last executing test programs: 9m20.829917969s ago: executing program 3 (id=12050): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @empty, 0x4e22, 0x203, 'dh\x00', 0x30, 0x0, 0x43}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e23, 0x3, 'fo\x00', 0x11, 0x3240, 0x25}, {@loopback, 0x4e23, 0x1, 0x4, 0x12d5c, 0x12d5c}}, 0x44) 9m20.730559893s ago: executing program 3 (id=12053): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 9m20.573294747s ago: executing program 3 (id=12056): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex_waitv(&(0x7f0000004040)=[{0x0, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) 9m20.203523452s ago: executing program 3 (id=12062): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 9m20.089295422s ago: executing program 3 (id=12064): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f00000190c0), 0x0, 0x1, 0x0, 0x0, r1}) 9m19.738969859s ago: executing program 3 (id=12067): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x22001) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0x12, 0x100, 0x109, 0x0, 0xfffffff8, 0x0}) 9m3.595920576s ago: executing program 32 (id=12067): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x22001) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0x12, 0x100, 0x109, 0x0, 0xfffffff8, 0x0}) 2m36.234472011s ago: executing program 1 (id=19148): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x6f) 2m36.068501719s ago: executing program 1 (id=19150): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2m35.542672039s ago: executing program 1 (id=19157): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7}, 0x8) 2m35.339963856s ago: executing program 1 (id=19161): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfbfff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m34.935571652s ago: executing program 1 (id=19168): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7}) 2m34.416435757s ago: executing program 1 (id=19178): timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x48033, 0xffffffffffffffff, 0x40000000) 2m18.26818781s ago: executing program 33 (id=19178): timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x48033, 0xffffffffffffffff, 0x40000000) 1m9.666297821s ago: executing program 4 (id=20307): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010001"], 0x0) 1m9.399252935s ago: executing program 4 (id=20313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0x290, 0x6, 0x6}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 1m8.957606648s ago: executing program 4 (id=20322): capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff0f, r1, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000080)={r2}) 1m8.763357565s ago: executing program 4 (id=20325): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='.\x00', 0x0, 0x100e002, 0x0) 1m8.615549254s ago: executing program 4 (id=20328): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={0x0}) 1m7.258979279s ago: executing program 4 (id=20341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m6.790693159s ago: executing program 34 (id=20341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 26.079439322s ago: executing program 6 (id=20777): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setresuid(0xee01, 0x0, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 25.785976001s ago: executing program 6 (id=20780): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24.51907625s ago: executing program 6 (id=20795): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 21.726855622s ago: executing program 6 (id=20816): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x20a7699, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) 21.449446442s ago: executing program 6 (id=20819): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 20.427164834s ago: executing program 6 (id=20834): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 19.987901657s ago: executing program 35 (id=20834): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 4.508069619s ago: executing program 5 (id=20989): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x8000, 0x3ab}, &(0x7f0000000340), 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 4.313396208s ago: executing program 5 (id=20991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x41000, 0x8, 0x3, 0x3, 0x80, 0x40, 0x29, 0x0, 0x2e, 0x19}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0xc0}, {0xdddd1000, 0x10000, 0xe, 0x9, 0x3, 0x8, 0xfe, 0x9, 0x5, 0x5, 0x5, 0x81}, {0x3000, 0x26000, 0x3, 0x0, 0x4, 0x42, 0x9, 0xff, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x3, 0x7, 0x7, 0xab, 0x7f, 0x9e, 0x9, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x70, 0x4, 0xfd}, {0xeeed4004, 0x2, 0x0, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x5000, 0x1000, 0x8, 0x5, 0xf, 0x7, 0xff, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x70000, 0x242101, 0xb, 0x0, 0xa000, [0x6840000000000000, 0x4, 0x5a, 0x100]}) 3.57729736s ago: executing program 5 (id=20998): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r1, @ANYBLOB="1400020000000000000000000000ff"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="1400020000000000000000000000ffff000000000800080070"], 0x34}}, 0x0) 3.569991503s ago: executing program 0 (id=20999): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x64480000, 0x0, 0x0, 0x7, 0xa19, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000008180)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x272, 0x0, 0x0, {0x40000, 0x0, 0x200000000000000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, r2, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.42288926s ago: executing program 5 (id=21001): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 3.071125398s ago: executing program 5 (id=21004): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x100, 0x28}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.739100434s ago: executing program 7 (id=21008): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}], 0x2, 0x2000c8c0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}], 0x1, 0x40) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000002ac0)=""/235, 0xeb}], 0x2}, 0x3}], 0x1, 0x100, 0x0) 2.616792368s ago: executing program 7 (id=21010): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r2, 0x26}, 0x10) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2.530837447s ago: executing program 7 (id=21012): syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001"], 0xfdef) 2.354591897s ago: executing program 0 (id=21013): unshare(0x2020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x758a, &(0x7f00000002c0)={0x0, 0xf657, 0x1, 0x9, 0x80000}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[r0], 0x1) 1.874628687s ago: executing program 0 (id=21017): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000000c0)='coredump_filter\x00') exit(0x800000100000e) read$FUSE(r2, 0x0, 0x0) 1.535778795s ago: executing program 7 (id=21019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x40040) 807.898282ms ago: executing program 2 (id=21024): socket$netlink(0x10, 0x3, 0x9) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xee2b, 0x800, 0x0, 0x3bb}, &(0x7f0000000dc0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000000340)) 804.187162ms ago: executing program 0 (id=21025): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 679.409365ms ago: executing program 7 (id=21026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x84}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)="b2c581f2410e06660f9edd100ec485f0017e5920f7b3af7d99e2c2d2190eff4501de", 0x0, 0xa}, 0x38) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xf9, 0x2, 0xd, 0x0, 0x123, 0x1, 0x1, 0x9, 0x0, 0x0, 0x2, 0x2, 0x0, 0x100, 0x4, 0x2, 0x1, 0x0, 0x81, '\x00', 0x3, 0x3}) 563.170178ms ago: executing program 2 (id=21027): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1}) 563.011137ms ago: executing program 5 (id=21028): r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pread64(r2, 0x0, 0x0, 0x8) 471.550081ms ago: executing program 0 (id=21029): r0 = socket$inet6(0xa, 0x80002, 0x0) setresuid(0x0, 0xee01, 0xee00) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) 393.242157ms ago: executing program 2 (id=21030): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[], 0x18}}, 0x2080) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040), 0x3d, 0x3400c098) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 254.945716ms ago: executing program 2 (id=21031): r0 = socket$netlink(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 213.247058ms ago: executing program 0 (id=21032): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) rename(&(0x7f0000000a00)='./file1\x00', &(0x7f00000009c0)='./file0\x00') 179.235973ms ago: executing program 2 (id=21033): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@netfilter={0x7, 0x0, 0x64d8}}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000000}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 79.228297ms ago: executing program 7 (id=21034): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee1, 0x8031, 0xffffffffffffffff, 0xc05bf000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=21035): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x24, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) kernel console output (not intermixed with test programs): 128.004439][ T32] block nbd1: Possible stuck request ffff888026505400: control (read@2048,1024B). Runtime 30 seconds [ 1128.004462][ T32] block nbd1: Possible stuck request ffff8880265055c0: control (read@3072,1024B). Runtime 30 seconds [ 1128.174767][T21387] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.925067][T29965] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1130.107293][T29965] usb 5-1: Using ep0 maxpacket: 8 [ 1130.109707][T29965] usb 5-1: config 162 has an invalid interface number: 79 but max is 1 [ 1130.109736][T29965] usb 5-1: config 162 has an invalid interface number: 183 but max is 1 [ 1130.109760][T29965] usb 5-1: config 162 has no interface number 0 [ 1130.109779][T29965] usb 5-1: config 162 has no interface number 1 [ 1130.109841][T29965] usb 5-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1130.109886][T29965] usb 5-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1130.109915][T29965] usb 5-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1130.109944][T29965] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1130.109974][T29965] usb 5-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1130.110001][T29965] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1130.110040][T29965] usb 5-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1130.110071][T29965] usb 5-1: config 162 interface 79 has no altsetting 0 [ 1130.110092][T29965] usb 5-1: config 162 interface 183 has no altsetting 0 [ 1130.113719][T29965] usb 5-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 1130.113752][T29965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.113775][T29965] usb 5-1: Product: syz [ 1130.113791][T29965] usb 5-1: Manufacturer: syz [ 1130.113808][T29965] usb 5-1: SerialNumber: syz [ 1130.466015][ T37] kauditd_printk_skb: 1514 callbacks suppressed [ 1130.466042][ T37] audit: type=1326 audit(1066.438:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18650 comm="syz.5.17805" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c8abfc799 code=0x0 [ 1130.547910][T29965] pl2303 5-1:162.79: required endpoints missing [ 1130.585542][T29965] pl2303 5-1:162.183: pl2303 converter detected [ 1130.586406][T29965] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 1130.586852][T29965] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 1130.611256][T29965] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 1130.616099][T29965] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 1130.616550][T29965] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 1130.616962][T29965] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 1130.617417][T29965] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 1130.617845][T29965] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 1130.618487][T29965] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 1130.618911][T29965] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 1130.691307][T29965] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 1130.708900][T29965] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 1130.738679][T29965] usb 5-1: USB disconnect, device number 27 [ 1130.783274][T29965] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1130.784300][T29965] pl2303 5-1:162.183: device disconnected [ 1132.749206][T18736] geneve4: entered promiscuous mode [ 1132.749243][T18736] geneve4: entered allmulticast mode [ 1133.232783][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17840'. [ 1134.209390][T18788] tap0: tun_chr_ioctl cmd 1074025677 [ 1134.209656][T18788] tap0: linktype set to 774 [ 1134.531646][T18814] tmpfs: Too few inodes for current use [ 1134.556058][T30085] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1134.719172][T30085] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1134.719206][T30085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.754262][T30085] usb 6-1: config 0 descriptor?? [ 1134.772216][T30085] cp210x 6-1:0.0: cp210x converter detected [ 1135.102134][T18843] devpts: Bad value for 'max' [ 1135.202634][T30085] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1135.256605][T30085] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1135.266240][T18847] pimreg: tun_chr_ioctl cmd 21731 [ 1135.435530][T30085] usb 6-1: USB disconnect, device number 32 [ 1135.464999][T30085] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1135.650062][T30085] cp210x 6-1:0.0: device disconnected [ 1136.021747][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17890'. [ 1136.425190][T18937] program syz.5.17900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1136.652252][T30085] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1136.828411][T30085] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1136.828447][T30085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.828470][T30085] usb 2-1: Product: syz [ 1136.828487][T30085] usb 2-1: Manufacturer: syz [ 1136.828503][T30085] usb 2-1: SerialNumber: syz [ 1136.871445][T30085] usb 2-1: config 0 descriptor?? [ 1136.891599][T30085] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1136.895321][T30085] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1136.897185][T30085] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1136.897246][T30085] usb 2-1: media controller created [ 1136.949820][T30085] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1136.962800][T29965] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1137.037605][T30085] DVB: Unable to find symbol mt352_attach() [ 1137.123257][T29965] usb 6-1: Using ep0 maxpacket: 32 [ 1137.125982][T29965] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.126040][T29965] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1137.126065][T29965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.181765][T30085] DVB: Unable to find symbol nxt6000_attach() [ 1137.181785][T30085] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1137.188635][T29965] usb 6-1: config 0 descriptor?? [ 1137.216954][T30085] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input69 [ 1137.239125][T18911] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 1137.273251][T30085] dvb-usb: schedule remote query interval to 1000 msecs. [ 1137.273278][T30085] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1137.273299][T30085] dvb-usb: bulk message failed: -22 (7/0) [ 1137.273318][T30085] dvb-usb: bulk message failed: -22 (7/0) [ 1137.281788][T29965] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1137.340822][T30085] usb 2-1: USB disconnect, device number 16 [ 1137.483574][T30085] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1139.093439][T19068] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1139.093439][T19068] program syz.4.17946 not setting count and/or reply_len properly [ 1139.966474][T30085] usb 6-1: USB disconnect, device number 33 [ 1140.432476][T19145] netlink: 'syz.4.17976': attribute type 6 has an invalid length. [ 1140.432501][T19145] netlink: 104 bytes leftover after parsing attributes in process `syz.4.17976'. [ 1141.720867][T19217] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.18004'. [ 1142.390409][T19255] program syz.4.18022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1143.101556][T29965] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1143.154861][T25870] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1143.262510][T29965] usb 2-1: Using ep0 maxpacket: 32 [ 1143.268982][T29965] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1143.269026][T29965] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1143.269053][T29965] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1143.269071][T29965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.327072][T29965] usb 2-1: config 0 descriptor?? [ 1143.347378][T25870] usb 6-1: Using ep0 maxpacket: 8 [ 1143.359397][T25870] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1143.359477][T25870] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1143.359504][T25870] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1143.359532][T25870] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1143.359558][T25870] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1143.359605][T25870] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1143.359628][T25870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.664775][T25870] usb 6-1: GET_CAPABILITIES returned 0 [ 1143.664828][T25870] usbtmc 6-1:16.0: can't read capabilities [ 1143.884753][T25870] usb 6-1: USB disconnect, device number 34 [ 1144.206362][T29965] corsair-psu 0003:1B1C:1C09.0025: unknown main item tag 0x0 [ 1144.206409][T29965] corsair-psu 0003:1B1C:1C09.0025: unknown main item tag 0x0 [ 1144.206439][T29965] corsair-psu 0003:1B1C:1C09.0025: unknown main item tag 0x0 [ 1144.206468][T29965] corsair-psu 0003:1B1C:1C09.0025: unknown main item tag 0x0 [ 1144.206496][T29965] corsair-psu 0003:1B1C:1C09.0025: unknown main item tag 0x0 [ 1144.211448][T29965] corsair-psu 0003:1B1C:1C09.0025: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 1144.377159][T19359] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18054'. [ 1144.557700][T29965] corsair-psu 0003:1B1C:1C09.0025: unable to initialize device (-110) [ 1144.578209][T29965] corsair-psu 0003:1B1C:1C09.0025: probe with driver corsair-psu failed with error -110 [ 1144.615913][T29965] usb 2-1: USB disconnect, device number 17 [ 1145.396649][T19416] program syz.5.18074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1145.924358][T30087] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1146.087839][T30087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.087878][T30087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.094773][T30087] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1146.094809][T30087] usb 5-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1146.094832][T30087] usb 5-1: Manufacturer: syz [ 1146.151076][T30087] usb 5-1: config 0 descriptor?? [ 1146.643834][T30087] hid-thrustmaster 0003:044F:B65D.0026: unknown main item tag 0x0 [ 1146.643875][T30087] hid-thrustmaster 0003:044F:B65D.0026: unknown main item tag 0x0 [ 1146.643904][T30087] hid-thrustmaster 0003:044F:B65D.0026: unknown main item tag 0x0 [ 1146.643933][T30087] hid-thrustmaster 0003:044F:B65D.0026: unknown main item tag 0x0 [ 1146.643962][T30087] hid-thrustmaster 0003:044F:B65D.0026: unknown main item tag 0x0 [ 1146.662544][T30087] hid-thrustmaster 0003:044F:B65D.0026: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1146.662989][T30087] hid-thrustmaster 0003:044F:B65D.0026: Wrong number of endpoints? [ 1146.889149][ C1] hid-thrustmaster 0003:044F:B65D.0026: Unknown packet type 0x0, unable to proceed further with wheel init [ 1147.108501][T29965] usb 5-1: USB disconnect, device number 28 [ 1147.315093][T25870] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1147.477516][T25870] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1147.477549][T25870] usb 2-1: config 0 has no interface number 0 [ 1147.477598][T25870] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1147.477630][T25870] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.477655][T25870] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1147.477684][T25870] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1147.477721][T25870] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1147.477746][T25870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.577077][T25870] usb 2-1: config 0 descriptor?? [ 1148.264494][T25870] input: HID 145f:0212 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:145F:0212.0027/input/input70 [ 1148.372408][T25870] input: HID 145f:0212 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:145F:0212.0027/input/input71 [ 1148.514265][T25870] uclogic 0003:145F:0212.0027: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.1-1/input1 [ 1148.556194][T25870] usb 2-1: USB disconnect, device number 18 [ 1148.969078][T19589] fido_id[19589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1150.285089][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18152'. [ 1150.287275][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18152'. [ 1151.163457][ T37] audit: type=1326 audit(1085.783:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19707 comm="syz.0.18167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f77ec799 code=0x7ffc0000 [ 1151.163520][ T37] audit: type=1326 audit(1085.783:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19707 comm="syz.0.18167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f77ec799 code=0x7ffc0000 [ 1151.184454][ T37] audit: type=1326 audit(1085.792:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19707 comm="syz.0.18167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f77ec799 code=0x7ffc0000 [ 1151.185883][ T37] audit: type=1326 audit(1085.802:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19707 comm="syz.0.18167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f37f77ec799 code=0x7ffc0000 [ 1151.228401][ T37] audit: type=1326 audit(1085.811:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19707 comm="syz.0.18167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f77ec799 code=0x7ffc0000 [ 1151.228570][ T37] audit: type=1326 audit(1085.839:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19707 comm="syz.0.18167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f77ec799 code=0x7ffc0000 [ 1151.228699][ T37] audit: type=1326 audit(1085.839:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19707 comm="syz.0.18167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f77ec799 code=0x7ffc0000 [ 1151.228808][ T37] audit: type=1326 audit(1085.839:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19707 comm="syz.0.18167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f77ec799 code=0x7ffc0000 [ 1151.310101][ T37] audit: type=1326 audit(1085.905:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19707 comm="syz.0.18167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f37f77ec799 code=0x7ffc0000 [ 1151.310258][ T37] audit: type=1326 audit(1085.914:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19707 comm="syz.0.18167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f77ec799 code=0x7ffc0000 [ 1151.441060][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18172'. [ 1152.681829][T19761] tipc: Started in network mode [ 1152.681867][T19761] tipc: Node identity ac14140f, cluster identity 4711 [ 1152.684259][T19761] tipc: New replicast peer: 255.255.255.255 [ 1152.716855][T19761] tipc: Enabled bearer , priority 10 [ 1153.434190][ T9413] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1153.882400][T29967] tipc: Node number set to 2886997007 [ 1154.459029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1154.459580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1154.789618][T19836] netlink: 328 bytes leftover after parsing attributes in process `syz.4.18225'. [ 1154.869433][T19839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18228'. [ 1154.954110][T19846] program syz.0.18229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1155.139430][T19856] program syz.0.18233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1155.313065][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18234'. [ 1156.010087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.205374][T19913] misc userio: Can't change port type on an already running userio instance [ 1156.702698][T19936] erspan0: entered promiscuous mode [ 1157.374973][T29967] wg1 speed is unknown, defaulting to 1000 [ 1157.375864][T29967] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1157.540503][T29965] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1157.670079][T19974] sp0: Synchronizing with TNC [ 1157.701086][T19985] sp0: Found TNC [ 1158.159682][T30085] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1158.346022][T30085] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.346053][T30085] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1158.346078][T30085] usb 5-1: config 1 has no interface number 0 [ 1158.346149][T30085] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1158.350430][T30085] usb 5-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40 [ 1158.350466][T30085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.350491][T30085] usb 5-1: Product: syz [ 1158.350508][T30085] usb 5-1: Manufacturer: syz [ 1158.350524][T30085] usb 5-1: SerialNumber: syz [ 1158.423484][T29965] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1158.452993][T30085] cdc_ncm 5-1:1.1: skipping garbage [ 1158.453020][T30085] usb 5-1: selecting invalid altsetting 1 [ 1158.577527][T29967] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1158.600690][T29965] usb 2-1: Using ep0 maxpacket: 32 [ 1158.603204][T29965] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.603239][T29965] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.605701][T29965] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1158.605733][T29965] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1158.605757][T29965] usb 2-1: Product: syz [ 1158.605772][T29965] usb 2-1: Manufacturer: syz [ 1158.696635][T29965] hub 2-1:4.0: USB hub found [ 1158.738029][T29967] usb 6-1: Using ep0 maxpacket: 32 [ 1158.740808][T29967] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1158.740837][T29967] usb 6-1: config 0 has no interface number 0 [ 1158.744411][T29967] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1158.744504][T29967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.744527][T29967] usb 6-1: Product: syz [ 1158.744545][T29967] usb 6-1: Manufacturer: syz [ 1158.744563][T29967] usb 6-1: SerialNumber: syz [ 1158.897076][T29965] hub 2-1:4.0: 4 ports detected [ 1158.900403][T29965] hub 2-1:4.0: insufficient power available to use all downstream ports [ 1158.980484][T29967] usb 6-1: config 0 descriptor?? [ 1159.022846][T29967] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1159.121148][T29965] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1159.121242][T29965] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1159.171961][T30085] usb 5-1: selecting invalid altsetting 1 [ 1159.172014][T30085] cdc_ncm 5-1:1.1: bind() failure [ 1159.290278][T29965] usb 2-1: USB disconnect, device number 19 [ 1159.309546][T29967] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1159.397317][T29967] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1159.493183][T20016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.497535][T20016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.527113][T30087] usb 5-1: USB disconnect, device number 29 [ 1159.755384][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1159.756225][T30085] usb 6-1: USB disconnect, device number 35 [ 1159.793991][T30085] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1159.835010][T30085] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1159.857682][T30085] quatech2 6-1:0.51: device disconnected [ 1160.160562][ T32] block nbd1: Possible stuck request ffff888026505080: control (read@0,1024B). Runtime 60 seconds [ 1160.160613][ T32] block nbd1: Possible stuck request ffff888026505240: control (read@1024,1024B). Runtime 60 seconds [ 1160.160645][ T32] block nbd1: Possible stuck request ffff888026505400: control (read@2048,1024B). Runtime 60 seconds [ 1160.160678][ T32] block nbd1: Possible stuck request ffff8880265055c0: control (read@3072,1024B). Runtime 60 seconds [ 1160.759407][T29965] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1160.904553][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18312'. [ 1160.930405][T29965] usb 6-1: Using ep0 maxpacket: 16 [ 1160.947242][T29965] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1160.947285][T29965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.947308][T29965] usb 6-1: Product: syz [ 1160.947324][T29965] usb 6-1: Manufacturer: syz [ 1160.947341][T29965] usb 6-1: SerialNumber: syz [ 1160.986189][T29965] usb 6-1: config 0 descriptor?? [ 1161.420441][T29965] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1161.472289][T29965] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1161.474325][T29965] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1161.474395][T29965] usb 6-1: media controller created [ 1161.568563][T20133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18316'. [ 1161.612169][T29965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1161.743852][T29965] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1161.743877][T29965] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1161.960948][T30087] usb 6-1: USB disconnect, device number 36 [ 1162.022904][T20157] netlink: 'syz.0.18322': attribute type 10 has an invalid length. [ 1162.022932][T20157] netlink: 152 bytes leftover after parsing attributes in process `syz.0.18322'. [ 1162.069349][T30087] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1162.413069][T20179] netlink: 'syz.1.18329': attribute type 1 has an invalid length. [ 1162.413094][T20179] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18329'. [ 1162.696581][T20198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18336'. [ 1162.812754][T29965] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1162.980480][T29965] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1162.980514][T29965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.980537][T29965] usb 2-1: Product: syz [ 1162.980552][T29965] usb 2-1: Manufacturer: syz [ 1162.980569][T29965] usb 2-1: SerialNumber: syz [ 1163.013090][T29965] usb 2-1: config 0 descriptor?? [ 1163.256604][T29965] usb 2-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1163.256636][T29965] f81604 2-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 1163.256688][T29965] f81604 2-1:0.0: probe with driver f81604 failed with error -121 [ 1163.703233][T20239] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.18353'. [ 1164.074082][T30085] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1164.241751][T30085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.241791][T30085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.241808][T30085] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1164.241841][T30085] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1164.241858][T30085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.272422][T30085] usb 5-1: config 0 descriptor?? [ 1164.775351][T30085] steelseries 0003:1038:1410.0028: unknown main item tag 0x0 [ 1164.775390][T30085] steelseries 0003:1038:1410.0028: unknown main item tag 0x0 [ 1164.775420][T30085] steelseries 0003:1038:1410.0028: unknown main item tag 0x0 [ 1164.775450][T30085] steelseries 0003:1038:1410.0028: unknown main item tag 0x0 [ 1164.775477][T30085] steelseries 0003:1038:1410.0028: unknown main item tag 0x0 [ 1164.778802][T30085] steelseries 0003:1038:1410.0028: not enough fields in HID_OUTPUT_REPORT 0 [ 1164.983916][T29961] usb 5-1: USB disconnect, device number 30 [ 1165.774003][T20345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18387'. [ 1165.807558][T29961] usb 2-1: USB disconnect, device number 20 [ 1166.104992][T20370] binder: 20368:20370 unknown command 0 [ 1166.105020][T20370] binder: 20368:20370 ioctl c0306201 200000000280 returned -22 [ 1168.267617][T29961] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1168.427710][T29961] usb 5-1: Using ep0 maxpacket: 32 [ 1168.432319][T29961] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1168.432343][T29961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.432359][T29961] usb 5-1: Product: syz [ 1168.432370][T29961] usb 5-1: Manufacturer: syz [ 1168.432381][T29961] usb 5-1: SerialNumber: syz [ 1168.481346][T29961] usb 5-1: config 0 descriptor?? [ 1168.536242][T29961] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1168.536283][T29961] dvb-usb: bulk message failed: -22 (2/0) [ 1168.541800][T29961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1168.554319][T29961] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1168.554466][T29961] usb 5-1: media controller created [ 1168.644668][T29961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1168.712208][T29961] usb 5-1: selecting invalid altsetting 7 [ 1168.712232][T29961] cxusb: set interface failed [ 1168.712248][T29961] dvb-usb: bulk message failed: -22 (1/0) [ 1168.733412][T20448] dvb-usb: bulk message failed: -22 (3/0) [ 1168.815224][T29961] DVB: Unable to find symbol lgdt330x_attach() [ 1168.815239][T29961] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1168.930558][T29961] rc_core: IR keymap rc-dvico-portable not found [ 1168.930582][T29961] Registered IR keymap rc-empty [ 1168.932718][T29961] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1168.936251][T29961] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input73 [ 1169.038761][T29961] dvb-usb: schedule remote query interval to 100 msecs. [ 1169.038789][T29961] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1169.063930][T29961] usb 5-1: USB disconnect, device number 31 [ 1169.291874][T29961] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1170.922308][T20589] netlink: 'syz.5.18474': attribute type 5 has an invalid length. [ 1170.922335][T20589] netlink: 5188 bytes leftover after parsing attributes in process `syz.5.18474'. [ 1171.517610][T20610] program syz.1.18483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1172.748404][T30085] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1172.911721][T30085] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.911781][T30085] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1172.911813][T30085] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1172.911859][T30085] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1172.911885][T30085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.981455][T30085] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1172.982501][T30085] usb 2-1: invalid MIDI out EP 0 [ 1173.392330][T30085] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1173.423465][T30085] usb 2-1: USB disconnect, device number 21 [ 1174.058158][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1174.058180][ T37] audit: type=1800 audit(1107.195:2318): pid=20734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.18519" name="bus" dev="tmpfs" ino=16016 res=0 errno=0 [ 1175.238658][T20800] sctp: [Deprecated]: syz.1.18548 (pid 20800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1175.238658][T20800] Use struct sctp_sack_info instead [ 1175.946758][ T9413] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1176.401490][T20857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18571'. [ 1176.618245][T20865] syz_tun: entered promiscuous mode [ 1176.633076][T20865] batadv0: entered promiscuous mode [ 1177.380702][T20900] netlink: 'syz.1.18590': attribute type 32 has an invalid length. [ 1177.380726][T20900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18590'. [ 1177.559771][T20900] bond4: option coupled_control: invalid value (46) [ 1177.637015][T20900] bond4 (unregistering): Released all slaves [ 1177.975501][T20986] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1177.975534][T20986] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1178.014331][T20986] vhci_hcd vhci_hcd.0: Device attached [ 1178.018248][T20988] vhci_hcd: cannot find the pending unlink 8 [ 1178.019158][T20988] vhci_hcd: connection closed [ 1178.019631][ T78] vhci_hcd vhci_hcd.1: stop threads [ 1178.019658][ T78] vhci_hcd vhci_hcd.1: release socket [ 1178.019700][ T78] vhci_hcd vhci_hcd.1: disconnect device [ 1179.042515][T21034] program syz.1.18618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1179.686877][T21059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18628'. [ 1180.031999][T30085] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1180.202434][T30085] usb 6-1: Using ep0 maxpacket: 16 [ 1180.210981][T30085] usb 6-1: config 0 has an invalid interface number: 13 but max is 0 [ 1180.211012][T30085] usb 6-1: config 0 has no interface number 0 [ 1180.211062][T30085] usb 6-1: config 0 interface 13 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.211092][T30085] usb 6-1: config 0 interface 13 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.211135][T30085] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1180.211161][T30085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.287564][T30085] usb 6-1: config 0 descriptor?? [ 1180.728496][ T37] audit: type=1326 audit(1113.431:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21104 comm="syz.4.18647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc1edac799 code=0x0 [ 1180.798142][T30085] uclogic 0003:5543:0781.0029: unknown main item tag 0x0 [ 1180.798184][T30085] uclogic 0003:5543:0781.0029: unknown main item tag 0x0 [ 1180.798213][T30085] uclogic 0003:5543:0781.0029: item fetching failed at offset 2/5 [ 1180.799045][T30085] uclogic 0003:5543:0781.0029: parse failed [ 1180.799157][T30085] uclogic 0003:5543:0781.0029: probe with driver uclogic failed with error -22 [ 1180.998132][T29967] usb 6-1: USB disconnect, device number 37 [ 1182.566698][T29965] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1182.727309][T29965] usb 5-1: Using ep0 maxpacket: 16 [ 1182.730052][T29965] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1182.730082][T29965] usb 5-1: config 0 has no interface number 0 [ 1182.730134][T29965] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.730164][T29965] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.730205][T29965] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1182.730232][T29965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.741284][T29965] usb 5-1: config 0 descriptor?? [ 1183.232351][ T37] audit: type=1326 audit(1115.778:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21216 comm="syz.5.18685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1183.232411][ T37] audit: type=1326 audit(1115.778:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21216 comm="syz.5.18685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1183.235013][ T37] audit: type=1326 audit(1115.778:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21216 comm="syz.5.18685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1183.235424][ T37] audit: type=1326 audit(1115.778:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21216 comm="syz.5.18685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1183.235740][ T37] audit: type=1326 audit(1115.778:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21216 comm="syz.5.18685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1183.236215][ T37] audit: type=1326 audit(1115.778:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21216 comm="syz.5.18685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1183.236266][ T37] audit: type=1326 audit(1115.778:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21216 comm="syz.5.18685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1183.236580][ T37] audit: type=1326 audit(1115.778:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21216 comm="syz.5.18685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1183.239277][ T37] audit: type=1326 audit(1115.778:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21216 comm="syz.5.18685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c8abbcfce code=0x7ffc0000 [ 1183.494834][T29965] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.002A/input/input74 [ 1183.616635][T29965] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.002A/input/input75 [ 1183.686422][T29965] uclogic 0003:28BD:0071.002A: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 1183.754057][T29965] usb 5-1: USB disconnect, device number 32 [ 1184.011730][T21244] fido_id[21244]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1184.502595][T20976] wlan1: Trigger new scan to find an IBSS to join [ 1185.080075][T29965] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1185.247726][T29965] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1185.247759][T29965] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1185.247780][T29965] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.247802][T29965] usb 2-1: config 220 has no interface number 2 [ 1185.247890][T29965] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1185.247919][T29965] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1185.247941][T29965] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1185.247961][T29965] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1185.253549][T29965] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1185.253641][T29965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.253696][T29965] usb 2-1: Product: syz [ 1185.253736][T29965] usb 2-1: Manufacturer: syz [ 1185.253780][T29965] usb 2-1: SerialNumber: syz [ 1185.552488][T29965] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1185.552544][T29965] uvcvideo 2-1:220.0: No valid video chain found. [ 1185.552614][T29965] usb 2-1: selecting invalid altsetting 0 [ 1185.578689][T29965] usb 2-1: selecting invalid altsetting 0 [ 1185.578727][T29965] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1185.640140][T29965] usb 2-1: USB disconnect, device number 22 [ 1185.967882][T29967] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1186.038764][T21337] netlink: 'syz.4.18716': attribute type 21 has an invalid length. [ 1186.038843][T21337] netlink: 156 bytes leftover after parsing attributes in process `syz.4.18716'. [ 1186.039812][T21337] netlink: 'syz.4.18716': attribute type 21 has an invalid length. [ 1186.039872][T21337] netlink: 156 bytes leftover after parsing attributes in process `syz.4.18716'. [ 1186.130577][T29967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.130617][T29967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.130660][T29967] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1186.130686][T29967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.137266][T29967] usb 6-1: config 0 descriptor?? [ 1186.593068][T29967] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 1186.600259][T29961] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1186.639721][T29967] pyra 0003:1E7D:2CF6.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1186.769912][T29961] usb 5-1: Using ep0 maxpacket: 8 [ 1186.787226][T29961] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1186.787327][T29961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.787351][T29961] usb 5-1: Product: syz [ 1186.787368][T29961] usb 5-1: Manufacturer: syz [ 1186.787384][T29961] usb 5-1: SerialNumber: syz [ 1186.861681][T29961] usb 5-1: config 0 descriptor?? [ 1186.883732][T29961] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1187.051153][T29967] pyra 0003:1E7D:2CF6.002B: couldn't init struct pyra_device [ 1187.051271][T29967] pyra 0003:1E7D:2CF6.002B: couldn't install mouse [ 1187.141625][T29967] pyra 0003:1E7D:2CF6.002B: probe with driver pyra failed with error -71 [ 1187.276900][T29967] usb 6-1: USB disconnect, device number 38 [ 1187.617960][T21396] overlay: Unknown parameter '\€' [ 1187.668365][ T1019] wlan1: Trigger new scan to find an IBSS to join [ 1187.794831][T29961] gspca_sq930x: ucbus_write failed -71 [ 1187.795007][T29961] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1187.826160][T29961] usb 5-1: USB disconnect, device number 33 [ 1187.996967][T21412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18735'. [ 1187.996999][T21412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18735'. [ 1187.997020][T21412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18735'. [ 1187.997532][T21412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18735'. [ 1187.997554][T21412] netlink: 'syz.5.18735': attribute type 6 has an invalid length. [ 1188.160050][T29967] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1188.320918][T29967] usb 2-1: Using ep0 maxpacket: 8 [ 1188.323445][T29967] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1188.323477][T29967] usb 2-1: config 179 has no interface number 0 [ 1188.323526][T29967] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1188.323558][T29967] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1188.323588][T29967] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1188.323626][T29967] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1188.323655][T29967] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1188.323702][T29967] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1188.323728][T29967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.379295][T21404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1188.868279][T30085] usb 2-1: USB disconnect, device number 23 [ 1188.868302][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1188.868368][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1188.908980][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1189.603891][T25871] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1189.775991][T25871] usb 5-1: Using ep0 maxpacket: 16 [ 1189.792599][T25871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.792633][T25871] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1189.792651][T25871] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1189.792689][T25871] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1189.792709][T25871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.852781][T25871] usb 5-1: config 0 descriptor?? [ 1190.025752][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 1190.025775][ T37] audit: type=1326 audit(1122.127:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21489 comm="syz.1.18760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf13dcc799 code=0x0 [ 1190.342722][T25871] nintendo 0003:057E:2019.002C: unknown main item tag 0x0 [ 1190.342764][T25871] nintendo 0003:057E:2019.002C: unknown main item tag 0x0 [ 1190.342793][T25871] nintendo 0003:057E:2019.002C: unknown main item tag 0x0 [ 1190.342822][T25871] nintendo 0003:057E:2019.002C: unknown main item tag 0x0 [ 1190.342851][T25871] nintendo 0003:057E:2019.002C: unknown main item tag 0x0 [ 1190.356588][T25871] nintendo 0003:057E:2019.002C: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 1190.433719][T25871] nintendo 0003:057E:2019.002C: Failed to get joycon info; ret=-38 [ 1190.433748][T25871] nintendo 0003:057E:2019.002C: Failed to retrieve controller info; ret=-38 [ 1190.434089][T25871] nintendo 0003:057E:2019.002C: Failed to initialize controller; ret=-38 [ 1190.495224][T25871] nintendo 0003:057E:2019.002C: probe - fail = -38 [ 1190.495385][T25871] nintendo 0003:057E:2019.002C: probe with driver nintendo failed with error -38 [ 1190.800720][T25871] usb 5-1: USB disconnect, device number 34 [ 1190.834681][T22960] wlan1: Creating new IBSS network, BSSID 66:c6:8c:86:46:31 [ 1192.331499][ T32] block nbd1: Possible stuck request ffff888026505080: control (read@0,1024B). Runtime 90 seconds [ 1192.335449][ T32] block nbd1: Possible stuck request ffff888026505240: control (read@1024,1024B). Runtime 90 seconds [ 1192.335492][ T32] block nbd1: Possible stuck request ffff888026505400: control (read@2048,1024B). Runtime 90 seconds [ 1192.335525][ T32] block nbd1: Possible stuck request ffff8880265055c0: control (read@3072,1024B). Runtime 90 seconds [ 1192.497838][ T37] audit: type=1326 audit(1124.436:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21587 comm="syz.5.18799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1192.508617][ T37] audit: type=1326 audit(1124.436:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21587 comm="syz.5.18799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1192.538810][ T37] audit: type=1326 audit(1124.473:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21587 comm="syz.5.18799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1192.538981][ T37] audit: type=1326 audit(1124.473:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21587 comm="syz.5.18799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1192.539166][ T37] audit: type=1326 audit(1124.473:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21587 comm="syz.5.18799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1192.593369][ T37] audit: type=1326 audit(1124.520:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21587 comm="syz.5.18799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1192.605383][ T37] audit: type=1326 audit(1124.520:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21587 comm="syz.5.18799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8abfc799 code=0x7ffc0000 [ 1192.605565][ T37] audit: type=1326 audit(1124.520:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21587 comm="syz.5.18799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c8abfc502 code=0x7ffc0000 [ 1192.605687][ T37] audit: type=1326 audit(1124.520:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21587 comm="syz.5.18799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5c8abfc597 code=0x7ffc0000 [ 1195.041760][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18843'. [ 1195.041803][T21701] netlink: 'syz.1.18843': attribute type 30 has an invalid length. [ 1195.103999][T21710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18843'. [ 1195.104034][T21710] netlink: 'syz.1.18843': attribute type 30 has an invalid length. [ 1195.150226][ T78] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.160073][ T78] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.160225][ T78] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.160334][ T78] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.206187][T21711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18847'. [ 1195.415494][T21724] program syz.1.18852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1195.685310][T21736] overlayfs: missing 'workdir' [ 1196.367291][T21764] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18869'. [ 1197.152555][T21791] program syz.4.18881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1197.478205][T21809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18886'. [ 1197.616806][T25871] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1197.780040][T25871] usb 2-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1197.780077][T25871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.780101][T25871] usb 2-1: Product: syz [ 1197.780117][T25871] usb 2-1: Manufacturer: syz [ 1197.780134][T25871] usb 2-1: SerialNumber: syz [ 1197.839352][T25871] usb 2-1: config 0 descriptor?? [ 1197.889088][T21824] netlink: 'syz.5.18893': attribute type 64 has an invalid length. [ 1197.889115][T21824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18893'. [ 1198.106603][T25871] usb 2-1: selecting invalid altsetting 1 [ 1198.106630][T25871] comedi comedi5: could not switch to alternate setting 1 [ 1198.106648][T25871] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1198.151575][T25871] usb 2-1: USB disconnect, device number 24 [ 1198.221303][T21844] netlink: 'syz.5.18896': attribute type 17 has an invalid length. [ 1198.657633][T25871] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1198.813501][T25871] usb 2-1: not running at top speed; connect to a high speed hub [ 1198.819536][T25871] usb 2-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1198.819571][T25871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.819594][T25871] usb 2-1: Product: syz [ 1198.819611][T25871] usb 2-1: Manufacturer: syz [ 1198.819627][T25871] usb 2-1: SerialNumber: syz [ 1198.868410][T25871] usb 2-1: config 0 descriptor?? [ 1199.115167][T25871] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 1199.115192][T25871] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1199.161055][T25871] usb 2-1: USB disconnect, device number 25 [ 1200.843895][T21986] isofs_fill_super: bread failed, dev=loop9, iso_blknum=16, block=32 [ 1201.123804][T22003] program syz.5.18958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1202.284790][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 1202.284811][ T37] audit: type=1326 audit(1133.580:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22040 comm="syz.1.18976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf13dcc799 code=0x7ffc0000 [ 1202.284875][ T37] audit: type=1326 audit(1133.580:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22040 comm="syz.1.18976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf13dcc799 code=0x7ffc0000 [ 1202.327862][ T37] audit: type=1326 audit(1133.599:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22040 comm="syz.1.18976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf13dcc799 code=0x7ffc0000 [ 1202.327918][ T37] audit: type=1326 audit(1133.627:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22040 comm="syz.1.18976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf13dcc799 code=0x7ffc0000 [ 1202.333329][ T37] audit: type=1326 audit(1133.636:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22040 comm="syz.1.18976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcf13dcc799 code=0x7ffc0000 [ 1202.333440][ T37] audit: type=1326 audit(1133.636:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22040 comm="syz.1.18976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf13dcc799 code=0x7ffc0000 [ 1202.355914][ T37] audit: type=1326 audit(1133.636:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22040 comm="syz.1.18976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf13dcc799 code=0x7ffc0000 [ 1202.356065][ T37] audit: type=1326 audit(1133.655:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22040 comm="syz.1.18976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fcf13dcc799 code=0x7ffc0000 [ 1202.356182][ T37] audit: type=1326 audit(1133.655:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22040 comm="syz.1.18976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf13dcc799 code=0x7ffc0000 [ 1202.359743][ T37] audit: type=1326 audit(1133.655:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22040 comm="syz.1.18976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf13dcc799 code=0x7ffc0000 [ 1202.934205][T22058] program syz.4.18983 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1204.669585][T22116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1207.090872][T29967] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1207.262352][T29967] usb 2-1: Using ep0 maxpacket: 16 [ 1207.265660][T29967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.265721][T29967] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1207.265748][T29967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.295329][T29967] usb 2-1: config 0 descriptor?? [ 1207.542876][T29967] usb 2-1: USB disconnect, device number 26 [ 1207.608161][T22258] netlink: 'syz.5.19063': attribute type 11 has an invalid length. [ 1208.031879][T30085] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1208.205872][T30085] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1208.205904][T30085] usb 6-1: config 0 has no interface number 0 [ 1208.205974][T30085] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1208.206002][T30085] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1208.206032][T30085] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1208.207883][T30085] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1208.207914][T30085] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1208.207938][T30085] usb 6-1: Product: syz [ 1208.207955][T30085] usb 6-1: SerialNumber: syz [ 1208.314998][T30085] usb 6-1: config 0 descriptor?? [ 1208.333138][T30085] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1208.338428][T30085] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input76 [ 1208.582693][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1208.858343][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1208.859665][T30085] usb 6-1: USB disconnect, device number 39 [ 1208.864345][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1208.864372][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1209.321502][T30085] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1209.676008][T22352] netlink: 'syz.5.19093': attribute type 83 has an invalid length. [ 1210.235136][T29961] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 1210.402003][T29961] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1210.402062][T29961] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1210.402099][T29961] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1210.402128][T29961] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1210.402226][T29961] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1210.403373][T29961] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1210.403448][T29961] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1210.403481][T29961] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1210.403508][T29961] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1210.403535][T29961] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1210.413440][T29961] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1210.413597][T29961] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1210.413684][T29961] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1210.413763][T29961] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1210.413834][T29961] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1210.574221][T29961] usb 2-1: string descriptor 0 read error: -22 [ 1210.574324][T29961] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1210.574343][T29961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.655258][T29961] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1211.055854][T29961] usb 2-1: USB disconnect, device number 27 [ 1211.379485][T29967] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1211.539934][T29967] usb 5-1: Using ep0 maxpacket: 16 [ 1211.542442][T29967] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1211.542478][T29967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1211.569559][T29967] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1211.569646][T29967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.569708][T29967] usb 5-1: Product: syz [ 1211.569751][T29967] usb 5-1: Manufacturer: syz [ 1211.569793][T29967] usb 5-1: SerialNumber: syz [ 1211.623367][T29967] usb 5-1: config 0 descriptor?? [ 1211.691793][T29967] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1211.691868][T29967] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1212.331707][T29967] em28xx 5-1:0.0: chip ID is em28178 [ 1212.539513][T22482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19135'. [ 1212.563383][T25870] usb 5-1: USB disconnect, device number 35 [ 1212.579435][T25870] em28xx 5-1:0.0: Disconnecting em28xx [ 1212.674744][T25870] em28xx 5-1:0.0: Freeing device [ 1213.243841][T22512] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19146'. [ 1214.230799][T22546] sctp: [Deprecated]: syz.4.19159 (pid 22546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1214.230799][T22546] Use struct sctp_sack_info instead [ 1215.935057][T30085] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1216.130422][T30085] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.130480][T30085] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1216.130507][T30085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.180346][T30085] usb 6-1: config 0 descriptor?? [ 1216.664438][T30085] dragonrise 0003:0079:0006.002D: unknown main item tag 0x0 [ 1216.664481][T30085] dragonrise 0003:0079:0006.002D: unknown main item tag 0x0 [ 1216.664510][T30085] dragonrise 0003:0079:0006.002D: unknown main item tag 0x0 [ 1216.664539][T30085] dragonrise 0003:0079:0006.002D: unknown main item tag 0x0 [ 1216.664568][T30085] dragonrise 0003:0079:0006.002D: unknown main item tag 0x0 [ 1216.664596][T30085] dragonrise 0003:0079:0006.002D: unknown main item tag 0x0 [ 1216.664626][T30085] dragonrise 0003:0079:0006.002D: unknown main item tag 0x0 [ 1216.664665][T30085] dragonrise 0003:0079:0006.002D: unknown main item tag 0x0 [ 1216.664695][T30085] dragonrise 0003:0079:0006.002D: unknown main item tag 0x0 [ 1216.664724][T30085] dragonrise 0003:0079:0006.002D: unknown main item tag 0x0 [ 1216.666623][T30085] dragonrise 0003:0079:0006.002D: item fetching failed at offset 192/235 [ 1216.667458][T30085] dragonrise 0003:0079:0006.002D: parse failed [ 1216.667531][T30085] dragonrise 0003:0079:0006.002D: probe with driver dragonrise failed with error -22 [ 1216.885761][T25870] usb 6-1: USB disconnect, device number 40 [ 1216.908679][T30085] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1217.091864][T30085] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1217.091900][T30085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.091923][T30085] usb 5-1: Product: syz [ 1217.091953][T30085] usb 5-1: Manufacturer: syz [ 1217.091971][T30085] usb 5-1: SerialNumber: syz [ 1217.098316][T30085] usb 5-1: config 0 descriptor?? [ 1217.346375][T30085] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1218.006241][T30085] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1218.028106][T30085] usb 5-1: USB disconnect, device number 36 [ 1218.754885][T22733] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.19229'. [ 1219.093675][T20976] tipc: Subscription rejected, illegal request [ 1219.337836][T22767] netlink: 96 bytes leftover after parsing attributes in process `syz.5.19242'. [ 1219.443193][T30087] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1219.523934][T22776] 2žÿ: renamed from team_slave_1 (while UP) [ 1219.621614][T30087] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.621645][T30087] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1219.621686][T30087] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1219.621709][T30087] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1219.623122][T30087] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1219.623153][T30087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1219.623174][T30087] usb 5-1: SerialNumber: syz [ 1219.951971][T30087] usb 5-1: 0:2 : does not exist [ 1219.952061][T30087] usb 5-1: unit 5 not found! [ 1220.031720][T30087] usb 5-1: USB disconnect, device number 37 [ 1220.113787][T15727] udevd[15727]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1220.257096][T29967] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1220.284010][T22805] wg1 speed is unknown, defaulting to 1000 [ 1220.421562][T29967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.421600][T29967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.421625][T29967] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1220.421672][T29967] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1220.421698][T29967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.433967][T29967] usb 6-1: config 0 descriptor?? [ 1220.876882][T30087] psmouse serio3: Failed to reset mouse on : -5 [ 1220.909297][ T1019] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1221.136794][T29967] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1221.209469][T29967] usb 6-1: USB disconnect, device number 41 [ 1221.291428][T22851] fido_id[22851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1222.208703][T22924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19277'. [ 1222.294209][T22924] netlink: 'syz.5.19277': attribute type 1 has an invalid length. [ 1222.294236][T22924] netlink: 'syz.5.19277': attribute type 2 has an invalid length. [ 1223.615924][T22994] overlayfs: workdir and upperdir must reside under the same mount [ 1224.200104][T23028] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1224.502641][T21786] block nbd1: Possible stuck request ffff888026505080: control (read@0,1024B). Runtime 120 seconds [ 1224.502693][T21786] block nbd1: Possible stuck request ffff888026505240: control (read@1024,1024B). Runtime 120 seconds [ 1224.502727][T21786] block nbd1: Possible stuck request ffff888026505400: control (read@2048,1024B). Runtime 120 seconds [ 1224.502760][T21786] block nbd1: Possible stuck request ffff8880265055c0: control (read@3072,1024B). Runtime 120 seconds [ 1224.930105][T30087] misc userio: Buffer overflowed, userio client isn't keeping up [ 1225.158960][T23075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1225.159013][T23075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.200039][T23075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1225.200070][T23075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.122881][T30087] input: PS/2 Generic Mouse as /devices/serio3/input/input77 [ 1226.341821][ T5892] Bluetooth: hci4: command 0x1003 tx timeout [ 1226.348685][ T5884] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1226.432159][T30087] psmouse serio3: Failed to enable mouse on [ 1227.224051][T23170] loop5: detected capacity change from 0 to 4095 [ 1227.284928][T23170] Invalid logical block size (2051) [ 1227.434746][T29967] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1227.625607][T29967] usb 5-1: Using ep0 maxpacket: 8 [ 1227.628117][T29967] usb 5-1: config 0 has no interfaces? [ 1227.628157][T29967] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1227.628193][T29967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.634317][T29967] usb 5-1: config 0 descriptor?? [ 1227.894102][T30087] usb 5-1: USB disconnect, device number 38 [ 1228.069511][T23197] Invalid argument reading file caps for ./file0 [ 1229.461249][T23235] netlink: 100 bytes leftover after parsing attributes in process `syz.5.19397'. [ 1229.855067][T23257] binder: 23256:23257 ioctl c0306201 2000000001c0 returned -14 [ 1230.491955][T29965] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1230.652329][T29965] usb 5-1: Using ep0 maxpacket: 8 [ 1230.662026][T29965] usb 5-1: string descriptor 0 read error: -22 [ 1230.677142][T29965] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1230.677177][T29965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.722603][T29965] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1230.797196][T23296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1230.953677][T29965] usb 5-1: 2:1 : bogus bTerminalLink 230 [ 1231.052685][T29965] usb 5-1: USB disconnect, device number 39 [ 1231.870423][ T5892] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1231.916682][ T5892] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1231.923315][ T5892] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1231.974943][ T5892] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1231.989446][ T5892] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1232.177625][T23355] wg1 speed is unknown, defaulting to 1000 [ 1232.375143][T23376] loop6: detected capacity change from 0 to 7 [ 1232.468076][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1232.473249][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.474089][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.475255][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.475348][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.476394][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.476489][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.477442][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.477517][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.479890][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.479981][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.490089][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.490153][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.493949][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.494035][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.495783][T15727] ldm_validate_partition_table(): Disk read failed. [ 1232.496294][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.496386][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.497421][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.497494][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.498807][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.508073][T15727] Dev loop6: unable to read RDB block 0 [ 1232.733287][T15727] loop6: unable to read partition table [ 1232.733577][T15727] loop6: partition table beyond EOD, truncated [ 1232.811433][T23376] ldm_validate_partition_table(): Disk read failed. [ 1232.819677][T23376] Dev loop6: unable to read RDB block 0 [ 1232.821337][T23376] loop6: unable to read partition table [ 1232.821575][T23376] loop6: partition table beyond EOD, truncated [ 1232.821615][T23376] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 1233.881452][T30087] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1234.004425][T23355] chnl_net:caif_netlink_parms(): no params data found [ 1234.043218][T30087] usb 5-1: Using ep0 maxpacket: 8 [ 1234.049687][T30087] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1234.049724][T30087] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1234.049753][T30087] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1234.049780][T30087] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1234.049827][T30087] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1234.049853][T30087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.299951][ T5884] Bluetooth: hci4: command tx timeout [ 1234.358419][T30087] usb 5-1: usb_control_msg returned -32 [ 1234.358806][T30087] usbtmc 5-1:16.0: can't read capabilities [ 1234.594142][T23540] netlink: 'syz.0.19464': attribute type 22 has an invalid length. [ 1234.628939][T23355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.629139][T23355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.629368][T23355] bridge_slave_0: entered allmulticast mode [ 1234.637400][T23355] bridge_slave_0: entered promiscuous mode [ 1234.647730][T23355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.648299][T23355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.648821][T23355] bridge_slave_1: entered allmulticast mode [ 1234.675622][T23355] bridge_slave_1: entered promiscuous mode [ 1234.832403][T23355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1234.871464][T23355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.055919][T23355] team0: Port device team_slave_0 added [ 1235.065479][T23355] team0: Port device team_slave_1 added [ 1235.194605][T23355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.194625][T23355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.194671][T23355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.254755][T23355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.254772][T23355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.254821][T23355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.578783][T23355] hsr_slave_0: entered promiscuous mode [ 1235.580430][T23355] hsr_slave_1: entered promiscuous mode [ 1235.581593][T23355] debugfs: 'hsr0' already exists in 'hsr' [ 1235.581621][T23355] Cannot create hsr debugfs directory [ 1236.411919][T23355] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1236.455051][T23355] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1236.504307][T23355] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1236.523897][ T5884] Bluetooth: hci4: command tx timeout [ 1236.574725][T23355] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1236.856595][T29967] usb 5-1: USB disconnect, device number 40 [ 1237.163563][T23355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.232017][T23355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.258122][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.258256][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.337973][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.338193][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.190370][T23355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.352158][T29965] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1238.523961][T29965] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.523992][T29965] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1238.535329][T29965] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1238.535424][T29965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1238.535493][T29965] usb 5-1: SerialNumber: syz [ 1238.752690][ T5884] Bluetooth: hci4: command tx timeout [ 1238.774923][T25871] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1238.849548][T29965] usb 5-1: 0:2 : does not exist [ 1238.864570][T29965] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1238.912437][T23355] veth0_vlan: entered promiscuous mode [ 1238.930197][T25871] usb 6-1: Using ep0 maxpacket: 16 [ 1238.933388][T25871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.933447][T25871] usb 6-1: New USB device found, idVendor=0b05, idProduct=1854, bcdDevice= 0.00 [ 1238.933474][T25871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.967624][T23355] veth1_vlan: entered promiscuous mode [ 1238.989565][T25871] usb 6-1: config 0 descriptor?? [ 1239.019404][T25871] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1239.105835][T29965] usb 5-1: USB disconnect, device number 41 [ 1239.199066][T23355] veth0_macvtap: entered promiscuous mode [ 1239.222460][T15727] udevd[15727]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1239.254506][T23355] veth1_macvtap: entered promiscuous mode [ 1239.292533][T23355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.316654][T29961] usb 6-1: USB disconnect, device number 42 [ 1239.375057][T23355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.390150][T30717] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.391870][T30717] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.392242][T30717] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.392411][T30717] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.861920][T23901] loop5: detected capacity change from 0 to 7 [ 1239.943682][T23901] Dev loop5: unable to read RDB block 7 [ 1239.943743][T23901] loop5: unable to read partition table [ 1239.943972][T23901] loop5: partition table beyond EOD, truncated [ 1239.944007][T23901] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1240.217800][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.217823][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.457589][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.457615][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.879067][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1240.879088][ T37] audit: type=1326 audit(1169.671:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23949 comm="syz.6.19429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea1ea1c799 code=0x0 [ 1240.972904][ T5884] Bluetooth: hci4: command tx timeout [ 1241.011184][T23956] input: syz0 as /devices/virtual/input/input78 [ 1241.596482][T23985] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19546'. [ 1241.596511][T23985] netlink: 'syz.0.19546': attribute type 32 has an invalid length. [ 1241.596540][T23985] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1243.624973][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1244.495034][T24093] input: syz0 as /devices/virtual/input/input79 [ 1246.475963][T24179] netlink: 27 bytes leftover after parsing attributes in process `syz.5.19622'. [ 1246.858475][T30087] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1246.930781][T24203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1246.967482][T24203] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1247.017673][T30087] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1247.017741][T30087] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1247.017770][T30087] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1247.017791][T30087] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1247.017812][T30087] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1247.017843][T30087] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1247.017861][T30087] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.101942][T30087] usb 6-1: config 0 descriptor?? [ 1247.102832][T24183] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1247.570713][T30087] plantronics 0003:047F:FFFF.002F: reserved main item tag 0xd [ 1247.671541][T30087] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1250.056167][T29967] usb 6-1: USB disconnect, device number 43 [ 1251.702623][T24369] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19688'. [ 1252.941338][T29967] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1253.105226][T29967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.105282][T29967] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1253.105311][T29967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.154946][T29967] usb 7-1: config 0 descriptor?? [ 1253.391123][T29967] usbhid 7-1:0.0: can't add hid device: -71 [ 1253.391258][T29967] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1253.424851][T29967] usb 7-1: USB disconnect, device number 2 [ 1253.462351][T24450] netlink: 112 bytes leftover after parsing attributes in process `syz.5.19715'. [ 1253.924950][T29967] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1254.036091][T24481] netlink: 'syz.0.19726': attribute type 4 has an invalid length. [ 1254.087800][T29967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.087856][T29967] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1254.087883][T29967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.093669][ T1360] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1254.094957][T29967] usb 7-1: config 0 descriptor?? [ 1254.360067][T24491] input: syz0 as /devices/virtual/input/input81 [ 1254.598761][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1254.677514][T29967] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1254.829936][T29967] usb 7-1: USB disconnect, device number 3 [ 1256.684259][T21786] block nbd1: Possible stuck request ffff888026505080: control (read@0,1024B). Runtime 150 seconds [ 1256.684312][T21786] block nbd1: Possible stuck request ffff888026505240: control (read@1024,1024B). Runtime 150 seconds [ 1256.684346][T21786] block nbd1: Possible stuck request ffff888026505400: control (read@2048,1024B). Runtime 150 seconds [ 1256.685785][T21786] block nbd1: Possible stuck request ffff8880265055c0: control (read@3072,1024B). Runtime 150 seconds [ 1257.703641][T24649] batadv_slave_1: entered promiscuous mode [ 1257.718204][T24646] batadv_slave_1: left promiscuous mode [ 1257.924314][T24655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19783'. [ 1258.527559][T24688] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19796'. [ 1258.527591][T24688] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19796'. [ 1258.783028][T24699] netlink: 176 bytes leftover after parsing attributes in process `syz.6.19802'. [ 1259.369809][T24727] netlink: 27 bytes leftover after parsing attributes in process `syz.6.19811'. [ 1259.734230][T24741] loop2: detected capacity change from 0 to 7 [ 1259.746568][T24741] Dev loop2: unable to read RDB block 7 [ 1259.746622][T24741] loop2: unable to read partition table [ 1259.746835][T24741] loop2: partition table beyond EOD, truncated [ 1259.746869][T24741] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1260.556980][T24787] ip6tnl1: entered allmulticast mode [ 1260.758941][T23908] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1260.925663][T23908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1260.927245][T23908] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 1260.927273][T23908] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.927295][T23908] usb 5-1: config 63 has no interface number 0 [ 1260.927329][T23908] usb 5-1: config 63 interface 66 has no altsetting 0 [ 1260.994302][T23908] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1260.994336][T23908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.994359][T23908] usb 5-1: Product: syz [ 1260.994374][T23908] usb 5-1: Manufacturer: syz [ 1260.994389][T23908] usb 5-1: SerialNumber: syz [ 1261.303508][T23908] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1261.310872][T23908] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1261.312039][T23908] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1261.312958][T23908] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1261.314147][T23908] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1261.323669][T23908] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1261.323784][T23908] uvcvideo 5-1:63.66: No streaming interface found for terminal 29. [ 1261.323833][T23908] uvcvideo 5-1:63.66: Entity type for entity Output 32773 was not initialized! [ 1261.390082][T23908] usb 5-1: USB disconnect, device number 42 [ 1261.781707][T24815] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1261.782445][T24817] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1261.902900][T23908] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1262.071468][T23908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1262.075468][T23908] usb 5-1: not running at top speed; connect to a high speed hub [ 1262.077644][T23908] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 1262.077701][T23908] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.077758][T23908] usb 5-1: config 63 has no interface number 0 [ 1262.077840][T23908] usb 5-1: config 63 interface 66 has no altsetting 0 [ 1262.150208][T23908] usb 5-1: string descriptor 0 read error: -22 [ 1262.150381][T23908] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1262.150408][T23908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.192514][T30087] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1262.227762][T23908] uvcvideo 5-1:63.66: Found UVC 0.07 device (174f:8acf) [ 1262.369417][T30087] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1262.372659][T30087] usb 7-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.40 [ 1262.372751][T30087] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.372775][T30087] usb 7-1: Product: syz [ 1262.372793][T30087] usb 7-1: Manufacturer: syz [ 1262.372810][T30087] usb 7-1: SerialNumber: syz [ 1262.436838][T23908] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC error code control 6 on unit 1: -71 (exp. 1). [ 1262.437263][T23908] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1262.438660][T23908] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1262.444306][T23908] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1262.465617][T23908] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1262.465901][T23908] uvcvideo 5-1:63.66: No streaming interface found for terminal 29. [ 1262.465957][T23908] uvcvideo 5-1:63.66: Entity type for entity Output 32773 was not initialized! [ 1262.569189][T23908] usb 5-1: USB disconnect, device number 43 [ 1262.812766][T30087] usbhid 7-1:1.0: can't add hid device: -71 [ 1262.812896][T30087] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1262.933239][T30087] usb 7-1: USB disconnect, device number 4 [ 1262.980491][T24860] wg1 speed is unknown, defaulting to 1000 [ 1265.369397][T25000] loop5: detected capacity change from 0 to 7 [ 1265.377491][T25000] Dev loop5: unable to read RDB block 7 [ 1265.377540][T25000] loop5: unable to read partition table [ 1265.377889][T25000] loop5: partition table beyond EOD, truncated [ 1265.377911][T25000] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1265.999592][T23908] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1266.179835][T23908] usb 7-1: Using ep0 maxpacket: 8 [ 1266.184088][T23908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1266.184170][T23908] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1266.208980][T23908] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1266.209058][T23908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.209119][T23908] usb 7-1: Product: syz [ 1266.209161][T23908] usb 7-1: Manufacturer: syz [ 1266.209204][T23908] usb 7-1: SerialNumber: syz [ 1266.428130][T23908] usb 7-1: config 0 descriptor?? [ 1266.786649][T25051] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1266.922016][T23908] usb 7-1: USB disconnect, device number 5 [ 1268.410725][T25129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19916'. [ 1268.823371][T29967] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1268.876777][T29965] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1268.983749][T29967] usb 6-1: Using ep0 maxpacket: 32 [ 1268.986135][T29967] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1268.986166][T29967] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1268.986192][T29967] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1268.990754][T29967] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1268.990787][T29967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.990810][T29967] usb 6-1: Product: syz [ 1268.990827][T29967] usb 6-1: Manufacturer: syz [ 1268.990843][T29967] usb 6-1: SerialNumber: syz [ 1269.072394][T29967] usb 6-1: config 0 descriptor?? [ 1269.085902][T29965] usb 7-1: Using ep0 maxpacket: 16 [ 1269.089028][T29965] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.089124][T29965] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.089151][T29965] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1269.089189][T29965] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1269.089216][T29965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.173648][T29965] usb 7-1: config 0 descriptor?? [ 1269.531263][T29967] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1269.580898][T25174] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1269.638064][T29965] hid (null): unknown global tag 0xd [ 1269.638111][T29965] hid (null): unknown global tag 0xd [ 1269.696601][T29965] hid_parser_main: 188 callbacks suppressed [ 1269.696634][T29965] cougar 0003:060B:500A.0031: unknown main item tag 0x0 [ 1269.696670][T29965] cougar 0003:060B:500A.0031: unknown main item tag 0x0 [ 1269.696926][T29965] cougar 0003:060B:500A.0031: unknown main item tag 0x0 [ 1269.696957][T29965] cougar 0003:060B:500A.0031: unknown main item tag 0x0 [ 1269.696985][T29965] cougar 0003:060B:500A.0031: unknown main item tag 0x0 [ 1269.697013][T29965] cougar 0003:060B:500A.0031: unknown main item tag 0x0 [ 1269.697269][T29965] cougar 0003:060B:500A.0031: unknown main item tag 0x0 [ 1269.697300][T29965] cougar 0003:060B:500A.0031: unknown main item tag 0x0 [ 1269.697328][T29965] cougar 0003:060B:500A.0031: unknown main item tag 0x0 [ 1269.745044][T29965] cougar 0003:060B:500A.0031: unknown main item tag 0x0 [ 1269.799592][T29965] cougar 0003:060B:500A.0031: unexpected long global item [ 1269.800455][T29965] cougar 0003:060B:500A.0031: parse failed [ 1269.800566][T29965] cougar 0003:060B:500A.0031: probe with driver cougar failed with error -22 [ 1269.805713][T29965] hid-sensor-hub 0003:060B:500A.0031: unexpected long global item [ 1269.841387][T29965] hid-sensor-hub 0003:060B:500A.0031: parse failed [ 1269.841509][T29965] hid-sensor-hub 0003:060B:500A.0031: probe with driver hid-sensor-hub failed with error -22 [ 1269.910486][T29965] usb 7-1: USB disconnect, device number 6 [ 1270.206336][T29967] usb 6-1: USB disconnect, device number 44 [ 1270.396803][T25202] wg1 speed is unknown, defaulting to 1000 [ 1271.832997][T25281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1273.390647][T25369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.392887][T25369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.572302][T29965] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1275.736787][T29965] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1275.736823][T29965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.753784][T29967] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1275.773169][T29965] usb 5-1: config 0 descriptor?? [ 1275.783383][T29965] cp210x 5-1:0.0: cp210x converter detected [ 1275.925238][T29967] usb 6-1: Using ep0 maxpacket: 16 [ 1275.927696][T29967] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1275.927799][T29967] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1275.927830][T29967] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1275.929307][T29967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1275.929401][T29967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1275.929426][T29967] usb 6-1: SerialNumber: syz [ 1276.007573][T25421] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1276.249658][T29967] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1276.265285][T29965] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1276.273866][T29965] cp210x 5-1:0.0: GPIO initialisation failed: -524 [ 1276.318956][T29965] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1276.329563][T29967] usb 6-1: USB disconnect, device number 45 [ 1276.448998][T25458] kvm: kvm [25455]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0xffffffffffffffff [ 1276.519010][T23908] usb 5-1: USB disconnect, device number 44 [ 1276.591375][T23908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1276.592260][T23908] cp210x 5-1:0.0: device disconnected [ 1277.490573][T25516] input: syz1 as /devices/virtual/input/input82 [ 1277.866758][T25538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.238623][T25563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.433107][ T37] audit: type=1326 audit(1204.781:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25574 comm="syz.5.20026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8abfc799 code=0x0 [ 1279.119008][T25605] vlan7: entered promiscuous mode [ 1279.119032][T25605] gretap0: entered promiscuous mode [ 1279.119498][T25605] vlan7: entered allmulticast mode [ 1279.119515][T25605] gretap0: entered allmulticast mode [ 1281.760264][T25716] netlink: 'syz.4.20074': attribute type 29 has an invalid length. [ 1281.776729][T25716] netlink: 'syz.4.20074': attribute type 29 has an invalid length. [ 1281.794334][T25716] netlink: 500 bytes leftover after parsing attributes in process `syz.4.20074'. [ 1281.861247][T25716] unsupported nla_type 58 [ 1282.175991][T25737] netlink: 104 bytes leftover after parsing attributes in process `syz.0.20080'. [ 1282.501069][T25748] sctp: [Deprecated]: syz.5.20082 (pid 25748) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1282.501069][T25748] Use struct sctp_sack_info instead [ 1285.318957][T25880] netlink: 104 bytes leftover after parsing attributes in process `syz.0.20126'. [ 1285.989768][T25919] sctp: [Deprecated]: syz.5.20139 (pid 25919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1285.989768][T25919] Use struct sctp_sack_info instead [ 1287.280910][ T68] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1288.082076][T25995] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20165'. [ 1288.846202][T21786] block nbd1: Possible stuck request ffff888026505080: control (read@0,1024B). Runtime 180 seconds [ 1288.846258][T21786] block nbd1: Possible stuck request ffff888026505240: control (read@1024,1024B). Runtime 180 seconds [ 1288.846297][T21786] block nbd1: Possible stuck request ffff888026505400: control (read@2048,1024B). Runtime 180 seconds [ 1288.846336][T21786] block nbd1: Possible stuck request ffff8880265055c0: control (read@3072,1024B). Runtime 180 seconds [ 1290.406539][T26086] wg1 speed is unknown, defaulting to 1000 [ 1292.984626][T26243] loop2: detected capacity change from 0 to 7 [ 1293.009170][ T5883] Dev loop2: unable to read RDB block 7 [ 1293.009220][ T5883] loop2: unable to read partition table [ 1293.009494][ T5883] loop2: partition table beyond EOD, truncated [ 1293.011117][T26243] Dev loop2: unable to read RDB block 7 [ 1293.011177][T26243] loop2: unable to read partition table [ 1293.011571][T26243] loop2: partition table beyond EOD, truncated [ 1293.011610][T26243] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1293.948364][T26279] evm: overlay not supported [ 1294.172144][T26288] loop3: detected capacity change from 0 to 7 [ 1294.303523][T26288] Dev loop3: unable to read RDB block 7 [ 1294.303586][T26288] loop3: unable to read partition table [ 1294.303813][T26288] loop3: partition table beyond EOD, truncated [ 1294.303837][T26288] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1295.453709][T23908] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1295.627185][T23908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.627224][T23908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.627265][T23908] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1295.627293][T23908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.653715][T23908] usb 7-1: config 0 descriptor?? [ 1295.967943][T29961] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1296.128248][T29961] usb 6-1: Using ep0 maxpacket: 16 [ 1296.130825][T29961] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1296.130859][T29961] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1296.130887][T29961] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 1296.134186][T29961] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1296.134218][T29961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1296.134241][T29961] usb 6-1: SerialNumber: syz [ 1296.224335][T23908] hid_parser_main: 498 callbacks suppressed [ 1296.224362][T23908] cm6533_jd 0003:0D8C:0022.0032: unknown main item tag 0x0 [ 1296.224503][T23908] cm6533_jd 0003:0D8C:0022.0032: unknown main item tag 0x0 [ 1296.229780][T23908] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0032/input/input83 [ 1296.273424][T26351] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1296.297045][T29961] cdc_acm 6-1:1.0: skipping garbage [ 1296.298342][T29961] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 1296.450355][T26332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.471600][T23908] cm6533_jd 0003:0D8C:0022.0032: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 1296.530568][T26332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.588534][T29961] usb 6-1: USB disconnect, device number 46 [ 1296.611742][T29967] usb 7-1: USB disconnect, device number 7 [ 1296.938386][T26399] fido_id[26399]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1299.573526][T26510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20299'. [ 1299.638209][T26516] netlink: 104 bytes leftover after parsing attributes in process `syz.5.20301'. [ 1301.854223][T19062] team0: Port device syz_tun removed [ 1303.353703][ T5892] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1303.400763][ T5892] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1303.402648][ T5892] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1303.407996][ T5892] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1303.410587][ T5892] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1303.680468][T21383] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.184077][T29967] wg1 speed is unknown, defaulting to 1000 [ 1304.184126][T29967] sŠz0: Port: 1 Link DOWN [ 1304.201912][T29965] wg1 speed is unknown, defaulting to 1000 [ 1304.488190][T26649] wg1 speed is unknown, defaulting to 1000 [ 1304.643842][T26692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1304.730521][T26695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20358'. [ 1304.947448][T21383] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.954196][T25870] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1305.112227][T25870] usb 7-1: Using ep0 maxpacket: 16 [ 1305.119249][T25870] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.119289][T25870] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1305.119328][T25870] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1305.119354][T25870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.145063][T26710] input: syz0 as /devices/virtual/input/input84 [ 1305.209275][T25870] usb 7-1: config 0 descriptor?? [ 1305.672983][T21383] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.745968][ T5884] Bluetooth: hci3: command tx timeout [ 1305.826488][T25870] nzxt-smart2 0003:1E71:2009.0033: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1306.271077][T29967] usb 7-1: USB disconnect, device number 8 [ 1306.670745][T21383] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.152690][T26825] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1307.971035][ T5884] Bluetooth: hci3: command tx timeout [ 1308.055040][T21383] bridge_slave_1: left allmulticast mode [ 1308.055069][T21383] bridge_slave_1: left promiscuous mode [ 1308.055322][T21383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.172290][T21383] bridge_slave_0: left allmulticast mode [ 1308.172314][T21383] bridge_slave_0: left promiscuous mode [ 1308.172551][T21383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.356123][T26917] netlink: 'syz.5.20402': attribute type 1 has an invalid length. [ 1308.631460][T26931] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.20404'. [ 1310.192075][ T5884] Bluetooth: hci3: command tx timeout [ 1311.281043][T21383] team0: Port device bridge6 removed [ 1311.377612][T21383] bond1 (unregistering): Released all slaves [ 1311.420269][T21383] bond2 (unregistering): Released all slaves [ 1311.529530][T21383] bond0 (unregistering): Released all slaves [ 1311.630081][T26649] chnl_net:caif_netlink_parms(): no params data found [ 1312.450196][ T5884] Bluetooth: hci3: command tx timeout [ 1312.540762][T23908] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1312.773303][T23908] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 1312.773370][T23908] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1312.773391][T23908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1312.773410][T23908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1312.773433][T23908] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1312.773466][T23908] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1312.773484][T23908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.859784][T23908] usb 7-1: config 0 descriptor?? [ 1313.363204][T23908] plantronics 0003:047F:FFFF.0034: reserved main item tag 0xd [ 1313.490836][T23908] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1313.649039][T26649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.666997][T26649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.667284][T26649] bridge_slave_0: entered allmulticast mode [ 1313.682701][T29961] usb 7-1: USB disconnect, device number 9 [ 1313.714273][T26649] bridge_slave_0: entered promiscuous mode [ 1313.743050][T26649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.743185][T26649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.743472][T26649] bridge_slave_1: entered allmulticast mode [ 1313.776508][T27188] fido_id[27188]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1313.791890][T26649] bridge_slave_1: entered promiscuous mode [ 1314.428848][T26649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.525918][T26649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.843631][T26649] team0: Port device team_slave_0 added [ 1314.862652][T26649] team0: Port device team_slave_1 added [ 1315.230014][T26649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.230034][T26649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.230074][T26649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.286679][T26649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.286700][T26649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.286732][T26649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.564162][T27332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20489'. [ 1316.276974][T26649] hsr_slave_0: entered promiscuous mode [ 1316.281964][T26649] hsr_slave_1: entered promiscuous mode [ 1316.285664][T26649] debugfs: 'hsr0' already exists in 'hsr' [ 1316.285695][T26649] Cannot create hsr debugfs directory [ 1317.462681][T27444] netlink: 'syz.6.20508': attribute type 10 has an invalid length. [ 1317.693779][T27444] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.731487][T27444] bond0: (slave team0): Enslaving as an active interface with an up link [ 1319.554624][T21383] hsr_slave_0: left promiscuous mode [ 1319.698362][T21383] hsr_slave_1: left promiscuous mode [ 1319.768015][T21383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1319.918981][T21383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1319.938017][T21383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1320.035584][T21383] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1320.035617][T21383] batman_adv: batadv0: Removing interface: ipvlan2 [ 1320.310974][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1320.684556][T21383] veth1_macvtap: left promiscuous mode [ 1320.684752][T21383] veth0_macvtap: left promiscuous mode [ 1320.689072][T21383] veth0_vlan: left promiscuous mode [ 1321.026706][T21786] block nbd1: Possible stuck request ffff888026505080: control (read@0,1024B). Runtime 210 seconds [ 1321.026761][T21786] block nbd1: Possible stuck request ffff888026505240: control (read@1024,1024B). Runtime 210 seconds [ 1321.026797][T21786] block nbd1: Possible stuck request ffff888026505400: control (read@2048,1024B). Runtime 210 seconds [ 1321.026832][T21786] block nbd1: Possible stuck request ffff8880265055c0: control (read@3072,1024B). Runtime 210 seconds [ 1322.254404][T27629] netlink: 'syz.5.20546': attribute type 3 has an invalid length. [ 1323.644398][T21383] team0 (unregistering): Port device team_slave_1 removed [ 1323.700869][T21383] team0 (unregistering): Port device team_slave_0 removed [ 1323.874358][ T1360] smc: removing ib device sŠz0 [ 1325.082096][ T68] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1326.088333][T26649] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1326.518636][T26649] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1326.704273][T27780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1326.795138][T26649] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1326.893290][T27794] netlink: 'syz.0.20593': attribute type 11 has an invalid length. [ 1326.893317][T27794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20593'. [ 1326.978053][T26649] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1327.582952][T26649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.667280][T26649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.724506][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.724721][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.790192][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.790348][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.184069][T26649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.197087][T27883] batadv_slave_1: entered promiscuous mode [ 1329.222843][T27883] batadv_slave_0: entered promiscuous mode [ 1329.223204][T27877] batadv_slave_0: left promiscuous mode [ 1329.223395][T27877] batadv_slave_1: left promiscuous mode [ 1330.947708][T26649] veth0_vlan: entered promiscuous mode [ 1330.979500][T26649] veth1_vlan: entered promiscuous mode [ 1331.206769][T26649] veth0_macvtap: entered promiscuous mode [ 1331.272939][T26649] veth1_macvtap: entered promiscuous mode [ 1331.382867][T26649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.428467][T26649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.541493][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.572481][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.577746][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.577799][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.867066][T27987] netlink: 27 bytes leftover after parsing attributes in process `syz.6.20641'. [ 1332.733446][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.733470][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.940345][T23908] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1333.061311][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.061334][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.132023][T23908] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1333.132058][T23908] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1333.132099][T23908] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1333.132117][T23908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.443140][T23908] usb 6-1: usb_control_msg returned -32 [ 1333.443193][T23908] usbtmc 6-1:16.0: can't read capabilities [ 1334.096292][T16549] usb 6-1: USB disconnect, device number 47 [ 1334.149875][T29965] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1334.345495][T29965] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.367607][T29965] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1334.367912][T29965] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.367941][T29965] usb 8-1: Product: syz [ 1334.367960][T29965] usb 8-1: Manufacturer: syz [ 1334.367980][T29965] usb 8-1: SerialNumber: syz [ 1334.476597][T29965] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1334.944460][T29965] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1334.944902][T29965] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1334.944955][T29965] usb 8-1: media controller created [ 1334.986406][T29965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1335.991784][T16549] usb 8-1: USB disconnect, device number 2 [ 1336.718023][T28220] nfs: Unexpected value for 'acl' [ 1340.844118][T29965] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1340.920659][T28386] kvm: apic: phys broadcast and lowest prio [ 1341.004437][T29965] usb 8-1: Using ep0 maxpacket: 32 [ 1341.025017][T29965] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.025075][T29965] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1341.025105][T29965] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1341.025137][T29965] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1341.051026][T29965] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1341.051060][T29965] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.051083][T29965] usb 8-1: Product: syz [ 1341.051099][T29965] usb 8-1: Manufacturer: syz [ 1341.051115][T29965] usb 8-1: SerialNumber: syz [ 1341.160669][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1341.252887][T29965] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input86 [ 1341.382782][T29965] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1341.382807][T29965] (id 0x00) [ 1341.627874][T29965] rc_core: IR keymap rc-imon-pad not found [ 1341.627898][T29965] Registered IR keymap rc-empty [ 1341.627982][T29965] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1341.628004][T29965] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1341.721830][T29965] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 1341.727755][T29965] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input87 [ 1341.779408][T29965] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:3> initialized [ 1341.903331][T23908] usb 8-1: USB disconnect, device number 3 [ 1344.412246][T28552] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 1344.795733][T28570] netlink: 72 bytes leftover after parsing attributes in process `syz.0.20790'. [ 1344.795769][T28570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20790'. [ 1344.892554][T28570] netlink: 72 bytes leftover after parsing attributes in process `syz.0.20790'. [ 1344.892589][T28570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20790'. [ 1346.878001][T28674] netlink: 'syz.0.20807': attribute type 1 has an invalid length. [ 1347.166686][T28674] bond5: entered promiscuous mode [ 1347.167314][T28674] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1349.982819][ T5892] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1350.011701][ T5892] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1350.016560][ T5892] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1350.040545][ T5892] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1350.046490][ T5892] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1350.062225][T28840] netlink: 224 bytes leftover after parsing attributes in process `syz.5.20840'. [ 1350.207750][ T157] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.823834][T28870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20846'. [ 1351.012958][ T157] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.588616][ T157] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.170226][T16549] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1352.193206][ T157] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.287884][ T5892] Bluetooth: hci4: command tx timeout [ 1352.341661][T16549] usb 6-1: Using ep0 maxpacket: 16 [ 1352.350314][T16549] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.350352][T16549] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1352.350400][T16549] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1352.350424][T16549] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.419489][T16549] usb 6-1: config 0 descriptor?? [ 1352.964612][T16549] HID 045e:07da: Invalid code 65791 type 1 [ 1353.002287][T16549] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0035/input/input88 [ 1353.138984][T16549] microsoft 0003:045E:07DA.0035: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1353.210736][T21786] block nbd1: Possible stuck request ffff888026505080: control (read@0,1024B). Runtime 240 seconds [ 1353.210788][T21786] block nbd1: Possible stuck request ffff888026505240: control (read@1024,1024B). Runtime 240 seconds [ 1353.212240][T21786] block nbd1: Possible stuck request ffff888026505400: control (read@2048,1024B). Runtime 240 seconds [ 1353.212281][T21786] block nbd1: Possible stuck request ffff8880265055c0: control (read@3072,1024B). Runtime 240 seconds [ 1353.265813][T28836] chnl_net:caif_netlink_parms(): no params data found [ 1353.877575][T16549] usb 6-1: USB disconnect, device number 48 [ 1353.927052][T29043] fido_id[29043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1354.527007][ T5892] Bluetooth: hci4: command tx timeout [ 1354.624652][T29125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20879'. [ 1354.666001][T29125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20879'. [ 1354.666212][ T157] bridge_slave_1: left allmulticast mode [ 1354.666241][ T157] bridge_slave_1: left promiscuous mode [ 1354.666497][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.805256][ T157] bridge_slave_0: left allmulticast mode [ 1354.805279][ T157] bridge_slave_0: left promiscuous mode [ 1354.805586][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.483649][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1356.585434][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.673975][ T157] bond0 (unregistering): (slave team0): Releasing backup interface [ 1356.723201][ T157] bond0 (unregistering): Released all slaves [ 1356.740547][ T5892] Bluetooth: hci4: command tx timeout [ 1356.761091][T28836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.761226][T28836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.761511][T28836] bridge_slave_0: entered allmulticast mode [ 1356.826800][T28836] bridge_slave_0: entered promiscuous mode [ 1356.886847][T28836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.886988][T28836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.887254][T28836] bridge_slave_1: entered allmulticast mode [ 1356.913580][T28836] bridge_slave_1: entered promiscuous mode [ 1357.310655][T25871] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1357.485679][T25871] usb 6-1: Using ep0 maxpacket: 32 [ 1357.504071][T25871] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1357.504154][T25871] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1357.504370][T25871] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1357.504522][T25871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1357.504735][T25871] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1357.504807][T25871] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1357.504922][T25871] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1357.505010][T25871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.566182][T25871] usb 6-1: config 0 descriptor?? [ 1357.883911][T25871] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1357.914052][T25871] usb 6-1: USB disconnect, device number 49 [ 1357.933327][T25871] usblp0: removed [ 1358.272139][T28836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.336412][T28836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.366348][T29284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1358.405527][T25871] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1358.566543][T25871] usb 6-1: Using ep0 maxpacket: 32 [ 1358.569134][T25871] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1358.569163][T25871] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1358.569187][T25871] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1358.569240][T25871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1358.569264][T25871] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1358.569290][T25871] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1358.569335][T25871] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1358.569369][T25871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.576336][T25871] usb 6-1: config 0 descriptor?? [ 1358.849142][T25871] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1358.966495][ T5892] Bluetooth: hci4: command tx timeout [ 1359.098877][T29961] usb 6-1: USB disconnect, device number 50 [ 1359.137105][T29961] usblp0: removed [ 1359.153555][T28836] team0: Port device team_slave_0 added [ 1359.264235][T28836] team0: Port device team_slave_1 added [ 1359.304911][T21387] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1359.497575][T28836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.497594][T28836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.497624][T28836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.700639][ T157] hsr_slave_0: left promiscuous mode [ 1359.747604][ T157] hsr_slave_1: left promiscuous mode [ 1359.780272][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.780307][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.815010][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.815043][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.114549][ T157] veth1_macvtap: left promiscuous mode [ 1360.116723][ T157] veth0_macvtap: left promiscuous mode [ 1360.148195][ T157] veth1_vlan: left promiscuous mode [ 1360.159995][ T157] veth0_vlan: left promiscuous mode [ 1362.577735][ T157] team0 (unregistering): Port device team_slave_1 removed [ 1362.620491][ T157] team0 (unregistering): Port device team_slave_0 removed [ 1363.749000][T28836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.749022][T28836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.749055][T28836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1364.101099][ T37] audit: type=1326 audit(1284.882:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29515 comm="syz.0.20978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37f77ec799 code=0x0 [ 1364.121668][T28836] hsr_slave_0: entered promiscuous mode [ 1364.164258][T28836] hsr_slave_1: entered promiscuous mode [ 1364.177324][T28836] debugfs: 'hsr0' already exists in 'hsr' [ 1364.177346][T28836] Cannot create hsr debugfs directory [ 1364.315916][T29522] netlink: 32 bytes leftover after parsing attributes in process `syz.7.20980'. [ 1364.510467][T29553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20983'. [ 1364.510495][T29553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20983'. [ 1366.074895][T29665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20998'. [ 1366.143211][T28836] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1366.279775][T28836] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1366.327524][T28836] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1366.434695][T28836] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1366.665680][T29698] loop1: detected capacity change from 0 to 4 [ 1366.685889][T29698] Dev loop1: unable to read RDB block 4 [ 1366.685939][T29698] loop1: unable to read partition table [ 1366.686180][T29698] loop1: partition table beyond EOD, truncated [ 1366.692010][T29698] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1366.865797][T16549] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1366.992465][T28836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1367.069026][T16549] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1367.069064][T16549] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1367.069105][T16549] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1367.069130][T16549] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.102074][T16549] usb 6-1: config 0 descriptor?? [ 1367.190827][T16549] hub 6-1:0.0: USB hub found [ 1367.402601][T16549] hub 6-1:0.0: 1 port detected [ 1367.403614][T28836] 8021q: adding VLAN 0 to HW filter on device team0 [ 1367.453067][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.467667][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1367.878331][T21387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.878534][T21387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.057892][T29965] hub 6-1:0.0: activate --> -90 [ 1368.317733][T30087] usb 6-1: USB disconnect, device number 51 [ 1368.882979][T28836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.572824][ T38] INFO: task syz.1.19178:22586 blocked for more than 143 seconds. [ 1369.572855][ T38] Tainted: G L syzkaller #0 [ 1369.572870][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1369.572882][ T38] task:syz.1.19178 state:D stack:25728 pid:22586 tgid:22584 ppid:5882 task_flags:0x400040 flags:0x00080002 [ 1369.572950][ T38] Call Trace: [ 1369.572959][ T38] [ 1369.572976][ T38] __schedule+0x1553/0x5240 [ 1369.573040][ T38] ? trace_irq_disable+0x3b/0x150 [ 1369.573074][ T38] ? __pfx___schedule+0x10/0x10 [ 1369.573120][ T38] rt_mutex_schedule+0x76/0xf0 [ 1369.573150][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1369.573190][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1369.573219][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 1369.573247][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1369.573274][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1369.573321][ T38] ? bdev_open+0xe0/0xcc0 [ 1369.573439][ T38] ? bdev_open+0xe0/0xcc0 [ 1369.573477][ T38] mutex_lock_nested+0x168/0x1d0 [ 1369.573509][ T38] bdev_open+0xe0/0xcc0 [ 1369.573556][ T38] blkdev_open+0x485/0x620 [ 1369.573612][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 1369.573651][ T38] do_dentry_open+0x83d/0x13e0 [ 1369.573822][ T38] vfs_open+0x3b/0x350 [ 1369.573849][ T38] ? path_openat+0x2e2b/0x38a0 [ 1369.573913][ T38] path_openat+0x2e43/0x38a0 [ 1369.573986][ T38] ? __pfx_path_openat+0x10/0x10 [ 1369.574021][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1369.574048][ T38] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1369.574117][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1369.574161][ T38] do_file_open+0x23e/0x4a0 [ 1369.574194][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1369.574231][ T38] ? __pfx_do_file_open+0x10/0x10 [ 1369.574263][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1369.574315][ T38] ? alloc_fd+0x64e/0x6c0 [ 1369.574387][ T38] do_sys_openat2+0x113/0x200 [ 1369.574420][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 1369.574449][ T38] ? exc_page_fault+0x6a/0xc0 [ 1369.574493][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 1369.574530][ T38] __x64_sys_openat+0x138/0x170 [ 1369.574565][ T38] do_syscall_64+0x14d/0xf80 [ 1369.574596][ T38] ? trace_irq_disable+0x3b/0x150 [ 1369.574622][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.574648][ T38] ? clear_bhb_loop+0x40/0x90 [ 1369.574677][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.574701][ T38] RIP: 0033:0x7fcf13d8cfce [ 1369.574727][ T38] RSP: 002b:00007fcf1201db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1369.574762][ T38] RAX: ffffffffffffffda RBX: 00007fcf1201e6c0 RCX: 00007fcf13d8cfce [ 1369.574780][ T38] RDX: 0000000000000000 RSI: 00007fcf1201dc00 RDI: ffffffffffffff9c [ 1369.574894][ T38] RBP: 00007fcf1201dc00 R08: 0000000000000000 R09: 0000000000000000 [ 1369.575001][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1369.575019][ T38] R13: 00007fcf14046038 R14: 00007fcf14045fa0 R15: 00007ffde0225d98 [ 1369.575057][ T38] [ 1369.575106][ T38] [ 1369.575106][ T38] Showing all locks held in the system: [ 1369.575120][ T38] 1 lock held by khungtaskd/38: [ 1369.575134][ T38] #0: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1369.575243][ T38] 2 locks held by getty/5548: [ 1369.575256][ T38] #0: ffff88803621f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1369.575312][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1369.575377][ T38] 3 locks held by syz-executor/5883: [ 1369.575396][ T38] 2 locks held by kworker/u8:12/21387: [ 1369.575410][ T38] #0: ffff888019c44938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1369.575489][ T38] #1: ffffc90006d6fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1369.575562][ T38] 1 lock held by udevd/15529: [ 1369.575575][ T38] #0: ffff88802646b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1369.575643][ T38] 1 lock held by syz.1.19178/22586: [ 1369.575657][ T38] #0: ffff88802646b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1369.575725][ T38] 2 locks held by syz.0.21032/29814: [ 1369.575740][ T38] 9 locks held by syz.7.21034/29821: [ 1369.575753][ T38] 1 lock held by modprobe/29819: [ 1369.575767][ T38] 1 lock held by sed/29820: [ 1369.575780][ T38] [ 1369.575787][ T38] ============================================= [ 1369.575787][ T38] [ 1369.575805][ T38] NMI backtrace for cpu 1 [ 1369.575824][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1369.575855][ T38] Tainted: [L]=SOFTLOCKUP [ 1369.575863][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1369.575877][ T38] Call Trace: [ 1369.575888][ T38] [ 1369.575897][ T38] dump_stack_lvl+0xe8/0x150 [ 1369.575933][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1369.575998][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1369.576036][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1369.576064][ T38] sys_info+0x135/0x170 [ 1369.576097][ T38] watchdog+0xfd9/0x1030 [ 1369.576132][ T38] ? watchdog+0x21a/0x1030 [ 1369.576168][ T38] kthread+0x388/0x470 [ 1369.576193][ T38] ? __pfx_watchdog+0x10/0x10 [ 1369.576218][ T38] ? __pfx_kthread+0x10/0x10 [ 1369.576243][ T38] ret_from_fork+0x51e/0xb90 [ 1369.576278][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1369.576308][ T38] ? __switch_to+0xc7d/0x1450 [ 1369.576354][ T38] ? __pfx_kthread+0x10/0x10 [ 1369.576380][ T38] ret_from_fork_asm+0x1a/0x30 [ 1369.576421][ T38] [ 1369.576447][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1369.576487][ C0] NMI backtrace for cpu 0 [ 1369.576505][ C0] CPU: 0 UID: 0 PID: 29821 Comm: syz.7.21034 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1369.576533][ C0] Tainted: [L]=SOFTLOCKUP [ 1369.576540][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1369.576551][ C0] RIP: 0010:__lock_acquire+0xd15/0x2cf0 [ 1369.576572][ C0] Code: 13 73 6a e8 ed d9 f9 02 41 89 c7 e8 f5 d5 ff ff 45 85 ff 4c 8b 74 24 08 4c 8b 6c 24 10 0f 85 44 03 00 00 83 3d 4b 26 ca 0d 00 <0f> 84 0f 07 00 00 41 f6 45 22 10 75 2c 49 89 ae a8 0b 00 00 41 8b [ 1369.576590][ C0] RSP: 0018:ffffc900057d7148 EFLAGS: 00000002 [ 1369.576606][ C0] RAX: 000000000002000b RBX: 000000008cdedcaa RCX: 0000000000000000 [ 1369.576620][ C0] RDX: 00000000377fac1b RSI: 00000000032979a2 RDI: ffff888024c3db80 [ 1369.576634][ C0] RBP: 3da34a1f8cdedcaa R08: ffffffff8231c978 R09: ffffffff8ddcd780 [ 1369.576649][ C0] R10: dffffc0000000000 R11: fffff940002a5991 R12: ffff888024c3e8a0 [ 1369.576664][ C0] R13: ffff888024c3e8a0 R14: ffff888024c3db80 R15: 0000000000000009 [ 1369.576678][ C0] FS: 00007f4dc87766c0(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 1369.576695][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1369.576709][ C0] CR2: 00007ffe8093ffa0 CR3: 00000000aa424000 CR4: 00000000003526f0 [ 1369.576726][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1369.576738][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1369.576751][ C0] Call Trace: [ 1369.576758][ C0] [ 1369.576769][ C0] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1369.576794][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1369.576824][ C0] ? pfn_valid+0xba/0x480 [ 1369.576919][ C0] lock_acquire+0xf0/0x2e0 [ 1369.576935][ C0] ? page_table_check_set+0x148/0x610 [ 1369.576963][ C0] ? pfn_valid+0xba/0x480 [ 1369.576996][ C0] ? pfn_valid+0xba/0x480 [ 1369.577022][ C0] ? page_table_check_set+0x148/0x610 [ 1369.577049][ C0] page_table_check_set+0x165/0x610 [ 1369.577075][ C0] ? page_table_check_set+0x148/0x610 [ 1369.577105][ C0] copy_pmd_range+0x3ad6/0x7c00 [ 1369.577174][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 1369.577205][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1369.577231][ C0] copy_page_range+0xaf4/0x1120 [ 1369.577262][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1369.577286][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1369.577312][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1369.577337][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1369.577364][ C0] dup_mmap+0xf4c/0x1d50 [ 1369.577424][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1369.577451][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1369.577478][ C0] ? rt_spin_unlock+0x160/0x200 [ 1369.577508][ C0] copy_mm+0x13b/0x4b0 [ 1369.577536][ C0] copy_process+0x18be/0x3d00 [ 1369.577568][ C0] ? copy_process+0x921/0x3d00 [ 1369.577600][ C0] ? __pfx_copy_process+0x10/0x10 [ 1369.577627][ C0] ? futex_wait+0x29a/0x380 [ 1369.577654][ C0] kernel_clone+0x249/0x840 [ 1369.577683][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1369.577715][ C0] ? do_futex+0x333/0x420 [ 1369.577735][ C0] __x64_sys_clone+0x1b6/0x230 [ 1369.577765][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1369.577800][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 1369.577819][ C0] ? __task_pid_nr_ns+0x28/0x470 [ 1369.577843][ C0] do_syscall_64+0x14d/0xf80 [ 1369.577869][ C0] ? trace_irq_disable+0x3b/0x150 [ 1369.577890][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.577909][ C0] ? clear_bhb_loop+0x40/0x90 [ 1369.577931][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.577949][ C0] RIP: 0033:0x7f4dca51c799 [ 1369.577966][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1369.577989][ C0] RSP: 002b:00007f4dc8775fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1369.578008][ C0] RAX: ffffffffffffffda RBX: 00007f4dca795fa0 RCX: 00007f4dca51c799 [ 1369.578023][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000001144280 [ 1369.578036][ C0] RBP: 00007f4dca5b2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1369.578048][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1369.578060][ C0] R13: 00007f4dca796038 R14: 00007f4dca795fa0 R15: 00007ffd7ee0b078 [ 1369.578083][ C0] [ 1369.581036][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1369.581062][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1369.581094][ T38] Tainted: [L]=SOFTLOCKUP [ 1369.581104][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1369.581119][ T38] Call Trace: [ 1369.581129][ T38] [ 1369.581140][ T38] vpanic+0x56c/0xa60 [ 1369.581179][ T38] ? __pfx___schedule+0x10/0x10 [ 1369.581209][ T38] ? __pfx_vpanic+0x10/0x10 [ 1369.581253][ T38] panic+0xc5/0xd0 [ 1369.581285][ T38] ? __pfx_panic+0x10/0x10 [ 1369.581321][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1369.581356][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1369.581387][ T38] watchdog+0x1023/0x1030 [ 1369.581421][ T38] ? watchdog+0x21a/0x1030 [ 1369.581457][ T38] kthread+0x388/0x470 [ 1369.581490][ T38] ? __pfx_watchdog+0x10/0x10 [ 1369.581516][ T38] ? __pfx_kthread+0x10/0x10 [ 1369.581542][ T38] ret_from_fork+0x51e/0xb90 [ 1369.581578][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1369.581608][ T38] ? __switch_to+0xc7d/0x1450 [ 1369.581641][ T38] ? __pfx_kthread+0x10/0x10 [ 1369.581667][ T38] ret_from_fork_asm+0x1a/0x30 [ 1369.581710][ T38] [ 1369.582314][ T38] Kernel Offset: disabled