last executing test programs: 27m49.894318116s ago: executing program 2 (id=116): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 27m48.453299294s ago: executing program 1 (id=120): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a010100"/48, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001"], 0x144}}, 0x20000000) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0b080510"], 0xe) 27m48.206425539s ago: executing program 2 (id=121): pipe2$watch_queue(&(0x7f00000000c0), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r4 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', 0x0) request_key(&(0x7f0000000400)='user\x00', 0x0, 0x0, r4) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r3, 0x5501) 27m46.635919619s ago: executing program 1 (id=123): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$eJzs3MtvVNUfAPDvnbY8fjzaHyIKglbQSHy0tKCycKFGExeamOgCl7UtiAzU0JoIabQYg0tD4t64NPEvcOfGqAtj4lYTl4aEaGNCcTXmvugwnSltaTvS+XyS6ZxzH3PO9957Zs69p/cG0LH60z9JxPaI+DUievPsrQv0529zs9OjN2anR5Oo1d74M8mWuz47PVouWq63rcgcrkRUPkni+WRhuZMXLp4ZqVbHzxf5wamz7w1OXrj41OmzI6fGT42fGz5+/NjRoWefGX56VeJM47q+78OJ/XtfeevKa6Mnrrz9w9dptfYcyOfXx3FbN5oE1ER/utX+qmUa5z26jLrfDXbUpZPuNlaEZemKiHR39WTtvze6Yn7n9cbLH7dec/P6VBBYM+lv0yIteaYGbGBJtLsGQHuUP/Tp+W/5Wqeux3/CtRciNhXpudnp0bmb8XdHpZjes4bl90fEiZl/vkhfsdzrEAAAK5D1bZ5s1v+rxJ7sPR/r2FmMofRFxP8jYldE3BMRuyPi3ohs2fsi4v585VrvEsvvb8gv7P9Urjat8ypJ+3/P1fX95uriL976uorcjiz+nuTk6er4kWKbHI6ezWl+aJEyvn3pl89azavv/6WvtPyyL1hU4Gp3wwW6sZGpkdXaCNcuRezrbhZ/cnMkID0C9kbEvuV99M4ycfrxr/a3Wuj28S9iFcaZal9GPJbv/5loiL+ULD4+ObglquNHBsujYqEff778eqvy7yj+VXDt4AN5Yn7/NyzR+3eSj9f2RLU6fn5y+WVc/u3Tluc0Kz3+NyVvZmPWP72TT/tgZGrq/FDEpuTVLF+e02XTh+fXLfPl8unxf/hQ8/a/q1gnjT/dSulBfCAiHoyIh4q6PxwRByPi0CLxf//iI+8uEn8SSbRv/1+KGGv6/Xfz+O9L6sfrV5DoOvPdN61GzOv3fy1ptf+PxUz2XZvLvv9uY6kVvMPNBwAAAHeFSkRsj6QykKf7t0elMjCQ/w//7vhfpToxOfXEyYn3z43l9wj0RU+lvNLVW3c9dCiZKT4xzw8X14rL+UeL68afd23N8gOjE9WxNscOnW7bre0/yvaf+qOr3bUD1pz7taBzNbb/SpvqAay/pfz+OxeAjenW9r8l/bO1XXUB1pfzf+hczdr/Rw15/X/YmBY+AOj3Jo+sAzYi/X/oXNo/dC7tHzpSfif8lVjJff0rT5Q3C6z8c7Ys+Q7/TkmUT7xYy7K2xvyUqLQ95A5KpC1mfQudf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3ezfAAAA//+5XeWQ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0) 27m45.478631282s ago: executing program 2 (id=124): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_emit_ethernet(0x82, &(0x7f0000005a40)=ANY=[], 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1006, 0xffffff4b) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') 27m43.038170669s ago: executing program 1 (id=127): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_emit_ethernet(0x82, &(0x7f0000005a40)=ANY=[], 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, &(0x7f00000003c0)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 27m43.024211129s ago: executing program 2 (id=128): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 27m41.752011834s ago: executing program 2 (id=129): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x80, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) 27m41.386899051s ago: executing program 1 (id=131): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a010100"/48, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001"], 0x144}}, 0x20000000) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0b080510"], 0xe) 27m40.653371525s ago: executing program 1 (id=132): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x80, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) 27m40.586634436s ago: executing program 2 (id=133): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) connect$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r1, 0xffffffffffffffff, 0x0) 27m39.492442478s ago: executing program 1 (id=135): ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) 27m24.8977988s ago: executing program 32 (id=133): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) connect$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r1, 0xffffffffffffffff, 0x0) 27m23.665931414s ago: executing program 33 (id=135): ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) 26m3.629484773s ago: executing program 0 (id=248): r0 = socket(0x11, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={0x0}}, 0x20000000) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5c, 0x10}) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000080)=0x700, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000063c0)=""/1024, 0x400) 25m58.866901445s ago: executing program 0 (id=250): keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="851606000000da44"], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 25m53.871396242s ago: executing program 0 (id=256): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xe) 25m53.755949725s ago: executing program 0 (id=257): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a010100"/46, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a000107"], 0x144}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x0, 0x201, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 25m52.913279161s ago: executing program 0 (id=258): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0003020200000203"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 25m48.563739925s ago: executing program 0 (id=262): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf5ffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 25m33.412772998s ago: executing program 34 (id=262): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf5ffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 21m19.336005069s ago: executing program 3 (id=643): r0 = socket(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={0x0}}, 0x20000000) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5c, 0x10}) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080)=0x700, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000063c0)=""/1024, 0x400) 21m17.873069587s ago: executing program 3 (id=647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21m17.260482539s ago: executing program 3 (id=648): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) openat$iommufd(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 21m13.444536613s ago: executing program 3 (id=655): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_emit_ethernet(0x82, &(0x7f0000005a40)=ANY=[], 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) preadv(r4, 0x0, 0x0, 0x1006, 0xffffff4b) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, &(0x7f00000003c0)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 21m12.000546531s ago: executing program 3 (id=657): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(0x0, 0x80, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) 21m10.367122252s ago: executing program 3 (id=659): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) connect$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) 20m53.744887635s ago: executing program 35 (id=659): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) connect$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) 2.843355644s ago: executing program 4 (id=4615): read$alg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000000500)=[{0xfffc, 0x1, 0x51, &(0x7f0000000940)="23f038b55203532c39deec170c57fb4f72e76c092284fa21a52f0236ae528420f491fbd5b412213ea292d441c110bb7c5e5d5e0a8ad42d3002f23cbfe2a902ac9e17449ce3d2e815a8d90d3c8171e0dfb1"}], 0x1}) 2.5739604s ago: executing program 5 (id=4618): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) 2.463421902s ago: executing program 5 (id=4620): r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x7c20c34a, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.951995012s ago: executing program 7 (id=4625): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040e05074612010852c942ce0ac1d6099dfe00828ffcba50ff393b7227552b32a7f8a49bd5f8a00f13b8347c5f5a42d334948eec4fe1ecf9a39db033ade0317125c6c7cfddfcead91e78a2b4ad404d751bb183cbca196f7fd8e8e7592781d3cdc723ea8328fc90b70d5aea49c02ee1e9da6d2b71ea705dc99532aa94b862e4945cdc88a2ea2c7a36"], 0x8) 1.688215687s ago: executing program 7 (id=4628): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) 1.54547016s ago: executing program 7 (id=4630): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x9, {0x4, 0x96e, 0x1000, 0xfffffffd}}) 1.366037413s ago: executing program 4 (id=4632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.314939834s ago: executing program 7 (id=4633): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e1e, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.144109487s ago: executing program 5 (id=4634): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x6, 0x2, 0x5}, 'syz1\x00', 0x1b}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 1.144012598s ago: executing program 6 (id=4635): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) 1.075093059s ago: executing program 7 (id=4636): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f00007a8000/0x3000)=nil, 0x3000, 0x9) 1.0449692s ago: executing program 4 (id=4637): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="80fd02000040", 0x42}], 0x1, 0x800, 0x1000401) 876.141803ms ago: executing program 6 (id=4638): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) 868.545053ms ago: executing program 5 (id=4639): socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) close_range(r0, 0xffffffffffffffff, 0x0) 838.894303ms ago: executing program 4 (id=4640): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x4000000000004, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@private, 0x4d6, 0x33}, 0x0, @in6=@private1, 0x81, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 666.129867ms ago: executing program 6 (id=4641): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r0, &(0x7f0000000180)=""/195, 0xc3, 0x100) 646.410107ms ago: executing program 5 (id=4642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000200)={0x10000}) 396.167442ms ago: executing program 6 (id=4643): syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) 347.441693ms ago: executing program 4 (id=4644): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xfffffffffffffff8, &(0x7f0000000300), 0x1}, 0x2) 298.563574ms ago: executing program 6 (id=4645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000080)={0x5}) 216.007595ms ago: executing program 5 (id=4646): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x9, 0x2f, &(0x7f00000002c0)="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"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xc2802, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000fff, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7051a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162a43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x117ee62e) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r2, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) 147.486527ms ago: executing program 4 (id=4647): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x48800) 49.025559ms ago: executing program 7 (id=4648): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="80fd02000040", 0x42}], 0x1, 0x800, 0x1000401) 0s ago: executing program 6 (id=4649): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) kernel console output (not intermixed with test programs): roduct=0101, bcdDevice= 0.40 [ 1674.896992][T15315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.905876][T15315] usb 8-1: Product: syz [ 1674.910782][T15315] usb 8-1: Manufacturer: syz [ 1674.915662][T15315] usb 8-1: SerialNumber: syz [ 1675.372631][T15315] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1675.425517][T15315] usb 8-1: USB disconnect, device number 124 [ 1675.500359][T13484] udevd[13484]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1675.726919][T15311] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 1675.754721][T15311] usb 7-1: USB disconnect, device number 123 [ 1678.488368][T15311] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1678.676714][T15311] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1678.695615][T15311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.704467][T15311] usb 5-1: Product: syz [ 1678.714221][T15311] usb 5-1: Manufacturer: syz [ 1678.720784][T15311] usb 5-1: SerialNumber: syz [ 1678.735800][T15311] usb 5-1: config 0 descriptor?? [ 1678.956693][T15311] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1680.217697][T15311] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1680.262730][T15311] usb 5-1: USB disconnect, device number 123 [ 1680.951888][T21077] tipc: Enabling of bearer rejected, failed to enable media [ 1682.162913][T21099] loop6: detected capacity change from 0 to 7 [ 1682.192097][T21099] Dev loop6: unable to read RDB block 7 [ 1682.210717][T21099] loop6: unable to read partition table [ 1682.224062][T21099] loop6: partition table beyond EOD, truncated [ 1682.238085][T21099] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1682.396268][T21106] loop6: detected capacity change from 0 to 7 [ 1682.404752][T21106] Dev loop6: unable to read RDB block 7 [ 1682.411056][T21106] loop6: unable to read partition table [ 1682.417179][T21106] loop6: partition table beyond EOD, truncated [ 1682.423937][T21106] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1682.798272][T15296] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 1682.809851][T15311] usb 7-1: new full-speed USB device number 124 using dummy_hcd [ 1682.944461][T21112] tipc: Enabled bearer , priority 0 [ 1682.953414][T21112] syzkaller0: entered promiscuous mode [ 1682.961215][T21112] syzkaller0: entered allmulticast mode [ 1682.977847][T21112] tipc: Resetting bearer [ 1682.986985][T21111] tipc: Resetting bearer [ 1682.987083][T15296] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.003275][T15296] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1683.014220][T15311] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1683.015468][T15296] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1683.030870][T15311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.051548][T15311] usb 7-1: Product: syz [ 1683.055771][T15311] usb 7-1: Manufacturer: syz [ 1683.060465][T15296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.060492][T15296] usb 6-1: Product: syz [ 1683.060508][T15296] usb 6-1: Manufacturer: syz [ 1683.060524][T15296] usb 6-1: SerialNumber: syz [ 1683.088480][T15311] usb 7-1: SerialNumber: syz [ 1683.095512][T21111] tipc: Disabling bearer [ 1683.104000][T15311] usb 7-1: config 0 descriptor?? [ 1683.300882][T15296] usb 6-1: 0:2 : does not exist [ 1683.322675][T15296] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1683.339038][T15311] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1683.386781][T15296] usb 6-1: USB disconnect, device number 86 [ 1683.456532][T13423] udevd[13423]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1684.111270][T21129] netlink: 'syz.4.3712': attribute type 1 has an invalid length. [ 1684.165592][T21129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1684.226235][T21133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1684.242979][T21133] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1684.271232][T21133] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1684.423132][T21134] tipc: Enabling of bearer rejected, failed to enable media [ 1684.483021][T21129] gretap1: entered promiscuous mode [ 1684.517610][T21129] bond1: (slave gretap1): making interface the new active one [ 1684.537400][T21129] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1684.577337][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 1684.595744][T15311] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32 [ 1684.653961][T15311] usb 7-1: USB disconnect, device number 124 [ 1685.530855][T21153] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3716'. [ 1686.242683][T21178] tipc: Enabled bearer , priority 0 [ 1686.254966][T21178] syzkaller0: entered promiscuous mode [ 1686.262499][T21178] syzkaller0: entered allmulticast mode [ 1686.287614][T21178] tipc: Resetting bearer [ 1686.297495][T21177] tipc: Resetting bearer [ 1686.325214][T21177] tipc: Disabling bearer [ 1687.158250][T15315] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1687.347964][T21192] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3727'. [ 1687.366085][T15315] usb 7-1: Using ep0 maxpacket: 16 [ 1687.641494][T21194] loop6: detected capacity change from 0 to 7 [ 1687.660070][T21194] Dev loop6: unable to read RDB block 7 [ 1687.676268][T21194] loop6: unable to read partition table [ 1687.694880][T21194] loop6: partition table beyond EOD, truncated [ 1687.720939][T21194] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1688.470009][T21213] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3736'. [ 1689.061544][T21222] tipc: Enabled bearer , priority 0 [ 1689.071695][T21222] syzkaller0: entered promiscuous mode [ 1689.087088][T21222] syzkaller0: entered allmulticast mode [ 1689.115269][T21222] tipc: Resetting bearer [ 1689.132971][T21221] tipc: Resetting bearer [ 1689.169570][T21221] tipc: Disabling bearer [ 1689.188295][T10293] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 1689.373337][T10293] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.401330][T21226] netlink: 'syz.7.3740': attribute type 1 has an invalid length. [ 1689.412922][T10293] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1689.435156][T10293] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1689.445214][T10293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.457299][T10293] usb 6-1: Product: syz [ 1689.462146][T10293] usb 6-1: Manufacturer: syz [ 1689.467092][T10293] usb 6-1: SerialNumber: syz [ 1689.524979][T21226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1689.692277][T21229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1689.705987][T21229] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1689.740633][T10293] usb 6-1: 0:2 : does not exist [ 1689.753489][T21229] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1689.772697][T10293] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1689.845882][T10293] usb 6-1: USB disconnect, device number 87 [ 1689.956659][T21226] gretap1: entered promiscuous mode [ 1689.965335][T13423] udevd[13423]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1690.016063][T21226] bond1: (slave gretap1): making interface the new active one [ 1690.043784][T21226] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1690.608703][T15315] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1690.645779][T15315] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1690.665650][T15315] usb 7-1: can't read configurations, error -71 [ 1691.343255][T15296] usb 8-1: new full-speed USB device number 125 using dummy_hcd [ 1691.557669][T15296] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1691.580653][T15296] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.602381][T15296] usb 8-1: Product: syz [ 1691.606617][T15296] usb 8-1: Manufacturer: syz [ 1691.618670][T15296] usb 8-1: SerialNumber: syz [ 1691.640426][T15296] usb 8-1: config 0 descriptor?? [ 1691.899577][T15296] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1692.299550][T15297] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1692.488269][T15297] usb 5-1: Using ep0 maxpacket: 32 [ 1692.503958][T15297] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1692.512825][T15297] usb 5-1: config 0 has no interface number 0 [ 1692.520273][T15297] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1692.536023][T15297] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1692.552739][T15297] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1692.563915][T15297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.572932][T15297] usb 5-1: Product: syz [ 1692.577587][T15297] usb 5-1: Manufacturer: syz [ 1692.584539][T15297] usb 5-1: SerialNumber: syz [ 1692.599466][T15297] usb 5-1: config 0 descriptor?? [ 1693.248497][T15297] appletouch 5-1:0.85: Failed to request geyser raw mode [ 1693.281628][T15297] appletouch: probe of 5-1:0.85 failed with error -5 [ 1693.310667][T15297] usb 5-1: USB disconnect, device number 124 [ 1693.552643][T15296] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -32 [ 1693.577660][T15296] usb 8-1: USB disconnect, device number 125 [ 1694.138449][T15296] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1694.330972][T15296] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.342163][T15296] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1694.354517][T15296] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1694.366576][T15296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.375195][T15296] usb 5-1: Product: syz [ 1694.379971][T15296] usb 5-1: Manufacturer: syz [ 1694.384687][T15296] usb 5-1: SerialNumber: syz [ 1694.611426][T15296] usb 5-1: 0:2 : does not exist [ 1694.682345][T15296] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1694.739277][T15296] usb 5-1: USB disconnect, device number 125 [ 1694.793939][T13423] udevd[13423]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1696.028377][T15315] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 1696.138363][T10293] usb 8-1: new full-speed USB device number 126 using dummy_hcd [ 1696.253926][T15315] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1696.278201][T15315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.286289][T15315] usb 6-1: Product: syz [ 1696.292695][T15315] usb 6-1: Manufacturer: syz [ 1696.297349][T15315] usb 6-1: SerialNumber: syz [ 1696.309436][T15315] usb 6-1: config 0 descriptor?? [ 1696.335496][T10293] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1696.347652][T10293] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.356927][T10293] usb 8-1: Product: syz [ 1696.361680][T10293] usb 8-1: Manufacturer: syz [ 1696.366776][T10293] usb 8-1: SerialNumber: syz [ 1696.376400][T10293] usb 8-1: config 0 descriptor?? [ 1696.559113][T15315] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1696.597013][T10293] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1696.605625][T10829] Bluetooth: hci1: command tx timeout [ 1696.953719][T21333] netlink: 'syz.6.3776': attribute type 1 has an invalid length. [ 1696.957762][T21334] loop6: detected capacity change from 0 to 7 [ 1696.972543][T13322] Dev loop6: unable to read RDB block 7 [ 1696.983669][T13322] loop6: unable to read partition table [ 1696.995306][T13322] loop6: partition table beyond EOD, truncated [ 1697.000423][T21333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1697.019804][T21334] Dev loop6: unable to read RDB block 7 [ 1697.025528][T21334] loop6: unable to read partition table [ 1697.036270][T21334] loop6: partition table beyond EOD, truncated [ 1697.043265][T21334] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1697.056234][T21336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1697.086740][T21336] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1697.122559][T21336] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1697.223213][T21333] macvlan2: entered promiscuous mode [ 1697.229311][T21333] macvlan2: entered allmulticast mode [ 1697.236696][T21333] bond1: entered promiscuous mode [ 1697.243526][T21333] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1697.259479][T21333] bond1: left promiscuous mode [ 1697.311375][T21339] tipc: Enabled bearer , priority 0 [ 1697.320150][T21338] syzkaller0: entered promiscuous mode [ 1697.325741][T21338] syzkaller0: entered allmulticast mode [ 1697.353059][T21337] tipc: Resetting bearer [ 1697.409585][T21337] tipc: Disabling bearer [ 1697.868495][T11875] usb 7-1: new full-speed USB device number 127 using dummy_hcd [ 1697.999103][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1698.015964][T15315] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 1698.026380][T15315] usb 6-1: USB disconnect, device number 88 [ 1698.036356][T10293] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -32 [ 1698.054682][T10293] usb 8-1: USB disconnect, device number 126 [ 1698.072238][T11875] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.089696][T11875] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1698.102765][T11875] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1698.114820][T11875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.123061][T11875] usb 7-1: Product: syz [ 1698.127268][T11875] usb 7-1: Manufacturer: syz [ 1698.132277][T11875] usb 7-1: SerialNumber: syz [ 1698.351693][T11875] usb 7-1: 0:2 : does not exist [ 1698.364148][T11875] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1698.387908][T11875] usb 7-1: USB disconnect, device number 127 [ 1698.416083][T13423] udevd[13423]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1699.381872][T15296] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1699.493402][T21366] tipc: Enabled bearer , priority 0 [ 1699.501792][T21366] syzkaller0: entered promiscuous mode [ 1699.507387][T21366] syzkaller0: entered allmulticast mode [ 1699.533328][T21365] tipc: Resetting bearer [ 1699.561477][T21365] tipc: Disabling bearer [ 1699.571508][T15296] usb 7-1: Using ep0 maxpacket: 32 [ 1699.581179][T15296] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1699.591510][T15296] usb 7-1: config 0 has no interface number 0 [ 1699.597641][T15296] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1699.610258][T15296] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1699.626400][T15296] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1699.635732][T15296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.645147][T15296] usb 7-1: Product: syz [ 1699.655858][T15296] usb 7-1: Manufacturer: syz [ 1699.661806][T15296] usb 7-1: SerialNumber: syz [ 1699.670068][T15296] usb 7-1: config 0 descriptor?? [ 1700.108304][T10293] usb 8-1: new full-speed USB device number 127 using dummy_hcd [ 1700.225680][T15296] appletouch 7-1:0.85: Failed to request geyser raw mode [ 1700.238494][T15296] appletouch: probe of 7-1:0.85 failed with error -5 [ 1700.255633][T15296] usb 7-1: USB disconnect, device number 2 [ 1700.312765][T10293] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1700.323749][T10293] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.332114][T10293] usb 8-1: Product: syz [ 1700.336314][T10293] usb 8-1: Manufacturer: syz [ 1700.341742][T10293] usb 8-1: SerialNumber: syz [ 1700.352942][T10293] usb 8-1: config 0 descriptor?? [ 1700.571021][T10293] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1700.699725][T21383] loop6: detected capacity change from 0 to 7 [ 1700.706902][T21383] Dev loop6: unable to read RDB block 7 [ 1700.712965][T21383] loop6: unable to read partition table [ 1700.719442][T21383] loop6: partition table beyond EOD, truncated [ 1700.725676][T21383] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1701.302677][T21394] tipc: Enabled bearer , priority 0 [ 1701.318991][T21394] syzkaller0: entered promiscuous mode [ 1701.331463][T21394] syzkaller0: entered allmulticast mode [ 1701.384864][T21393] tipc: Resetting bearer [ 1701.460212][T21393] tipc: Disabling bearer [ 1702.040039][T10293] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -32 [ 1702.050134][T10293] usb 8-1: USB disconnect, device number 127 [ 1702.910681][T21418] loop6: detected capacity change from 0 to 7 [ 1702.917769][T21418] Dev loop6: unable to read RDB block 7 [ 1702.942322][T21418] loop6: unable to read partition table [ 1702.958420][T21418] loop6: partition table beyond EOD, truncated [ 1702.968593][T21418] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1703.153203][T21425] tipc: Enabled bearer , priority 0 [ 1703.163624][T21425] syzkaller0: entered promiscuous mode [ 1703.174014][T21425] syzkaller0: entered allmulticast mode [ 1703.215012][T21423] tipc: Resetting bearer [ 1703.298091][T21423] tipc: Disabling bearer [ 1703.709000][T15296] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 1703.916853][T15296] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1703.935803][T15296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.955903][T15296] usb 6-1: Product: syz [ 1703.963513][T15296] usb 6-1: Manufacturer: syz [ 1703.975367][T15296] usb 6-1: SerialNumber: syz [ 1703.992134][T15296] usb 6-1: config 0 descriptor?? [ 1704.226462][T15296] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1705.657372][T15296] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 1705.686732][T15296] usb 6-1: USB disconnect, device number 89 [ 1706.088410][T10293] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1706.288350][T10293] usb 8-1: Using ep0 maxpacket: 32 [ 1706.308799][T10293] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 1706.323092][T10293] usb 8-1: config 0 has no interface number 0 [ 1706.339602][T10293] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1706.381448][T10293] usb 8-1: config 0 interface 85 has no altsetting 0 [ 1706.407989][T10293] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1706.424430][T10293] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.442612][T10293] usb 8-1: Product: syz [ 1706.456614][T10293] usb 8-1: Manufacturer: syz [ 1706.485864][T10293] usb 8-1: SerialNumber: syz [ 1706.505363][T10293] usb 8-1: config 0 descriptor?? [ 1706.548344][T15296] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 1706.752073][T15296] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.779755][T15296] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1706.792768][T15296] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1706.809216][T15296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.825558][T15296] usb 6-1: Product: syz [ 1706.833295][T15296] usb 6-1: Manufacturer: syz [ 1706.841059][T15296] usb 6-1: SerialNumber: syz [ 1706.905446][T10293] appletouch 8-1:0.85: Failed to read mode from device. [ 1706.937281][T10293] appletouch: probe of 8-1:0.85 failed with error -5 [ 1706.962936][T10293] usb 8-1: USB disconnect, device number 2 [ 1707.078925][T15296] usb 6-1: 0:2 : does not exist [ 1707.096888][T15296] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1707.151240][T15296] usb 6-1: USB disconnect, device number 90 [ 1707.233667][T13423] udevd[13423]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1707.271825][T21482] netlink: 'syz.4.3830': attribute type 1 has an invalid length. [ 1707.301886][T21482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1707.352340][T21482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1707.359570][T21482] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1707.371990][T21482] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1707.400846][T21485] macvlan2: entered promiscuous mode [ 1707.406279][T21485] macvlan2: entered allmulticast mode [ 1707.413403][T21485] bond2: entered promiscuous mode [ 1707.419728][T21485] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1707.431736][T21485] bond2: left promiscuous mode [ 1707.558427][T17047] Bluetooth: hci1: command 0x0406 tx timeout [ 1708.168553][T15312] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1708.363904][T15312] usb 6-1: Using ep0 maxpacket: 32 [ 1708.376636][T15312] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1708.398121][T15312] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1708.420935][T15312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.434004][T15312] usb 6-1: Product: syz [ 1708.440031][T15312] usb 6-1: Manufacturer: syz [ 1708.444691][T15312] usb 6-1: SerialNumber: syz [ 1708.461169][T15312] usb 6-1: config 0 descriptor?? [ 1708.909940][T15312] gs_usb 6-1:0.0: Configuring for 2 interfaces [ 1709.025903][T21508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3839'. [ 1709.081424][T21508] bridge1: port 1(veth3) entered blocking state [ 1709.088046][T21508] bridge1: port 1(veth3) entered disabled state [ 1709.095720][T21508] veth3: entered allmulticast mode [ 1709.103917][T21508] veth3: entered promiscuous mode [ 1709.137207][T21509] bridge1: port 2(veth0_to_bond) entered blocking state [ 1709.179665][T21509] bridge1: port 2(veth0_to_bond) entered disabled state [ 1709.186905][T21509] veth0_to_bond: entered allmulticast mode [ 1709.194426][T21509] veth0_to_bond: entered promiscuous mode [ 1709.326811][T15312] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1709.383159][T15312] gs_usb: probe of 6-1:0.0 failed with error -71 [ 1709.396055][T15312] usb 6-1: USB disconnect, device number 91 [ 1709.498523][T11875] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1709.678506][T11875] usb 7-1: Using ep0 maxpacket: 32 [ 1709.697471][T11875] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1709.706304][T11875] usb 7-1: config 0 has no interface number 0 [ 1709.717281][T11875] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1709.733688][T11875] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1709.748841][T11875] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1709.757951][T11875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.766318][T11875] usb 7-1: Product: syz [ 1709.770652][T11875] usb 7-1: Manufacturer: syz [ 1709.776186][T11875] usb 7-1: SerialNumber: syz [ 1709.789169][T11875] usb 7-1: config 0 descriptor?? [ 1709.888279][T10293] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1710.113448][T11875] appletouch 7-1:0.85: Failed to read mode from device. [ 1710.168501][T10293] usb 8-1: Using ep0 maxpacket: 16 [ 1710.173990][T11875] appletouch: probe of 7-1:0.85 failed with error -5 [ 1710.201860][T11875] usb 7-1: USB disconnect, device number 3 [ 1710.578302][T15297] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 1710.795598][T15297] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1710.851711][T15297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.915527][T15297] usb 5-1: Product: syz [ 1710.965717][T15297] usb 5-1: Manufacturer: syz [ 1710.977745][T15297] usb 5-1: SerialNumber: syz [ 1711.002590][T15297] usb 5-1: config 0 descriptor?? [ 1711.265728][T15297] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1711.390368][T21535] loop6: detected capacity change from 0 to 7 [ 1711.447189][T21535] Dev loop6: unable to read RDB block 7 [ 1711.465524][T21535] loop6: unable to read partition table [ 1711.471644][T21535] loop6: partition table beyond EOD, truncated [ 1711.486488][T21535] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1711.665426][T21543] netlink: 'syz.5.3851': attribute type 1 has an invalid length. [ 1711.699049][T21543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1711.770000][T21543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1711.781604][T21543] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1711.794197][T21543] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1711.862418][T21545] gretap1: entered promiscuous mode [ 1711.989457][T21543] macvlan2: entered promiscuous mode [ 1712.011217][T21543] macvlan2: entered allmulticast mode [ 1712.045254][T21543] bond1: entered promiscuous mode [ 1712.059531][T21543] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1712.081648][T21543] bond1: left promiscuous mode [ 1712.511009][T15297] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1712.532808][T21551] tipc: Enabled bearer , priority 0 [ 1712.538785][T15297] usb 5-1: USB disconnect, device number 126 [ 1712.568039][T21551] tipc: Resetting bearer [ 1712.625182][T21550] tipc: Disabling bearer [ 1712.782063][T21554] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3854'. [ 1713.158478][T15297] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 1713.409046][T15297] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1713.438355][T15297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.467849][T15297] usb 6-1: Product: syz [ 1713.473298][T10293] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1713.485735][T15297] usb 6-1: Manufacturer: syz [ 1713.491930][T15297] usb 6-1: SerialNumber: syz [ 1713.496774][T10293] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1713.506969][T10293] usb 8-1: can't read configurations, error -71 [ 1713.516500][T15297] usb 6-1: config 0 descriptor?? [ 1713.733667][T15297] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1714.165384][T21575] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3863'. [ 1714.261221][T21577] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3864'. [ 1714.311638][T21579] loop6: detected capacity change from 0 to 7 [ 1714.320865][T21579] Dev loop6: unable to read RDB block 7 [ 1714.326502][T21579] loop6: unable to read partition table [ 1714.333091][T21579] loop6: partition table beyond EOD, truncated [ 1714.339854][T21579] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1714.460932][T21581] syzkaller0: entered promiscuous mode [ 1714.466510][T21581] syzkaller0: entered allmulticast mode [ 1715.197581][T15297] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 1715.209261][T15297] usb 6-1: USB disconnect, device number 92 [ 1715.328259][T11875] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1715.466190][T21599] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3873'. [ 1715.530526][T11875] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.545293][T11875] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1715.557418][T21601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3874'. [ 1715.558212][T11875] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1715.575859][T11875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.584595][T11875] usb 8-1: Product: syz [ 1715.594256][T11875] usb 8-1: Manufacturer: syz [ 1715.601516][T11875] usb 8-1: SerialNumber: syz [ 1715.781812][T21605] loop6: detected capacity change from 0 to 7 [ 1715.790450][T13484] Dev loop6: unable to read RDB block 7 [ 1715.796160][T13484] loop6: unable to read partition table [ 1715.803110][T13484] loop6: partition table beyond EOD, truncated [ 1715.825534][T11875] usb 8-1: 0:2 : does not exist [ 1715.837015][T21605] Dev loop6: unable to read RDB block 7 [ 1715.842813][T21605] loop6: unable to read partition table [ 1715.849540][T21605] loop6: partition table beyond EOD, truncated [ 1715.854897][T11875] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1715.855816][T21605] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1715.913400][T11875] usb 8-1: USB disconnect, device number 5 [ 1716.014972][T13423] udevd[13423]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1716.288280][T15315] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1716.488496][T15315] usb 7-1: Using ep0 maxpacket: 32 [ 1716.500395][T15315] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1716.513109][T15315] usb 7-1: config 0 has no interface number 0 [ 1716.519810][T15315] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1716.531170][T15315] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1716.544066][T15315] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1716.555431][T15315] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.566224][T15315] usb 7-1: Product: syz [ 1716.573042][T15315] usb 7-1: Manufacturer: syz [ 1716.577824][T15315] usb 7-1: SerialNumber: syz [ 1716.588217][T15315] usb 7-1: config 0 descriptor?? [ 1717.011472][T15315] appletouch 7-1:0.85: Failed to request geyser raw mode [ 1717.036101][T15315] appletouch: probe of 7-1:0.85 failed with error -5 [ 1717.067634][T15315] usb 7-1: USB disconnect, device number 4 [ 1717.148075][T21620] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3882'. [ 1717.233499][T21622] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3883'. [ 1717.639636][T11875] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 1717.853317][T11875] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1717.871647][T11875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.891830][T11875] usb 6-1: Product: syz [ 1717.901488][T11875] usb 6-1: Manufacturer: syz [ 1717.909223][T11875] usb 6-1: SerialNumber: syz [ 1717.922270][T11875] usb 6-1: config 0 descriptor?? [ 1718.143286][T11875] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1719.587266][T11875] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 1719.621917][T11875] usb 6-1: USB disconnect, device number 93 [ 1719.812661][T21645] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3891'. [ 1719.823418][T21647] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3892'. [ 1720.548354][T10293] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1720.738614][T10293] usb 6-1: Using ep0 maxpacket: 32 [ 1720.771861][T10293] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1720.800875][T10293] usb 6-1: config 0 has no interface number 0 [ 1720.807055][T10293] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1720.851823][T10293] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1720.869090][T10293] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1720.898214][T10293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.906330][T10293] usb 6-1: Product: syz [ 1720.910679][T10293] usb 6-1: Manufacturer: syz [ 1720.915314][T10293] usb 6-1: SerialNumber: syz [ 1720.925822][T10293] usb 6-1: config 0 descriptor?? [ 1721.285629][T21673] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3903'. [ 1721.298292][T15297] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1721.361472][T10293] appletouch 6-1:0.85: Failed to request geyser raw mode [ 1721.375360][T10293] appletouch: probe of 6-1:0.85 failed with error -5 [ 1721.381954][T21675] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3904'. [ 1721.399038][T10293] usb 6-1: USB disconnect, device number 94 [ 1721.488296][T15297] usb 8-1: Using ep0 maxpacket: 32 [ 1721.500751][T15297] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1721.513045][T15297] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1721.522413][T15297] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.530749][T15297] usb 8-1: Product: syz [ 1721.535568][T15297] usb 8-1: Manufacturer: syz [ 1721.545288][T15297] usb 8-1: SerialNumber: syz [ 1721.553011][T15297] usb 8-1: config 0 descriptor?? [ 1721.983776][T15297] gs_usb 8-1:0.0: Configuring for 2 interfaces [ 1722.039163][T15296] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1722.238235][T15296] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1722.257385][T15296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.270011][T15296] usb 7-1: Product: syz [ 1722.283092][T15296] usb 7-1: Manufacturer: syz [ 1722.293772][T15296] usb 7-1: SerialNumber: syz [ 1722.314542][T15296] usb 7-1: config 0 descriptor?? [ 1722.405030][T15297] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1722.460781][T15297] gs_usb: probe of 8-1:0.0 failed with error -71 [ 1722.476575][T15297] usb 8-1: USB disconnect, device number 6 [ 1722.716688][T15296] usb 7-1: Firmware version (0.0) predates our first public release. [ 1722.725206][T15296] usb 7-1: Please update to version 0.2 or newer [ 1722.784647][T15296] usb 7-1: USB disconnect, device number 5 [ 1723.403470][T21700] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3912'. [ 1723.571856][T21706] syzkaller0: entered promiscuous mode [ 1723.615180][T21706] syzkaller0: entered allmulticast mode [ 1725.122669][T21725] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3922'. [ 1725.139286][T15297] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1725.228692][T15321] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1725.352351][T15297] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.362756][T15297] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1725.374901][T15297] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1725.384002][T15297] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.392142][T15297] usb 7-1: Product: syz [ 1725.396328][T15297] usb 7-1: Manufacturer: syz [ 1725.401018][T15297] usb 7-1: SerialNumber: syz [ 1725.409542][T15321] usb 8-1: Using ep0 maxpacket: 32 [ 1725.421113][T15321] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 1725.429572][T11875] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 1725.437287][T15321] usb 8-1: config 0 has no interface number 0 [ 1725.446396][T15321] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1725.458539][T15321] usb 8-1: config 0 interface 85 has no altsetting 0 [ 1725.468450][T15312] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1725.476332][T15321] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1725.491950][T15321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.500030][T15321] usb 8-1: Product: syz [ 1725.504218][T15321] usb 8-1: Manufacturer: syz [ 1725.508888][T15321] usb 8-1: SerialNumber: syz [ 1725.515899][T15321] usb 8-1: config 0 descriptor?? [ 1725.613232][T15297] usb 7-1: 0:2 : does not exist [ 1725.625167][T15297] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1725.646484][T11875] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1725.649743][T15297] usb 7-1: USB disconnect, device number 6 [ 1725.672650][T11875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.687446][T11875] usb 6-1: Product: syz [ 1725.697605][T15312] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1725.710966][T11875] usb 6-1: Manufacturer: syz [ 1725.746616][T15312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.754872][T11875] usb 6-1: SerialNumber: syz [ 1725.779974][T11875] usb 6-1: config 0 descriptor?? [ 1725.785174][T15312] usb 5-1: Product: syz [ 1725.795272][T15312] usb 5-1: Manufacturer: syz [ 1725.808652][T15312] usb 5-1: SerialNumber: syz [ 1725.816823][T15312] usb 5-1: config 0 descriptor?? [ 1726.010444][T11875] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1726.185949][ C1] sd 0:0:1:0: [sda] tag#1342 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1726.196499][ C1] sd 0:0:1:0: [sda] tag#1342 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 1726.300643][T15312] usb 5-1: Firmware version (0.0) predates our first public release. [ 1726.314615][T15312] usb 5-1: Please update to version 0.2 or newer [ 1726.325094][T15321] appletouch 8-1:0.85: Geyser mode initialized. [ 1726.342675][T15321] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input123 [ 1726.434053][T15312] usb 5-1: USB disconnect, device number 127 [ 1726.773690][T15321] usb 8-1: USB disconnect, device number 7 [ 1726.803860][T15321] appletouch 8-1:0.85: input: appletouch disconnected [ 1727.471739][T11875] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1727.502772][T11875] usb 6-1: USB disconnect, device number 95 [ 1727.663445][T21752] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3930'. [ 1727.892524][T21756] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3932'. [ 1728.278364][T11875] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1728.472104][T11875] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1728.504641][T11875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.537372][T11875] usb 7-1: Product: syz [ 1728.553814][T11875] usb 7-1: Manufacturer: syz [ 1728.567768][T11875] usb 7-1: SerialNumber: syz [ 1728.589071][T11875] usb 7-1: config 0 descriptor?? [ 1728.898591][T10293] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1728.929203][ C1] sd 0:0:1:0: [sda] tag#1283 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1728.939725][ C1] sd 0:0:1:0: [sda] tag#1283 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 1729.030773][T11875] usb 7-1: Firmware version (0.0) predates our first public release. [ 1729.057671][T11875] usb 7-1: Please update to version 0.2 or newer [ 1729.088849][T10293] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1729.325967][T11875] usb 7-1: USB disconnect, device number 7 [ 1730.878053][T21785] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3940'. [ 1731.085497][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.213494][T21792] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3942'. [ 1731.497614][T21805] process 'syz.7.3945' launched './file0' with NULL argv: empty string added [ 1733.360462][T21826] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3953'. [ 1734.028246][T15311] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 1734.243966][T15311] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1734.263288][T15311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.272334][T15311] usb 6-1: Product: syz [ 1734.276740][T15311] usb 6-1: Manufacturer: syz [ 1734.282415][T15311] usb 6-1: SerialNumber: syz [ 1734.294246][T15311] usb 6-1: config 0 descriptor?? [ 1734.511495][T15311] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1734.771603][T15321] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1735.037271][T15321] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1735.053198][T15321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.066694][T15321] usb 8-1: Product: syz [ 1735.087005][T15321] usb 8-1: Manufacturer: syz [ 1735.106510][T15321] usb 8-1: SerialNumber: syz [ 1735.139689][T15321] usb 8-1: config 0 descriptor?? [ 1735.495310][T15321] usb 8-1: Firmware version (0.0) predates our first public release. [ 1735.516615][T15321] usb 8-1: Please update to version 0.2 or newer [ 1735.618757][T15321] usb 8-1: USB disconnect, device number 8 [ 1735.936225][T21863] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3965'. [ 1735.996116][T15311] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1736.034010][T15311] usb 6-1: USB disconnect, device number 96 [ 1737.022924][T21889] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3975'. [ 1737.928332][T15297] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 1738.162222][T15297] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1738.195001][T15297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.229564][T15297] usb 6-1: Product: syz [ 1738.242147][T15297] usb 6-1: Manufacturer: syz [ 1738.293194][T15297] usb 6-1: SerialNumber: syz [ 1738.323267][T15297] usb 6-1: config 0 descriptor?? [ 1738.542347][T21912] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3984'. [ 1738.568815][T15297] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1738.832461][T21914] tipc: Enabled bearer , priority 0 [ 1738.881149][T21914] tipc: Resetting bearer [ 1738.959485][T21913] tipc: Disabling bearer [ 1740.009673][T15297] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1740.033016][T15297] usb 6-1: USB disconnect, device number 97 [ 1740.568314][T15311] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1740.674688][T21939] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3994'. [ 1740.738491][T15311] usb 7-1: device descriptor read/64, error -71 [ 1741.028369][T15311] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1741.198358][T15311] usb 7-1: device descriptor read/64, error -71 [ 1741.328828][T15311] usb usb7-port1: attempt power cycle [ 1741.610438][T21953] fuse: Unknown parameter 'group_id00000000000000000000' [ 1741.768271][T15311] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1741.813275][T15311] usb 7-1: device descriptor read/8, error -71 [ 1742.075146][T21961] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4003'. [ 1742.108336][T15311] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1742.149175][T15311] usb 7-1: device descriptor read/8, error -71 [ 1742.278589][T15311] usb usb7-port1: unable to enumerate USB device [ 1742.998700][T17047] Bluetooth: hci1: command 0x0406 tx timeout [ 1743.023415][T21971] loop6: detected capacity change from 0 to 7 [ 1743.031541][T21971] Dev loop6: unable to read RDB block 7 [ 1743.037168][T21971] loop6: unable to read partition table [ 1743.043697][T21971] loop6: partition table beyond EOD, truncated [ 1743.051844][T21971] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1743.322019][T21978] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4010'. [ 1743.413016][T21978] bridge1: port 1(veth3) entered blocking state [ 1743.421787][T21978] bridge1: port 1(veth3) entered disabled state [ 1743.431912][T21978] veth3: entered allmulticast mode [ 1743.439012][T21978] veth3: entered promiscuous mode [ 1743.448237][T15321] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1743.475793][T21982] bridge1: port 2(veth0_to_bond) entered blocking state [ 1743.498387][T21982] bridge1: port 2(veth0_to_bond) entered disabled state [ 1743.515987][T21982] veth0_to_bond: entered allmulticast mode [ 1743.548379][T21982] veth0_to_bond: entered promiscuous mode [ 1743.675422][T15321] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1743.695036][T21978] vlan2: entered allmulticast mode [ 1743.702766][T15321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.712744][T21978] bridge1: port 3(vlan2) entered blocking state [ 1743.720280][T15321] usb 6-1: Product: syz [ 1743.724658][T15321] usb 6-1: Manufacturer: syz [ 1743.730306][T21978] bridge1: port 3(vlan2) entered disabled state [ 1743.736679][T15321] usb 6-1: SerialNumber: syz [ 1743.747337][T21978] vlan2: entered promiscuous mode [ 1743.753150][T15321] usb 6-1: config 0 descriptor?? [ 1744.236493][T15321] usb 6-1: Firmware version (0.0) predates our first public release. [ 1744.255652][T15321] usb 6-1: Please update to version 0.2 or newer [ 1744.336153][T15321] usb 6-1: USB disconnect, device number 98 [ 1745.009959][T15297] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1745.200819][T15297] usb 5-1: Using ep0 maxpacket: 32 [ 1745.209626][T15297] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1745.219450][T15297] usb 5-1: config 0 has no interface number 0 [ 1745.225617][T15297] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1745.236966][T15297] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1745.247843][T15297] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1745.266524][T15297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.275070][T15297] usb 5-1: Product: syz [ 1745.279579][T15297] usb 5-1: Manufacturer: syz [ 1745.284214][T15297] usb 5-1: SerialNumber: syz [ 1745.300583][T15297] usb 5-1: config 0 descriptor?? [ 1745.324756][T22008] tipc: Enabling of bearer rejected, failed to enable media [ 1745.731124][T15297] appletouch 5-1:0.85: Failed to request geyser raw mode [ 1745.738855][T15297] appletouch: probe of 5-1:0.85 failed with error -5 [ 1745.758988][T15297] usb 5-1: USB disconnect, device number 2 [ 1745.942785][T22028] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4024'. [ 1746.020879][T22028] bridge1: port 1(veth3) entered blocking state [ 1746.027630][T22028] bridge1: port 1(veth3) entered disabled state [ 1746.035433][T22028] veth3: entered allmulticast mode [ 1746.042801][T22028] veth3: entered promiscuous mode [ 1746.071986][T22029] bridge1: port 2(veth0_to_bond) entered blocking state [ 1746.082847][T22029] bridge1: port 2(veth0_to_bond) entered disabled state [ 1746.098641][T22029] veth0_to_bond: entered allmulticast mode [ 1746.112723][T22029] veth0_to_bond: entered promiscuous mode [ 1746.184468][T22028] vlan2: entered allmulticast mode [ 1746.190325][T22028] bridge1: port 3(vlan2) entered blocking state [ 1746.197072][T22028] bridge1: port 3(vlan2) entered disabled state [ 1746.205966][T22028] vlan2: entered promiscuous mode [ 1746.836464][T22044] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4030'. [ 1746.866689][T22044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1746.874529][T22044] IPv6: NLM_F_CREATE should be set when creating new route [ 1746.956058][T22048] tipc: Enabling of bearer rejected, failed to enable media [ 1746.978999][T10293] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1747.017562][T10293] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1747.849258][T15321] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1748.099846][T15321] usb 7-1: Using ep0 maxpacket: 32 [ 1748.127277][T15321] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1748.140472][T15321] usb 7-1: config 0 has no interface number 0 [ 1748.146930][T15321] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1748.159640][T15321] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1748.170917][T15321] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1748.180143][T15321] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.189622][T15321] usb 7-1: Product: syz [ 1748.194007][T15321] usb 7-1: Manufacturer: syz [ 1748.207612][T15321] usb 7-1: SerialNumber: syz [ 1748.222660][T15321] usb 7-1: config 0 descriptor?? [ 1748.696280][T15321] appletouch 7-1:0.85: Failed to request geyser raw mode [ 1748.745150][T15321] appletouch: probe of 7-1:0.85 failed with error -5 [ 1748.799481][T15321] usb 7-1: USB disconnect, device number 12 [ 1749.328384][T15296] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1749.435254][T22092] tipc: Enabling of bearer rejected, failed to enable media [ 1749.528313][T15296] usb 5-1: Using ep0 maxpacket: 32 [ 1749.540433][T15296] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1749.559442][T15296] usb 5-1: config 0 has no interface number 0 [ 1749.577552][T15296] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1749.630731][T15296] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1749.655252][T15296] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1749.683376][T15296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.718848][T15296] usb 5-1: Product: syz [ 1749.737124][T15296] usb 5-1: Manufacturer: syz [ 1749.755591][T15296] usb 5-1: SerialNumber: syz [ 1749.772681][T15296] usb 5-1: config 0 descriptor?? [ 1750.233389][T15296] appletouch 5-1:0.85: Geyser mode initialized. [ 1750.262311][T15296] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input126 [ 1750.493741][T15296] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1750.571319][T15296] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1750.610069][T15321] usb 5-1: USB disconnect, device number 3 [ 1750.767496][T15321] appletouch 5-1:0.85: input: appletouch disconnected [ 1751.188236][T15296] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1751.448461][T15296] usb 7-1: Using ep0 maxpacket: 32 [ 1751.457489][T15296] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1751.468102][T15296] usb 7-1: config 0 has no interface number 0 [ 1751.479992][T15296] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1751.492201][T15296] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1751.502870][T15296] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1751.513351][T15296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.522963][T15296] usb 7-1: Product: syz [ 1751.528042][T15296] usb 7-1: Manufacturer: syz [ 1751.533720][T15296] usb 7-1: SerialNumber: syz [ 1751.546774][T15296] usb 7-1: config 0 descriptor?? [ 1751.997583][T15296] appletouch 7-1:0.85: Geyser mode initialized. [ 1752.012285][T15296] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input127 [ 1752.304445][T22131] tipc: Enabling of bearer rejected, failed to enable media [ 1752.321353][T15296] usb 7-1: USB disconnect, device number 13 [ 1752.321501][ C0] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1752.464951][T15296] appletouch 7-1:0.85: input: appletouch disconnected [ 1752.980364][T22150] tipc: Enabled bearer , priority 0 [ 1752.998896][T22150] syzkaller0: entered promiscuous mode [ 1753.046083][T22150] syzkaller0: entered allmulticast mode [ 1753.176352][T22156] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4059'. [ 1753.259818][T22157] bridge2: port 1(veth5) entered blocking state [ 1753.266445][T22157] bridge2: port 1(veth5) entered disabled state [ 1753.273147][T22157] veth5: entered allmulticast mode [ 1753.280702][T22157] veth5: entered promiscuous mode [ 1753.315388][T22154] tipc: Resetting bearer [ 1753.327808][T22154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.336503][T22154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.423438][T22149] tipc: Resetting bearer [ 1753.486424][T22149] tipc: Disabling bearer [ 1753.762016][T22166] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4063'. [ 1753.839104][T22166] bridge2: port 1(veth5) entered blocking state [ 1753.850423][T22166] bridge2: port 1(veth5) entered disabled state [ 1753.857007][T22166] veth5: entered allmulticast mode [ 1753.868012][T22166] veth5: entered promiscuous mode [ 1753.928354][T15296] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1754.109676][T15296] usb 7-1: Using ep0 maxpacket: 32 [ 1754.140019][T15296] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1754.180627][T15296] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1754.208418][T15296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.236849][T15296] usb 7-1: Product: syz [ 1754.254640][T15296] usb 7-1: Manufacturer: syz [ 1754.269681][T15296] usb 7-1: SerialNumber: syz [ 1754.302834][T15296] usb 7-1: config 0 descriptor?? [ 1754.378307][T22173] tipc: Enabling of bearer rejected, failed to enable media [ 1754.569187][T10293] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 1754.740408][T15296] gs_usb 7-1:0.0: Configuring for 183 interfaces [ 1754.746992][T15296] gs_usb 7-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1754.763946][T15296] gs_usb: probe of 7-1:0.0 failed with error -22 [ 1754.775150][T10293] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1754.810897][T10293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.820067][T10293] usb 6-1: Product: syz [ 1754.824319][T10293] usb 6-1: Manufacturer: syz [ 1754.830699][T10293] usb 6-1: SerialNumber: syz [ 1754.847325][T10293] usb 6-1: config 0 descriptor?? [ 1755.069710][T10293] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1755.318759][T15296] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1755.528321][T15296] usb 8-1: Using ep0 maxpacket: 32 [ 1755.536451][T15296] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1755.549264][T15296] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1755.559410][T15296] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1755.567660][T15296] usb 8-1: Product: syz [ 1755.572064][T15296] usb 8-1: Manufacturer: syz [ 1755.576769][T15296] usb 8-1: SerialNumber: syz [ 1755.594255][T15296] usb 8-1: config 0 descriptor?? [ 1755.600323][T22193] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1755.609192][T15296] hub 8-1:0.0: bad descriptor, ignoring hub [ 1755.615163][T15296] hub: probe of 8-1:0.0 failed with error -5 [ 1756.093432][T22201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4075'. [ 1756.149115][T22201] bridge2: port 1(veth5) entered blocking state [ 1756.155586][T22201] bridge2: port 1(veth5) entered disabled state [ 1756.162139][T22201] veth5: entered allmulticast mode [ 1756.168931][T22201] veth5: entered promiscuous mode [ 1756.211303][T22201] vlan3: entered allmulticast mode [ 1756.216751][T22201] bridge2: port 2(vlan3) entered blocking state [ 1756.224410][T22201] bridge2: port 2(vlan3) entered disabled state [ 1756.233762][T22201] vlan3: entered promiscuous mode [ 1756.481908][T22207] tipc: Enabling of bearer rejected, failed to enable media [ 1756.493316][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1756.511351][T10293] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 1756.534997][T10293] usb 6-1: USB disconnect, device number 99 [ 1756.687295][T11875] usb 7-1: USB disconnect, device number 14 [ 1756.863581][T22220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4080'. [ 1756.873602][T22220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1756.880948][T22220] IPv6: NLM_F_CREATE should be set when creating new route [ 1758.296389][T22239] tipc: Enabling of bearer rejected, failed to enable media [ 1758.317314][T22239] syzkaller0: entered promiscuous mode [ 1758.329673][T22239] syzkaller0: entered allmulticast mode [ 1758.350736][T22239] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1758.775048][T22242] tipc: Enabling of bearer rejected, failed to enable media [ 1758.804203][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4089'. [ 1759.488477][T15297] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1759.683168][T15297] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1759.692477][T15297] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.700715][T15297] usb 7-1: Product: syz [ 1759.704918][T15297] usb 7-1: Manufacturer: syz [ 1759.709682][T15297] usb 7-1: SerialNumber: syz [ 1759.717240][T15297] usb 7-1: config 0 descriptor?? [ 1759.929896][T15297] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1760.078708][T15311] usb 8-1: USB disconnect, device number 9 [ 1760.249396][T22274] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4098'. [ 1760.448827][T22279] tipc: Enabling of bearer rejected, failed to enable media [ 1761.418361][T15297] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32 [ 1761.458606][T15297] usb 7-1: USB disconnect, device number 15 [ 1761.788093][T22312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4107'. [ 1763.111556][T22322] tipc: Enabling of bearer rejected, failed to enable media [ 1763.197376][T22325] netlink: 'syz.6.4112': attribute type 1 has an invalid length. [ 1763.353140][T22325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1763.541645][T22333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1763.563600][T22333] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1763.576575][T22333] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1763.631895][T22335] gretap1: entered promiscuous mode [ 1763.671556][T22335] bond2: (slave gretap1): making interface the new active one [ 1763.691739][T22335] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1763.731291][T22325] macvlan2: entered promiscuous mode [ 1763.766873][T22325] macvlan2: entered allmulticast mode [ 1763.801238][T22325] bond2: entered promiscuous mode [ 1763.836919][T22325] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1763.876882][T22325] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1763.916108][T22325] bond2: left promiscuous mode [ 1764.090214][T22351] netlink: 'syz.7.4119': attribute type 1 has an invalid length. [ 1764.141381][T22351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1764.158510][T15296] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1764.186270][T22354] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1764.193712][T22354] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1764.207141][T22354] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1764.249573][T22351] macvlan2: entered promiscuous mode [ 1764.254921][T22351] macvlan2: entered allmulticast mode [ 1764.263110][T22351] bond2: entered promiscuous mode [ 1764.269135][T22351] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1764.279824][T22351] bond2: left promiscuous mode [ 1764.328390][T15297] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1764.370261][T15296] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1764.379195][T15296] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1764.396413][T15296] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1764.407589][T15296] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1764.433896][T15296] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1764.464077][T15296] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1764.475764][T15296] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1764.484485][T15296] usb 5-1: Product: syz [ 1764.489265][T15296] usb 5-1: Manufacturer: syz [ 1764.503190][T15296] cdc_wdm 5-1:1.0: skipping garbage [ 1764.510255][T15296] cdc_wdm 5-1:1.0: skipping garbage [ 1764.517100][T15296] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1764.524462][T15296] cdc_wdm 5-1:1.0: Unknown control protocol [ 1764.536429][T15297] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1764.552560][T15297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.572092][T15297] usb 6-1: Product: syz [ 1764.582116][T15297] usb 6-1: Manufacturer: syz [ 1764.592411][T15297] usb 6-1: SerialNumber: syz [ 1764.612258][T15297] usb 6-1: config 0 descriptor?? [ 1764.979828][T15297] usb 6-1: Firmware version (0.0) predates our first public release. [ 1764.996445][T15297] usb 6-1: Please update to version 0.2 or newer [ 1765.133886][T15297] usb 6-1: USB disconnect, device number 100 [ 1765.465894][T22371] tipc: Enabling of bearer rejected, failed to enable media [ 1766.454369][T22388] tipc: Enabling of bearer rejected, failed to enable media [ 1766.476441][T22388] syzkaller0: entered promiscuous mode [ 1766.483518][T22388] syzkaller0: entered allmulticast mode [ 1766.508939][T22388] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1766.953569][T15297] usb 5-1: USB disconnect, device number 4 [ 1767.328446][T15296] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1767.536182][T15296] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1767.550272][T15296] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.559306][T15296] usb 8-1: Product: syz [ 1767.563652][T15296] usb 8-1: Manufacturer: syz [ 1767.572623][T15296] usb 8-1: SerialNumber: syz [ 1767.580672][T15296] usb 8-1: config 0 descriptor?? [ 1767.689508][T15297] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1767.712719][T15297] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1767.793757][T15296] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1767.997853][T22410] tipc: Enabling of bearer rejected, failed to enable media [ 1769.261275][T15296] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 1769.285087][T15296] usb 8-1: USB disconnect, device number 10 [ 1769.697945][T22432] loop6: detected capacity change from 0 to 7 [ 1769.727855][T13423] Dev loop6: unable to read RDB block 7 [ 1769.737276][T13423] loop6: unable to read partition table [ 1769.747244][T13423] loop6: partition table beyond EOD, truncated [ 1769.800025][T22432] Dev loop6: unable to read RDB block 7 [ 1769.806966][T22432] loop6: unable to read partition table [ 1769.821102][T22432] loop6: partition table beyond EOD, truncated [ 1769.834930][T22432] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1769.957409][T22435] netlink: 'syz.7.4141': attribute type 1 has an invalid length. [ 1770.149342][T22435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1770.370778][T22439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1770.377918][T22439] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1770.402863][T22439] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1770.570647][T22435] macvlan2: entered promiscuous mode [ 1770.583376][T22435] macvlan2: entered allmulticast mode [ 1770.629820][T22435] bond3: entered promiscuous mode [ 1770.642922][T22435] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1770.666556][T22435] bond3: left promiscuous mode [ 1770.898278][T10293] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1771.125647][T10293] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.168178][T10293] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1771.201734][T10293] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1771.216489][T10293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.227265][T22451] loop6: detected capacity change from 0 to 7 [ 1771.244461][T10293] usb 5-1: Product: syz [ 1771.246238][T22451] Dev loop6: unable to read RDB block 7 [ 1771.263091][T22451] loop6: unable to read partition table [ 1771.268218][T10293] usb 5-1: Manufacturer: syz [ 1771.269606][T22451] loop6: partition table beyond EOD, [ 1771.273374][T10293] usb 5-1: SerialNumber: syz [ 1771.286045][T22451] truncated [ 1771.289391][T22451] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1771.522856][T10293] usb 5-1: 0:2 : does not exist [ 1771.534850][T10293] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1771.577830][T10293] usb 5-1: USB disconnect, device number 5 [ 1771.655572][T22456] netlink: 'syz.5.4149': attribute type 1 has an invalid length. [ 1771.657106][T13484] udevd[13484]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1771.733344][T22456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1771.771822][T22460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1771.784656][T22460] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1771.797075][T22460] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1771.878055][T22456] macvlan2: entered promiscuous mode [ 1771.885051][T22456] macvlan2: entered allmulticast mode [ 1771.892277][T22456] bond2: entered promiscuous mode [ 1771.897941][T22456] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1771.909975][T22456] bond2: left promiscuous mode [ 1772.138544][T15312] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1772.344362][T15312] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1772.385947][T15312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.441460][T15312] usb 7-1: Product: syz [ 1772.455107][T15312] usb 7-1: Manufacturer: syz [ 1772.493183][T15312] usb 7-1: SerialNumber: syz [ 1772.539971][T15312] usb 7-1: config 0 descriptor?? [ 1772.631504][T22472] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4154'. [ 1772.779217][T15312] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1773.296942][T22484] tipc: Enabled bearer , priority 0 [ 1773.305944][T22484] syzkaller0: entered promiscuous mode [ 1773.314733][T22484] syzkaller0: entered allmulticast mode [ 1773.397717][T22484] tipc: Resetting bearer [ 1773.424500][T22483] tipc: Resetting bearer [ 1773.466781][T22483] tipc: Disabling bearer [ 1774.016647][T22490] netlink: 'syz.7.4160': attribute type 1 has an invalid length. [ 1774.140897][T22490] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1774.229911][T15312] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 1774.243612][T22493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1774.250168][T15312] usb 7-1: USB disconnect, device number 16 [ 1774.286541][T22493] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1774.314446][T22493] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1774.364900][T22490] macvlan2: entered promiscuous mode [ 1774.372686][T22490] macvlan2: entered allmulticast mode [ 1774.379837][T22490] bond4: entered promiscuous mode [ 1774.395169][T22490] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1774.437307][T22490] bond4: left promiscuous mode [ 1774.818297][T15297] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1774.873481][T22503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4164'. [ 1775.022428][T15297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.034570][T15297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1775.056458][T15297] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1775.076160][T15297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.094193][T15297] usb 5-1: Product: syz [ 1775.100036][T15297] usb 5-1: Manufacturer: syz [ 1775.123066][T15297] usb 5-1: SerialNumber: syz [ 1775.241582][T22511] netlink: 'syz.6.4167': attribute type 1 has an invalid length. [ 1775.281187][T22511] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1775.357945][T15297] usb 5-1: 0:2 : does not exist [ 1775.376126][T15297] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1775.403031][T22511] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1775.425101][T22511] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1775.427369][T15297] usb 5-1: USB disconnect, device number 6 [ 1775.444595][T22511] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1775.530934][T13423] udevd[13423]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1775.622314][T22517] macvlan2: entered promiscuous mode [ 1775.651805][T22517] macvlan2: entered allmulticast mode [ 1775.661479][T22517] bond3: entered promiscuous mode [ 1775.679154][T22517] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1775.691420][T22517] bond3: left promiscuous mode [ 1775.949095][T22527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4174'. [ 1776.419974][T10293] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1776.583259][T22548] loop6: detected capacity change from 0 to 7 [ 1776.592075][T13423] Dev loop6: unable to read RDB block 7 [ 1776.597963][T13423] loop6: unable to read partition table [ 1776.606628][T13423] loop6: partition table beyond EOD, truncated [ 1776.630347][T22548] Dev loop6: unable to read RDB block 7 [ 1776.636402][T22548] loop6: unable to read partition table [ 1776.647930][T10293] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1776.659482][T22548] loop6: partition table beyond EOD, truncated [ 1776.674896][T22548] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1776.685385][T10293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.716408][T10293] usb 5-1: Product: syz [ 1776.724981][T10293] usb 5-1: Manufacturer: syz [ 1776.741396][T10293] usb 5-1: SerialNumber: syz [ 1776.759685][T10293] usb 5-1: config 0 descriptor?? [ 1776.981779][T10293] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1777.278261][T15312] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 1777.490447][T15312] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.576042][T15312] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1777.651419][T15312] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1777.665186][T15312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.683608][T15312] usb 8-1: Product: syz [ 1777.687949][T15312] usb 8-1: Manufacturer: syz [ 1777.696897][T15312] usb 8-1: SerialNumber: syz [ 1777.959329][T15312] usb 8-1: 0:2 : does not exist [ 1778.003089][T15312] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1778.079179][T15312] usb 8-1: USB disconnect, device number 11 [ 1778.180341][T13484] udevd[13484]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1778.368426][T15297] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1778.449248][T10293] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1778.488804][T10293] usb 5-1: USB disconnect, device number 7 [ 1778.593960][T15297] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1778.628187][T15297] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.656707][T15297] usb 7-1: Product: syz [ 1778.672972][T15297] usb 7-1: Manufacturer: syz [ 1778.677758][T15297] usb 7-1: SerialNumber: syz [ 1778.701545][T15297] usb 7-1: config 0 descriptor?? [ 1778.917337][T15297] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1780.391737][T15297] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32 [ 1780.427041][T15297] usb 7-1: USB disconnect, device number 17 [ 1780.499636][T22594] tipc: Enabled bearer , priority 0 [ 1780.513759][T22594] syzkaller0: entered promiscuous mode [ 1780.528402][T22594] syzkaller0: entered allmulticast mode [ 1780.630265][T22594] tipc: Resetting bearer [ 1780.655608][T22593] tipc: Resetting bearer [ 1780.696684][T22593] tipc: Disabling bearer [ 1780.841897][T15312] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 1781.050727][T15312] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1781.063985][T15312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.072258][T15312] usb 6-1: Product: syz [ 1781.076561][T15312] usb 6-1: Manufacturer: syz [ 1781.085756][T15312] usb 6-1: SerialNumber: syz [ 1781.108266][T15312] usb 6-1: config 0 descriptor?? [ 1781.333845][T15312] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1782.503735][T22620] syzkaller0: entered promiscuous mode [ 1782.514549][T22620] syzkaller0: entered allmulticast mode [ 1782.783909][T15312] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1782.820837][T15312] usb 6-1: USB disconnect, device number 101 [ 1783.338377][T15311] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1783.540319][T15311] usb 5-1: Using ep0 maxpacket: 32 [ 1783.647409][T15311] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1783.691913][T15311] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1783.705687][T15311] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1783.724586][T15312] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1783.740058][T15311] usb 5-1: Product: syz [ 1783.744620][T15311] usb 5-1: Manufacturer: syz [ 1783.751045][T15311] usb 5-1: SerialNumber: syz [ 1783.767480][T15312] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1783.779102][T15311] usb 5-1: config 0 descriptor?? [ 1783.802327][T22633] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1783.820262][T15311] hub 5-1:0.0: bad descriptor, ignoring hub [ 1783.845871][T15311] hub: probe of 5-1:0.0 failed with error -5 [ 1784.033590][T22641] fido_id[22641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1784.640122][T22633] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 1784.897380][T22633] usb 5-1: device firmware changed [ 1784.929983][T15311] usb 5-1: USB disconnect, device number 8 [ 1785.149048][T15311] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1785.368297][T15311] usb 5-1: Using ep0 maxpacket: 32 [ 1785.375718][T15311] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1785.395709][T15311] usb 5-1: string descriptor 0 read error: -22 [ 1785.402388][T15311] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1785.428258][T15311] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1785.445011][T15311] usb 5-1: config 0 descriptor?? [ 1785.451142][T22647] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1785.462627][T15311] hub 5-1:0.0: bad descriptor, ignoring hub [ 1785.470363][T15311] hub: probe of 5-1:0.0 failed with error -5 [ 1785.808607][T10293] usb 5-1: USB disconnect, device number 9 [ 1785.868244][T15297] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1786.054283][T15297] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1786.064598][T15297] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1786.076560][T15297] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1786.085730][T15297] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1786.097059][T15297] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1786.110666][T15297] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1786.119834][T15297] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1786.127874][T15297] usb 8-1: Product: syz [ 1786.132141][T15297] usb 8-1: Manufacturer: syz [ 1786.142926][T15297] cdc_wdm 8-1:1.0: skipping garbage [ 1786.148301][T15297] cdc_wdm 8-1:1.0: skipping garbage [ 1786.155643][T15297] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1786.161670][T15297] cdc_wdm 8-1:1.0: Unknown control protocol [ 1786.289119][T22672] loop6: detected capacity change from 0 to 7 [ 1786.298064][T22672] Dev loop6: unable to read RDB block 7 [ 1786.305223][T22672] loop6: unable to read partition table [ 1786.312566][T22672] loop6: partition table beyond EOD, truncated [ 1786.325055][T22672] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1786.338319][T15311] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1786.420919][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1786.427643][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1786.434050][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1786.440707][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1786.447167][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1786.450391][T15312] usb 8-1: USB disconnect, device number 12 [ 1786.453787][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1786.465821][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1786.553149][T15311] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1786.568504][T15311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.576742][T15311] usb 7-1: Product: syz [ 1786.585865][T15311] usb 7-1: Manufacturer: syz [ 1786.592535][T15311] usb 7-1: SerialNumber: syz [ 1786.609181][T15311] usb 7-1: config 0 descriptor?? [ 1786.849586][ C1] sd 0:0:1:0: [sda] tag#1329 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1786.860136][ C1] sd 0:0:1:0: [sda] tag#1329 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 1786.871365][T15311] usb 7-1: Firmware version (0.0) predates our first public release. [ 1786.895762][T15311] usb 7-1: Please update to version 0.2 or newer [ 1786.979294][T15311] usb 7-1: USB disconnect, device number 18 [ 1787.262684][T22692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4233'. [ 1787.351119][T10293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1787.378742][T10293] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1787.637272][T22698] vlan3: entered allmulticast mode [ 1787.674482][T22698] veth0_to_bond: entered allmulticast mode [ 1787.707842][T22700] tipc: Enabled bearer , priority 0 [ 1787.749323][T22700] syzkaller0: entered promiscuous mode [ 1787.775391][T22700] syzkaller0: entered allmulticast mode [ 1787.924198][T22699] tipc: Resetting bearer [ 1787.957469][T22699] tipc: Disabling bearer [ 1788.098717][T15312] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1788.288306][T15312] usb 6-1: Using ep0 maxpacket: 32 [ 1788.300112][T15312] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1788.321594][T15312] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1788.345933][T15312] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1788.375484][T15312] usb 6-1: Product: syz [ 1788.386403][T15312] usb 6-1: Manufacturer: syz [ 1788.397721][T15312] usb 6-1: SerialNumber: syz [ 1788.413210][T15312] usb 6-1: config 0 descriptor?? [ 1788.423694][T22704] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1788.435270][T15312] hub 6-1:0.0: bad descriptor, ignoring hub [ 1788.445803][T15312] hub: probe of 6-1:0.0 failed with error -5 [ 1788.465844][T22715] loop6: detected capacity change from 0 to 7 [ 1788.508343][T22715] Dev loop6: unable to read RDB block 7 [ 1788.558929][T22715] loop6: unable to read partition table [ 1788.584490][T22715] loop6: partition table beyond EOD, truncated [ 1788.630443][T22715] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1788.999516][T22726] syzkaller0: entered promiscuous mode [ 1789.010630][T22726] syzkaller0: entered allmulticast mode [ 1789.198395][T22704] usb 6-1: reset high-speed USB device number 102 using dummy_hcd [ 1789.430555][T22704] usb 6-1: device firmware changed [ 1789.436309][T15312] usb 6-1: USB disconnect, device number 102 [ 1789.678370][T15312] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1789.914889][T15321] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1789.937924][T15321] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1789.949150][T15312] usb 6-1: Using ep0 maxpacket: 32 [ 1789.959650][T15312] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1789.977815][T15312] usb 6-1: string descriptor 0 read error: -22 [ 1789.984653][T15312] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1790.002386][T15312] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1790.023332][T15312] usb 6-1: config 0 descriptor?? [ 1790.070718][T22720] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1790.087654][T15312] hub 6-1:0.0: bad descriptor, ignoring hub [ 1790.107577][T15312] hub: probe of 6-1:0.0 failed with error -5 [ 1790.468599][T15296] usb 6-1: USB disconnect, device number 103 [ 1791.080801][T22751] loop6: detected capacity change from 0 to 7 [ 1791.132367][T17788] Dev loop6: unable to read RDB block 7 [ 1791.138529][T17788] loop6: unable to read partition table [ 1791.144462][T17788] loop6: partition table beyond EOD, truncated [ 1791.159225][T22751] Dev loop6: unable to read RDB block 7 [ 1791.164969][T22751] loop6: unable to read partition table [ 1791.194346][T22751] loop6: partition table beyond EOD, truncated [ 1791.236377][T22751] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1791.297186][T22753] tipc: Enabled bearer , priority 0 [ 1791.323644][T22753] syzkaller0: entered promiscuous mode [ 1791.336589][T22753] syzkaller0: entered allmulticast mode [ 1791.559255][T22756] tipc: Resetting bearer [ 1791.615358][T22752] tipc: Resetting bearer [ 1791.644840][T22752] tipc: Disabling bearer [ 1792.208533][T15296] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1792.403989][T15296] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1792.430591][T15296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.459038][T15296] usb 7-1: Product: syz [ 1792.476181][T15296] usb 7-1: Manufacturer: syz [ 1792.486035][T15296] usb 7-1: SerialNumber: syz [ 1792.510104][T15296] usb 7-1: config 0 descriptor?? [ 1792.523434][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.786733][ C1] sd 0:0:1:0: [sda] tag#1334 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1792.797355][ C1] sd 0:0:1:0: [sda] tag#1334 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 1792.815088][T15296] usb 7-1: Firmware version (0.0) predates our first public release. [ 1792.838431][T15296] usb 7-1: Please update to version 0.2 or newer [ 1792.890359][T22783] syzkaller0: entered promiscuous mode [ 1792.901251][T15296] usb 7-1: USB disconnect, device number 19 [ 1792.918296][T22783] syzkaller0: entered allmulticast mode [ 1793.095368][T22790] netlink: 'syz.5.4267': attribute type 1 has an invalid length. [ 1793.207196][T22790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1793.302794][T22792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1793.316438][T22792] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1793.335862][T22792] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1793.468485][T22790] macvlan2: entered promiscuous mode [ 1793.481222][T22790] macvlan2: entered allmulticast mode [ 1793.500262][T22790] bond3: entered promiscuous mode [ 1793.517736][T22790] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1793.633204][T22790] bond3: left promiscuous mode [ 1793.786333][T15311] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1793.817155][T15311] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1793.882604][T22810] fuse: Bad value for 'fd' [ 1794.437299][T22822] bridge1: port 2(veth0_to_bond) entered disabled state [ 1794.458219][T15311] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 1794.763486][T15311] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1794.772929][T15311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.799497][T15311] usb 6-1: Product: syz [ 1794.808214][T15311] usb 6-1: Manufacturer: syz [ 1794.812856][T15311] usb 6-1: SerialNumber: syz [ 1794.841453][T15311] usb 6-1: config 0 descriptor?? [ 1795.099049][T15311] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1795.294914][T22829] tipc: Enabled bearer , priority 0 [ 1795.343603][T22829] syzkaller0: entered promiscuous mode [ 1795.368282][T22829] syzkaller0: entered allmulticast mode [ 1795.552972][T22831] tipc: Resetting bearer [ 1795.708466][T22828] tipc: Resetting bearer [ 1795.834511][T22828] tipc: Disabling bearer [ 1796.306034][T22841] fuse: Bad value for 'fd' [ 1796.528340][T15312] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1796.548170][T15311] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1796.580982][T15311] usb 6-1: USB disconnect, device number 104 [ 1796.613599][T11875] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1796.659167][T11875] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1796.742654][T15312] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1796.763098][T15312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.788589][T15312] usb 8-1: Product: syz [ 1796.792822][T15312] usb 8-1: Manufacturer: syz [ 1796.798694][T15312] usb 8-1: SerialNumber: syz [ 1796.819690][T15312] usb 8-1: config 0 descriptor?? [ 1796.898532][T15296] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1797.098955][ C1] sd 0:0:1:0: [sda] tag#1281 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1797.109493][ C1] sd 0:0:1:0: [sda] tag#1281 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 1797.118683][T15296] usb 7-1: Using ep0 maxpacket: 32 [ 1797.138980][T15312] usb 8-1: Firmware version (0.0) predates our first public release. [ 1797.142823][T15296] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1797.165307][T15296] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1797.165954][T15312] usb 8-1: Please update to version 0.2 or newer [ 1797.176584][T15296] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1797.204974][T15296] usb 7-1: Product: syz [ 1797.229598][T15296] usb 7-1: Manufacturer: syz [ 1797.235139][T15296] usb 7-1: SerialNumber: syz [ 1797.268259][T15296] usb 7-1: config 0 descriptor?? [ 1797.275229][T22851] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1797.285669][T15296] hub 7-1:0.0: bad descriptor, ignoring hub [ 1797.294332][T15296] hub: probe of 7-1:0.0 failed with error -5 [ 1797.328595][T15312] usb 8-1: USB disconnect, device number 13 [ 1797.588212][T15297] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1797.678615][T15296] usb 7-1: USB disconnect, device number 20 [ 1797.768273][T15297] usb 6-1: Using ep0 maxpacket: 32 [ 1797.803596][T15297] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1797.844780][T15297] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1797.866017][T15297] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1797.886660][T15297] usb 6-1: Product: syz [ 1797.891229][T15297] usb 6-1: Manufacturer: syz [ 1797.895862][T15297] usb 6-1: SerialNumber: syz [ 1797.911838][T15297] usb 6-1: config 0 descriptor?? [ 1797.917694][T22857] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1797.966921][T15297] hub 6-1:0.0: bad descriptor, ignoring hub [ 1797.996302][T15297] hub: probe of 6-1:0.0 failed with error -5 [ 1798.098499][T15296] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1798.160391][T15312] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1798.230389][T15312] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1798.354246][T15296] usb 7-1: Using ep0 maxpacket: 32 [ 1798.424522][T15296] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1798.451234][T15296] usb 7-1: string descriptor 0 read error: -22 [ 1798.458870][T15296] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1798.485271][T15296] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1798.509718][T15296] usb 7-1: config 0 descriptor?? [ 1798.572350][T22851] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1798.593053][T15296] hub 7-1:0.0: bad descriptor, ignoring hub [ 1798.633133][T15296] hub: probe of 7-1:0.0 failed with error -5 [ 1798.708413][T22857] usb 6-1: reset high-speed USB device number 105 using dummy_hcd [ 1798.906474][T22857] usb 6-1: device firmware changed [ 1798.912616][T15312] usb 6-1: USB disconnect, device number 105 [ 1798.958702][T15296] usb 7-1: USB disconnect, device number 21 [ 1799.088290][T15312] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1799.278298][T15312] usb 6-1: Using ep0 maxpacket: 32 [ 1799.293982][T15312] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1799.317122][T15312] usb 6-1: string descriptor 0 read error: -22 [ 1799.338564][T15312] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1799.360826][T15312] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1799.408675][T15312] usb 6-1: config 0 descriptor?? [ 1799.443923][T22863] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1799.462688][T15312] hub 6-1:0.0: bad descriptor, ignoring hub [ 1799.477685][T15312] hub: probe of 6-1:0.0 failed with error -5 [ 1799.769714][T22873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4293'. [ 1799.843206][T22876] fuse: Bad value for 'fd' [ 1799.941132][T10293] usb 6-1: USB disconnect, device number 106 [ 1800.067566][T22880] tipc: Enabled bearer , priority 0 [ 1800.078457][T22880] syzkaller0: entered promiscuous mode [ 1800.084480][T22880] syzkaller0: entered allmulticast mode [ 1800.151761][T22882] netlink: 'syz.7.4297': attribute type 1 has an invalid length. [ 1800.181679][T22882] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1800.204846][T22880] tipc: Resetting bearer [ 1800.265130][T22887] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1800.285267][T22887] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1800.305811][T22887] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1800.366217][T22879] tipc: Resetting bearer [ 1800.489704][T22879] tipc: Disabling bearer [ 1800.533317][T22891] macvlan2: entered promiscuous mode [ 1800.568626][T22891] macvlan2: entered allmulticast mode [ 1800.582463][T22894] loop6: detected capacity change from 0 to 7 [ 1800.589205][T22891] bond5: entered promiscuous mode [ 1800.609377][T22891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1800.624094][T22894] Dev loop6: unable to read RDB block 7 [ 1800.636980][T22894] loop6: unable to read partition table [ 1800.647805][T22894] loop6: partition table beyond EOD, truncated [ 1800.658372][T22891] bond5: left promiscuous mode [ 1800.669487][T22894] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1801.528265][T15312] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1801.572722][T22910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4305'. [ 1801.749021][T15312] usb 8-1: Using ep0 maxpacket: 16 [ 1801.763800][T15312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1801.778249][T15312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1801.826838][T15312] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1801.845941][T15312] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1801.856768][T15312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.867882][T15312] usb 8-1: config 0 descriptor?? [ 1802.028284][T10293] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 1802.260551][T10293] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1802.283489][T10293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.302095][T10293] usb 6-1: Product: syz [ 1802.312245][T10293] usb 6-1: Manufacturer: syz [ 1802.322387][T10293] usb 6-1: SerialNumber: syz [ 1802.322651][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.346829][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.350849][T10293] usb 6-1: config 0 descriptor?? [ 1802.376971][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.398589][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.405893][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.421441][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.441751][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.451859][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.468355][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.484500][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.507658][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.534323][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.570280][T15311] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1802.601619][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.615568][T10293] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1802.624603][T15311] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1802.638237][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.655712][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.666846][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.686873][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.695745][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.715635][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.816544][T15312] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1802.835511][T15312] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 1802.894064][T15312] microsoft 0003:045E:07DA.0010: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1802.920283][T15312] microsoft 0003:045E:07DA.0010: no inputs found [ 1802.946369][T15312] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 1803.089936][T15312] usb 8-1: USB disconnect, device number 14 [ 1803.418394][T22922] tipc: Enabled bearer , priority 0 [ 1803.436490][T22922] syzkaller0: entered promiscuous mode [ 1803.451070][T22922] syzkaller0: entered allmulticast mode [ 1803.548239][T15297] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1803.552697][T22923] tipc: Resetting bearer [ 1803.602444][T22921] tipc: Resetting bearer [ 1803.639405][T22921] tipc: Disabling bearer [ 1803.769587][T15297] usb 7-1: Using ep0 maxpacket: 32 [ 1803.782182][T15297] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1803.800587][T15297] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1803.810067][T15297] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1803.823806][T15297] usb 7-1: Product: syz [ 1803.828019][T15297] usb 7-1: Manufacturer: syz [ 1803.833081][T15297] usb 7-1: SerialNumber: syz [ 1803.841265][T15297] usb 7-1: config 0 descriptor?? [ 1803.854276][T22920] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1803.866861][T15297] hub 7-1:0.0: bad descriptor, ignoring hub [ 1803.877961][T15297] hub: probe of 7-1:0.0 failed with error -5 [ 1803.959496][T22925] loop6: detected capacity change from 0 to 7 [ 1803.990561][T22925] Dev loop6: unable to read RDB block 7 [ 1804.007279][T22925] loop6: unable to read partition table [ 1804.023047][T22925] loop6: partition table beyond EOD, truncated [ 1804.032182][T22925] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1804.081718][T10293] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 1804.108994][T10293] usb 6-1: USB disconnect, device number 107 [ 1804.757548][T22935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4314'. [ 1804.776648][T22933] syzkaller0: entered promiscuous mode [ 1804.784827][T22933] syzkaller0: entered allmulticast mode [ 1804.976647][T15311] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1805.007998][T15311] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1805.032396][T15297] usb 7-1: USB disconnect, device number 22 [ 1805.872919][T22957] tipc: Enabled bearer , priority 0 [ 1805.893438][T22957] syzkaller0: entered promiscuous mode [ 1805.913988][T22957] syzkaller0: entered allmulticast mode [ 1805.948472][T22957] tipc: Resetting bearer [ 1805.973276][T22956] tipc: Resetting bearer [ 1806.252917][T22956] tipc: Disabling bearer [ 1807.488437][T10293] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 1807.621622][T22972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4324'. [ 1807.682685][T10293] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1807.712327][T10293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.765726][T10293] usb 6-1: Product: syz [ 1807.785666][T10293] usb 6-1: Manufacturer: syz [ 1807.795773][T10293] usb 6-1: SerialNumber: syz [ 1807.811996][T10293] usb 6-1: config 0 descriptor?? [ 1807.920926][ C1] sd 0:0:1:0: [sda] tag#1315 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1807.931532][ C1] sd 0:0:1:0: [sda] tag#1315 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 1808.061280][T10293] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1809.098668][T15312] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1809.146653][T15312] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1809.206733][T15297] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1809.250951][T15297] hid-generic 0000:0000:0000.0014: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1809.480895][T10293] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 1809.529159][T10293] usb 6-1: USB disconnect, device number 108 [ 1810.167622][T23004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4334'. [ 1810.649410][ C1] sd 0:0:1:0: [sda] tag#1321 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1810.659936][ C1] sd 0:0:1:0: [sda] tag#1321 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 1811.778233][T15311] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1811.968274][T15311] usb 6-1: Using ep0 maxpacket: 32 [ 1811.984923][T15311] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1812.000829][T15311] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1812.010185][T15312] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1812.027021][T15311] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1812.035469][T15311] usb 6-1: Product: syz [ 1812.044034][T15311] usb 6-1: Manufacturer: syz [ 1812.049091][T15311] usb 6-1: SerialNumber: syz [ 1812.064982][T15311] usb 6-1: config 0 descriptor?? [ 1812.073175][T23012] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1812.123347][T15311] hub 6-1:0.0: bad descriptor, ignoring hub [ 1812.130304][T15311] hub: probe of 6-1:0.0 failed with error -5 [ 1812.200550][T15312] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 1812.209136][T15312] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.219500][T15312] usb 7-1: config 0 has no interface number 0 [ 1812.225820][T15312] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1812.236870][T15312] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1812.254444][T15312] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1812.264464][T15312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.275036][T15312] usb 7-1: Product: syz [ 1812.281460][T15312] usb 7-1: Manufacturer: syz [ 1812.287815][T15312] usb 7-1: SerialNumber: syz [ 1812.306324][T15312] usb 7-1: config 0 descriptor?? [ 1812.858244][T15300] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 1813.050182][T15300] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.065014][T15300] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1813.077358][T15300] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1813.091721][T15300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.101078][T15300] usb 8-1: Product: syz [ 1813.106696][T15300] usb 8-1: Manufacturer: syz [ 1813.116604][T15300] usb 8-1: SerialNumber: syz [ 1813.188435][T23012] usb 6-1: reset high-speed USB device number 109 using dummy_hcd [ 1813.386081][T15300] usb 8-1: 0:2 : does not exist [ 1813.421837][T23012] usb 6-1: device firmware changed [ 1813.438803][T15311] usb 6-1: USB disconnect, device number 109 [ 1813.520048][T15300] usb 8-1: USB disconnect, device number 15 [ 1813.604923][T13423] udevd[13423]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1813.618285][T15311] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1813.828203][T15311] usb 6-1: Using ep0 maxpacket: 32 [ 1813.840271][T15311] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1813.862050][T15311] usb 6-1: string descriptor 0 read error: -22 [ 1813.870897][T15311] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1813.891389][T15311] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1813.904350][T15311] usb 6-1: config 0 descriptor?? [ 1813.912544][T23022] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1813.925131][T15311] hub 6-1:0.0: bad descriptor, ignoring hub [ 1813.936737][T15311] hub: probe of 6-1:0.0 failed with error -5 [ 1814.065718][T23026] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4343'. [ 1814.075109][T23026] IPv6: NLM_F_CREATE should be specified when creating new route [ 1814.288726][T15300] usb 6-1: USB disconnect, device number 110 [ 1814.714374][T15300] usb 7-1: USB disconnect, device number 23 [ 1814.813777][ C1] sd 0:0:1:0: [sda] tag#1326 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1814.824297][ C1] sd 0:0:1:0: [sda] tag#1326 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 1814.912721][T23034] loop6: detected capacity change from 0 to 7 [ 1814.920401][T23034] Dev loop6: unable to read RDB block 7 [ 1814.926013][T23034] loop6: unable to read partition table [ 1814.933186][T23034] loop6: partition table beyond EOD, truncated [ 1814.940484][T23034] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1815.058421][T15311] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1815.117918][T23036] kvm: pic: non byte write [ 1815.268294][T15311] usb 6-1: Using ep0 maxpacket: 16 [ 1815.275546][T15311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1815.286868][T15311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1815.296765][T15311] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1815.309849][T15311] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1815.319069][T15311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.330126][T15311] usb 6-1: config 0 descriptor?? [ 1815.641102][T23043] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1815.760734][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.774541][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.781903][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.789514][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.796783][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.805215][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.813523][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.828369][T11875] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1815.838182][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.845572][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.864951][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.874395][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.882830][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.892325][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.903024][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.916014][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.924309][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.934071][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.941889][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.949802][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.957074][T15311] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1815.965817][T15311] microsoft 0003:045E:07DA.0015: No inputs registered, leaving [ 1815.977736][T15311] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1816.000177][T15311] microsoft 0003:045E:07DA.0015: no inputs found [ 1816.006571][T15311] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 1816.048294][T11875] usb 8-1: Using ep0 maxpacket: 32 [ 1816.054373][T15311] usb 6-1: USB disconnect, device number 111 [ 1816.079731][T11875] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 1816.087880][T11875] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1816.128894][T11875] usb 8-1: config 0 has no interface number 0 [ 1816.135072][T11875] usb 8-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1816.148283][T15300] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1816.164982][T11875] usb 8-1: config 0 interface 85 has no altsetting 0 [ 1816.176439][T11875] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1816.186510][T11875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.194745][T11875] usb 8-1: Product: syz [ 1816.199618][T11875] usb 8-1: Manufacturer: syz [ 1816.204252][T11875] usb 8-1: SerialNumber: syz [ 1816.211645][T11875] usb 8-1: config 0 descriptor?? [ 1816.288850][T10293] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1816.323779][T10293] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1816.337662][T15300] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1816.352786][T15300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.362829][T15300] usb 5-1: Product: syz [ 1816.369897][T15300] usb 5-1: Manufacturer: syz [ 1816.377664][T15300] usb 5-1: SerialNumber: syz [ 1816.398259][T15300] usb 5-1: config 0 descriptor?? [ 1816.608589][T15300] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1818.018263][T15297] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1818.035287][T15300] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1818.073125][T15300] usb 5-1: USB disconnect, device number 10 [ 1818.241765][T15297] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1818.257128][T15297] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1818.268064][T15297] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1818.278827][T15297] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1818.290881][T15297] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1818.304282][T15297] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1818.325033][T15297] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1818.368401][T15297] usb 6-1: Product: syz [ 1818.378015][T15297] usb 6-1: Manufacturer: syz [ 1818.393220][T15297] cdc_wdm 6-1:1.0: skipping garbage [ 1818.398691][T15297] cdc_wdm 6-1:1.0: skipping garbage [ 1818.405447][T15297] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1818.412200][T15297] cdc_wdm 6-1:1.0: Unknown control protocol [ 1818.635334][T15311] usb 8-1: USB disconnect, device number 16 [ 1818.658858][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1818.665583][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1818.672033][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1818.678677][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1818.685078][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1818.691726][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1818.698827][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1818.705536][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1818.718224][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1818.724884][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1818.731519][T15297] usb 6-1: USB disconnect, device number 112 [ 1818.738298][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1818.744934][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1818.751106][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1818.800656][ C1] sd 0:0:1:0: [sda] tag#1328 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1818.811176][ C1] sd 0:0:1:0: [sda] tag#1328 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 1818.995265][T23072] loop6: detected capacity change from 0 to 7 [ 1819.009213][T23072] Dev loop6: unable to read RDB block 7 [ 1819.014970][T23072] loop6: unable to read partition table [ 1819.023090][T23072] loop6: partition table beyond EOD, truncated [ 1819.029898][T23072] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1819.172111][T23074] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4361'. [ 1819.437321][T15297] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1819.452964][T15297] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1820.048332][T15295] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1820.319818][T23098] loop6: detected capacity change from 0 to 7 [ 1820.331121][T15295] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1820.349588][T15295] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.367561][T15295] usb 7-1: Product: syz [ 1820.368535][T23098] Dev loop6: unable to read RDB block 7 [ 1820.372223][T15295] usb 7-1: Manufacturer: syz [ 1820.390739][T15295] usb 7-1: SerialNumber: syz [ 1820.390775][T23098] loop6: unable to read partition table [ 1820.413347][T15295] usb 7-1: config 0 descriptor?? [ 1820.489536][T23098] loop6: partition table beyond EOD, truncated [ 1820.545815][T23098] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1820.676998][T15295] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1820.864066][T23100] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4370'. [ 1821.452815][T15315] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1821.543380][T23106] syzkaller0: entered promiscuous mode [ 1821.551092][T23106] syzkaller0: entered allmulticast mode [ 1821.670954][T15315] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1821.697471][T15315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.707256][T15315] usb 6-1: Product: syz [ 1821.718342][T15315] usb 6-1: Manufacturer: syz [ 1821.764741][T15315] usb 6-1: SerialNumber: syz [ 1821.772965][T15315] usb 6-1: config 0 descriptor?? [ 1821.997678][T15315] usb 6-1: Firmware version (0.0) predates our first public release. [ 1822.017101][T15315] usb 6-1: Please update to version 0.2 or newer [ 1822.130862][T15315] usb 6-1: USB disconnect, device number 113 [ 1822.175492][T11875] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1822.184476][T15295] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 1822.203573][T15295] usb 7-1: USB disconnect, device number 24 [ 1822.254633][T11875] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1823.071467][T23129] netlink: 'syz.5.4381': attribute type 29 has an invalid length. [ 1823.108280][T23129] netlink: 'syz.5.4381': attribute type 29 has an invalid length. [ 1823.648349][T23142] warning: `syz.6.4387' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1824.644101][T23179] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1824.739967][T23182] netlink: 'syz.5.4406': attribute type 12 has an invalid length. [ 1824.747859][T23182] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4406'. [ 1825.411162][T23208] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4419'. [ 1825.586605][T23218] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4424'. [ 1825.626058][T23218] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4424'. [ 1825.652915][T23221] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4424'. [ 1825.677614][T23218] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4424'. [ 1826.084797][T23240] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4432'. [ 1827.874194][T23284] netlink: 144316 bytes leftover after parsing attributes in process `syz.7.4453'. [ 1827.892330][T23281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1827.945261][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.952636][ T6025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1829.261369][T23329] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4472'. [ 1829.289318][T23324] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4472'. [ 1829.599412][T23339] netlink: zone id is out of range [ 1829.605642][T23339] netlink: del zone limit has 8 unknown bytes [ 1829.789855][T23352] __nla_validate_parse: 5 callbacks suppressed [ 1829.789875][T23352] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.4484'. [ 1830.588167][T23383] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.4497'. [ 1831.129144][T23403] netlink: 'syz.5.4507': attribute type 4 has an invalid length. [ 1831.138183][T23403] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4507'. [ 1831.903200][T15297] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1831.988291][T15300] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1832.110122][T15297] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1832.130927][T15297] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1832.154352][T15297] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1832.164300][T15297] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1832.185692][T15297] usb 8-1: Manufacturer: syz [ 1832.190747][T15300] usb 5-1: Using ep0 maxpacket: 8 [ 1832.211164][T15297] usb 8-1: config 0 descriptor?? [ 1832.219691][T15300] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1832.230321][T15300] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1832.251602][T15300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.279735][T15300] usb 5-1: config 0 descriptor?? [ 1832.399044][T15297] rc_core: IR keymap rc-hauppauge not found [ 1832.416614][T15297] Registered IR keymap rc-empty [ 1832.423280][T15297] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1832.465795][T15297] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input129 [ 1832.506694][T15297] usb 8-1: USB disconnect, device number 17 [ 1832.724051][T15300] mcp2221 0003:04D8:00DD.0019: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1832.945431][T15300] usb 5-1: USB disconnect, device number 11 [ 1833.786099][T23452] netlink: 'syz.4.4527': attribute type 4 has an invalid length. [ 1833.795151][T23452] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4527'. [ 1833.962702][T15300] IPVS: starting estimator thread 0... [ 1834.067583][T23455] IPVS: using max 16 ests per chain, 38400 per kthread [ 1834.312960][T23459] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4530'. [ 1834.976417][T23471] netlink: 'syz.4.4536': attribute type 4 has an invalid length. [ 1834.987624][T23471] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4536'. [ 1835.626990][T23486] loop0: Can't mount, would change RO state [ 1836.450028][ C0] Unknown status report in ack skb [ 1836.693434][T23527] pimreg: entered allmulticast mode [ 1836.994882][T23539] trusted_key: syz.5.4564 sent an empty control message without MSG_MORE. [ 1837.394313][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 1837.394334][ T28] audit: type=1326 audit(1757583264.368:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23549 comm="syz.6.4570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2a778eba9 code=0x0 [ 1837.704225][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b1c3c00: rx timeout, send abort [ 1838.205222][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b1c2000: rx timeout, send abort [ 1838.214335][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b1c3c00: abort rx timeout. Force session deactivation [ 1838.511742][T23603] netlink: 'syz.5.4590': attribute type 4 has an invalid length. [ 1838.519914][T23603] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4590'. [ 1838.530323][T23589] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1838.530323][T23589] The task syz.4.4583 (23589) triggered the difference, watch for misbehavior. [ 1838.713560][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b1c2000: abort rx timeout. Force session deactivation [ 1839.208412][T15315] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1839.304019][T23626] netlink: 'syz.7.4600': attribute type 4 has an invalid length. [ 1839.327631][T23626] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4600'. [ 1839.418252][T15315] usb 7-1: Using ep0 maxpacket: 16 [ 1839.449119][T15315] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1839.468286][T15315] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1839.491787][T15315] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1839.524535][T15315] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1839.545263][T15315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.571211][T15315] usb 7-1: config 0 descriptor?? [ 1839.754142][T23636] netdevsim netdevsim7: Direct firmware load for . [ 1839.754142][T23636] failed with error -2 [ 1839.778256][T23636] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1839.778256][T23636] [ 1839.878595][T23639] mmap: syz.5.4594 (23639) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1840.011968][T15315] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1840.044262][T15315] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1840.056819][T15315] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1840.078166][T15315] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1840.085199][T15315] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1840.101408][T15315] input: HID 0955:7214 Haptics as /devices/virtual/input/input130 [ 1840.191174][T15315] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 1840.210325][T15315] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 1840.302392][T11875] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1840.325106][T15315] usb 7-1: USB disconnect, device number 25 [ 1840.344271][T11875] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1840.380654][T11875] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1840.392703][T11875] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1841.098292][T15297] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1841.311926][T15297] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1841.335554][T15297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1841.359709][T15297] usb 5-1: Product: syz [ 1841.363954][T15297] usb 5-1: Manufacturer: syz [ 1841.410185][T15297] usb 5-1: SerialNumber: syz [ 1841.436450][T15297] usb 5-1: config 0 descriptor?? [ 1841.457592][T23681] capability: warning: `syz.7.4623' uses deprecated v2 capabilities in a way that may be insecure [ 1841.458032][T15297] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1841.487031][T23681] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1841.506120][T15297] dvb-usb: bulk message failed: -22 (2/0) [ 1841.508013][T23681] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1841.532905][T15297] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1841.556379][T15297] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1841.585124][T15297] usb 5-1: media controller created [ 1841.684037][T15297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1841.747083][T21856] Bluetooth: hci1: unexpected event for opcode 0x1246 [ 1841.760965][T15297] cxusb: set interface failed [ 1841.776000][T15297] dvb-usb: bulk message failed: -22 (1/0) [ 1841.947061][T15297] DVB: Unable to find symbol mt352_attach() [ 1841.974720][T15297] dvb-usb: bulk message failed: -22 (5/0) [ 1842.000202][T15297] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1842.021418][T15297] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1842.228277][T15297] rc_core: IR keymap rc-dvico-mce not found [ 1842.236176][T15297] Registered IR keymap rc-empty [ 1842.251116][T15297] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1842.266463][T15297] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input131 [ 1842.313203][T15297] dvb-usb: schedule remote query interval to 100 msecs. [ 1842.324988][T15297] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1842.372558][T15297] usb 5-1: USB disconnect, device number 12 [ 1842.515771][T15297] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1842.578963][T23709] input: syz1 as /devices/virtual/input/input132 [ 1843.449748][T23734] loop7: detected capacity change from 0 to 7 [ 1843.477225][T23734] Dev loop7: unable to read RDB block 7 [ 1843.508219][T23734] loop7: unable to read partition table [ 1843.514165][T23734] loop7: partition table beyond EOD, truncated [ 1843.554852][T23734] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1843.597302][ T42] loop: Write error at byte offset 1, length 3584. [ 1843.617457][T23735] [ 1843.619850][T23735] ================================================ [ 1843.626376][T23735] WARNING: lock held when returning to user space! [ 1843.632916][T23735] syzkaller #0 Not tainted [ 1843.637357][T23735] ------------------------------------------------ [ 1843.638114][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1843.643858][T23735] syz.5.4646/23735 is leaving the kernel with locks still held! [ 1843.653303][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1843.660876][T23735] 1 lock held by syz.5.4646/23735: [ 1843.660891][T23735] #0: ffff888021987b60 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_block_size+0x7c/0x480 [ 1851.915579][ T1027] ------------[ cut here ]------------ [ 1851.915641][T14537] ------------[ cut here ]------------ [ 1851.921632][ T1027] WARNING: CPU: 0 PID: 1027 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1851.926725][T14537] WARNING: CPU: 1 PID: 14537 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1851.937773][ T1027] Modules linked in: [ 1851.948870][T14537] Modules linked in: [ 1851.952816][ T1027] CPU: 0 PID: 1027 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1851.956698][T14537] CPU: 1 PID: 14537 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1851.964334][ T1027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1851.971990][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1851.972005][T14537] Workqueue: phy25 ieee80211_csa_finalize_work [ 1851.972133][T14537] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1851.982297][ T1027] Workqueue: phy26 ieee80211_csa_finalize_work [ 1851.992467][T14537] Code: 48 89 df e8 7a ea e9 f7 e9 dc fc ff ff e8 70 9f 92 f7 eb 24 e8 69 9f 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 58 9f 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 4a 9f 92 f7 48 8b 7c 24 08 4c 8b 7c [ 1851.998535][ T1027] [ 1851.998543][ T1027] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1852.005810][T14537] RSP: 0018:ffffc9000426f9c0 EFLAGS: 00010293 [ 1852.012004][ T1027] Code: 48 89 df e8 7a ea e9 f7 e9 dc fc ff ff e8 70 9f 92 f7 eb 24 e8 69 9f 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 58 9f 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 4a 9f 92 f7 48 8b 7c 24 08 4c 8b 7c [ 1852.032783][ C1] ------------[ cut here ]------------ [ 1852.034712][ T1027] RSP: 0018:ffffc9000435f9c0 EFLAGS: 00010293 [ 1852.042018][ C1] WARNING: CPU: 1 PID: 14537 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 1852.042126][ C1] Modules linked in: [ 1852.042139][ C1] CPU: 1 PID: 14537 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1852.048252][ T1027] [ 1852.048260][ T1027] RAX: ffffffff89f2ecef RBX: 0000000000000000 RCX: ffff8880235e1e00 [ 1852.067931][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1852.073387][ T1027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1852.079454][ C1] Workqueue: phy25 ieee80211_csa_finalize_work [ 1852.089541][ T1027] RBP: dffffc0000000000 R08: ffff888061de95af R09: 1ffff1100c3bd2b5 [ 1852.093403][ C1] [ 1852.093413][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1852.101136][ T1027] R10: dffffc0000000000 R11: ffffed100c3bd2b6 R12: 0000000000000001 [ 1852.103456][ C1] Code: 24 4c 89 e7 e8 de 69 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 99 44 97 f7 0f 0b e9 f6 f7 ff ff e8 8d 44 97 f7 <0f> 0b e9 48 fb ff ff e8 81 44 97 f7 48 c7 c7 a0 0c 24 8e 4c 89 e6 [ 1852.111456][ T1027] R13: ffff888061dea5d9 R14: ffff88803086ac70 R15: 0000000000000000 [ 1852.121508][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 1852.121530][ C1] RAX: ffffffff89ee4b73 RBX: ffffffff89ee3976 RCX: ffff88807f84da00 [ 1852.121545][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1852.121560][ C1] RBP: 0000000000000000 R08: ffff88807f84da00 R09: 0000000000000003 [ 1852.121574][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888061dea3c0 [ 1852.121588][ C1] R13: dffffc0000000000 R14: ffff888061dea8b0 R15: ffff88805a97c824 [ 1852.121602][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1852.121618][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1852.121630][ C1] CR2: 000055555ada35c8 CR3: 0000000076a2b000 CR4: 00000000003506e0 [ 1852.121647][ C1] Call Trace: [ 1852.121656][ C1] [ 1852.121677][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 1852.121713][ C1] ? lock_acquire+0xcb/0x410 [ 1852.121832][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 1852.121875][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1852.121910][ C1] ? lock_acquire+0xcb/0x410 [ 1852.121937][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1852.121986][ C1] __iterate_interfaces+0x243/0x500 [ 1852.122011][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1852.122038][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1852.122066][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1852.122093][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1852.122123][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1852.122148][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 1852.122175][ C1] ? hw_scan_work+0xf40/0xf40 [ 1852.122202][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1852.122223][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1852.122255][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1852.122281][ C1] handle_softirqs+0x280/0x820 [ 1852.122322][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1852.130391][ T1027] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1852.136487][ C1] ? do_softirq+0x180/0x180 [ 1852.144468][ T1027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1852.146796][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1852.153161][ T1027] CR2: 00007ffca88f9f78 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 1852.161112][ C1] __irq_exit_rcu+0xc7/0x190 [ 1852.161137][ C1] ? irq_exit_rcu+0x20/0x20 [ 1852.161160][ C1] irq_exit_rcu+0x9/0x20 [ 1852.161179][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1852.180952][ T1027] Call Trace: [ 1852.188928][ C1] [ 1852.194976][ T1027] [ 1852.202955][ C1] [ 1852.202965][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1852.211034][ T1027] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1852.219002][ C1] RIP: 0010:console_flush_all+0x889/0xd00 [ 1852.227708][ T1027] ieee80211_csa_finalize+0x59a/0xf00 [ 1852.234975][ C1] Code: ed 01 00 00 e8 48 2a 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 39 2a 1b 00 eb 06 e8 32 2a 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 50 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 1852.234995][ C1] RSP: 0018:ffffc9000426f340 EFLAGS: 00000293 [ 1852.235014][ C1] RAX: ffffffff816a65ce RBX: ffffc9000426f4df RCX: ffff88807f84da00 [ 1852.235032][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1852.243972][ T1027] ? mutex_lock_nested+0x20/0x20 [ 1852.250556][ C1] RBP: ffffc9000426f4b0 R08: ffffffff8e4a922f R09: 1ffffffff1c95245 [ 1852.250575][ C1] R10: dffffc0000000000 R11: fffffbfff1c95246 R12: ffffffff8d4b5b40 [ 1852.258567][ T1027] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1852.261838][ C1] R13: 1ffffffff19792b8 R14: ffffffff8d4b5b98 R15: dffffc0000000000 [ 1852.264679][ T1027] ? read_lock_is_recursive+0x20/0x20 [ 1852.270232][ C1] ? console_flush_all+0x87e/0xd00 [ 1852.270266][ C1] ? __rwlock_init+0x150/0x150 [ 1852.274831][ T1027] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1852.280301][ C1] ? console_flush_all+0x10f/0xd00 [ 1852.280331][ C1] ? is_console_locked+0x20/0x20 [ 1852.280356][ C1] ? rcu_is_watching+0x15/0xb0 [ 1852.280380][ C1] ? lock_acquire+0xcb/0x410 [ 1852.280403][ C1] console_unlock+0xae/0x340 [ 1852.280446][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 1852.280469][ C1] ? vprintk_emit+0x301/0x600 [ 1852.280493][ C1] ? vprintk_emit+0x447/0x600 [ 1852.280516][ C1] ? vprintk_emit+0x301/0x600 [ 1852.280536][ C1] ? vprintk_emit+0x301/0x600 [ 1852.287292][ T1027] ieee80211_csa_finalize_work+0xf6/0x140 [ 1852.291896][ C1] vprintk_emit+0x477/0x600 [ 1852.291923][ C1] ? vprintk_emit+0x301/0x600 [ 1852.297450][ T1027] ? process_scheduled_works+0x957/0x15b0 [ 1852.302655][ C1] ? printk_sprint+0x460/0x460 [ 1852.308923][ T1027] process_scheduled_works+0xa45/0x15b0 [ 1852.316097][ C1] ? _printk+0xd0/0x110 [ 1852.322373][ T1027] ? assign_work+0x400/0x400 [ 1852.329381][ C1] ? copy_from_kernel_nofault+0x1d2/0x320 [ 1852.329432][ C1] _printk+0xd0/0x110 [ 1852.329452][ C1] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 1852.329486][ C1] ? load_image+0x3b0/0x3b0 [ 1852.329513][ C1] __show_regs+0x34/0x610 [ 1852.329551][ C1] ? dump_stack_print_info+0xf5/0x150 [ 1852.329578][ C1] show_regs+0x44/0x90 [ 1852.329616][ C1] __warn+0x160/0x470 [ 1852.329645][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1852.329678][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1852.329709][ C1] report_bug+0x2be/0x4f0 [ 1852.329742][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1852.329775][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1852.329807][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 1852.329839][ C1] handle_bug+0xcf/0x120 [ 1852.329870][ C1] exc_invalid_op+0x1a/0x50 [ 1852.329897][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1852.329917][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1852.329951][ C1] Code: 48 89 df e8 7a ea e9 f7 e9 dc fc ff ff e8 70 9f 92 f7 eb 24 e8 69 9f 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 58 9f 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 4a 9f 92 f7 48 8b 7c 24 08 4c 8b 7c [ 1852.329969][ C1] RSP: 0018:ffffc9000426f9c0 EFLAGS: 00010293 [ 1852.329989][ C1] RAX: ffffffff89f2ecef RBX: 0000000000000000 RCX: ffff88807f84da00 [ 1852.330006][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1852.330019][ C1] RBP: dffffc0000000000 R08: ffff88802140d5af R09: 1ffff11004281ab5 [ 1852.330036][ C1] R10: dffffc0000000000 R11: ffffed1004281ab6 R12: 0000000000000001 [ 1852.330052][ C1] R13: ffff88802140e5d9 R14: ffff88805c6dac70 R15: 0000000000000000 [ 1852.335254][ T1027] ? assign_work+0x39e/0x400 [ 1852.340459][ C1] ? ieee80211_vif_use_reserved_switch+0xd2f/0x28f0 [ 1852.340500][ C1] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1852.345225][ T1027] worker_thread+0xa55/0xfc0 [ 1852.350345][ C1] ieee80211_csa_finalize+0x59a/0xf00 [ 1852.350369][ C1] ? mutex_lock_nested+0x20/0x20 [ 1852.356430][ T1027] kthread+0x2fa/0x390 [ 1852.361537][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1852.366317][ T1027] ? pr_cont_work+0x560/0x560 [ 1852.371173][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1852.371198][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1852.380139][ T1027] ? kthread_blkcg+0xd0/0xd0 [ 1852.384631][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 1852.391250][ T1027] ret_from_fork+0x48/0x80 [ 1852.396415][ C1] ? process_scheduled_works+0x957/0x15b0 [ 1852.404413][ T1027] ? kthread_blkcg+0xd0/0xd0 [ 1852.408995][ C1] process_scheduled_works+0xa45/0x15b0 [ 1852.413494][ T1027] ret_from_fork_asm+0x11/0x20 [ 1852.417739][ C1] ? assign_work+0x400/0x400 [ 1852.423375][ T1027] [ 1852.426652][ C1] ? assign_work+0x39e/0x400 [ 1852.426694][ C1] worker_thread+0xa55/0xfc0 [ 1852.426731][ C1] kthread+0x2fa/0x390 [ 1852.426750][ C1] ? pr_cont_work+0x560/0x560 [ 1852.426773][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1852.426793][ C1] ret_from_fork+0x48/0x80 [ 1852.426817][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1852.426841][ C1] ret_from_fork_asm+0x11/0x20 [ 1852.426876][ C1] [ 1852.426886][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1852.426898][ C1] CPU: 1 PID: 14537 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1852.426920][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1852.426933][ C1] Workqueue: phy25 ieee80211_csa_finalize_work [ 1852.426969][ C1] Call Trace: [ 1852.426977][ C1] [ 1852.426983][ C1] dump_stack_lvl+0x16c/0x230 [ 1852.427011][ C1] ? show_regs_print_info+0x20/0x20 [ 1852.427035][ C1] ? load_image+0x3b0/0x3b0 [ 1852.427059][ C1] panic+0x2c0/0x710 [ 1852.427091][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1852.427126][ C1] ? ret_from_fork_asm+0x11/0x20 [ 1852.427156][ C1] __warn+0x2e0/0x470 [ 1852.427185][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1852.427218][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1852.427251][ C1] report_bug+0x2be/0x4f0 [ 1852.427277][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1852.427309][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1852.427352][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 1852.427383][ C1] handle_bug+0xcf/0x120 [ 1852.427410][ C1] exc_invalid_op+0x1a/0x50 [ 1852.427438][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1852.427460][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1852.427496][ C1] Code: 24 4c 89 e7 e8 de 69 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 99 44 97 f7 0f 0b e9 f6 f7 ff ff e8 8d 44 97 f7 <0f> 0b e9 48 fb ff ff e8 81 44 97 f7 48 c7 c7 a0 0c 24 8e 4c 89 e6 [ 1852.427517][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 1852.427538][ C1] RAX: ffffffff89ee4b73 RBX: ffffffff89ee3976 RCX: ffff88807f84da00 [ 1852.427556][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1852.427569][ C1] RBP: 0000000000000000 R08: ffff88807f84da00 R09: 0000000000000003 [ 1852.427584][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888061dea3c0 [ 1852.427600][ C1] R13: dffffc0000000000 R14: ffff888061dea8b0 R15: ffff88805a97c824 [ 1852.427619][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 1852.427653][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1852.427708][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1852.427743][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 1852.427778][ C1] ? lock_acquire+0xcb/0x410 [ 1852.427805][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 1852.427863][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1852.427898][ C1] ? lock_acquire+0xcb/0x410 [ 1852.427944][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1852.427978][ C1] __iterate_interfaces+0x243/0x500 [ 1852.428005][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1852.428033][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1852.428062][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1852.428094][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1852.428126][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1852.428152][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 1852.428182][ C1] ? hw_scan_work+0xf40/0xf40 [ 1852.428210][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1852.428232][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1852.428266][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1852.428292][ C1] handle_softirqs+0x280/0x820 [ 1852.428317][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1852.428340][ C1] ? do_softirq+0x180/0x180 [ 1852.428364][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1852.428394][ C1] __irq_exit_rcu+0xc7/0x190 [ 1852.428416][ C1] ? irq_exit_rcu+0x20/0x20 [ 1852.428440][ C1] irq_exit_rcu+0x9/0x20 [ 1852.428461][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1852.428493][ C1] [ 1852.428501][ C1] [ 1852.428509][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1852.428533][ C1] RIP: 0010:console_flush_all+0x889/0xd00 [ 1852.428562][ C1] Code: ed 01 00 00 e8 48 2a 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 39 2a 1b 00 eb 06 e8 32 2a 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 50 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 1852.428580][ C1] RSP: 0018:ffffc9000426f340 EFLAGS: 00000293 [ 1852.428599][ C1] RAX: ffffffff816a65ce RBX: ffffc9000426f4df RCX: ffff88807f84da00 [ 1852.428617][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1852.428631][ C1] RBP: ffffc9000426f4b0 R08: ffffffff8e4a922f R09: 1ffffffff1c95245 [ 1852.428649][ C1] R10: dffffc0000000000 R11: fffffbfff1c95246 R12: ffffffff8d4b5b40 [ 1852.428666][ C1] R13: 1ffffffff19792b8 R14: ffffffff8d4b5b98 R15: dffffc0000000000 [ 1852.428687][ C1] ? console_flush_all+0x87e/0xd00 [ 1852.428718][ C1] ? __rwlock_init+0x150/0x150 [ 1852.428746][ C1] ? console_flush_all+0x10f/0xd00 [ 1852.428780][ C1] ? is_console_locked+0x20/0x20 [ 1852.428809][ C1] ? rcu_is_watching+0x15/0xb0 [ 1852.428846][ C1] ? lock_acquire+0xcb/0x410 [ 1852.428872][ C1] console_unlock+0xae/0x340 [ 1852.428900][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 1852.428929][ C1] ? vprintk_emit+0x301/0x600 [ 1852.428955][ C1] ? vprintk_emit+0x447/0x600 [ 1852.428979][ C1] ? vprintk_emit+0x301/0x600 [ 1852.429003][ C1] ? vprintk_emit+0x301/0x600 [ 1852.429029][ C1] vprintk_emit+0x477/0x600 [ 1852.429053][ C1] ? vprintk_emit+0x301/0x600 [ 1852.429079][ C1] ? printk_sprint+0x460/0x460 [ 1852.429105][ C1] ? _printk+0xd0/0x110 [ 1852.429125][ C1] ? copy_from_kernel_nofault+0x1d2/0x320 [ 1852.429161][ C1] _printk+0xd0/0x110 [ 1852.429181][ C1] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 1852.429218][ C1] ? load_image+0x3b0/0x3b0 [ 1852.429247][ C1] __show_regs+0x34/0x610 [ 1852.429279][ C1] ? dump_stack_print_info+0xf5/0x150 [ 1852.429307][ C1] show_regs+0x44/0x90 [ 1852.429335][ C1] __warn+0x160/0x470 [ 1852.429367][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1852.429403][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1852.429436][ C1] report_bug+0x2be/0x4f0 [ 1852.429463][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1852.429497][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1852.429531][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 1852.429565][ C1] handle_bug+0xcf/0x120 [ 1852.429592][ C1] exc_invalid_op+0x1a/0x50 [ 1852.429620][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1852.429639][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1852.429675][ C1] Code: 48 89 df e8 7a ea e9 f7 e9 dc fc ff ff e8 70 9f 92 f7 eb 24 e8 69 9f 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 58 9f 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 4a 9f 92 f7 48 8b 7c 24 08 4c 8b 7c [ 1852.429694][ C1] RSP: 0018:ffffc9000426f9c0 EFLAGS: 00010293 [ 1852.429713][ C1] RAX: ffffffff89f2ecef RBX: 0000000000000000 RCX: ffff88807f84da00 [ 1852.429729][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1852.429743][ C1] RBP: dffffc0000000000 R08: ffff88802140d5af R09: 1ffff11004281ab5 [ 1852.429761][ C1] R10: dffffc0000000000 R11: ffffed1004281ab6 R12: 0000000000000001 [ 1852.429777][ C1] R13: ffff88802140e5d9 R14: ffff88805c6dac70 R15: 0000000000000000 [ 1852.429797][ C1] ? ieee80211_vif_use_reserved_switch+0xd2f/0x28f0 [ 1852.429851][ C1] ieee80211_link_use_reserved_context+0x383/0x5c0