.263213][ T130] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.278898][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 96.303472][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 96.329616][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 96.395552][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 96.450966][ T4664] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 96.465462][ T4670] Bluetooth: MGMT ver 1.22 [ 96.502470][ T130] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.514834][ T130] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.544296][ T130] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.568945][ T130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.600844][ T130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.630567][ T130] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.655029][ T130] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.683413][ T130] usb 4-1: Product: syz [ 96.692219][ T130] usb 4-1: Manufacturer: syz [ 96.707265][ T130] cdc_wdm 4-1:1.0: skipping garbage [ 96.723256][ T130] cdc_wdm 4-1:1.0: skipping garbage [ 96.779178][ T130] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 96.785365][ T130] cdc_wdm 4-1:1.0: Unknown control protocol [ 96.915299][ T4662] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 96.934297][ T4374] usb 4-1: USB disconnect, device number 3 [ 97.093046][ T130] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.134826][ T4691] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.285271][ T130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.302356][ T130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.313950][ T130] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 97.323720][ T130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.344012][ T130] usb 3-1: config 0 descriptor?? [ 97.763210][ T130] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 97.770554][ T130] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 97.795274][ T130] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0003/input/input5 [ 97.838099][ T130] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 97.970035][ T7] usb 3-1: USB disconnect, device number 2 [ 98.060417][ T4708] fido_id[4708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 98.430144][ T4715] support for cryptoloop has been removed. Use dm-crypt instead. [ 98.665195][ T4721] device syzkaller0 entered promiscuous mode [ 98.743810][ T4646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.979149][ T4728] gadgetfs: bound to dummy_udc driver [ 99.227635][ T4744] overlayfs: invalid origin (0000) [ 99.426231][ T4752] Zero length message leads to an empty skb [ 99.848885][ T4767] device syzkaller0 entered promiscuous mode [ 100.041979][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 100.573753][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 101.529327][ T4783] XFS (nullb0): Invalid superblock magic number [ 101.822269][ T4796] input: syz0 as /devices/virtual/input/input6 [ 103.391836][ T4810] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.402201][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 103.547483][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 103.644779][ T4817] kvm: pic: non byte read [ 103.649250][ T4817] kvm: pic: non byte read [ 103.683305][ T4817] kvm: pic: non byte read [ 103.697409][ T4817] kvm: pic: non byte read [ 103.729032][ T4817] kvm: pic: non byte read [ 103.743346][ T4817] kvm: pic: non byte read [ 103.748066][ T4817] kvm: pic: non byte read [ 103.769121][ T4817] kvm: pic: non byte read [ 103.785784][ T4817] kvm: pic: non byte read [ 103.790397][ T4817] kvm: pic: non byte read [ 103.795259][ T4827] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 103.829631][ T4829] 9pnet_virtio: no channels available for device syz [ 103.839531][ T4827] overlayfs: missing 'lowerdir' [ 104.172448][ T4843] 9pnet_virtio: no channels available for device syz [ 104.244302][ T4843] overlayfs: overlapping lowerdir path [ 104.446804][ T4854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.196'. [ 105.291642][ T4886] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 105.497637][ T26] audit: type=1800 audit(1786376601.796:2): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.212" name="memory_backed" dev="configfs" ino=38282 res=0 errno=0 [ 105.518229][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.526330][ T26] audit: type=1800 audit(1786376601.796:3): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.212" name="zoned" dev="configfs" ino=38283 res=0 errno=0 [ 105.546721][ T26] audit: type=1800 audit(1786376601.816:4): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.212" name="power" dev="configfs" ino=38285 res=0 errno=0 [ 105.606771][ T4902] null_blk: disk my_zoned_dev created [ 105.764687][ T4907] xt_hashlimit: size too large, truncated to 1048576 [ 105.794730][ T4904] kvm [4903]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 106.294652][ T4917] loop3: detected capacity change from 0 to 7 [ 106.321811][ T4917] loop3: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 106.321926][ T4917] loop3: partition table partially beyond EOD, [ 106.409019][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.549899][ T4917] truncated [ 106.560128][ T4917] loop3: p1 size 8 extends beyond EOD, truncated [ 106.589289][ T4917] loop3: p4 size 4294967295 extends beyond EOD, truncated [ 106.617071][ T4917] loop3: p5 size 8 extends beyond EOD, truncated [ 106.643327][ T4917] loop3: p6 size 8 extends beyond EOD, truncated [ 106.668922][ T4917] loop3: p7 size 8 extends beyond EOD, truncated [ 106.689450][ T4917] loop3: p8 size 8 extends beyond EOD, truncated [ 106.707474][ T4917] loop3: p9 size 8 extends beyond EOD, truncated [ 106.738117][ T4917] loop3: p10 size 8 extends beyond EOD, truncated [ 106.758593][ T4917] loop3: p11 size 8 extends beyond EOD, truncated [ 106.784561][ T4917] loop3: p12 size 8 extends beyond EOD, truncated [ 106.803399][ T4917] loop3: p13 size 8 extends beyond EOD, truncated [ 106.814019][ T4917] loop3: p14 size 8 extends beyond EOD, truncated [ 106.839139][ T4917] loop3: p15 size 8 extends beyond EOD, truncated [ 106.860677][ T4917] loop3: p16 size 8 extends beyond EOD, truncated [ 106.888107][ T4917] loop3: p17 size 8 extends beyond EOD, truncated [ 106.908821][ T4917] loop3: p18 size 8 extends beyond EOD, truncated [ 106.932021][ T4917] loop3: p19 size 8 extends beyond EOD, truncated [ 106.943781][ T4917] loop3: p20 size 8 extends beyond EOD, truncated [ 106.966044][ T4917] loop3: p21 size 8 extends beyond EOD, truncated [ 106.994594][ T4917] loop3: p22 size 8 extends beyond EOD, truncated [ 107.018641][ T4917] loop3: p23 size 8 extends beyond EOD, truncated [ 107.063139][ T4917] loop3: p24 size 8 extends beyond EOD, truncated [ 107.093017][ T4917] loop3: p25 size 8 extends beyond EOD, truncated [ 107.130732][ T4917] loop3: p26 size 8 extends beyond EOD, truncated [ 107.142097][ T4917] loop3: p27 size 8 extends beyond EOD, truncated [ 107.150329][ T4917] loop3: p28 size 8 extends beyond EOD, truncated [ 107.178636][ T4917] loop3: p29 size 8 extends beyond EOD, truncated [ 107.188632][ T4919] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.196943][ T4919] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.223002][ T4917] loop3: p30 size 8 extends beyond EOD, truncated [ 107.235037][ T4917] loop3: p31 size 8 extends beyond EOD, truncated [ 107.262667][ T4917] loop3: p32 size 8 extends beyond EOD, truncated [ 107.281480][ T4917] loop3: p33 size 8 extends beyond EOD, truncated [ 107.297829][ T4917] loop3: p34 size 8 extends beyond EOD, truncated [ 107.320856][ T4917] loop3: p35 size 8 extends beyond EOD, truncated [ 107.345881][ T4917] loop3: p36 size 8 extends beyond EOD, truncated [ 107.367818][ T4917] loop3: p37 size 8 extends beyond EOD, truncated [ 107.388076][ T4917] loop3: p38 size 8 extends beyond EOD, truncated [ 107.407875][ T4917] loop3: p39 size 8 extends beyond EOD, truncated [ 107.430118][ T4917] loop3: p40 size 8 extends beyond EOD, truncated [ 107.452699][ T4917] loop3: p41 size 8 extends beyond EOD, truncated [ 107.470379][ T4917] loop3: p42 size 8 extends beyond EOD, truncated [ 107.483693][ T4917] loop3: p43 size 8 extends beyond EOD, truncated [ 107.501153][ T4917] loop3: p44 size 8 extends beyond EOD, truncated [ 107.511272][ T4917] loop3: p45 size 8 extends beyond EOD, truncated [ 107.528399][ T4917] loop3: p46 size 8 extends beyond EOD, truncated [ 107.543661][ T4917] loop3: p47 size 8 extends beyond EOD, truncated [ 107.561667][ T4917] loop3: p48 size 8 extends beyond EOD, truncated [ 107.571802][ T4917] loop3: p49 size 8 extends beyond EOD, truncated [ 107.589925][ T4917] loop3: p50 size 8 extends beyond EOD, truncated [ 107.603366][ T4917] loop3: p51 size 8 extends beyond EOD, truncated [ 107.620985][ T4917] loop3: p52 size 8 extends beyond EOD, truncated [ 107.639041][ T4917] loop3: p53 size 8 extends beyond EOD, truncated [ 107.653734][ T4917] loop3: p54 size 8 extends beyond EOD, truncated [ 107.666326][ T4917] loop3: p55 size 8 extends beyond EOD, truncated [ 107.674019][ T4917] loop3: p56 size 8 extends beyond EOD, truncated [ 107.681275][ T4917] loop3: p57 size 8 extends beyond EOD, truncated [ 107.703777][ T4917] loop3: p58 size 8 extends beyond EOD, truncated [ 107.717553][ T4917] loop3: p59 size 8 extends beyond EOD, truncated [ 107.733675][ T4917] loop3: p60 size 8 extends beyond EOD, truncated [ 107.752272][ T4917] loop3: p61 size 8 extends beyond EOD, truncated [ 107.773247][ T4917] loop3: p62 size 8 extends beyond EOD, truncated [ 107.790933][ T4917] loop3: p63 size 8 extends beyond EOD, truncated [ 107.803183][ T4917] loop3: p64 size 8 extends beyond EOD, truncated [ 107.820729][ T4917] loop3: p65 size 8 extends beyond EOD, truncated [ 107.838662][ T4917] loop3: p66 size 8 extends beyond EOD, truncated [ 107.848469][ T4917] loop3: p67 size 8 extends beyond EOD, truncated [ 107.866553][ T4917] loop3: p68 size 8 extends beyond EOD, truncated [ 107.883985][ T4917] loop3: p69 size 8 extends beyond EOD, truncated [ 107.901524][ T4917] loop3: p70 size 8 extends beyond EOD, truncated [ 107.911723][ T4917] loop3: p71 size 8 extends beyond EOD, truncated [ 107.929727][ T4917] loop3: p72 size 8 extends beyond EOD, truncated [ 107.943628][ T4917] loop3: p73 size 8 extends beyond EOD, truncated [ 107.961194][ T4917] loop3: p74 size 8 extends beyond EOD, truncated [ 107.980333][ T4917] loop3: p75 size 8 extends beyond EOD, truncated [ 107.998104][ T4917] loop3: p76 size 8 extends beyond EOD, truncated [ 108.005803][ T4917] loop3: p77 size 8 extends beyond EOD, truncated [ 108.023499][ T4917] loop3: p78 size 8 extends beyond EOD, truncated [ 108.041002][ T4917] loop3: p79 size 8 extends beyond EOD, truncated [ 108.059091][ T4917] loop3: p80 size 8 extends beyond EOD, truncated [ 108.067467][ T4917] loop3: p81 size 8 extends beyond EOD, truncated [ 108.083810][ T4917] loop3: p82 size 8 extends beyond EOD, truncated [ 108.102931][ T4917] loop3: p83 size 8 extends beyond EOD, truncated [ 108.120540][ T4917] loop3: p84 size 8 extends beyond EOD, truncated [ 108.133951][ T4917] loop3: p85 size 8 extends beyond EOD, truncated [ 108.151662][ T4917] loop3: p86 size 8 extends beyond EOD, truncated [ 108.161805][ T4917] loop3: p87 size 8 extends beyond EOD, truncated [ 108.180607][ T4917] loop3: p88 size 8 extends beyond EOD, truncated [ 108.198447][ T4917] loop3: p89 size 8 extends beyond EOD, truncated [ 108.213003][ T4917] loop3: p90 size 8 extends beyond EOD, truncated [ 108.230646][ T4917] loop3: p91 size 8 extends beyond EOD, truncated [ 108.240770][ T4917] loop3: p92 size 8 extends beyond EOD, truncated [ 108.258756][ T4917] loop3: p93 size 8 extends beyond EOD, truncated [ 108.273691][ T4917] loop3: p94 size 8 extends beyond EOD, truncated [ 108.291951][ T4917] loop3: p95 size 8 extends beyond EOD, truncated [ 108.302994][ T4917] loop3: p96 size 8 extends beyond EOD, truncated [ 108.320675][ T4917] loop3: p97 size 8 extends beyond EOD, truncated [ 108.333929][ T4917] loop3: p98 size 8 extends beyond EOD, truncated [ 108.351449][ T4917] loop3: p99 size 8 extends beyond EOD, truncated [ 108.379301][ T4917] loop3: p100 size 8 extends beyond EOD, truncated [ 108.386766][ T4891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.403654][ T4917] loop3: p101 size 8 extends beyond EOD, truncated [ 108.405412][ T4919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.459698][ T4917] loop3: p102 size 8 extends beyond EOD, truncated [ 108.485061][ T4919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.492922][ T4917] loop3: p103 size 8 extends beyond EOD, truncated [ 108.507932][ T4917] loop3: p104 size 8 extends beyond EOD, truncated [ 108.521619][ T4917] loop3: p105 size 8 extends beyond EOD, truncated [ 108.540798][ T4917] loop3: p106 size 8 extends beyond EOD, truncated [ 108.557897][ T4917] loop3: p107 size 8 extends beyond EOD, truncated [ 108.583971][ T4917] loop3: p108 size 8 extends beyond EOD, truncated [ 108.613498][ T4917] loop3: p109 size 8 extends beyond EOD, truncated [ 108.631704][ T4917] loop3: p110 size 8 extends beyond EOD, truncated [ 108.655231][ T4917] loop3: p111 size 8 extends beyond EOD, truncated [ 108.672290][ T4917] loop3: p112 size 8 extends beyond EOD, truncated [ 108.690459][ T4917] loop3: p113 size 8 extends beyond EOD, truncated [ 108.708452][ T4917] loop3: p114 size 8 extends beyond EOD, truncated [ 108.726285][ T4917] loop3: p115 size 8 extends beyond EOD, truncated [ 108.747841][ T4917] loop3: p116 size 8 extends beyond EOD, truncated [ 108.758470][ T4917] loop3: p117 size 8 extends beyond EOD, truncated [ 108.769963][ T4917] loop3: p118 size 8 extends beyond EOD, truncated [ 108.809317][ T4917] loop3: p119 size 8 extends beyond EOD, truncated [ 108.817668][ T4917] loop3: p120 size 8 extends beyond EOD, truncated [ 108.825815][ T4917] loop3: p121 size 8 extends beyond EOD, truncated [ 108.842497][ T4917] loop3: p122 size 8 extends beyond EOD, truncated [ 108.850944][ T4917] loop3: p123 size 8 extends beyond EOD, truncated [ 108.882379][ T4917] loop3: p124 size 8 extends beyond EOD, truncated [ 108.913738][ T4917] loop3: p125 size 8 extends beyond EOD, truncated [ 108.922413][ T4917] loop3: p126 size 8 extends beyond EOD, truncated [ 108.968156][ T4917] loop3: p127 size 8 extends beyond EOD, truncated [ 108.994135][ T4917] loop3: p128 size 8 extends beyond EOD, truncated [ 109.004686][ T4917] loop3: p129 size 8 extends beyond EOD, truncated [ 109.032073][ T4917] loop3: p130 size 8 extends beyond EOD, truncated [ 109.054071][ T4917] loop3: p131 size 8 extends beyond EOD, truncated [ 109.062122][ T4917] loop3: p132 size 8 extends beyond EOD, truncated [ 109.087646][ T4917] loop3: p133 size 8 extends beyond EOD, truncated [ 109.124039][ T4917] loop3: p134 size 8 extends beyond EOD, truncated [ 109.137367][ T4917] loop3: p135 size 8 extends beyond EOD, truncated [ 109.164274][ T4917] loop3: p136 size 8 extends beyond EOD, truncated [ 109.194275][ T4917] loop3: p137 size 8 extends beyond EOD, truncated [ 109.235487][ T4917] loop3: p138 size 8 extends beyond EOD, truncated [ 109.261509][ T4917] loop3: p139 size 8 extends beyond EOD, truncated [ 109.281771][ T4917] loop3: p140 size 8 extends beyond EOD, truncated [ 109.303235][ T4917] loop3: p141 size 8 extends beyond EOD, truncated [ 109.322452][ T4917] loop3: p142 size 8 extends beyond EOD, truncated [ 109.353658][ T4917] loop3: p143 size 8 extends beyond EOD, truncated [ 109.379008][ T4917] loop3: p144 size 8 extends beyond EOD, truncated [ 109.420543][ T4917] loop3: p145 size 8 extends beyond EOD, truncated [ 109.440629][ T4917] loop3: p146 size 8 extends beyond EOD, truncated [ 109.450074][ T4917] loop3: p147 size 8 extends beyond EOD, truncated [ 109.467126][ T4917] loop3: p148 size 8 extends beyond EOD, truncated [ 109.475437][ T4917] loop3: p149 size 8 extends beyond EOD, truncated [ 109.486212][ T4917] loop3: p150 size 8 extends beyond EOD, truncated [ 109.500200][ T4917] loop3: p151 size 8 extends beyond EOD, truncated [ 109.552060][ T4917] loop3: p152 size 8 extends beyond EOD, truncated [ 109.573369][ T4917] loop3: p153 size 8 extends beyond EOD, truncated [ 109.581279][ T4917] loop3: p154 size 8 extends beyond EOD, truncated [ 109.589646][ T4917] loop3: p155 size 8 extends beyond EOD, truncated [ 109.598427][ T4917] loop3: p156 size 8 extends beyond EOD, truncated [ 109.606418][ T4917] loop3: p157 size 8 extends beyond EOD, truncated [ 109.614929][ T4917] loop3: p158 size 8 extends beyond EOD, truncated [ 109.628453][ T4917] loop3: p159 size 8 extends beyond EOD, truncated [ 109.636322][ T4917] loop3: p160 size 8 extends beyond EOD, truncated [ 109.644580][ T4917] loop3: p161 size 8 extends beyond EOD, truncated [ 109.652212][ T4917] loop3: p162 size 8 extends beyond EOD, truncated [ 109.660816][ T4917] loop3: p163 size 8 extends beyond EOD, truncated [ 109.670407][ T4917] loop3: p164 size 8 extends beyond EOD, truncated [ 109.678374][ T4917] loop3: p165 size 8 extends beyond EOD, truncated [ 109.686280][ T4917] loop3: p166 size 8 extends beyond EOD, truncated [ 109.693913][ T4917] loop3: p167 size 8 extends beyond EOD, truncated [ 109.702483][ T4917] loop3: p168 size 8 extends beyond EOD, truncated [ 109.710285][ T4917] loop3: p169 size 8 extends beyond EOD, truncated [ 109.739113][ T4917] loop3: p170 size 8 extends beyond EOD, truncated [ 109.746940][ T4917] loop3: p171 size 8 extends beyond EOD, truncated [ 109.755030][ T4917] loop3: p172 size 8 extends beyond EOD, truncated [ 109.764491][ T4917] loop3: p173 size 8 extends beyond EOD, truncated [ 109.772163][ T4917] loop3: p174 size 8 extends beyond EOD, truncated [ 109.780341][ T4917] loop3: p175 size 8 extends beyond EOD, truncated [ 109.791411][ T4917] loop3: p176 size 8 extends beyond EOD, truncated [ 109.799588][ T4917] loop3: p177 size 8 extends beyond EOD, truncated [ 109.809203][ T4917] loop3: p178 size 8 extends beyond EOD, truncated [ 109.817364][ T4917] loop3: p179 size 8 extends beyond EOD, truncated [ 109.825386][ T4917] loop3: p180 size 8 extends beyond EOD, truncated [ 109.833436][ T4917] loop3: p181 size 8 extends beyond EOD, truncated [ 109.841205][ T4917] loop3: p182 size 8 extends beyond EOD, truncated [ 109.849670][ T4917] loop3: p183 size 8 extends beyond EOD, truncated [ 109.857949][ T4917] loop3: p184 size 8 extends beyond EOD, truncated [ 109.866081][ T4917] loop3: p185 size 8 extends beyond EOD, truncated [ 109.874035][ T4917] loop3: p186 size 8 extends beyond EOD, truncated [ 109.881784][ T4917] loop3: p187 size 8 extends beyond EOD, truncated [ 109.891771][ T4917] loop3: p188 size 8 extends beyond EOD, truncated [ 109.901459][ T4917] loop3: p189 size 8 extends beyond EOD, truncated [ 109.914841][ T4917] loop3: p190 size 8 extends beyond EOD, truncated [ 109.922606][ T4917] loop3: p191 size 8 extends beyond EOD, truncated [ 109.930919][ T4917] loop3: p192 size 8 extends beyond EOD, truncated [ 109.939188][ T4917] loop3: p193 size 8 extends beyond EOD, truncated [ 109.947182][ T4917] loop3: p194 size 8 extends beyond EOD, truncated [ 109.955825][ T4917] loop3: p195 size 8 extends beyond EOD, truncated [ 109.963734][ T4917] loop3: p196 size 8 extends beyond EOD, truncated [ 109.971630][ T4917] loop3: p197 size 8 extends beyond EOD, truncated [ 109.985549][ T4917] loop3: p198 size 8 extends beyond EOD, truncated [ 110.000385][ T4917] loop3: p199 size 8 extends beyond EOD, truncated [ 110.010173][ T4917] loop3: p200 size 8 extends beyond EOD, truncated [ 110.023973][ T4917] loop3: p201 size 8 extends beyond EOD, truncated [ 110.031731][ T4917] loop3: p202 size 8 extends beyond EOD, truncated [ 110.045446][ T4917] loop3: p203 size 8 extends beyond EOD, truncated [ 110.057964][ T4917] loop3: p204 size 8 extends beyond EOD, truncated [ 110.068726][ T4917] loop3: p205 size 8 extends beyond EOD, truncated [ 110.080468][ T4917] loop3: p206 size 8 extends beyond EOD, truncated [ 110.080490][ T4919] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.089752][ T4917] loop3: p207 size 8 extends beyond EOD, [ 110.097902][ T4919] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.112898][ T4917] truncated [ 110.121371][ T4919] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.122183][ T4917] loop3: p208 size 8 extends beyond EOD, [ 110.131040][ T4919] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.147513][ T4917] truncated [ 110.155282][ T4917] loop3: p209 size 8 extends beyond EOD, truncated [ 110.178141][ T4917] loop3: p210 size 8 extends beyond EOD, truncated [ 110.185938][ T4917] loop3: p211 size 8 extends beyond EOD, truncated [ 110.213495][ T4917] loop3: p212 size 8 extends beyond EOD, truncated [ 110.243068][ T4917] loop3: p213 size 8 extends beyond EOD, truncated [ 110.251545][ T4917] loop3: p214 size 8 extends beyond EOD, truncated [ 110.264084][ T4917] loop3: p215 size 8 extends beyond EOD, truncated [ 110.276815][ T4917] loop3: p216 size 8 extends beyond EOD, truncated [ 110.287162][ T4917] loop3: p217 size 8 extends beyond EOD, truncated [ 110.295202][ T4917] loop3: p218 size 8 extends beyond EOD, truncated [ 110.303088][ T4917] loop3: p219 size 8 extends beyond EOD, truncated [ 110.310867][ T4917] loop3: p220 size 8 extends beyond EOD, truncated [ 110.319956][ T4917] loop3: p221 size 8 extends beyond EOD, truncated [ 110.330117][ T4917] loop3: p222 size 8 extends beyond EOD, truncated [ 110.344881][ T4917] loop3: p223 size 8 extends beyond EOD, truncated [ 110.363211][ T4917] loop3: p224 size 8 extends beyond EOD, truncated [ 110.370929][ T4917] loop3: p225 size 8 extends beyond EOD, truncated [ 110.387630][ T4917] loop3: p226 size 8 extends beyond EOD, truncated [ 110.404653][ T4917] loop3: p227 size 8 extends beyond EOD, truncated [ 110.412442][ T4917] loop3: p228 size 8 extends beyond EOD, truncated [ 110.421471][ T4917] loop3: p229 size 8 extends beyond EOD, truncated [ 110.429686][ T4917] loop3: p230 size 8 extends beyond EOD, truncated [ 110.438203][ T4917] loop3: p231 size 8 extends beyond EOD, truncated [ 110.446297][ T4917] loop3: p232 size 8 extends beyond EOD, truncated [ 110.456274][ T4917] loop3: p233 size 8 extends beyond EOD, truncated [ 110.465221][ T4917] loop3: p234 size 8 extends beyond EOD, truncated [ 110.478208][ T4917] loop3: p235 size 8 extends beyond EOD, truncated [ 110.487120][ T4917] loop3: p236 size 8 extends beyond EOD, truncated [ 110.499259][ T4917] loop3: p237 size 8 extends beyond EOD, truncated [ 110.509179][ T4917] loop3: p238 size 8 extends beyond EOD, truncated [ 110.558623][ T4917] loop3: p239 size 8 extends beyond EOD, truncated [ 110.589943][ T4917] loop3: p240 size 8 extends beyond EOD, truncated [ 110.626699][ T4917] loop3: p241 size 8 extends beyond EOD, truncated [ 110.644945][ T4917] loop3: p242 size 8 extends beyond EOD, truncated [ 110.655976][ T4917] loop3: p243 size 8 extends beyond EOD, truncated [ 110.664529][ T4917] loop3: p244 size 8 extends beyond EOD, truncated [ 110.672176][ T4917] loop3: p245 size 8 extends beyond EOD, truncated [ 110.718614][ T4917] loop3: p246 size 8 extends beyond EOD, truncated [ 110.739204][ T4917] loop3: p247 size 8 extends beyond EOD, truncated [ 110.746849][ T4917] loop3: p248 size 8 extends beyond EOD, truncated [ 110.754363][ T4917] loop3: p249 size 8 extends beyond EOD, truncated [ 110.761869][ T4917] loop3: p250 size 8 extends beyond EOD, truncated [ 110.771944][ T4917] loop3: p251 size 8 extends beyond EOD, truncated [ 110.779728][ T4917] loop3: p252 size 8 extends beyond EOD, truncated [ 110.800243][ T4917] loop3: p253 size 8 extends beyond EOD, truncated [ 110.843995][ T4917] loop3: p254 size 8 extends beyond EOD, truncated [ 110.868863][ T4917] loop3: p255 size 8 extends beyond EOD, truncated [ 110.999128][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.147152][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.327949][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.816014][ T26] audit: type=1326 audit(1786376608.116:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4983 comm="syz.2.242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3db9b9e0d9 code=0x0 [ 111.891738][ T4474] udevd[4474]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 111.905367][ T4473] udevd[4473]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 111.915258][ T4368] udevd[4368]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 111.917967][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 111.937665][ T4472] udevd[4472]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 111.951052][ T4471] udevd[4471]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 111.960934][ T4464] udevd[4464]: inotify_add_watch(7, /dev/loop3p8, 10) failed: No such file or directory [ 112.073126][ T4992] loop2: detected capacity change from 0 to 7 [ 112.101227][ T4992] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 112.218963][ T4992] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 112.244267][ T4474] udevd[4474]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 112.247599][ T4473] udevd[4473]: inotify_add_watch(7, /dev/loop3p15, 10) failed: No such file or directory [ 112.269823][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop3p14, 10) failed: No such file or directory [ 112.360474][ T4992] Dev loop2: unable to read RDB block 7 [ 112.419558][ T4992] loop2: unable to read partition table [ 112.433254][ T4992] loop2: partition table beyond EOD, truncated [ 112.453802][ T4992] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 112.664627][ T4993] device syzkaller0 entered promiscuous mode [ 112.824677][ T4294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.833758][ T4294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.841421][ T4294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.853084][ T4294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.873263][ T4294] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 112.881560][ T4294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.402961][ T4294] Bluetooth: hci3: command 0x0406 tx timeout [ 114.103146][ T7] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 114.311708][ T7] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 114.322113][ T7] usb 2-1: config 0 has no interface number 0 [ 114.329200][ T7] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 114.341636][ T7] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 114.350866][ T7] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 114.359263][ T7] usb 2-1: Product: syz [ 114.363663][ T7] usb 2-1: SerialNumber: syz [ 114.377377][ T7] usb 2-1: config 0 descriptor?? [ 114.391727][ T7] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 114.924540][ T4294] Bluetooth: hci4: command 0x0409 tx timeout [ 115.696764][ T5005] chnl_net:caif_netlink_parms(): no params data found [ 116.067506][ T5005] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.081245][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.090592][ T5005] device bridge_slave_0 entered promiscuous mode [ 116.118631][ T5005] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.138094][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.156956][ T5005] device bridge_slave_1 entered promiscuous mode [ 116.194020][ T46] device hsr_slave_0 left promiscuous mode [ 116.214641][ T5074] tmpfs: Unknown parameter 'quota' [ 116.225036][ T46] device hsr_slave_1 left promiscuous mode [ 116.248363][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.271052][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.290243][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.308141][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.328977][ T46] device bridge_slave_1 left promiscuous mode [ 116.352538][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.389353][ T46] device bridge_slave_0 left promiscuous mode [ 116.409789][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.425869][ T5084] 9pnet_virtio: no channels available for device syz [ 116.481953][ T46] device veth1_macvtap left promiscuous mode [ 116.494453][ T46] device veth0_macvtap left promiscuous mode [ 116.509163][ T46] device veth1_vlan left promiscuous mode [ 116.522490][ T46] device veth0_vlan left promiscuous mode [ 116.859376][ T7] usb 2-1: USB disconnect, device number 2 [ 116.940069][ T5068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.222608][ T5107] tmpfs: Unknown parameter 'usrquota' [ 117.501623][ T5113] 9pnet_fd: Insufficient options for proto=fd [ 117.554576][ T46] team0 (unregistering): Port device team_slave_1 removed [ 117.620983][ T46] team0 (unregistering): Port device team_slave_0 removed [ 117.700148][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.824967][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.449090][ T46] bond0 (unregistering): Released all slaves [ 118.577702][ T5005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.654283][ T5005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.784511][ T5005] team0: Port device team_slave_0 added [ 118.800288][ T5005] team0: Port device team_slave_1 added [ 118.836013][ T5155] device syzkaller0 entered promiscuous mode [ 118.890265][ T5005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.897782][ T5005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.927040][ T5005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.001791][ T5005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.019110][ T5005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.117423][ T5005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.239859][ T5005] device hsr_slave_0 entered promiscuous mode [ 119.279786][ T5005] device hsr_slave_1 entered promiscuous mode [ 119.310693][ T5005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.342927][ T5005] Cannot create hsr debugfs directory [ 119.365046][ T7] hid-generic 0001:046D:B012.0004: unknown main item tag 0x1 [ 119.372641][ T7] hid-generic 0001:046D:B012.0004: unknown main item tag 0x0 [ 119.446199][ T7] hid-generic 0001:046D:B012.0004: unknown main item tag 0x1 [ 119.491572][ T7] hid-generic 0001:046D:B012.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 119.796575][ T130] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.880387][ T5005] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 119.905526][ T5005] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 119.916801][ T5187] device syzkaller0 entered promiscuous mode [ 119.924338][ T5005] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 119.941319][ T5005] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.997241][ T130] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.008339][ T130] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 120.041258][ T130] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.064335][ T130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 120.107137][ T130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 120.137744][ T5005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.150470][ T130] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.166174][ T130] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.180136][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.185585][ T130] usb 1-1: Product: syz [ 120.197031][ T130] usb 1-1: Manufacturer: syz [ 120.209599][ T130] cdc_wdm 1-1:1.0: skipping garbage [ 120.219646][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.228235][ T130] cdc_wdm 1-1:1.0: skipping garbage [ 120.240825][ T5005] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.262210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.278922][ T130] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 120.286661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.295648][ T130] cdc_wdm 1-1:1.0: Unknown control protocol [ 120.304197][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.311372][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.348867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.382620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.397704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.438011][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.445186][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.464410][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 120.471237][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 120.477718][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 120.484349][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 120.491498][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 120.498129][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 120.504449][ T3718] usb 1-1: USB disconnect, device number 3 [ 120.613679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.625121][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.661522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.689362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.718411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.744991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.772057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.804091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.833296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.878100][ T5005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.904054][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.915502][ T5212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.300'. [ 120.939339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.949007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.959949][ T5212] ksmbd: Unknown IPC event: 0, ignore. [ 121.672964][ T4335] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.752101][ T5200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.783152][ T5200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.796688][ T5005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.886742][ T4335] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 121.908150][ T4335] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.933394][ T4335] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.952927][ T4335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.981957][ T4335] usb 3-1: config 0 descriptor?? [ 122.008972][ T4335] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 122.272982][ T4335] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.467601][ T4335] usb 1-1: Using ep0 maxpacket: 8 [ 122.476632][ T4335] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 122.500291][ T4335] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.527301][ T4335] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.562821][ T4335] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.583314][ T4335] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.620365][ T4335] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.685945][ T4335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.886117][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.910734][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.922435][ T4335] usb 1-1: GET_CAPABILITIES returned 0 [ 122.928212][ T4335] usbtmc 1-1:16.0: can't read capabilities [ 122.959620][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.988519][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.029056][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.050504][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.072499][ T5005] device veth0_vlan entered promiscuous mode [ 123.101306][ T5005] device veth1_vlan entered promiscuous mode [ 123.127996][ T4330] usb 1-1: USB disconnect, device number 4 [ 123.172181][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.191888][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.221847][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.245652][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.289477][ T5005] device veth0_macvtap entered promiscuous mode [ 123.307621][ T5005] device veth1_macvtap entered promiscuous mode [ 123.330048][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.354101][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.395926][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.425708][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.443778][ T5284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 123.453766][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.469979][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.494115][ T5005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.531700][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.560634][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.586529][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.604948][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.620673][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.638401][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.661639][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.690455][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.731002][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.771849][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.808656][ T5005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.832117][ T5294] process 'syz.1.317' launched './file1' with NULL argv: empty string added [ 123.847949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.882258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.896460][ T5005] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.896491][ T5005] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.896517][ T5005] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.896540][ T5005] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.069507][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.069526][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.069742][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.120711][ T4946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.120767][ T4946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.120965][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.397578][ T127] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.469341][ T4335] usb 3-1: USB disconnect, device number 3 [ 124.603015][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 124.610926][ T127] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.642251][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.703060][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.703088][ T127] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 124.703110][ T127] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.705267][ T127] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 124.705291][ T127] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 124.705310][ T127] usb 2-1: Manufacturer: syz [ 124.709697][ T127] usb 2-1: config 0 descriptor?? [ 124.871742][ T5325] jffs2: notice: (5325) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 125.115943][ T5334] netlink: 'syz.5.329': attribute type 1 has an invalid length. [ 125.181133][ T5336] 9pnet_virtio: no channels available for device syz [ 125.212941][ T127] rc_core: IR keymap rc-hauppauge not found [ 125.212986][ T127] Registered IR keymap rc-empty [ 125.218723][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.243093][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.282426][ T127] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 125.410871][ T127] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 125.452395][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.484417][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.510012][ T5345] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 125.522901][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.574278][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.609117][ T5345] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 125.617397][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.653127][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.702920][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.752838][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.792951][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.832872][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.874459][ T127] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 125.896363][ T127] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 125.939884][ T127] usb 2-1: USB disconnect, device number 3 [ 126.153593][ T5361] device-mapper: ioctl: Unable to rename non-existent device, to B [ 126.215664][ T5364] 9pnet_virtio: no channels available for device syz [ 126.373032][ T127] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.595995][ T127] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 126.620024][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.625041][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.658757][ T5372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.670653][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.685018][ T5372] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.699998][ T127] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.718412][ T5372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.725732][ T127] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.774581][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.810889][ T127] usb 2-1: config 0 descriptor?? [ 127.048949][ T5389] jffs2: notice: (5389) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 127.252561][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.292410][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.311297][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.338769][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.362124][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.380972][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.407047][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.431897][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.442511][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.457549][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.481799][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.496270][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.504971][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.512464][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.525832][ T127] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 127.536833][ T127] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 127.560893][ T127] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 127.613022][ T127] usb 2-1: USB disconnect, device number 4 [ 127.895888][ T5408] fido_id[5408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 128.276003][ T5422] 9pnet_virtio: no channels available for device syz [ 128.624363][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.643220][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.656066][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.669243][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.681587][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 128.690461][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.746498][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.900208][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.980291][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 130.019016][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.123156][ T4288] Bluetooth: hci1: command 0x1003 tx timeout [ 130.130974][ T4294] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 130.209297][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.238177][ T5443] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 130.631055][ T5432] chnl_net:caif_netlink_parms(): no params data found [ 130.719890][ T26] audit: type=1326 audit(1786376627.016:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5459 comm="syz.1.371" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b6199e0d9 code=0x0 [ 130.773201][ T4294] Bluetooth: hci5: command 0x0409 tx timeout [ 130.783436][ T4369] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.982878][ T4369] usb 1-1: Using ep0 maxpacket: 8 [ 130.996600][ T4369] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 131.011155][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.035211][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.053339][ T4369] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 131.081413][ T5432] device bridge_slave_0 entered promiscuous mode [ 131.100487][ T4369] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.135895][ T4369] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.179765][ T4369] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.198905][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.263864][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.271074][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.282103][ T5432] device bridge_slave_1 entered promiscuous mode [ 131.290589][ T5484] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 131.444145][ T4369] usb 1-1: usb_control_msg returned -32 [ 131.449821][ T4369] usbtmc 1-1:16.0: can't read capabilities [ 131.463973][ T5432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.568680][ T5432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.618612][ T4369] usb 1-1: USB disconnect, device number 5 [ 131.652641][ T5432] team0: Port device team_slave_0 added [ 131.707648][ T5432] team0: Port device team_slave_1 added [ 131.797067][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.818988][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.860626][ T5432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.887081][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.898130][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.936501][ T5432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.009834][ T5432] device hsr_slave_0 entered promiscuous mode [ 132.049424][ T5432] device hsr_slave_1 entered promiscuous mode [ 132.063536][ T5432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.088817][ T5432] Cannot create hsr debugfs directory [ 132.360663][ T5510] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 132.648122][ T5525] tipc: Started in network mode [ 132.654627][ T5525] tipc: Node identity 02883022188c, cluster identity 4711 [ 132.680191][ T5525] tipc: Enabled bearer , priority 0 [ 132.697655][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.704434][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.741032][ T5518] device syzkaller0 entered promiscuous mode [ 132.748678][ T5522] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 132.810220][ T46] device hsr_slave_0 left promiscuous mode [ 132.843073][ T46] device hsr_slave_1 left promiscuous mode [ 132.853243][ T4294] Bluetooth: hci5: command 0x041b tx timeout [ 132.868070][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.882966][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.894365][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.919112][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.957166][ T46] device bridge_slave_1 left promiscuous mode [ 132.964788][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.994120][ T46] device bridge_slave_0 left promiscuous mode [ 133.002765][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.073021][ T46] device veth1_macvtap left promiscuous mode [ 133.086414][ T46] device veth0_macvtap left promiscuous mode [ 133.099470][ T46] device veth1_vlan left promiscuous mode [ 133.120317][ T46] device veth0_vlan left promiscuous mode [ 133.726035][ T5546] 9pnet_virtio: no channels available for device syz [ 134.232818][ T127] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.402834][ T4333] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.425829][ T127] usb 2-1: Using ep0 maxpacket: 32 [ 134.432962][ T127] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 134.448375][ T127] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 134.458193][ T127] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 134.467393][ T127] usb 2-1: config 1 has no interface number 0 [ 134.473938][ T127] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.485553][ T127] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 134.498729][ T127] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 134.508551][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.553552][ T127] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 134.575251][ T46] team0 (unregistering): Port device team_slave_1 removed [ 134.597459][ T4333] usb 4-1: Using ep0 maxpacket: 32 [ 134.633908][ T4333] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.667847][ T4333] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 134.680331][ T4333] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 134.689334][ T4333] usb 4-1: config 14 has no interface number 0 [ 134.695586][ T4333] usb 4-1: config 14 has no interface number 1 [ 134.701803][ T4333] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 134.712672][ T4333] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 134.723535][ T4333] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 134.734959][ T4333] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.748423][ T4333] usb 4-1: config 14 interface 57 has no altsetting 0 [ 134.755432][ T4333] usb 4-1: config 14 interface 228 has no altsetting 0 [ 134.771539][ T46] team0 (unregistering): Port device team_slave_0 removed [ 134.784663][ T4333] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 134.802828][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.819909][ T4333] usb 4-1: Product: syz [ 134.824282][ T4333] usb 4-1: Manufacturer: syz [ 134.828898][ T4333] usb 4-1: SerialNumber: syz [ 134.863886][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.929530][ T4294] Bluetooth: hci5: command 0x040f tx timeout [ 134.941692][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.284404][ T4333] legousbtower 4-1:14.57: interrupt endpoints not found [ 135.430228][ T46] bond0 (unregistering): Released all slaves [ 135.484321][ T4333] legousbtower 4-1:14.228: interrupt endpoints not found [ 135.539274][ T5525] tipc: Resetting bearer [ 135.558028][ T5517] tipc: Resetting bearer [ 135.581253][ T5517] tipc: Disabling bearer [ 135.591368][ T4330] tipc: Node number set to 436482082 [ 136.337825][ T5432] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.354746][ T5432] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.365759][ T5432] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.376495][ T5432] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 136.471527][ T5432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.498224][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.508944][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.524460][ T5432] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.541584][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.554774][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.563203][ T4335] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 136.573502][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.580647][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.604414][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.613208][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.622078][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.631631][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.638811][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.651035][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.661473][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.670938][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.681617][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.704163][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.713423][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.728232][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.739399][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.751425][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.762356][ T4335] usb 1-1: Using ep0 maxpacket: 32 [ 136.772304][ T4335] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 136.784556][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.792516][ T4335] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 136.805232][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.813255][ T4335] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 136.837287][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.857726][ T4335] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 136.878818][ T4335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.898574][ T4335] usb 1-1: Product: syz [ 136.908241][ T4335] usb 1-1: Manufacturer: syz [ 136.927431][ T4335] usb 1-1: SerialNumber: syz [ 136.967831][ T4335] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 136.993372][ T4335] imon 1-1:155.0: unable to initialize intf0, err -19 [ 137.012442][ T4335] imon:imon_probe: failed to initialize context! [ 137.019182][ T4294] Bluetooth: hci5: command 0x0419 tx timeout [ 137.036709][ T4335] imon 1-1:155.0: unable to register, err -19 [ 137.043553][ T127] snd_usb_pod 2-1:1.1: set_interface failed [ 137.050367][ T127] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 137.068127][ T127] snd_usb_pod: probe of 2-1:1.1 failed with error -71 [ 137.104931][ T127] usb 2-1: USB disconnect, device number 5 [ 137.141354][ T5600] binder: 5599:5600 ioctl c018620c 200000000240 returned -22 [ 137.466157][ T7] usb 4-1: USB disconnect, device number 4 [ 137.573257][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.581378][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.609777][ T5432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.666825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.673177][ T4374] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 137.699710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.731792][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.742491][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.756714][ T5432] device veth0_vlan entered promiscuous mode [ 137.770420][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.780786][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.798415][ T5432] device veth1_vlan entered promiscuous mode [ 137.830351][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.846058][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.858498][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.870384][ T4374] usb 6-1: unable to get BOS descriptor or descriptor too short [ 137.876792][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.893388][ T4374] usb 6-1: not running at top speed; connect to a high speed hub [ 137.902552][ T5432] device veth0_macvtap entered promiscuous mode [ 137.918942][ T5432] device veth1_macvtap entered promiscuous mode [ 137.927404][ T4374] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 137.957295][ T4374] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 137.980665][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.986557][ T4374] usb 6-1: config 14 has no interface number 0 [ 138.008554][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.029488][ T4374] usb 6-1: config 14 has no interface number 1 [ 138.030461][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.043027][ T4374] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 138.083757][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.110804][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.118130][ T4374] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0x1B, skipping [ 138.168225][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.193707][ T4374] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 138.205325][ T5630] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 138.216660][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.235650][ T4374] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 138.238114][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.277308][ T4374] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 138.284433][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.315972][ T4374] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.325543][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.365421][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.378407][ T4374] usb 6-1: config 14 interface 57 has no altsetting 0 [ 138.397522][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.402899][ T4374] usb 6-1: config 14 interface 228 has no altsetting 0 [ 138.422010][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.433508][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.447181][ T4374] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 138.455216][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.472075][ T4374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.475341][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.496860][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.497234][ T4374] usb 6-1: Product: syz [ 138.512171][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.531242][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.531338][ T4374] usb 6-1: Manufacturer: syz [ 138.546564][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.559137][ T4374] usb 6-1: SerialNumber: syz [ 138.566902][ T5432] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.582352][ T5432] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.591865][ T5432] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.606965][ T5432] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.720027][ T4946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.740298][ T4946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.753071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.788039][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.798637][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.811699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.847905][ T3718] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.998448][ T4374] legousbtower 6-1:14.57: interrupt endpoints not found [ 139.056355][ T3718] usb 4-1: Using ep0 maxpacket: 8 [ 139.070690][ T3718] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.089202][ T3718] usb 4-1: config 0 has no interface number 0 [ 139.112815][ T3718] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.154442][ T3718] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.179138][ T5652] device-mapper: ioctl: Unable to rename non-existent device, to uuid B [ 139.187830][ T3718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.202693][ T4374] legousbtower 6-1:14.228: interrupt endpoints not found [ 139.221791][ T3718] usb 4-1: config 0 descriptor?? [ 139.271610][ T3718] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 139.390702][ T127] usb 1-1: USB disconnect, device number 6 [ 139.483250][ T3718] usb 4-1: USB disconnect, device number 5 [ 140.045209][ T5689] Bluetooth: MGMT ver 1.22 [ 140.252923][ T3718] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.363330][ T4374] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.458147][ T3718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.488512][ T3718] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 140.507839][ T3718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.562833][ T4374] usb 4-1: Using ep0 maxpacket: 8 [ 140.570018][ T4374] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 140.585352][ T3718] as10x_usb: device has been detected [ 140.599180][ T3718] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 140.607787][ T4374] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.632800][ T4374] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.665499][ T4374] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.679617][ T3718] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 140.702645][ T5708] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0 [ 140.711522][ T4374] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.757161][ T4374] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.787512][ T4374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.821656][ T3718] as10x_usb: error during firmware upload part1 [ 140.858837][ T3718] Registered device Abilis Systems DVB-Titan [ 141.151873][ T4374] usb 6-1: USB disconnect, device number 2 [ 141.164023][ T3718] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 141.354410][ T3718] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.367258][ T3718] usb 3-1: config 0 has no interface number 0 [ 141.381018][ T3718] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 141.394465][ T3718] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 141.410654][ T3718] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.422024][ T3718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.445311][ T3718] usb 3-1: config 0 descriptor?? [ 141.450923][ T5713] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 141.480865][ T3718] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior2 [ 141.689498][ T7] usb 3-1: USB disconnect, device number 4 [ 142.443874][ T3718] usb 2-1: USB disconnect, device number 6 [ 142.507255][ T3718] Unregistered device Abilis Systems DVB-Titan [ 142.515599][ T3718] as10x_usb: device has been disconnected [ 143.049760][ T5764] syz.5.447 (5764) used greatest stack depth: 20688 bytes left [ 143.131707][ T4374] usb 4-1: USB disconnect, device number 6 [ 143.139493][ T5772] program syz.5.451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.067212][ T5811] capability: warning: `syz.2.465' uses 32-bit capabilities (legacy support in use) [ 144.252952][ T127] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.356501][ T5822] Line length is too long: Should be less than 4094 [ 144.475856][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 144.490604][ T127] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.531470][ T127] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.563031][ T127] usb 4-1: config 0 interface 0 has no altsetting 0 [ 144.593776][ T127] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 144.634954][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.665554][ T127] usb 4-1: config 0 descriptor?? [ 144.802885][ T5807] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 145.095445][ T127] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 145.102567][ T127] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 145.124662][ T127] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 145.141400][ T127] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 145.156763][ T127] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 145.171246][ T127] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 145.309524][ T127] usb 4-1: USB disconnect, device number 7 [ 146.930591][ T5910] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.003211][ T4288] Bluetooth: hci5: command 0x0411 tx timeout [ 147.067041][ T5910] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 147.095730][ T5910] device-mapper: ioctl: error adding target to table [ 147.757828][ T5942] ubi31: attaching mtd0 [ 147.762483][ T5942] ubi31 error: ubi_attach_mtd_dev: bad VID header (4096) or data offsets (4160) [ 148.196750][ T5954] jffs2: notice: (5954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 148.615675][ T5966] 9pnet_virtio: no channels available for device syz [ 148.687655][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 148.762871][ T4288] Bluetooth: hci1: command 0x1003 tx timeout [ 148.762898][ T4294] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 149.026435][ T5979] sctp: [Deprecated]: syz.1.513 (pid 5979) Use of int in maxseg socket option. [ 149.026435][ T5979] Use struct sctp_assoc_value instead [ 149.152051][ T5982] IPVS: sh: FWM 3 0x00000003 - no destination available [ 149.206851][ T5988] device-mapper: ioctl: Invalid data size in the ioctl structure: 1920233071 [ 149.874910][ T6015] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.944362][ T4374] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.966022][ T6017] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 149.981146][ T6017] netlink: 224 bytes leftover after parsing attributes in process `syz.1.530'. [ 150.127475][ T4314] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 150.162805][ T4374] usb 3-1: Using ep0 maxpacket: 8 [ 150.169918][ T4374] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.181371][ T4374] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.191620][ T4374] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.198497][ T4374] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 150.208890][ T4374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.226080][ T4374] usb 3-1: config 0 descriptor?? [ 150.247860][ T6019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.385719][ T6033] 9pnet_virtio: no channels available for device syz [ 150.540888][ T5962] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 150.638758][ T4374] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 150.652880][ T4374] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 150.670765][ T4374] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 150.688351][ T4374] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 150.705998][ T4374] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 150.724128][ T4374] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 150.853160][ T4374] usb 3-1: USB disconnect, device number 5 [ 151.315724][ T26] audit: type=1807 audit(1786376647.616:7): action=measure res=1 [ 151.325790][ T6051] ima: policy update failed [ 151.343986][ T26] audit: type=1807 audit(1786376647.626:8): UNKNOWN=0x0000000000000000 res=0 [ 151.373447][ T26] audit: type=1802 audit(1786376647.626:9): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.541" res=0 errno=0 [ 151.442157][ T26] audit: type=1802 audit(1786376647.626:10): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.541" res=0 errno=0 [ 152.113169][ T6083] device syzkaller0 entered promiscuous mode [ 152.573229][ T6095] 9pnet_virtio: no channels available for device syz [ 152.642128][ T6099] 0x000000000003-0x000000000005 : "" [ 152.715951][ T6099] ftl_cs: FTL header corrupt! [ 152.804581][ T3718] hid-generic 0005:07C0:05DF.0008: item fetching failed at offset 0/1 [ 152.835955][ T3718] hid-generic: probe of 0005:07C0:05DF.0008 failed with error -22 [ 152.987720][ T6109] device syzkaller0 entered promiscuous mode [ 154.378241][ T6159] program syz.5.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.806995][ T6173] ======================================================= [ 154.806995][ T6173] WARNING: The mand mount option has been deprecated and [ 154.806995][ T6173] and is ignored by this kernel. Remove the mand [ 154.806995][ T6173] option from the mount to silence this warning. [ 154.806995][ T6173] ======================================================= [ 155.739741][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 155.914665][ T4374] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 155.939686][ T6208] syz.1.589 (6208) used greatest stack depth: 18128 bytes left [ 155.978878][ T6214] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 156.102988][ T4374] usb 3-1: Using ep0 maxpacket: 8 [ 156.114796][ T4374] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 156.154807][ T4374] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 156.179145][ T4374] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.207964][ T4374] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.241448][ T4374] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.260474][ T6224] random: crng reseeded on system resumption [ 156.265805][ T4374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.354716][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 156.528558][ T4374] usb 3-1: GET_CAPABILITIES returned 0 [ 156.534943][ T4374] usbtmc 3-1:16.0: can't read capabilities [ 156.594465][ T6233] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 156.601345][ T6233] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.648818][ T6233] vhci_hcd vhci_hcd.0: Device attached [ 156.667642][ T6234] vhci_hcd: connection closed [ 156.676571][ T5200] vhci_hcd: stop threads [ 156.703312][ T5200] vhci_hcd: release socket [ 156.713672][ T5200] vhci_hcd: disconnect device [ 156.740308][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 156.757394][ T6206] usbtmc 3-1:16.0: Unable to send data, error -71 [ 156.776200][ T4374] usb 3-1: USB disconnect, device number 6 [ 156.977970][ T6245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.597'. [ 157.442936][ T127] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.471993][ T6262] user requested TSC rate below hardware speed [ 157.493241][ T4374] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 157.510980][ T6262] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 157.548785][ T6262] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 157.658162][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 157.665285][ T127] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.673221][ T4374] usb 4-1: Using ep0 maxpacket: 32 [ 157.695442][ T4374] usb 4-1: unable to get BOS descriptor or descriptor too short [ 157.709534][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.757753][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.761283][ T4374] usb 4-1: string descriptor 0 read error: -22 [ 157.792683][ T127] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 157.800506][ T4374] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 157.832231][ T4374] usb 4-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 157.849033][ T127] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.880408][ T4374] dw2102: su3000_identify_state [ 157.887195][ T127] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 157.895909][ T4374] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 157.921614][ T127] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 157.923815][ T4374] dw2102: su3000_power_ctrl: 1, initialized 0 [ 157.948347][ T4374] dvb-usb: bulk message failed: -22 (2/0) [ 157.970996][ T127] usb 2-1: Manufacturer: syz [ 157.985582][ T4374] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.002097][ T127] usb 2-1: config 0 descriptor?? [ 158.044890][ T4374] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 158.064865][ T4374] usb 4-1: media controller created [ 158.070889][ T4374] dvb-usb: bulk message failed: -22 (6/0) [ 158.107950][ T4374] dw2102: i2c transfer failed. [ 158.122869][ T4374] dvb-usb: bulk message failed: -22 (6/0) [ 158.147606][ T4374] dw2102: i2c transfer failed. [ 158.168420][ T4374] dvb-usb: bulk message failed: -22 (6/0) [ 158.184457][ T4374] dw2102: i2c transfer failed. [ 158.190439][ T4374] dvb-usb: bulk message failed: -22 (6/0) [ 158.204116][ T4374] dw2102: i2c transfer failed. [ 158.225060][ T4374] dvb-usb: bulk message failed: -22 (6/0) [ 158.240906][ T4374] dw2102: i2c transfer failed. [ 158.256140][ T4374] dvb-usb: bulk message failed: -22 (6/0) [ 158.275324][ T4374] dw2102: i2c transfer failed. [ 158.291407][ T4374] dvb-usb: MAC address: 02:02:02:02:02:02 [ 158.355636][ T4374] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.367879][ T6286] 9pnet_virtio: no channels available for device syz [ 158.421469][ T4374] dvb-usb: bulk message failed: -22 (3/0) [ 158.438095][ T4374] dw2102: command 0x0e transfer failed. [ 158.445338][ T4374] dvb-usb: bulk message failed: -22 (3/0) [ 158.451102][ T4374] dw2102: command 0x0e transfer failed. [ 158.472812][ T127] rc_core: IR keymap rc-hauppauge not found [ 158.478873][ T127] Registered IR keymap rc-empty [ 158.499282][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.563249][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.609510][ T127] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 158.644384][ T127] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 158.701237][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.737641][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.749980][ T6292] tipc: Started in network mode [ 158.772827][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.773123][ T4374] dvb-usb: bulk message failed: -22 (3/0) [ 158.793321][ T6292] tipc: Node identity 4, cluster identity 4711 [ 158.799530][ T6292] tipc: Node number set to 4 [ 158.813041][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.813879][ T4374] dw2102: command 0x0e transfer failed. [ 158.843881][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.861041][ T4374] dvb-usb: bulk message failed: -22 (3/0) [ 158.880256][ T4374] dw2102: command 0x0e transfer failed. [ 158.883043][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.914155][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.612'. [ 158.923204][ T4374] dvb-usb: bulk message failed: -22 (1/0) [ 158.928972][ T4374] dw2102: command 0x51 transfer failed. [ 158.934472][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.973040][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 159.003192][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 159.053004][ T127] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 159.095924][ T127] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 159.110598][ T127] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 159.127033][ T127] usb 2-1: USB disconnect, device number 7 [ 159.171816][ T26] audit: type=1800 audit(1786376655.456:11): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.615" name="zoned" dev="configfs" ino=44968 res=0 errno=0 [ 159.204505][ T26] audit: type=1800 audit(1786376655.506:12): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.615" name="memory_backed" dev="configfs" ino=44970 res=0 errno=0 [ 159.222558][ T6304] bridge1: port 1(bond1) entered blocking state [ 159.244463][ T6304] bridge1: port 1(bond1) entered disabled state [ 159.258901][ T26] audit: type=1800 audit(1786376655.526:13): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.615" name="zone_nr_conv" dev="configfs" ino=44971 res=0 errno=0 [ 159.279469][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.288626][ T6304] device bond1 entered promiscuous mode [ 159.328246][ T6310] null_blk: disk nullb1 created [ 159.347452][ T6301] device bond1 left promiscuous mode [ 159.357351][ T26] audit: type=1800 audit(1786376655.536:14): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.615" name="power" dev="configfs" ino=45957 res=0 errno=0 [ 159.377279][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.389518][ T6301] bridge1: port 1(bond1) entered disabled state [ 159.447500][ T4374] DVB: Unable to find symbol ds3000_attach() [ 159.455072][ T4374] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 159.593441][ T127] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 159.652797][ T6318] block device autoloading is deprecated and will be removed. [ 159.782865][ T4374] rc_core: IR keymap rc-su3000 not found [ 159.788613][ T4374] Registered IR keymap rc-empty [ 159.792650][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 159.802112][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.815045][ T4374] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 159.844690][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.879186][ T127] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.894463][ T4374] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input9 [ 159.932868][ T127] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 159.952401][ T4374] dvb-usb: schedule remote query interval to 150 msecs. [ 159.972117][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.977207][ T4374] dw2102: su3000_power_ctrl: 0, initialized 1 [ 159.993481][ T4374] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 160.013972][ T127] usb 2-1: config 0 descriptor?? [ 160.024253][ T4374] usb 4-1: USB disconnect, device number 8 [ 160.058874][ T127] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 160.115802][ T3623] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 160.188965][ T4374] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 160.241668][ T4384] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 160.306701][ T3623] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 160.360094][ T6312] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 160.385599][ T3623] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 160.404229][ T127] usb 2-1: USB disconnect, device number 8 [ 160.712960][ T4369] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 160.932851][ T4369] usb 6-1: Using ep0 maxpacket: 32 [ 160.940362][ T4369] usb 6-1: unable to get BOS descriptor or descriptor too short [ 160.972489][ T4369] usb 6-1: string descriptor 0 read error: -22 [ 160.996419][ T4369] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 161.033445][ T4369] usb 6-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 161.085564][ T4369] dw2102: su3000_identify_state [ 161.109999][ T4369] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 161.134188][ T4369] dw2102: su3000_power_ctrl: 1, initialized 0 [ 161.157119][ T4369] dvb-usb: bulk message failed: -22 (2/0) [ 161.199966][ T4369] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.219960][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.237828][ T4369] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 161.268588][ T4369] usb 6-1: media controller created [ 161.294994][ T4369] dvb-usb: bulk message failed: -22 (6/0) [ 161.333668][ T4369] dw2102: i2c transfer failed. [ 161.338729][ T4369] dvb-usb: bulk message failed: -22 (6/0) [ 161.362764][ T4369] dw2102: i2c transfer failed. [ 161.373455][ T4369] dvb-usb: bulk message failed: -22 (6/0) [ 161.379276][ T4369] dw2102: i2c transfer failed. [ 161.417369][ T4369] dvb-usb: bulk message failed: -22 (6/0) [ 161.452767][ T4369] dw2102: i2c transfer failed. [ 161.457618][ T4369] dvb-usb: bulk message failed: -22 (6/0) [ 161.483454][ T4369] dw2102: i2c transfer failed. [ 161.497300][ T4369] dvb-usb: bulk message failed: -22 (6/0) [ 161.512138][ T4369] dw2102: i2c transfer failed. [ 161.530211][ T4369] dvb-usb: MAC address: 02:02:02:02:02:02 [ 161.590619][ T4369] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.649067][ T4369] dvb-usb: bulk message failed: -22 (3/0) [ 161.664578][ T4369] dw2102: command 0x0e transfer failed. [ 161.670470][ T4369] dvb-usb: bulk message failed: -22 (3/0) [ 161.676699][ T4369] dw2102: command 0x0e transfer failed. [ 161.992955][ T4369] dvb-usb: bulk message failed: -22 (3/0) [ 162.000759][ T4369] dw2102: command 0x0e transfer failed. [ 162.007339][ T4369] dvb-usb: bulk message failed: -22 (3/0) [ 162.013447][ T4369] dw2102: command 0x0e transfer failed. [ 162.019109][ T4369] dvb-usb: bulk message failed: -22 (1/0) [ 162.031803][ T4369] dw2102: command 0x51 transfer failed. [ 162.117352][ T4369] DVB: Unable to find symbol ds3000_attach() [ 162.135459][ T4369] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 162.443069][ T4369] rc_core: IR keymap rc-su3000 not found [ 162.459021][ T4369] Registered IR keymap rc-empty [ 162.490434][ T4369] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 162.528845][ T4369] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input11 [ 162.603646][ T4369] dvb-usb: schedule remote query interval to 150 msecs. [ 162.610792][ T4369] dw2102: su3000_power_ctrl: 0, initialized 1 [ 162.689117][ T4369] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 162.762931][ T4369] usb 6-1: USB disconnect, device number 3 [ 162.870321][ T4369] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 163.486984][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.653'. [ 165.167217][ T6509] netlink: 36 bytes leftover after parsing attributes in process `syz.3.686'. [ 165.627860][ T6528] trusted_key: encrypted_key: key user:syz not found [ 166.089383][ T6549] overlayfs: unrecognized mount option "\" or missing value [ 166.713282][ T6567] netlink: 'syz.5.712': attribute type 15 has an invalid length. [ 166.860281][ T6575] gfs2: not a GFS2 filesystem [ 167.402867][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 168.043350][ T130] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 168.238206][ T130] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 168.252254][ T130] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.316543][ T130] usb 2-1: config 0 has no interface number 0 [ 168.334133][ T130] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 168.590645][ T130] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 168.839944][ T130] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.001921][ T130] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 169.028205][ T130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.051899][ T130] usb 2-1: Product: syz [ 169.070385][ T130] usb 2-1: Manufacturer: syz [ 169.088487][ T130] usb 2-1: SerialNumber: syz [ 169.117580][ T130] usb 2-1: config 0 descriptor?? [ 169.482804][ T4294] Bluetooth: hci5: command 0x0406 tx timeout [ 169.637914][ T3718] usb 2-1: USB disconnect, device number 9 [ 169.644262][ T6631] netlink: 'syz.3.737': attribute type 1 has an invalid length. [ 172.982747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 173.012760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 173.022764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 174.542746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 174.552753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 174.562752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 174.572766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 174.582760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 174.592757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 174.602755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 174.881719][ T6702] program syz.1.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.971854][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.983249][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 174.994971][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 175.004559][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 175.015809][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 175.025012][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 175.035155][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 175.893005][ T3718] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 176.095397][ T3718] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 176.126466][ T3718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.192791][ T4374] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 176.273931][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 176.384299][ T4374] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.395885][ T4374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.422397][ T4374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.454850][ T4374] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.480837][ T4374] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.502983][ T4374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.524034][ T4374] usb 2-1: config 0 descriptor?? [ 176.563586][ T3718] cxacru 4-1:1.0: invalid response length to cm 0x90: 0 [ 176.598607][ T6767] cxacru 4-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 176.608853][ T3718] usb 4-1: USB disconnect, device number 9 [ 176.638010][ T6767] cxacru 4-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 176.859516][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.5.795'. [ 176.869390][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.5.795'. [ 176.940738][ T4374] plantronics 0003:047F:FFFF.0009: unbalanced collection at end of report description [ 176.966901][ T4374] plantronics 0003:047F:FFFF.0009: parse failed [ 176.983363][ T4374] plantronics: probe of 0003:047F:FFFF.0009 failed with error -22 [ 177.092557][ T6785] netlink: 20 bytes leftover after parsing attributes in process `syz.5.798'. [ 177.141989][ T4374] usb 2-1: USB disconnect, device number 10 [ 178.884419][ T53] block nbd1: Attempted send on invalid socket [ 178.891019][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.057320][ T26] audit: type=1326 audit(1786376675.356:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.3.813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fac99e0d9 code=0x7ffc0000 [ 179.120516][ T26] audit: type=1326 audit(1786376675.386:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.3.813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fac99e0d9 code=0x7ffc0000 [ 179.187314][ T26] audit: type=1326 audit(1786376675.386:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.3.813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fac99e0d9 code=0x7ffc0000 [ 179.248415][ T26] audit: type=1326 audit(1786376675.386:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.3.813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3fac99e0d9 code=0x7ffc0000 [ 179.286455][ T26] audit: type=1326 audit(1786376675.386:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.3.813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fac99e0d9 code=0x7ffc0000 [ 179.403221][ T26] audit: type=1326 audit(1786376675.386:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.3.813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fac99e0d9 code=0x7ffc0000 [ 179.488113][ T26] audit: type=1326 audit(1786376675.386:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.3.813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fac99e0d9 code=0x7ffc0000 [ 179.540729][ T6841] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 179.557975][ T26] audit: type=1326 audit(1786376675.386:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.3.813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fac99e0d9 code=0x7ffc0000 [ 179.628431][ T26] audit: type=1326 audit(1786376675.386:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.3.813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f3fac99e0d9 code=0x7ffc0000 [ 179.727779][ T6850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.826'. [ 179.738534][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.824'. [ 179.896717][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.827'. [ 181.016432][ T6877] netlink: 16 bytes leftover after parsing attributes in process `syz.5.835'. [ 182.050681][ T6905] netlink: 296 bytes leftover after parsing attributes in process `syz.0.847'. [ 182.243591][ T6912] vivid-000: disconnect [ 182.269932][ T6910] vivid-000: reconnect [ 183.431897][ T6929] netlink: 'syz.2.856': attribute type 1 has an invalid length. [ 183.465780][ T6929] netlink: 'syz.2.856': attribute type 4 has an invalid length. [ 183.473590][ T6929] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.856'. [ 183.743015][ T4369] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 183.963023][ T4369] usb 6-1: Using ep0 maxpacket: 16 [ 183.993180][ T4369] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.136574][ T4369] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 184.238391][ T6945] netlink: 'syz.1.863': attribute type 2 has an invalid length. [ 184.269743][ T4369] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 184.327449][ T4369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.392137][ T4369] usb 6-1: config 0 descriptor?? [ 184.426580][ T4369] pxrc 6-1:0.0: Could not find endpoint [ 184.464394][ T4369] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 184.630769][ T4369] usb 6-1: USB disconnect, device number 4 [ 184.881005][ T6965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.873'. [ 184.993029][ T4292] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 184.993111][ T6967] netlink: 'syz.0.874': attribute type 2 has an invalid length. [ 185.201161][ T4292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.238193][ T4292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.277438][ T4292] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 185.313058][ T6980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.880'. [ 185.322039][ T4292] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.382817][ T4292] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 185.493877][ T6984] netlink: 5 bytes leftover after parsing attributes in process `syz.5.882'. [ 185.563616][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.612215][ T4292] usb 3-1: Product: syz [ 185.835464][ T4292] usb 3-1: Manufacturer: syz [ 185.895676][ T4292] usb 3-1: SerialNumber: syz [ 186.006531][ T4292] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 186.060696][ T4292] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 186.081179][ T4292] usbserial_generic 3-1:1.0: generic converter detected [ 186.105900][ T4292] usb 3-1: generic converter now attached to ttyUSB0 [ 186.224542][ T4333] usb 3-1: USB disconnect, device number 7 [ 186.257810][ T4333] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 186.275425][ T4333] usbserial_generic 3-1:1.0: device disconnected [ 186.389619][ T6999] netlink: 5 bytes leftover after parsing attributes in process `syz.0.898'. [ 186.414794][ T7001] netlink: 'syz.5.888': attribute type 2 has an invalid length. [ 186.434279][ T6999] 9pnet_fd: Insufficient options for proto=fd [ 187.880605][ T7031] netlink: 'syz.2.902': attribute type 2 has an invalid length. [ 188.630878][ T7033] netlink: 5 bytes leftover after parsing attributes in process `syz.3.904'. [ 189.417421][ T4330] kernel read not supported for file /dsp1 (pid: 4330 comm: kworker/1:4) [ 191.045001][ T7084] tmpfs: Unknown parameter 'quota' [ 191.199158][ T7078] [ 191.201551][ T7078] ====================================================== [ 191.208600][ T7078] WARNING: possible circular locking dependency detected [ 191.215759][ T7078] syzkaller #0 Not tainted [ 191.220210][ T7078] ------------------------------------------------------ [ 191.227251][ T7078] syz.3.922/7078 is trying to acquire lock: [ 191.233172][ T7078] ffffffff8d7b2f90 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980 [ 191.242978][ T7078] [ 191.242978][ T7078] but task is already holding lock: [ 191.250369][ T7078] ffff8880548a1aa0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 191.260089][ T7078] [ 191.260089][ T7078] which lock already depends on the new lock. [ 191.260089][ T7078] [ 191.270539][ T7078] [ 191.270539][ T7078] the existing dependency chain (in reverse order) is: [ 191.279571][ T7078] [ 191.279571][ T7078] -> #2 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 191.288342][ T7078] down_write+0x36/0x60 [ 191.293073][ T7078] configfs_depend_item_unlocked+0x14f/0x430 [ 191.299630][ T7078] usbg_make_tpg+0x1f3/0x580 [ 191.304775][ T7078] target_fabric_make_tpg+0xa0/0x6d0 [ 191.310599][ T7078] configfs_mkdir+0x511/0x9e0 [ 191.315818][ T7078] vfs_mkdir+0x386/0x570 [ 191.320600][ T7078] do_mkdirat+0x1d8/0x440 [ 191.325466][ T7078] __x64_sys_mkdir+0x6a/0x80 [ 191.330593][ T7078] do_syscall_64+0x4c/0xa0 [ 191.335586][ T7078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.342020][ T7078] [ 191.342020][ T7078] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 191.349678][ T7078] __mutex_lock+0x12d/0xae0 [ 191.354746][ T7078] tcm_set_name+0x26/0x90 [ 191.359613][ T7078] function_make+0x195/0x350 [ 191.364741][ T7078] configfs_mkdir+0x511/0x9e0 [ 191.369960][ T7078] vfs_mkdir+0x386/0x570 [ 191.374747][ T7078] do_mkdirat+0x1d8/0x440 [ 191.379624][ T7078] __x64_sys_mkdir+0x6a/0x80 [ 191.384760][ T7078] do_syscall_64+0x4c/0xa0 [ 191.389737][ T7078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.396186][ T7078] [ 191.396186][ T7078] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 191.404457][ T7078] __lock_acquire+0x2d18/0x7c40 [ 191.409855][ T7078] lock_acquire+0x1bb/0x4a0 [ 191.414910][ T7078] __mutex_lock+0x12d/0xae0 [ 191.419955][ T7078] configfs_rmdir+0x638/0x980 [ 191.425196][ T7078] vfs_rmdir+0x34e/0x4a0 [ 191.429971][ T7078] do_rmdir+0x29a/0x5c0 [ 191.434698][ T7078] __x64_sys_rmdir+0x45/0x50 [ 191.439828][ T7078] do_syscall_64+0x4c/0xa0 [ 191.444789][ T7078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.451232][ T7078] [ 191.451232][ T7078] other info that might help us debug this: [ 191.451232][ T7078] [ 191.461468][ T7078] Chain exists of: [ 191.461468][ T7078] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#22 [ 191.461468][ T7078] [ 191.476201][ T7078] Possible unsafe locking scenario: [ 191.476201][ T7078] [ 191.483662][ T7078] CPU0 CPU1 [ 191.489037][ T7078] ---- ---- [ 191.494413][ T7078] lock(&sb->s_type->i_mutex_key#22); [ 191.499899][ T7078] lock(&opts->dep_lock); [ 191.506853][ T7078] lock(&sb->s_type->i_mutex_key#22); [ 191.514857][ T7078] lock(gadget_subsys.su_mutex); [ 191.519899][ T7078] [ 191.519899][ T7078] *** DEADLOCK *** [ 191.519899][ T7078] [ 191.528047][ T7078] 3 locks held by syz.3.922/7078: [ 191.533083][ T7078] #0: ffff8881472fa460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 191.542361][ T7078] #1: ffff88807162eee0 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b7/0x5c0 [ 191.553175][ T7078] #2: ffff8880548a1aa0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 191.563297][ T7078] [ 191.563297][ T7078] stack backtrace: [ 191.569204][ T7078] CPU: 0 PID: 7078 Comm: syz.3.922 Not tainted syzkaller #0 [ 191.576507][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.586582][ T7078] Call Trace: [ 191.589876][ T7078] [ 191.592824][ T7078] dump_stack_lvl+0x188/0x24e [ 191.597527][ T7078] ? load_image+0x410/0x410 [ 191.602050][ T7078] ? show_regs_print_info+0x12/0x12 [ 191.607275][ T7078] ? print_circular_bug+0x12b/0x1a0 [ 191.612504][ T7078] check_noncircular+0x296/0x330 [ 191.617468][ T7078] ? add_chain_block+0x9b0/0x9b0 [ 191.622425][ T7078] ? lockdep_lock+0xf1/0x1f0 [ 191.627043][ T7078] ? _find_first_zero_bit+0xd2/0x100 [ 191.632347][ T7078] __lock_acquire+0x2d18/0x7c40 [ 191.637224][ T7078] ? mark_lock+0x94/0x320 [ 191.641588][ T7078] ? verify_lock_unused+0x140/0x140 [ 191.646813][ T7078] ? __lock_acquire+0x138a/0x7c40 [ 191.651857][ T7078] ? verify_lock_unused+0x140/0x140 [ 191.657076][ T7078] lock_acquire+0x1bb/0x4a0 [ 191.661604][ T7078] ? configfs_rmdir+0x638/0x980 [ 191.666485][ T7078] ? __might_sleep+0xd0/0xd0 [ 191.671082][ T7078] ? read_lock_is_recursive+0x10/0x10 [ 191.676516][ T7078] __mutex_lock+0x12d/0xae0 [ 191.681038][ T7078] ? configfs_rmdir+0x638/0x980 [ 191.685913][ T7078] ? configfs_rmdir+0x638/0x980 [ 191.690783][ T7078] ? dput+0x37/0x1d0 [ 191.694699][ T7078] ? mutex_lock_nested+0x10/0x10 [ 191.699663][ T7078] ? __lock_acquire+0x7c40/0x7c40 [ 191.704707][ T7078] ? lockref_put_or_lock+0x6e/0xb0 [ 191.709834][ T7078] ? dput+0x37/0x1d0 [ 191.713750][ T7078] ? dput+0x37/0x1d0 [ 191.717686][ T7078] configfs_rmdir+0x638/0x980 [ 191.722412][ T7078] vfs_rmdir+0x34e/0x4a0 [ 191.726670][ T7078] do_rmdir+0x29a/0x5c0 [ 191.730860][ T7078] ? d_delete_notify+0x150/0x150 [ 191.735821][ T7078] ? getname_flags+0x206/0x500 [ 191.740596][ T7078] __x64_sys_rmdir+0x45/0x50 [ 191.745197][ T7078] do_syscall_64+0x4c/0xa0 [ 191.749632][ T7078] ? clear_bhb_loop+0x60/0xb0 [ 191.754321][ T7078] ? clear_bhb_loop+0x60/0xb0 [ 191.759035][ T7078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.764959][ T7078] RIP: 0033:0x7f3fac99e0d9 [ 191.769393][ T7078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.789034][ T7078] RSP: 002b:00007f3fad8c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 191.797477][ T7078] RAX: ffffffffffffffda RBX: 00007f3facc25fa0 RCX: 00007f3fac99e0d9 [ 191.805468][ T7078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 191.813459][ T7078] RBP: 00007f3faca35024 R08: 0000000000000000 R09: 0000000000000000 [ 191.821465][ T7078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.829451][ T7078] R13: 00007f3facc26038 R14: 00007f3facc25fa0 R15: 00007fffb94a6428 [ 191.837504][ T7078] [ 192.013471][ T7095] netlink: 5 bytes leftover after parsing attributes in process `syz.1.928'. [ 194.124910][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.131280][ T1280] ieee802154 phy1 wpan1: encryption failed: -22