last executing test programs: 2m29.056497565s ago: executing program 1 (id=1976): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 2m29.056230314s ago: executing program 1 (id=1977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000000000009600004000000800fc"]) 2m29.05543174s ago: executing program 1 (id=1978): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000b1400101c0"]) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000b1400101c0"]) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000100000000017c00000400fc800c0001800600060065"], 0x34}}, 0xc010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0xd, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x140c0}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) dup3(0xffffffffffffffff, r1, 0x80000) (async) r2 = dup3(0xffffffffffffffff, r1, 0x80000) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000140)) (async) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x0) (async) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640100000906050000000000000000000500000205000100130073d1ea37c81e2554276f3ab4e4797a30000000000c00184000000000000000171800018014000240fc00000000000000000000000000000108000840000000a11800168014000240fe8800000000000000000000000001010800094000000000060005404e2400000900120073797a31000000000900020073797a320000000024000780140017006e6574706369300000000000000000000c001b40000000e9bc000b29080009400000f5a32400078006001d4000050000050003000900000008000a400000000006001d40000100000500010007000000740400801c0007801800148014000240fe8000000000000000000000000000bb1c0007801800148014000040fe88000000000000000000000101100007800c001b4000000000000000071c0007801800168014000240fc020000000000000000000000000000000000000000000000001d7b87bec323131d8257ddf368a97f7c49045399ed95b15768d01f31c8c0390b3b4975c0586a80d246cdeab49ebcff0d44584b8f793dafd40929ecaac7c820a46a2aead09b496015bf07f15fe76878198caf79ece7dc446bff5ed55b0f146020e6d645b9928b"], 0x164}, 0x1, 0x0, 0x0, 0x4008800}, 0x80c) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="05"]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="f779003ebaa0c14e004e00b92c08000066baf80cb8fc97388fef66bafc0cedba000000000f3066ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c81d900000095956666440f38826b410f7842280f07f080133b0f01d9c4033921820f47a753fd", 0x62}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0xc8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffd}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) add_key(&(0x7f0000000280)='ceph\x00', 0x0, &(0x7f00000002c0)="fe", 0x1, 0xfffffffffffffffb) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000200)='./cgroup/file0\x00', &(0x7f00000000c0)='msdos\x00', 0x200000, 0x0) 2m29.038343977s ago: executing program 1 (id=1979): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x5a9942, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001318034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x10, r0, 0xa471d000) 2m28.99688274s ago: executing program 1 (id=1980): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) ioprio_set$pid(0x2, 0x0, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800034000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x113c, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"]) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800034000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x113c, &(0x7f00000022c0)=ANY=[@ANYBLOB="0010004ed1b4a0884f34300ebf9951c56c17497183b7c3a4794d5a0ca9584b54984ebdb873e0939e409588e078479c0a743b432a258cf7cbef02ebb0438d110076eb190d4362a5fd079430e71366569d4c4d2ce5c3c8cda0f64f5f6587831bf30daa63dd4be4a4d53cb837ae86a78844fd6c430460ed51b3b913718b11c0385027637806dd73d1b6bf0b8717b927b183aba0b099c8eb4df149085a61686c7ab0b491d02ae86dc5f73189680a5ee6ad8446a97106260a654e46f8ef5d0a794d745fe5bd5318303aa50016461ae4f02ea957d00cccad5f6838182ad5e9d23dac9984d3bb1cfebeb149c5b9f1e692264175182a3c3ed3a1ddc04645ad4254c3a474a901cbf06563237e614d0b25164ee29f314e4af5457ce5aa16a6f36bc60bba93955cce55444407fe47d230f59f0aaf8fdf5d7d737655b6975b16b6209ecb97150e22a2225bc656a842d2d17ca0a9d69afdf184189d6de97f5304aa64708274e30b8dccbd45ecb2bb00bbe806ec98dfe02199e57056b7425ce53ac7c650f58a1f976e15d1a0386d6d670706720c48e653d961d8ec85278b1187563a579572c9962e1a70bdb2a2db9d6e4537c6ba7ae2be5b7a0d339409106c42ac9392b404d9d9902577ffcbed7dc8440465f0395fb159325216b280c9623a5d0d7c1cd1044a0e16a84eb7c90ebcc5a11a3701bcfde99c67e0b14f4a453b5aa367c76c7d0a3271be06c1cbd8d8b19e71a01cc28e310de268f2d31dbd89503229c4e4c59c8f20541cd20e48ac001c2488ca7c2cf0cd7613d404fe9042501c5f810016b7e349d77d5ebe2b51c64fe59615c37e6a24d863a29802d6a00050020f98d273cfd4354f3fb70b2a55cc3df539b4831369fdc147e0fa54fe507408902c085bc7925e38ec782fde515851e95583f26d1a3f0eedffff5adb983a5e98035d6f53b84a001e495c3ef36e1c4f2b2492a6b73d4dbeeb1016e45aff34858042d1ecceaabf4ad56eef69bf57581739df4d257a5b1a393c49d646d42ad7ec1ca036dcb59077b072b0d8bdaa59f32652802145e52435438288f6aec74117a2160005cefb7ba06e37ae9d2d380b9abd0f3d6ce40c7226522a8e781b300de8d53d26f79660fe263bdba66dc82546ec4ef72f514870dec9b5cb397725289ebba71538354f5eb34f699c66fae69020fc4ef499e11973e6a9de25bef0a79bfcfef2a40f2cdcc205d32dc84d0da363f33b0423cf645ca4f78a1db7d5818d02016fd2b2e70cdfa7efda75b855dd3cc9a943947b07d8ff3950679d0dc7ccd6ad51c7ae0881b199a88eb90ba5020e21fdfdf401b440463040cf58f3d7b8464ec20b0b8938aa7797501caecf32cf1ca3b1174521383b438dd5d4975829b68f894e2fad0f5a96c488ec40ac10bc5be0445ba5ca0f5a89083de3289cc096c58a3a9696df1bb1640778803cbaa80d19b6101e84f4b97eb46e4a05c1351b50f609173b6b9fa3ce7b7f19789f262a2c031f9e922fd8d652066afcfc513786ed35d8bfded8c6b5b0328c5ec58cb0cd00d94f1f73e067ca64dada4f865f704c5238cedb98df6b41894f3d49e1df64b310967df76966d5d6a34281cdf88593053babb6007781b0c45455f828416994193d0bf1539b4aad6feed770d65cd3dfa7ebcb2ae13b59ec93b1db89d815f034b1748b268a01fe1817939f97741812b3926e489a11f89dfe4404c3d919a40fa38e431670527818d8487f715efbabba1a701713ca70a2018c4eb165449f546833cf45a1e56ddaa7819765de8832a32b4f9910c4b6bcdd96036213b7f95bf52d29ba09f3037da8b2e50a3f440bbfb6cdfba5b923fe1010530a74fc50a13cf5c50b0b89405fc86f9382d9831ca1f97493d862730249f3c8691cf57789e2208c7301aa37c5f38318d2fe1935d2787182fbd03256f68717618b837eca69a8d5cb26cda8faef6606e6329d7a7ff6334abb07328e4289b2ae04523c12fd9bd9e2cb1fc06faca873dc4663cfa7f4a69e68070a1e5f53b4301af157f1c2a82326cf8aab3c7b0de5b2ba0237a7e12d93f5fcbfbfcf5a6f6533c18700f0bd27c07c597aec407bdf7cebfe0433a12113681f7d112e2c5b64c5a37253e7ea8b308c5106eb852fd3c5f550931ae69608568a647df0bc054197117893bea2558919177830c15c37f49b1ee5b4bad197b7a359e8392a4e2100725041c689b43c1eb5b7dc5bdb649d2d75d5c7af28567443b03fdd76108c1d35c118c9adf81ca3dd6f48a48e3a20a39dbe5447a5999279767e80c6c5482833986fc1ff891af8edaf7d3d4af8ae3ca3dd4c0c07a69c5544013238b4ae9701411e9e0406a17186d56bf6fe0fabe9e2325e92612744dddd288f196797d53303a5aea5846752b40d1980da800463f4b7d81e38a3d4a4fb5921569c8273ad2efaf78fb4dbc14a9a6e7931306adcd7dc2373dff1ed5c9c285dd794ffa88d74de0ef17c27957c6380b4f8f6760c9060e6a5486a6656183fbc0057d962a062aedaca2d1a9ff0d68bed077947e4df627a6e256d79ccbe9c7991d7bae928b08b904374eea63d362fdd51b8169b7b7c728c49cedd6516e3a2b9de62fcbb9014b38716f6d4b5403f456ab1b4a426a8f4de32de445c62d7a785a4557ab409bbf77a47ba89b9b3617511243b9df58c2e77dbbcf372e33d8b733ea83c00022df488fc00c6a9e25c004b1c17faa6ca4052d374a973a30dcb5ffdcd7635f45f588798f8843fc245a661dc55efaefad2a018fc88234935addc7498088024b2264f5252f2865fc5ea2e15c0ba362f7ed7ebbf45583fd4fca2f27e1be2a77c37e8f82763b498df0fb2b569a39b61ee6470d42fd98a59949f7e9d249a71c2c6505cec9c1575976b04049c1f97700a96aec300fc8970ec5917463b0052abd9c295e8a6dbd9dc22393d7fdddeff7f7af3b490b7fe3ec19f46e6d0dbcd24798294e1a9a409067d84f0ce2229353411f3d92a039bf984bb7529412aba55f6a1c9ed2d48e21b9e0d45c99aaa90d3605047bcfab00c72cfeee485f4744f3a4447aa03cd2033283ba3f17e55d24729cbf6d25598e616b1060b1472568dcd39c85c79f71f2e9c1aa2bb1fb7e4d0e4d86464d75831c8fa456e6eea7a802f4a853691d8cfe328abc592d9d1cfa02b2632a5e25f03fba981ef8227705120dfc2d14c7cce1d9d732223781262a38c9d4ba0c302a2363b1c66568b7480092473f4ef40161a40f685bc532d52a2dff6370f9e7a116e441690e7793e17f4893cc6afbe5d394e23228ced26cfe0d0366da1796a4e44233d3ff33c6b63b804608270369ee751a6fa17c19c45473bc61811b8b1b945ac1d70ca3b9ca8815016948a3719e8156e0117649e8cb5e80aea503793fcdf2904e0909743f912f7f9a250ceaa90f5693a60698a811cc067ca8fa0da1387e0f45c5e52b210c8cc1c01932c7dacc46caf9297bb8c02257b830c6dd01459a3fad4e87989393086182a5934afcc9857facf391a17977732abf91295926e5f6229c993f3af7669cd004047e28dc71b73e0bb5f96c1790ccdbc8c77b49fc8fc9cb54330ba5990dc1c5e237b3f562c899d1149a65fa381583460fd55b4d2dd991d68924ee1793ec3fbf2488dab2a77eebc4e60bfb8d0216c80967310b70c85c4eaf8f30a15c2bb2b0d11d8f62f23895f27d82f397338fdf9296bea3aa4c4a5dbaf0b9b89432515f969197d3034ee7bc65090c8f7628614669c8a0df225456d1591ad88930c25b1d661530544f78766ac2b67e42ea0ff28084d90c1baf99fda3e97ea0caf7561bb355bde554f716a7ab635c01e73393d523235424eb0e23dd187b341f19f61b9e4c136366f5d37716b0ddd5f70fd2aa3438f2728e118867c92e736653f99d3c5a86bd883f3b60c459fe02e510d4f8767ffb1ad14ab441503c0ef5717d13ab56808a2d8c48fe2109ab67a02a7c9b5864726c9a479d7433324261062027521fe916b7c9da2cfe7d03501271e53f96b1dc4a2ea898ecb195c4c569d216131bfc3b379a25b03bde462d8ec47953775c128b336dd4e86243a99bbc0d400ebdbd170ae55644fb5e06a44c8389acaf021b5ca3aaad24c976c20102b258b64cba2373c7816fcdfdba1017b610c1cd3eee7d6b62fb29ffc3133d67b6428df167aac086be0f36474b049c61a7c1011dc7e3bb3aa8c23577ba31a1c6882222b707b6d3be40478eedab79364456d75eb70c8b0f2b7c55871761f4159ae6e0568ed0664508ec1e63da21e218468542722dca09fa0025e46c52c404d8257e65926c122ad6ba23a78c87dc9153f7193af845c07a968f5416b2e1e5cd1fcb324f35a74d690433fc078ade1cfd20cf3ffbd7e0a313b903896099e2897b464793f946450e8e6ec1b932d70eac9d6aea72368c97dddc1c7813cc0475fe87b72832ad488fdd9672f1bb88f523c72016491c6445ee549913a75f1068ac54c0b953c216155025d3e022f08fea6c59524184a871ae1d9c48b5a075de5979253ec590e0125f615c6f9fc98725bbfb0d42762fa04c450b846b31f4168d91cd05eebed8ac057001c77087fd8c0858c71f8d44f0ae34873bc3973cfc2f96a1579e7a9b8aab2820699f95bbd18699bbac47c6438e0141a30cfd134054fb6c934ce63d91b244292bf0de9501501bd94a2a48190beedd19d8ee7e096e6a8f46cad0acb7af87c421b62c64ea70a22da03a1658db9086d1f32d0b9e4d4bae6824fa0d6c3e7588985e7f3e34aca0e55e101e1211b4dc1aa191fc3b55d386e541a45db84960eebb16713bfe04f1776308adf980beeca8b0c3aa4d630c68fed77428234cb14b53588b7d6a7605b6b90cce06ea42c9433dbca3e4980a9fbc85cc7d2f2873591ae8164a0253b430a834f0e8000419a50384e31fa49bb2e8a8821afce50a945d50fc11ebad9c43b931823cd96cd29d2b0c830b5c25a22b03d2dd2b98393d223de18e47a2f6fac3f5f70af48d9f54af01be9251ab6cf55f580d012ecca0898ecf853df9c08f331ab7bd9a0e5421a3ee5172af39734536f3e489cfaa224150f46be9ef84010fd0e0a551b7beb20e247659e30bf65f22d8b2b76415ed07a4c79c0a6e7687673871fd71e34637ccdc0f2bef7474fadb1a8c39483ebcc6d9ba62d226e9ea4a80340e1e562c9daa8cce2c2a59ad57f7e61ec70c68ab70db89bb8fef4dceb75afff9419adc10aceadf0f064039e21a8344536e1d89beba326d57e973be1f9ad1a5fa29a6990e8e3eff542dd510b4056a5cd69a31805d2058ccec75f2915c2bb790583469495b9a4da3f218d1c4739a0876318bf0ecdce8d15d4209276de45045217185d80ef405ddbb729596748f6636c94114870cbb9770d2e70879ddc74f7273fade51cee7c6885488ab86d135a4de46159ab785f9b1b09bf5fea9cd004b4b4eff470e747c774bb27b086081a0ea8dc8983ba477d24dd7455355c2f0e57da72e7f8c685873359c76c3510f624dec87c91a356f10c23841946028e5697126c923f70b5ade499ec8a013e4aafb22d8b76469228c17c4971ce157aed8e1f9352c199c3b2be6e95d9e7bb3d1d8caee5599de2d04efe817bf150fd90c627ebf6aa2e1b39192ca3aa418527b7a0b388a3a4c73a2257f8a1fe3cfe34d0c7735ff64df4a1cef61edcb30d238231e65d74eca1d27cc2585e0a791a795d9a6e84784d27aab90f439b98c158484b0730ce3f5eea16ca5b0391cf5553f41ac8f70d6f0bd8d52aa6f170fbdb6fa5102c37d6f2d08e7cd57908bd25943f908368b1d6e8329a6401ba770f11a4ad151981f74ffad46520ff88d84b35c319b82d6db7699f2677183471913d00004eee4655992024cf04210949047bd170c34fd2cbac09c73484e7a6808baaa0e6afaffd49df3b119f1084094daa6e9b74549c7dddf73492b15ddf8cbedef8000000ef00004e25ee2900cc65543335fdc474165ccc2401a86c32e5f7be11f04ebe6f3ba45cd7dfce9d177017dc2c55d90f512d4ba7071c08bac17ba708e0f7756249df7552aa2953d4a93c349d476a5caf387250ce8a37897417f23021d7c1788ac37bb1088e3fe214061d846fed1bb32e2158d46ee5360151402c3bfd73ab906a2a6c6f286d35e85a25f9a797bf6c99219a91a3ac75b790702949ea6a59630e18c71d5ddc207c33620d1d993cd2685f10e06953d28f6c9194ee73f53821a8621d5b836b1ce994a68ed32f3b9b27f13d02eb105bb13e2659dcc3be1f68ae8871356497e9dc2a1c3bae6de6b5c8261f"]) (async) 2m28.906609275s ago: executing program 1 (id=1981): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x0, 0x100000e, 0x11, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x7, 0x4, 0x3a8, 0x1d8, 0x0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x4, &(0x7f0000000000), {[{{@arp={@multicast2, @private=0xa010101, 0xff, 0xff000000, 0x4, 0x10, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0x5, 0x2, 0xc, 0x5, 0x3ff, 'syzkaller1\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@local, @rand_addr=0x64010100, 0x0, 0x0, 0x2, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x9, 0x1000, 0x6, 0x72, 0x6, 'ip6gre0\x00', 'netpci0\x00', {0xff}, {0x10380b4568d62469}, 0x0, 0x20}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x5, 0x176}}}, {{@arp={@multicast1, @private=0xa010101, 0xffff00, 0xffffff00, 0x3, 0xe, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x6, 0xff1a, 0xffff, 0x2, 0x8, 'syzkaller1\x00', 'vcan0\x00', {0xff}, {}, 0x0, 0x50}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_usb_connect(0x3, 0x1cb, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES64], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) r3 = userfaultfd(0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000d40)={0xf}) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x13c}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) dup(0xffffffffffffffff) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r4, &(0x7f0000000140)="29000300010003", 0x7) (async) mkdir(0x0, 0x0) (async) syz_usb_ep_read(r0, 0x4, 0x25, &(0x7f0000000580)=""/37) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x21) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc1) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x212046, &(0x7f0000000180)={[], [{@fowner_eq}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x2800}}, {@audit}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fowner_gt}, {@fowner_eq}, {@dont_measure}]}) (async) open(&(0x7f0000000100)='./file0\x00', 0x119000, 0x3c) 2m13.886699657s ago: executing program 32 (id=1981): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x0, 0x100000e, 0x11, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x7, 0x4, 0x3a8, 0x1d8, 0x0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x4, &(0x7f0000000000), {[{{@arp={@multicast2, @private=0xa010101, 0xff, 0xff000000, 0x4, 0x10, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0x5, 0x2, 0xc, 0x5, 0x3ff, 'syzkaller1\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@local, @rand_addr=0x64010100, 0x0, 0x0, 0x2, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x9, 0x1000, 0x6, 0x72, 0x6, 'ip6gre0\x00', 'netpci0\x00', {0xff}, {0x10380b4568d62469}, 0x0, 0x20}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x5, 0x176}}}, {{@arp={@multicast1, @private=0xa010101, 0xffff00, 0xffffff00, 0x3, 0xe, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x6, 0xff1a, 0xffff, 0x2, 0x8, 'syzkaller1\x00', 'vcan0\x00', {0xff}, {}, 0x0, 0x50}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_usb_connect(0x3, 0x1cb, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES64], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) r3 = userfaultfd(0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000d40)={0xf}) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x13c}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) dup(0xffffffffffffffff) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r4, &(0x7f0000000140)="29000300010003", 0x7) (async) mkdir(0x0, 0x0) (async) syz_usb_ep_read(r0, 0x4, 0x25, &(0x7f0000000580)=""/37) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x21) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc1) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x212046, &(0x7f0000000180)={[], [{@fowner_eq}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x2800}}, {@audit}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fowner_gt}, {@fowner_eq}, {@dont_measure}]}) (async) open(&(0x7f0000000100)='./file0\x00', 0x119000, 0x3c) 6.281509575s ago: executing program 3 (id=2896): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x1, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 6.098943435s ago: executing program 3 (id=2899): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 2.927152741s ago: executing program 3 (id=2942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) 2.92693259s ago: executing program 2 (id=2943): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000028c0)=""/4098, 0x1052}], 0x2) close(0x3) 2.717915141s ago: executing program 3 (id=2945): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x8, 0x20}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x1, 0x0, 0xfffffffa}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) sendto$inet(r1, &(0x7f0000000400)='X', 0x1, 0x12, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)='r', 0x1}], 0x1}}], 0x1, 0x20000800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x25, 0x0, 0x1b}, 0x9c) 2.717113806s ago: executing program 2 (id=2946): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @mcast2, 0x1}, 0x1c) 2.59095163s ago: executing program 2 (id=2947): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000b40)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast1}, 0x3, 0x2, 0x4, 0x3}}, 0x26) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r2, 0x0, 0x8000002b) 2.175632755s ago: executing program 4 (id=2951): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.975113428s ago: executing program 4 (id=2953): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 1.774496286s ago: executing program 4 (id=2956): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 1.636203677s ago: executing program 4 (id=2958): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x2fd, 0x0, 0x0, 0x0, 0x0}) 1.427160775s ago: executing program 4 (id=2960): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) 1.351020383s ago: executing program 2 (id=2962): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.33974361s ago: executing program 3 (id=2963): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e28}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 953.43126ms ago: executing program 0 (id=2965): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 827.018428ms ago: executing program 3 (id=2966): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) 727.179485ms ago: executing program 0 (id=2967): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) sendmsg$tipc(r0, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0x102}], 0x1}, 0x0) 568.314924ms ago: executing program 0 (id=2968): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x560a, &(0x7f0000001040)={0x20, 0x3, 0x0, 0x20, 0x2, "08000000f28f00"}) 371.842716ms ago: executing program 2 (id=2969): unshare(0x22020400) socket$nl_route(0x10, 0x3, 0x0) unshare(0x24020400) 327.026606ms ago: executing program 0 (id=2970): r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f0000000580)={0x2, 0x4ea4, @local}, 0x10, 0x0}}, {{&(0x7f0000000a80)={0x2, 0x4e25, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400"], 0x18}}], 0x2, 0x10008000) 272.91233ms ago: executing program 4 (id=2971): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000b40)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast1}, 0x3, 0x2, 0x4, 0x3}}, 0x26) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r2, 0x0, 0x8000002b) 189.845759ms ago: executing program 0 (id=2972): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4c005, &(0x7f00000002c0)={0x11, 0x3, r1, 0x1, 0x45, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) 47.056292ms ago: executing program 2 (id=2973): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @mangle={0x0, 'mangle\x00', 0x0, {@mac, @empty, @multicast1, @loopback, 0x8, 0xffffffff}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@private=0xa010100, @remote, 0xff, 0xffffff, 0xc, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x3, 0x5, 0x1, 0x7, 0x2000, 'veth1_macvtap\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x27f) 0s ago: executing program 0 (id=2974): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) kernel console output (not intermixed with test programs): 42][T12536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.686728][T12536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.698951][ T8119] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 440.705616][ T5942] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 440.739338][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.751561][ T5942] usb 5-1: config 0 descriptor?? [ 440.861876][ T8119] usb 1-1: not running at top speed; connect to a high speed hub [ 440.891467][ T8119] usb 1-1: config 1 interface 0 altsetting 250 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 440.923295][ T8119] usb 1-1: config 1 interface 0 altsetting 250 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 440.952764][ T8119] usb 1-1: config 1 interface 0 has no altsetting 0 [ 440.970829][ T8119] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0a, bcdDevice= 0.40 [ 440.982195][ T8119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.996011][ T8119] usb 1-1: Product: syz [ 441.006063][ T8119] usb 1-1: Manufacturer: syz [ 441.025401][ T8119] usb 1-1: SerialNumber: syz [ 441.046810][T12559] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 441.058182][T12559] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 441.179023][ T5942] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 441.209619][ T5942] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 441.257842][ T5942] asix 5-1:0.0: probe with driver asix failed with error -61 [ 441.291277][T12559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.321161][ T5942] usb 5-1: USB disconnect, device number 7 [ 441.357529][T12559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.447027][T12567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.491334][T12571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2107'. [ 441.510452][ T980] usb 3-1: USB disconnect, device number 122 [ 441.519746][T12567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.554963][T12571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2107'. [ 441.588247][ T980] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 441.639664][ T980] cyberjack 3-1:0.69: device disconnected [ 441.852003][ T8119] usbhid 1-1:1.0: can't add hid device: -71 [ 441.878603][ T8119] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 441.936045][ T8119] usb 1-1: USB disconnect, device number 105 [ 442.002455][T12580] netlink: 'syz.4.2109': attribute type 11 has an invalid length. [ 442.039860][T12580] cgroup: Invalid name [ 442.273131][T12587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.289574][T12587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.300935][T12586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.334097][T12586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.348015][T12587] program syz.3.2112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.371124][T12586] program syz.3.2112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.514309][T12592] /dev/rnullb0: Can't open blockdev [ 442.740946][ T8119] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 442.911325][ T8119] usb 5-1: unable to get BOS descriptor or descriptor too short [ 442.930090][ T8119] usb 5-1: config 2 has an invalid interface number: 254 but max is 0 [ 442.938479][ T8119] usb 5-1: config 2 has no interface number 0 [ 442.960149][ T8119] usb 5-1: New USB device found, idVendor=04cb, idProduct=0109, bcdDevice=c1.88 [ 442.977038][ T8119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.990145][ T8119] usb 5-1: Product: syz [ 442.994428][ T8119] usb 5-1: Manufacturer: syz [ 443.002860][ T8119] usb 5-1: SerialNumber: syz [ 443.236378][T12594] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 443.243137][T12594] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 443.258500][T12594] vhci_hcd vhci_hcd.0: Device attached [ 443.281749][T12614] vhci_hcd: connection closed [ 443.282024][ T1061] vhci_hcd: stop threads [ 443.295820][ T8119] gspca_main: finepix-2.14.0 probing 04cb:0109 [ 443.301368][ T1061] vhci_hcd: release socket [ 443.306474][ T1061] vhci_hcd: disconnect device [ 443.353924][ T8119] usb 5-1: USB disconnect, device number 8 [ 443.463464][T12622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.513361][T12622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.966542][T12630] serio: Serial port ptm1 [ 443.986423][T12632] netlink: 'syz.2.2125': attribute type 4 has an invalid length. [ 444.306886][T12642] /dev/rnullb0: Can't open blockdev [ 444.738930][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 444.739414][ T5167] Bluetooth: hci5: command 0x1003 tx timeout [ 445.159791][T12661] netlink: 'syz.0.2134': attribute type 6 has an invalid length. [ 445.181430][T12661] /dev/rnullb0: Can't open blockdev [ 445.359015][ T980] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 445.540055][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 445.560627][ T980] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 445.578767][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.608199][ T980] usb 5-1: config 0 descriptor?? [ 445.631690][ T980] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 445.668565][T12675] Invalid/unusable pipe [ 445.749133][ T8119] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 445.920945][ T8119] usb 1-1: Using ep0 maxpacket: 32 [ 445.942471][ T8119] usb 1-1: config 3 has an invalid interface number: 43 but max is 3 [ 445.959111][T12679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.967894][T12679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.978387][ T8119] usb 1-1: config 3 has an invalid interface number: 50 but max is 3 [ 445.999028][ T8119] usb 1-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 446.011527][ T8119] usb 1-1: config 3 has an invalid interface number: 209 but max is 3 [ 446.031238][ T8119] usb 1-1: config 3 has an invalid interface number: 143 but max is 3 [ 446.052323][ T8119] usb 1-1: config 3 has no interface number 0 [ 446.058667][ T8119] usb 1-1: config 3 has no interface number 1 [ 446.070861][ T8119] usb 1-1: config 3 has no interface number 2 [ 446.077139][ T8119] usb 1-1: config 3 has no interface number 3 [ 446.099612][ T8119] usb 1-1: config 3 interface 50 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 446.112024][ T8119] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0xE, skipping [ 446.123049][ T8119] usb 1-1: config 3 interface 50 altsetting 203 endpoint 0x8E has an invalid bInterval 53, changing to 9 [ 446.134582][ T8119] usb 1-1: config 3 interface 50 altsetting 203 endpoint 0x8E has invalid maxpacket 33326, setting to 1024 [ 446.148486][ T8119] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 446.166839][ T8119] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 446.168535][T12684] ./file0: Can't lookup blockdev [ 446.181515][ T8119] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 446.195021][ T8119] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0xC, skipping [ 446.211311][ T8119] usb 1-1: config 3 interface 50 altsetting 203 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 446.226473][ T8119] usb 1-1: config 3 interface 209 altsetting 254 bulk endpoint 0x9 has invalid maxpacket 32 [ 446.283991][ T8119] usb 1-1: config 3 interface 209 altsetting 254 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 446.302990][ T8119] usb 1-1: config 3 interface 209 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 446.315660][ T8119] usb 1-1: config 3 interface 143 altsetting 160 has an invalid descriptor for endpoint zero, skipping [ 446.330699][ T8119] usb 1-1: config 3 interface 143 altsetting 160 has a duplicate endpoint with address 0xF, skipping [ 446.345995][ T8119] usb 1-1: config 3 interface 43 has no altsetting 0 [ 446.356049][ T8119] usb 1-1: config 3 interface 50 has no altsetting 0 [ 446.374102][ T8119] usb 1-1: config 3 interface 209 has no altsetting 0 [ 446.386502][ T8119] usb 1-1: config 3 interface 143 has no altsetting 0 [ 446.401649][ T8119] usb 1-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=9a.31 [ 446.431361][ T8119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.447849][ T8119] usb 1-1: Product: ﷝ꤝ㒂⌃斬톘⌧ [ 446.447873][ T8119] usb 1-1: Manufacturer: 鳮唄覞뚈㡵힮㰎昙ᶢ꯵캜倨ꋵథᚳᢉ灅⍼ [ 446.447890][ T8119] usb 1-1: SerialNumber: syz [ 446.515546][T12686] /dev/sg0: Can't lookup blockdev [ 446.678068][ T8119] rndis_host 1-1:3.43: More than one union descriptor, skipping ... [ 446.709292][ T980] gspca_nw80x: reg_r err -71 [ 446.714004][ T980] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 446.716868][ T8119] usb 1-1: bad CDC descriptors [ 446.739994][ T980] usb 5-1: USB disconnect, device number 9 [ 446.744430][ T8119] cdc_acm 1-1:3.43: More than one union descriptor, skipping ... [ 446.833686][ T8119] usb 1-1: USB disconnect, device number 106 [ 447.651325][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 447.685836][T12704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.730397][T12705] /dev/rnullb0: Can't open blockdev [ 448.459047][ T10] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 448.632633][ T10] usb 1-1: device descriptor read/64, error -71 [ 448.695227][T12715] /dev/rnullb0: Can't open blockdev [ 448.779714][T12717] /dev/rnullb0: Can't open blockdev [ 448.792048][T12718] /dev/rnullb0: Can't open blockdev [ 448.880024][ T10] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 449.044494][ T10] usb 1-1: device descriptor read/64, error -71 [ 449.057742][T12726] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2154'. [ 449.082973][T12727] syzkaller1: entered promiscuous mode [ 449.088478][T12727] syzkaller1: entered allmulticast mode [ 449.180586][ T10] usb usb1-port1: attempt power cycle [ 449.342352][ T5927] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 449.504626][T12735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.515742][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 449.530037][ T10] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 449.551569][ T5927] usb 5-1: config 3 has an invalid interface number: 43 but max is 3 [ 449.561132][T12735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.578802][ T5927] usb 5-1: config 3 has an invalid interface number: 50 but max is 3 [ 449.587559][ T5927] usb 5-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 449.599490][ T10] usb 1-1: device descriptor read/8, error -71 [ 449.617407][ T5927] usb 5-1: config 3 has an invalid interface number: 209 but max is 3 [ 449.636870][ T5927] usb 5-1: config 3 has an invalid interface number: 143 but max is 3 [ 449.661694][ T5927] usb 5-1: config 3 has no interface number 0 [ 449.684106][ T5927] usb 5-1: config 3 has no interface number 1 [ 449.694248][ T5927] usb 5-1: config 3 has no interface number 2 [ 449.716016][ T5927] usb 5-1: config 3 has no interface number 3 [ 449.738185][ T5927] usb 5-1: config 3 interface 50 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 449.776550][ T5927] usb 5-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0xE, skipping [ 449.806936][ T5927] usb 5-1: config 3 interface 50 altsetting 203 endpoint 0x8E has an invalid bInterval 53, changing to 9 [ 449.833546][ T5927] usb 5-1: config 3 interface 50 altsetting 203 endpoint 0x8E has invalid maxpacket 33326, setting to 1024 [ 449.849528][ T10] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 449.866987][ T5927] usb 5-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 449.899104][ T5927] usb 5-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 449.919286][ T10] usb 1-1: device descriptor read/8, error -71 [ 449.925823][ T5927] usb 5-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 449.946674][ T5927] usb 5-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0xC, skipping [ 449.958268][ T5927] usb 5-1: config 3 interface 50 altsetting 203 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 449.972324][ T5927] usb 5-1: config 3 interface 209 altsetting 254 bulk endpoint 0x9 has invalid maxpacket 32 [ 449.983235][ T5927] usb 5-1: config 3 interface 209 altsetting 254 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 449.995123][ T5927] usb 5-1: config 3 interface 209 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 450.006554][ T5927] usb 5-1: config 3 interface 143 altsetting 160 has an invalid descriptor for endpoint zero, skipping [ 450.032351][ T10] usb usb1-port1: unable to enumerate USB device [ 450.050181][ T5927] usb 5-1: config 3 interface 143 altsetting 160 has a duplicate endpoint with address 0xF, skipping [ 450.088907][ T5927] usb 5-1: config 3 interface 43 has no altsetting 0 [ 450.096238][ T5927] usb 5-1: config 3 interface 50 has no altsetting 0 [ 450.108880][ T5927] usb 5-1: config 3 interface 209 has no altsetting 0 [ 450.120741][ T5927] usb 5-1: config 3 interface 143 has no altsetting 0 [ 450.161958][ T5927] usb 5-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=9a.31 [ 450.176409][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.205583][ T5927] usb 5-1: Product: ﷝ꤝ㒂⌃斬톘⌧ [ 450.215730][ T5927] usb 5-1: Manufacturer: 鳮唄覞뚈㡵힮㰎昙ᶢ꯵캜倨ꋵథᚳᢉ灅⍼ [ 450.247614][ T5927] usb 5-1: SerialNumber: syz [ 450.279192][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.302891][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.328049][T12739] /dev/rnullb0: Can't open blockdev [ 450.491457][ T5927] rndis_host 5-1:3.43: More than one union descriptor, skipping ... [ 450.512512][ T5927] usb 5-1: bad CDC descriptors [ 450.530712][ T5927] cdc_acm 5-1:3.43: More than one union descriptor, skipping ... [ 450.613968][ T5927] usb 5-1: USB disconnect, device number 10 [ 450.973010][T12751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.266890][T12751] netlink: 'syz.2.2164': attribute type 21 has an invalid length. [ 451.345387][T12751] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2164'. [ 451.400509][T12760] /dev/rnullb0: Can't open blockdev [ 451.439951][T12753] lo speed is unknown, defaulting to 1000 [ 452.176314][T12768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.289318][T12768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.368905][T12772] netlink: 'syz.2.2170': attribute type 5 has an invalid length. [ 452.378589][T12772] /dev/rnullb0: Can't open blockdev [ 452.616540][T12778] /dev/rnullb0: Can't open blockdev [ 452.860862][T12787] /dev/rnullb0: Can't open blockdev [ 452.938804][ T5942] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 453.009093][ T5927] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 453.104760][ T5942] usb 5-1: config 0 has an invalid interface number: 227 but max is 0 [ 453.119654][ T5942] usb 5-1: config 0 has no interface number 0 [ 453.152576][ T5942] usb 5-1: config 0 interface 227 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 64 [ 453.178831][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 453.182714][ T5942] usb 5-1: New USB device found, idVendor=19d2, idProduct=ff75, bcdDevice=2c.db [ 453.201013][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.201301][ T5927] usb 1-1: config 3 has an invalid interface number: 43 but max is 3 [ 453.228506][ T5942] usb 5-1: Product: syz [ 453.231425][ T5927] usb 1-1: config 3 has an invalid interface number: 50 but max is 3 [ 453.232988][T12794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2178'. [ 453.254570][ T5942] usb 5-1: Manufacturer: syz [ 453.259724][ T5942] usb 5-1: SerialNumber: syz [ 453.264007][ T5927] usb 1-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 453.267295][ T5942] usb 5-1: config 0 descriptor?? [ 453.299936][T12783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 453.328922][ T5927] usb 1-1: config 3 has an invalid interface number: 209 but max is 3 [ 453.337227][ T5927] usb 1-1: config 3 has an invalid interface number: 143 but max is 3 [ 453.390712][ T5927] usb 1-1: config 3 has no interface number 0 [ 453.396916][ T5927] usb 1-1: config 3 has no interface number 1 [ 453.420931][ T5927] usb 1-1: config 3 has no interface number 2 [ 453.427060][ T5927] usb 1-1: config 3 has no interface number 3 [ 453.442756][ T5927] usb 1-1: config 3 interface 50 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 453.476031][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2179'. [ 453.490192][ T5927] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0xE, skipping [ 453.514315][T12783] /dev/rnullb0: Can't open blockdev [ 453.521071][ T5927] usb 1-1: config 3 interface 50 altsetting 203 endpoint 0x8E has an invalid bInterval 53, changing to 9 [ 453.536357][ T5942] option 5-1:0.227: GSM modem (1-port) converter detected [ 453.551056][ T5927] usb 1-1: config 3 interface 50 altsetting 203 endpoint 0x8E has invalid maxpacket 33326, setting to 1024 [ 453.581199][ T5942] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 453.620402][ T5942] usb 5-1: USB disconnect, device number 11 [ 453.673709][ T5927] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 453.686193][ T5927] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 453.686344][ T5942] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 453.701013][ T5927] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 453.751176][ T5927] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0xC, skipping [ 453.791026][ T5927] usb 1-1: config 3 interface 50 altsetting 203 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 453.831132][ T5942] option 5-1:0.227: device disconnected [ 453.835532][ T5927] usb 1-1: config 3 interface 209 altsetting 254 bulk endpoint 0x9 has invalid maxpacket 32 [ 453.867657][ T5927] usb 1-1: config 3 interface 209 altsetting 254 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 453.905652][ T5927] usb 1-1: config 3 interface 209 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 453.937543][ T5927] usb 1-1: config 3 interface 143 altsetting 160 has an invalid descriptor for endpoint zero, skipping [ 453.960646][ T5927] usb 1-1: config 3 interface 143 altsetting 160 has a duplicate endpoint with address 0xF, skipping [ 453.980697][ T5927] usb 1-1: config 3 interface 43 has no altsetting 0 [ 453.997925][ T5927] usb 1-1: config 3 interface 50 has no altsetting 0 [ 454.018514][ T5927] usb 1-1: config 3 interface 209 has no altsetting 0 [ 454.062747][ T5927] usb 1-1: config 3 interface 143 has no altsetting 0 [ 454.091228][ T5927] usb 1-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=9a.31 [ 454.108848][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.128614][ T5927] usb 1-1: Product: ﷝ꤝ㒂⌃斬톘⌧ [ 454.183611][ T5927] usb 1-1: Manufacturer: 鳮唄覞뚈㡵힮㰎昙ᶢ꯵캜倨ꋵథᚳᢉ灅⍼ [ 454.208669][ T5927] usb 1-1: SerialNumber: syz [ 454.237384][T12802] /dev/rnullb0: Can't open blockdev [ 454.386427][T12808] /dev/rnullb0: Can't open blockdev [ 454.431906][ T5927] rndis_host 1-1:3.43: More than one union descriptor, skipping ... [ 454.461931][ T5927] usb 1-1: bad CDC descriptors [ 454.480232][ T5927] cdc_acm 1-1:3.43: More than one union descriptor, skipping ... [ 454.573323][ T5927] usb 1-1: USB disconnect, device number 111 [ 455.084921][T12823] /dev/rnullb0: Can't open blockdev [ 455.244430][ T5845] Bluetooth: Frame is too long (len 171, expected len 117) [ 455.271317][T12828] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 455.277879][T12828] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 455.286708][T12828] vhci_hcd vhci_hcd.0: Device attached [ 455.297281][T12829] vhci_hcd: connection closed [ 455.297545][ T3477] vhci_hcd: stop threads [ 455.312210][ T3477] vhci_hcd: release socket [ 455.316662][ T3477] vhci_hcd: disconnect device [ 455.331036][ T5927] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 455.468956][ T5927] usb 1-1: device descriptor read/64, error -71 [ 455.729694][ T5927] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 455.767445][T12838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.780433][T12838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.796760][T12838] /dev/rnullb0: Can't open blockdev [ 455.869077][ T5927] usb 1-1: device descriptor read/64, error -71 [ 456.000527][ T5927] usb usb1-port1: attempt power cycle [ 456.179198][ T24] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 456.192348][ T5942] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 456.348821][ T5927] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 456.369131][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 456.369541][ T5927] usb 1-1: device descriptor read/8, error -71 [ 456.396958][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.409243][ T24] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 456.417524][ T24] usb 3-1: config 0 has no interface number 0 [ 456.441900][ T5942] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 456.461451][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.483428][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 456.495449][ T5942] usb 5-1: config 0 descriptor?? [ 456.507974][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.517543][ T24] usb 3-1: Product: syz [ 456.535723][ T24] usb 3-1: Manufacturer: syz [ 456.540502][ T24] usb 3-1: SerialNumber: syz [ 456.559567][ T24] usb 3-1: config 0 descriptor?? [ 456.575221][ T24] smsc95xx v2.0.0 [ 456.640838][ T5927] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 456.679655][ T5927] usb 1-1: device descriptor read/8, error -71 [ 456.802917][ T5927] usb usb1-port1: unable to enumerate USB device [ 456.972114][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 456.994134][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 457.196043][T12852] /dev/rnullb0: Can't open blockdev [ 457.205139][T12852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.218327][T12852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.235985][T12852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.245121][T12852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.284009][T12853] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2193'. [ 457.293311][T12853] netlink: 'syz.4.2193': attribute type 6 has an invalid length. [ 457.304765][T12853] netlink: 'syz.4.2193': attribute type 5 has an invalid length. [ 457.316944][T12853] /dev/rnullb0: Can't open blockdev [ 458.204564][T12858] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 458.211135][T12858] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 458.225555][T12858] vhci_hcd vhci_hcd.0: Device attached [ 458.489100][ T5895] usb 34-1: SetAddress Request (6) to port 0 [ 458.496320][ T5895] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 458.524340][T12859] vhci_hcd: connection closed [ 458.526751][ T1061] vhci_hcd: stop threads [ 458.538301][ T1061] vhci_hcd: release socket [ 458.542993][ T1061] vhci_hcd: disconnect device [ 458.635527][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 458.649549][ T24] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 458.679108][ T24] usb 3-1: USB disconnect, device number 123 [ 458.972289][ T5942] usbhid 5-1:0.0: can't add hid device: -71 [ 458.990641][ T5942] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 459.042448][ T5942] usb 5-1: USB disconnect, device number 12 [ 459.793631][T12886] /dev/rnullb0: Can't open blockdev [ 460.325504][T12899] netlink: 'syz.3.2211': attribute type 291 has an invalid length. [ 460.378818][ T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 460.542071][T12906] overlayfs: overlapping lowerdir path [ 460.551400][ T24] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 460.564201][ T24] usb 5-1: config 0 has no interface number 0 [ 460.575445][ T24] usb 5-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31 [ 460.628590][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.640819][ T24] usb 5-1: Product: syz [ 460.645073][ T24] usb 5-1: Manufacturer: syz [ 460.653410][ T24] usb 5-1: SerialNumber: syz [ 460.669012][ T24] usb 5-1: config 0 descriptor?? [ 460.886470][T12894] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2209'. [ 460.922752][T12894] /dev/rnullb0: Can't open blockdev [ 460.938416][ T24] pl2303 5-1:0.161: required endpoints missing [ 460.959324][ T24] usb 5-1: USB disconnect, device number 13 [ 460.999101][ T8119] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 461.162019][ T8119] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 461.193167][ T8119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 461.224650][ T8119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 461.249214][ T8119] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 461.263579][ T8119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.271972][ T8119] usb 3-1: Product: syz [ 461.276258][ T8119] usb 3-1: Manufacturer: syz [ 461.285554][ T8119] usb 3-1: SerialNumber: syz [ 461.296687][ T8119] usb 3-1: config 0 descriptor?? [ 461.441009][T12924] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2219'. [ 461.538128][ T8119] powermate: unknown product id 0240 [ 461.582626][ T8119] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 461.614768][ T8119] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 461.674158][T12928] /dev/rnullb0: Can't open blockdev [ 461.690776][ T8119] usb 3-1: USB disconnect, device number 124 [ 461.697758][T12930] /dev/rnullb0: Can't open blockdev [ 462.406768][T12938] /dev/rnullb0: Can't open blockdev [ 462.643495][T12947] /dev/rnullb0: Can't open blockdev [ 463.035331][T12963] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 463.057799][T12963] overlayfs: failed to set xattr on upper [ 463.087563][T12963] overlayfs: ...falling back to redirect_dir=nofollow. [ 463.115174][T12963] overlayfs: ...falling back to index=off. [ 463.147979][T12963] overlayfs: ...falling back to uuid=null. [ 463.174133][T12966] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 463.180681][T12966] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 463.230307][T12963] overlayfs: ...falling back to xino=off. [ 463.257170][T12966] vhci_hcd vhci_hcd.0: Device attached [ 463.317430][T12968] vhci_hcd: connection closed [ 463.317887][T12627] vhci_hcd: stop threads [ 463.358171][T12627] vhci_hcd: release socket [ 463.383323][T12627] vhci_hcd: disconnect device [ 463.540680][ T5895] usb 34-1: device descriptor read/8, error -110 [ 463.694102][T12978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.725905][T12979] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2236'. [ 463.737158][T12978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.776922][T12979] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2236'. [ 463.980209][ T5895] usb usb34-port1: attempt power cycle [ 464.014547][T12982] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2238'. [ 464.026923][T12982] /dev/rnullb0: Can't open blockdev [ 464.347331][T12999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.363827][T12999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.372782][T13000] /dev/rnullb0: Can't open blockdev [ 464.379499][ T8119] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 464.445941][T13002] program syz.4.2245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.530794][T12999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.545694][T12999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.554769][ T8119] usb 1-1: Using ep0 maxpacket: 32 [ 464.560223][ T5895] usb usb34-port1: unable to enumerate USB device [ 464.575097][ T8119] usb 1-1: no configurations [ 464.589099][ T8119] usb 1-1: can't read configurations, error -22 [ 464.729863][ T8119] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 464.899037][ T8119] usb 1-1: Using ep0 maxpacket: 32 [ 464.915601][ T8119] usb 1-1: no configurations [ 464.936456][ T8119] usb 1-1: can't read configurations, error -22 [ 464.976592][ T8119] usb usb1-port1: attempt power cycle [ 465.029094][T13008] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.036269][T13008] /dev/rnullb0: Can't open blockdev [ 465.260633][T13012] /dev/rnullb0: Can't open blockdev [ 465.334458][ T8119] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 465.381288][ T8119] usb 1-1: Using ep0 maxpacket: 32 [ 465.400876][ T8119] usb 1-1: no configurations [ 465.406018][ T8119] usb 1-1: can't read configurations, error -22 [ 465.448998][T13021] /dev/rnullb0: Can't open blockdev [ 465.558900][ T8119] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 465.619851][ T8119] usb 1-1: Using ep0 maxpacket: 32 [ 465.634534][ T8119] usb 1-1: no configurations [ 465.645053][T13023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.663581][ T8119] usb 1-1: can't read configurations, error -22 [ 465.681648][T13023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.693677][ T8119] usb usb1-port1: unable to enumerate USB device [ 465.863335][T13025] MTD: Couldn't look up './cgroup': -15 [ 465.880859][T13025] ./cgroup: Can't lookup blockdev [ 466.574060][T13041] /dev/rnullb0: Can't open blockdev [ 466.687671][T13047] /dev/rnullb0: Can't open blockdev [ 466.838962][ T8119] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 466.847118][T13049] /dev/rnullb0: Can't open blockdev [ 466.914050][T13054] /dev/rnullb0: Can't open blockdev [ 466.915485][T13056] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 466.934559][T13056] qnx6: wrong signature (magic) in superblock #1. [ 466.941100][T13056] qnx6: unable to read the first superblock [ 467.014775][T13059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.018953][ T8119] usb 3-1: Using ep0 maxpacket: 16 [ 467.026788][T13059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.055598][ T8119] usb 3-1: unable to get BOS descriptor or descriptor too short [ 467.077559][ T8119] usb 3-1: config 8 interface 0 has no altsetting 0 [ 467.098128][ T8119] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice= f.ca [ 467.122289][ T8119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.145162][ T8119] usb 3-1: Product: syz [ 467.159512][ T8119] usb 3-1: Manufacturer: syz [ 467.169802][ T8119] usb 3-1: SerialNumber: syz [ 467.477235][ T8119] usb 3-1: USB disconnect, device number 125 [ 467.528858][ T10] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 467.575536][T13067] netlink: 'syz.2.2265': attribute type 3 has an invalid length. [ 467.610450][T13067] netlink: 'syz.2.2265': attribute type 1 has an invalid length. [ 467.618410][T13067] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2265'. [ 467.630464][T13067] NCSI netlink: No device for ifindex 33022 [ 467.651520][T13069] /dev/rnullb0: Can't open blockdev [ 467.739603][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 467.771020][ T10] usb 1-1: config 3 has an invalid interface number: 43 but max is 3 [ 467.788934][ T10] usb 1-1: config 3 has an invalid interface number: 50 but max is 3 [ 467.799686][ T10] usb 1-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 467.818991][ T10] usb 1-1: config 3 has an invalid interface number: 209 but max is 3 [ 467.839296][ T10] usb 1-1: config 3 has an invalid interface number: 143 but max is 3 [ 467.849291][ T10] usb 1-1: config 3 has no interface number 0 [ 467.855388][ T10] usb 1-1: config 3 has no interface number 1 [ 467.873591][ T10] usb 1-1: config 3 has no interface number 2 [ 467.888861][ T10] usb 1-1: config 3 has no interface number 3 [ 467.901989][ T10] usb 1-1: config 3 interface 50 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 467.922335][ T10] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0xE, skipping [ 467.958968][ T10] usb 1-1: config 3 interface 50 altsetting 203 endpoint 0x8E has an invalid bInterval 53, changing to 9 [ 467.982821][ T10] usb 1-1: config 3 interface 50 altsetting 203 endpoint 0x8E has invalid maxpacket 33326, setting to 1024 [ 468.000851][ T10] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 468.051665][ T10] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 468.106583][ T10] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 468.159296][ T10] usb 1-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0xC, skipping [ 468.188891][ T10] usb 1-1: config 3 interface 50 altsetting 203 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 468.269738][ T10] usb 1-1: config 3 interface 209 altsetting 254 bulk endpoint 0x9 has invalid maxpacket 32 [ 468.288980][ T10] usb 1-1: config 3 interface 209 altsetting 254 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 468.309246][ T10] usb 1-1: config 3 interface 209 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 468.348837][ T10] usb 1-1: config 3 interface 143 altsetting 160 has an invalid descriptor for endpoint zero, skipping [ 468.382121][ T10] usb 1-1: config 3 interface 143 altsetting 160 has a duplicate endpoint with address 0xF, skipping [ 468.414089][ T10] usb 1-1: config 3 interface 43 has no altsetting 0 [ 468.457604][ T10] usb 1-1: config 3 interface 50 has no altsetting 0 [ 468.487726][ T10] usb 1-1: config 3 interface 209 has no altsetting 0 [ 468.501575][ T10] usb 1-1: config 3 interface 143 has no altsetting 0 [ 468.532022][ T10] usb 1-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=9a.31 [ 468.545261][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.566161][ T10] usb 1-1: Product: ﷝ꤝ㒂⌃斬톘⌧ [ 468.583025][ T10] usb 1-1: Manufacturer: 鳮唄覞뚈㡵힮㰎昙ᶢ꯵캜倨ꋵథᚳᢉ灅⍼ [ 468.612547][ T10] usb 1-1: SerialNumber: syz [ 468.668900][ T8119] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 468.749143][ T24] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 468.818995][ T8119] usb 5-1: Using ep0 maxpacket: 32 [ 468.845827][ T10] rndis_host 1-1:3.43: More than one union descriptor, skipping ... [ 468.859455][ T8119] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 468.872997][ T8119] usb 5-1: config 0 has no interface number 0 [ 468.888181][ T10] usb 1-1: bad CDC descriptors [ 468.896016][ T8119] usb 5-1: config 0 interface 230 has no altsetting 0 [ 468.903674][ T10] cdc_acm 1-1:3.43: More than one union descriptor, skipping ... [ 468.921641][ T8119] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 468.938882][ T8119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.939025][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 468.947304][ T8119] usb 5-1: Product: syz [ 468.967823][ T8119] usb 5-1: Manufacturer: syz [ 468.977962][ T8119] usb 5-1: SerialNumber: syz [ 468.985491][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 469.001413][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 469.016847][ T10] usb 1-1: USB disconnect, device number 120 [ 469.024462][ T8119] usb 5-1: config 0 descriptor?? [ 469.025086][ T24] usb 3-1: can't read configurations, error -61 [ 469.084143][ T8119] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 469.124196][ T8119] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 469.189336][ T24] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 469.339133][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 469.351019][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 469.371813][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 469.388845][ T24] usb 3-1: can't read configurations, error -61 [ 469.399282][ T24] usb usb3-port1: attempt power cycle [ 469.751449][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 469.789572][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 469.798031][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 469.809628][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 469.818162][ T24] usb 3-1: can't read configurations, error -61 [ 469.969392][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 469.991650][T13110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.006537][T13110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.010285][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 470.030895][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 470.041078][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 470.049314][ T24] usb 3-1: can't read configurations, error -61 [ 470.056046][ T24] usb usb3-port1: unable to enumerate USB device [ 470.603850][T13114] /dev/rnullb0: Can't open blockdev [ 471.342186][T13128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.355551][T13128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.550724][ T8119] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 471.589524][ T8119] usb 5-1: USB disconnect, device number 14 [ 472.369467][T13141] /dev/rnullb0: Can't open blockdev [ 472.757264][T13152] netlink: 'syz.4.2292': attribute type 10 has an invalid length. [ 472.795092][T13152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.828431][T13152] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 473.168889][ T8119] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 473.331881][ T8119] usb 5-1: Using ep0 maxpacket: 32 [ 473.355518][ T8119] usb 5-1: config 3 has an invalid interface number: 43 but max is 3 [ 473.368859][ T8119] usb 5-1: config 3 has an invalid interface number: 50 but max is 3 [ 473.391845][ T8119] usb 5-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 473.414365][ T8119] usb 5-1: config 3 has an invalid interface number: 209 but max is 3 [ 473.448639][ T8119] usb 5-1: config 3 has an invalid interface number: 143 but max is 3 [ 473.477834][ T8119] usb 5-1: config 3 has no interface number 0 [ 473.498088][ T8119] usb 5-1: config 3 has no interface number 1 [ 473.504584][ T8119] usb 5-1: config 3 has no interface number 2 [ 473.520981][ T8119] usb 5-1: config 3 has no interface number 3 [ 473.527765][ T8119] usb 5-1: config 3 interface 50 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 473.559277][ T8119] usb 5-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0xE, skipping [ 473.586826][ T8119] usb 5-1: config 3 interface 50 altsetting 203 endpoint 0x8E has an invalid bInterval 53, changing to 9 [ 473.640163][T13170] lo speed is unknown, defaulting to 1000 [ 473.707549][ T8119] usb 5-1: config 3 interface 50 altsetting 203 endpoint 0x8E has invalid maxpacket 33326, setting to 1024 [ 473.789123][ T8119] usb 5-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 473.841506][ T8119] usb 5-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 473.887688][ T8119] usb 5-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 473.939803][ T8119] usb 5-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0xC, skipping [ 473.984986][ T8119] usb 5-1: config 3 interface 50 altsetting 203 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 474.060313][ T8119] usb 5-1: config 3 interface 209 altsetting 254 bulk endpoint 0x9 has invalid maxpacket 32 [ 474.127433][ T8119] usb 5-1: config 3 interface 209 altsetting 254 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 474.158786][ T8119] usb 5-1: config 3 interface 209 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 474.190843][ T8119] usb 5-1: config 3 interface 143 altsetting 160 has an invalid descriptor for endpoint zero, skipping [ 474.224158][ T8119] usb 5-1: config 3 interface 143 altsetting 160 has a duplicate endpoint with address 0xF, skipping [ 474.245479][ T8119] usb 5-1: config 3 interface 43 has no altsetting 0 [ 474.262506][ T8119] usb 5-1: config 3 interface 50 has no altsetting 0 [ 474.279623][ T8119] usb 5-1: config 3 interface 209 has no altsetting 0 [ 474.294146][ T8119] usb 5-1: config 3 interface 143 has no altsetting 0 [ 474.315891][ T8119] usb 5-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=9a.31 [ 474.332461][ T8119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.356884][ T8119] usb 5-1: Product: ﷝ꤝ㒂⌃斬톘⌧ [ 474.374374][ T8119] usb 5-1: Manufacturer: 鳮唄覞뚈㡵힮㰎昙ᶢ꯵캜倨ꋵథᚳᢉ灅⍼ [ 474.391826][ T8119] usb 5-1: SerialNumber: syz [ 474.661739][ T8119] rndis_host 5-1:3.43: More than one union descriptor, skipping ... [ 474.706094][ T8119] usb 5-1: bad CDC descriptors [ 474.739625][ T8119] cdc_acm 5-1:3.43: More than one union descriptor, skipping ... [ 474.798223][T13185] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 474.804797][T13185] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 474.816760][ T8119] usb 5-1: USB disconnect, device number 15 [ 474.852331][T13185] vhci_hcd vhci_hcd.0: Device attached [ 474.892220][T13186] vhci_hcd: connection closed [ 474.893643][T12627] vhci_hcd: stop threads [ 474.941213][T12627] vhci_hcd: release socket [ 474.945684][T12627] vhci_hcd: disconnect device [ 475.017297][ T30] audit: type=1326 audit(1753878183.718:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13189 comm="syz.3.2303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85a598e9a9 code=0x0 [ 475.071451][T13191] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2303'. [ 476.247005][T13203] /dev/rnullb0: Can't open blockdev [ 476.254442][ T10] usb 4-1: USB disconnect, device number 118 [ 476.520419][T13209] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 476.526965][T13209] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 476.601910][T13209] vhci_hcd vhci_hcd.0: Device attached [ 476.791576][ T5895] vhci_hcd: vhci_device speed not set [ 476.826600][ T5167] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 476.839112][ T5167] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 476.848185][ T5167] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 476.878991][ T5895] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 476.909084][ T5167] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 476.920222][ T5167] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 476.973161][T13212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 477.065687][T13216] lo speed is unknown, defaulting to 1000 [ 477.104662][T13210] vhci_hcd: connection reset by peer [ 477.144190][ T49] vhci_hcd: stop threads [ 477.148477][ T49] vhci_hcd: release socket [ 477.167777][ T49] vhci_hcd: disconnect device [ 477.230324][ T8696] bridge0: port 3(syz_tun) entered disabled state [ 477.271216][ T8696] syz_tun (unregistering): left allmulticast mode [ 477.277686][ T8696] syz_tun (unregistering): left promiscuous mode [ 477.313768][ T8696] bridge0: port 3(syz_tun) entered disabled state [ 477.617541][ T49] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.658896][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 477.850780][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 477.865109][ T49] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.915758][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.059764][ T24] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 478.078771][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.086815][ T24] usb 5-1: Product: syz [ 478.124070][ T24] usb 5-1: Manufacturer: syz [ 478.142663][ T49] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.153211][ T24] usb 5-1: SerialNumber: syz [ 478.181828][ T24] usb 5-1: config 0 descriptor?? [ 478.211593][ T24] usb 5-1: no audio or video endpoints found [ 478.257404][T13216] chnl_net:caif_netlink_parms(): no params data found [ 478.313886][ T49] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.462916][T13224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.476388][T13224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.709115][ T5927] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 478.757077][T13216] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.779639][T13216] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.786932][T13216] bridge_slave_0: entered allmulticast mode [ 478.811171][T13216] bridge_slave_0: entered promiscuous mode [ 478.862342][T13216] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.869006][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 478.870321][T13216] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.882147][T13216] bridge_slave_1: entered allmulticast mode [ 478.891166][ T5927] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 478.909341][ T10] usb 5-1: USB disconnect, device number 16 [ 478.919176][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.948151][T13216] bridge_slave_1: entered promiscuous mode [ 478.948848][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 478.979326][ T5845] Bluetooth: hci5: command tx timeout [ 478.988584][ T5927] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 479.016686][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.036343][ T5927] usb 1-1: config 0 descriptor?? [ 479.117894][T13216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.135079][ T49] bridge_slave_1: left allmulticast mode [ 479.154097][ T49] bridge_slave_1: left promiscuous mode [ 479.164429][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.183506][ T49] bridge_slave_0: left promiscuous mode [ 479.194291][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.241614][ T49] bond_slave_0: left promiscuous mode [ 479.247414][ T49] bond_slave_1: left promiscuous mode [ 479.463969][ T5927] samsung 0003:0419:0001.0013: item fetching failed at offset 10/11 [ 479.508625][ T5927] samsung 0003:0419:0001.0013: parse failed [ 479.519927][ T5927] samsung 0003:0419:0001.0013: probe with driver samsung failed with error -22 [ 479.678345][ T5927] usb 1-1: USB disconnect, device number 121 [ 479.874236][ T49] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 479.944693][T13253] /dev/rnullb0: Can't open blockdev [ 480.304791][T13259] Bluetooth: MGMT ver 1.23 [ 480.311670][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 480.432590][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.464196][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.503870][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 480.510291][ T49] bond0 (unregistering): Released all slaves [ 480.530743][ T24] usb 5-1: config 0 has no interfaces? [ 480.536348][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 480.555144][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.574267][T13216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.605122][ T24] usb 5-1: config 0 descriptor?? [ 480.800942][ T49] : left promiscuous mode [ 480.846623][ T24] usb 5-1: USB disconnect, device number 17 [ 480.944054][T13216] team0: Port device team_slave_0 added [ 480.976694][T13216] team0: Port device team_slave_1 added [ 481.059284][ T5845] Bluetooth: hci5: command tx timeout [ 481.267119][T13216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.278832][T13216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.305935][T13216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.310475][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 481.358942][T13216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.387360][T13216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.460470][T13216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.570867][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 481.594251][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 481.626295][ T24] usb 5-1: config 0 has no interface number 0 [ 481.656420][ T24] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 482.665382][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.698786][ T24] usb 5-1: Product: syz [ 482.702988][ T24] usb 5-1: Manufacturer: syz [ 482.707586][ T24] usb 5-1: SerialNumber: syz [ 483.341121][ T5895] vhci_hcd: vhci_device speed not set [ 483.371213][ T5845] Bluetooth: hci5: command tx timeout [ 483.560839][ T24] usb 5-1: config 0 descriptor?? [ 483.714008][ T24] usb 5-1: can't set config #0, error -71 [ 483.901666][ T24] usb 5-1: USB disconnect, device number 18 [ 484.075850][T13298] /dev/rnullb0: Can't open blockdev [ 484.216997][T13216] hsr_slave_0: entered promiscuous mode [ 484.253945][T13216] hsr_slave_1: entered promiscuous mode [ 484.285019][T13216] debugfs: 'hsr0' already exists in 'hsr' [ 484.292663][T13304] /dev/sg0: Can't lookup blockdev [ 484.313065][T13216] Cannot create hsr debugfs directory [ 484.478638][ T49] hsr_slave_0: left promiscuous mode [ 484.519977][ T49] hsr_slave_1: left promiscuous mode [ 484.543804][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.553710][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.581855][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.610788][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.627402][T13313] /dev/rnullb0: Can't open blockdev [ 484.733851][ T49] veth1_macvtap: left promiscuous mode [ 484.771027][ T49] veth0_macvtap: left promiscuous mode [ 484.776951][ T49] veth1_vlan: left promiscuous mode [ 484.793371][ T49] veth0_vlan: left promiscuous mode [ 484.964066][T13321] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 485.001418][T13321] /dev/rnullb0: Can't open blockdev [ 485.061152][ T5895] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 485.239118][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 485.253597][ T5895] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.285531][ T5895] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.328908][ T5895] usb 3-1: config 0 interface 0 has no altsetting 0 [ 485.354594][ T5895] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 485.391809][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.424128][ T5895] usb 3-1: config 0 descriptor?? [ 485.489788][ T5845] Bluetooth: hci5: command tx timeout [ 485.877141][ T5895] steelseries 0003:1038:1410.0014: item fetching failed at offset 2/5 [ 485.935202][ T5895] steelseries 0003:1038:1410.0014: parse failed [ 485.951807][ T5895] steelseries 0003:1038:1410.0014: probe with driver steelseries failed with error -22 [ 486.657311][ T49] team0 (unregistering): Port device team_slave_1 removed [ 486.730246][ T49] team0 (unregistering): Port device team_slave_0 removed [ 487.769252][ T5895] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 487.901014][ T24] usb 3-1: USB disconnect, device number 4 [ 487.974117][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.002197][ T5895] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 488.028282][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 488.084556][ T5895] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 488.100687][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.121640][ T5895] usb 5-1: Product: syz [ 488.166171][ T5895] usb 5-1: Manufacturer: syz [ 488.181242][ T5895] usb 5-1: SerialNumber: syz [ 488.203309][ T5895] usb 5-1: config 0 descriptor?? [ 488.241081][ T5895] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 488.254309][ T5895] usb 5-1: No valid video chain found. [ 488.907647][ T5895] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 488.973481][ T5942] usb 5-1: USB disconnect, device number 19 [ 489.093286][T13216] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 489.109011][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 489.134100][ T5895] usb 3-1: config 3 has an invalid interface number: 43 but max is 1 [ 489.147490][T13216] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 489.173034][ T5895] usb 3-1: config 3 has an invalid interface number: 50 but max is 1 [ 489.190882][ T5895] usb 3-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 489.212086][ T5895] usb 3-1: config 3 has no interface number 0 [ 489.218205][ T5895] usb 3-1: config 3 has no interface number 1 [ 489.244816][T13216] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 489.258916][ T5895] usb 3-1: config 3 interface 50 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 489.284912][T13216] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 489.298871][ T5895] usb 3-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0xE, skipping [ 489.338363][ T5895] usb 3-1: config 3 interface 50 altsetting 203 endpoint 0x8E has an invalid bInterval 53, changing to 9 [ 489.361786][ T5895] usb 3-1: config 3 interface 50 altsetting 203 endpoint 0x8E has invalid maxpacket 33326, setting to 1024 [ 489.427772][ T5895] usb 3-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 489.454705][ T5895] usb 3-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 489.488832][ T5895] usb 3-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 489.499886][ T5942] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 489.530446][ T5895] usb 3-1: config 3 interface 50 altsetting 203 has a duplicate endpoint with address 0xC, skipping [ 489.570395][ T5895] usb 3-1: config 3 interface 50 altsetting 203 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 489.605258][ T5895] usb 3-1: config 3 interface 43 has no altsetting 0 [ 489.625508][ T5895] usb 3-1: config 3 interface 50 has no altsetting 0 [ 489.651582][ T5895] usb 3-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=9a.31 [ 489.667236][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.680854][ T5942] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 489.681878][T13216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.711636][ T5942] usb 5-1: config 0 has no interface number 0 [ 489.727994][ T5895] usb 3-1: Product: ﷝ꤝ㒂⌃斬톘⌧ [ 489.740275][ T5942] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 489.763644][ T5895] usb 3-1: Manufacturer: 鳮唄覞뚈㡵힮㰎昙ᶢ꯵캜倨ꋵథᚳᢉ灅⍼ [ 489.774889][T13216] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.781802][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.812718][ T5895] usb 3-1: SerialNumber: syz [ 489.818836][ T5942] usb 5-1: Product: syz [ 489.825656][ T5942] usb 5-1: Manufacturer: syz [ 489.843558][ T5942] usb 5-1: SerialNumber: syz [ 489.853305][T12626] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.860627][T12626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.896418][ T5942] usb 5-1: config 0 descriptor?? [ 489.931273][T12626] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.938481][T12626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.060046][ T5895] rndis_host 3-1:3.43: More than one union descriptor, skipping ... [ 490.077159][ T5895] usb 3-1: bad CDC descriptors [ 490.100238][ T5895] cdc_acm 3-1:3.43: More than one union descriptor, skipping ... [ 490.115205][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.145360][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.183333][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.240002][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.241165][ T5895] usb 3-1: USB disconnect, device number 5 [ 490.308870][ T5942] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 490.327667][ T5942] usb 5-1: No valid video chain found. [ 490.367665][ T5942] usb 5-1: USB disconnect, device number 20 [ 490.926943][T13216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.135652][T13216] veth0_vlan: entered promiscuous mode [ 491.163975][T13216] veth1_vlan: entered promiscuous mode [ 491.208843][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 491.284917][T13216] veth0_macvtap: entered promiscuous mode [ 491.314066][T13216] veth1_macvtap: entered promiscuous mode [ 491.424170][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 491.444235][T13216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.876064][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 491.886775][T13216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.921214][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 491.979795][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.020764][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.050832][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 492.067073][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 492.077270][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.092089][ T10] usb 3-1: config 0 descriptor?? [ 492.100368][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.143103][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.434521][T12629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.465938][T12629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.522251][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 492.559536][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 492.613496][ T10] usb 3-1: USB disconnect, device number 6 [ 492.613737][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.666503][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.474947][T13438] /dev/rnullb0: Can't open blockdev [ 493.950871][T13447] /dev/rnullb0: Can't open blockdev [ 494.008497][T13447] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 494.169839][T13447] jfs: Unknown parameter 'grpquota' [ 494.275748][T13455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.314269][T13455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.333512][T13457] /dev/rnullb0: Can't open blockdev [ 494.362428][T13455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.379189][T13456] /dev/rnullb0: Can't open blockdev [ 494.420928][T13458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.474489][T13455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.479185][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 494.522978][T13458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.595138][T13455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.604647][T13458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.643690][T13455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.650350][ T5167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 494.664892][ T5167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 494.673008][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 494.679966][ T5167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 494.693859][ T5167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 494.720364][ T5167] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 494.726165][T13458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.817324][T13444] syz.2.2361 (13444): drop_caches: 2 [ 494.825146][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 494.875772][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 494.917360][T13462] lo speed is unknown, defaulting to 1000 [ 494.955400][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 494.964833][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.976318][ T10] usb 4-1: Product: syz [ 495.012124][ T10] usb 4-1: Manufacturer: syz [ 495.035889][ T10] usb 4-1: SerialNumber: syz [ 495.063862][ T10] usb 4-1: config 0 descriptor?? [ 495.246393][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.379176][ T10] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 495.414801][ T10] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 495.492817][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.528887][ T8119] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 495.540663][ T10] usb 4-1: USB disconnect, device number 119 [ 495.587525][T13476] /dev/rnullb0: Can't open blockdev [ 495.693476][ T8119] usb 3-1: Using ep0 maxpacket: 32 [ 495.716617][ T8119] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 495.732924][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.741866][ T8119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 495.766988][ T8119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 495.784663][ T5167] Bluetooth: hci4: link tx timeout [ 495.791123][ T5167] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 495.809420][ T8119] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 495.818681][ T8119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.836172][T13481] /dev/rnullb0: Can't open blockdev [ 495.837510][ T8119] usb 3-1: config 0 descriptor?? [ 495.847462][T13469] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 495.861003][ T8119] hub 3-1:0.0: USB hub found [ 495.891603][T13481] /dev/rnullb0: Can't open blockdev [ 495.998041][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 496.040486][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.075523][ T8119] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 496.136543][T13462] chnl_net:caif_netlink_parms(): no params data found [ 496.253401][T13493] /dev/rnullb0: Can't open blockdev [ 496.819589][ T5845] Bluetooth: hci0: command tx timeout [ 496.931016][ T8119] usbhid 3-1:0.0: can't add hid device: -71 [ 496.960224][ T8119] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 496.985046][T13462] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.005903][T13462] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.013700][T13462] bridge_slave_0: entered allmulticast mode [ 497.018912][ T8119] usb 3-1: USB disconnect, device number 7 [ 497.071772][T13462] bridge_slave_0: entered promiscuous mode [ 497.105049][T13462] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.130906][T13462] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.149768][T13462] bridge_slave_1: entered allmulticast mode [ 497.171672][T13462] bridge_slave_1: entered promiscuous mode [ 497.265876][T13515] syz.4.2374(13515): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 497.280762][T13511] /dev/rnullb0: Can't open blockdev [ 497.331361][T13515] /dev/rnullb0: Can't open blockdev [ 497.433648][T13517] netlink: 'syz.3.2375': attribute type 39 has an invalid length. [ 497.445468][T13462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.482739][T13462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.509461][ T49] bridge_slave_1: left allmulticast mode [ 497.516737][ T49] bridge_slave_1: left promiscuous mode [ 497.527067][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.571547][ T49] bridge_slave_0: left allmulticast mode [ 497.587580][ T49] bridge_slave_0: left promiscuous mode [ 497.602325][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.699521][ T5942] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 497.862046][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 497.881464][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 497.914868][ T5942] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 497.986522][ T5942] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 498.007067][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.031846][ T5942] usb 5-1: Product: syz [ 498.045491][ T5942] usb 5-1: Manufacturer: syz [ 498.050988][ T5942] usb 5-1: SerialNumber: syz [ 498.075292][ T5942] usb 5-1: config 0 descriptor?? [ 498.107537][ T5942] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 498.155982][ T5942] usb 5-1: Detected FT232R [ 498.335230][ T5942] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 498.353915][ T49] geneve1 (unregistering): left promiscuous mode [ 498.399566][ T49] team0: Port device geneve1 removed [ 498.508304][ T49] bridge0 (unregistering): left allmulticast mode [ 498.603249][ T5942] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 498.785945][ T5895] usb 5-1: USB disconnect, device number 21 [ 498.915323][ T5167] Bluetooth: hci0: command tx timeout [ 498.976549][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.995812][ T5895] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 499.004115][ T49] bond_slave_0: left promiscuous mode [ 499.010411][ T5895] ftdi_sio 5-1:0.0: device disconnected [ 499.024096][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.035714][ T49] bond_slave_1: left promiscuous mode [ 499.044039][ T49] bond0 (unregistering): (slave team0): Releasing backup interface [ 499.056879][ T49] team0: left promiscuous mode [ 499.070805][ T49] team_slave_0: left promiscuous mode [ 499.076707][ T49] team_slave_1: left promiscuous mode [ 499.090087][ T49] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 499.113337][ T49] bond0 (unregistering): Released all slaves [ 499.568646][ T49] team0: Port device wlan1 removed [ 499.594990][T13538] /dev/rnullb0: Can't open blockdev [ 499.615050][T13462] team0: Port device team_slave_0 added [ 499.654911][T13462] team0: Port device team_slave_1 added [ 499.738856][ T5896] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 499.807308][T13462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.843450][T13462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.877848][T13462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.896722][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2382'. [ 499.909541][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 499.932464][ T5942] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 499.952882][ T5896] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 499.973132][ T5896] usb 4-1: config 0 has no interface number 0 [ 499.987184][ T5896] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 500.012293][ T5896] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 500.030867][ T5896] usb 4-1: config 0 interface 85 has no altsetting 0 [ 500.042386][ T5896] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 500.048984][T13462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.070632][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.078670][ T5896] usb 4-1: Product: syz [ 500.083109][T13462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.099352][ T5896] usb 4-1: Manufacturer: syz [ 500.143310][ T5942] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 500.148871][T13462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.152911][ T5896] usb 4-1: SerialNumber: syz [ 500.167699][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.187462][ T5942] usb 3-1: config 0 descriptor?? [ 500.198845][ T5927] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 500.208115][ T5896] usb 4-1: config 0 descriptor?? [ 500.226102][ T5942] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 500.349290][ T5927] usb 5-1: device descriptor read/64, error -71 [ 500.387199][ T49] hsr_slave_0: left promiscuous mode [ 500.395981][ T49] hsr_slave_1: left promiscuous mode [ 500.402806][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.424074][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.436388][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.444538][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.471692][ T49] veth1_macvtap: left promiscuous mode [ 500.477273][ T49] veth0_macvtap: left promiscuous mode [ 500.488207][ T49] veth1_vlan: left promiscuous mode [ 500.493923][ T49] veth0_vlan: left promiscuous mode [ 500.589723][ T5927] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 500.642730][ T5896] appletouch 4-1:0.85: Failed to request geyser raw mode [ 500.658201][ T5942] gspca_stv06xx: I2C: Read error writing address: -71 [ 500.667826][ T5896] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 500.704191][ T5942] usb 3-1: USB disconnect, device number 8 [ 500.737739][ T5896] usb 4-1: USB disconnect, device number 120 [ 500.742239][ T5927] usb 5-1: device descriptor read/64, error -71 [ 500.871992][ T5927] usb usb5-port1: attempt power cycle [ 500.988049][ T5167] Bluetooth: hci0: command tx timeout [ 501.228919][ T5927] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 501.282874][ T5927] usb 5-1: device descriptor read/8, error -71 [ 501.324683][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'. [ 501.428562][T13559] /dev/rnullb0: Can't open blockdev [ 501.459227][ T49] team0 (unregistering): Port device team_slave_1 removed [ 501.529623][ T5927] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 501.545703][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.552182][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.583479][ T5927] usb 5-1: device descriptor read/8, error -71 [ 501.597511][ T49] team0 (unregistering): Port device team_slave_0 removed [ 501.704535][ T5927] usb usb5-port1: unable to enumerate USB device [ 502.450967][T13462] hsr_slave_0: entered promiscuous mode [ 502.457642][T13462] hsr_slave_1: entered promiscuous mode [ 502.799222][ T5942] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 502.982848][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 502.990786][ T5942] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 503.013842][ T5942] usb 3-1: config 0 has no interface number 0 [ 503.044665][ T5942] usb 3-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=fd.9b [ 503.064160][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.070306][ T5167] Bluetooth: hci0: command tx timeout [ 503.136126][ T5942] usb 3-1: Product: syz [ 503.167600][ T5942] usb 3-1: Manufacturer: syz [ 503.191094][ T5942] usb 3-1: SerialNumber: syz [ 503.229924][ T5942] usb 3-1: config 0 descriptor?? [ 503.271775][ T5942] belkin_sa 3-1:0.101: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 503.314832][ T5942] usb 3-1: bcdDevice: fd9b, bfc: 0 [ 503.334520][ T5942] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 503.471520][T13570] /dev/rnullb0: Can't open blockdev [ 503.497078][T13570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.527010][T13580] /dev/rnullb0: Can't open blockdev [ 503.538452][T13570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.573043][ T5942] usb 3-1: USB disconnect, device number 9 [ 503.666391][ T5942] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 503.725913][ T5942] belkin_sa 3-1:0.101: device disconnected [ 504.393545][T13586] binder: 13583:13586 ioctl c0306201 0 returned -14 [ 504.400708][ T8119] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 504.414347][T13601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2391'. [ 504.535810][T13462] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 504.568882][ T8119] usb 5-1: device descriptor read/64, error -71 [ 504.582181][T13462] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 504.626532][T13462] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 504.685259][T13462] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 504.804374][T13617] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 504.810930][T13617] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 504.819129][ T8119] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 504.849635][T13617] vhci_hcd vhci_hcd.0: Device attached [ 504.868807][T13618] vhci_hcd: connection closed [ 504.869051][ T4543] vhci_hcd: stop threads [ 504.891218][ T4543] vhci_hcd: release socket [ 504.895765][ T4543] vhci_hcd: disconnect device [ 504.979603][ T8119] usb 5-1: device descriptor read/64, error -71 [ 504.989805][T13462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.066350][T13462] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.108387][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.111372][ T8119] usb usb5-port1: attempt power cycle [ 505.115598][ T4543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.193454][T12626] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.200809][T12626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.518035][ T8119] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 505.549858][ T8119] usb 5-1: device descriptor read/8, error -71 [ 505.587243][T13641] /dev/rnullb0: Can't open blockdev [ 505.808186][T13462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.815354][ T8119] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 505.831446][T13646] /dev/rnullb0: Can't open blockdev [ 505.861459][ T8119] usb 5-1: device descriptor read/8, error -71 [ 505.934461][T13462] veth0_vlan: entered promiscuous mode [ 505.971455][T13462] veth1_vlan: entered promiscuous mode [ 505.980372][ T8119] usb usb5-port1: unable to enumerate USB device [ 506.022915][T13652] C: renamed from team_slave_0 (while UP) [ 506.046397][T13652] netlink: 'syz.3.2398': attribute type 1 has an invalid length. [ 506.070801][T13652] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 506.075487][T13654] /dev/rnullb0: Can't open blockdev [ 506.114722][T13462] veth0_macvtap: entered promiscuous mode [ 506.178493][T13462] veth1_macvtap: entered promiscuous mode [ 506.227012][T13462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.276303][T13462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.310065][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.338621][T13660] /dev/rnullb0: Can't open blockdev [ 506.352341][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.352405][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.352438][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.465789][T13663] /dev/rnullb0: Can't open blockdev [ 506.557649][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.590902][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.647479][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.677268][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.009318][ T8119] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 507.139119][ T5896] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 507.213921][ T8119] usb 4-1: not running at top speed; connect to a high speed hub [ 507.239146][ T8119] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.294838][ T8119] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 507.328429][ T8119] usb 4-1: config 1 has no interface number 1 [ 507.348903][ T8119] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 507.369099][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 507.403308][ T8119] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 507.414834][ T5896] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.452058][ T5896] usb 1-1: config 0 has no interface number 0 [ 507.457071][ T8119] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 507.488565][ T8119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.502737][ T5896] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 507.532518][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.538541][ T8119] usb 4-1: Product: syz [ 507.554182][ T8119] usb 4-1: Manufacturer: syz [ 507.570651][ T8119] usb 4-1: SerialNumber: syz [ 507.579664][ T5896] usb 1-1: Product: syz [ 507.583881][ T5896] usb 1-1: Manufacturer: syz [ 507.588474][ T5896] usb 1-1: SerialNumber: syz [ 507.652916][ T5896] usb 1-1: config 0 descriptor?? [ 507.691177][ T5896] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 507.851210][ T8119] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 507.888177][ T8119] usb 4-1: 2:1 : unsupported format bits 0x2000 [ 507.991441][ T8119] usb 4-1: USB disconnect, device number 121 [ 508.029248][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 508.044110][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 508.062307][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 508.072014][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 508.083914][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 508.135647][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.154268][T13698] netlink: 'syz.4.2407': attribute type 10 has an invalid length. [ 508.229149][ T5896] gspca_spca1528: reg_w err -110 [ 508.262260][ T5896] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 508.672324][ T9] usb 1-1: USB disconnect, device number 122 [ 508.954480][ T3477] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.026485][T13693] chnl_net:caif_netlink_parms(): no params data found [ 509.163328][ T3477] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.676298][T13720] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2412'. [ 509.851094][ T3477] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.970469][T13727] /dev/rnullb0: Can't open blockdev [ 510.120420][ T3477] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 510.161065][ T3477] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.179393][ T5845] Bluetooth: hci1: command tx timeout [ 510.238952][T13693] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.254881][T13693] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.280755][T13693] bridge_slave_0: entered allmulticast mode [ 510.307263][T13693] bridge_slave_0: entered promiscuous mode [ 510.334831][T13693] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.351761][ T30] audit: type=1800 audit(1753878219.038:14): pid=13736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2417" name="/" dev="9p" ino=2 res=0 errno=0 [ 510.381354][T13693] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.399125][T13693] bridge_slave_1: entered allmulticast mode [ 510.406839][T13693] bridge_slave_1: entered promiscuous mode [ 510.624618][T13693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.634739][T13742] input: syz0 as /devices/virtual/input/input33 [ 510.690662][T13742] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 510.730426][T13693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.787061][T13742] VFS: Can't find a romfs filesystem on dev rnullb0. [ 510.787061][T13742] [ 510.909505][ T5927] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 510.946955][ T3477] bridge_slave_1: left allmulticast mode [ 510.953851][ T3477] bridge_slave_1: left promiscuous mode [ 510.965723][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.986033][ T3477] bridge_slave_0: left allmulticast mode [ 510.993882][ T3477] bridge_slave_0: left promiscuous mode [ 511.004896][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.102644][ T5927] usb 5-1: config 0 has an invalid interface number: 157 but max is 0 [ 511.118807][ T5927] usb 5-1: config 0 has no interface number 0 [ 511.119002][ T5895] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 511.124931][ T5927] usb 5-1: config 0 interface 157 has no altsetting 0 [ 511.164530][ T5927] usb 5-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=3b.1d [ 511.185081][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.219349][ T5927] usb 5-1: config 0 descriptor?? [ 511.331611][ T5895] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 511.345299][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.364551][ T5895] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 511.381101][ T5895] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 511.395595][ T5895] usb 4-1: Manufacturer: syz [ 511.404873][ T5895] usb 4-1: config 0 descriptor?? [ 511.438908][T13740] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2419'. [ 511.502361][ T5895] rc_core: IR keymap rc-hauppauge not found [ 511.518631][ T5895] Registered IR keymap rc-empty [ 511.535257][ T5895] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 511.542261][ T5927] usb 5-1: USB disconnect, device number 30 [ 511.564884][ T5895] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input34 [ 511.948694][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.981343][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.002378][ T3477] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 512.029304][ T3477] bond0 (unregistering): Released all slaves [ 512.077417][ T8119] usb 4-1: USB disconnect, device number 122 [ 512.104652][T13693] team0: Port device team_slave_0 added [ 512.199788][T13693] team0: Port device team_slave_1 added [ 512.224127][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2422'. [ 512.259358][ T5845] Bluetooth: hci1: command tx timeout [ 512.607630][T13693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.639099][T13693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.750407][T13693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.791055][T13693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.798028][T13693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.892721][T13693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.189214][T13782] nbd0: detected capacity change from 0 to 549764202496 [ 513.212115][T13788] Bluetooth: MGMT ver 1.23 [ 513.237607][T13788] NILFS (rnullb0): couldn't find nilfs on the device [ 513.277661][ T5845] block nbd0: Receive control failed (result -104) [ 513.413448][T13693] hsr_slave_0: entered promiscuous mode [ 513.453657][T13693] hsr_slave_1: entered promiscuous mode [ 513.466399][T13693] debugfs: 'hsr0' already exists in 'hsr' [ 513.488886][T13693] Cannot create hsr debugfs directory [ 513.499145][ T5942] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 513.561961][T13805] syz.0.2432 (13805): /proc/13804/oom_adj is deprecated, please use /proc/13804/oom_score_adj instead. [ 513.638818][ T5942] usb 4-1: device descriptor read/64, error -71 [ 513.656746][T13805] nbd: couldn't find device at index 587202560 [ 513.708844][ T980] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 513.753602][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.774372][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.809487][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.822954][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.857592][ T3477] veth1_macvtap: left promiscuous mode [ 513.866025][ T980] usb 5-1: device descriptor read/64, error -71 [ 513.877495][ T3477] veth0_macvtap: left promiscuous mode [ 513.883462][ T5942] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 513.894629][ T3477] veth1_vlan: left promiscuous mode [ 513.901394][ T3477] veth0_vlan: left promiscuous mode [ 514.033086][ T5942] usb 4-1: device descriptor read/64, error -71 [ 514.109753][ T980] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 514.151338][ T5942] usb usb4-port1: attempt power cycle [ 514.260352][ T980] usb 5-1: device descriptor read/64, error -71 [ 514.342066][ T5845] Bluetooth: hci1: command tx timeout [ 514.373524][ T980] usb usb5-port1: attempt power cycle [ 514.510536][ T5942] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 514.532124][ T5942] usb 4-1: device descriptor read/8, error -71 [ 514.608280][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 514.666893][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 514.728881][ T980] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 514.749579][ T980] usb 5-1: device descriptor read/8, error -71 [ 514.770613][ T5942] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 514.795704][ T5942] usb 4-1: device descriptor read/8, error -71 [ 514.909232][ T5942] usb usb4-port1: unable to enumerate USB device [ 515.015051][ T980] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 515.052017][ T980] usb 5-1: device descriptor read/8, error -71 [ 515.186528][ T980] usb usb5-port1: unable to enumerate USB device [ 515.637126][T13816] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2434'. [ 515.883754][T13822] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2435'. [ 516.098178][T13828] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 516.104772][T13828] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 516.136205][T13828] vhci_hcd vhci_hcd.0: Device attached [ 516.171362][T13831] vhci_hcd: connection closed [ 516.171747][ T49] vhci_hcd: stop threads [ 516.204432][ T49] vhci_hcd: release socket [ 516.211549][ T49] vhci_hcd: disconnect device [ 516.419686][ T5845] Bluetooth: hci1: command tx timeout [ 516.513669][T13693] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 516.543282][T13693] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 516.576783][T13693] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 516.609261][T13693] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 516.629322][T13844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.699827][ T5927] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 516.862359][T13853] batadv_slave_1: entered promiscuous mode [ 516.868869][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 516.885875][ T5927] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 516.903241][T13852] batadv_slave_1: left promiscuous mode [ 516.913766][ T5927] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.945914][ T5927] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 516.980185][ T5927] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 517.012946][T13693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.017979][ T5927] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.083646][T13693] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.089463][ T5927] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 517.118825][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.154931][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.162385][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.260353][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.267620][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.390831][ T5927] usb 4-1: usb_control_msg returned -32 [ 517.396467][ T5927] usbtmc 4-1:16.0: can't read capabilities [ 517.428825][ T5895] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 517.436827][T13693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.581586][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.609915][ T5895] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 517.652143][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.693661][ T5895] usb 1-1: config 0 descriptor?? [ 518.076475][T13693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.253056][T13693] veth0_vlan: entered promiscuous mode [ 518.287494][T13693] veth1_vlan: entered promiscuous mode [ 518.345877][T13857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.356244][T13857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.382253][ T5895] usbhid 1-1:0.0: can't add hid device: -71 [ 518.397938][T13693] veth0_macvtap: entered promiscuous mode [ 518.398539][ T5895] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 518.422635][ T5895] usb 1-1: USB disconnect, device number 123 [ 518.487381][T13693] veth1_macvtap: entered promiscuous mode [ 518.563198][T13693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.601347][T13693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.645908][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.676390][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.735062][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.759451][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.890517][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.913680][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.016768][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.038255][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.287777][T13899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2405'. [ 519.644256][T13528] block nbd64: NBD_DISCONNECT [ 519.663733][T13903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2405'. [ 519.709248][T13917] Can't find a SQUASHFS superblock on rnullb0 [ 519.739792][T13903] nbd: device at index 64 is going down [ 519.978105][ T9] usb 4-1: USB disconnect, device number 127 [ 520.080736][ T6007] udevd[6007]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 520.312149][T13941] /dev/rnullb0: Can't open blockdev [ 520.359629][T13944] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.2453'. [ 520.432079][T13944] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.2453'. [ 520.521357][T13944] netlink: 584 bytes leftover after parsing attributes in process `syz.3.2453'. [ 520.690262][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 520.887537][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.925305][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.954012][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 520.967177][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 520.998827][ T10] usb 4-1: SerialNumber: syz [ 521.176142][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2456'. [ 521.221999][T13957] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.2456'. [ 521.249800][T13957] netlink: 'syz.4.2456': attribute type 3 has an invalid length. [ 521.261773][T13957] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2456'. [ 521.318960][ T5896] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 521.417673][T13960] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 521.424229][T13960] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 521.465475][T13960] vhci_hcd vhci_hcd.0: Device attached [ 521.473721][ T5896] usb 3-1: device descriptor read/64, error -71 [ 521.699131][ T5895] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 521.747429][ T5896] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 521.890013][ T5896] usb 3-1: device descriptor read/64, error -71 [ 522.011118][ T5896] usb usb3-port1: attempt power cycle [ 522.032751][T13967] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2459'. [ 522.249053][T13962] vhci_hcd: connection reset by peer [ 522.259951][ T13] vhci_hcd: stop threads [ 522.280723][ T13] vhci_hcd: release socket [ 522.310203][ T13] vhci_hcd: disconnect device [ 522.389934][ T5896] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 522.422417][ T5896] usb 3-1: device descriptor read/8, error -71 [ 522.577166][T13967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.612233][T13967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.666761][T13967] bond0 (unregistering): Released all slaves [ 522.690112][ T5896] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 522.719648][ T5896] usb 3-1: device descriptor read/8, error -71 [ 522.829334][ T5896] usb usb3-port1: unable to enumerate USB device [ 523.047060][T13978] NILFS (rnullb0): couldn't find nilfs on the device [ 523.121510][ T5896] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 523.289904][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 523.305584][ T5896] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 523.319873][ T5896] usb 5-1: config 0 has no interface number 0 [ 523.367475][ T10] usb 4-1: 0:2 : does not exist [ 523.387540][ T5896] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 523.411458][ T10] usb 4-1: USB disconnect, device number 2 [ 523.422085][ T5896] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 523.437772][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.468825][ T5896] usb 5-1: Product: syz [ 523.478792][ T5896] usb 5-1: Manufacturer: syz [ 523.495572][ T5896] usb 5-1: SerialNumber: syz [ 523.507195][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.533895][ T5896] usb 5-1: config 0 descriptor?? [ 523.766083][T13996] syz.4.2460 (13996): attempted to duplicate a private mapping with mremap. This is not supported. [ 523.898605][T14000] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 523.984306][ T5896] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 523.999306][ T5896] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 524.032979][ T5896] usb 5-1: USB disconnect, device number 35 [ 524.559571][T14018] syz.4.2477: attempt to access beyond end of device [ 524.559571][T14018] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 524.573134][T14018] hfs: can't find a HFS filesystem on dev loop4 [ 524.582038][ T5896] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 524.594183][T14019] syz.4.2477: attempt to access beyond end of device [ 524.594183][T14019] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 524.611741][T14019] hfs: can't find a HFS filesystem on dev loop4 [ 524.688877][ T5942] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 524.751458][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.780064][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.798795][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 524.826538][ T5896] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.852333][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.876054][ T5896] usb 3-1: config 0 descriptor?? [ 524.887598][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.924025][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.948694][ T5942] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 524.972569][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.997002][ T5942] usb 4-1: config 0 descriptor?? [ 525.330988][ T5896] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 525.352478][ T5896] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 525.374586][ T5896] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 525.398846][ T5896] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 525.431170][ T5942] hid-steam 0003:28DE:1142.0016: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 525.442447][ T5896] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 525.452562][ T5896] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 525.468799][ T5896] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 525.486610][ T5896] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 525.499607][ T5896] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 525.513690][ T5896] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 525.521291][ T5942] hid-steam 0003:28DE:1142.0016: Steam wireless receiver connected [ 525.604316][ T5942] hid-steam 0003:28DE:1142.0017: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 525.616842][ T5896] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 525.878531][T14033] NILFS (rnullb0): couldn't find nilfs on the device [ 526.003190][ T5942] usb 4-1: USB disconnect, device number 3 [ 526.029750][ T5942] hid-steam 0003:28DE:1142.0016: Steam wireless receiver disconnected [ 526.810503][ T5895] vhci_hcd: vhci_device speed not set [ 526.826305][ T5942] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 527.004689][T14047] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2485'. [ 527.028565][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 527.042447][ T5942] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 527.065588][ T5942] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 527.083261][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 527.119530][ T5942] usb 1-1: Product: syz [ 527.129018][ T5942] usb 1-1: Manufacturer: syz [ 527.133645][ T5942] usb 1-1: SerialNumber: syz [ 527.166205][ T5942] usb 1-1: config 0 descriptor?? [ 527.179287][ T980] usb 3-1: USB disconnect, device number 14 [ 527.207388][T14040] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 527.429586][ T980] usb 1-1: USB disconnect, device number 124 [ 528.688407][T14087] overlayfs: failed to resolve './file1': -2 [ 528.710216][ T30] audit: type=1326 audit(1753878237.418:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.2.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb289b8e9a9 code=0x7ffc0000 [ 528.770391][ T30] audit: type=1326 audit(1753878237.448:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.2.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb289b8e9a9 code=0x7ffc0000 [ 528.822352][ T30] audit: type=1326 audit(1753878237.448:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.2.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb289b8e9a9 code=0x7ffc0000 [ 528.861775][ T30] audit: type=1326 audit(1753878237.448:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.2.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb289b8e9a9 code=0x7ffc0000 [ 528.893229][ T30] audit: type=1326 audit(1753878237.448:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.2.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb289b8e9a9 code=0x7ffc0000 [ 528.999713][ T30] audit: type=1326 audit(1753878237.448:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.2.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb289b8d310 code=0x7ffc0000 [ 529.079882][ T30] audit: type=1326 audit(1753878237.448:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.2.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb289b901d7 code=0x7ffc0000 [ 529.103448][T14099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2501'. [ 529.162770][ T30] audit: type=1326 audit(1753878237.448:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.2.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb289b8e9a9 code=0x7ffc0000 [ 529.241114][ T30] audit: type=1326 audit(1753878237.448:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.2.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb289b901d7 code=0x7ffc0000 [ 529.258223][T14105] netlink: 'syz.4.2502': attribute type 12 has an invalid length. [ 529.316603][ T30] audit: type=1326 audit(1753878237.448:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.2.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb289b8d60a code=0x7ffc0000 [ 529.328862][T14105] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2502'. [ 529.373509][T14109] dlm: plock device version mismatch: kernel (1.2.0), user (252.0.0) [ 529.432934][T14100] /dev/rnullb0: Can't open blockdev [ 529.447831][T14105] tipc: Started in network mode [ 529.476943][T14105] tipc: Node identity , cluster identity 4711 [ 529.488997][T14105] tipc: Failed to set node id, please configure manually [ 529.503628][T14105] tipc: Enabling of bearer rejected, failed to enable media [ 529.559466][T14105] /dev/rnullb0: Can't open blockdev [ 530.622799][T14133] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2511'. [ 532.144328][T14184] program syz.4.2536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 532.681938][T14192] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2540'. [ 534.685751][T14256] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 535.169693][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 535.169709][ T30] audit: type=1326 audit(1753878243.868:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14273 comm="syz.3.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 535.169757][ T30] audit: type=1326 audit(1753878243.868:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14273 comm="syz.3.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 535.207080][ T30] audit: type=1326 audit(1753878243.918:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14273 comm="syz.3.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 535.207130][ T30] audit: type=1326 audit(1753878243.918:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14273 comm="syz.3.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 535.207176][ T30] audit: type=1326 audit(1753878243.918:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14273 comm="syz.3.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 535.374673][T14279] ksmbd: Unknown IPC event: 16, ignore. [ 535.388567][T14280] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2581'. [ 535.713805][T14288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2585'. [ 536.012468][ T10] hid_parser_main: 28 callbacks suppressed [ 536.012489][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 536.064111][ T10] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 536.140993][T14306] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2593'. [ 536.153247][T14307] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2594'. [ 536.272958][T14303] fido_id[14303]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 536.363556][ T30] audit: type=1326 audit(1753878245.068:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14312 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd8e9a9 code=0x7ffc0000 [ 536.439337][ T30] audit: type=1326 audit(1753878245.098:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14312 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd8e9a9 code=0x7ffc0000 [ 536.504679][ T30] audit: type=1326 audit(1753878245.098:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14312 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f753dd8e9a9 code=0x7ffc0000 [ 536.504728][ T30] audit: type=1326 audit(1753878245.098:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14312 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd8e9a9 code=0x7ffc0000 [ 536.504766][ T30] audit: type=1326 audit(1753878245.098:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14312 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd8e9a9 code=0x7ffc0000 [ 537.093757][ T5942] IPVS: starting estimator thread 0... [ 537.102607][T14339] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 537.212387][T14343] IPVS: using max 42 ests per chain, 100800 per kthread [ 538.969790][T14417] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2640' sets config #1 [ 539.876898][T14443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2654'. [ 539.911812][T14443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2654'. [ 540.812331][T14475] sctp: [Deprecated]: syz.4.2669 (pid 14475) Use of int in max_burst socket option deprecated. [ 540.812331][T14475] Use struct sctp_assoc_value instead [ 541.667965][T14499] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2680'. [ 541.837964][T14501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2681'. [ 541.854162][T14501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2681'. [ 542.029519][T14506] bridge0: entered promiscuous mode [ 542.045886][T14504] bridge0: left promiscuous mode [ 542.132945][T14508] netlink: 488 bytes leftover after parsing attributes in process `syz.0.2684'. [ 542.258889][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 542.329098][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2687'. [ 542.623545][T14525] program syz.4.2692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 543.531922][T14528] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 543.554733][T14528] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 543.572388][T14528] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 543.578433][T14528] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 543.622707][T14528] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 543.644303][T14528] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 543.653487][T14528] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 543.671047][T14528] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 543.688792][T14528] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 543.707777][T14528] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 543.728039][T14528] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 543.782093][ T55] block nbd0: Possible stuck request ffff888025910000: control (read@0,4096B). Runtime 30 seconds [ 544.247032][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 544.247053][ T30] audit: type=1326 audit(1753878252.948:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.3.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 544.282369][ T30] audit: type=1326 audit(1753878252.948:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.3.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 544.308429][ T30] audit: type=1326 audit(1753878252.988:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.3.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 544.331075][ T30] audit: type=1326 audit(1753878252.988:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.3.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 544.356902][ T30] audit: type=1326 audit(1753878252.988:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.3.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 544.818886][ T5167] Bluetooth: hci3: command 0x0c1a tx timeout [ 545.029781][ T30] audit: type=1326 audit(1753878253.728:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.0.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e298e9a9 code=0x7ffc0000 [ 545.119043][ T30] audit: type=1326 audit(1753878253.728:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.0.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e298e9a9 code=0x7ffc0000 [ 545.179850][T14613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2734'. [ 545.196543][ T30] audit: type=1326 audit(1753878253.768:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.0.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10e298e9a9 code=0x7ffc0000 [ 545.272816][ T30] audit: type=1326 audit(1753878253.768:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.0.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e298e9a9 code=0x7ffc0000 [ 545.362209][ T30] audit: type=1326 audit(1753878253.778:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.0.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f10e298e9a9 code=0x7ffc0000 [ 545.616108][T14633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2744'. [ 545.620187][ T5167] Bluetooth: hci5: command 0x0c1a tx timeout [ 545.625462][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 545.655270][T14635] openvswitch: netlink: Message has 8 unknown bytes. [ 545.699977][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 545.700036][ T5167] Bluetooth: hci0: command 0x0c1a tx timeout [ 545.747847][T14637] sctp: [Deprecated]: syz.4.2746 (pid 14637) Use of int in max_burst socket option. [ 545.747847][T14637] Use struct sctp_assoc_value instead [ 546.140611][T14653] 9pnet_fd: Insufficient options for proto=fd [ 546.259820][T14655] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2756'. [ 546.279574][T14655] ksmbd: Unknown IPC event: 3, ignore. [ 547.038564][T14688] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2771'. [ 547.047831][T14688] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2771'. [ 547.473819][T14704] 9p: Unknown access argument : -22 [ 547.708349][ T5167] Bluetooth: hci5: command 0x0c1a tx timeout [ 547.779384][ T5167] Bluetooth: hci1: command 0x0c1a tx timeout [ 547.780983][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 548.814289][T14761] netlink: 'syz.0.2803': attribute type 21 has an invalid length. [ 548.870975][T14761] netlink: 'syz.0.2803': attribute type 1 has an invalid length. [ 548.898266][T14761] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2803'. [ 549.265839][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 549.265857][ T30] audit: type=1326 audit(1753878257.968:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.3.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 549.392161][ T30] audit: type=1326 audit(1753878257.968:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.3.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 549.495482][ T30] audit: type=1326 audit(1753878258.008:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.3.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 549.525900][ T30] audit: type=1326 audit(1753878258.008:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.3.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 549.576173][T14788] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2813'. [ 549.607780][ T30] audit: type=1326 audit(1753878258.008:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.3.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104118e9a9 code=0x7ffc0000 [ 549.733304][T14790] netlink: 440 bytes leftover after parsing attributes in process `syz.0.2816'. [ 549.758472][T14790] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2816'. [ 549.779281][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 549.796057][T14790] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2816'. [ 549.859019][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 549.865090][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 552.798109][T14887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2857'. [ 552.808659][T14887] smc: net device bond0 applied user defined pnetid S [ 553.087705][T14898] dummy0: entered promiscuous mode [ 553.282204][T14904] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2864'. [ 553.489555][ T5942] hid-generic 09E2:0099:0005.0019: unknown main item tag 0x0 [ 553.497088][ T5942] hid-generic 09E2:0099:0005.0019: unknown main item tag 0x0 [ 553.527662][ T5942] hid-generic 09E2:0099:0005.0019: unknown main item tag 0x0 [ 553.544793][ T5942] hid-generic 09E2:0099:0005.0019: unknown main item tag 0x0 [ 553.567468][ T5942] hid-generic 09E2:0099:0005.0019: unknown main item tag 0x0 [ 553.585228][ T5942] hid-generic 09E2:0099:0005.0019: unknown main item tag 0x0 [ 553.602312][ T5942] hid-generic 09E2:0099:0005.0019: unknown main item tag 0x0 [ 553.620821][ T5942] hid-generic 09E2:0099:0005.0019: unknown main item tag 0x0 [ 553.642569][ T5942] hid-generic 09E2:0099:0005.0019: unknown main item tag 0x0 [ 553.671537][ T5942] hid-generic 09E2:0099:0005.0019: unknown main item tag 0x0 [ 553.697686][ T5942] hid-generic 09E2:0099:0005.0019: hidraw0: HID v0.0b Device [syz1] on syz1 [ 553.827876][T14920] fido_id[14920]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 554.262465][T14933] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.270222][T14933] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.319546][T14933] bridge0: entered promiscuous mode [ 554.354055][T14933] bridge0: entered allmulticast mode [ 554.411353][T14936] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.418636][T14936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.426847][T14936] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.434148][T14936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.040212][ T30] audit: type=1326 audit(1753878264.732:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb289b8e9a9 code=0x7ffc0000 [ 555.115558][ T30] audit: type=1326 audit(1753878264.752:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fb289b8e9a9 code=0x7ffc0000 [ 555.210803][ T30] audit: type=1326 audit(1753878264.752:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb289b8e9a9 code=0x7ffc0000 [ 555.286372][ T30] audit: type=1326 audit(1753878264.752:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb289b8e9a9 code=0x7ffc0000 [ 555.899088][ T5895] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 556.051171][ T5895] usb 4-1: device descriptor read/64, error -71 [ 556.205951][T15007] binfmt_misc: register: failed to install interpreter file ./file2 [ 556.308992][ T5895] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 556.470625][ T5895] usb 4-1: device descriptor read/64, error -71 [ 556.609289][ T5895] usb usb4-port1: attempt power cycle [ 556.623243][T15018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2913'. [ 556.825448][ T30] audit: type=1326 audit(1753878266.522:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd8e9a9 code=0x7ffc0000 [ 556.881275][ T30] audit: type=1326 audit(1753878266.522:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd8e9a9 code=0x7ffc0000 [ 556.942522][ T30] audit: type=1326 audit(1753878266.532:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f753dd8e9a9 code=0x7ffc0000 [ 556.965215][ T5895] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 557.003567][ T5895] usb 4-1: device descriptor read/8, error -71 [ 557.029237][ T30] audit: type=1326 audit(1753878266.532:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd8e9a9 code=0x7ffc0000 [ 557.085028][ T30] audit: type=1326 audit(1753878266.532:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.4.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd8e9a9 code=0x7ffc0000 [ 557.192646][T15030] usb usb8: usbfs: process 15030 (syz.0.2919) did not claim interface 7 before use [ 557.271532][ T5895] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 557.309546][ T5895] usb 4-1: device descriptor read/8, error -71 [ 557.421412][ T5895] usb usb4-port1: unable to enumerate USB device [ 558.686446][T15077] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 558.686738][ T5895] IPVS: starting estimator thread 0... [ 558.818996][T15081] IPVS: using max 34 ests per chain, 81600 per kthread [ 560.322159][ T5895] hid_parser_main: 31 callbacks suppressed [ 560.322180][ T5895] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 560.385170][ T5895] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 561.700264][ T31] INFO: task syz.1.1981:12104 blocked for more than 143 seconds. [ 561.700289][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 561.700302][ T31] Blocked by coredump. [ 561.700309][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.700320][ T31] task:syz.1.1981 state:D stack:25096 pid:12104 tgid:12104 ppid:5852 task_flags:0x40044c flags:0x00004004 [ 561.700380][ T31] Call Trace: [ 561.700388][ T31] [ 561.700403][ T31] __schedule+0x1737/0x4d30 [ 561.700449][ T31] ? __lock_acquire+0xab9/0xd20 [ 561.700474][ T31] ? schedule+0x165/0x360 [ 561.700496][ T31] ? __lock_acquire+0xab9/0xd20 [ 561.700518][ T31] ? __pfx___schedule+0x10/0x10 [ 561.700563][ T31] ? schedule+0x91/0x360 [ 561.700590][ T31] schedule+0x165/0x360 [ 561.700616][ T31] schedule_preempt_disabled+0x13/0x30 [ 561.700638][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 561.700657][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 561.700683][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 561.700709][ T31] ? exit_mm+0xcc/0x2c0 [ 561.700739][ T31] ? __pfx_mm_release+0x10/0x10 [ 561.700761][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.700808][ T31] down_read+0x98/0x2e0 [ 561.700830][ T31] exit_mm+0xcc/0x2c0 [ 561.700855][ T31] ? __pfx_exit_mm+0x10/0x10 [ 561.700880][ T31] ? rcu_is_watching+0x15/0xb0 [ 561.700906][ T31] do_exit+0x648/0x2300 [ 561.700936][ T31] ? do_raw_spin_lock+0x121/0x290 [ 561.700961][ T31] ? __pfx_do_exit+0x10/0x10 [ 561.700983][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 561.701022][ T31] do_group_exit+0x21c/0x2d0 [ 561.701038][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.701064][ T31] get_signal+0x1286/0x1340 [ 561.701107][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 561.701133][ T31] ? rcu_is_watching+0x15/0xb0 [ 561.701156][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 561.701175][ T31] ? __bad_area_nosemaphore+0x3fb/0x780 [ 561.701236][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 561.701265][ T31] irqentry_exit_to_user_mode+0x81/0x120 [ 561.701291][ T31] exc_page_fault+0x9f/0xf0 [ 561.701317][ T31] asm_exc_page_fault+0x26/0x30 [ 561.701341][ T31] RIP: 0033:0x7f3046654e53 [ 561.701358][ T31] RSP: 002b:00007ffcb79fc420 EFLAGS: 00010246 [ 561.701378][ T31] RAX: 0000200000000040 RBX: 0000000000000002 RCX: 0000000000000000 [ 561.701392][ T31] RDX: 000000000000001f RSI: 0000000000000000 RDI: 000055556fb2b3c8 [ 561.701406][ T31] RBP: 00007ffcb79fc528 R08: 0000000000000000 R09: 0000000000000000 [ 561.701420][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f30469b616c [ 561.701433][ T31] R13: 00007f30469b6160 R14: fffffffffffffffe R15: 00007ffcb79fc570 [ 561.701466][ T31] [ 561.701475][ T31] INFO: task syz.1.1981:12105 blocked for more than 143 seconds. [ 561.701489][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 561.701501][ T31] Blocked by coredump. [ 561.701509][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.701520][ T31] task:syz.1.1981 state:D stack:27912 pid:12105 tgid:12104 ppid:5852 task_flags:0x40044c flags:0x00004004 [ 561.701581][ T31] Call Trace: [ 561.701589][ T31] [ 561.701603][ T31] __schedule+0x1737/0x4d30 [ 561.701641][ T31] ? __lock_acquire+0xab9/0xd20 [ 561.701664][ T31] ? schedule+0x165/0x360 [ 561.701686][ T31] ? __lock_acquire+0xab9/0xd20 [ 561.701708][ T31] ? __pfx___schedule+0x10/0x10 [ 561.701746][ T31] ? schedule+0x91/0x360 [ 561.701772][ T31] schedule+0x165/0x360 [ 561.701797][ T31] schedule_preempt_disabled+0x13/0x30 [ 561.701819][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 561.701838][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 561.701865][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 561.701891][ T31] ? exit_mm+0xcc/0x2c0 [ 561.701917][ T31] ? __pfx_mm_release+0x10/0x10 [ 561.701938][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.701967][ T31] down_read+0x98/0x2e0 [ 561.701990][ T31] exit_mm+0xcc/0x2c0 [ 561.702017][ T31] ? __pfx_exit_mm+0x10/0x10 [ 561.702044][ T31] ? rcu_is_watching+0x15/0xb0 [ 561.702071][ T31] do_exit+0x648/0x2300 [ 561.702201][ T31] ? do_raw_spin_lock+0x121/0x290 [ 561.702230][ T31] ? __pfx_do_exit+0x10/0x10 [ 561.702271][ T31] do_group_exit+0x21c/0x2d0 [ 561.702289][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.702315][ T31] get_signal+0x1286/0x1340 [ 561.702356][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 561.702384][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 561.702421][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 561.702446][ T31] exit_to_user_mode_loop+0x75/0x110 [ 561.702468][ T31] do_syscall_64+0x2bd/0x3b0 [ 561.702492][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.702516][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.702545][ T31] ? clear_bhb_loop+0x60/0xb0 [ 561.702568][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.702588][ T31] RIP: 0033:0x7f304678e9a9 [ 561.702604][ T31] RSP: 002b:00007f30475800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 561.702626][ T31] RAX: fffffffffffffe00 RBX: 00007f30469b5fa8 RCX: 00007f304678e9a9 [ 561.702641][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f30469b5fa8 [ 561.702655][ T31] RBP: 00007f30469b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 561.702673][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f30469b5fac [ 561.702687][ T31] R13: 0000000000000000 R14: 00007ffcb79fc210 R15: 00007ffcb79fc2f8 [ 561.702719][ T31] [ 561.702728][ T31] INFO: task syz.1.1981:12107 blocked for more than 143 seconds. [ 561.702743][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 561.702755][ T31] Blocked by coredump. [ 561.702762][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.702772][ T31] task:syz.1.1981 state:D stack:28328 pid:12107 tgid:12104 ppid:5852 task_flags:0x40044c flags:0x00004004 [ 561.702826][ T31] Call Trace: [ 561.702834][ T31] [ 561.702847][ T31] __schedule+0x1737/0x4d30 [ 561.702884][ T31] ? __lock_acquire+0xab9/0xd20 [ 561.702909][ T31] ? schedule+0x165/0x360 [ 561.702931][ T31] ? __lock_acquire+0xab9/0xd20 [ 561.702953][ T31] ? __pfx___schedule+0x10/0x10 [ 561.702993][ T31] ? schedule+0x91/0x360 [ 561.703020][ T31] schedule+0x165/0x360 [ 561.703045][ T31] schedule_preempt_disabled+0x13/0x30 [ 561.703068][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 561.703087][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 561.703113][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 561.703139][ T31] ? exit_mm+0xcc/0x2c0 [ 561.703165][ T31] ? __pfx_mm_release+0x10/0x10 [ 561.703187][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.703277][ T31] down_read+0x98/0x2e0 [ 561.703300][ T31] exit_mm+0xcc/0x2c0 [ 561.703326][ T31] ? __pfx_exit_mm+0x10/0x10 [ 561.703353][ T31] ? rcu_is_watching+0x15/0xb0 [ 561.703381][ T31] do_exit+0x648/0x2300 [ 561.703412][ T31] ? do_raw_spin_lock+0x121/0x290 [ 561.703439][ T31] ? __pfx_do_exit+0x10/0x10 [ 561.703481][ T31] do_group_exit+0x21c/0x2d0 [ 561.703499][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.703532][ T31] get_signal+0x1286/0x1340 [ 561.703573][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 561.703600][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 561.703636][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 561.703661][ T31] exit_to_user_mode_loop+0x75/0x110 [ 561.703683][ T31] do_syscall_64+0x2bd/0x3b0 [ 561.703707][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.703730][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.703749][ T31] ? clear_bhb_loop+0x60/0xb0 [ 561.703773][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.703792][ T31] RIP: 0033:0x7f304678e9a9 [ 561.703808][ T31] RSP: 002b:00007f304753e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 561.703830][ T31] RAX: fffffffffffffe00 RBX: 00007f30469b6168 RCX: 00007f304678e9a9 [ 561.703845][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f30469b6168 [ 561.703859][ T31] RBP: 00007f30469b6160 R08: 0000000000000000 R09: 0000000000000000 [ 561.703873][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f30469b616c [ 561.703886][ T31] R13: 0000000000000000 R14: 00007ffcb79fc210 R15: 00007ffcb79fc2f8 [ 561.703918][ T31] [ 561.703960][ T31] [ 561.703960][ T31] Showing all locks held in the system: [ 562.686668][ T31] 1 lock held by khungtaskd/31: [ 562.695251][ T31] #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 562.706374][ T31] 2 locks held by getty/5607: [ 562.714419][ T31] #0: ffff888033eca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 562.727452][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 562.738447][ T31] 1 lock held by udevd/5847: [ 562.743788][ T31] #0: ffff88814370a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 562.768874][ T31] 1 lock held by syz.1.1981/12104: [ 562.777709][ T31] #0: ffff88803431d7e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 [ 562.812354][ T31] 1 lock held by syz.1.1981/12105: [ 562.817615][ T31] #0: ffff88803431d7e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 [ 562.841928][ T31] 1 lock held by syz.1.1981/12106: [ 562.847066][ T31] 1 lock held by syz.1.1981/12107: [ 562.853391][ T31] #0: ffff88803431d7e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 [ 562.865458][ T31] 1 lock held by syz-executor/12350: [ 562.871853][ T31] [ 562.877012][ T31] ============================================= [ 562.877012][ T31] [ 562.891570][ T31] NMI backtrace for cpu 0 [ 562.891592][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 562.891613][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 562.891624][ T31] Call Trace: [ 562.891632][ T31] [ 562.891639][ T31] dump_stack_lvl+0x189/0x250 [ 562.891669][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.891691][ T31] ? __pfx__printk+0x10/0x10 [ 562.891726][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 562.891749][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 562.891772][ T31] ? __pfx__printk+0x10/0x10 [ 562.891798][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 562.891821][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 562.891858][ T31] watchdog+0xf93/0xfe0 [ 562.891882][ T31] ? watchdog+0x1de/0xfe0 [ 562.891906][ T31] kthread+0x70e/0x8a0 [ 562.891933][ T31] ? __pfx_watchdog+0x10/0x10 [ 562.891949][ T31] ? __pfx_kthread+0x10/0x10 [ 562.891973][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 562.891994][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.892014][ T31] ? __pfx_kthread+0x10/0x10 [ 562.892037][ T31] ret_from_fork+0x3f9/0x770 [ 562.892060][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 562.892094][ T31] ? __switch_to_asm+0x39/0x70 [ 562.892108][ T31] ? __switch_to_asm+0x33/0x70 [ 562.892123][ T31] ? __pfx_kthread+0x10/0x10 [ 562.892146][ T31] ret_from_fork_asm+0x1a/0x30 [ 562.892177][ T31] [ 562.892184][ T31] Sending NMI from CPU 0 to CPUs 1: [ 562.998612][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.002766][ C1] NMI backtrace for cpu 1 [ 563.002782][ C1] CPU: 1 UID: 0 PID: 1303 Comm: aoe_tx0 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 563.002800][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 563.002810][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 563.002831][ C1] Code: e8 ee 4f 6a fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 df 9f cd fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a a8 2c 06 cc 44 89 f9 80 e1 07 [ 563.002844][ C1] RSP: 0018:ffffc90004246df0 EFLAGS: 00000002 [ 563.002859][ C1] RAX: 1ffffffff344de00 RBX: 00000000000003fd RCX: 0000000000000000 [ 563.002870][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 563.002880][ C1] RBP: ffffffff9a26f850 R08: ffff888024b30237 R09: 1ffff11004966046 [ 563.002892][ C1] R10: dffffc0000000000 R11: ffffffff8555b0d0 R12: dffffc0000000000 [ 563.002904][ C1] R13: 0000000000000000 R14: ffffffff9a26f5c0 R15: 0000000000000000 [ 563.002922][ C1] FS: 0000000000000000(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000 [ 563.002935][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.002945][ C1] CR2: 00007f753df83178 CR3: 000000007c2dc000 CR4: 00000000003526f0 [ 563.002960][ C1] Call Trace: [ 563.002966][ C1] [ 563.002975][ C1] wait_for_lsr+0x1a1/0x2f0 [ 563.002996][ C1] serial8250_console_write+0x134c/0x1ba0 [ 563.003018][ C1] ? __lock_acquire+0xab9/0xd20 [ 563.003035][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 563.003052][ C1] ? console_flush_all+0x13a/0xc40 [ 563.003073][ C1] ? console_flush_all+0x13a/0xc40 [ 563.003094][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 563.003113][ C1] ? console_flush_all+0x13a/0xc40 [ 563.003130][ C1] ? console_flush_all+0x13a/0xc40 [ 563.003149][ C1] console_flush_all+0x725/0xc40 [ 563.003175][ C1] ? console_flush_all+0x13a/0xc40 [ 563.003197][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 563.003220][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 563.003237][ C1] console_unlock+0xc4/0x270 [ 563.003255][ C1] ? __pfx_console_unlock+0x10/0x10 [ 563.003272][ C1] ? vprintk_emit+0x380/0x7a0 [ 563.003289][ C1] ? vprintk_emit+0x587/0x7a0 [ 563.003306][ C1] ? vprintk_emit+0x444/0x7a0 [ 563.003322][ C1] ? vprintk_emit+0x444/0x7a0 [ 563.003340][ C1] vprintk_emit+0x5b7/0x7a0 [ 563.003356][ C1] ? vprintk_emit+0x444/0x7a0 [ 563.003374][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 563.003397][ C1] ? __pfx_snprintf+0x10/0x10 [ 563.003420][ C1] dev_vprintk_emit+0x337/0x3f0 [ 563.003446][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 563.003472][ C1] dev_printk_emit+0xe0/0x130 [ 563.003490][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 563.003508][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 563.003526][ C1] ? ieee802154_hdr_get_sechdr+0x3f/0x150 [ 563.003544][ C1] ? __asan_memcpy+0x40/0x70 [ 563.003563][ C1] ? skb_pull+0xc1/0x1d0 [ 563.003583][ C1] __netdev_printk+0x3d7/0x4d0 [ 563.003604][ C1] netdev_warn+0x10a/0x160 [ 563.003620][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 563.003636][ C1] ? __pfx_netdev_warn+0x10/0x10 [ 563.003653][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 563.003675][ C1] ? rcu_read_lock_bh_held+0x79/0xe0 [ 563.003692][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 563.003709][ C1] ? __lock_acquire+0xab9/0xd20 [ 563.003727][ C1] ieee802154_subif_start_xmit+0x136/0x190 [ 563.003748][ C1] dev_hard_start_xmit+0x2d4/0x830 [ 563.003772][ C1] sch_direct_xmit+0x241/0x4b0 [ 563.003793][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 563.003815][ C1] __dev_queue_xmit+0x1857/0x3b50 [ 563.003836][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 563.003853][ C1] ? rcu_is_watching+0x15/0xb0 [ 563.003869][ C1] ? trace_sched_exit_tp+0x38/0x120 [ 563.003884][ C1] ? __schedule+0x1755/0x4d30 [ 563.003904][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 563.003924][ C1] ? do_raw_spin_lock+0x121/0x290 [ 563.003947][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 563.003967][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 563.003990][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 563.004006][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.004026][ C1] tx+0x6b/0x190 [ 563.004041][ C1] ? __pfx_tx+0x10/0x10 [ 563.004056][ C1] kthread+0x1d0/0x3e0 [ 563.004074][ C1] ? __pfx_kthread+0x10/0x10 [ 563.004088][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 563.004104][ C1] ? __kthread_parkme+0x7b/0x200 [ 563.004122][ C1] ? __kthread_parkme+0x1a1/0x200 [ 563.004141][ C1] kthread+0x70e/0x8a0 [ 563.004166][ C1] ? __pfx_kthread+0x10/0x10 [ 563.004180][ C1] ? __pfx_kthread+0x10/0x10 [ 563.004199][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 563.004216][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.004233][ C1] ? __pfx_kthread+0x10/0x10 [ 563.004251][ C1] ret_from_fork+0x3f9/0x770 [ 563.004270][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 563.004289][ C1] ? __switch_to_asm+0x39/0x70 [ 563.004302][ C1] ? __switch_to_asm+0x33/0x70 [ 563.004314][ C1] ? __pfx_kthread+0x10/0x10 [ 563.004333][ C1] ret_from_fork_asm+0x1a/0x30 [ 563.004354][ C1] [ 563.006605][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 563.006626][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 563.006648][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 563.006660][ T31] Call Trace: [ 563.006669][ T31] [ 563.006678][ T31] dump_stack_lvl+0x99/0x250 [ 563.006705][ T31] ? __asan_memcpy+0x40/0x70 [ 563.006730][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.006753][ T31] ? __pfx__printk+0x10/0x10 [ 563.006790][ T31] vpanic+0x281/0x750 [ 563.006813][ T31] ? __pfx_vpanic+0x10/0x10 [ 563.006831][ T31] ? preempt_schedule+0xae/0xc0 [ 563.006855][ T31] ? preempt_schedule_common+0x83/0xd0 [ 563.006883][ T31] panic+0xb9/0xc0 [ 563.006903][ T31] ? __pfx_panic+0x10/0x10 [ 563.006923][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 563.006947][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 563.006970][ T31] watchdog+0xfd2/0xfe0 [ 563.006994][ T31] ? watchdog+0x1de/0xfe0 [ 563.007017][ T31] kthread+0x70e/0x8a0 [ 563.007043][ T31] ? __pfx_watchdog+0x10/0x10 [ 563.007060][ T31] ? __pfx_kthread+0x10/0x10 [ 563.007084][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 563.007105][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.007126][ T31] ? __pfx_kthread+0x10/0x10 [ 563.007149][ T31] ret_from_fork+0x3f9/0x770 [ 563.007171][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 563.007194][ T31] ? __switch_to_asm+0x39/0x70 [ 563.007209][ T31] ? __switch_to_asm+0x33/0x70 [ 563.007224][ T31] ? __pfx_kthread+0x10/0x10 [ 563.007247][ T31] ret_from_fork_asm+0x1a/0x30 [ 563.007282][ T31] [ 563.008559][ T31] Kernel Offset: disabled