last executing test programs: 6m49.6659343s ago: executing program 1 (id=113): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @private=0xa010101, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x0, 0xffffffff}}}}}, 0x0) 6m49.490863413s ago: executing program 1 (id=116): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00T\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="100001"], 0x38}, 0x1, 0x0, 0x0, 0x240080c4}, 0xc840) 6m49.231369706s ago: executing program 1 (id=122): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060000000000000000f00000000000040000080002"], 0x34}}, 0x0) 6m49.109093942s ago: executing program 1 (id=125): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000500)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20400, 0x38) getdents64(r0, 0x0, 0x0) 6m48.790462523s ago: executing program 1 (id=128): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 6m48.064129737s ago: executing program 1 (id=132): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0xfffffffe, 0x717e387b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x0, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 6m47.817710938s ago: executing program 32 (id=132): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0xfffffffe, 0x717e387b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x0, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 6m0.452141268s ago: executing program 2 (id=600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300000000000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x1e57, 0x0, 0x3, 0x3ff, 0x2, "04ad7d2ed56d7fcb3678002e000000000d00", 0x400005, 0x205}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xa) 6m0.423370642s ago: executing program 2 (id=601): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0xa14401, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x38b84894}}, {@noblock_validity}]}, 0x8, 0x492, &(0x7f0000000a40)="$eJzs3MtvVNUfAPDvnU7L+9f+EB8gCopGorGlBZWFCzCasNDEqAtc1mkhSKGEViOEaHWBS0Ni3BoXLkz8C1zpxigrE7e6NyTEsAF1c82dubfcDp06baeMdT6fZJhzX3POl3vOzHl0JoCetTf7J4nYGhG/RMRgY3PhCXsbT7duXKr9ceNSLYk0ff33pH7ezRuXasWpxXVbio25hfvLZi5cPD0+NTV5Pt8emT1zbmTmwsWnT50ZPzl5cvLs2OHDhw6OPvfs2DMdiTMr081d70/v3nnszSuv1I5feevHr5Mi/gVxvNuR/EovXdZXJB7vVC7/EttK6aTaeH6tW4WhbVmFrEREf739D0ZfVOePDcZLH3W1cMCaStM03dD68FwK/Icl0e0SAN2Rf84nEXO1bAxcHs/3gutHI7IhTxb3rfzROFKtj4siHxttW6P8s9HW8bk/P88e0TSfAgCwFr492ngu+n63+x+Vavm8I/na0FBE/D8itkfEPRGxIyLujYj7IuL+iHhg/or+tvJfuEiS9bia+z+VaysMrS1Z/+/5fG1rYf+v6P3FUDFHvq0ef39y4tTU5IGI+F9E7I/+Ddn26BJ5fPfiz5+0Ora31P/LHln+RV8wL8e1atME3cT47PhqYi67/mHErupi8SfzKwFJROyMiF17VpbHqSe/2t3q2D/Hv4TqyspTln4R8UTj/s9FU/yFZOn1yZGNMTV5YKSoFXe6+tPlV1vlv6r4OyC7/5sXrf/z8Q8l5fXameXncfnXj1uOadqs/wPla7L6P5C8UU8XB94bn509PxoxkLyc7z+S71+QXSWy88Zun5/Fv3/f4u1/e9z+n3gwIrJK/FBEPBwRe/KyPxIRj0bEviXi/+GFx95eRvzHzpXyXWtZ/BPLuv8tE8Xa9h2H+k5//03pVjU+RFrFn0TteFKOPLv/h+qp/fmedt7/lizp+dXUZgAAAFh/KhGxNZLK8Hy6Uhkebvy9/I7YXJmanpl96sT0O2cnGt8RGIr+SjHTNTg/Hxpzo/mwvpgfHWvaPpjPG3+6YVN9e7g2PTXR7eChx21p0f4zv/V1u3TAmuvAOhqwTq20/adp+kGHiwLcZT7/oXdp/9C7Fmn/m5q2l/iNAGA9y9r/xqZ9BvbQG/T/oXdp/9C7tH/oXdo/9KT8m/DVeuJqRLT3tfnOJrL3n7ue6SoSadql3Ac69oJpstrXiUrXbkF0uwIsM/FX/mOb2Z7P7mruX6788m6/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTG3wEAAP//EuLdgA==") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x28) link(0x0, &(0x7f00000000c0)='./file0\x00') 5m59.916333037s ago: executing program 2 (id=606): mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {0x0}], 0x2) 5m59.5841686s ago: executing program 2 (id=614): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 5m59.04006858s ago: executing program 2 (id=619): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa461ad7e48489bffa56020013f811186809fc071200000f0000ff3f21396963d43e89b0ee000000170a001700e0da8979d2fc6ca9e48270faf047145bc79e0b9971bcbedac0eeed49dbacf96eeb9b912cc16ce06b8a416e551bbf8c00c774461dfac48219fef1aedf5bc9cb6f6b993cb35bab8014fb3597624155d71ffd4e87d3d3e9e49cd80d", 0x8a}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101843) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 5m58.540225525s ago: executing program 2 (id=626): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x1e57, 0x0, 0x3, 0x3ff, 0x2, "04ad7d2ed56d7fcb3678002e000000000d00", 0x400005, 0x205}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) 5m58.328785432s ago: executing program 33 (id=626): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x1e57, 0x0, 0x3, 0x3ff, 0x2, "04ad7d2ed56d7fcb3678002e000000000d00", 0x400005, 0x205}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) 5m27.007729335s ago: executing program 3 (id=1066): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 5m26.918915087s ago: executing program 3 (id=1067): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000001850000007500000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m26.696146725s ago: executing program 3 (id=1069): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 5m26.42842482s ago: executing program 3 (id=1072): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x17b, &(0x7f0000000300)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r0, 0x0, 0x0) 5m25.721214051s ago: executing program 3 (id=1075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m25.017478332s ago: executing program 3 (id=1081): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x269, &(0x7f0000000200)="$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") pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) sendfile(r0, r1, 0x0, 0x1855) 5m24.734008588s ago: executing program 34 (id=1081): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x269, &(0x7f0000000200)="$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") pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) sendfile(r0, r1, 0x0, 0x1855) 34.091647156s ago: executing program 7 (id=5675): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) 34.029219943s ago: executing program 7 (id=5677): syz_open_dev$usbfs(0x0, 0x204, 0x2) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x1}}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 33.904696009s ago: executing program 7 (id=5680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}, 0x3, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@random={0xbf}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 33.766508187s ago: executing program 7 (id=5684): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = socket$inet(0x2, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 33.629044725s ago: executing program 7 (id=5686): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x1c880, &(0x7f0000000000)=ANY=[], 0xfb, 0x607b, &(0x7f00000084c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 32.764268097s ago: executing program 7 (id=5696): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x4, 0x17, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x4, 0x101, 0x0}) setfsgid(0xee00) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 17.210974822s ago: executing program 35 (id=5696): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x4, 0x17, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x4, 0x101, 0x0}) setfsgid(0xee00) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 5.223440017s ago: executing program 0 (id=5943): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_connect$printer(0x7, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7f, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x2, 0x10, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x52, 0x3, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.101943499s ago: executing program 0 (id=5987): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffefff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 1.979682495s ago: executing program 0 (id=5990): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000000)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.843686383s ago: executing program 0 (id=5994): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x42}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x20040010) 1.742755525s ago: executing program 0 (id=5998): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r2, 0xf}, &(0x7f0000000440)=0x8) 1.47481528s ago: executing program 6 (id=6013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d00, 0x0, 0x3}]}) 1.376611683s ago: executing program 6 (id=6004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x4}}, {@generic={0x8864}}}}, 0x16) 1.250831269s ago: executing program 6 (id=6006): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x5, 0x7, 0x401, 0x7]}, &(0x7f0000000140)=0x54) 1.200744016s ago: executing program 8 (id=6007): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = dup(r0) read$FUSE(r1, 0x0, 0x2) write$FUSE_INIT(r1, &(0x7f0000002100)={0x50}, 0x50) 1.091280549s ago: executing program 8 (id=6009): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x20404a, &(0x7f00000014c0)=ANY=[], 0xfd, 0x1f5, &(0x7f00000015c0)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 957.196957ms ago: executing program 8 (id=6010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x82202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000600)=@arm64={0xcc, 0x8, 0x5}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x80000, 0x0, {[0x7, 0x5dfc, 0x100000000, 0x7fff, 0xd61, 0x5, 0x8, 0xdc]}}) 815.197105ms ago: executing program 0 (id=6011): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x20008d0, &(0x7f0000000b00)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030302c00a89f6b8d5800aa95feffffffdcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610936dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf49eb015acb84bb90577b8b405a48292eeca69f5275cb7b7027d4bf643bd69b034c0221a30000000000000001ee5e651f242b1f8beb01e05d73544abf22c2b8f726f25d18963fa5ea6c5ac79627070a8c84f13d4246d362f4acc77b5c072b727bc548c830e4801b5072c5882d3a570e3066895b66cdbf9e3283962616af4de0d21d19aad529c3dc433ab1dee46b3314fd1364a7d2354e0971223a2dac161d2e11464dd60d721d4500d4d720113d1779f6a04f19a3a88905e1784d86636e75e8a09967075313f399dff889eecfa7b1361b825fe2ecd10711a159eb71f920da4170977405df15442d9c49f9bd62b65a3789d924681e3629fbcac7c47bfaeb2fe10b948c1940762"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000d40)={'#! ', './file1'}, 0xb) copy_file_range(r1, &(0x7f0000000100), r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) 778.967239ms ago: executing program 8 (id=6014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x10) 744.643804ms ago: executing program 4 (id=6015): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x102, 0x0) getdents(r0, &(0x7f0000000000)=""/27, 0x1b) 650.512076ms ago: executing program 8 (id=6016): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x3, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0xffffffffffffffff, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) writev(r0, &(0x7f0000000380)=[{&(0x7f0000001ac0)='\t', 0x1}], 0x1) 605.861052ms ago: executing program 4 (id=6017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000840)={@val={0x0, 0xf7}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x1, 0x500, 0x0, 0x13, {[@exp_fastopen={0xfe, 0x7, 0xf989, "f8ffe0"}, @timestamp={0x5, 0xa, 0xfffe, 0x88000}, @generic={0x0, 0x4, "d588"}]}}}}}}, 0x4e) 605.241162ms ago: executing program 5 (id=6027): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x4, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 537.069901ms ago: executing program 8 (id=6018): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 451.381562ms ago: executing program 5 (id=6019): r0 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xade0, 0x400, 0x2, 0x157}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x3e}, 0x0, 0x80002001}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000004080)="17", 0x1}], 0x1, &(0x7f0000000140)=ANY=[], 0x348}}], 0x1, 0xbc75a2656df7d18c) 439.003443ms ago: executing program 6 (id=6020): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) 373.006672ms ago: executing program 5 (id=6021): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) 333.408997ms ago: executing program 6 (id=6022): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) 333.170527ms ago: executing program 4 (id=6023): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x50) 241.451569ms ago: executing program 5 (id=6024): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000004c0)=0x10000, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x80, 0x3}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 240.920149ms ago: executing program 6 (id=6025): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000003c0)={&(0x7f0000000380)=[{0xd0, 0x4201, 0x0, 0x0}], 0x1}) 238.219109ms ago: executing program 4 (id=6035): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000", 0x0, 0xfe, 0x60000000}, 0x50) 124.824404ms ago: executing program 5 (id=6026): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0xa800) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5437, 0x0) 123.930944ms ago: executing program 4 (id=6038): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x50) 557.3µs ago: executing program 5 (id=6028): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x102, 0x0) getdents(r0, &(0x7f0000000000)=""/27, 0x1b) 0s ago: executing program 4 (id=6029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x80, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "84fe64b7f17bbfe544a024e94545215207cf7e23cae3059222add5e03807a4aa45b83f1ff089a4cfcd90cf3444fe271e62163443f227ce292cdf4d5e7f3d6dd347a3"}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) kernel console output (not intermixed with test programs): 7][ T4776] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 314.913518][ T4776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.921770][ T4776] usb 6-1: Product: syz [ 314.926585][ T4776] usb 6-1: Manufacturer: syz [ 314.930369][ T23] usb 8-1: USB disconnect, device number 27 [ 314.937947][ T4776] usb 6-1: SerialNumber: syz [ 314.950701][ T4776] r8152-cfgselector 6-1: config 0 descriptor?? [ 315.044191][ T13] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 315.144487][ T2855] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 315.214177][ T4776] r8152-cfgselector 6-1: Unknown version 0x0000 [ 315.294100][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 315.384466][ T2855] usb 7-1: Using ep0 maxpacket: 16 [ 315.437980][ T13] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 315.450331][ T13] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 315.461012][ T13] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.474293][ T13] usb 5-1: config 1 interface 0 has no altsetting 0 [ 315.505918][ T2855] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.530969][ T2855] usb 7-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 315.546071][ T2855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.560955][ T2855] usb 7-1: config 0 descriptor?? [ 315.667592][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 315.680426][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.688593][ T13] usb 5-1: Product: syz [ 315.692770][ T13] usb 5-1: Manufacturer: syz [ 315.701366][ T13] usb 5-1: SerialNumber: syz [ 315.968442][ T13] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 316.026976][ T2855] logitech-djreceiver 0003:046D:C531.0027: unbalanced collection at end of report description [ 316.038029][ T2855] logitech-djreceiver 0003:046D:C531.0027: logi_dj_probe: parse failed [ 316.046739][ T2855] logitech-djreceiver: probe of 0003:046D:C531.0027 failed with error -22 [ 316.172655][ T13] usb 5-1: USB disconnect, device number 37 [ 316.183857][ T13] usblp0: removed [ 316.246414][ T2855] usb 7-1: USB disconnect, device number 34 [ 316.715098][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3626'. [ 316.769122][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.775475][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.063946][ T2855] r8152-cfgselector 6-1: USB disconnect, device number 30 [ 317.220591][ T13] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 317.242742][ T13] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 317.712525][T13690] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3633'. [ 317.771169][T13694] CIFS mount error: No usable UNC path provided in device string! [ 317.771169][T13694] [ 317.784916][T13694] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 318.021208][ T4776] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 318.048407][ T4776] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 318.064123][ T1107] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 318.314111][ T1107] usb 8-1: Using ep0 maxpacket: 16 [ 318.434353][ T1107] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.449409][ T1107] usb 8-1: config 0 has no interfaces? [ 318.614262][ T1107] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 318.623530][ T1107] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.632181][ T1107] usb 8-1: Product: syz [ 318.636759][ T1107] usb 8-1: Manufacturer: syz [ 318.641380][ T1107] usb 8-1: SerialNumber: syz [ 318.655475][ T1107] r8152-cfgselector 8-1: config 0 descriptor?? [ 318.874091][ T4776] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 318.904135][ T1107] r8152-cfgselector 8-1: Unknown version 0x0000 [ 319.234315][ T4776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.245650][ T4776] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 319.254829][ T4776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.269007][ T4776] usb 7-1: config 0 descriptor?? [ 319.714096][ T1107] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 319.755418][ T4776] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 319.767502][ T4776] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.002A/input/input56 [ 319.851564][ T4776] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 320.084234][ T1107] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 320.092956][ T1107] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 320.103710][ T1107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 320.112847][ T1107] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 320.124561][ T1107] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 320.254667][ T1107] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 320.264224][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 320.272313][ T1107] usb 5-1: Product: syz [ 320.277420][ T1107] usb 5-1: Manufacturer: syz [ 320.327500][ T1107] cdc_wdm 5-1:1.0: skipping garbage [ 320.332866][ T1107] cdc_wdm 5-1:1.0: skipping garbage [ 320.341494][ T1107] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 320.358256][ T1107] cdc_wdm 5-1:1.0: Unknown control protocol [ 320.794921][ T1107] r8152-cfgselector 8-1: USB disconnect, device number 28 [ 321.279978][ T7016] usb 5-1: USB disconnect, device number 38 [ 321.298843][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3653'. [ 321.371605][T13763] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3657'. [ 321.650411][ T4777] usb 7-1: USB disconnect, device number 35 [ 322.052187][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3679'. [ 322.086858][ T1107] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 322.348386][ T1107] usb 8-1: Using ep0 maxpacket: 8 [ 322.477468][ T1107] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 322.526386][ T4777] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 322.659736][ T1107] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 322.679097][ T1107] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.709584][ T1107] usb 8-1: Product: syz [ 322.713788][ T1107] usb 8-1: Manufacturer: syz [ 322.732613][ T1107] usb 8-1: SerialNumber: syz [ 322.754890][ T1107] usb 8-1: config 0 descriptor?? [ 322.796090][ T1107] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 322.814651][ T1107] usb 8-1: setting power ON [ 322.819204][ T1107] dvb-usb: bulk message failed: -22 (2/0) [ 322.852402][ T1107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 322.889867][ T1107] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 322.904362][ T4777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.925611][ T4777] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 322.944103][ T1107] usb 8-1: media controller created [ 322.964125][ T4777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.992333][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.005279][T13791] dvb-usb: bulk message failed: -22 (3/0) [ 323.011044][T13791] dvb-usb: bulk message failed: -22 (4/0) [ 323.022122][ T4777] usb 5-1: config 0 descriptor?? [ 323.039733][T13791] cxusb: i2c read failed [ 323.054718][ T1107] usb 8-1: selecting invalid altsetting 6 [ 323.060473][ T1107] usb 8-1: digital interface selection failed (-22) [ 323.076357][ T1107] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 323.084095][T13791] dvb-usb: bulk message failed: -22 (3/0) [ 323.124171][ T1107] usb 8-1: setting power OFF [ 323.130808][ T1107] dvb-usb: bulk message failed: -22 (2/0) [ 323.142515][ T1107] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 323.152103][ T1107] (NULL device *): no alternate interface [ 323.195272][ T1107] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 323.226174][ T1107] usb 8-1: USB disconnect, device number 29 [ 323.495590][ T4777] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 323.513278][ T4777] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.002B/input/input57 [ 323.604536][ T4777] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 325.266739][ T13] usb 5-1: USB disconnect, device number 39 [ 325.453486][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3698'. [ 325.547610][T13859] device macvlan0 left promiscuous mode [ 325.606077][ T2855] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 325.792196][T13882] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3712'. [ 325.995475][T13899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3720'. [ 326.214235][ T2855] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 326.233574][ T2855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.250273][ T2855] usb 7-1: Product: syz [ 326.255782][ T2855] usb 7-1: Manufacturer: syz [ 326.266028][ T2855] usb 7-1: SerialNumber: syz [ 326.285947][ T2855] usb 7-1: config 0 descriptor?? [ 326.390499][T13916] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 326.590155][ T4776] usb 7-1: USB disconnect, device number 36 [ 326.843382][ T4184] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 326.854657][ T4184] CPU: 1 PID: 4184 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 326.862251][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.872339][ T4184] Workqueue: hci2 hci_rx_work [ 326.877081][ T4184] Call Trace: [ 326.880388][ T4184] [ 326.883341][ T4184] dump_stack_lvl+0x188/0x250 [ 326.888062][ T4184] ? show_regs_print_info+0x20/0x20 [ 326.893301][ T4184] ? load_image+0x400/0x400 [ 326.897852][ T4184] sysfs_create_dir_ns+0x26a/0x290 [ 326.903004][ T4184] ? sysfs_warn_dup+0xa0/0xa0 [ 326.907712][ T4184] ? process_one_work+0x85f/0x1010 [ 326.912864][ T4184] ? do_raw_spin_unlock+0x11d/0x230 [ 326.918095][ T4184] kobject_add_internal+0x6e0/0xd90 [ 326.923336][ T4184] kobject_add+0x160/0x230 [ 326.927801][ T4184] ? kobject_init+0x1d0/0x1d0 [ 326.932521][ T4184] ? klist_children_get+0x50/0x50 [ 326.937580][ T4184] ? get_device_parent+0x121/0x3f0 [ 326.942735][ T4184] device_add+0x483/0xfb0 [ 326.947119][ T4184] hci_conn_add_sysfs+0xd1/0x1e0 [ 326.952101][ T4184] le_conn_complete_evt+0xc48/0x15c0 [ 326.957437][ T4184] ? cs_le_create_conn+0x5e0/0x5e0 [ 326.962588][ T4184] ? __mutex_trylock_common+0x155/0x260 [ 326.968178][ T4184] hci_le_meta_evt+0x285/0x3c90 [ 326.973064][ T4184] ? hci_event_packet+0x37b/0x1370 [ 326.978206][ T4184] ? __lock_acquire+0x7d10/0x7d10 [ 326.983279][ T4184] ? hci_remote_host_features_evt+0x280/0x280 [ 326.989382][ T4184] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 326.995052][ T4184] ? mark_lock+0x94/0x320 [ 326.999417][ T4184] ? mutex_unlock+0x10/0x10 [ 327.003953][ T4184] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 327.009992][ T4184] ? lock_chain_count+0x20/0x20 [ 327.014880][ T4184] ? __rwlock_init+0x140/0x140 [ 327.019682][ T4184] hci_event_packet+0xe48/0x1370 [ 327.024655][ T4184] ? lockdep_hardirqs_on+0x94/0x140 [ 327.029896][ T4184] ? rcu_lock_release+0x20/0x20 [ 327.034786][ T4184] ? hci_send_to_monitor+0x9c/0x4a0 [ 327.040019][ T4184] hci_rx_work+0x255/0xa10 [ 327.044480][ T4184] process_one_work+0x85f/0x1010 [ 327.049456][ T4184] ? worker_detach_from_pool+0x240/0x240 [ 327.055122][ T4184] ? lockdep_hardirqs_off+0x70/0x100 [ 327.060444][ T4184] ? _raw_spin_lock_irq+0xb7/0xf0 [ 327.065495][ T4184] ? _raw_spin_lock_irqsave+0x100/0x100 [ 327.071079][ T4184] ? wq_worker_running+0x97/0x170 [ 327.076134][ T4184] worker_thread+0xaa6/0x1290 [ 327.080863][ T4184] kthread+0x436/0x520 [ 327.084958][ T4184] ? rcu_lock_release+0x20/0x20 [ 327.089833][ T4184] ? kthread_blkcg+0xd0/0xd0 [ 327.094459][ T4184] ret_from_fork+0x1f/0x30 [ 327.098922][ T4184] [ 327.102023][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.110802][ T4184] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 327.124136][ T4184] Bluetooth: hci2: failed to register connection device [ 327.786231][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3756'. [ 327.810118][T13982] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3756'. [ 328.374112][ T13] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 328.637292][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 328.914129][ T13] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 328.923472][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.931670][ T13] usb 5-1: Product: syz [ 328.940518][ T4777] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 328.948258][ T13] usb 5-1: Manufacturer: syz [ 328.952871][ T13] usb 5-1: SerialNumber: syz [ 328.963789][ T13] usb 5-1: config 0 descriptor?? [ 329.184079][ T4777] usb 6-1: Using ep0 maxpacket: 16 [ 329.305423][ T4777] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.331166][ T4777] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 329.390773][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3789'. [ 329.401455][T14053] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3789'. [ 329.444356][ T13] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 329.461749][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 329.494399][ T13] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 329.502360][ T13] usb 5-1: media controller created [ 329.514267][ T4777] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 329.531535][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 329.540110][ T4777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.548208][ T4777] usb 6-1: Product: syz [ 329.552650][ T4777] usb 6-1: Manufacturer: syz [ 329.558343][ T4777] usb 6-1: SerialNumber: syz [ 329.583341][ T4777] r8152-cfgselector 6-1: config 0 descriptor?? [ 329.677113][T14069] device syzkaller1 entered promiscuous mode [ 329.844167][ T4777] r8152-cfgselector 6-1: Unknown version 0x0000 [ 330.114235][ T13] zl10353_read_register: readreg error (reg=127, ret==0) [ 330.114347][T13994] dtv5100: wlen = 0, aborting. [ 330.126250][ T13] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 330.126268][ T13] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 330.173779][ T13] usb 5-1: USB disconnect, device number 40 [ 330.197986][ T13] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 331.225137][T14099] device syzkaller1 entered promiscuous mode [ 331.674431][ T7015] r8152-cfgselector 6-1: USB disconnect, device number 31 [ 331.769791][T14126] device geneve2 entered promiscuous mode [ 331.926911][T14140] netlink: 'syz.7.3833': attribute type 12 has an invalid length. [ 332.055947][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 332.067051][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 332.074652][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.084737][ T4199] Workqueue: hci1 hci_rx_work [ 332.089455][ T4199] Call Trace: [ 332.092770][ T4199] [ 332.095725][ T4199] dump_stack_lvl+0x188/0x250 [ 332.100434][ T4199] ? show_regs_print_info+0x20/0x20 [ 332.105656][ T4199] ? load_image+0x400/0x400 [ 332.110183][ T4199] sysfs_create_dir_ns+0x26a/0x290 [ 332.115311][ T4199] ? sysfs_warn_dup+0xa0/0xa0 [ 332.120241][ T4199] ? process_one_work+0x85f/0x1010 [ 332.125383][ T4199] ? do_raw_spin_unlock+0x11d/0x230 [ 332.130618][ T4199] kobject_add_internal+0x6e0/0xd90 [ 332.135850][ T4199] kobject_add+0x160/0x230 [ 332.140288][ T4199] ? kobject_init+0x1d0/0x1d0 [ 332.144987][ T4199] ? klist_children_get+0x50/0x50 [ 332.150027][ T4199] ? get_device_parent+0x121/0x3f0 [ 332.155160][ T4199] device_add+0x483/0xfb0 [ 332.159516][ T4199] hci_conn_add_sysfs+0xd1/0x1e0 [ 332.164481][ T4199] le_conn_complete_evt+0xc48/0x15c0 [ 332.169803][ T4199] ? cs_le_create_conn+0x5e0/0x5e0 [ 332.174956][ T4199] ? __mutex_trylock_common+0x155/0x260 [ 332.180536][ T4199] hci_le_meta_evt+0x285/0x3c90 [ 332.185408][ T4199] ? hci_event_packet+0x37b/0x1370 [ 332.190538][ T4199] ? __lock_acquire+0x7d10/0x7d10 [ 332.195595][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 332.201771][ T4199] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 332.207432][ T4199] ? mark_lock+0x94/0x320 [ 332.211782][ T4199] ? mutex_unlock+0x10/0x10 [ 332.216310][ T4199] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 332.222315][ T4199] ? lock_chain_count+0x20/0x20 [ 332.227186][ T4199] ? __rwlock_init+0x140/0x140 [ 332.231977][ T4199] hci_event_packet+0xe48/0x1370 [ 332.236936][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 332.242160][ T4199] ? rcu_lock_release+0x20/0x20 [ 332.247035][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 332.252254][ T4199] hci_rx_work+0x255/0xa10 [ 332.256701][ T4199] process_one_work+0x85f/0x1010 [ 332.261673][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 332.267330][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 332.272648][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 332.277696][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 332.283267][ T4199] ? wq_worker_running+0x97/0x170 [ 332.288311][ T4199] worker_thread+0xaa6/0x1290 [ 332.293017][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 332.298239][ T4199] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 332.304247][ T4199] kthread+0x436/0x520 [ 332.308463][ T4199] ? rcu_lock_release+0x20/0x20 [ 332.313545][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 332.318167][ T4199] ret_from_fork+0x1f/0x30 [ 332.322622][ T4199] [ 332.327388][ T7015] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 332.335947][ T4199] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 332.349852][ T4199] Bluetooth: hci1: failed to register connection device [ 332.561867][T14166] device geneve2 entered promiscuous mode [ 332.698618][T14174] netlink: 'syz.4.3847': attribute type 12 has an invalid length. [ 332.964238][ T7015] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 332.983651][ T7015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.014679][ T7015] usb 6-1: Product: syz [ 333.022679][ T7015] usb 6-1: Manufacturer: syz [ 333.037968][ T7015] usb 6-1: SerialNumber: syz [ 333.056677][ T7015] usb 6-1: config 0 descriptor?? [ 333.158114][T14195] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 333.198169][T14195] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 333.224102][T14195] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 333.244147][ T4777] Bluetooth: hci2: command 0x0406 tx timeout [ 333.279360][T14195] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 333.290326][T14195] device geneve2 entered promiscuous mode [ 333.359706][ T7015] usb 6-1: USB disconnect, device number 32 [ 333.764033][ T2855] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 334.034547][ T2855] usb 8-1: Using ep0 maxpacket: 16 [ 334.174911][ T2855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.192330][ T2855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.202673][ T2855] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 334.212759][ T2855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.229725][ T2855] usb 8-1: config 0 descriptor?? [ 334.330837][T14234] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3877'. [ 334.436852][ T23] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 334.727570][ T2855] mcp2221 0003:04D8:00DD.002C: unknown main item tag 0x0 [ 334.735066][ T2855] mcp2221 0003:04D8:00DD.002C: unknown main item tag 0x0 [ 334.742168][ T2855] mcp2221 0003:04D8:00DD.002C: unknown main item tag 0x0 [ 334.749731][ T2855] mcp2221 0003:04D8:00DD.002C: unknown main item tag 0x0 [ 334.757614][ T2855] mcp2221 0003:04D8:00DD.002C: unknown main item tag 0x0 [ 334.765732][ T2855] mcp2221 0003:04D8:00DD.002C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 334.864801][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.885730][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.896419][ T7015] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 334.907731][ T23] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 334.923910][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.948267][ T23] usb 6-1: config 0 descriptor?? [ 334.960285][ T2855] usb 8-1: USB disconnect, device number 30 [ 335.040582][T14259] device geneve2 entered promiscuous mode [ 335.447967][ T23] hid-steam 0003:28DE:1142.002D: unknown main item tag 0x0 [ 335.455774][ T23] hid-steam 0003:28DE:1142.002D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 335.469079][ T23] hid-steam 0003:28DE:1142.002E: unknown main item tag 0x0 [ 335.491167][ T23] hid-steam 0003:28DE:1142.002E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 335.502995][ T7015] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 335.519591][ T7015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.528504][ T7015] usb 5-1: Product: syz [ 335.533623][ T7015] usb 5-1: Manufacturer: syz [ 335.542519][ T7015] usb 5-1: SerialNumber: syz [ 335.560916][ T7015] usb 5-1: config 0 descriptor?? [ 335.567898][T14265] netlink: 277 bytes leftover after parsing attributes in process `syz.7.3891'. [ 335.594662][ T23] hid-steam 0003:28DE:1142.002D: Steam wireless receiver connected [ 335.602611][ T23] hid-steam 0003:28DE:1142.002D: No HID_FEATURE_REPORT submitted - nothing to read [ 336.419312][ T7015] mos7840 5-1:0.0: required endpoints missing [ 336.429478][ T7015] usb 5-1: USB disconnect, device number 41 [ 336.684215][ T13] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 336.704158][ T2855] usb 6-1: reset high-speed USB device number 33 using dummy_hcd [ 337.074299][ T13] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 337.085628][ T13] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.095812][ T13] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 337.105208][ T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.115516][ T13] usb 8-1: config 0 descriptor?? [ 337.596887][ T23] usb 6-1: USB disconnect, device number 33 [ 337.640713][ T13] savu 0003:1E7D:2D5A.002F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 337.641623][ T23] hid-steam 0003:28DE:1142.002D: Steam wireless receiver disconnected [ 337.888140][ T2855] usb 8-1: USB disconnect, device number 31 [ 338.444202][ T4777] Bluetooth: hci1: command 0x0406 tx timeout [ 338.694559][T14343] input: syz0 as /devices/virtual/input/input58 [ 338.703649][ T13] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 339.079965][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.094120][ T2855] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 339.100198][ T13] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 339.128186][ T13] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 339.143250][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.157297][T14367] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.174874][ T13] usb 6-1: config 0 descriptor?? [ 339.177339][T14367] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.204596][T14367] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.213439][T14367] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.247591][T14367] device geneve2 entered promiscuous mode [ 339.534700][ T2855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.554052][ T2855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.564019][ T2855] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 339.594039][ T2855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.621163][ T2855] usb 5-1: config 0 descriptor?? [ 339.675855][ T13] kovaplus 0003:1E7D:2D50.0030: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 340.000589][T14399] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 340.009948][T14399] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 340.020262][T14399] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 340.040305][T14399] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 340.060061][T14399] device geneve2 entered promiscuous mode [ 340.120961][ T2855] savu 0003:1E7D:2D5A.0031: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 340.314146][ T13] kovaplus 0003:1E7D:2D50.0030: couldn't init struct kovaplus_device [ 340.325688][ T13] kovaplus 0003:1E7D:2D50.0030: couldn't install mouse [ 340.343207][ T13] kovaplus: probe of 0003:1E7D:2D50.0030 failed with error -71 [ 340.372899][T14419] input: syz0 as /devices/virtual/input/input59 [ 340.405976][ T7015] usb 5-1: USB disconnect, device number 42 [ 340.414411][ T13] usb 6-1: USB disconnect, device number 34 [ 340.501552][T14422] fido_id[14422]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 340.688455][T14435] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 340.704044][T14435] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 340.712886][T14435] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 340.723109][T14435] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 340.734524][T14435] device geneve2 entered promiscuous mode [ 341.191051][T14468] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.200834][T14468] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.210143][T14468] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.220496][T14468] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.231899][T14468] device geneve2 entered promiscuous mode [ 341.341261][T14478] input: syz0 as /devices/virtual/input/input60 [ 341.354221][ T23] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 341.414173][ T7015] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 341.554110][ T4777] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 341.724453][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.736209][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.746670][ T23] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 341.756375][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.767888][ T23] usb 7-1: config 0 descriptor?? [ 341.824843][ T7015] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 341.839045][ T7015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.850233][ T7015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.860806][ T7015] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 341.914226][ T4777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 341.925717][ T4777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.935896][ T4777] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 341.945190][ T4777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.954846][ T7015] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 341.966241][ T4777] usb 6-1: config 0 descriptor?? [ 341.973465][ T7015] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 341.981741][ T7015] usb 5-1: Manufacturer: syz [ 341.994737][ T7015] usb 5-1: config 0 descriptor?? [ 342.258699][ T23] hid-steam 0003:28DE:1142.0032: unknown main item tag 0x0 [ 342.266768][ T23] hid-steam 0003:28DE:1142.0032: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 342.280448][ T23] hid-steam 0003:28DE:1142.0033: unknown main item tag 0x0 [ 342.289875][ T23] hid-steam 0003:28DE:1142.0033: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 342.384224][ T23] hid-steam 0003:28DE:1142.0032: Steam wireless receiver connected [ 342.392311][ T23] hid-steam 0003:28DE:1142.0032: No HID_FEATURE_REPORT submitted - nothing to read [ 342.451001][ T4777] savu 0003:1E7D:2D5A.0034: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 342.473877][ T7015] appleir 0003:05AC:8243.0035: unknown main item tag 0x0 [ 342.496970][ T7015] appleir 0003:05AC:8243.0035: No inputs registered, leaving [ 342.506533][ T7015] appleir 0003:05AC:8243.0035: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 342.731346][ T4777] usb 6-1: USB disconnect, device number 35 [ 342.731411][ T7015] usb 5-1: USB disconnect, device number 43 [ 343.494602][ T2855] usb 7-1: reset high-speed USB device number 37 using dummy_hcd [ 343.825014][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4001'. [ 343.834155][T14509] netlink: 'syz.4.4001': attribute type 5 has an invalid length. [ 343.841950][T14509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4001'. [ 343.854079][T14509] device geneve0 entered promiscuous mode [ 343.884673][ T23] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 344.205288][T14533] input: syz0 as /devices/virtual/input/input61 [ 344.254251][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.275143][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.307568][ T23] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 344.330096][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.355789][ T23] usb 6-1: config 0 descriptor?? [ 344.366548][ T7015] usb 7-1: USB disconnect, device number 37 [ 344.384482][ T7015] hid-steam 0003:28DE:1142.0032: Steam wireless receiver disconnected [ 344.637412][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4025'. [ 344.657831][T14559] device gtp0 entered promiscuous mode [ 344.667356][ T4777] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 344.886949][ T23] savu 0003:1E7D:2D5A.0036: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 344.968892][ T4777] usb 5-1: Using ep0 maxpacket: 16 [ 345.119763][ T4777] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 345.139868][ T4777] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 345.164171][ T4777] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.187538][ T4777] usb 5-1: config 1 interface 0 has no altsetting 0 [ 345.207956][ T13] usb 6-1: USB disconnect, device number 36 [ 345.384291][ T4777] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 345.402118][ T4777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.418752][ T4777] usb 5-1: Product: syz [ 345.423167][ T4777] usb 5-1: Manufacturer: syz [ 345.427950][ T4777] usb 5-1: SerialNumber: syz [ 345.717461][ T4777] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 345.946096][ T4777] usb 5-1: USB disconnect, device number 44 [ 345.967216][ T4777] usblp0: removed [ 346.091742][T14599] input: syz0 as /devices/virtual/input/input62 [ 346.360392][ T1107] kernel write not supported for file /1675/gid_map (pid: 1107 comm: kworker/0:2) [ 346.579843][ T4777] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 346.814114][ T2855] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 346.974226][ T4777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 346.985370][ T4777] usb 6-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 346.994910][ T4777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.006671][ T4777] usb 6-1: config 0 descriptor?? [ 347.024365][T14607] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 347.234206][ T2855] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.242924][ T2855] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.254158][ T2855] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.263186][ T2855] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.275079][ T2855] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.425223][ T2855] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.434547][ T2855] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.442581][ T2855] usb 8-1: Product: syz [ 347.447215][ T2855] usb 8-1: Manufacturer: syz [ 347.497363][ T2855] cdc_wdm 8-1:1.0: skipping garbage [ 347.502722][ T2855] cdc_wdm 8-1:1.0: skipping garbage [ 347.510637][ T2855] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 347.516846][ T2855] cdc_wdm 8-1:1.0: Unknown control protocol [ 347.535930][ T4777] wacom 0003:056A:0027.0037: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 347.548033][ T4777] wacom 0003:056A:0027.0037: hidraw0: USB HID v0.05 Device [HID 056a:0027] on usb-dummy_hcd.5-1/input0 [ 347.561206][ T4777] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0027.0037/input/input63 [ 347.701389][T14614] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 347.799379][ T4777] usb 6-1: USB disconnect, device number 37 [ 347.955001][ T1107] usb 8-1: USB disconnect, device number 32 [ 348.578090][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4052'. [ 348.587516][T14628] netlink: 'syz.6.4052': attribute type 5 has an invalid length. [ 348.596459][T14628] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4052'. [ 348.612613][T14628] device geneve0 entered promiscuous mode [ 351.144083][ T1107] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 351.165286][ T7015] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 351.504405][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.515528][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.525367][ T1107] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 351.534747][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.544434][ T1107] usb 5-1: config 0 descriptor?? [ 351.565391][ T7015] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 351.576986][ T7015] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.589085][ T7015] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.599463][ T7015] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 351.694283][ T7015] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 351.703396][ T7015] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 351.712040][ T7015] usb 6-1: Manufacturer: syz [ 351.720102][ T7015] usb 6-1: config 0 descriptor?? [ 352.026537][ T1107] hid-steam 0003:28DE:1142.0038: unknown main item tag 0x0 [ 352.037911][ T1107] hid-steam 0003:28DE:1142.0038: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 352.050579][ T1107] hid-steam 0003:28DE:1142.0039: unknown main item tag 0x0 [ 352.062653][ T1107] hid-steam 0003:28DE:1142.0039: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 352.144094][ T1107] hid-steam 0003:28DE:1142.0038: Steam wireless receiver connected [ 352.152128][ T1107] hid-steam 0003:28DE:1142.0038: No HID_FEATURE_REPORT submitted - nothing to read [ 352.206497][ T7015] appleir 0003:05AC:8243.003A: unknown main item tag 0x0 [ 352.221933][ T7015] appleir 0003:05AC:8243.003A: No inputs registered, leaving [ 352.246492][ T7015] appleir 0003:05AC:8243.003A: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 352.475718][ T7015] usb 6-1: USB disconnect, device number 38 [ 353.324176][ T1107] usb 5-1: reset high-speed USB device number 45 using dummy_hcd [ 353.931982][T14691] vivid-000: disconnect [ 353.961084][T14689] vivid-000: reconnect [ 354.198707][ T13] usb 5-1: USB disconnect, device number 45 [ 354.215305][ T13] hid-steam 0003:28DE:1142.0038: Steam wireless receiver disconnected [ 354.337240][T14724] vivid-003: disconnect [ 354.352228][T14724] vivid-003: reconnect [ 354.424364][T14733] input: syz0 as /devices/virtual/input/input66 [ 354.923538][T14757] device syz_tun entered promiscuous mode [ 354.943754][T14757] device syz_tun left promiscuous mode [ 355.364672][ T2855] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 355.750830][T14798] device syz_tun entered promiscuous mode [ 355.757747][T14798] device bond0 entered promiscuous mode [ 355.763404][T14798] device bond_slave_0 entered promiscuous mode [ 355.770131][ T2855] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.781176][T14798] device bond_slave_1 entered promiscuous mode [ 355.787492][ T2855] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.801190][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr2: link becomes ready [ 355.878894][T14803] tipc: Started in network mode [ 355.883879][T14803] tipc: Node identity ac14142f, cluster identity 4711 [ 355.890447][ T2855] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 355.892729][T14803] tipc: New replicast peer: 0.0.0.0 [ 355.907936][T14803] tipc: Enabled bearer , priority 10 [ 355.909480][ T2855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 355.923794][T14803] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4128'. [ 355.932914][ T2855] usb 8-1: SerialNumber: syz [ 356.206979][ T2855] usb 8-1: 0:2 : does not exist [ 356.294169][ T4777] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 356.414693][ T2855] usb 8-1: 5:0: cannot get min/max values for control 7 (id 5) [ 356.432518][ T2855] usb 8-1: USB disconnect, device number 33 [ 356.654205][ T4777] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 356.663713][ T4777] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.673950][ T4777] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 356.678898][ T7241] udevd[7241]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.682985][ T4777] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.683015][ T4777] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.846698][ T4777] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 356.864481][ T4777] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 356.872521][ T4777] usb 5-1: Product: syz [ 356.885119][ T4777] usb 5-1: Manufacturer: syz [ 356.945145][ T4777] cdc_wdm 5-1:1.0: skipping garbage [ 356.950406][ T4777] cdc_wdm 5-1:1.0: skipping garbage [ 356.980963][ T4777] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 356.987237][ T4777] cdc_wdm 5-1:1.0: Unknown control protocol [ 357.039447][ T4777] tipc: Node number set to 2886997039 [ 357.183932][T14809] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 357.304186][ T2855] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 357.377542][ T13] usb 5-1: USB disconnect, device number 46 [ 357.476668][T14840] device syz_tun entered promiscuous mode [ 357.483609][T14840] device bond0 entered promiscuous mode [ 357.498896][T14840] device bond_slave_0 entered promiscuous mode [ 357.506171][T14840] device bond_slave_1 entered promiscuous mode [ 357.513607][T14840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.523160][T14842] input: syz0 as /devices/virtual/input/input67 [ 357.539351][T14840] Cannot create hsr debugfs directory [ 357.551363][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 357.604845][ T23] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 357.728683][ T2855] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 357.747469][ T2855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.762826][ T2855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.773358][ T2855] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 357.864221][ T2855] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 357.873461][ T2855] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 357.882269][ T2855] usb 6-1: Manufacturer: syz [ 357.889076][ T2855] usb 6-1: config 0 descriptor?? [ 357.998109][ T23] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 358.009539][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.033505][ T23] usb 8-1: config 0 descriptor?? [ 358.037715][T14863] device batadv_slave_1 entered promiscuous mode [ 358.049877][T14862] device batadv_slave_1 left promiscuous mode [ 358.086606][ T23] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 358.374559][ T13] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 358.378466][ T2855] appleir 0003:05AC:8243.003B: unknown main item tag 0x0 [ 358.390720][ T2855] appleir 0003:05AC:8243.003B: No inputs registered, leaving [ 358.404110][ T2855] appleir 0003:05AC:8243.003B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 358.529177][ T23] cpia1 8-1:0.0: unexpected state after lo power cmd: 00 [ 358.634119][ T13] usb 7-1: Using ep0 maxpacket: 16 [ 358.656191][ T2855] usb 6-1: USB disconnect, device number 39 [ 358.734122][ T23] gspca_cpia1: usb_control_msg 01, error -32 [ 358.774696][ T23] gspca_cpia1: usb_control_msg 01, error -71 [ 358.780741][ T23] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 358.791314][ T23] usb 8-1: USB disconnect, device number 34 [ 358.944178][ T13] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 358.953364][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.961803][ T13] usb 7-1: Product: syz [ 358.966281][ T13] usb 7-1: Manufacturer: syz [ 358.970981][ T13] usb 7-1: SerialNumber: syz [ 358.977072][ T13] r8152-cfgselector 7-1: config 0 descriptor?? [ 359.201650][T14874] device syz_tun entered promiscuous mode [ 359.210374][T14874] device syz_tun left promiscuous mode [ 359.244251][ T13] r8152-cfgselector 7-1: Unknown version 0x0000 [ 359.284235][ T13] r8152-cfgselector 7-1: Unknown version 0x0000 [ 359.499614][ T13] r8152-cfgselector 7-1: USB disconnect, device number 38 [ 359.627119][T14908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.720780][T14917] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4182'. [ 360.296038][ T13] kernel write not supported for file /input/mouse0 (pid: 13 comm: kworker/0:1) [ 360.401734][T14950] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x0) [ 360.705345][ T2855] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 360.984588][ T2855] usb 5-1: Using ep0 maxpacket: 16 [ 361.324836][ T2855] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 361.354044][ T2855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.372392][ T2855] usb 5-1: Product: syz [ 361.382523][ T2855] usb 5-1: Manufacturer: syz [ 361.392683][ T2855] usb 5-1: SerialNumber: syz [ 361.417252][ T2855] r8152-cfgselector 5-1: config 0 descriptor?? [ 361.600870][ T1107] kernel write not supported for file /input/mouse0 (pid: 1107 comm: kworker/0:2) [ 361.674135][ T2855] r8152-cfgselector 5-1: Unknown version 0x0000 [ 361.724335][ T2855] r8152-cfgselector 5-1: Unknown version 0x0000 [ 361.868106][T14913] Set syz1 is full, maxelem 65536 reached [ 361.937063][ T1107] r8152-cfgselector 5-1: USB disconnect, device number 47 [ 361.964163][ T7015] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 362.044691][ T13] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 362.334248][ T7015] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 362.345305][ T7015] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.357040][ T7015] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.366852][ T7015] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 362.434691][ T13] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.444670][ T13] usb 7-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 362.454514][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.462222][ T7015] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 362.470517][ T13] usb 7-1: config 0 descriptor?? [ 362.481942][ T7015] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 362.490238][ T7015] usb 8-1: Manufacturer: syz [ 362.502172][ T7015] usb 8-1: config 0 descriptor?? [ 362.593771][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4217'. [ 362.669232][T15005] device syzkaller1 entered promiscuous mode [ 362.953557][ T13] petalynx 0003:18B1:0037.003C: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.6-1/input0 [ 363.006037][ T7015] appleir 0003:05AC:8243.003D: unknown main item tag 0x0 [ 363.023876][ T7015] appleir 0003:05AC:8243.003D: No inputs registered, leaving [ 363.047998][ T7015] appleir 0003:05AC:8243.003D: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 363.153664][ T1107] usb 7-1: USB disconnect, device number 39 [ 363.244090][ T13] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 363.317840][ T7015] usb 8-1: USB disconnect, device number 35 [ 363.484162][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 363.764198][ T13] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 363.773303][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.785228][ T13] usb 5-1: Product: syz [ 363.789438][ T13] usb 5-1: Manufacturer: syz [ 363.794128][ T13] usb 5-1: SerialNumber: syz [ 363.816226][ T13] r8152-cfgselector 5-1: config 0 descriptor?? [ 363.975582][T15051] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4238'. [ 364.004259][T15051] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4238'. [ 364.124075][ T13] r8152-cfgselector 5-1: Unknown version 0x0000 [ 364.136460][T15059] device syzkaller1 entered promiscuous mode [ 364.174314][ T13] r8152-cfgselector 5-1: Unknown version 0x0000 [ 364.378406][ T1107] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 364.388784][ T7015] r8152-cfgselector 5-1: USB disconnect, device number 48 [ 364.504638][T15085] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 364.511487][T15087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4254'. [ 364.534696][T15087] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4254'. [ 364.747747][ T1107] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 364.765354][ T1107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.793930][T15104] device syzkaller1 entered promiscuous mode [ 364.799740][ T1107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.821868][ T1107] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 364.924099][ T1107] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 364.933198][ T1107] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 364.961849][ T1107] usb 7-1: Manufacturer: syz [ 364.980017][ T1107] usb 7-1: config 0 descriptor?? [ 365.025587][T15115] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4270'. [ 365.044177][T15115] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4270'. [ 365.476927][ T1107] appleir 0003:05AC:8243.003E: unknown main item tag 0x0 [ 365.490869][ T1107] appleir 0003:05AC:8243.003E: No inputs registered, leaving [ 365.526899][ T1107] appleir 0003:05AC:8243.003E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 365.866690][ T23] usb 7-1: USB disconnect, device number 40 [ 366.233568][ T1107] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 366.597535][ T1107] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 366.617505][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.633876][ T1107] usb 5-1: config 0 descriptor?? [ 366.678490][ T1107] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 367.116368][ T1107] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 367.324523][ T1107] gspca_cpia1: usb_control_msg 01, error -32 [ 367.377288][ T1107] gspca_cpia1: usb_control_msg 01, error -71 [ 367.386345][ T1107] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 367.419308][ T1107] usb 5-1: USB disconnect, device number 49 [ 368.109201][ T1107] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 368.494172][ T1107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.508600][ T1107] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 368.520349][ T1107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.536707][ T1107] usb 6-1: config 0 descriptor?? [ 369.017065][ T1107] petalynx 0003:18B1:0037.003F: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.5-1/input0 [ 369.234577][ T7012] usb 6-1: USB disconnect, device number 40 [ 369.522364][T15266] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4339'. [ 369.594602][ T23] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 369.854666][ T23] usb 7-1: Using ep0 maxpacket: 16 [ 370.194122][ T23] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 370.203246][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.211693][ T23] usb 7-1: Product: syz [ 370.216688][ T23] usb 7-1: Manufacturer: syz [ 370.221367][ T23] usb 7-1: SerialNumber: syz [ 370.234903][ T23] r8152-cfgselector 7-1: config 0 descriptor?? [ 370.504135][ T23] r8152-cfgselector 7-1: Unknown version 0x0000 [ 370.554741][ T23] r8152-cfgselector 7-1: Unknown version 0x0000 [ 370.763499][ T23] r8152-cfgselector 7-1: USB disconnect, device number 41 [ 371.933281][T15323] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4366'. [ 371.942492][T15323] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4366'. [ 371.952186][T15323] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4366'. [ 372.181917][T15335] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 373.060536][T15348] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4378'. [ 373.069699][T15348] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4378'. [ 373.079926][T15348] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4378'. [ 373.430007][T15367] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4386'. [ 373.750021][ T4777] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 374.024090][ T4777] usb 8-1: Using ep0 maxpacket: 32 [ 374.263499][T15398] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4402'. [ 374.304267][ T4777] usb 8-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 374.313775][ T4777] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.323385][ T4777] usb 8-1: Product: syz [ 374.329204][ T4777] usb 8-1: Manufacturer: syz [ 374.340152][ T4777] usb 8-1: SerialNumber: syz [ 374.362567][ T4777] usb 8-1: config 0 descriptor?? [ 374.409694][ T4777] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 374.634232][ T4777] gspca_sunplus: reg_w_riv err -71 [ 374.634309][ T4777] sunplus: probe of 8-1:0.0 failed with error -71 [ 374.643534][ T4777] usb 8-1: USB disconnect, device number 36 [ 374.844202][ T1107] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 375.205477][ T1107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.205515][ T1107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.205558][ T1107] usb 7-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 375.205597][ T1107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.212142][ T1107] usb 7-1: config 0 descriptor?? [ 375.704021][ T4777] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 375.798261][ T1107] wacom 0003:056A:030C.0040: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.6-1/input0 [ 376.006563][ T23] usb 7-1: USB disconnect, device number 42 [ 376.064189][ T4777] usb 8-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 110 [ 376.076875][ T4777] usb 8-1: config 16 has an invalid descriptor of length 109, skipping remainder of the config [ 376.088004][ T4777] usb 8-1: config 16 has no interfaces? [ 376.093713][ T4777] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 376.103032][ T4777] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.294202][ T7015] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 376.361409][ T5501] usb 8-1: USB disconnect, device number 37 [ 376.554092][ T7015] usb 6-1: Using ep0 maxpacket: 32 [ 376.641940][T15452] input: syz1 as /devices/virtual/input/input71 [ 376.834953][ T7015] usb 6-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 376.853106][ T7015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.863016][ T7015] usb 6-1: Product: syz [ 376.884033][ T7015] usb 6-1: Manufacturer: syz [ 376.888806][ T7015] usb 6-1: SerialNumber: syz [ 376.904610][ T7015] usb 6-1: config 0 descriptor?? [ 376.946235][ T7015] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 377.164819][ T7015] gspca_sunplus: reg_w_riv err -71 [ 377.164918][ T7015] sunplus: probe of 6-1:0.0 failed with error -71 [ 377.168917][ T7015] usb 6-1: USB disconnect, device number 41 [ 377.836731][T15470] input: syz0 as /devices/virtual/input/input72 [ 378.210441][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.216871][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.955666][T15509] input: syz0 as /devices/virtual/input/input73 [ 378.984062][ T5501] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 379.227257][ T5501] usb 7-1: Using ep0 maxpacket: 32 [ 379.344474][ T7015] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 379.517857][ T5501] usb 7-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 379.530002][ T5501] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.540824][ T5501] usb 7-1: Product: syz [ 379.549347][ T5501] usb 7-1: Manufacturer: syz [ 379.554303][ T5501] usb 7-1: SerialNumber: syz [ 379.575198][ T5501] usb 7-1: config 0 descriptor?? [ 379.594112][ T7015] usb 5-1: Using ep0 maxpacket: 32 [ 379.616582][ T5501] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 379.714695][ T7015] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 379.714727][ T7015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.716514][ T7015] usb 5-1: config 0 descriptor?? [ 379.854179][ T5501] gspca_sunplus: reg_w_riv err -71 [ 379.854237][ T5501] sunplus: probe of 7-1:0.0 failed with error -71 [ 379.857944][ T5501] usb 7-1: USB disconnect, device number 43 [ 379.974132][ T7015] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 379.978488][ T7015] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.001988][ T7015] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 380.002033][ T7015] usb 5-1: media controller created [ 380.011627][ T7015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.184631][ T7015] az6027: usb out operation failed. (-71) [ 380.204878][ T7015] az6027: usb out operation failed. (-71) [ 380.204897][ T7015] stb0899_attach: Driver disabled by Kconfig [ 380.204908][ T7015] az6027: no front-end attached [ 380.204908][ T7015] [ 380.224270][ T7015] az6027: usb out operation failed. (-71) [ 380.224289][ T7015] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 380.225451][ T7015] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input74 [ 380.227559][ T7015] dvb-usb: schedule remote query interval to 400 msecs. [ 380.227577][ T7015] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 380.241789][ T7015] usb 5-1: USB disconnect, device number 50 [ 380.337053][ T7015] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 383.337340][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4478'. [ 383.380008][T15561] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 383.415407][T15567] netlink: 'syz.5.4480': attribute type 12 has an invalid length. [ 383.429607][T15567] netlink: 'syz.5.4480': attribute type 29 has an invalid length. [ 383.447081][T15567] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4480'. [ 383.470812][T15567] netlink: 'syz.5.4480': attribute type 1 has an invalid length. [ 383.489848][T15569] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 383.497058][T15567] netlink: 'syz.5.4480': attribute type 1 has an invalid length. [ 384.020985][T15591] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4494'. [ 384.084160][ T1107] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 384.093835][T15597] netlink: 'syz.0.4496': attribute type 12 has an invalid length. [ 384.102287][T15597] netlink: 'syz.0.4496': attribute type 29 has an invalid length. [ 384.111034][T15597] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4496'. [ 384.124035][T15597] netlink: 'syz.0.4496': attribute type 1 has an invalid length. [ 384.131786][T15597] netlink: 'syz.0.4496': attribute type 1 has an invalid length. [ 384.501638][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4507'. [ 384.510931][ T1107] usb 6-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 110 [ 384.532168][ T1107] usb 6-1: config 16 has an invalid descriptor of length 109, skipping remainder of the config [ 384.569749][ T1107] usb 6-1: config 16 has no interfaces? [ 384.585893][ T1107] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 384.616293][ T1107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.635352][T15633] netlink: 'syz.4.4512': attribute type 12 has an invalid length. [ 384.663595][T15633] netlink: 'syz.4.4512': attribute type 29 has an invalid length. [ 384.681784][T15633] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4512'. [ 384.936230][ T1107] usb 6-1: USB disconnect, device number 42 [ 385.489694][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4535'. [ 385.884538][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.894535][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.903425][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.913634][ T7012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.914049][ T13] usb 8-1: new low-speed USB device number 38 using dummy_hcd [ 385.954673][ T7012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.966956][ T5501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.990395][ T5501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.379688][ T13] usb 8-1: config 0 has an invalid interface number: 181 but max is 0 [ 386.396355][ T13] usb 8-1: config 0 has no interface number 0 [ 386.412813][ T13] usb 8-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 386.433102][ T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.483380][ T13] usb 8-1: config 0 descriptor?? [ 386.768759][ T13] usb 8-1: USB disconnect, device number 38 [ 387.172899][T15751] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4572'. [ 387.550421][T15762] pimreg: tun_chr_ioctl cmd 1074025677 [ 387.579777][T15762] pimreg: linktype set to 769 [ 387.615875][T15767] pimreg: tun_chr_ioctl cmd 2147767506 [ 387.890782][T15779] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4584'. [ 388.458161][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.467181][ T5501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.519955][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.537476][ T4776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.648603][ T1107] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 388.809905][T15828] validate_nla: 3 callbacks suppressed [ 388.809924][T15828] netlink: 'syz.4.4609': attribute type 12 has an invalid length. [ 388.839344][T15828] netlink: 'syz.4.4609': attribute type 29 has an invalid length. [ 388.866222][T15828] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4609'. [ 388.889807][T15828] netlink: 'syz.4.4609': attribute type 2 has an invalid length. [ 388.908020][T15828] netlink: 'syz.4.4609': attribute type 3 has an invalid length. [ 388.924048][ T1107] usb 8-1: Using ep0 maxpacket: 8 [ 388.970726][T15832] binder: 15831:15832 ioctl c0306201 2000000001c0 returned -14 [ 389.030801][ T5501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.074195][ T1107] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 389.082441][ T1107] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.093414][ T1107] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 389.103672][ T1107] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 389.122831][ T1107] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.136472][ T1107] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 389.145745][ T1107] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.284064][ T7015] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 389.567843][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.665046][ T7015] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 389.675180][ T7015] usb 5-1: config 0 interface 0 has no altsetting 0 [ 389.835840][ T5501] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 389.864614][ T7015] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 389.873789][ T7015] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 389.882372][ T7015] usb 5-1: Product: syz [ 389.887158][ T7015] usb 5-1: Manufacturer: syz [ 389.891781][ T7015] usb 5-1: SerialNumber: syz [ 389.899911][ T7015] usb 5-1: config 0 descriptor?? [ 389.957018][ T7015] usb 5-1: selecting invalid altsetting 0 [ 389.985632][T15859] device syzkaller1 entered promiscuous mode [ 390.004098][T15857] usbtmc 8-1:16.0: simple usb_control_msg failed -32 [ 390.032964][ T7015] usb 8-1: USB disconnect, device number 39 [ 390.180112][ T13] usb 5-1: USB disconnect, device number 51 [ 390.246176][ T5501] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 390.257212][ T5501] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 390.267406][ T5501] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.434701][ T5501] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 390.447285][ T5501] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 390.455557][ T5501] usb 6-1: Product: syz [ 390.459726][ T5501] usb 6-1: Manufacturer: syz [ 390.468505][ T5501] usb 6-1: SerialNumber: syz [ 390.620550][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.737412][ T5501] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 390.948706][ T7015] usb 6-1: USB disconnect, device number 43 [ 390.977767][ T7015] usblp0: removed [ 391.093506][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.105498][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.114822][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.164212][ T5501] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 391.296256][T15892] Illegal XDP return value 420290592, expect packet loss! [ 391.524191][ T5501] usb 8-1: config 9 interface 0 altsetting 10 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 391.559352][ T5501] usb 8-1: config 9 interface 0 has no altsetting 0 [ 391.652369][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.738681][ T5501] usb 8-1: New USB device found, idVendor=147a, idProduct=e03e, bcdDevice= 8.f4 [ 391.758732][ T5501] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.785499][ T5501] usb 8-1: Product: syz [ 391.789701][ T5501] usb 8-1: Manufacturer: syz [ 391.805096][ T5501] usb 8-1: SerialNumber: syz [ 391.864636][T15879] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 392.052059][ T7012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.172938][ T5501] usb 8-1: USB disconnect, device number 40 [ 392.191471][T15940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4661'. [ 392.208398][T15940] tipc: Started in network mode [ 392.213812][T15940] tipc: Node identity 7, cluster identity 4711 [ 392.220405][T15940] tipc: Node number set to 7 [ 392.861269][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4673'. [ 393.254180][ T13] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 393.440393][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4686'. [ 393.524047][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 393.565972][ T7012] net_ratelimit: 1 callbacks suppressed [ 393.565988][ T7012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.701282][T16009] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 393.724407][ T4774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.866118][ T13] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 393.878877][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.896367][ T13] usb 5-1: Product: syz [ 393.909063][ T13] usb 5-1: Manufacturer: syz [ 393.924058][ T13] usb 5-1: SerialNumber: syz [ 393.946883][ T13] usb 5-1: config 0 descriptor?? [ 393.985386][ T13] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 394.004199][ T13] usb 5-1: Detected FT232H [ 394.215188][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.227030][ T13] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 394.234617][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.245563][ T4774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.865129][ T13] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 395.007783][ T13] usb 5-1: USB disconnect, device number 52 [ 395.047419][ T13] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 395.121654][ T13] ftdi_sio 5-1:0.0: device disconnected [ 395.868394][ T4774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.876650][ T4774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.935171][T16072] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 396.125009][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.280087][T16100] device syzkaller1 entered promiscuous mode [ 397.098626][ T4774] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 397.100612][ T4774] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 398.420163][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4785'. [ 399.004547][ T13] net_ratelimit: 6 callbacks suppressed [ 399.004563][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.142606][T16235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.179005][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.306401][T16237] block device autoloading is deprecated and will be removed. [ 399.342717][T16237] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 399.365850][T16237] EXT4-fs (loop8): unable to read superblock [ 400.045025][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.098632][T16269] process '/newroot/966/file0' started with executable stack [ 400.333907][ T13] kernel write not supported for file bpf-prog (pid: 13 comm: kworker/0:1) [ 400.433549][T16255] overlayfs: failed to set xattr on upper [ 400.454132][T16255] overlayfs: ...falling back to index=off,metacopy=off. [ 400.660384][T16317] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4838'. [ 401.084721][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.117473][T16338] input: syz1 as /devices/virtual/input/input76 [ 401.779102][ T13] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 402.082913][ T13] usb 8-1: Using ep0 maxpacket: 16 [ 402.140697][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.170311][ T26] audit: type=1326 audit(1768621883.446:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708d115cb9 code=0x7ffc0000 [ 402.204876][ T5501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.208832][ T26] audit: type=1326 audit(1768621883.446:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708d115cb9 code=0x7ffc0000 [ 402.242651][ T26] audit: type=1326 audit(1768621883.446:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f708d115cb9 code=0x7ffc0000 [ 402.265493][ T26] audit: type=1326 audit(1768621883.446:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708d115cb9 code=0x7ffc0000 [ 402.284548][ T13] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.287887][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.306613][ T13] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.330370][ T13] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.352197][ T13] usb 8-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 402.358550][ T26] audit: type=1326 audit(1768621883.446:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708d115cb9 code=0x7ffc0000 [ 402.362554][ T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.383569][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.407355][ T13] usb 8-1: config 0 descriptor?? [ 402.416763][ T26] audit: type=1326 audit(1768621883.446:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f708d115cb9 code=0x7ffc0000 [ 402.456936][ T26] audit: type=1326 audit(1768621883.456:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708d115cb9 code=0x7ffc0000 [ 402.485611][ T26] audit: type=1326 audit(1768621883.456:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f708d115cb9 code=0x7ffc0000 [ 402.527137][ T26] audit: type=1326 audit(1768621883.456:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708d115cb9 code=0x7ffc0000 [ 402.895561][ T13] wacom 0003:056A:032F.0042: hidraw0: USB HID v0.00 Device [HID 056a:032f] on usb-dummy_hcd.7-1/input0 [ 403.083241][ T4776] usb 8-1: USB disconnect, device number 41 [ 403.167023][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.175177][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.269361][T16446] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 403.734198][ T13] Bluetooth: hci1: command 0x0405 tx timeout [ 403.813506][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.904027][ T13] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 404.204452][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.319405][ T13] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.339862][ T13] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.534177][ T13] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.562731][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.591919][ T13] usb 7-1: Product: syz [ 404.604020][ T13] usb 7-1: Manufacturer: syz [ 404.608677][ T13] usb 7-1: SerialNumber: syz [ 404.944202][ T13] usb 7-1: 0:2 : does not exist [ 404.982485][ T13] usb 7-1: USB disconnect, device number 44 [ 405.032262][ T7241] udevd[7241]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.159611][ T26] audit: type=1326 audit(1768621886.436:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.4.4929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f708d115cb9 code=0x0 [ 405.256139][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.264389][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.477726][T16526] o2cb: This node has not been configured. [ 405.491515][T16526] o2cb: Cluster check failed. Fix errors before retrying. [ 405.499626][T16526] (syz.6.4936,16526,1):user_dlm_register:675 ERROR: status = -22 [ 405.529689][T16526] (syz.6.4936,16526,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 406.139210][ T1107] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 406.202881][T16562] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 406.209981][T16562] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 406.229255][T16562] vhci_hcd vhci_hcd.0: Device attached [ 406.237931][T16563] usbip_core: unknown command [ 406.242760][T16563] vhci_hcd: unknown pdu 605128798 [ 406.252869][T16563] usbip_core: unknown command [ 406.273928][ T4616] vhci_hcd: stop threads [ 406.293656][ T4616] vhci_hcd: release socket [ 406.298577][ T4776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.312144][ T4616] vhci_hcd: disconnect device [ 406.404064][ T1107] usb 8-1: Using ep0 maxpacket: 16 [ 406.544338][ T1107] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 406.568356][ T1107] usb 8-1: config 0 interface 0 has no altsetting 0 [ 406.584074][ T1107] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 406.593232][ T1107] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.618336][ T1107] usb 8-1: config 0 descriptor?? [ 407.063446][T16612] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4976'. [ 407.075191][ T1107] hid (null): report_id 54775 is invalid [ 407.080874][ T1107] hid (null): report_id 22333 is invalid [ 407.094075][ T1107] hid (null): unknown global tag 0xd [ 407.099538][ T1107] hid (null): unknown global tag 0xe [ 407.124726][ T1107] hid (null): unknown global tag 0xc [ 407.130086][ T1107] hid (null): report_id 1992134616 is invalid [ 407.143979][ T1107] hid (null): unknown global tag 0xe [ 407.156126][ T1107] hid (null): usage index exceeded [ 407.161746][ T1107] hid (null): report_id 1911294403 is invalid [ 407.185950][ T1107] hid (null): report_id 0 is invalid [ 407.191285][ T1107] hid (null): unknown global tag 0xc [ 407.214116][ T1107] hid (null): report_id 0 is invalid [ 407.219459][ T1107] hid (null): unknown global tag 0xbe [ 407.234632][ T1107] hid (null): unknown global tag 0xc [ 407.240019][ T1107] hid (null): invalid report_count 2090455279 [ 407.263986][ T1107] hid (null): invalid report_count 1056960005 [ 407.270095][ T1107] hid (null): unknown global tag 0xc [ 407.286319][ T1107] hid (null): invalid report_size 39841 [ 407.291948][ T1107] hid (null): unknown global tag 0xc [ 407.309750][ T1107] hid (null): invalid report_size 249916996 [ 407.343430][ T1107] usb 8-1: USB disconnect, device number 42 [ 407.390183][ T4774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.284996][ T5501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.454716][ T4774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.006866][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5021'. [ 409.021768][T16705] netlink: 'syz.5.5021': attribute type 5 has an invalid length. [ 409.030075][T16707] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 409.234932][T16721] device veth1_to_bond entered promiscuous mode [ 409.262339][T16718] device veth1_to_bond left promiscuous mode [ 409.402366][T16740] device syzkaller1 entered promiscuous mode [ 409.495356][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.832536][T16759] device batadv_slave_1 entered promiscuous mode [ 409.849368][T16758] device batadv_slave_1 left promiscuous mode [ 410.449104][T16788] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 411.823951][ C0] sched: RT throttling activated [ 411.894197][ T4774] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 412.284287][ T4774] usb 5-1: config 0 has no interfaces? [ 412.474335][ T4774] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 412.483556][ T4776] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 412.491484][ T4774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.504038][ T4774] usb 5-1: Product: syz [ 412.508273][ T4774] usb 5-1: Manufacturer: syz [ 412.513105][ T4774] usb 5-1: SerialNumber: syz [ 412.528716][ T4774] r8152-cfgselector 5-1: config 0 descriptor?? [ 412.744146][ T4776] usb 8-1: Using ep0 maxpacket: 8 [ 412.794683][ T4774] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 412.884287][ T4776] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.901034][ T4776] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 412.922193][ T4776] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 412.941684][ T4776] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.971784][ T4776] usb 8-1: config 0 descriptor?? [ 413.007403][ T4774] usb 5-1: USB disconnect, device number 53 [ 413.237507][ T4776] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 413.436887][T16840] iowarrior 8-1:0.0: Error -90 while submitting URB [ 413.456153][ T4776] usb 8-1: USB disconnect, device number 43 [ 414.758112][ T13] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 414.795267][ T13] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 415.021783][T16951] fido_id[16951]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 415.152191][T16963] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 415.158846][T16963] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 415.168939][T16963] vhci_hcd vhci_hcd.0: Device attached [ 415.179532][T16963] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 415.186080][T16963] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 415.194330][T16963] vhci_hcd vhci_hcd.0: Device attached [ 415.213425][T16963] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 415.219971][T16963] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 415.248949][T16963] vhci_hcd vhci_hcd.0: Device attached [ 415.257439][T16974] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 415.298948][T16963] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(11) [ 415.305615][T16963] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 415.344880][T16963] vhci_hcd vhci_hcd.0: Device attached [ 415.354849][T16976] vhci_hcd: connection closed [ 415.356672][ T4616] vhci_hcd: stop threads [ 415.366357][T16968] vhci_hcd: connection closed [ 415.366857][T16966] vhci_hcd: connection closed [ 415.371677][T16964] vhci_hcd: connection closed [ 415.377088][ T4616] vhci_hcd: release socket [ 415.397796][ T4616] vhci_hcd: disconnect device [ 415.405258][ T4616] vhci_hcd: stop threads [ 415.409547][ T4616] vhci_hcd: release socket [ 415.418078][ T4616] vhci_hcd: disconnect device [ 415.423840][ T4616] vhci_hcd: stop threads [ 415.431250][ T4616] vhci_hcd: release socket [ 415.435683][ T7015] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 415.444325][T16965] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 415.450967][ T4616] vhci_hcd: disconnect device [ 415.456503][ T4616] vhci_hcd: stop threads [ 415.460843][ T4616] vhci_hcd: release socket [ 415.467963][ T4616] vhci_hcd: disconnect device [ 415.552121][T16986] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5146'. [ 415.873909][T16999] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 416.366526][T17037] netlink: 'syz.0.5170': attribute type 1 has an invalid length. [ 416.459253][ T4774] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 416.704215][ T4774] usb 6-1: Using ep0 maxpacket: 32 [ 416.824453][ T4774] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 416.832674][ T4774] usb 6-1: config 0 has no interface number 0 [ 416.845758][ T4774] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 416.857112][ T4774] usb 6-1: config 0 interface 85 has no altsetting 0 [ 417.054742][ T7012] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 417.219832][ T4774] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 417.229121][ T4774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.237366][ T4774] usb 6-1: Product: syz [ 417.241565][ T4774] usb 6-1: Manufacturer: syz [ 417.246297][ T4774] usb 6-1: SerialNumber: syz [ 417.253488][ T4774] usb 6-1: config 0 descriptor?? [ 417.345835][ T7012] usb 5-1: Using ep0 maxpacket: 8 [ 417.414089][ T13] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 417.505011][ T7012] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 417.513242][ T7012] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.523971][ T7012] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 417.533762][ T7012] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 417.544000][ T7012] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.557801][ T7012] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 417.568931][ T7012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.774155][ T13] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 417.783288][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.797395][ T13] usb 7-1: config 0 descriptor?? [ 417.836045][ T7012] usb 5-1: usb_control_msg returned -32 [ 417.837468][ T13] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 417.842249][ T7012] usbtmc 5-1:16.0: can't read capabilities [ 417.934134][ T4774] appletouch 6-1:0.85: Geyser mode initialized. [ 417.942126][ T4774] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input82 [ 418.143341][ T5501] usb 6-1: USB disconnect, device number 44 [ 418.156780][ T5501] appletouch 6-1:0.85: input: appletouch disconnected [ 418.205788][T17077] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 418.274205][ T13] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 418.407211][ T5501] usb 5-1: USB disconnect, device number 54 [ 418.714098][ T13] gspca_cpia1: usb_control_msg 02, error -71 [ 418.734098][ T13] gspca_cpia1: usb_control_msg 05, error -71 [ 418.740122][ T13] cpia1 7-1:0.0: unexpected systemstate: 00 [ 418.748568][ T13] usb 7-1: USB disconnect, device number 45 [ 419.449165][T17102] overlayfs: failed to decode file handle (len=0, type=251, flags=0, err=-22) [ 420.070191][T17138] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5217'. [ 420.204126][ T4774] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 420.457425][ T4774] usb 6-1: Using ep0 maxpacket: 32 [ 420.584300][ T4774] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 420.604526][ T4774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.614127][ T7015] vhci_hcd: vhci_device speed not set [ 420.633045][ T4774] usb 6-1: config 0 descriptor?? [ 420.671789][T17175] team0: Device gtp1 is of different type [ 420.904336][ T4774] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 420.917653][T17186] netlink: 'syz.0.5238': attribute type 39 has an invalid length. [ 420.939948][ T4774] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 420.952923][ T4774] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 421.324819][ T5501] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 421.754642][ T5501] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 421.784012][ T5501] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 421.809216][T17222] overlayfs: conflicting lowerdir path [ 421.824947][ T5501] usb 5-1: config 0 has no interfaces? [ 421.840713][ T5501] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 421.860534][ T5501] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.881081][ T5501] usb 5-1: config 0 descriptor?? [ 422.141113][ T13] usb 5-1: USB disconnect, device number 55 [ 422.879709][ T7015] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 423.300196][ T7015] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.319255][ T7015] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.347213][ T7015] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 423.459821][ T7015] usb 7-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 423.479331][ T7015] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 423.500428][ T7015] usb 7-1: Product: syz [ 423.518281][ T7015] usb 7-1: config 0 descriptor?? [ 424.022069][ T7015] waltop 0003:172F:0037.0045: unknown main item tag 0x0 [ 424.039530][ T7015] waltop 0003:172F:0037.0045: unknown main item tag 0x0 [ 424.060349][ T7015] waltop 0003:172F:0037.0045: unknown main item tag 0x0 [ 424.087967][ T7015] waltop 0003:172F:0037.0045: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 424.098746][ T1091] block nbd4: Attempted send on invalid socket [ 424.105150][ T1091] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 424.119926][T17267] EXT4-fs (nbd4): unable to read superblock [ 424.223216][ T7015] usb 7-1: USB disconnect, device number 46 [ 424.273523][T17268] fido_id[17268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 426.486229][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5319'. [ 427.009889][ T7015] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 427.298375][ T7015] usb 5-1: Using ep0 maxpacket: 16 [ 427.449253][ T7015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.469881][T17390] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5330'. [ 427.470726][ T7015] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 427.518981][ T7015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.547421][ T7015] usb 5-1: config 0 descriptor?? [ 427.709835][T17401] vivid-000: disconnect [ 427.716822][T17397] vivid-000: reconnect [ 427.983809][T17418] netlink: 'syz.6.5342': attribute type 1 has an invalid length. [ 428.037346][ T7015] mcp2221 0003:04D8:00DD.0046: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 428.101905][T17422] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5344'. [ 428.241524][ T7015] usb 5-1: USB disconnect, device number 56 [ 428.691038][ T26] audit: type=1326 audit(1768621909.966:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17429 comm="syz.0.5348" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d7bfb4cb9 code=0x0 [ 430.742473][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5378'. [ 431.002550][ T26] audit: type=1326 audit(1768621912.276:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17514 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a051dcb9 code=0x7ffc0000 [ 431.046058][ T26] audit: type=1326 audit(1768621912.276:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17514 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a051dcb9 code=0x7ffc0000 [ 431.109646][ T26] audit: type=1326 audit(1768621912.276:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17514 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a051dcb9 code=0x7ffc0000 [ 431.109697][ T26] audit: type=1326 audit(1768621912.276:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17514 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f66a051dcb9 code=0x7ffc0000 [ 431.109732][ T26] audit: type=1326 audit(1768621912.276:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17514 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a051dcb9 code=0x7ffc0000 [ 431.109768][ T26] audit: type=1326 audit(1768621912.276:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17514 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a051dcb9 code=0x7ffc0000 [ 431.109802][ T26] audit: type=1326 audit(1768621912.276:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17514 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a051dcb9 code=0x7ffc0000 [ 431.109837][ T26] audit: type=1326 audit(1768621912.276:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17514 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a051dcb9 code=0x7ffc0000 [ 431.109872][ T26] audit: type=1326 audit(1768621912.276:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17514 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66a051dcb9 code=0x7ffc0000 [ 431.434999][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.515530][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.552984][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.567495][T17541] netlink: 'syz.6.5396': attribute type 1 has an invalid length. [ 431.567517][T17541] netlink: 228 bytes leftover after parsing attributes in process `syz.6.5396'. [ 432.164102][ T13] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 432.414225][ T13] usb 7-1: Using ep0 maxpacket: 8 [ 432.534208][ T13] usb 7-1: config 0 has no interfaces? [ 432.539909][ T13] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 432.556220][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.572258][ T13] usb 7-1: config 0 descriptor?? [ 432.816816][ T13] usb 7-1: USB disconnect, device number 47 [ 432.993331][T17613] sock: sock_set_timeout: `syz.4.5428' (pid 17613) tries to set negative timeout [ 437.946825][T17826] sctp: [Deprecated]: syz.0.5529 (pid 17826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.946825][T17826] Use struct sctp_sack_info instead [ 438.072559][T17834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5531'. [ 438.081854][T17834] tipc: Started in network mode [ 438.101106][T17834] tipc: Node identity 7, cluster identity 4711 [ 438.109051][T17834] tipc: Node number set to 7 [ 438.619741][T17870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5546'. [ 438.640709][T17870] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.649736][T17870] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.658520][T17870] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.667290][T17870] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.688009][T17870] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.697151][T17870] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.706099][T17870] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.715084][T17870] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.570664][T17885] netlink: 'syz.7.5553': attribute type 12 has an invalid length. [ 439.637474][T17885] netlink: 'syz.7.5553': attribute type 29 has an invalid length. [ 439.649862][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.656314][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.706678][T17885] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5553'. [ 439.759460][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 439.759476][ T26] audit: type=1326 audit(1768621921.036:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17888 comm="syz.6.5555" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3ba2bbcb9 code=0x0 [ 439.798469][T17885] netlink: 59 bytes leftover after parsing attributes in process `syz.7.5553'. [ 440.204673][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5562'. [ 440.757674][T17941] ax25_connect(): syz.7.5578 uses autobind, please contact jreuter@yaina.de [ 440.939396][T17952] device ip6_vti0 entered promiscuous mode [ 442.334546][ T7015] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 442.595641][ T7015] usb 7-1: Using ep0 maxpacket: 32 [ 442.724618][ T7015] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 442.733860][ T7015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.745720][ T7015] usb 7-1: config 0 descriptor?? [ 443.004198][ T7015] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 443.017413][ T7015] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 443.060462][ T7015] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 443.069819][ T7015] usb 7-1: media controller created [ 443.101687][ T7015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.224175][ T7015] az6027: usb out operation failed. (-71) [ 443.244164][ T7015] az6027: usb out operation failed. (-71) [ 443.249964][ T7015] stb0899_attach: Driver disabled by Kconfig [ 443.261662][ T7015] az6027: no front-end attached [ 443.261662][ T7015] [ 443.284128][ T7015] az6027: usb out operation failed. (-71) [ 443.290002][ T7015] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 443.299455][ T7015] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input83 [ 443.312515][ T7015] dvb-usb: schedule remote query interval to 400 msecs. [ 443.319558][ T7015] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 443.330994][ T7015] usb 7-1: USB disconnect, device number 48 [ 443.370345][ T7015] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 444.545810][T18077] netlink: 188 bytes leftover after parsing attributes in process `syz.6.5637'. [ 444.567284][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5641'. [ 444.717851][T18083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5643'. [ 444.730391][T18083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5643'. [ 445.072766][ T13] kernel read not supported for file /video7 (pid: 13 comm: kworker/0:1) [ 445.393387][T18115] device batadv_slave_0 entered promiscuous mode [ 445.413081][T18115] Non-string source [ 445.421431][T18114] device batadv_slave_0 left promiscuous mode [ 446.794210][ T4777] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 447.045088][ T4777] usb 5-1: Using ep0 maxpacket: 32 [ 447.165177][ T4777] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 447.194084][ T4777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.210569][ T4777] usb 5-1: config 0 descriptor?? [ 447.474334][ T4777] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 447.492085][ T4777] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 447.554480][ T4777] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 447.561695][ T4777] usb 5-1: media controller created [ 447.620420][ T4777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 447.685676][ T4777] az6027: usb out operation failed. (-71) [ 447.708464][ T4777] az6027: usb out operation failed. (-71) [ 447.726603][ T4777] stb0899_attach: Driver disabled by Kconfig [ 447.732656][ T4777] az6027: no front-end attached [ 447.732656][ T4777] [ 447.777961][ T4777] az6027: usb out operation failed. (-71) [ 447.789072][ T4777] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 447.810472][ T4777] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input84 [ 447.843024][ T4777] dvb-usb: schedule remote query interval to 400 msecs. [ 447.867118][ T4777] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 447.891410][ T4777] usb 5-1: USB disconnect, device number 57 [ 447.986882][ T4777] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 448.618412][ T4777] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 448.805551][T18250] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5718'. [ 448.878309][ T4777] usb 7-1: Using ep0 maxpacket: 32 [ 448.958877][T18260] o2cb: This node has not been configured. [ 448.966654][T18260] o2cb: Cluster check failed. Fix errors before retrying. [ 448.973907][T18260] (syz.4.5724,18260,1):user_dlm_register:675 ERROR: status = -22 [ 448.983319][T18260] (syz.4.5724,18260,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 448.994284][ T4777] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.005434][ T4777] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.015684][ T4777] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 449.024981][ T4777] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.041715][ T4777] usb 7-1: config 0 descriptor?? [ 449.085874][ T4777] hub 7-1:0.0: USB hub found [ 449.304192][ T4777] hub 7-1:0.0: 1 port detected [ 449.426227][T18274] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5741'. [ 449.568426][T18291] o2cb: This node has not been configured. [ 449.575346][T18291] o2cb: Cluster check failed. Fix errors before retrying. [ 449.582704][T18291] (syz.0.5739,18291,0):user_dlm_register:675 ERROR: status = -22 [ 449.591372][T18291] (syz.0.5739,18291,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 449.601827][ T4777] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 449.611203][ T4777] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 449.714218][ T4777] usbhid 7-1:0.0: can't add hid device: -71 [ 449.724616][ T4777] usbhid: probe of 7-1:0.0 failed with error -71 [ 449.764799][ T4777] usb 7-1: USB disconnect, device number 49 [ 450.253470][T18326] o2cb: This node has not been configured. [ 450.256555][ T4776] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 450.269717][T18326] o2cb: Cluster check failed. Fix errors before retrying. [ 450.278452][T18326] (syz.5.5753,18326,1):user_dlm_register:675 ERROR: status = -22 [ 450.286973][T18326] (syz.5.5753,18326,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 450.304838][ T4776] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 450.426795][T18327] fido_id[18327]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 450.674405][T18340] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 450.680997][T18340] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 450.690944][T18340] vhci_hcd vhci_hcd.0: Device attached [ 450.699132][T18341] usbip_core: unknown command [ 450.704330][T18341] vhci_hcd: unknown pdu 605128798 [ 450.720539][T18341] usbip_core: unknown command [ 450.725319][T18344] device batadv_slave_1 entered promiscuous mode [ 450.737235][T18342] device batadv_slave_1 left promiscuous mode [ 450.743676][ T4272] vhci_hcd: stop threads [ 450.749420][ T4272] vhci_hcd: release socket [ 450.754936][ T4272] vhci_hcd: disconnect device [ 451.340291][T18364] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5770'. [ 451.366588][ T4776] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 451.390157][ T4776] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz0 [ 451.544343][T18370] fido_id[18370]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 451.607090][T18381] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 451.613667][T18381] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 451.622680][T18381] vhci_hcd vhci_hcd.0: Device attached [ 451.631579][T18385] usbip_core: unknown command [ 451.637634][T18385] vhci_hcd: unknown pdu 605128798 [ 451.642817][T18385] usbip_core: unknown command [ 451.649376][ T4698] vhci_hcd: stop threads [ 451.653676][ T4698] vhci_hcd: release socket [ 451.664425][ T4698] vhci_hcd: disconnect device [ 451.691587][T18389] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5783'. [ 451.858180][ T7015] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 451.922053][T18399] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5788'. [ 452.144630][ T7015] usb 5-1: Using ep0 maxpacket: 32 [ 452.278931][T18420] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 452.305134][ T7015] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 452.323671][ T7015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.346063][ T7015] usb 5-1: config 0 descriptor?? [ 452.379453][T18424] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 452.624086][ T7015] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 452.641200][T18439] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5805'. [ 463.366232][T18445] chnl_net:caif_netlink_parms(): no params data found [ 463.409894][T18445] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.418557][T18445] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.426724][T18445] device bridge_slave_0 entered promiscuous mode [ 463.435109][T18445] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.442185][T18445] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.452821][T18445] device bridge_slave_1 entered promiscuous mode [ 463.474120][T18445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.486159][T18445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.511209][T18445] team0: Port device team_slave_0 added [ 463.519134][T18445] team0: Port device team_slave_1 added [ 463.539351][T18445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.546514][T18445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.573201][T18445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.585838][T18445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.592773][T18445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.618671][ C1] vkms_vblank_simulate: vblank timer overrun [ 463.625468][T18445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.660887][T18445] device hsr_slave_0 entered promiscuous mode [ 463.667801][T18445] device hsr_slave_1 entered promiscuous mode [ 463.674670][T18445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.682321][T18445] Cannot create hsr debugfs directory [ 463.778021][T18445] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 463.787710][T18445] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 463.797467][T18445] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 463.807954][T18445] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 463.830433][T18445] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.837526][T18445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.844938][T18445] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.852063][T18445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.901401][T18445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.915050][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.923266][ T4616] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.931335][ T4616] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.939780][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 463.955366][T18445] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.968785][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.977921][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.985043][ T4698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.009703][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.018408][ T4698] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.025538][ T4698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.035118][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 464.045376][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 464.054504][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 464.066741][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.079340][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.093770][T18445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 464.207375][T18468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5819'. [ 464.276789][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.317317][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.347919][T18445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.381567][T18478] sch_tbf: burst 19920 is lower than device lo mtu (32783) ! [ 464.409842][T18481] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 464.676161][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 464.686171][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.739136][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 464.758433][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.791709][T18445] device veth0_vlan entered promiscuous mode [ 464.811555][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 464.840572][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 464.882804][T18445] device veth1_vlan entered promiscuous mode [ 464.934209][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 464.942979][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 464.951649][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 464.979090][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 464.996984][T18445] device veth0_macvtap entered promiscuous mode [ 465.019733][T18445] device veth1_macvtap entered promiscuous mode [ 465.049110][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.075650][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.095866][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.124010][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.144437][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.164447][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.182265][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.208711][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.229677][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.253620][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.278951][T18445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.295865][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 465.316090][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 465.324220][ T4776] Bluetooth: hci5: command 0x0409 tx timeout [ 465.349042][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 465.368019][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.392804][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.412066][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.434768][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.450703][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.461947][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.478862][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.490495][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.508339][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.520889][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.542331][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.561031][T18445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.574534][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 465.591167][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 465.603387][T18445] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.613174][T18445] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.621932][T18445] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.630724][T18445] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.803867][ T4698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.813467][ T4698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.838266][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 465.863456][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.906927][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.930569][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 466.272012][T18536] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 466.363168][T18538] device syzkaller1 entered promiscuous mode [ 466.552118][T18545] pimreg: tun_chr_ioctl cmd 1074025677 [ 466.565300][T18545] pimreg: linktype set to 769 [ 466.582643][T18545] pimreg: tun_chr_ioctl cmd 2147767506 [ 466.913023][ T4199] Bluetooth: hci1: link tx timeout [ 466.913091][ T4199] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 466.926632][ T4199] Bluetooth: hci1: link tx timeout [ 466.931769][ T4199] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 466.944452][T18563] netlink: 'syz.6.5849': attribute type 1 has an invalid length. [ 466.988325][T18565] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 466.994892][T18565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 467.013230][T18565] vhci_hcd vhci_hcd.0: Device attached [ 467.031271][T18571] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5853'. [ 467.049370][T18565] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 467.055929][T18565] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 467.071195][T18565] vhci_hcd vhci_hcd.0: Device attached [ 467.102456][T18575] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 467.109021][T18575] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 467.131690][T18565] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 467.144684][T18575] vhci_hcd vhci_hcd.0: Device attached [ 467.158422][T18565] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(9) [ 467.164987][T18565] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 467.199098][T18565] vhci_hcd vhci_hcd.0: Device attached [ 467.217486][T18576] vhci_hcd: connection closed [ 467.219854][ T4272] vhci_hcd: stop threads [ 467.229131][T18573] vhci_hcd: connection closed [ 467.229459][T18566] vhci_hcd: connection closed [ 467.239944][T18582] vhci_hcd: connection closed [ 467.245594][ T4272] vhci_hcd: release socket [ 467.262346][ T4272] vhci_hcd: disconnect device [ 467.268186][ T4272] vhci_hcd: stop threads [ 467.272587][ T4272] vhci_hcd: release socket [ 467.292408][ T13] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 467.300574][ T4272] vhci_hcd: disconnect device [ 467.314239][T18567] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 467.324993][ T4272] vhci_hcd: stop threads [ 467.329269][ T4272] vhci_hcd: release socket [ 467.341379][ T4272] vhci_hcd: disconnect device [ 467.360246][ T4272] vhci_hcd: stop threads [ 467.364662][ T4272] vhci_hcd: release socket [ 467.369214][ T4272] vhci_hcd: disconnect device [ 467.404549][ T1107] Bluetooth: hci5: command 0x041b tx timeout [ 467.479606][T18596] block device autoloading is deprecated and will be removed. [ 467.492828][T18596] blk_update_request: I/O error, dev loop10, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 467.505297][T18596] EXT4-fs (loop10): unable to read superblock [ 468.780838][T18630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5874'. [ 468.872582][T18632] block device autoloading is deprecated and will be removed. [ 468.889056][T18632] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 468.911142][T18632] EXT4-fs (loop0): unable to read superblock [ 469.004251][ T4777] Bluetooth: hci1: command 0x0406 tx timeout [ 469.484097][ T1107] Bluetooth: hci5: command 0x040f tx timeout [ 469.632437][T18656] input: syz1 as /devices/virtual/input/input86 [ 469.760223][T18660] device veth1_to_bond entered promiscuous mode [ 469.767254][T18659] device veth1_to_bond left promiscuous mode [ 469.831854][ T7012] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 470.114706][ T7012] usb 7-1: Using ep0 maxpacket: 16 [ 470.444319][ T7012] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 470.453479][ T7012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.462432][ T7012] usb 7-1: Product: syz [ 470.466917][ T7012] usb 7-1: Manufacturer: syz [ 470.471544][ T7012] usb 7-1: SerialNumber: syz [ 470.478528][ T7012] usb 7-1: config 0 descriptor?? [ 470.527609][ T7012] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 470.538347][ T7012] usb 7-1: Detected FT232H [ 470.744763][ T7012] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 470.775319][T18671] device syzkaller1 entered promiscuous mode [ 471.042187][T18685] overlayfs: failed to decode file handle (len=0, type=251, flags=0, err=-22) [ 471.225609][T18694] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 471.253093][ T7012] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 471.462182][ T1107] usb 7-1: USB disconnect, device number 50 [ 471.476294][ T1107] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 471.493255][ T1107] ftdi_sio 7-1:0.0: device disconnected [ 471.564035][ T4776] Bluetooth: hci5: command 0x0419 tx timeout [ 471.764426][ T7012] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 472.028131][ T7012] usb 9-1: Using ep0 maxpacket: 32 [ 472.164489][ T7012] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 472.173717][ T7012] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.183394][ T7012] usb 9-1: config 0 descriptor?? [ 472.444577][ T7012] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 472.464371][ T13] vhci_hcd: vhci_device speed not set [ 473.995458][T18724] loop8: detected capacity change from 0 to 4096 [ 474.068103][T18728] team0: Device gtp0 is of different type [ 474.208098][T18445] ntfs3: loop8: ntfs_evict_inode r=5 failed, -22. [ 474.241169][T18445] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 475.117495][T18775] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5937'. [ 475.148221][T18777] netlink: 'syz.8.5942': attribute type 39 has an invalid length. [ 475.524065][ T7016] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 475.646954][T18793] loop8: detected capacity change from 0 to 256 [ 475.660263][T18793] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 475.764563][ T7016] usb 7-1: Using ep0 maxpacket: 8 [ 475.904193][ T7016] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 475.912985][ T7016] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 475.923762][ T7016] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 475.934978][ T7016] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 475.945296][ T7016] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.958968][ T7016] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 475.978525][ T7016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.026507][T18807] overlayfs: conflicting lowerdir path [ 476.197006][T18819] device syzkaller1 entered promiscuous mode [ 476.264786][ T7016] usb 7-1: usb_control_msg returned -32 [ 476.270781][ T7016] usbtmc 7-1:16.0: can't read capabilities [ 476.341706][T18824] loop8: detected capacity change from 0 to 256 [ 476.415661][T18824] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 476.674511][T18830] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 476.879824][ T13] usb 7-1: USB disconnect, device number 51 [ 479.292744][T18928] loop8: detected capacity change from 0 to 16 [ 479.323051][T18928] erofs: (device loop8): mounted with root inode @ nid 36. [ 479.737118][T18941] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 480.182045][T18937] loop0: detected capacity change from 0 to 32768 [ 480.270747][T18937] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 480.383140][T18937] [ 480.385518][T18937] ====================================================== [ 480.392645][T18937] WARNING: possible circular locking dependency detected [ 480.399681][T18937] syzkaller #0 Not tainted [ 480.404113][T18937] ------------------------------------------------------ [ 480.411151][T18937] syz.0.6011/18937 is trying to acquire lock: [ 480.417234][T18937] ffff88802516a650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_write_begin_nolock+0x2049/0x4400 [ 480.427271][T18937] [ 480.427271][T18937] but task is already holding lock: [ 480.434645][T18937] ffff88805701a2e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x198/0x310 [ 480.445204][T18937] [ 480.445204][T18937] which lock already depends on the new lock. [ 480.445204][T18937] [ 480.455637][T18937] [ 480.455637][T18937] the existing dependency chain (in reverse order) is: [ 480.464639][T18937] [ 480.464639][T18937] -> #3 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 480.473402][T18937] down_read+0x44/0x2e0 [ 480.478106][T18937] ocfs2_read_virt_blocks+0x237/0x8d0 [ 480.484006][T18937] ocfs2_read_dir_block+0xd1/0x4f0 [ 480.489653][T18937] ocfs2_dir_foreach_blk+0x264/0x19d0 [ 480.495558][T18937] ocfs2_empty_dir+0x1a8/0x730 [ 480.500852][T18937] ocfs2_rename+0x21c0/0x3960 [ 480.506058][T18937] vfs_rename+0xbe1/0x1100 [ 480.510999][T18937] do_renameat2+0x8b7/0xf60 [ 480.516033][T18937] __x64_sys_rename+0x82/0x90 [ 480.521237][T18937] do_syscall_64+0x4c/0xa0 [ 480.526183][T18937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 480.532594][T18937] [ 480.532594][T18937] -> #2 (jbd2_handle){++++}-{0:0}: [ 480.539895][T18937] start_this_handle+0x136f/0x15c0 [ 480.545525][T18937] jbd2__journal_start+0x2b7/0x5a0 [ 480.551166][T18937] jbd2_journal_start+0x26/0x30 [ 480.556546][T18937] ocfs2_start_trans+0x3b2/0x6f0 [ 480.561991][T18937] ocfs2_mknod+0xf5a/0x2510 [ 480.567016][T18937] ocfs2_create+0x192/0x420 [ 480.572047][T18937] path_openat+0x11db/0x2fa0 [ 480.577148][T18937] do_filp_open+0x1e2/0x410 [ 480.582184][T18937] do_sys_openat2+0x150/0x4b0 [ 480.587387][T18937] __x64_sys_open+0x11b/0x140 [ 480.592612][T18937] do_syscall_64+0x4c/0xa0 [ 480.597553][T18937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 480.603989][T18937] [ 480.603989][T18937] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 480.612529][T18937] down_read+0x44/0x2e0 [ 480.617234][T18937] ocfs2_start_trans+0x3a6/0x6f0 [ 480.622718][T18937] ocfs2_mknod+0xf5a/0x2510 [ 480.627787][T18937] ocfs2_create+0x192/0x420 [ 480.632845][T18937] path_openat+0x11db/0x2fa0 [ 480.637956][T18937] do_filp_open+0x1e2/0x410 [ 480.642980][T18937] do_sys_openat2+0x150/0x4b0 [ 480.648189][T18937] __x64_sys_open+0x11b/0x140 [ 480.653386][T18937] do_syscall_64+0x4c/0xa0 [ 480.658328][T18937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 480.664739][T18937] [ 480.664739][T18937] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 480.672242][T18937] __lock_acquire+0x2c42/0x7d10 [ 480.677607][T18937] lock_acquire+0x19e/0x400 [ 480.682632][T18937] ocfs2_start_trans+0x2a7/0x6f0 [ 480.688093][T18937] ocfs2_write_begin_nolock+0x2049/0x4400 [ 480.694360][T18937] ocfs2_write_begin+0x1b9/0x310 [ 480.699827][T18937] generic_perform_write+0x2b6/0x550 [ 480.705623][T18937] __generic_file_write_iter+0x25f/0x4e0 [ 480.711774][T18937] ocfs2_file_write_iter+0x1670/0x1e70 [ 480.717773][T18937] vfs_write+0x745/0xd60 [ 480.722531][T18937] ksys_write+0x152/0x260 [ 480.727373][T18937] do_syscall_64+0x4c/0xa0 [ 480.732313][T18937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 480.738733][T18937] [ 480.738733][T18937] other info that might help us debug this: [ 480.738733][T18937] [ 480.748974][T18937] Chain exists of: [ 480.748974][T18937] sb_internal#2 --> jbd2_handle --> &ocfs2_file_ip_alloc_sem_key [ 480.748974][T18937] [ 480.762613][T18937] Possible unsafe locking scenario: [ 480.762613][T18937] [ 480.770052][T18937] CPU0 CPU1 [ 480.775410][T18937] ---- ---- [ 480.780771][T18937] lock(&ocfs2_file_ip_alloc_sem_key); [ 480.786322][T18937] lock(jbd2_handle); [ 480.792897][T18937] lock(&ocfs2_file_ip_alloc_sem_key); [ 480.800947][T18937] lock(sb_internal#2); [ 480.805184][T18937] [ 480.805184][T18937] *** DEADLOCK *** [ 480.805184][T18937] [ 480.813338][T18937] 4 locks held by syz.0.6011/18937: [ 480.818524][T18937] #0: ffff88804cd96af0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 480.827769][T18937] #1: ffff88802516a460 (sb_writers#16){.+.+}-{0:0}, at: vfs_write+0x295/0xd60 [ 480.836740][T18937] #2: ffff88805701a648 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x436/0x1e70 [ 480.848067][T18937] #3: ffff88805701a2e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x198/0x310 [ 480.859021][T18937] [ 480.859021][T18937] stack backtrace: [ 480.864901][T18937] CPU: 0 PID: 18937 Comm: syz.0.6011 Not tainted syzkaller #0 [ 480.872351][T18937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.882404][T18937] Call Trace: [ 480.885696][T18937] [ 480.888649][T18937] dump_stack_lvl+0x188/0x250 [ 480.893349][T18937] ? load_image+0x400/0x400 [ 480.897854][T18937] ? show_regs_print_info+0x20/0x20 [ 480.903054][T18937] ? print_circular_bug+0x12b/0x1a0 [ 480.908250][T18937] check_noncircular+0x296/0x330 [ 480.913181][T18937] ? add_chain_block+0x940/0x940 [ 480.918109][T18937] ? lockdep_lock+0xf1/0x1f0 [ 480.922695][T18937] ? mark_lock+0x94/0x320 [ 480.927016][T18937] __lock_acquire+0x2c42/0x7d10 [ 480.931869][T18937] ? verify_lock_unused+0x140/0x140 [ 480.937066][T18937] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 480.942958][T18937] ? verify_lock_unused+0x140/0x140 [ 480.948154][T18937] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 480.954044][T18937] ? _raw_spin_unlock+0x40/0x40 [ 480.958895][T18937] ? stack_depot_save+0x404/0x440 [ 480.963929][T18937] lock_acquire+0x19e/0x400 [ 480.968441][T18937] ? ocfs2_write_begin_nolock+0x2049/0x4400 [ 480.974338][T18937] ? __might_sleep+0xf0/0xf0 [ 480.978930][T18937] ? do_raw_spin_lock+0x128/0x2f0 [ 480.983962][T18937] ? read_lock_is_recursive+0x10/0x10 [ 480.989343][T18937] ? __rwlock_init+0x140/0x140 [ 480.994099][T18937] ? do_raw_spin_unlock+0x11d/0x230 [ 480.999298][T18937] ocfs2_start_trans+0x2a7/0x6f0 [ 481.004236][T18937] ? ocfs2_write_begin_nolock+0x2049/0x4400 [ 481.010139][T18937] ? ocfs2_recovery_exit+0x50/0x50 [ 481.015247][T18937] ocfs2_write_begin_nolock+0x2049/0x4400 [ 481.020989][T18937] ? __bfs+0x2a3/0x5c0 [ 481.025064][T18937] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 481.030863][T18937] ? __lock_acquire+0x28ac/0x7d10 [ 481.035908][T18937] ? ocfs2_read_inode_block+0x120/0x190 [ 481.041469][T18937] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 481.047463][T18937] ? rwsem_write_trylock+0x135/0x1c0 [ 481.052741][T18937] ? clear_nonspinnable+0x60/0x60 [ 481.057764][T18937] ocfs2_write_begin+0x1b9/0x310 [ 481.062706][T18937] ? ocfs2_readahead+0x190/0x190 [ 481.067635][T18937] ? __lock_acquire+0x7d10/0x7d10 [ 481.072660][T18937] ? do_raw_spin_lock+0x128/0x2f0 [ 481.077689][T18937] ? fault_in_readable+0x120/0x150 [ 481.082856][T18937] generic_perform_write+0x2b6/0x550 [ 481.088157][T18937] ? grab_cache_page_write_begin+0xa0/0xa0 [ 481.093967][T18937] ? file_remove_privs+0x5d0/0x5d0 [ 481.099088][T18937] ? __rwlock_init+0x140/0x140 [ 481.103841][T18937] ? __up_read+0x2b2/0x6b0 [ 481.108266][T18937] __generic_file_write_iter+0x25f/0x4e0 [ 481.113892][T18937] ? _raw_spin_unlock+0x24/0x40 [ 481.118756][T18937] ? ocfs2_inode_unlock+0x11a/0x140 [ 481.124043][T18937] ocfs2_file_write_iter+0x1670/0x1e70 [ 481.129499][T18937] ? verify_lock_unused+0x140/0x140 [ 481.134708][T18937] ? ocfs2_file_read_iter+0xa80/0xa80 [ 481.140097][T18937] ? aa_file_perm+0x38b/0xe80 [ 481.144775][T18937] ? rcu_read_lock_any_held+0xb0/0x130 [ 481.150267][T18937] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 481.155541][T18937] ? end_current_label_crit_section+0x14b/0x170 [ 481.161780][T18937] ? memset+0x1e/0x40 [ 481.165762][T18937] ? iov_iter_init+0xb4/0x170 [ 481.170439][T18937] vfs_write+0x745/0xd60 [ 481.174675][T18937] ? file_end_write+0x250/0x250 [ 481.179522][T18937] ? __fget_files+0x40f/0x480 [ 481.184214][T18937] ? mutex_lock_nested+0x17/0x20 [ 481.189173][T18937] ? __fdget_pos+0x2bf/0x370 [ 481.193789][T18937] ? ksys_write+0x71/0x260 [ 481.198210][T18937] ksys_write+0x152/0x260 [ 481.202537][T18937] ? __ia32_sys_read+0x80/0x80 [ 481.207294][T18937] ? lockdep_hardirqs_on+0x94/0x140 [ 481.212490][T18937] do_syscall_64+0x4c/0xa0 [ 481.216899][T18937] ? clear_bhb_loop+0x30/0x80 [ 481.221570][T18937] ? clear_bhb_loop+0x30/0x80 [ 481.226238][T18937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 481.232126][T18937] RIP: 0033:0x7f1d7bfb4cb9 [ 481.236538][T18937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.256139][T18937] RSP: 002b:00007f1d7a210028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 481.264552][T18937] RAX: ffffffffffffffda RBX: 00007f1d7c22ffa0 RCX: 00007f1d7bfb4cb9 [ 481.272518][T18937] RDX: 000000000000000b RSI: 0000200000000d40 RDI: 0000000000000005 [ 481.280484][T18937] RBP: 00007f1d7c022bf7 R08: 0000000000000000 R09: 0000000000000000 [ 481.288572][T18937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.296539][T18937] R13: 00007f1d7c230038 R14: 00007f1d7c22ffa0 R15: 00007fffce293308 [ 481.304516][T18937] [ 481.314277][ T1107] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 481.351661][ T4192] ocfs2: Unmounting device (7,0) on (node local) [ 481.553998][ T1107] usb 7-1: Using ep0 maxpacket: 32 [ 481.676470][ T1107] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 481.688980][ T1107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.710270][ T1107] usb 7-1: config 0 descriptor?? [ 481.984089][ T1107] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 484.974017][ T3558] udevd[3558]: worker [7241] /devices/platform/dummy_hcd.5/usb6/6-1 is taking a long time [ 485.725243][ T7015] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 485.733172][ T1107] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 485.740596][ T7012] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 485.756099][ T4774] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 485.781778][ T7015] dvb_usb_az6027: probe of 5-1:0.0 failed with error -2 [ 485.787015][ T1107] dvb_usb_az6027: probe of 7-1:0.0 failed with error -2 [ 485.800307][ T4774] dvb_usb_az6027: probe of 6-1:0.0 failed with error -110 [ 485.802514][ T7015] usb 5-1: USB disconnect, device number 58 [ 485.814134][ T7012] dvb_usb_az6027: probe of 9-1:0.0 failed with error -2 [ 485.825215][ T1107] usb 7-1: USB disconnect, device number 52 [ 485.850382][ T4774] usb 6-1: USB disconnect, device number 45 [ 485.860460][ T7012] usb 9-1: USB disconnect, device number 2 [ 485.953256][T18201] bridge0: port 4(syz_tun) entered disabled state [ 485.981572][T18201] device syz_tun left promiscuous mode [ 485.987335][T18201] bridge0: port 4(syz_tun) entered disabled state [ 486.188515][ T4616] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.198939][ T4616] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 486.258440][ T4616] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.268888][ T4616] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 486.317808][ T4616] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.328524][ T4616] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 486.358305][ T4616] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.369762][ T4616] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 487.105696][ T4616] device hsr_slave_0 left promiscuous mode [ 487.112121][ T4616] device hsr_slave_1 left promiscuous mode [ 487.121218][ T4616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.128878][ T4616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.140368][ T4616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.148036][ T4616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.160932][ T4616] bridge0: port 3(bond0) entered disabled state [ 487.168653][ T4616] device bridge_slave_1 left promiscuous mode [ 487.177173][ T4616] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.185656][ T4616] device bridge_slave_0 left promiscuous mode [ 487.192067][ T4616] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.208525][ T4616] device veth1_macvtap left promiscuous mode [ 487.217248][ T4616] device veth0_macvtap left promiscuous mode [ 487.223401][ T4616] device veth1_vlan left promiscuous mode [ 487.229500][ T4616] device veth0_vlan left promiscuous mode [ 487.399863][ T4616] team0 (unregistering): Port device team_slave_1 removed [ 487.413608][ T4616] team0 (unregistering): Port device team_slave_0 removed [ 487.425422][ T4616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.434578][ T4616] device bond_slave_1 left promiscuous mode [ 487.445380][ T4616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.455489][ T4616] device bond_slave_0 left promiscuous mode [ 487.509450][ T4616] bond0 (unregistering): Released all slaves [ 487.628672][ C1] vkms_vblank_simulate: vblank timer overrun