last executing test programs: 2m48.013618319s ago: executing program 1 (id=1754): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 2m47.785965985s ago: executing program 1 (id=1755): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48080) syz_usb_connect(0x1, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x5e, 0xa3, 0x86, 0x8, 0xb48, 0x1008, 0x146e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x10, 0x6, "", [{{0x9, 0x4, 0x89, 0x0, 0x0, 0xce, 0xea, 0x93, 0x9}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) munlockall() 2m41.350304202s ago: executing program 1 (id=1775): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m38.254961164s ago: executing program 1 (id=1790): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0xff, 0x203, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 2m37.909073583s ago: executing program 1 (id=1794): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dff, 0xffffffff80000002, 0xcd41}}}, 0xfffffd74) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r3, 0x2}}, 0x18) bind$tipc(r0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) 2m37.696290224s ago: executing program 1 (id=1797): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000003c00), 0x2, 0x0) fsync(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) readv(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x24000000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0xa) 2m22.583929046s ago: executing program 32 (id=1797): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000003c00), 0x2, 0x0) fsync(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) readv(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x24000000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0xa) 11.482446657s ago: executing program 0 (id=2478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="b92014c222ee", 0x6}], 0x1}}], 0x1, 0x20000840) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000003c0)={0x2, 0x6, 0x40}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) semop(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 11.248246221s ago: executing program 4 (id=2479): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.14360266s ago: executing program 3 (id=2481): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 10.121525935s ago: executing program 4 (id=2482): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9.956289166s ago: executing program 2 (id=2483): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) 9.925126436s ago: executing program 3 (id=2484): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff02, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x488c4) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 9.901747794s ago: executing program 0 (id=2485): pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffdc0, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/157, 0x9d) 7.984001451s ago: executing program 3 (id=2486): epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 7.856487526s ago: executing program 0 (id=2487): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb26d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 7.805040637s ago: executing program 5 (id=2488): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(0xffffffffffffffff, 0x3b88, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.681454825s ago: executing program 2 (id=2489): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffdc0, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0xe, 0x9, &(0x7f0000000300)="00d000ff0000f1508f2ae2150000", &(0x7f0000000380)=""/9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 6.42051749s ago: executing program 2 (id=2490): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700"], 0x138}, 0x1, 0x0, 0x0, 0x88c1}, 0x0) 6.364165403s ago: executing program 0 (id=2491): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94) syz_usb_connect(0x1, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x5e, 0xa3, 0x86, 0x8, 0xb48, 0x1008, 0x146e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x10, 0x6, "", [{{0x9, 0x4, 0x89, 0x0, 0x0, 0xce, 0xea, 0x93, 0x9}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) munlockall() 6.332971228s ago: executing program 4 (id=2492): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.273773126s ago: executing program 3 (id=2493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d", 0xd8}], 0x1, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b", 0x50}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a", 0x21}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c573", 0x4b}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.130220196s ago: executing program 2 (id=2494): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000003c00), 0x2, 0x0) fsync(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x24000000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0xa) 6.098218248s ago: executing program 4 (id=2495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r3, 0x0, 0x0, 0x20000840) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000003c0)={0x2, 0x6, 0x40}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) semop(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 4.335961303s ago: executing program 2 (id=2496): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff02, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x488c4) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.286380247s ago: executing program 5 (id=2497): r0 = socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 4.039455875s ago: executing program 5 (id=2498): pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffdc0, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/157, 0x9d) 2.953957787s ago: executing program 3 (id=2499): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d384", @ANYRESHEX, @ANYRESDEC=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, 0x0, 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe750561", 0x68}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f", 0x7e}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.288283807s ago: executing program 4 (id=2500): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2", @ANYRESHEX, @ANYBLOB=',group']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a034"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d0560", 0x5d}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.079665009s ago: executing program 0 (id=2501): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb26d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 970.48002ms ago: executing program 2 (id=2502): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 827.079962ms ago: executing program 5 (id=2503): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x1058, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 651.840534ms ago: executing program 0 (id=2504): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_open_dev$mouse(0x0, 0x6, 0x6ac000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0xffffffffffffff02, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x488c4) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 574.557753ms ago: executing program 5 (id=2505): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 401.413311ms ago: executing program 5 (id=2506): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) 77.785386ms ago: executing program 3 (id=2507): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) 0s ago: executing program 4 (id=2508): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140)=0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x100, 0x1f, 0x1, 0x9, 0x5, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x6, 0x1, 0x80, 0x80000006, 0xffffffbb, 0x20000009, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x17f, 0x200008, 0x8, 0xf39e, 0xffffffff, 0x8, 0xa6b3, 0xffffffff, 0xfffffff8]}) kernel console output (not intermixed with test programs): erent from the descriptor's value: 1 [ 436.201001][ T5738] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 436.201023][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.325286][ T198] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 436.325320][ T198] em28xx 2-1:0.0: board has no eeprom [ 436.409058][ T198] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 436.409088][ T198] em28xx 2-1:0.0: dvb set to bulk mode. [ 436.409447][ T5884] em28xx 2-1:0.0: Binding DVB extension [ 436.461736][ T198] usb 2-1: USB disconnect, device number 19 [ 436.493261][ T198] em28xx 2-1:0.0: Disconnecting em28xx [ 436.817897][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.828734][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.882052][ T5884] em28xx 2-1:0.0: Registering input extension [ 436.882286][ T198] em28xx 2-1:0.0: Closing input extension [ 436.987513][ T198] em28xx 2-1:0.0: Freeing device [ 437.303642][ T198] usb 1-1: USB disconnect, device number 23 [ 439.136063][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1210'. [ 439.658297][ T822] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 440.178736][ T822] usb 3-1: Using ep0 maxpacket: 8 [ 440.363558][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.375913][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.426146][ T5939] block nbd1: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 240 seconds [ 440.434619][ T5939] block nbd1: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 240 seconds [ 440.434791][ T5939] block nbd1: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 240 seconds [ 440.435133][ T5939] block nbd1: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 240 seconds [ 440.557856][ T822] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 440.557879][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.557894][ T822] usb 3-1: Product: syz [ 440.557905][ T822] usb 3-1: Manufacturer: syz [ 440.557916][ T822] usb 3-1: SerialNumber: syz [ 440.630092][ T822] usb 3-1: config 0 descriptor?? [ 440.650204][ T822] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 441.499983][ T822] gspca_sonixj: reg_r err -32 [ 441.500100][ T822] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 442.573044][ T5884] usb 3-1: USB disconnect, device number 22 [ 444.361927][ T5884] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 444.508210][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 444.514464][ T5884] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 444.514495][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.514516][ T5884] usb 5-1: Product: syz [ 444.514531][ T5884] usb 5-1: Manufacturer: syz [ 444.514546][ T5884] usb 5-1: SerialNumber: syz [ 444.583847][ T5884] usb 5-1: config 0 descriptor?? [ 444.597883][ T5884] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 445.240591][ T9459] siw: device registration error -23 [ 445.870806][ T5884] gspca_sonixj: reg_w1 err -110 [ 445.871076][ T5884] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 447.397174][ T822] usb 5-1: USB disconnect, device number 17 [ 449.056011][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.105022][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.111580][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.191794][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.220392][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 450.767799][ T9509] overlayfs: failed to resolve './file1': -2 [ 451.289848][ T9518] siw: device registration error -23 [ 452.033152][ T5620] Bluetooth: hci5: command tx timeout [ 452.521457][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 452.692547][ T9528] binder: 9520:9528 ioctl c0185500 200000001700 returned -22 [ 454.008231][ T5738] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 454.068452][ T5611] Bluetooth: hci5: command tx timeout [ 454.168390][ T5738] usb 5-1: Using ep0 maxpacket: 8 [ 454.169614][ T14] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.187908][ T5738] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 454.187987][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.188045][ T5738] usb 5-1: Product: syz [ 454.188439][ T5738] usb 5-1: Manufacturer: syz [ 454.188478][ T5738] usb 5-1: SerialNumber: syz [ 454.265767][ T5738] usb 5-1: config 0 descriptor?? [ 454.330769][ T5738] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 454.589215][ T9500] lo speed is unknown, defaulting to 1000 [ 455.045858][ T14] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.512497][ T9563] siw: device registration error -23 [ 456.393782][ T5611] Bluetooth: hci5: command tx timeout [ 457.329124][ T198] usb 5-1: USB disconnect, device number 18 [ 457.983780][ T14] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.107537][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.107594][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.107636][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.107676][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.448221][ T5611] Bluetooth: hci5: command tx timeout [ 458.789899][ T9601] siw: device registration error -23 [ 458.827049][ T14] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.982818][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.983337][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.983658][ T9500] bridge_slave_0: entered allmulticast mode [ 458.987596][ T9500] bridge_slave_0: entered promiscuous mode [ 459.027912][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.036679][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.037084][ T9500] bridge_slave_1: entered allmulticast mode [ 459.055509][ T9500] bridge_slave_1: entered promiscuous mode [ 459.258927][ T9500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.302006][ T9500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.878628][ T9500] team0: Port device team_slave_0 added [ 459.900960][ T9500] team0: Port device team_slave_1 added [ 460.068259][ T44] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 460.218222][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 460.227171][ T44] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 460.227201][ T44] usb 5-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 460.227239][ T44] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 460.237854][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.330544][ T9623] siw: device registration error -23 [ 462.568485][ T9626] syz_tun: entered allmulticast mode [ 462.577399][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.577417][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.577465][ T9500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.589407][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.589424][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.589454][ T9500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.854177][ T9617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.872575][ T9617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.341683][ T198] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 463.830323][ T14] bridge_slave_1: left allmulticast mode [ 463.830590][ T14] bridge_slave_1: left promiscuous mode [ 463.868244][ T198] usb 1-1: Using ep0 maxpacket: 16 [ 463.876831][ T198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 463.899845][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.903562][ T198] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 463.903591][ T198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.903611][ T198] usb 1-1: Product: syz [ 463.903631][ T198] usb 1-1: Manufacturer: syz [ 463.903642][ T198] usb 1-1: SerialNumber: syz [ 463.962495][ T198] usb 1-1: config 0 descriptor?? [ 463.995718][ T198] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 463.995746][ T198] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 464.175944][ T9642] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1301'. [ 464.295132][ T14] bridge_slave_0: left allmulticast mode [ 464.304088][ T14] bridge_slave_0: left promiscuous mode [ 464.306501][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.601627][ T198] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 465.048351][ T198] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 465.048385][ T198] em28xx 1-1:0.0: board has no eeprom [ 465.082108][ T9645] siw: device registration error -23 [ 465.109373][ T198] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 465.109415][ T198] em28xx 1-1:0.0: dvb set to bulk mode. [ 465.115998][ T5884] em28xx 1-1:0.0: Binding DVB extension [ 465.151192][ T198] usb 1-1: USB disconnect, device number 24 [ 465.154362][ T198] em28xx 1-1:0.0: Disconnecting em28xx [ 465.236497][ T5884] em28xx 1-1:0.0: Registering input extension [ 465.237491][ T198] em28xx 1-1:0.0: Closing input extension [ 465.323149][ T198] em28xx 1-1:0.0: Freeing device [ 466.209376][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.270997][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.297303][ T14] bond0 (unregistering): Released all slaves [ 466.365988][ T9500] hsr_slave_0: entered promiscuous mode [ 466.374484][ T9500] hsr_slave_1: entered promiscuous mode [ 466.376602][ T9500] debugfs: 'hsr0' already exists in 'hsr' [ 466.376633][ T9500] Cannot create hsr debugfs directory [ 466.521030][ T11] usb 5-1: USB disconnect, device number 19 [ 466.773086][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 466.990064][ T9670] binder: 9654:9670 ioctl c0185500 200000001700 returned -22 [ 467.097829][ T14] tipc: Left network mode [ 468.361440][ T5739] IPVS: starting estimator thread 0... [ 468.448512][ T9697] IPVS: using max 7 ests per chain, 16800 per kthread [ 468.686965][ T9699] siw: device registration error -23 [ 469.103631][ T9705] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1315'. [ 469.468262][ T44] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 469.720077][ T44] usb 1-1: config 246 has an invalid interface number: 166 but max is 0 [ 469.720108][ T44] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 469.720128][ T44] usb 1-1: config 246 has no interface number 0 [ 469.720186][ T44] usb 1-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 469.720209][ T44] usb 1-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.720236][ T44] usb 1-1: config 246 interface 166 has no altsetting 0 [ 469.740946][ T44] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 469.741029][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.741086][ T44] usb 1-1: Product: syz [ 469.741131][ T44] usb 1-1: Manufacturer: syz [ 469.741174][ T44] usb 1-1: SerialNumber: syz [ 469.882915][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 470.412125][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 470.415352][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 470.416625][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 470.417052][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 470.542312][ T44] usb 1-1: Cannot retrieve CPort count: -71 [ 470.542352][ T44] usb 1-1: Cannot retrieve CPort count: -71 [ 470.542376][ T44] es2_ap_driver 1-1:246.166: probe with driver es2_ap_driver failed with error -71 [ 470.591410][ T44] usb 1-1: USB disconnect, device number 25 [ 470.998271][ T5939] block nbd1: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 270 seconds [ 470.998320][ T5939] block nbd1: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 270 seconds [ 470.998363][ T5939] block nbd1: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 270 seconds [ 470.998395][ T5939] block nbd1: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 270 seconds [ 471.443322][ T9733] netlink: 'syz.0.1322': attribute type 49 has an invalid length. [ 471.768393][ T5738] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 471.930572][ T5738] usb 1-1: config 8 has an invalid interface number: 137 but max is 0 [ 471.930602][ T5738] usb 1-1: config 8 has no interface number 0 [ 471.935012][ T5738] usb 1-1: string descriptor 0 read error: -22 [ 471.935158][ T5738] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 471.935182][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.034918][ T5738] ttusb_dec_send_command: command bulk message failed: error -22 [ 472.035071][ T5738] ttusb-dec 1-1:8.137: probe with driver ttusb-dec failed with error -22 [ 472.913139][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 473.331429][ T11] usb 1-1: USB disconnect, device number 26 [ 473.679975][ T9761] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1328'. [ 474.659127][ T11] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 475.022906][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 475.847654][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 475.865666][ T11] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 475.865700][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.865721][ T11] usb 2-1: Product: syz [ 475.865736][ T11] usb 2-1: Manufacturer: syz [ 475.865751][ T11] usb 2-1: SerialNumber: syz [ 475.925863][ T11] usb 2-1: config 0 descriptor?? [ 476.014287][ T11] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 476.014324][ T11] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 476.126225][ T9778] syzkaller0: entered promiscuous mode [ 476.126252][ T9778] syzkaller0: entered allmulticast mode [ 476.999698][ T11] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 477.444042][ T11] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 477.444082][ T11] em28xx 2-1:0.0: board has no eeprom [ 477.650824][ T5739] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 477.651281][ T14] hsr_slave_0: left promiscuous mode [ 477.688233][ T14] hsr_slave_1: left promiscuous mode [ 477.715484][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.717684][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.783816][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.783839][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.790361][ T11] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 477.790447][ T11] em28xx 2-1:0.0: dvb set to bulk mode. [ 477.792177][ T5335] em28xx 2-1:0.0: Binding DVB extension [ 477.808322][ T5739] usb 1-1: Using ep0 maxpacket: 8 [ 477.845445][ T5739] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 477.845478][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.845499][ T5739] usb 1-1: Product: syz [ 477.845515][ T5739] usb 1-1: Manufacturer: syz [ 477.845530][ T5739] usb 1-1: SerialNumber: syz [ 477.847654][ T11] usb 2-1: USB disconnect, device number 20 [ 477.884326][ T11] em28xx 2-1:0.0: Disconnecting em28xx [ 477.929434][ T5739] usb 1-1: config 0 descriptor?? [ 477.994896][ T5739] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 478.098459][ T5335] em28xx 2-1:0.0: Registering input extension [ 478.098677][ T11] em28xx 2-1:0.0: Closing input extension [ 478.627962][ T11] em28xx 2-1:0.0: Freeing device [ 478.925445][ T14] veth1_macvtap: left promiscuous mode [ 478.925795][ T14] veth0_macvtap: left promiscuous mode [ 478.933718][ T14] veth1_vlan: left promiscuous mode [ 478.953298][ T14] veth0_vlan: left promiscuous mode [ 479.965258][ T9829] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1339'. [ 480.239206][ T14] team0 (unregistering): Port device team_slave_1 removed [ 480.299048][ T14] team0 (unregistering): Port device team_slave_0 removed [ 480.404162][ T822] usb 1-1: USB disconnect, device number 27 [ 481.613809][ T9835] overlayfs: failed to resolve './bus': -2 [ 481.769279][ T9808] syzkaller0: entered promiscuous mode [ 481.769305][ T9808] syzkaller0: entered allmulticast mode [ 485.762781][ T14] IPVS: stop unused estimator thread 0... [ 485.798629][ T5739] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 485.928243][ T5739] usb 5-1: device descriptor read/64, error -71 [ 485.960059][ T9500] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 486.215879][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.229797][ T5739] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 486.378633][ T5739] usb 5-1: device descriptor read/64, error -71 [ 486.488773][ T5739] usb usb5-port1: attempt power cycle [ 486.513008][ T9500] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 486.756835][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.763060][ T9500] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 486.849493][ T5739] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 486.879195][ T5739] usb 5-1: device descriptor read/8, error -71 [ 487.011141][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.014973][ T9500] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 487.158279][ T5739] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 487.179749][ T5739] usb 5-1: device descriptor read/8, error -71 [ 487.179773][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.288715][ T5739] usb usb5-port1: unable to enumerate USB device [ 488.360130][ T9500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.476150][ T9500] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.528880][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.529043][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.649987][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.650298][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.709056][ T9949] syzkaller0: entered promiscuous mode [ 488.709085][ T9949] syzkaller0: entered allmulticast mode [ 488.892766][ T9958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1366'. [ 491.508303][ T5884] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 491.635941][ T9500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.688532][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 491.706928][ T5884] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 491.706954][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.706968][ T5884] usb 1-1: Product: syz [ 491.706979][ T5884] usb 1-1: Manufacturer: syz [ 491.706989][ T5884] usb 1-1: SerialNumber: syz [ 491.751094][ T5884] usb 1-1: config 0 descriptor?? [ 491.788241][ T5884] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 492.197100][ T9500] veth0_vlan: entered promiscuous mode [ 492.523561][ T9500] veth1_vlan: entered promiscuous mode [ 492.940292][ T9500] veth0_macvtap: entered promiscuous mode [ 492.992003][ T9500] veth1_macvtap: entered promiscuous mode [ 494.021448][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.191102][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.266290][ T5739] usb 1-1: USB disconnect, device number 28 [ 494.386246][ T1581] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.435004][ T1581] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.435499][T10025] syzkaller0: entered promiscuous mode [ 494.435522][T10025] syzkaller0: entered allmulticast mode [ 494.487992][ T1581] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.488585][ T1581] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.638765][T10036] netlink: 60795 bytes leftover after parsing attributes in process `syz.2.1384'. [ 496.947310][ T3180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.947331][ T3180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.132673][ T1581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.132696][ T1581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.393804][T10075] netlink: 60795 bytes leftover after parsing attributes in process `syz.3.1395'. [ 501.492936][ T5939] block nbd1: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 300 seconds [ 501.492988][ T5939] block nbd1: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 300 seconds [ 501.493019][ T5939] block nbd1: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 300 seconds [ 501.493050][ T5939] block nbd1: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 300 seconds [ 501.697495][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.697595][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.148339][ T5718] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 502.307345][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 502.315768][ T5718] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 502.315798][ T5718] usb 4-1: config 0 has no interface number 0 [ 502.338004][ T5718] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 502.338158][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.338182][ T5718] usb 4-1: Product: syz [ 502.338196][ T5718] usb 4-1: Manufacturer: syz [ 502.338210][ T5718] usb 4-1: SerialNumber: syz [ 502.389017][ T5718] usb 4-1: config 0 descriptor?? [ 502.432558][ T5718] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 503.321132][ T5718] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 503.356927][ T5718] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 503.495549][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 503.506656][ T5718] usb 4-1: USB disconnect, device number 9 [ 503.521314][ T5718] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 503.554076][ T5718] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 503.554733][ T5718] quatech2 4-1:0.51: device disconnected [ 504.028389][ T11] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 505.001311][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 505.004984][ T11] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 505.005007][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.005021][ T11] usb 5-1: Product: syz [ 505.005031][ T11] usb 5-1: Manufacturer: syz [ 505.005041][ T11] usb 5-1: SerialNumber: syz [ 505.050273][ T11] usb 5-1: config 0 descriptor?? [ 505.091723][ T11] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 506.498330][T10121] netlink: 60795 bytes leftover after parsing attributes in process `syz.3.1408'. [ 507.696311][ T5718] usb 5-1: USB disconnect, device number 24 [ 508.355031][T10147] overlayfs: failed to resolve './file0': -2 [ 509.551644][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 509.551669][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 509.768628][ T5964] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 509.918166][ T5964] usb 4-1: Using ep0 maxpacket: 8 [ 509.927363][ T5964] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 509.927396][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.927417][ T5964] usb 4-1: Product: syz [ 509.927433][ T5964] usb 4-1: Manufacturer: syz [ 509.927448][ T5964] usb 4-1: SerialNumber: syz [ 509.977417][ T5964] usb 4-1: config 0 descriptor?? [ 509.994321][ T5964] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 511.578322][ T5884] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 511.739878][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 511.743748][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 511.762049][ T5884] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 511.762081][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.762102][ T5884] usb 5-1: Product: syz [ 511.762118][ T5884] usb 5-1: Manufacturer: syz [ 511.762133][ T5884] usb 5-1: SerialNumber: syz [ 511.785765][ T5884] usb 5-1: config 0 descriptor?? [ 511.836707][ T5884] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 511.836746][ T5884] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 512.118215][ T5718] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 512.268272][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 512.277746][ T5718] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 512.277773][ T5718] usb 1-1: config 0 has no interface number 0 [ 512.293912][ T5718] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 512.293944][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.293966][ T5718] usb 1-1: Product: syz [ 512.293980][ T5718] usb 1-1: Manufacturer: syz [ 512.293995][ T5718] usb 1-1: SerialNumber: syz [ 512.308305][ T5718] usb 1-1: config 0 descriptor?? [ 512.326165][ T5718] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 512.442853][ T5884] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 512.552479][ T5739] usb 4-1: USB disconnect, device number 10 [ 512.681934][ T5718] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 512.757910][T10208] binder: 10207:10208 ioctl 4018620d 0 returned -22 [ 512.774014][ T5718] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 512.870121][ T5884] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 512.870150][ T5884] em28xx 5-1:0.0: board has no eeprom [ 512.942158][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 512.946034][ T5718] usb 1-1: USB disconnect, device number 29 [ 512.988245][ T5884] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 512.988274][ T5884] em28xx 5-1:0.0: dvb set to bulk mode. [ 512.988980][ T5718] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 512.991069][ T11] em28xx 5-1:0.0: Binding DVB extension [ 513.074495][ T5718] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 513.079174][ T5884] usb 5-1: USB disconnect, device number 25 [ 513.112720][ T5884] em28xx 5-1:0.0: Disconnecting em28xx [ 513.129715][ T5718] quatech2 1-1:0.51: device disconnected [ 513.212675][ T11] em28xx 5-1:0.0: Registering input extension [ 513.212918][ T5884] em28xx 5-1:0.0: Closing input extension [ 513.237472][ T5884] em28xx 5-1:0.0: Freeing device [ 513.672538][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 513.765946][T10234] binder: 10224:10234 ioctl c0185500 200000001700 returned -22 [ 514.563279][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1446'. [ 514.722741][T10254] binder: 10245:10254 ioctl c0185500 200000001700 returned -22 [ 517.508617][ T5739] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 517.656358][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'. [ 517.669028][ T5739] usb 4-1: Using ep0 maxpacket: 16 [ 517.677179][ T5739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 517.701391][ T5739] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 517.701423][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.701500][ T5739] usb 4-1: Product: syz [ 517.701516][ T5739] usb 4-1: Manufacturer: syz [ 517.701531][ T5739] usb 4-1: SerialNumber: syz [ 517.753505][ T5739] usb 4-1: config 0 descriptor?? [ 517.789580][ T5739] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 517.789611][ T5739] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 518.062486][T10279] binder: 10271:10279 ioctl c0185500 200000001700 returned -22 [ 518.402228][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'. [ 518.402254][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1453'. [ 518.477771][ T5739] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 518.966541][ T5739] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 518.966574][ T5739] em28xx 4-1:0.0: board has no eeprom [ 519.592324][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'. [ 520.933786][T10263] em28xx 4-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 521.346263][ T5739] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 521.346294][ T5739] em28xx 4-1:0.0: dvb set to bulk mode. [ 521.346985][ T5884] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 521.408888][ T11] em28xx 4-1:0.0: Binding DVB extension [ 521.425462][ T5739] usb 4-1: USB disconnect, device number 11 [ 521.466056][T10324] overlayfs: missing 'lowerdir' [ 521.518338][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 521.526393][ T5884] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 521.526486][ T5884] usb 3-1: config 0 has no interface number 0 [ 521.545714][ T5884] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 521.545746][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.545767][ T5884] usb 3-1: Product: syz [ 521.545783][ T5884] usb 3-1: Manufacturer: syz [ 521.545798][ T5884] usb 3-1: SerialNumber: syz [ 521.584241][ T5884] usb 3-1: config 0 descriptor?? [ 521.596150][ T5884] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 521.677118][ T5739] em28xx 4-1:0.0: Disconnecting em28xx [ 521.837223][ T5884] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 521.919065][ T5884] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 521.920517][ T11] em28xx 4-1:0.0: Registering input extension [ 521.925115][ T5739] em28xx 4-1:0.0: Closing input extension [ 522.162208][ T5739] em28xx 4-1:0.0: Freeing device [ 523.289980][ T5718] usb 3-1: USB disconnect, device number 23 [ 523.793331][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 523.936031][ T5804] udevd[5804]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 523.936179][ T5804] udevd[5804]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 523.991926][ T5718] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 524.050130][ T5718] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 524.074976][ T5718] quatech2 3-1:0.51: device disconnected [ 526.524571][T10358] overlayfs: missing 'lowerdir' [ 528.078139][ T11] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 528.228178][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 528.230606][ T11] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.230641][ T11] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.230665][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 528.230699][ T11] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 528.230899][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.239168][ T11] usb 3-1: config 0 descriptor?? [ 529.064767][T10391] loop4: detected capacity change from 0 to 40427 [ 529.092262][ T11] usbhid 3-1:0.0: can't add hid device: -71 [ 529.092355][ T11] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 529.256838][T10391] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 529.256922][T10391] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 529.363800][T10391] F2FS-fs (loop4): invalid crc value [ 529.554030][T10391] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 529.623943][T10391] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 529.623967][T10391] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 529.673686][ T11] usb 3-1: USB disconnect, device number 24 [ 530.960432][T10408] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 531.762859][T10411] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.775880][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.811947][ T5939] block nbd1: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 330 seconds [ 531.811998][ T5939] block nbd1: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 330 seconds [ 531.812030][ T5939] block nbd1: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 330 seconds [ 531.812063][ T5939] block nbd1: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 330 seconds [ 532.021410][ T5610] Flush: task=syz-executor[5610] dev=loop4 state=2 [ 532.116136][ T5610] Teardown: task=syz-executor[5610] dev=loop4 state=2 [ 532.935899][T10411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.974485][T10411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.958229][ T822] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 534.109064][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 534.126867][ T822] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.126957][ T822] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.127033][ T822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 534.127139][ T822] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 534.127164][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.156918][ T822] usb 3-1: config 0 descriptor?? [ 534.695215][T10449] loop1: detected capacity change from 0 to 40427 [ 534.725634][T10449] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 534.725663][T10449] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 534.736062][ T5851] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.753662][T10449] F2FS-fs (loop1): invalid crc value [ 534.757796][ T5851] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.758839][ T5851] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.759102][ T5851] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.012131][T10449] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 535.059265][T10449] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 535.059297][T10449] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 535.370286][ T822] usbhid 3-1:0.0: can't add hid device: -71 [ 535.370411][ T822] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 535.411626][ T822] usb 3-1: USB disconnect, device number 25 [ 537.108262][ T822] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 537.303123][ T5614] Flush: task=syz-executor[5614] dev=loop1 state=2 [ 537.308166][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 537.325459][ T822] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 537.325489][ T822] usb 3-1: config 0 has no interface number 0 [ 537.347063][ T822] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 537.347086][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.347100][ T822] usb 3-1: Product: syz [ 537.347111][ T822] usb 3-1: Manufacturer: syz [ 537.347122][ T822] usb 3-1: SerialNumber: syz [ 537.357882][ T822] usb 3-1: config 0 descriptor?? [ 537.401246][ T822] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 537.680708][ T5614] Teardown: task=syz-executor[5614] dev=loop1 state=2 [ 537.727775][ T822] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 537.907132][ T822] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 538.083431][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 538.098807][ T822] usb 3-1: USB disconnect, device number 26 [ 538.151684][ T822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 538.244359][ T822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 538.245367][ T822] quatech2 3-1:0.51: device disconnected [ 539.076321][T10505] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1522'. [ 539.274599][T10508] netlink: 'syz.1.1523': attribute type 1 has an invalid length. [ 539.274622][T10508] netlink: 60795 bytes leftover after parsing attributes in process `syz.1.1523'. [ 539.680918][T10509] loop3: detected capacity change from 0 to 40427 [ 539.732094][T10509] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 539.732122][T10509] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 539.797385][T10509] F2FS-fs (loop3): invalid crc value [ 539.956824][T10509] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 540.009544][T10509] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 540.009578][T10509] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 543.127250][ T9500] Flush: task=syz-executor[9500] dev=loop3 state=2 [ 543.226040][ T9500] Teardown: task=syz-executor[9500] dev=loop3 state=2 [ 544.438165][ T5964] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 544.572323][T10561] loop4: detected capacity change from 0 to 40427 [ 544.591546][ T5964] usb 2-1: Using ep0 maxpacket: 16 [ 544.611137][ T5964] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.611177][ T5964] usb 2-1: config 0 interface 0 has no altsetting 0 [ 544.611215][ T5964] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 544.611241][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.669016][T10561] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 544.669044][T10561] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 544.707690][T10561] F2FS-fs (loop4): invalid crc value [ 544.742383][ T5964] usb 2-1: config 0 descriptor?? [ 544.875676][T10561] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 544.912209][T10561] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 544.912243][T10561] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 546.077289][ T5964] hid_parser_main: 15 callbacks suppressed [ 546.077332][ T5964] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 546.077366][ T5964] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 546.077385][ T5964] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 546.077403][ T5964] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 546.106487][ T5964] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 546.168555][ T5964] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 546.649956][ T11] usb 2-1: USB disconnect, device number 21 [ 546.755877][T10576] fido_id[10576]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 547.508252][ T5610] Flush: task=syz-executor[5610] dev=loop4 state=2 [ 547.588522][ T5610] Teardown: task=syz-executor[5610] dev=loop4 state=2 [ 548.288274][ T44] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 548.371460][ T5884] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 548.438798][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 548.458210][ T44] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.458246][ T44] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.458269][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 548.458302][ T44] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 548.458325][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.520448][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 548.524633][ T44] usb 3-1: config 0 descriptor?? [ 548.525998][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 548.554168][ T5884] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 548.554201][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.554223][ T5884] usb 1-1: Product: syz [ 548.554238][ T5884] usb 1-1: Manufacturer: syz [ 548.554253][ T5884] usb 1-1: SerialNumber: syz [ 548.649328][ T5884] usb 1-1: config 0 descriptor?? [ 548.674966][ T5884] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 548.675005][ T5884] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 549.009415][ T44] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 549.009454][ T44] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 549.009482][ T44] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 549.009508][ T44] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 549.009534][ T44] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 549.067364][ T44] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 549.208864][ T44] usb 3-1: USB disconnect, device number 27 [ 549.310518][ T5884] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 550.053781][T10611] fido_id[10611]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 550.561519][T10617] loop1: detected capacity change from 0 to 40427 [ 550.566407][ T5884] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 550.566482][ T5884] em28xx 1-1:0.0: board has no eeprom [ 550.627614][T10617] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 550.627643][T10617] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 550.650601][T10617] F2FS-fs (loop1): invalid crc value [ 550.708220][ T5884] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 550.708253][ T5884] em28xx 1-1:0.0: dvb set to bulk mode. [ 550.709638][ T5739] em28xx 1-1:0.0: Binding DVB extension [ 550.795886][T10617] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 550.820864][T10617] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 550.820887][T10617] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 550.936101][ T5884] usb 1-1: USB disconnect, device number 30 [ 550.970000][ T5884] em28xx 1-1:0.0: Disconnecting em28xx [ 552.153911][ T5739] em28xx 1-1:0.0: Registering input extension [ 552.159829][ T5884] em28xx 1-1:0.0: Closing input extension [ 552.283493][ T5884] em28xx 1-1:0.0: Freeing device [ 552.468334][ T5739] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 552.682014][ T5739] usb 4-1: Using ep0 maxpacket: 16 [ 552.827685][ T5739] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.827720][ T5739] usb 4-1: config 0 interface 0 has no altsetting 0 [ 552.827753][ T5739] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 552.827775][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.016675][ T5739] usb 4-1: config 0 descriptor?? [ 553.646871][ T5739] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 553.646914][ T5739] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 553.646942][ T5739] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 553.646969][ T5739] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 553.646996][ T5739] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 553.735892][ T5739] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 553.931661][ T5739] usb 4-1: USB disconnect, device number 12 [ 554.209443][T10641] fido_id[10641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 554.212443][T10646] syzkaller0: entered promiscuous mode [ 554.212470][T10646] syzkaller0: entered allmulticast mode [ 554.746061][ T5614] Flush: task=syz-executor[5614] dev=loop1 state=2 [ 554.828811][ T5614] Teardown: task=syz-executor[5614] dev=loop1 state=2 [ 558.518689][T10681] loop4: detected capacity change from 0 to 40427 [ 558.548166][T10681] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 558.548194][T10681] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 558.718141][T10681] F2FS-fs (loop4): invalid crc value [ 559.210710][T10681] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 559.252671][T10681] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 559.252704][T10681] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 560.140384][T10696] siw: device registration error -23 [ 561.309192][ T822] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 561.458293][ T822] usb 4-1: Using ep0 maxpacket: 16 [ 561.460193][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 561.494922][ T822] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 561.494956][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.494976][ T822] usb 4-1: Product: syz [ 561.494990][ T822] usb 4-1: Manufacturer: syz [ 561.495005][ T822] usb 4-1: SerialNumber: syz [ 561.536057][ T822] usb 4-1: config 0 descriptor?? [ 561.561208][ T822] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 561.561252][ T822] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 562.202982][ T822] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 562.502016][ T5939] block nbd1: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 360 seconds [ 562.502064][ T5939] block nbd1: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 360 seconds [ 562.502089][ T5939] block nbd1: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 360 seconds [ 562.502113][ T5939] block nbd1: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 360 seconds [ 562.868980][ T822] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 562.869011][ T822] em28xx 4-1:0.0: board has no eeprom [ 562.922717][ T5610] Flush: task=syz-executor[5610] dev=loop4 state=2 [ 563.018170][ T822] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 563.018201][ T822] em28xx 4-1:0.0: dvb set to bulk mode. [ 563.018561][ T5964] em28xx 4-1:0.0: Binding DVB extension [ 563.072375][ T5610] Teardown: task=syz-executor[5610] dev=loop4 state=2 [ 563.090774][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.090866][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.131883][ T822] usb 4-1: USB disconnect, device number 13 [ 563.158852][ T822] em28xx 4-1:0.0: Disconnecting em28xx [ 563.380451][ T5964] em28xx 4-1:0.0: Registering input extension [ 563.385815][ T822] em28xx 4-1:0.0: Closing input extension [ 563.689001][ T822] em28xx 4-1:0.0: Freeing device [ 563.743766][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'. [ 563.897485][T10719] binder: 10718:10719 ioctl c0185500 200000001700 returned -22 [ 564.457099][T10731] siw: device registration error -23 [ 565.506261][T10737] binder: BINDER_SET_CONTEXT_MGR already set [ 565.506287][T10737] binder: 10736:10737 ioctl 4018620d 200000000100 returned -16 [ 568.028389][ T5335] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 568.160842][ T5335] usb 3-1: device descriptor read/64, error -71 [ 568.400318][ T5335] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 568.538754][ T5335] usb 3-1: device descriptor read/64, error -71 [ 568.649140][ T5335] usb usb3-port1: attempt power cycle [ 569.088745][ T5335] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 569.117351][ T5335] usb 3-1: device descriptor read/8, error -71 [ 569.310212][ T5739] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 569.348132][ T5335] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 569.369603][ T5335] usb 3-1: device descriptor read/8, error -71 [ 569.463129][ T5739] usb 4-1: config 246 has an invalid interface number: 166 but max is 0 [ 569.463159][ T5739] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 569.463180][ T5739] usb 4-1: config 246 has no interface number 0 [ 569.463225][ T5739] usb 4-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 569.463249][ T5739] usb 4-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.463278][ T5739] usb 4-1: config 246 interface 166 has no altsetting 0 [ 569.488679][ T5335] usb usb3-port1: unable to enumerate USB device [ 569.566107][ T5739] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 569.566140][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.566163][ T5739] usb 4-1: Product: syz [ 569.566178][ T5739] usb 4-1: Manufacturer: syz [ 569.566192][ T5739] usb 4-1: SerialNumber: syz [ 570.261371][ T5739] usb 4-1: Cannot retrieve CPort count: -32 [ 570.261423][ T5739] usb 4-1: Cannot retrieve CPort count: -32 [ 570.261461][ T5739] es2_ap_driver 4-1:246.166: probe with driver es2_ap_driver failed with error -32 [ 570.349542][ T5739] usb 4-1: USB disconnect, device number 14 [ 573.228153][ T5884] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 574.429960][ T5884] usb 2-1: device descriptor read/all, error -71 [ 575.418361][T10783] Bluetooth: hci5: command 0x0406 tx timeout [ 580.866605][T10828] overlayfs: failed to resolve './file0': -2 [ 583.800644][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 583.836847][T10859] overlayfs: missing 'workdir' [ 585.993555][ T5884] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 586.118775][ T5739] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 586.170394][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 586.187677][ T5884] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.187703][ T5884] usb 3-1: config 0 interface 0 has no altsetting 0 [ 586.187743][ T5884] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 586.187768][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.248570][ T5884] usb 3-1: config 0 descriptor?? [ 586.319510][ T5739] usb 5-1: device descriptor read/64, error -71 [ 586.558268][ T5739] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 586.710514][ T5884] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 586.712287][ T5884] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 586.712324][ T5884] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 586.729002][ T5739] usb 5-1: device descriptor read/64, error -71 [ 586.729958][ T5884] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 586.754112][ T822] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 586.840197][ T5739] usb usb5-port1: attempt power cycle [ 586.930056][ T822] usb 4-1: config 246 has an invalid interface number: 166 but max is 0 [ 586.930087][ T822] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 586.930108][ T822] usb 4-1: config 246 has no interface number 0 [ 586.930153][ T822] usb 4-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 586.930180][ T822] usb 4-1: config 246 interface 166 has no altsetting 0 [ 586.980052][ T822] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 586.980085][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.980106][ T822] usb 4-1: Product: syz [ 586.980122][ T822] usb 4-1: Manufacturer: syz [ 586.980138][ T822] usb 4-1: SerialNumber: syz [ 587.107051][ T5884] usb 3-1: USB disconnect, device number 32 [ 587.212881][ T5739] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 587.234882][ T5739] usb 5-1: device descriptor read/8, error -71 [ 587.282465][T10902] fido_id[10902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 587.468262][ T5739] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 587.489212][ T5739] usb 5-1: device descriptor read/8, error -71 [ 587.547770][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 587.572855][ T822] usb 4-1: Cannot retrieve CPort count: -71 [ 587.572889][ T822] usb 4-1: Cannot retrieve CPort count: -71 [ 587.572912][ T822] es2_ap_driver 4-1:246.166: probe with driver es2_ap_driver failed with error -71 [ 587.617032][ T5739] usb usb5-port1: unable to enumerate USB device [ 587.643709][ T822] usb 4-1: USB disconnect, device number 15 [ 589.405377][T10928] binder: BINDER_SET_CONTEXT_MGR already set [ 589.405394][T10928] binder: 10927:10928 ioctl 4018620d 2000000002c0 returned -16 [ 591.796031][T10943] netlink: 'syz.4.1648': attribute type 1 has an invalid length. [ 591.796056][T10943] netlink: 60795 bytes leftover after parsing attributes in process `syz.4.1648'. [ 593.273211][ T5939] block nbd1: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 390 seconds [ 593.273264][ T5939] block nbd1: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 390 seconds [ 593.273295][ T5939] block nbd1: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 390 seconds [ 593.273324][ T5939] block nbd1: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 390 seconds [ 595.406930][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1657'. [ 595.484166][T10973] binder: 10972:10973 ioctl c0185500 200000001700 returned -22 [ 596.564969][T10998] siw: device registration error -23 [ 598.093807][ T44] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 599.098266][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 599.126336][ T44] usb 4-1: config 0 has no interfaces? [ 599.137454][ T44] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 599.137487][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.137509][ T44] usb 4-1: Product: syz [ 599.137525][ T44] usb 4-1: Manufacturer: syz [ 599.137540][ T44] usb 4-1: SerialNumber: syz [ 599.191262][ T44] usb 4-1: config 0 descriptor?? [ 599.591100][T11021] capability: warning: `syz.2.1674' uses deprecated v2 capabilities in a way that may be insecure [ 600.855605][ T5739] usb 4-1: USB disconnect, device number 16 [ 602.265918][T11082] siw: device registration error -23 [ 605.898264][ T5739] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 606.088757][ T5739] usb 1-1: Using ep0 maxpacket: 16 [ 606.773276][ T5739] usb 1-1: config 0 has no interfaces? [ 606.787124][ T5739] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 606.787156][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.787176][ T5739] usb 1-1: Product: syz [ 606.787191][ T5739] usb 1-1: Manufacturer: syz [ 606.787206][ T5739] usb 1-1: SerialNumber: syz [ 606.843950][ T5739] usb 1-1: config 0 descriptor?? [ 607.301970][T11141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1704'. [ 607.628817][T11147] binder: 11146:11147 ioctl 4018620d 0 returned -22 [ 608.311709][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1707'. [ 608.894977][ T5739] usb 1-1: USB disconnect, device number 31 [ 610.114137][T11177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1715'. [ 610.316595][T11185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1718'. [ 613.214540][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'. [ 613.593258][T11218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1730'. [ 613.621653][T11219] syzkaller0: entered promiscuous mode [ 613.621679][T11219] syzkaller0: entered allmulticast mode [ 613.938360][ T5739] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 614.088164][ T5739] usb 5-1: Using ep0 maxpacket: 16 [ 614.090355][ T5739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 614.094686][ T5739] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 614.094717][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.094736][ T5739] usb 5-1: Product: syz [ 614.094757][ T5739] usb 5-1: Manufacturer: syz [ 614.094767][ T5739] usb 5-1: SerialNumber: syz [ 614.148930][ T5739] usb 5-1: config 0 descriptor?? [ 614.155060][ T5739] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 614.155085][ T5739] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 616.172392][ T5739] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 616.825060][T11255] siw: device registration error -23 [ 617.388660][T11256] siw: device registration error -23 [ 618.729553][T11259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1741'. [ 619.611765][ T5739] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 619.611798][ T5739] em28xx 5-1:0.0: board has no eeprom [ 619.728159][ T5739] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 619.728191][ T5739] em28xx 5-1:0.0: dvb set to bulk mode. [ 619.728270][ T5335] em28xx 5-1:0.0: Binding DVB extension [ 619.754432][ T5739] usb 5-1: USB disconnect, device number 30 [ 619.812109][ T5739] em28xx 5-1:0.0: Disconnecting em28xx [ 619.946241][ T5335] em28xx 5-1:0.0: Registering input extension [ 619.946483][ T5739] em28xx 5-1:0.0: Closing input extension [ 619.970758][ T5739] em28xx 5-1:0.0: Freeing device [ 620.238242][ T5711] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 620.908790][ T5711] usb 4-1: Using ep0 maxpacket: 8 [ 620.911361][ T5711] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 620.911389][ T5711] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 620.911427][ T5711] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 620.911451][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.012558][T11282] binder: BINDER_SET_CONTEXT_MGR already set [ 621.012575][T11282] binder: 11281:11282 ioctl 4018620d 2000000002c0 returned -16 [ 621.273281][T11273] syz_tun: entered allmulticast mode [ 621.362859][T11285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.366511][T11285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.538132][ T5718] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 621.688200][ T5718] usb 1-1: Using ep0 maxpacket: 16 [ 621.691011][ T5718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.696128][ T5718] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 621.696212][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.696236][ T5718] usb 1-1: Product: syz [ 621.696259][ T5718] usb 1-1: Manufacturer: syz [ 621.696274][ T5718] usb 1-1: SerialNumber: syz [ 621.953075][ T5718] usb 1-1: config 0 descriptor?? [ 621.989594][ T5718] usb 4-1: USB disconnect, device number 17 [ 622.419695][ T822] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 622.579743][ T822] usb 5-1: Using ep0 maxpacket: 16 [ 622.581877][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 622.586302][ T822] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 622.586333][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.586353][ T822] usb 5-1: Product: syz [ 622.586367][ T822] usb 5-1: Manufacturer: syz [ 622.586383][ T822] usb 5-1: SerialNumber: syz [ 622.665577][ T822] usb 5-1: config 0 descriptor?? [ 622.686778][ T822] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 622.686816][ T822] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 622.803226][T11301] netlink: 'syz.1.1755': attribute type 49 has an invalid length. [ 623.118312][ T5718] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 623.221977][T11305] siw: device registration error -23 [ 624.356056][ T5335] usb 1-1: USB disconnect, device number 32 [ 624.451067][ T5939] block nbd1: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 420 seconds [ 624.451117][ T5939] block nbd1: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 420 seconds [ 624.451209][ T5939] block nbd1: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 420 seconds [ 624.451250][ T5939] block nbd1: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 420 seconds [ 624.512402][ T5718] usb 2-1: config 8 has an invalid interface number: 137 but max is 0 [ 624.512437][ T5718] usb 2-1: config 8 has no interface number 0 [ 624.512715][ T822] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 624.561120][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.561212][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.638832][ T5718] usb 2-1: string descriptor 0 read error: -22 [ 624.639142][ T5718] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 624.639170][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.692943][ T5718] ttusb_dec_send_command: command bulk message failed: error -22 [ 624.754463][ T5718] ttusb-dec 2-1:8.137: probe with driver ttusb-dec failed with error -22 [ 625.221098][T11314] vivid-001: disconnect [ 625.426500][T11313] vivid-001: reconnect [ 626.285056][ T822] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 626.285092][ T822] em28xx 5-1:0.0: board has no eeprom [ 626.521531][ T822] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 626.521565][ T822] em28xx 5-1:0.0: dvb set to bulk mode. [ 626.538308][ T44] em28xx 5-1:0.0: Binding DVB extension [ 626.580573][ T822] usb 5-1: USB disconnect, device number 31 [ 626.585071][ T822] em28xx 5-1:0.0: Disconnecting em28xx [ 626.952303][ T44] em28xx 5-1:0.0: Registering input extension [ 626.953728][ T822] em28xx 5-1:0.0: Closing input extension [ 627.261785][ T822] em28xx 5-1:0.0: Freeing device [ 627.319001][ T8642] udevd[8642]: setting owner of /dev/bus/usb/005/031 to uid=0, gid=0 failed: No such file or directory [ 629.042063][ T5718] usb 2-1: USB disconnect, device number 24 [ 629.690490][ T5718] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 629.858291][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 629.860712][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 629.863135][ T5718] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 629.863163][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.863183][ T5718] usb 2-1: Product: syz [ 629.863197][ T5718] usb 2-1: Manufacturer: syz [ 629.863211][ T5718] usb 2-1: SerialNumber: syz [ 629.948518][ T5718] usb 2-1: config 0 descriptor?? [ 630.017523][ T5718] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 630.017561][ T5718] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 630.721535][ T5718] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 630.721557][T11365] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.742533][T11365] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.397614][ T5718] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 631.397639][ T5718] em28xx 2-1:0.0: board has no eeprom [ 631.678488][ T5718] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 631.678520][ T5718] em28xx 2-1:0.0: dvb set to bulk mode. [ 631.679620][ T822] em28xx 2-1:0.0: Binding DVB extension [ 631.772755][ T5718] usb 2-1: USB disconnect, device number 25 [ 631.775295][ T5718] em28xx 2-1:0.0: Disconnecting em28xx [ 631.944924][ T822] em28xx 2-1:0.0: Registering input extension [ 631.947090][ T5718] em28xx 2-1:0.0: Closing input extension [ 632.004866][ T5718] em28xx 2-1:0.0: Freeing device [ 632.099192][T11365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.141732][T11365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.226599][T11406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1787'. [ 632.226623][T11406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1787'. [ 632.226640][T11406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1787'. [ 634.152873][T11444] vivid-003: disconnect [ 634.634396][ T1558] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.636154][ T1558] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.636300][ T1558] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.636356][ T1558] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.871476][T11465] syzkaller0: entered promiscuous mode [ 634.871503][T11465] syzkaller0: entered allmulticast mode [ 634.978144][ T5739] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 635.024953][T11443] vivid-003: reconnect [ 635.134750][ T5739] usb 1-1: config 246 has an invalid interface number: 166 but max is 0 [ 635.134781][ T5739] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 635.134801][ T5739] usb 1-1: config 246 has no interface number 0 [ 635.134846][ T5739] usb 1-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 635.134874][ T5739] usb 1-1: config 246 interface 166 has no altsetting 0 [ 635.137640][ T5739] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 635.137671][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.137691][ T5739] usb 1-1: Product: syz [ 635.137706][ T5739] usb 1-1: Manufacturer: syz [ 635.137721][ T5739] usb 1-1: SerialNumber: syz [ 635.647607][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 635.648224][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 635.656339][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 635.656903][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 635.690241][ T5739] usb 1-1: Cannot retrieve CPort count: -71 [ 635.690297][ T5739] usb 1-1: Cannot retrieve CPort count: -71 [ 635.690331][ T5739] es2_ap_driver 1-1:246.166: probe with driver es2_ap_driver failed with error -71 [ 635.843413][ T5739] usb 1-1: USB disconnect, device number 33 [ 643.749768][T11587] process 'syz.0.1857' launched '/dev/fd/7' with NULL argv: empty string added [ 644.368239][ T5739] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 644.554015][ T5739] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 644.592721][ T5739] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 644.592744][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 644.592760][ T5739] usb 1-1: Product: syz [ 644.592770][ T5739] usb 1-1: Manufacturer: syz [ 644.592781][ T5739] usb 1-1: SerialNumber: syz [ 644.874154][T11609] syzkaller0: entered promiscuous mode [ 644.874183][T11609] syzkaller0: entered allmulticast mode [ 645.056562][ T5739] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 646.092651][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'. [ 646.246668][T11640] binder: 11634:11640 ioctl c0185500 200000001700 returned -22 [ 647.758562][ T5711] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 647.936599][ T5711] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.980381][ T5711] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 647.980405][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 647.980420][ T5711] usb 4-1: Product: syz [ 647.980431][ T5711] usb 4-1: Manufacturer: syz [ 647.980441][ T5711] usb 4-1: SerialNumber: syz [ 648.438347][ T5711] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 648.684808][ T5718] usb 1-1: USB disconnect, device number 34 [ 648.750856][ T5711] usb 4-1: USB disconnect, device number 18 [ 648.914797][ T5718] usblp0: removed [ 648.916831][ T5711] usblp1: removed [ 649.183973][T10783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 649.234980][T10783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 649.241896][T10783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 649.246494][T10783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 649.259211][T10783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 650.813930][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1907'. [ 650.991898][T11727] binder: 11717:11727 ioctl c0185500 200000001700 returned -22 [ 651.408127][ T5611] Bluetooth: hci4: command tx timeout [ 651.925935][T11686] lo speed is unknown, defaulting to 1000 [ 653.648154][ T5611] Bluetooth: hci4: command tx timeout [ 654.076481][T11686] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.077094][T11686] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.077505][T11686] bridge_slave_0: entered allmulticast mode [ 654.104966][T11686] bridge_slave_0: entered promiscuous mode [ 654.117160][T11686] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.117616][T11686] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.133063][T11686] bridge_slave_1: entered allmulticast mode [ 654.137845][T11686] bridge_slave_1: entered promiscuous mode [ 654.293341][T11686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.313641][T11686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.613609][T11686] team0: Port device team_slave_0 added [ 654.631259][T11686] team0: Port device team_slave_1 added [ 654.648377][ T5939] block nbd1: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 450 seconds [ 654.648429][ T5939] block nbd1: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 450 seconds [ 654.648466][ T5939] block nbd1: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 450 seconds [ 654.648501][ T5939] block nbd1: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 450 seconds [ 654.829203][T11686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.829223][T11686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.829252][T11686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.837456][T11686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.837475][T11686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.837506][T11686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.468907][T11686] hsr_slave_0: entered promiscuous mode [ 655.483215][T11686] hsr_slave_1: entered promiscuous mode [ 655.495184][T11686] debugfs: 'hsr0' already exists in 'hsr' [ 655.495217][T11686] Cannot create hsr debugfs directory [ 655.758624][ T5611] Bluetooth: hci4: command tx timeout [ 656.516555][T11810] netlink: 'syz.0.1939': attribute type 49 has an invalid length. [ 656.646461][T11814] binder: 11811:11814 ioctl c0306201 0 returned -14 [ 656.818231][ T5739] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 656.974087][ T5739] usb 1-1: config 8 has an invalid interface number: 137 but max is 0 [ 656.974117][ T5739] usb 1-1: config 8 has no interface number 0 [ 657.000201][ T5739] usb 1-1: string descriptor 0 read error: -22 [ 657.000347][ T5739] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 657.000372][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.060721][ T5739] ttusb_dec_send_command: command bulk message failed: error -22 [ 657.060983][ T5739] ttusb-dec 1-1:8.137: probe with driver ttusb-dec failed with error -22 [ 657.519075][ T822] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 657.681679][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.681732][ T822] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 657.681757][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.735175][ T822] usb 4-1: config 0 descriptor?? [ 657.808332][ T5611] Bluetooth: hci4: command tx timeout [ 658.226967][ T44] usb 1-1: USB disconnect, device number 35 [ 658.771695][ T822] usbhid 4-1:0.0: can't add hid device: -71 [ 658.771953][ T822] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 658.811240][ T822] usb 4-1: USB disconnect, device number 19 [ 661.446614][T11686] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 661.494114][T11686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 661.495869][T11686] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 661.654466][T11686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 662.000606][ T5739] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 662.048634][T11686] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 662.135836][T11686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 662.149611][ T5739] usb 5-1: Using ep0 maxpacket: 16 [ 662.171844][T11686] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 662.262657][ T5739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 662.267546][ T5739] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 662.267578][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.267600][ T5739] usb 5-1: Product: syz [ 662.267615][ T5739] usb 5-1: Manufacturer: syz [ 662.267629][ T5739] usb 5-1: SerialNumber: syz [ 662.334273][ T5739] usb 5-1: config 0 descriptor?? [ 662.357104][ T5739] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 662.357143][ T5739] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 662.415109][T11686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 662.915957][T11901] vivid-001: disconnect [ 662.972993][ T5739] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 663.160470][T11686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.237067][T11686] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.321206][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.335201][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.474625][ T1558] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.474957][ T1558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.612559][ T5739] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 663.612596][ T5739] em28xx 5-1:0.0: board has no eeprom [ 663.689993][ T5739] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 663.690024][ T5739] em28xx 5-1:0.0: dvb set to bulk mode. [ 663.694909][ T5711] em28xx 5-1:0.0: Binding DVB extension [ 663.775035][ T5739] usb 5-1: USB disconnect, device number 32 [ 663.820666][ T5739] em28xx 5-1:0.0: Disconnecting em28xx [ 663.849510][ T5711] em28xx 5-1:0.0: Registering input extension [ 663.849783][ T5739] em28xx 5-1:0.0: Closing input extension [ 663.948530][T11900] vivid-001: reconnect [ 663.998868][ T5739] em28xx 5-1:0.0: Freeing device [ 665.378193][ T44] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 665.538444][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 665.542931][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 665.554536][ T44] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 665.554625][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.554681][ T44] usb 5-1: Product: syz [ 665.554730][ T44] usb 5-1: Manufacturer: syz [ 665.554766][ T44] usb 5-1: SerialNumber: syz [ 665.620455][ T44] usb 5-1: config 0 descriptor?? [ 665.659861][ T44] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 665.659901][ T44] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 665.971390][T11686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.248894][ T44] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 666.427883][T11974] binder: 11971:11974 ioctl 4018620d 0 returned -22 [ 666.763001][T11686] veth0_vlan: entered promiscuous mode [ 666.815418][T11686] veth1_vlan: entered promiscuous mode [ 666.890844][ T44] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 666.890869][ T44] em28xx 5-1:0.0: board has no eeprom [ 667.013238][ T44] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 667.013271][ T44] em28xx 5-1:0.0: dvb set to bulk mode. [ 667.013554][ T822] em28xx 5-1:0.0: Binding DVB extension [ 667.095355][T11686] veth0_macvtap: entered promiscuous mode [ 667.109837][ T44] usb 5-1: USB disconnect, device number 33 [ 667.132276][ T44] em28xx 5-1:0.0: Disconnecting em28xx [ 667.181438][T11686] veth1_macvtap: entered promiscuous mode [ 667.369634][T11686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.550600][ T822] em28xx 5-1:0.0: Registering input extension [ 667.552374][ T44] em28xx 5-1:0.0: Closing input extension [ 667.623109][T11686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.689271][ T44] em28xx 5-1:0.0: Freeing device [ 667.743659][ T804] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.743972][ T804] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.744734][ T804] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.775227][ T804] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.381676][ T1581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.381699][ T1581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.659732][ T1581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.659754][ T1581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.692745][ T5711] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 670.908797][ T5711] usb 1-1: Using ep0 maxpacket: 16 [ 670.917191][ T5711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 670.940103][ T5711] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 670.940134][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.940156][ T5711] usb 1-1: Product: syz [ 670.940170][ T5711] usb 1-1: Manufacturer: syz [ 670.940185][ T5711] usb 1-1: SerialNumber: syz [ 670.989929][ T5711] usb 1-1: config 0 descriptor?? [ 671.010400][ T5711] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 671.010439][ T5711] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 671.330311][T12043] vivid-001: disconnect [ 671.772518][T12053] siw: device registration error -23 [ 672.695334][ T5711] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 672.950542][ T5711] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 672.950577][ T5711] em28xx 1-1:0.0: board has no eeprom [ 673.222324][T12043] vivid-001: reconnect [ 673.258107][ T5711] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 673.258189][ T5711] em28xx 1-1:0.0: dvb set to bulk mode. [ 673.259902][ T5335] em28xx 1-1:0.0: Binding DVB extension [ 673.400950][ T5711] usb 1-1: USB disconnect, device number 36 [ 673.419269][ T5711] em28xx 1-1:0.0: Disconnecting em28xx [ 673.602316][ T5335] em28xx 1-1:0.0: Registering input extension [ 673.612150][ T5711] em28xx 1-1:0.0: Closing input extension [ 673.710156][ T5711] em28xx 1-1:0.0: Freeing device [ 674.780183][ T44] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 674.931917][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 674.935497][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 674.935533][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 674.935579][ T44] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 674.935603][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.009470][ T44] usb 6-1: config 0 descriptor?? [ 675.198201][ T5718] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 675.263035][ T44] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 675.360591][ T5718] usb 1-1: Using ep0 maxpacket: 8 [ 675.364047][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 675.364094][ T5718] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 675.364119][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.394161][ T5718] usb 1-1: config 0 descriptor?? [ 675.419219][ T5718] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 675.513189][T12082] iowarrior 6-1:0.0: Error -90 while submitting URB [ 675.719221][ T5711] usb 6-1: USB disconnect, device number 2 [ 675.908403][T12055] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 676.059146][T12055] usb 4-1: Using ep0 maxpacket: 8 [ 676.062460][T12055] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 676.062489][T12055] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 676.062527][T12055] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 676.062551][T12055] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.374898][T12115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.375542][T12115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.411876][ T44] usb 4-1: USB disconnect, device number 20 [ 678.043357][ T44] usb 1-1: USB disconnect, device number 37 [ 679.388146][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2088'. [ 679.826889][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2095'. [ 679.885122][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'. [ 684.200221][T12274] siw: device registration error -23 [ 685.104468][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2118'. [ 685.129629][ T5939] block nbd1: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 480 seconds [ 685.129680][ T5939] block nbd1: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 480 seconds [ 685.129713][ T5939] block nbd1: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 480 seconds [ 685.129744][ T5939] block nbd1: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 480 seconds [ 685.973480][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.973592][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.069710][T12288] vivid-003: disconnect [ 686.398193][ T44] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 686.548554][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 686.584694][ T44] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 686.584740][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.584762][ T44] usb 4-1: Product: syz [ 686.584777][ T44] usb 4-1: Manufacturer: syz [ 686.584792][ T44] usb 4-1: SerialNumber: syz [ 686.686189][T12313] siw: device registration error -23 [ 687.630359][ T44] usb 4-1: config 0 descriptor?? [ 687.654423][ T44] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 687.678081][T12287] vivid-003: reconnect [ 688.062549][ T44] gspca_sonixj: reg_r err -32 [ 688.062662][ T44] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 688.470261][ T44] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 688.598977][ T44] usb 1-1: device descriptor read/64, error -71 [ 690.650778][ T44] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 690.833527][ T5711] usb 4-1: USB disconnect, device number 21 [ 690.848408][ T44] usb 1-1: device descriptor read/64, error -71 [ 690.958558][ T44] usb usb1-port1: attempt power cycle [ 692.254590][T12360] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2149'. [ 692.286432][T12360] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2149'. [ 696.098255][ T5335] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 696.372653][T12400] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2163'. [ 696.380396][T12400] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2163'. [ 697.578280][ T5335] usb 6-1: device descriptor read/64, error -71 [ 697.670350][T12411] binder: 12403:12411 ioctl c0306201 0 returned -14 [ 698.049147][ T5335] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 698.345876][ T5335] usb 6-1: device descriptor read/64, error -71 [ 699.322518][ T5335] usb usb6-port1: attempt power cycle [ 700.503148][T12446] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2180'. [ 700.510774][T12446] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2180'. [ 701.908584][ T5718] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 702.371746][ T5718] usb 6-1: Using ep0 maxpacket: 8 [ 702.477337][ T5718] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 702.480641][ T5718] usb 6-1: config 0 has no interface number 0 [ 702.480693][ T5718] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 702.480714][ T5718] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 702.480737][ T5718] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 702.480762][ T5718] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 702.480802][ T5718] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 702.480836][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.056870][ T5718] usb 6-1: config 0 descriptor?? [ 703.099032][ T5718] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 704.991261][ T5718] usb 6-1: USB disconnect, device number 6 [ 705.030269][ T5718] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 705.388140][T12055] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 705.720999][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2209'. [ 705.721105][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2209'. [ 705.744923][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2209'. [ 705.745034][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2209'. [ 706.388045][T12055] usb 1-1: Using ep0 maxpacket: 16 [ 706.392630][T12055] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.392688][T12055] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 706.425695][T12055] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 706.425794][T12055] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.425855][T12055] usb 1-1: Product: syz [ 706.425913][T12055] usb 1-1: Manufacturer: syz [ 706.425960][T12055] usb 1-1: SerialNumber: syz [ 706.475538][T12055] usb 1-1: config 0 descriptor?? [ 708.563713][ T5718] usb 1-1: USB disconnect, device number 41 [ 709.410772][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'. [ 709.410908][T12565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2223'. [ 709.425627][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'. [ 709.425701][T12565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2223'. [ 710.429782][ T822] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 710.588221][ T822] usb 5-1: Using ep0 maxpacket: 8 [ 710.592064][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 710.592100][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 710.592141][ T822] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 710.592166][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.659332][ T822] usb 5-1: config 0 descriptor?? [ 710.919643][ T822] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 711.282525][T12567] iowarrior 5-1:0.0: Error -90 while submitting URB [ 711.291923][ T822] usb 5-1: USB disconnect, device number 34 [ 711.532194][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2236'. [ 711.532291][T12599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2236'. [ 711.546922][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2236'. [ 711.547049][T12599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2236'. [ 712.911811][ T5335] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 713.038230][ T5335] usb 4-1: device descriptor read/64, error -71 [ 713.278284][ T5335] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 713.408524][ T5335] usb 4-1: device descriptor read/64, error -71 [ 713.520351][ T5335] usb usb4-port1: attempt power cycle [ 713.858128][ T5335] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 713.892461][ T5335] usb 4-1: device descriptor read/8, error -71 [ 714.424231][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2251'. [ 714.424491][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2251'. [ 714.431545][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2251'. [ 714.431651][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2251'. [ 714.967189][ T5335] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 715.018901][ T5335] usb 4-1: device descriptor read/8, error -71 [ 715.138366][ T5335] usb usb4-port1: unable to enumerate USB device [ 715.368482][ T44] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 715.448915][ T5939] block nbd1: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 510 seconds [ 715.448964][ T5939] block nbd1: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 510 seconds [ 715.448996][ T5939] block nbd1: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 510 seconds [ 715.449028][ T5939] block nbd1: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 510 seconds [ 715.531808][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 715.534820][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 715.534855][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 715.535007][ T44] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 715.535031][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.598447][ T44] usb 5-1: config 0 descriptor?? [ 715.682367][ T5718] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 715.837719][ T44] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 715.858195][ T5718] usb 1-1: device descriptor read/64, error -71 [ 715.871728][ T44] usb 5-1: USB disconnect, device number 35 [ 716.109383][ T5718] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 716.238261][ T5718] usb 1-1: device descriptor read/64, error -71 [ 716.348808][ T5718] usb usb1-port1: attempt power cycle [ 716.698180][ T5718] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 716.718949][ T5718] usb 1-1: device descriptor read/8, error -71 [ 716.958180][ T5718] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 716.979162][ T5718] usb 1-1: device descriptor read/8, error -71 [ 717.089399][ T5718] usb usb1-port1: unable to enumerate USB device [ 717.138120][ T44] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 717.258287][ T5711] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 717.289344][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 717.291831][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 717.297885][ T44] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 717.297916][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.303320][ T44] usb 5-1: Product: syz [ 717.303340][ T44] usb 5-1: Manufacturer: syz [ 717.303356][ T44] usb 5-1: SerialNumber: syz [ 717.358690][ T44] usb 5-1: config 0 descriptor?? [ 717.382465][ T44] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 717.382491][ T44] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 717.390592][ T5711] usb 4-1: device descriptor read/64, error -71 [ 717.628194][ T5711] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 717.761238][ T5711] usb 4-1: device descriptor read/64, error -71 [ 717.868540][ T5711] usb usb4-port1: attempt power cycle [ 718.002503][ T44] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 718.213091][ T5711] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 718.234376][ T5711] usb 4-1: device descriptor read/8, error -71 [ 718.468203][ T5711] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 718.489055][ T5711] usb 4-1: device descriptor read/8, error -71 [ 718.588342][ T44] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 718.588374][ T44] em28xx 5-1:0.0: board has no eeprom [ 718.614568][ T5711] usb usb4-port1: unable to enumerate USB device [ 718.698216][ T44] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 718.698247][ T44] em28xx 5-1:0.0: dvb set to bulk mode. [ 718.699588][ T822] em28xx 5-1:0.0: Binding DVB extension [ 718.753172][ T44] usb 5-1: USB disconnect, device number 36 [ 718.781959][ T44] em28xx 5-1:0.0: Disconnecting em28xx [ 718.885704][T12717] netlink: 64799 bytes leftover after parsing attributes in process `syz.5.2292'. [ 718.897258][ T822] em28xx 5-1:0.0: Registering input extension [ 718.897911][ T44] em28xx 5-1:0.0: Closing input extension [ 719.002475][ T44] em28xx 5-1:0.0: Freeing device [ 719.742952][T12747] vivid-003: disconnect [ 720.164484][T12766] vivid-001: disconnect [ 720.874488][T12747] vivid-003: reconnect [ 721.191985][T12766] vivid-001: reconnect [ 722.325752][ T5718] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 722.473854][ T5718] usb 6-1: device descriptor read/64, error -71 [ 722.718802][ T5718] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 722.869862][ T5718] usb 6-1: device descriptor read/64, error -71 [ 723.004668][ T5718] usb usb6-port1: attempt power cycle [ 723.368201][ T5718] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 723.390365][ T5718] usb 6-1: device descriptor read/8, error -71 [ 723.434797][T10783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 723.491529][T10783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 723.493252][T10783] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 723.497620][T10783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 723.529625][T10783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 723.911708][ T5718] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 723.943222][ T5718] usb 6-1: device descriptor read/8, error -71 [ 724.051127][ T5718] usb usb6-port1: unable to enumerate USB device [ 724.545626][T12841] vivid-000: disconnect [ 725.469494][T12839] vivid-000: reconnect [ 725.626823][T12824] lo speed is unknown, defaulting to 1000 [ 725.652533][ T5611] Bluetooth: hci6: command tx timeout [ 727.732771][ T5611] Bluetooth: hci6: command tx timeout [ 729.808190][ T5611] Bluetooth: hci6: command tx timeout [ 730.718134][ T44] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 730.878255][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 731.019912][ T44] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.019949][ T44] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.019974][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 731.020009][ T44] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 731.020034][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.114135][ T44] usb 6-1: config 0 descriptor?? [ 732.434544][ T5611] Bluetooth: hci6: command tx timeout [ 732.715281][ T44] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 732.715319][ T44] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 732.715347][ T44] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 732.715374][ T44] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 732.715401][ T44] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 732.879786][ T44] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 732.887162][T12925] binder: 12924:12925 ioctl 4018620d 0 returned -22 [ 733.127467][ T44] usb 6-1: USB disconnect, device number 11 [ 733.225360][T12055] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 733.370602][T12055] usb 4-1: Using ep0 maxpacket: 16 [ 733.373875][T12055] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.373908][T12055] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.373936][T12055] usb 4-1: config 0 interface 0 has no altsetting 0 [ 733.373971][T12055] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 733.373995][T12055] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.442483][T12055] usb 4-1: config 0 descriptor?? [ 733.608632][T12824] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.614256][T12824] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.614603][T12824] bridge_slave_0: entered allmulticast mode [ 733.704628][T12824] bridge_slave_0: entered promiscuous mode [ 733.897278][T12824] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.897864][T12824] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.899462][T12824] bridge_slave_1: entered allmulticast mode [ 733.950481][T12055] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 733.950520][T12055] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 733.950547][T12055] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 733.950573][T12055] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 733.950697][T12055] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 733.957622][T12055] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 734.123321][T12824] bridge_slave_1: entered promiscuous mode [ 735.237566][T12055] usb 4-1: USB disconnect, device number 30 [ 736.242605][T12947] fido_id[12947]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 736.479635][T12949] loop4: detected capacity change from 0 to 7 [ 736.559561][T12824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.680268][T12949] Dev loop4: unable to read RDB block 7 [ 736.680330][T12949] loop4: unable to read partition table [ 736.680488][T12949] loop4: partition table beyond EOD, truncated [ 736.680543][T12949] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 736.728727][ T1581] bridge_slave_1: left allmulticast mode [ 736.728753][ T1581] bridge_slave_1: left promiscuous mode [ 736.728976][ T1581] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.792193][ T8642] Flush: task=udevd[8642] dev=loop4 state=2 [ 736.875765][ T8642] Teardown: task=udevd[8642] dev=loop4 state=2 [ 737.068184][ T1581] bridge_slave_0: left allmulticast mode [ 737.068220][ T1581] bridge_slave_0: left promiscuous mode [ 737.068526][ T1581] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.014758][T12970] binder: 12969:12970 ioctl c0306201 0 returned -14 [ 738.828920][ T1581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.909926][ T1581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.189070][ T1581] bond0 (unregistering): Released all slaves [ 739.237231][T12824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.766754][T12982] loop4: detected capacity change from 0 to 7 [ 739.819946][T12982] Dev loop4: unable to read RDB block 7 [ 739.819996][T12982] loop4: AHDI p1 p2 p3 [ 739.820021][T12982] loop4: partition table partially beyond EOD, truncated [ 739.869226][T12824] team0: Port device team_slave_0 added [ 739.903031][T12824] team0: Port device team_slave_1 added [ 739.987410][T12824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.987428][T12824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.987453][T12824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.073322][ T1581] tipc: Left network mode [ 740.078061][T12824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.078079][T12824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.119079][T12824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.242464][T12824] hsr_slave_0: entered promiscuous mode [ 740.244556][T12824] hsr_slave_1: entered promiscuous mode [ 740.267129][T12824] debugfs: 'hsr0' already exists in 'hsr' [ 740.267158][T12824] Cannot create hsr debugfs directory [ 740.325946][T12982] loop4: p1 start 1601398130 is beyond EOD, truncated [ 740.325976][T12982] loop4: p2 start 1702059890 is beyond EOD, truncated [ 740.468156][T10631] Flush: task=udevd[10631] dev=loop4 state=2 [ 740.678119][T12055] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 740.808393][T10631] Teardown: task=udevd[10631] dev=loop4 state=2 [ 740.839896][T12055] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.839949][T12055] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 740.839972][T12055] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.041391][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 741.241980][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 741.814887][T12055] usb 6-1: config 0 descriptor?? [ 742.384015][T13010] binder: 13007:13010 ioctl c0306201 0 returned -14 [ 742.565845][T12055] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 742.598525][ T822] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 742.646742][T12055] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0009/input/input25 [ 742.748099][ T44] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 742.794120][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.794170][ T822] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 742.794195][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.850918][ T822] usb 4-1: config 0 descriptor?? [ 742.928343][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 742.944590][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.967037][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 742.967070][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.967308][ T44] usb 1-1: Product: syz [ 742.967325][ T44] usb 1-1: Manufacturer: syz [ 742.967339][ T44] usb 1-1: SerialNumber: syz [ 743.194842][ T44] usb 1-1: config 0 descriptor?? [ 743.282115][ T822] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 743.361689][ T822] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000A/input/input26 [ 743.767543][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 744.654468][T12055] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 745.020028][T12055] usb 6-1: USB disconnect, device number 12 [ 745.733306][ T5939] block nbd1: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 540 seconds [ 745.733366][ T5939] block nbd1: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 540 seconds [ 745.733403][ T5939] block nbd1: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 540 seconds [ 745.733436][ T5939] block nbd1: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 540 seconds [ 745.981659][ T44] usb 1-1: USB disconnect, device number 46 [ 746.873538][T13042] fido_id[13042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 747.246424][ T822] keytouch 0003:0926:3333.000A: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 747.297708][ T822] usb 4-1: USB disconnect, device number 31 [ 747.413815][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.413918][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.550969][T13053] binder: 13051:13053 ioctl c0306201 0 returned -14 [ 747.728418][ T1581] hsr_slave_0: left promiscuous mode [ 747.765827][T13055] fido_id[13055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 747.784280][ T1581] hsr_slave_1: left promiscuous mode [ 747.863799][ T1581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.909427][ T1581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.883449][T13092] overlayfs: missing 'lowerdir' [ 749.546235][ T5711] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 749.809182][ T5711] usb 1-1: Using ep0 maxpacket: 8 [ 749.814217][ T5711] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 749.814255][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.814270][ T5711] usb 1-1: Product: syz [ 749.814280][ T5711] usb 1-1: Manufacturer: syz [ 749.814291][ T5711] usb 1-1: SerialNumber: syz [ 749.873099][ T5711] usb 1-1: config 0 descriptor?? [ 749.919700][ T5711] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 750.239623][T12055] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 750.388144][T12055] usb 6-1: Using ep0 maxpacket: 16 [ 750.392383][T12055] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 750.394963][T12055] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 750.394988][T12055] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.395046][T12055] usb 6-1: Product: syz [ 750.395057][T12055] usb 6-1: Manufacturer: syz [ 750.395068][T12055] usb 6-1: SerialNumber: syz [ 750.416934][T12055] usb 6-1: config 0 descriptor?? [ 750.519523][T12055] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 750.519563][T12055] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 750.727248][ T5711] gspca_sonixj: reg_r err -32 [ 750.727408][ T5711] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 750.774154][ T5711] usb 1-1: USB disconnect, device number 47 [ 751.090515][T12055] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 751.250848][ T1581] team0 (unregistering): Port device team_slave_1 removed [ 751.328986][ T1581] team0 (unregistering): Port device team_slave_0 removed [ 751.525545][T12055] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 751.525576][T12055] em28xx 6-1:0.0: board has no eeprom [ 751.626371][T12055] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 751.626408][T12055] em28xx 6-1:0.0: dvb set to bulk mode. [ 751.626755][ T5711] em28xx 6-1:0.0: Binding DVB extension [ 751.698126][T12055] usb 6-1: USB disconnect, device number 13 [ 751.837179][ T5711] em28xx 6-1:0.0: Registering input extension [ 751.843805][T12055] em28xx 6-1:0.0: Disconnecting em28xx [ 751.843901][T12055] em28xx 6-1:0.0: Closing input extension [ 751.951634][T12055] em28xx 6-1:0.0: Freeing device [ 752.088642][T13062] syzkaller0: entered promiscuous mode [ 752.088672][T13062] syzkaller0: entered allmulticast mode [ 752.121343][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 754.337730][ T11] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 754.467235][ T5711] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 754.618216][ T11] usb 6-1: config 246 has an invalid interface number: 166 but max is 0 [ 754.618249][ T11] usb 6-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 754.618271][ T11] usb 6-1: config 246 has no interface number 0 [ 754.618320][ T11] usb 6-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 754.618349][ T11] usb 6-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 754.618379][ T11] usb 6-1: config 246 interface 166 has no altsetting 0 [ 754.624607][ T11] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 754.624640][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.624661][ T11] usb 6-1: Product: syz [ 754.624676][ T11] usb 6-1: Manufacturer: syz [ 754.624690][ T11] usb 6-1: SerialNumber: syz [ 754.685249][ T5711] usb 5-1: config 8 has an invalid interface number: 137 but max is 0 [ 754.685347][ T5711] usb 5-1: config 8 has no interface number 0 [ 754.748951][ T5711] usb 5-1: string descriptor 0 read error: -22 [ 754.749142][ T5711] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 754.749172][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.838104][ T822] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 754.927384][ T5711] ttusb_dec_send_command: command bulk message failed: error -22 [ 754.927736][ T5711] ttusb-dec 5-1:8.137: probe with driver ttusb-dec failed with error -22 [ 755.038151][ T822] usb 1-1: device descriptor read/64, error -71 [ 755.338169][ T822] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 755.478123][ T822] usb 1-1: device descriptor read/64, error -71 [ 755.553708][ T11] usb 6-1: Cannot retrieve CPort count: -32 [ 755.553759][ T11] usb 6-1: Cannot retrieve CPort count: -32 [ 755.553798][ T11] es2_ap_driver 6-1:246.166: probe with driver es2_ap_driver failed with error -32 [ 755.627748][ T822] usb usb1-port1: attempt power cycle [ 755.674628][ T11] usb 6-1: USB disconnect, device number 14 [ 755.822027][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 755.984210][ T822] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 756.004092][ T822] usb 1-1: device descriptor read/8, error -71 [ 756.239329][ T822] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 756.259026][ T822] usb 1-1: device descriptor read/8, error -71 [ 756.295669][T12922] usb 5-1: USB disconnect, device number 37 [ 756.387550][ T822] usb usb1-port1: unable to enumerate USB device [ 756.463848][ T1581] IPVS: stop unused estimator thread 0... [ 757.456715][T13183] overlayfs: missing 'workdir' [ 758.671407][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2429'. [ 760.408109][ T11] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 760.559378][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 760.562519][ T11] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 760.562577][ T11] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 760.562601][ T11] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 760.562627][ T11] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 760.562651][ T11] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 760.562693][ T11] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 760.562717][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.682381][T12824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 760.996308][T12824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 761.000802][T12824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 761.362333][T13243] overlayfs: missing 'workdir' [ 761.879054][T12824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 761.881018][T12824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 761.978189][ T5711] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 762.136710][ T5711] usb 4-1: config 0 has no interfaces? [ 762.185205][ T5711] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 762.185238][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.185260][ T5711] usb 4-1: Product: syz [ 762.185275][ T5711] usb 4-1: Manufacturer: syz [ 762.185291][ T5711] usb 4-1: SerialNumber: syz [ 762.235558][ T5711] usb 4-1: config 0 descriptor?? [ 762.269515][T12824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 762.274811][T12824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 762.372635][T12824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.164144][ T44] usb 5-1: USB disconnect, device number 38 [ 763.354435][T12922] usb 4-1: USB disconnect, device number 32 [ 763.789900][T12824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.107901][T13286] binder: BINDER_SET_CONTEXT_MGR already set [ 764.108063][T13286] binder: 13285:13286 ioctl 4018620d 2000000002c0 returned -16 [ 764.134456][T12824] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.407516][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.430365][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.627676][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.627868][ T5851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.837079][T13296] binder: 13294:13296 ioctl c0306201 0 returned -14 [ 765.175225][T13298] overlayfs: missing 'workdir' [ 769.712646][T13359] overlayfs: missing 'lowerdir' [ 770.910969][T12922] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 770.963279][T13374] loop4: detected capacity change from 0 to 7 [ 770.979449][T13374] Dev loop4: unable to read RDB block 7 [ 770.979482][T13374] loop4: AHDI p1 p2 p3 [ 770.979503][T13374] loop4: partition table partially beyond EOD, truncated [ 770.979754][T13374] loop4: p1 start 1601398130 is beyond EOD, truncated [ 770.979774][T13374] loop4: p2 start 1702059890 is beyond EOD, truncated [ 771.106781][ T8642] Flush: task=udevd[8642] dev=loop4 state=2 [ 771.168359][T12922] usb 1-1: Using ep0 maxpacket: 32 [ 771.432947][T12922] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 771.432971][T12922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.474726][T12922] usb 1-1: config 0 descriptor?? [ 771.482865][ T8642] Teardown: task=udevd[8642] dev=loop4 state=2 [ 772.084932][T12922] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 772.788154][T12824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.140526][T12922] gspca_vc032x: reg_w err -71 [ 773.140627][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140641][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140652][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140661][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140668][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140677][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140686][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140695][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140703][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140713][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140722][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140731][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140739][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140748][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140756][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140765][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140774][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140782][T12922] gspca_vc032x: I2c Bus Busy Wait 00 [ 773.140791][T12922] gspca_vc032x: Unknown sensor... [ 773.140875][T12922] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 773.330542][T12922] usb 1-1: USB disconnect, device number 52 [ 773.591950][T12824] veth0_vlan: entered promiscuous mode [ 773.616222][T12824] veth1_vlan: entered promiscuous mode [ 773.699841][T12824] veth0_macvtap: entered promiscuous mode [ 773.717523][T12824] veth1_macvtap: entered promiscuous mode [ 773.780159][T12824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.808811][T12824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.852146][ T1581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.852826][ T1581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.853153][ T1581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.870279][ T804] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.092417][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 775.563800][T13403] overlayfs: missing 'lowerdir' [ 776.732985][ T5939] block nbd1: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 570 seconds [ 776.733035][ T5939] block nbd1: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 570 seconds [ 776.733067][ T5939] block nbd1: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 570 seconds [ 776.733098][ T5939] block nbd1: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 570 seconds [ 778.545277][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.545293][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.550254][ T198] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 778.770394][ T198] usb 6-1: config 0 has no interfaces? [ 778.773132][ T198] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 778.773154][ T198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.773169][ T198] usb 6-1: Product: syz [ 778.773179][ T198] usb 6-1: Manufacturer: syz [ 778.773189][ T198] usb 6-1: SerialNumber: syz [ 778.816013][ T198] usb 6-1: config 0 descriptor?? [ 778.958792][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.958808][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.980141][T12922] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 781.486871][T12922] usb 5-1: device descriptor read/64, error -71 [ 781.641884][T13439] overlayfs: missing 'lowerdir' [ 782.579361][ T11] usb 6-1: USB disconnect, device number 15 [ 782.618935][T12922] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 782.747890][T13443] Flush: task=syz.0.2487[13443] dev=loop4 state=2 [ 782.753210][T13442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2486'. [ 782.758591][T12922] usb 5-1: device descriptor read/64, error -71 [ 782.996048][T12922] usb usb5-port1: attempt power cycle [ 783.024724][T13443] Teardown: task=syz.0.2487[13443] dev=loop4 state=2 [ 783.778774][T12922] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 783.798794][T12922] usb 5-1: device descriptor read/8, error -71 [ 783.958321][ T11] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 784.059324][T12922] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 784.073043][T13452] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2490'. [ 784.108053][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 784.110592][ T11] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 784.146450][ T11] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 784.146483][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.146506][ T11] usb 6-1: Product: syz [ 784.146517][ T11] usb 6-1: Manufacturer: syz [ 784.146527][ T11] usb 6-1: SerialNumber: syz [ 784.214736][ T11] usb 6-1: config 0 descriptor?? [ 784.268224][T12922] usb 5-1: device not accepting address 42, error -71 [ 784.268688][T12922] usb usb5-port1: unable to enumerate USB device [ 784.650892][ T44] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 785.157357][ T44] usb 1-1: config 8 has an invalid interface number: 137 but max is 0 [ 785.157389][ T44] usb 1-1: config 8 has no interface number 0 [ 785.306888][ T44] usb 1-1: string descriptor 0 read error: -22 [ 785.307044][ T44] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 785.307068][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.362078][ T44] ttusb_dec_send_command: command bulk message failed: error -22 [ 785.362306][ T44] ttusb-dec 1-1:8.137: probe with driver ttusb-dec failed with error -22 [ 786.123955][ T198] usb 6-1: USB disconnect, device number 16 [ 788.281635][T13479] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 788.281702][T13479] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 789.242401][T12922] usb 1-1: USB disconnect, device number 53 [ 789.506374][T13484] Flush: task=syz.0.2501[13484] dev=loop4 state=2 [ 789.689111][T13484] Teardown: task=syz.0.2501[13484] dev=loop4 state=2 [ 789.785457][T13493] binder: 13491:13493 ioctl c0306201 200000000180 returned -22 [ 789.998072][ T11] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 790.158115][ T11] usb 3-1: device descriptor read/64, error -71 [ 790.398209][ T11] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 790.561451][T13505] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 790.668222][ T11] usb 3-1: device descriptor read/64, error -71 [ 790.848976][ T11] usb usb3-port1: attempt power cycle [ 790.930632][ T38] INFO: task syz.1.1797:11427 blocked in I/O wait for more than 144 seconds. [ 790.930653][ T38] Not tainted syzkaller #0 [ 790.930661][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 790.930668][ T38] task:syz.1.1797 state:D stack:24576 pid:11427 tgid:11426 ppid:5614 task_flags:0x400140 flags:0x00080002 [ 790.930739][ T38] Call Trace: [ 790.930801][ T38] [ 790.930852][ T38] __schedule+0x1709/0x5530 [ 790.930961][ T38] ? __pfx___schedule+0x10/0x10 [ 790.931015][ T38] ? schedule+0x90/0x2b0 [ 790.931036][ T38] schedule+0x164/0x2b0 [ 790.931056][ T38] io_schedule+0x7f/0xd0 [ 790.931077][ T38] folio_wait_bit_common+0x83c/0xbc0 [ 790.931148][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 790.931180][ T38] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 790.931206][ T38] ? __pfx_wake_page_function+0x10/0x10 [ 790.931262][ T38] ? __folio_put+0x30f/0x3c0 [ 790.931321][ T38] ? migrate_pages_batch+0x136c/0x43d0 [ 790.931396][ T38] migrate_pages_batch+0x1baa/0x43d0 [ 790.931419][ T38] ? __pfx_compaction_free+0x10/0x10 [ 790.931466][ T38] ? __pfx_compaction_alloc+0x10/0x10 [ 790.931487][ T38] ? __pfx_migrate_pages_batch+0x10/0x10 [ 790.931573][ T38] ? try_to_take_rt_mutex+0x842/0xb00 [ 790.931620][ T38] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 790.931643][ T38] ? __lock_acquire+0x6df/0x2e40 [ 790.931692][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 790.931713][ T38] ? __css_rstat_updated+0x235/0x540 [ 790.931774][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 790.931800][ T38] ? __pfx___css_rstat_updated+0x10/0x10 [ 790.931820][ T38] ? __lock_acquire+0x6df/0x2e40 [ 790.931841][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 790.931913][ T38] migrate_pages+0x1f90/0x2900 [ 790.931945][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 790.931984][ T38] ? __pfx_compaction_free+0x10/0x10 [ 790.932011][ T38] ? __pfx_compaction_alloc+0x10/0x10 [ 790.932033][ T38] ? __pfx_migrate_pages+0x10/0x10 [ 790.932056][ T38] ? rcu_is_watching+0x15/0xb0 [ 790.932119][ T38] ? isolate_migratepages_block+0x30d0/0x3650 [ 790.932193][ T38] compact_zone+0x3144/0x4a70 [ 790.932245][ T38] ? rt_mutex_slowunlock+0x219/0x460 [ 790.932262][ T38] ? __pfx_compact_zone+0x10/0x10 [ 790.932277][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 790.932304][ T38] sysctl_compaction_handler+0x3f3/0x880 [ 790.932324][ T38] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 790.932392][ T38] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 790.932478][ T38] ? proc_sys_call_handler+0x3d1/0x830 [ 790.932591][ T38] ? proc_sys_call_handler+0x3d1/0x830 [ 790.932618][ T38] proc_sys_call_handler+0x4c7/0x830 [ 790.932643][ T38] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 790.932665][ T38] ? __asan_memset+0x22/0x50 [ 790.932710][ T38] iter_file_splice_write+0xa36/0x1240 [ 790.932784][ T38] ? __pfx_iter_file_splice_write+0x10/0x10 [ 790.932816][ T38] ? __pfx_iter_file_splice_write+0x10/0x10 [ 790.932841][ T38] direct_splice_actor+0x104/0x160 [ 790.932867][ T38] splice_direct_to_actor+0x586/0xcc0 [ 790.932904][ T38] ? __pfx_direct_splice_actor+0x10/0x10 [ 790.932923][ T38] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 790.932949][ T38] do_splice_direct+0x19b/0x2a0 [ 790.932969][ T38] ? __pfx_do_splice_direct+0x10/0x10 [ 790.932989][ T38] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 790.933014][ T38] ? rw_verify_area+0x209/0x4d0 [ 790.933035][ T38] do_sendfile+0x540/0x7e0 [ 790.933082][ T38] ? __pfx_do_sendfile+0x10/0x10 [ 790.933134][ T38] __se_sys_sendfile64+0xdf/0x1a0 [ 790.933158][ T38] ? __pfx___se_sys_futex+0x10/0x10 [ 790.933206][ T38] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 790.933238][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.933256][ T38] do_syscall_64+0x174/0x580 [ 790.933279][ T38] ? clear_bhb_loop+0x40/0x90 [ 790.933299][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.933319][ T38] RIP: 0033:0x7efee40ade59 [ 790.933363][ T38] RSP: 002b:00007efee2306028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 790.933422][ T38] RAX: ffffffffffffffda RBX: 00007efee4335fa0 RCX: 00007efee40ade59 [ 790.933439][ T38] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000008 [ 790.933461][ T38] RBP: 00007efee4143e6f R08: 0000000000000000 R09: 0000000000000000 [ 790.933475][ T38] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 790.933498][ T38] R13: 00007efee4336038 R14: 00007efee4335fa0 R15: 00007fffc0c8c218 [ 790.933598][ T38] [ 790.933625][ T38] [ 790.933625][ T38] Showing all locks held in the system: [ 790.933655][ T38] 3 locks held by kworker/0:1/11: [ 790.933686][ T38] #0: ffff88801af23138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 790.933744][ T38] #1: ffffc90000107c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 790.933784][ T38] #2: ffff888027fa6210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 790.933848][ T38] 1 lock held by khungtaskd/38: [ 790.933856][ T38] #0: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 790.933904][ T38] 3 locks held by kworker/0:1H/139: [ 790.933913][ T38] #0: ffff88813fe1b538 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 790.933952][ T38] #1: ffffc9000154fc60 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 790.933992][ T38] #2: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 790.934029][ T38] 3 locks held by kworker/0:2/198: [ 790.934037][ T38] #0: ffff88813fe1a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 790.934098][ T38] #1: ffffc90003b0fc60 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 790.934155][ T38] #2: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 790.934226][ T38] 2 locks held by udevd/4969: [ 790.934235][ T38] #0: ffffffff8e935f38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 790.934321][ T38] #1: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 790.934384][ T38] 2 locks held by getty/5359: [ 790.934392][ T38] #0: ffff8880367e60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 790.934468][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 790.934629][ T38] 1 lock held by syz-executor/5590: [ 790.934638][ T38] #0: ffff88802c477198 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 790.934704][ T38] 1 lock held by udevd/5796: [ 790.934712][ T38] #0: ffff8880279304c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 790.934794][ T38] 5 locks held by syz-executor/9500: [ 790.934804][ T38] #0: ffff8880568ca478 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 790.934848][ T38] #1: ffff88803a038358 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 790.934889][ T38] #2: ffffffff8e0592e0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 790.934948][ T38] #3: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 790.934988][ T38] #4: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: rt_write_lock+0x86/0x220 [ 790.935028][ T38] 1 lock held by syz.1.1797/11427: [ 790.935037][ T38] #0: ffff888035eaa510 (sb_writers#3){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 790.935081][ T38] 3 locks held by syz.5.2506/13499: [ 790.935089][ T38] #0: ffff88802ad3acb0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 790.935140][ T38] #1: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 790.935183][ T38] #2: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 790.935220][ T38] [ 790.935225][ T38] ============================================= [ 790.935225][ T38] [ 790.935237][ T38] NMI backtrace for cpu 0 [ 790.935254][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 790.935272][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 790.935281][ T38] Call Trace: [ 790.935288][ T38] [ 790.935295][ T38] dump_stack_lvl+0xe8/0x150 [ 790.935341][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 790.935379][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 790.935441][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 790.935460][ T38] sys_info+0x135/0x170 [ 790.935474][ T38] watchdog+0xfd7/0x1030 [ 790.935523][ T38] ? watchdog+0x1c7/0x1030 [ 790.935569][ T38] kthread+0x388/0x470 [ 790.935591][ T38] ? __pfx_watchdog+0x10/0x10 [ 790.935614][ T38] ? __pfx_kthread+0x10/0x10 [ 790.935642][ T38] ret_from_fork+0x514/0xb70 [ 790.935666][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 790.935681][ T38] ? __switch_to+0xc89/0x1420 [ 790.935705][ T38] ? __pfx_kthread+0x10/0x10 [ 790.935726][ T38] ret_from_fork_asm+0x1a/0x30 [ 790.935752][ T38] [ 790.935771][ T38] Sending NMI from CPU 0 to CPUs 1: [ 790.935813][ C1] NMI backtrace for cpu 1 [ 790.935827][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 790.935848][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 790.935858][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 790.935886][ C1] Code: eb 6f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 3c 26 00 fb f4 cc cf 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 790.935902][ C1] RSP: 0018:ffffc900001e7e40 EFLAGS: 00000246 [ 790.935918][ C1] RAX: 0000000000e4d2f9 RBX: ffffffff81994540 RCX: 0000000080000001 [ 790.935932][ C1] RDX: 0000000000000001 RSI: ffffffff8d87e102 RDI: ffffffff8bca5e80 [ 790.935945][ C1] RBP: ffffc900001e7f10 R08: ffff8880b8733d5b R09: 1ffff110170e67ab [ 790.935958][ C1] R10: dffffc0000000000 R11: ffffed10170e67ac R12: 0000000000000000 [ 790.935971][ C1] R13: 1ffff11003bd8ba0 R14: 1ffff9200003cfd0 R15: dffffc0000000000 [ 790.935985][ C1] FS: 0000000000000000(0000) GS:ffff888125d49000(0000) knlGS:0000000000000000 [ 790.936000][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 790.936013][ C1] CR2: 000055555925ca48 CR3: 00000000258da000 CR4: 00000000003526f0 [ 790.936030][ C1] Call Trace: [ 790.936037][ C1] [ 790.936043][ C1] default_idle+0x9/0x20 [ 790.936069][ C1] default_idle_call+0x72/0xb0 [ 790.936095][ C1] do_idle+0x2e0/0x540 [ 790.936171][ C1] ? __pfx_do_idle+0x10/0x10 [ 790.936215][ C1] cpu_startup_entry+0x43/0x60 [ 790.936243][ C1] start_secondary+0x101/0x110 [ 790.936297][ C1] common_startup_64+0x13e/0x157 [ 790.936330][ C1] [ 790.936899][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 790.936912][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 790.936930][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 790.936939][ T38] Call Trace: [ 790.936946][ T38] [ 790.936952][ T38] vpanic+0x56c/0xa60 [ 790.936969][ T38] ? __pfx___schedule+0x10/0x10 [ 790.936988][ T38] ? __pfx_vpanic+0x10/0x10 [ 790.937009][ T38] panic+0xc5/0xd0 [ 790.937023][ T38] ? __pfx_panic+0x10/0x10 [ 790.937037][ T38] ? preempt_schedule_common+0x82/0xd0 [ 790.937057][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 790.937077][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 790.937097][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 790.937117][ T38] watchdog+0x1030/0x1030 [ 790.937139][ T38] ? watchdog+0x1c7/0x1030 [ 790.937161][ T38] kthread+0x388/0x470 [ 790.937176][ T38] ? __pfx_watchdog+0x10/0x10 [ 790.937191][ T38] ? __pfx_kthread+0x10/0x10 [ 790.937206][ T38] ret_from_fork+0x514/0xb70 [ 790.937226][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 790.937241][ T38] ? __switch_to+0xc89/0x1420 [ 790.937265][ T38] ? __pfx_kthread+0x10/0x10 [ 790.937280][ T38] ret_from_fork_asm+0x1a/0x30 [ 790.937306][ T38] [ 790.938018][ T38] Kernel Offset: disabled