last executing test programs: 28m56.485084126s ago: executing program 2 (id=2073): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x200) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48500, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000040)={0x4, 0x0, [{0xade}, {0x8a9, 0x0, 0xc4}, {0x2ca, 0x0, 0xfffffffffffffff7}, {0x858, 0x0, 0x4}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) read$FUSE(r3, &(0x7f0000000900)={0x2020}, 0x205c) r4 = fsopen(&(0x7f0000002940)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0xa) fchdir(r5) r6 = open(&(0x7f0000002980)='./bus\x00', 0x1031c2, 0x0) ftruncate(r6, 0x2007ffb) r7 = open(&(0x7f00000029c0)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) fcntl$setsig(r7, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000002a00)='./bus\x00', 0x88882, 0x0) write$binfmt_elf64(r2, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x4, 0x0, 0x0, 0x1, 0x2, 0x3e, 0xffffffeb, 0x7c, 0x40, 0x2, 0x0, 0x6, 0x38, 0x1, 0xfffe, 0x3, 0xffff}, [{0x3, 0xf, 0x8, 0x11, 0x0, 0xe5, 0x1, 0x3}]}, 0x78) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_int(r8, 0x6, 0x9, &(0x7f00000001c0)=0x1, 0x4) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 28m54.523427433s ago: executing program 2 (id=2082): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000c80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x3, &(0x7f0000000d40)=0xfffffffffffffff7, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000e00)={0x0, &(0x7f0000000e40)=""/103, &(0x7f0000000ec0), &(0x7f0000000f00), 0x80, r6, 0x0, 0x7}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8880}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0x1, 0xb}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x3ff, 0x2, 0x7f, 0x4, 0x6714e122}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000b40)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x1, 0x143000) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) socket(0x2, 0x80805, 0x0) syz_ublk_setup_queues(r13, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 28m51.237266652s ago: executing program 2 (id=2101): r0 = openat$nsim_dev_bool(0xffffffffffffff9c, &(0x7f0000000e00)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/fail_reload\x00'}, 0x82, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="5a281f5e92c003", 0x7}], 0x1) 28m47.257083772s ago: executing program 2 (id=2109): r0 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='/dev/\x1a\xa2\x92)?\x12', 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, r0) 28m46.67322078s ago: executing program 2 (id=2111): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1}}) 28m46.057255257s ago: executing program 2 (id=2115): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x82deb2136fbf221e, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_dev$sg(0x0, 0x0, 0x40100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) preadv(r5, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000000a00)=""/222, 0xde}, {&(0x7f0000000940)=""/39, 0x27}, {&(0x7f0000000980)=""/42, 0x2a}], 0x4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000680), 0x0) sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 28m31.00282902s ago: executing program 32 (id=2115): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x82deb2136fbf221e, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_dev$sg(0x0, 0x0, 0x40100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) preadv(r5, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000000a00)=""/222, 0xde}, {&(0x7f0000000940)=""/39, 0x27}, {&(0x7f0000000980)=""/42, 0x2a}], 0x4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000680), 0x0) sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 29.111080126s ago: executing program 3 (id=5869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040004) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 26.703315512s ago: executing program 3 (id=5871): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x202400, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) r1 = dup2(0xffffffffffffffff, r0) syz_open_dev$sndctrl(&(0x7f0000000140), 0xa, 0x103002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x3, 0x0, 0x6, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r4, 0x10c000) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x3, {0x1, 0x1, 0x1}, {0x1, 0xf0, 0x4}, 0x1, 0x2}], 0x20) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206010800000000000000000300000614000780080011400000000805001500000000000500010006"], 0x5c}}, 0x24000042) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x454680) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$sndseq(r0, &(0x7f00000001c0)=[{0x6, 0x9, 0x3, 0x5, @time={0x7, 0x50c}, {0xa3, 0x9}, {0x2, 0x3}, @raw8={"9ec64824b004533cebed06ac"}}, {0x2, 0x2, 0x0, 0x2, @tick=0x577e1a63, {0x6, 0x3}, {0xac, 0x28}, @note={0x5, 0x97, 0x0, 0x2, 0x14}}, {0x8, 0xe8, 0x4, 0x5, @tick=0x1, {0xe, 0xa}, {0xba, 0x10}, @control={0x3, 0xb9ad, 0x1}}, {0x54, 0x0, 0x9, 0x5, @time={0x1, 0x4}, {0xa3, 0xfb}, {0x7, 0x91}, @connect={{0x4, 0x1}, {0x7f, 0xf4}}}, {0x2, 0x5, 0xff, 0x2, @time={0x9, 0x5}, {0x5}, {0x10, 0x4}, @quote={{0x0, 0xad}, 0x1, &(0x7f0000000300)={0x6, 0x92, 0x7, 0x4e, @time={0x10, 0x1ae}, {0x5, 0x7}, {0xa2, 0x81}, @ext={0x19, &(0x7f00000002c0)="0aba952580594e5b213c5e501d327dc7b558ee4e239886f09c"}}}}, {0xa, 0x4, 0xe, 0xff, @tick=0x10000, {0x1, 0x81}, {0xf, 0x2d}, @note={0x5, 0x83, 0x5, 0x1, 0x1}}], 0xa8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'netpci0\x00', 0x3}, 0x18) socket$kcm(0xa, 0x1, 0x106) 25.030913219s ago: executing program 3 (id=5874): socket$kcm(0x2d, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x3697, &(0x7f0000000140)={0x0, 0xa264, 0x1, 0x1, 0x1b8}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c0000000000", @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00001028bf900000008fa5f2ebaad74d8fe02fb3336c380000010000000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0xc004}}, {{&(0x7f0000000600)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000700)="69be795384a5e1a3ee1551c809f15d8a5e0962445858be03a319984afa07dcd49633709b0fcde138c6a452df49df03e3230ec7422d825c4ab3158162dca36f9fe27257180e9255ccdd69b1f6241e73088618831b562eabfb5721901bb7f57eafd8e5c71fd71b12c90c7fa7f11fab5fde198b4c2d791edce846d7495f326a0754e231fd7336e75426ca6d56ab2385a4eaf023e73d32085d26d919577174de527c3b91a54b3dda393a1cd624354828f1f3a80f12cea128d4677dba63021482c624a368136b3a12177401212ecafdbcee19d11ea5324d9ce401932a77d3234f1337956f54f8b1f7cd28", 0xe8}, {&(0x7f0000000800)="7c25fdd293886e79810dde841ce4826441d76c04e59ab8adb3b6026a7f6fab84ea58da09df28c397fa99805230e40fee6401690a71a6790fc6144283e239a1b88f544dfbf67fb3c3407acd169b395958b4d142e4371c919ab100a878fc2c8521f829248f4effb0b6ea8c498405890efcd28d0b89d044158304ebd7252ef2bb55f5538312f63f50e1f91132fe50146ee0ea99d1edef14d4983db6e15546737ee85a02dd9788ef195d9b42618b15c761f49c6b3cdaeb69e56c6dd7cf9226b9e9c55c4a739a", 0xc4}, {&(0x7f0000000900)="30bd32d6d5bf04bf0a6f1801f627811226909fc261bf67725dc0f44cd8ae0b825bea986eec587cae67c2ebd63f81e83a0d904e3e0fcd76279e5708d2cd1b076ac792ded4c7e7cc21e6d10808cf3deb003506d2a557d49ee6c60c1c11af8230cfa87c2c7073a6ed9ddcdb5c0daf7ceaebd69fabee6d62f66107246066f2b4c400c7d02a3a69b4d6b3c8a3d680506c2d2e107a831a7ac786c607d4c39e98b64a7a36d714c69aaf69aefb41f7170cf80d78033a8f6eec721adbd705c4ea95e7d9a659dc5ca9dbc8478a064ffd3058a8", 0xce}, {&(0x7f0000000a00)="f0c7f36ac4f5674d2aca9db411fedb16c6c0132c095bf5e1c5fd727d7afa46326c2d982e697e785818bbde446104ec00c39b82caea4849057c51c82372936bee08d9459fe13facb12a1a77e010b2cd3fa0ae7caaa796b1d2902afca1bbe009f691d1ec94b6c6d35a8b4790c030a4d0773f99ac65e9e7cd9912365b4f08acacb5056c170fe4bef1572ff9fafb774cfdcfd62ea70cd48e01e8da8fe33552eb433ae28e43e575c81b67da984a26819a901d233b8ff0008d6e342a73749d872318f978c7f862914d9a30eda0a914d8dba7af1d5907375f4aea08de41c884326ef72decda7f45095aee98531c00f6", 0xec}, {&(0x7f0000000b00)="739dbae29ed182083fd86ece5c3c61e86d6e1edf8c146a00195a9cf926d75cedf066bede8fa41d4d1c1f6daed4d1a2988d176e380f598f7dee0ae98cc07d2ab031beb5b29db7777a4ae52444af897688f0ec9ac1b0bda59d3f580064be62c37465003ad795b45020974bfb0866f4e44b0af68204c21e267f0bd46ec28490d53da439f25d025c17bb6fc5c7227b2915113d4f0e2bd21ed2ac2ae386d008f4d6dd6ae8dc41", 0xa4}, {&(0x7f0000000bc0)}], 0x6, 0x0, 0x0, 0x48010}}], 0x2, 0x0) recvmmsg(r3, &(0x7f0000000c00), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000c40)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_emit_vhci(&(0x7f0000000c80)=ANY=[@ANYBLOB="040e0605250cb0"], 0x9) r5 = syz_create_resource$binfmt(&(0x7f0000000cc0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000d40)=0x4, 0x8) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000d80)={0x2, 0x1bd, @loopback}, 0x10) listen(r6, 0x5) r7 = fsopen(&(0x7f0000000dc0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000e00)='source\x00', &(0x7f0000000e40)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000e80)='vers\x00', &(0x7f0000000ec0)='1.0\x00', 0x0) r8 = syz_open_dev$sg(&(0x7f0000000f00), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000f40)={'\x00', 0x21fd, 0xdd36, 0x80, 0x1df, 0x81}) ioctl$SG_BLKTRACESTART(r8, 0x1274, 0x0) 21.569579598s ago: executing program 3 (id=5879): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x20001) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x501c41, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000d00)={0x4d5, 0x2, {0x1, 0x0, 0x8, 0x2, 0xfffffffe}, 0x2}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x10, 0x0) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000240)=0xd0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x3, 0x2}) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x16c, &(0x7f00000002c0)=ANY=[]) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) memfd_create(0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x8000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 17.231995053s ago: executing program 3 (id=5892): unshare(0x22020600) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="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", 0x1d8, 0xfffffffffffffffd) 17.086775775s ago: executing program 3 (id=5893): unshare(0x60040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000640)='U', 0x1}], 0x1) 6.765541393s ago: executing program 1 (id=5948): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x10) sendto$packet(r1, 0x0, 0x0, 0x4000830, &(0x7f0000000400)={0x11, 0x8100, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 5.963800105s ago: executing program 4 (id=5952): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x6, 0x10, 0x10, 0x0, @ib={0x1b, 0x7, 0xc9f, {"ad176cae07000000050000002c2d338f"}, 0x7fff, 0xd59a, 0xffffffff}, @ib={0x1b, 0x7, 0x800, {"ef65c2aa3c999df9011bdd7a77bc8c5e"}, 0x80000000, 0xa, 0x23c1}}}, 0x118) 5.350647536s ago: executing program 1 (id=5954): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000200), 0x800001d, 0x300) 5.125080965s ago: executing program 4 (id=5957): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={r2, r0, 0x16, 0x0, @val=@iter={0x0}}, 0x20) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000240)={0x2, {{0x2, 0x2, @multicast2}}}, 0x90) 4.785870753s ago: executing program 5 (id=5958): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x2000001f}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xa0000013}) 4.329826893s ago: executing program 5 (id=5961): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000032c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000003340)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000003380)={r1, 0x1, 0x6, @multicast}, 0x10) 3.840818761s ago: executing program 4 (id=5963): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x64}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0xfffffffffffffffe) 3.636491914s ago: executing program 5 (id=5964): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.124237983s ago: executing program 5 (id=5966): r0 = eventfd2(0x4, 0x800) io_setup(0x6, &(0x7f0000000440)=0x0) io_submit(r1, 0x2, &(0x7f0000000480)=[&(0x7f00000004c0)={0x1802, 0x0, 0x0, 0x5, 0xffed, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x10, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000680)="b3e379ca6ac5936e", 0x8}], 0x1) 2.738984247s ago: executing program 0 (id=5968): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000010000000000", @ANYRES32=r2, @ANYBLOB="120300"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 2.616855593s ago: executing program 5 (id=5969): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000003340)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000003380)={r1, 0x1, 0x6, @multicast}, 0x10) 1.683842486s ago: executing program 4 (id=5974): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r1 = syz_open_pts(r0, 0x2000) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x8) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) 1.553746867s ago: executing program 0 (id=5975): r0 = fsopen(&(0x7f0000001380)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x19) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000013c0)={@map=r1, 0x4, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.508762096s ago: executing program 1 (id=5976): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, &(0x7f0000004140)=[{&(0x7f0000000400)="19c79c5f44163970957c504248fb287d6331212f1e9af7eac0e92d3ee374ab6f1b29", 0x22}], 0x1) 1.130628153s ago: executing program 1 (id=5977): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000002740)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000002780), 0xa0d, 0x0, 0x0) 921.073164ms ago: executing program 0 (id=5978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8000}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 868.942175ms ago: executing program 4 (id=5979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) 723.389934ms ago: executing program 0 (id=5980): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000640)='ipvlan0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x202, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xb}, 0x9c) sendmsg$inet6(r1, &(0x7f0000000740)={&(0x7f0000000780)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7fff}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000800)="f0", 0x1}], 0x1}, 0x40054) 620.240056ms ago: executing program 5 (id=5981): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000140)="ecc883697c9bcbaac1679221c3eb2163c7fd71d6cd4d5bd16cb4c0f12a2a9dda60dc19ac41aac2803f8b071c99a08ac506b89ad3d53dfc3f09fa64f7f11abc0632b52cf3df24a9680b535a0c6be4dcc988d10aca7de7d60c52f6ff98cfe43c1b9e1ca3172e04e55248d06fa83d71c94c15942e624d63b0862ebfc327cb89b0f79c6b0097513db405c15d6d903bb19ec8cf730e07cd8ad9c2642b53ed8ae0d67301f48eec3ace96bd909ceefa0232ae374fc7296f1180daab89de3d3e4ca3ddfae83d36c88569b8d84c1c3b1f30cc600cfd42d939a4e00f12e3d1e31ab78fc907f9dd173856a2d6756a01990bb44606f20be697f2ed1ac88788b17728fdf5cfaea058ae38f71d0741e01efcfe3e9227f6fa099b61e208fa03106b0ed1290f89cf67299c7d9e27f63463bf81f011c74b43da1f826dbcbfe2a3927805388686447ef3369ac3c4e19dfa9c8cf27c73b354fa8f8c4c48aa3510e0adbb6690b6e92a2279052adc2eaeec1e9346b499459ae22ca34a0f143fb247da733ecb88bc856f572fc786f0346dd97602ceb945f4b685dd3c1f50c7aa791fdc6a300c83b1c2628d430371b50ef655bb312104b696ea4971ee60ee75b4984fdbc86100ff025cae52cca98028079d702487aab6b21ce7c30cd3866d94c784303143851c174fff870234254ffe322ef397999c3956668f8aeb91665e8e7d754e139d9e588fdc1627400bc36e7885cdc3f289c2cf9731286eb0bfc62029850d3c637bbd01b33d2355958c6d387dfdc02f57f0b29d40cecafb098b0a722625e04603223fb916098145ea30329277666db124c64580fdc746f475bc09bd40b5af2b1c9ae70740e21ff941c212f5c9e375dfd1483fdc297bd84cf11febdcf72a8a7f58d25338dec4e3744309bdf750bf013387667a5a6528474b7610ca9b5b2e30ade27066c5aa60b1bdb892681330eb54e22b30c53c77678d8bea5f4dcdef9de502a7b230bad39ad206e78e91771c799aea98ac38093e70cca8c4e6fa0bcd8cb7249ee44bd1823bccde5f78d31ebed17c89f18eb11557c8edc75775422d1d890bf057c2ec89c4373c028cdf2053995c1332deb08b985bc28a4d770734337ff960794cd1c6011c3b0e2357edf58fa5933de5887fb6dd327f9d3052d765a6dc5d0dd31328d3cd54d097d1f5e7a243c8c9fb56b005bb4b6d5c0f7350d0c7257f922ef539d63e6d7df397f495cd6a41b45dbcf00b3a97e545d20915f44b5d74d8d1de79f03c5710053805a8b41bbc697a1e20bfe31854444aa60f264e628b2ab310a1a4c5ff6bb3e1eb6cc53facab8d603dcb2b496f62e2395eb5ab4d45dfb0bd65fb348fe69655f36192af05f0892afc9e8a0395ee66ca006d7dffa9319ea6b7cfc0745ed678c0c6c4e023d88c6ceb3f3b652d266d9d91c638c1a91b7fc99bc838f158f4229b34c71a2b7a0b5ae7f73c13dec72179c7a220ae80aef1edcd950831aceffb40b18b9bb871dd1a20875d3a1d698501f688791d03ff1bf6dd5b8a562ac36f290d9bcd2c31079f64782764d90a51a46caf612a33e45a82635b4630c03e170ef34e5e4b278384507f143f40ab4d55217efca5d59ea66247b35ced94c6c1991f6bc93b4a2369289ea16183db7298013569a3da97dfd0340f33bf8de38e5a6424e222d26a4dcbebf95781f5039021c2c66b0a80697b28e0e2814869eb420f68e8c53076a3c45857f66d5f3ba8943345cd7dcec2bfd1ccad83cff1cd8054871ee3d6e926458ee3e2c0086729ef65b80248dad931dde90d0f5634a328c81a70e8489e8d3348f277f6793c8392f9871d1a1c89b95f139c54a616d95927d6952116857a52349a3df3b4683d8365ea0ea21b449b334a", 0x52a}], 0x1) 0s ago: executing program 0 (id=5982): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x100, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x8000000000000, 0x0, 0x0, 0x3, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): nt descriptor for endpoint 1 [ 2192.292143][T17639] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 2192.348290][T17639] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2192.401262][T17639] usb 1-1: USB disconnect, device number 115 [ 2192.433058][T17639] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2192.433524][T17639] keyspan 1-1:0.133: device disconnected [ 2192.835619][T17857] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 2192.956083][T25701] netlink: 'syz.0.5433': attribute type 24 has an invalid length. [ 2192.994954][T17857] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2193.000470][T17857] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 2193.000500][T17857] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2193.000515][T17857] usb 6-1: config 0 has no interface number 0 [ 2193.000549][T17857] usb 6-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2193.079117][T17857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.079151][T17857] usb 6-1: Product: syz [ 2193.079163][T17857] usb 6-1: Manufacturer: syz [ 2193.079174][T17857] usb 6-1: SerialNumber: syz [ 2193.108030][T17857] usb 6-1: config 0 descriptor?? [ 2194.086084][ T190] usb 36-1: device descriptor read/8, error -110 [ 2194.148816][T17639] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 2194.327044][T17639] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2194.335348][T17639] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 2194.335454][T17639] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2194.335536][T17639] usb 2-1: config 0 has no interface number 0 [ 2194.335673][T17639] usb 2-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2194.418575][T17639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2194.418622][T17639] usb 2-1: Product: syz [ 2194.418640][T17639] usb 2-1: Manufacturer: syz [ 2194.418656][T17639] usb 2-1: SerialNumber: syz [ 2194.471966][T17639] usb 2-1: config 0 descriptor?? [ 2194.500253][ T190] usb usb36-port1: attempt power cycle [ 2195.129195][ T190] usb usb36-port1: unable to enumerate USB device [ 2195.278749][T25711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2195.345543][T17857] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 2195.345771][T17857] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82 [ 2195.372503][T17857] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 2195.372597][T17857] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 2195.372700][T17857] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 2195.415066][T17857] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2195.440869][T17857] usb 6-1: USB disconnect, device number 123 [ 2195.468305][T17857] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2195.471358][T17857] keyspan 6-1:0.133: device disconnected [ 2195.569153][ T30] audit: type=1804 audit(1792717842.779:1840): pid=25711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5437" name="bus" dev="ramfs" ino=164165 res=1 errno=0 [ 2195.607701][ T30] audit: type=1804 audit(1792717842.819:1841): pid=25711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5437" name="bus" dev="ramfs" ino=164165 res=1 errno=0 [ 2197.186142][T25723] netlink: 'syz.5.5439': attribute type 25 has an invalid length. [ 2198.878229][T17857] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2198.889262][T17639] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 2198.889411][T17639] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 82 [ 2198.898913][ T190] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2198.930157][T17639] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 2198.930225][T17639] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 2198.930281][T17639] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 2198.980887][T17639] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2199.008402][T17639] usb 2-1: USB disconnect, device number 105 [ 2199.033403][T17639] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2199.034425][T17857] usb 4-1: Using ep0 maxpacket: 32 [ 2199.035183][T17857] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2199.036624][T17857] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 2199.036651][T17857] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2199.036672][T17857] usb 4-1: config 0 has no interface number 0 [ 2199.036714][T17857] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2199.036734][T17857] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2199.036750][T17857] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2199.036767][T17857] usb 4-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2199.039251][T17857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.039278][T17857] usb 4-1: Product: syz [ 2199.039295][T17857] usb 4-1: Manufacturer: syz [ 2199.039310][T17857] usb 4-1: SerialNumber: syz [ 2199.054228][ T190] usb 6-1: Using ep0 maxpacket: 32 [ 2199.060826][T17857] usb 4-1: config 0 descriptor?? [ 2199.061203][ T190] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2199.063112][T17857] usb 4-1: expecting 3 got 1 endpoints! Bailing out. [ 2199.065184][ T190] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 2199.065204][ T190] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2199.065219][ T190] usb 6-1: config 0 has no interface number 0 [ 2199.065247][ T190] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2199.065267][ T190] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2199.065283][ T190] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2199.065300][ T190] usb 6-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2199.183594][T17639] keyspan 2-1:0.133: device disconnected [ 2199.286080][ T190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.286119][ T190] usb 6-1: Product: syz [ 2199.286131][ T190] usb 6-1: Manufacturer: syz [ 2199.286142][ T190] usb 6-1: SerialNumber: syz [ 2199.356115][ T190] usb 6-1: config 0 descriptor?? [ 2199.401846][ T190] usb 6-1: expecting 3 got 1 endpoints! Bailing out. [ 2199.514828][T16210] usb 4-1: USB disconnect, device number 111 [ 2200.041411][T25745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5444'. [ 2200.329177][T25750] netlink: 'syz.0.5443': attribute type 4 has an invalid length. [ 2200.396315][T16210] usb 6-1: USB disconnect, device number 124 [ 2200.850791][T25752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5445'. [ 2201.667063][T25758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5447'. [ 2202.433145][T25763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5448'. [ 2203.544285][T16210] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2203.710604][T16210] usb 5-1: Using ep0 maxpacket: 32 [ 2203.725505][T16210] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2203.751220][T16210] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 2203.751243][T16210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2203.751258][T16210] usb 5-1: config 0 has no interface number 0 [ 2203.751287][T16210] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2203.751307][T16210] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2203.751324][T16210] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2203.751342][T16210] usb 5-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2203.847142][T16210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.847171][T16210] usb 5-1: Product: syz [ 2203.847183][T16210] usb 5-1: Manufacturer: syz [ 2203.847195][T16210] usb 5-1: SerialNumber: syz [ 2203.889783][T16210] usb 5-1: config 0 descriptor?? [ 2203.914502][T16210] usb 5-1: expecting 3 got 1 endpoints! Bailing out. [ 2205.125635][ T190] usb 5-1: USB disconnect, device number 107 [ 2205.640146][T25786] netlink: 'syz.1.5452': attribute type 4 has an invalid length. [ 2206.455752][T25795] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 2206.455776][T25795] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2206.456145][T25795] vhci_hcd vhci_hcd.0: Device attached [ 2206.590333][T25795] fuse: Unknown parameter 'group_S‚' [ 2206.632717][T25798] vhci_hcd: connection closed [ 2206.633167][ T1158] vhci_hcd vhci_hcd.3: stop threads [ 2206.633195][ T1158] vhci_hcd vhci_hcd.3: release socket [ 2206.633254][ T1158] vhci_hcd vhci_hcd.3: disconnect device [ 2209.376371][T25807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5458'. [ 2211.279012][T25812] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2212.850705][T25816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5460'. [ 2213.116760][T25822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5462'. [ 2215.075307][T25826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5463'. [ 2215.534235][ T190] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 2215.674241][ T190] usb 5-1: device descriptor read/64, error -71 [ 2215.940721][ T190] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 2216.075238][ T190] usb 5-1: device descriptor read/64, error -71 [ 2216.187124][ T190] usb usb5-port1: attempt power cycle [ 2216.534618][ T190] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 2216.555790][ T190] usb 5-1: device descriptor read/8, error -71 [ 2216.794518][ T190] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 2216.815166][ T190] usb 5-1: device descriptor read/8, error -71 [ 2216.924777][ T190] usb usb5-port1: unable to enumerate USB device [ 2216.981286][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5469'. [ 2217.050688][T25847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5468'. [ 2219.742450][T25871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2219.905698][T25867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5473'. [ 2220.032769][ T30] audit: type=1804 audit(1792717867.239:1842): pid=25871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5474" name="bus" dev="ramfs" ino=165230 res=1 errno=0 [ 2220.065249][ T30] audit: type=1804 audit(1792717867.279:1843): pid=25872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5474" name="bus" dev="ramfs" ino=165230 res=1 errno=0 [ 2221.838849][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.838897][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2224.791318][T25881] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2224.791343][T25881] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2224.807119][T25881] vhci_hcd vhci_hcd.0: Device attached [ 2224.916794][T25881] fuse: Unknown parameter 'group_S‚' [ 2224.958147][T25883] vhci_hcd: connection closed [ 2224.959070][T12620] vhci_hcd vhci_hcd.5: stop threads [ 2224.959101][T12620] vhci_hcd vhci_hcd.5: release socket [ 2224.960161][T12620] vhci_hcd vhci_hcd.5: disconnect device [ 2226.662568][T25892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2226.846066][ T30] audit: type=1804 audit(1792717874.059:1844): pid=25892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5480" name="bus" dev="ramfs" ino=165266 res=1 errno=0 [ 2226.886650][ T30] audit: type=1804 audit(1792717874.099:1845): pid=25892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5480" name="bus" dev="ramfs" ino=165266 res=1 errno=0 [ 2230.144767][T17857] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2230.305469][T17857] usb 5-1: Using ep0 maxpacket: 32 [ 2230.308937][T17857] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2230.329490][T17857] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 2230.329512][T17857] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2230.329531][T17857] usb 5-1: config 0 has no interface number 0 [ 2230.329561][T17857] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2230.329581][T17857] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2230.329597][T17857] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2230.329615][T17857] usb 5-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2230.424623][T17857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.424647][T17857] usb 5-1: Product: syz [ 2230.424658][T17857] usb 5-1: Manufacturer: syz [ 2230.424670][T17857] usb 5-1: SerialNumber: syz [ 2230.474606][T17857] usb 5-1: config 0 descriptor?? [ 2230.493198][T17857] usb 5-1: expecting 3 got 1 endpoints! Bailing out. [ 2230.543881][T25911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5483'. [ 2231.134109][T17857] usb 5-1: USB disconnect, device number 112 [ 2232.069511][T25920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2232.231742][ T30] audit: type=1804 audit(1792717879.439:1846): pid=25920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5485" name="bus" dev="ramfs" ino=166289 res=1 errno=0 [ 2232.283119][ T30] audit: type=1804 audit(1792717879.489:1847): pid=25920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5485" name="bus" dev="ramfs" ino=166289 res=1 errno=0 [ 2232.638615][T25924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5486'. [ 2234.853367][T25945] netlink: 'syz.1.5491': attribute type 4 has an invalid length. [ 2235.024282][T17857] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2235.197033][T17857] usb 6-1: Using ep0 maxpacket: 32 [ 2235.201069][T17857] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2235.202142][T17857] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 2235.202164][T17857] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2235.202179][T17857] usb 6-1: config 0 has no interface number 0 [ 2235.202207][T17857] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2235.202227][T17857] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2235.202244][T17857] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2235.202261][T17857] usb 6-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2235.325357][T17857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.325392][T17857] usb 6-1: Product: syz [ 2235.325404][T17857] usb 6-1: Manufacturer: syz [ 2235.325415][T17857] usb 6-1: SerialNumber: syz [ 2235.333858][T17857] usb 6-1: config 0 descriptor?? [ 2235.377858][T17857] usb 6-1: expecting 3 got 1 endpoints! Bailing out. [ 2236.142293][T25949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5493'. [ 2236.679861][T17857] usb 6-1: USB disconnect, device number 125 [ 2238.344277][T16210] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 2238.515881][T16210] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2238.538841][T16210] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 2238.538874][T16210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2238.538888][T16210] usb 4-1: config 0 has no interface number 0 [ 2238.538918][T16210] usb 4-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2238.596039][T16210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.596064][T16210] usb 4-1: Product: syz [ 2238.596075][T16210] usb 4-1: Manufacturer: syz [ 2238.596087][T16210] usb 4-1: SerialNumber: syz [ 2238.632500][T16210] usb 4-1: config 0 descriptor?? [ 2239.152710][T25963] netlink: 'syz.4.5496': attribute type 4 has an invalid length. [ 2239.663536][T25966] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 2239.663559][T25966] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2239.666608][T25966] vhci_hcd vhci_hcd.0: Device attached [ 2239.876119][T25966] fuse: Unknown parameter 'group_S‚' [ 2239.959093][T17639] usb 34-1: SetAddress Request (8) to port 0 [ 2239.959200][T17639] usb 34-1: new SuperSpeed USB device number 8 using vhci_hcd [ 2239.978829][T25968] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 2239.982574][T25967] vhci_hcd: connection closed [ 2239.993506][ T260] vhci_hcd vhci_hcd.0: stop threads [ 2239.993543][ T260] vhci_hcd vhci_hcd.0: release socket [ 2240.011479][ T260] vhci_hcd vhci_hcd.0: disconnect device [ 2242.867563][T16210] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 2242.867718][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 2242.903158][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 2242.903224][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 2242.903279][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 2242.962626][T16210] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2243.002763][T24098] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2243.003473][T16210] usb 4-1: USB disconnect, device number 112 [ 2243.051605][T16210] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2243.068238][T16210] keyspan 4-1:0.133: device disconnected [ 2243.167193][T24098] usb 1-1: Using ep0 maxpacket: 32 [ 2243.175340][T24098] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2243.199990][T24098] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 2243.200014][T24098] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2243.200029][T24098] usb 1-1: config 0 has no interface number 0 [ 2243.200059][T24098] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2243.200079][T24098] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2243.200095][T24098] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2243.200112][T24098] usb 1-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2243.301789][T24098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.301813][T24098] usb 1-1: Product: syz [ 2243.301824][T24098] usb 1-1: Manufacturer: syz [ 2243.301836][T24098] usb 1-1: SerialNumber: syz [ 2243.339499][T24098] usb 1-1: config 0 descriptor?? [ 2243.382793][T24098] usb 1-1: expecting 3 got 1 endpoints! Bailing out. [ 2244.684799][T17857] usb 1-1: USB disconnect, device number 116 [ 2244.733246][T25989] netlink: 'syz.5.5501': attribute type 4 has an invalid length. [ 2245.043778][T17639] usb 34-1: device descriptor read/8, error -110 [ 2245.451184][T17639] usb usb34-port1: attempt power cycle [ 2246.035796][T17639] usb usb34-port1: unable to enumerate USB device [ 2246.947017][ T190] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 2247.100640][ T190] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2247.119681][ T190] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2247.160371][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.160410][ T190] usb 1-1: Product: syz [ 2247.160423][ T190] usb 1-1: Manufacturer: syz [ 2247.160434][ T190] usb 1-1: SerialNumber: syz [ 2247.217987][ T190] usb 1-1: selecting invalid altsetting 1 [ 2247.218030][ T190] snd-usb-caiaq 1-1:1.0: can't set alt interface. [ 2247.218048][ T190] usb 1-1: unable to init card! (ret=-5) [ 2247.220354][ T190] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 2247.268012][T25995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2247.978940][T25993] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2248.797580][T26009] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2248.997314][ T190] usb 1-1: USB disconnect, device number 117 [ 2249.714251][ T190] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2249.884016][ T190] usb 6-1: Using ep0 maxpacket: 32 [ 2249.884991][ T190] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2249.886970][ T190] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 2249.887003][ T190] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2249.887024][ T190] usb 6-1: config 0 has no interface number 0 [ 2249.887067][ T190] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2249.887088][ T190] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2249.887104][ T190] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2249.887122][ T190] usb 6-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2249.986855][ T190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2249.986889][ T190] usb 6-1: Product: syz [ 2249.986901][ T190] usb 6-1: Manufacturer: syz [ 2249.986912][ T190] usb 6-1: SerialNumber: syz [ 2249.989052][ T190] usb 6-1: config 0 descriptor?? [ 2250.052600][ T190] usb 6-1: expecting 3 got 1 endpoints! Bailing out. [ 2250.510859][T26020] binder: 26019:26020 ioctl c0306201 0 returned -14 [ 2250.576002][T26020] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 2250.576027][T26020] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2250.576165][T26020] vhci_hcd vhci_hcd.0: Device attached [ 2250.650172][ T190] usb 6-1: USB disconnect, device number 126 [ 2250.666983][T26020] fuse: Unknown parameter 'group_S‚' [ 2250.692897][T26021] vhci_hcd: connection closed [ 2250.694730][T12620] vhci_hcd vhci_hcd.3: stop threads [ 2250.694755][T12620] vhci_hcd vhci_hcd.3: release socket [ 2250.694779][T12620] vhci_hcd vhci_hcd.3: disconnect device [ 2251.753280][T26027] binder: 26025:26027 ioctl c0306201 0 returned -14 [ 2251.810964][T26027] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2251.810988][T26027] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2251.811176][T26027] vhci_hcd vhci_hcd.0: Device attached [ 2251.911193][T26027] fuse: Unknown parameter 'group_S‚' [ 2251.956678][T26029] vhci_hcd: connection closed [ 2251.957770][T20722] vhci_hcd vhci_hcd.5: stop threads [ 2251.957793][T20722] vhci_hcd vhci_hcd.5: release socket [ 2251.958937][T20722] vhci_hcd vhci_hcd.5: disconnect device [ 2252.833867][T26036] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 2252.833892][T26036] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2252.849817][T26036] vhci_hcd vhci_hcd.0: Device attached [ 2252.947097][T26036] fuse: Unknown parameter 'group_S‚' [ 2252.965820][T26038] vhci_hcd: connection closed [ 2252.967017][T26040] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 2252.970222][ T1158] vhci_hcd vhci_hcd.5: stop threads [ 2252.970271][ T1158] vhci_hcd vhci_hcd.5: release socket [ 2252.970289][ T1158] vhci_hcd vhci_hcd.5: disconnect device [ 2254.034638][T16210] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2254.184182][T16210] usb 5-1: Using ep0 maxpacket: 32 [ 2254.184913][T16210] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2254.186102][T16210] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 2254.186121][T16210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2254.186136][T16210] usb 5-1: config 0 has no interface number 0 [ 2254.186169][T16210] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2254.186189][T16210] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2254.186206][T16210] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2254.186223][T16210] usb 5-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2254.226000][T16210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.226085][T16210] usb 5-1: Product: syz [ 2254.226128][T16210] usb 5-1: Manufacturer: syz [ 2254.226170][T16210] usb 5-1: SerialNumber: syz [ 2254.329414][T16210] usb 5-1: config 0 descriptor?? [ 2254.351261][T16210] usb 5-1: expecting 3 got 1 endpoints! Bailing out. [ 2254.398697][T26051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5515'. [ 2254.525645][T26048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2254.650314][T16210] usb 5-1: USB disconnect, device number 113 [ 2255.629470][ T190] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2255.824716][ T190] usb 2-1: Using ep0 maxpacket: 32 [ 2255.831270][ T190] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2255.833744][ T190] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 2255.833776][ T190] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2255.833808][ T190] usb 2-1: config 0 has no interface number 0 [ 2255.833856][ T190] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2255.833877][ T190] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2255.833893][ T190] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2255.833910][ T190] usb 2-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2255.932338][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.932362][ T190] usb 2-1: Product: syz [ 2255.932373][ T190] usb 2-1: Manufacturer: syz [ 2255.932385][ T190] usb 2-1: SerialNumber: syz [ 2255.966246][ T190] usb 2-1: config 0 descriptor?? [ 2255.985301][ T190] usb 2-1: expecting 3 got 1 endpoints! Bailing out. [ 2256.478352][ T190] usb 2-1: USB disconnect, device number 106 [ 2257.570446][T26075] input: syz1 as /devices/virtual/input/input133 [ 2257.937982][T26078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5522'. [ 2257.978272][T26084] netlink: 'syz.0.5523': attribute type 4 has an invalid length. [ 2258.839468][T16210] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 2259.008060][T16210] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2259.013057][T16210] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2259.013254][T16210] usb 4-1: config 1 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2259.013316][T16210] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2259.075920][T16210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.075944][T16210] usb 4-1: Product: syz [ 2259.075955][T16210] usb 4-1: Manufacturer: syz [ 2259.075966][T16210] usb 4-1: SerialNumber: syz [ 2259.381670][T16210] snd-usb-caiaq 4-1:1.0: invalid EPs [ 2259.381697][T16210] usb 4-1: unable to init card! (ret=-22) [ 2259.382092][T16210] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 2259.705951][ T190] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 2259.706617][T26086] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2259.708466][T17857] usb 4-1: USB disconnect, device number 113 [ 2259.917450][ T190] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2259.945514][ T190] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2259.945615][ T190] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2259.945641][ T190] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2260.000062][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.000095][ T190] usb 2-1: Product: syz [ 2260.000110][ T190] usb 2-1: Manufacturer: syz [ 2260.000126][ T190] usb 2-1: SerialNumber: syz [ 2260.300383][ T190] snd-usb-caiaq 2-1:1.0: invalid EPs [ 2260.300430][ T190] usb 2-1: unable to init card! (ret=-22) [ 2260.300771][ T190] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 2260.666070][T26090] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2260.670466][ T190] usb 2-1: USB disconnect, device number 107 [ 2262.218434][T26109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2262.480792][ T30] audit: type=1804 audit(1792717909.689:1848): pid=26109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5529" name="bus" dev="ramfs" ino=167121 res=1 errno=0 [ 2262.511288][ T30] audit: type=1804 audit(1792717909.719:1849): pid=26109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5529" name="bus" dev="ramfs" ino=167121 res=1 errno=0 [ 2265.591455][T26122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2265.697202][T26128] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2265.760335][T26124] input: syz1 as /devices/virtual/input/input134 [ 2265.909211][ T30] audit: type=1804 audit(1792717913.119:1850): pid=26128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5535" name="bus" dev="ramfs" ino=167235 res=1 errno=0 [ 2265.945792][ T30] audit: type=1804 audit(1792717913.159:1851): pid=26128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5535" name="bus" dev="ramfs" ino=167235 res=1 errno=0 [ 2267.227156][T26135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2267.893446][T26139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2268.175210][ T30] audit: type=1804 audit(1792717915.389:1852): pid=26139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5538" name="bus" dev="ramfs" ino=167329 res=1 errno=0 [ 2268.213111][ T30] audit: type=1804 audit(1792717915.419:1853): pid=26139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5538" name="bus" dev="ramfs" ino=167329 res=1 errno=0 [ 2268.312503][T26142] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 2268.490553][T26138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5537'. [ 2269.884230][ T190] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 2270.055547][ T190] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2270.063637][ T190] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 2270.063664][ T190] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2270.063678][ T190] usb 4-1: config 0 has no interface number 0 [ 2270.063709][ T190] usb 4-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2270.144877][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.144912][ T190] usb 4-1: Product: syz [ 2270.144929][ T190] usb 4-1: Manufacturer: syz [ 2270.144947][ T190] usb 4-1: SerialNumber: syz [ 2270.180604][ T190] usb 4-1: config 0 descriptor?? [ 2270.734239][T26153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5541'. [ 2273.908401][ T190] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 2273.908552][ T190] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 2273.940168][ T190] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 2273.940235][ T190] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 2273.940291][ T190] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 2273.990390][ T190] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2274.014673][ T190] usb 4-1: USB disconnect, device number 114 [ 2274.044595][ T190] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2274.047755][ T190] keyspan 4-1:0.133: device disconnected [ 2274.774437][T26174] netlink: 'syz.3.5546': attribute type 4 has an invalid length. [ 2275.962515][T26184] netlink: 'syz.0.5548': attribute type 4 has an invalid length. [ 2277.212882][T26192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5550'. [ 2279.615097][ T30] audit: type=1804 audit(1792717926.829:1854): pid=26206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5553" name="bus" dev="ramfs" ino=168410 res=1 errno=0 [ 2279.616276][T17639] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 2279.658173][ T30] audit: type=1804 audit(1792717926.869:1855): pid=26206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5553" name="bus" dev="ramfs" ino=168410 res=1 errno=0 [ 2279.814140][T17639] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2279.839205][T17639] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2279.839271][T17639] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2279.897264][T17639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2279.897296][T17639] usb 2-1: Product: syz [ 2279.897311][T17639] usb 2-1: Manufacturer: syz [ 2279.897333][T17639] usb 2-1: SerialNumber: syz [ 2280.127543][T26211] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 2280.423010][T17639] snd-usb-caiaq 2-1:1.0: invalid EPs [ 2280.423031][T17639] usb 2-1: unable to init card! (ret=-22) [ 2280.423378][T17639] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 2280.842104][T26197] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2280.959689][T17627] usb 2-1: USB disconnect, device number 108 [ 2283.151052][ T30] audit: type=1804 audit(1792717930.359:1856): pid=26229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5559" name="bus" dev="ramfs" ino=167671 res=1 errno=0 [ 2283.197952][ T30] audit: type=1804 audit(1792717930.409:1857): pid=26229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5559" name="bus" dev="ramfs" ino=167671 res=1 errno=0 [ 2283.281844][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.281890][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2285.098820][T26235] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5558'. [ 2285.912933][T26239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2286.365643][T26244] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 2289.145218][T26266] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2289.145241][T26266] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2289.145435][T26266] vhci_hcd vhci_hcd.0: Device attached [ 2289.255137][T26266] fuse: Unknown parameter 'group_S‚' [ 2289.294644][T26267] vhci_hcd: connection closed [ 2289.303530][T20722] vhci_hcd vhci_hcd.4: stop threads [ 2289.303555][T20722] vhci_hcd vhci_hcd.4: release socket [ 2289.303573][T20722] vhci_hcd vhci_hcd.4: disconnect device [ 2289.463198][T26270] input: syz1 as /devices/virtual/input/input135 [ 2289.964583][T26276] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2290.339373][T26273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5568'. [ 2290.747897][T26274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2290.773330][T26284] netlink: 'syz.0.5571': attribute type 4 has an invalid length. [ 2291.354502][T26282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5570'. [ 2291.637114][T26292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5573'. [ 2293.338170][T26296] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2293.788382][T16210] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2293.937331][T16210] usb 4-1: Using ep0 maxpacket: 32 [ 2293.940492][T16210] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2293.959215][T16210] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 2293.959239][T16210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2293.959255][T16210] usb 4-1: config 0 has no interface number 0 [ 2293.959285][T16210] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2293.959305][T16210] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2293.959322][T16210] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2293.959339][T16210] usb 4-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2294.071263][T16210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2294.071287][T16210] usb 4-1: Product: syz [ 2294.071298][T16210] usb 4-1: Manufacturer: syz [ 2294.071310][T16210] usb 4-1: SerialNumber: syz [ 2294.099974][T16210] usb 4-1: config 0 descriptor?? [ 2294.115407][T16210] usb 4-1: expecting 3 got 1 endpoints! Bailing out. [ 2294.764353][T16210] usb 4-1: USB disconnect, device number 115 [ 2296.139019][T26315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2296.142417][T26309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5576'. [ 2298.681074][T26328] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2300.577504][T16210] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2300.754432][T16210] usb 4-1: Using ep0 maxpacket: 32 [ 2300.755287][T16210] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2300.757678][T16210] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 2300.757700][T16210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2300.757715][T16210] usb 4-1: config 0 has no interface number 0 [ 2300.757746][T16210] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2300.757831][T16210] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2300.757849][T16210] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2300.757928][T16210] usb 4-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2300.762548][T16210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2300.762569][T16210] usb 4-1: Product: syz [ 2300.762581][T16210] usb 4-1: Manufacturer: syz [ 2300.762592][T16210] usb 4-1: SerialNumber: syz [ 2300.886340][T16210] usb 4-1: config 0 descriptor?? [ 2300.899453][T16210] usb 4-1: expecting 3 got 1 endpoints! Bailing out. [ 2300.969536][T26332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5582'. [ 2301.222068][T26343] input: syz1 as /devices/virtual/input/input136 [ 2301.612483][T16210] usb 4-1: USB disconnect, device number 116 [ 2302.836060][T26353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2305.606124][T26367] input: syz1 as /devices/virtual/input/input137 [ 2306.095336][T26370] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2306.442488][T26373] input: syz1 as /devices/virtual/input/input138 [ 2307.194613][T16210] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 2307.357233][T16210] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2307.377040][T16210] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 2307.377065][T16210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2307.377079][T16210] usb 4-1: config 0 has no interface number 0 [ 2307.377109][T16210] usb 4-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2307.449601][T16210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.449625][T16210] usb 4-1: Product: syz [ 2307.449636][T16210] usb 4-1: Manufacturer: syz [ 2307.449660][T16210] usb 4-1: SerialNumber: syz [ 2307.481367][T16210] usb 4-1: config 0 descriptor?? [ 2312.266509][T16210] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 2312.266682][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 2312.267732][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 2312.307344][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 2312.307416][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 2312.338236][T16210] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2312.375682][T16210] usb 4-1: USB disconnect, device number 117 [ 2312.380076][T16210] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2312.380528][T16210] keyspan 4-1:0.133: device disconnected [ 2312.445941][T26398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2312.494716][T26397] binder: 26395:26397 ioctl c0306201 0 returned -14 [ 2312.564516][T26397] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2312.564543][T26397] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2312.564720][T26397] vhci_hcd vhci_hcd.0: Device attached [ 2312.742717][T26397] fuse: Unknown parameter 'group_S‚' [ 2312.826875][ T30] audit: type=1804 audit(1792717960.039:1858): pid=26398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5599" name="bus" dev="ramfs" ino=170103 res=1 errno=0 [ 2312.828713][ T30] audit: type=1804 audit(1792717960.039:1859): pid=26398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5599" name="bus" dev="ramfs" ino=170103 res=1 errno=0 [ 2312.855724][T17639] usb 42-1: SetAddress Request (7) to port 0 [ 2312.855798][T17639] usb 42-1: new SuperSpeed USB device number 7 using vhci_hcd [ 2312.907382][T26400] vhci_hcd: connection reset by peer [ 2312.908302][ T260] vhci_hcd vhci_hcd.4: stop threads [ 2312.908399][ T260] vhci_hcd vhci_hcd.4: release socket [ 2312.908716][ T260] vhci_hcd vhci_hcd.4: disconnect device [ 2313.786657][T26409] netlink: 'syz.5.5601': attribute type 25 has an invalid length. [ 2314.089795][T26404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5600'. [ 2315.578405][T16210] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 2315.727835][T16210] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2315.744929][T16210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2315.745018][T16210] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2315.796250][T16210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.796274][T16210] usb 1-1: Product: syz [ 2315.796287][T16210] usb 1-1: Manufacturer: syz [ 2315.796298][T16210] usb 1-1: SerialNumber: syz [ 2316.082687][T16210] snd-usb-caiaq 1-1:1.0: invalid EPs [ 2316.082718][T16210] usb 1-1: unable to init card! (ret=-22) [ 2316.090107][T16210] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 2316.374709][T26418] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2316.401191][T16210] usb 1-1: USB disconnect, device number 118 [ 2316.903428][T26430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2317.960851][T17639] usb 42-1: device descriptor read/8, error -110 [ 2318.235435][T26434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5607'. [ 2318.365301][T17639] usb usb42-port1: attempt power cycle [ 2318.964572][T17639] usb usb42-port1: unable to enumerate USB device [ 2320.928762][T26454] netlink: 'syz.0.5613': attribute type 25 has an invalid length. [ 2321.265036][T26449] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5608'. [ 2323.184544][T26471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2323.473673][T26465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5616'. [ 2323.501608][ T30] audit: type=1804 audit(1792717970.709:1860): pid=26471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5619" name="bus" dev="ramfs" ino=169339 res=1 errno=0 [ 2323.527633][ T30] audit: type=1804 audit(1792717970.739:1861): pid=26471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5619" name="bus" dev="ramfs" ino=169339 res=1 errno=0 [ 2323.976323][T17639] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 2324.004247][T16210] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 2324.162577][T17639] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2324.163580][T16210] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2324.185262][T17639] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2324.185358][T17639] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2324.185483][T16210] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 2324.185500][T16210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2324.185514][T16210] usb 4-1: config 0 has no interface number 0 [ 2324.185543][T16210] usb 4-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2324.264841][T17639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.264873][T17639] usb 2-1: Product: syz [ 2324.264890][T17639] usb 2-1: Manufacturer: syz [ 2324.264906][T17639] usb 2-1: SerialNumber: syz [ 2324.304503][T16210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.304533][T16210] usb 4-1: Product: syz [ 2324.304544][T16210] usb 4-1: Manufacturer: syz [ 2324.304576][T16210] usb 4-1: SerialNumber: syz [ 2324.339651][T16210] usb 4-1: config 0 descriptor?? [ 2324.638784][T17639] snd-usb-caiaq 2-1:1.0: invalid EPs [ 2324.638806][T17639] usb 2-1: unable to init card! (ret=-22) [ 2324.639176][T17639] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 2324.951212][T26468] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2324.978667][T17627] usb 2-1: USB disconnect, device number 109 [ 2325.155611][T17639] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 2325.333362][T17639] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2325.361555][T17639] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2325.361639][T17639] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2325.361657][T17639] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2325.439528][T17639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2325.439553][T17639] usb 5-1: Product: syz [ 2325.439565][T17639] usb 5-1: Manufacturer: syz [ 2325.439576][T17639] usb 5-1: SerialNumber: syz [ 2325.790499][T17639] snd-usb-caiaq 5-1:1.0: invalid EPs [ 2325.790527][T17639] usb 5-1: unable to init card! (ret=-22) [ 2325.817571][T17639] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 2326.118700][T26491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2326.313781][T26476] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2326.356787][ T190] usb 5-1: USB disconnect, device number 114 [ 2326.505026][ T30] audit: type=1804 audit(1792717973.709:1862): pid=26491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5622" name="bus" dev="ramfs" ino=169433 res=1 errno=0 [ 2326.556840][ T30] audit: type=1804 audit(1792717973.769:1863): pid=26491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5622" name="bus" dev="ramfs" ino=169433 res=1 errno=0 [ 2328.099341][T16210] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 2328.128486][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 2328.172798][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 2328.172866][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 2328.172923][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 2328.222080][T16210] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2328.253793][T16210] usb 4-1: USB disconnect, device number 118 [ 2328.282619][T16210] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2328.283674][T16210] keyspan 4-1:0.133: device disconnected [ 2329.124509][T16210] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 2329.297662][T16210] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2329.304841][T16210] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 2329.304865][T16210] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2329.304880][T16210] usb 6-1: config 0 has no interface number 0 [ 2329.304908][T16210] usb 6-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2329.373743][T16210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.373766][T16210] usb 6-1: Product: syz [ 2329.373778][T16210] usb 6-1: Manufacturer: syz [ 2329.373789][T16210] usb 6-1: SerialNumber: syz [ 2329.416868][T16210] usb 6-1: config 0 descriptor?? [ 2332.372323][T26518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2332.919571][T16210] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 2332.945920][T16210] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82 [ 2332.947017][T16210] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 2332.947079][T16210] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 2332.947135][T16210] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 2332.953535][T16210] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2332.999049][T16210] usb 6-1: USB disconnect, device number 127 [ 2333.111785][T16210] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2333.128620][T16210] keyspan 6-1:0.133: device disconnected [ 2333.177135][T26515] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5628'. [ 2333.879624][T26522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5630'. [ 2334.594213][T16210] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2334.748586][T16210] usb 6-1: Using ep0 maxpacket: 32 [ 2334.750266][T16210] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2334.776313][T16210] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 2334.776349][T16210] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2334.776364][T16210] usb 6-1: config 0 has no interface number 0 [ 2334.776393][T16210] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2334.776413][T16210] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2334.776430][T16210] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2334.776447][T16210] usb 6-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2334.864276][T16210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.864299][T16210] usb 6-1: Product: syz [ 2334.864310][T16210] usb 6-1: Manufacturer: syz [ 2334.864322][T16210] usb 6-1: SerialNumber: syz [ 2334.905058][T16210] usb 6-1: config 0 descriptor?? [ 2334.921365][T16210] usb 6-1: expecting 3 got 1 endpoints! Bailing out. [ 2335.565537][T16210] usb 6-1: USB disconnect, device number 2 [ 2337.213212][T26545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5636'. [ 2338.255655][T26555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2340.386618][T17857] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 2340.557816][T17857] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2340.560320][T17857] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2340.560370][T17857] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2340.560387][T17857] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2340.619671][T17857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.619699][T17857] usb 6-1: Product: syz [ 2340.619710][T17857] usb 6-1: Manufacturer: syz [ 2340.619721][T17857] usb 6-1: SerialNumber: syz [ 2340.883233][T17857] snd-usb-caiaq 6-1:1.0: invalid EPs [ 2340.883254][T17857] usb 6-1: unable to init card! (ret=-22) [ 2340.883564][T17857] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 2341.241438][T17857] usb 6-1: USB disconnect, device number 3 [ 2341.868610][T26576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2342.736319][T17857] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 2342.896255][T17857] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2342.899684][T17857] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 2342.899708][T17857] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2342.899722][T17857] usb 6-1: config 0 has no interface number 0 [ 2342.899759][T17857] usb 6-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2342.961269][T17857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2342.961299][T17857] usb 6-1: Product: syz [ 2342.961311][T17857] usb 6-1: Manufacturer: syz [ 2342.961327][T17857] usb 6-1: SerialNumber: syz [ 2342.995561][T17857] usb 6-1: config 0 descriptor?? [ 2344.725899][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.725963][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.221718][T26590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5646'. [ 2346.611445][T17857] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 2346.611598][T17857] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82 [ 2346.652407][T17857] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 2346.652475][T17857] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 2346.652531][T17857] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 2346.694706][T17857] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2346.724429][T17857] usb 6-1: USB disconnect, device number 4 [ 2346.754668][T17857] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2346.758986][T17857] keyspan 6-1:0.133: device disconnected [ 2348.293705][T26600] netlink: 'syz.4.5648': attribute type 4 has an invalid length. [ 2349.078483][T26602] syz.3.5649 (26602): drop_caches: 2 [ 2349.825553][T26609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2350.118602][ T30] audit: type=1804 audit(1792717997.329:1864): pid=26609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5651" name="bus" dev="ramfs" ino=169781 res=1 errno=0 [ 2350.157779][ T30] audit: type=1804 audit(1792717997.369:1865): pid=26609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5651" name="bus" dev="ramfs" ino=169781 res=1 errno=0 [ 2350.245794][T17857] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 2350.315979][T26607] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2350.395211][T17857] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2350.413780][T17857] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2350.413850][T17857] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2350.450184][T17857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2350.450217][T17857] usb 1-1: Product: syz [ 2350.450824][T17857] usb 1-1: Manufacturer: syz [ 2350.453503][T17857] usb 1-1: SerialNumber: syz [ 2350.750264][T17857] snd-usb-caiaq 1-1:1.0: invalid EPs [ 2350.750284][T17857] usb 1-1: unable to init card! (ret=-22) [ 2350.750622][T17857] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 2350.952696][T17627] usb 1-1: USB disconnect, device number 119 [ 2351.191464][T26617] netlink: 'syz.1.5652': attribute type 4 has an invalid length. [ 2352.598203][T26624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2352.903181][ T30] audit: type=1804 audit(1792718000.109:1866): pid=26625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5654" name="bus" dev="ramfs" ino=171225 res=1 errno=0 [ 2352.948268][ T30] audit: type=1804 audit(1792718000.159:1867): pid=26624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5654" name="bus" dev="ramfs" ino=171225 res=1 errno=0 [ 2356.366387][T26634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2357.343195][T26642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2357.530298][T26636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5657'. [ 2357.591018][ T30] audit: type=1804 audit(1792718004.789:1868): pid=26642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5659" name="bus" dev="ramfs" ino=171330 res=1 errno=0 [ 2357.627051][ T30] audit: type=1804 audit(1792718004.839:1869): pid=26642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5659" name="bus" dev="ramfs" ino=171330 res=1 errno=0 [ 2358.627892][T16210] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2358.775139][T16210] usb 2-1: Using ep0 maxpacket: 32 [ 2358.793344][T16210] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2358.808523][T16210] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 2358.808560][T16210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2358.808581][T16210] usb 2-1: config 0 has no interface number 0 [ 2358.808945][T16210] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2358.808968][T16210] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2358.808986][T16210] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2358.809003][T16210] usb 2-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2358.896841][T16210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2358.896873][T16210] usb 2-1: Product: syz [ 2358.896896][T16210] usb 2-1: Manufacturer: syz [ 2358.896908][T16210] usb 2-1: SerialNumber: syz [ 2358.926718][T16210] usb 2-1: config 0 descriptor?? [ 2358.950674][T16210] usb 2-1: expecting 3 got 1 endpoints! Bailing out. [ 2360.546963][T26656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5662'. [ 2360.551323][T26665] netlink: 'syz.0.5664': attribute type 4 has an invalid length. [ 2360.667286][T17857] usb 2-1: USB disconnect, device number 110 [ 2361.454247][T16210] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 2361.625535][T16210] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2361.626711][T16210] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2361.626781][T16210] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2361.701447][T16210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.701996][T16210] usb 5-1: Product: syz [ 2361.702016][T16210] usb 5-1: Manufacturer: syz [ 2361.702032][T16210] usb 5-1: SerialNumber: syz [ 2361.970923][T16210] snd-usb-caiaq 5-1:1.0: invalid EPs [ 2361.970942][T16210] usb 5-1: unable to init card! (ret=-22) [ 2361.971247][T16210] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 2362.208854][T16210] usb 5-1: USB disconnect, device number 115 [ 2362.360539][T26672] input: syz1 as /devices/virtual/input/input143 [ 2362.924882][T26670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5665'. [ 2366.442757][T26703] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 2366.442781][T26703] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2366.442955][T26703] vhci_hcd vhci_hcd.0: Device attached [ 2366.542580][T26703] fuse: Unknown parameter 'group_S‚' [ 2366.577716][T26704] vhci_hcd: connection closed [ 2366.578184][T12620] vhci_hcd vhci_hcd.0: stop threads [ 2366.578213][T12620] vhci_hcd vhci_hcd.0: release socket [ 2366.578241][T12620] vhci_hcd vhci_hcd.0: disconnect device [ 2370.468949][T26726] input: syz1 as /devices/virtual/input/input144 [ 2372.294274][T16210] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 2372.456521][T16210] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2372.457542][T16210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2372.457603][T16210] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2372.508079][T16210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.508102][T16210] usb 1-1: Product: syz [ 2372.508114][T16210] usb 1-1: Manufacturer: syz [ 2372.508125][T16210] usb 1-1: SerialNumber: syz [ 2372.769518][T16210] snd-usb-caiaq 1-1:1.0: invalid EPs [ 2372.769539][T16210] usb 1-1: unable to init card! (ret=-22) [ 2372.769841][T16210] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 2373.020192][T16210] usb 1-1: USB disconnect, device number 120 [ 2374.038098][T26748] netlink: 'syz.4.5683': attribute type 4 has an invalid length. [ 2374.130794][T26747] netlink: 'syz.3.5682': attribute type 4 has an invalid length. [ 2375.389796][T26754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5684'. [ 2376.883594][T26761] netlink: 'syz.1.5685': attribute type 4 has an invalid length. [ 2376.990977][T26765] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2376.991003][T26765] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2376.991189][T26765] vhci_hcd vhci_hcd.0: Device attached [ 2377.134838][T26769] vhci_hcd: connection closed [ 2377.145901][T12253] vhci_hcd vhci_hcd.5: stop threads [ 2377.145927][T12253] vhci_hcd vhci_hcd.5: release socket [ 2377.146088][T12253] vhci_hcd vhci_hcd.5: disconnect device [ 2378.831553][T26772] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2378.831577][T26772] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2378.831718][T26772] vhci_hcd vhci_hcd.0: Device attached [ 2379.106321][T16210] usb 44-1: SetAddress Request (10) to port 0 [ 2379.106414][T16210] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 2379.129842][T26773] vhci_hcd: connection reset by peer [ 2379.138726][T12253] vhci_hcd vhci_hcd.5: stop threads [ 2379.138751][T12253] vhci_hcd vhci_hcd.5: release socket [ 2379.139781][T12253] vhci_hcd vhci_hcd.5: disconnect device [ 2384.165358][T16210] usb 44-1: device descriptor read/8, error -110 [ 2384.632792][T16210] usb usb44-port1: attempt power cycle [ 2385.231674][T16210] usb usb44-port1: unable to enumerate USB device [ 2385.866947][T26788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2390.761658][T26815] netlink: 'syz.4.5698': attribute type 4 has an invalid length. [ 2390.874125][T26805] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5696'. [ 2391.357002][T16210] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2391.535171][T16210] usb 2-1: Using ep0 maxpacket: 32 [ 2391.536311][T16210] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2391.562394][T16210] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 2391.562420][T16210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2391.562434][T16210] usb 2-1: config 0 has no interface number 0 [ 2391.562463][T16210] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2391.562483][T16210] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2391.562500][T16210] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2391.562518][T16210] usb 2-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2391.673853][T16210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2391.673879][T16210] usb 2-1: Product: syz [ 2391.673890][T16210] usb 2-1: Manufacturer: syz [ 2391.673902][T16210] usb 2-1: SerialNumber: syz [ 2391.713400][T16210] usb 2-1: config 0 descriptor?? [ 2391.729243][T16210] usb 2-1: expecting 3 got 1 endpoints! Bailing out. [ 2393.325963][T17857] usb 2-1: USB disconnect, device number 111 [ 2393.784556][T16210] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2393.929346][T16210] usb 6-1: device descriptor read/64, error -71 [ 2394.175273][T16210] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2394.304815][T16210] usb 6-1: device descriptor read/64, error -71 [ 2394.423794][T16210] usb usb6-port1: attempt power cycle [ 2394.538595][T17857] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2394.686608][T17857] usb 1-1: Using ep0 maxpacket: 32 [ 2394.687569][T17857] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2394.701944][T17857] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 2394.702054][T17857] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2394.702125][T17857] usb 1-1: config 0 has no interface number 0 [ 2394.702240][T17857] usb 1-1: config 0 interface 146 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2394.780015][T17857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2394.780040][T17857] usb 1-1: Product: syz [ 2394.780051][T17857] usb 1-1: Manufacturer: syz [ 2394.780063][T17857] usb 1-1: SerialNumber: syz [ 2394.817599][T17857] usb 1-1: config 0 descriptor?? [ 2394.820246][T16210] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2394.837737][T16210] usb 6-1: device descriptor read/8, error -71 [ 2394.842046][T17857] usb 1-1: expecting 3 got 0 endpoints! Bailing out. [ 2395.088531][T16210] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2395.105289][T16210] usb 6-1: device descriptor read/8, error -71 [ 2395.214666][T16210] usb usb6-port1: unable to enumerate USB device [ 2395.560534][T26837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5702'. [ 2396.196899][T17639] usb 1-1: USB disconnect, device number 121 [ 2396.254206][T16210] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 2396.424830][T16210] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2396.429121][T16210] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 2396.429154][T16210] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2396.429179][T16210] usb 6-1: config 0 has no interface number 0 [ 2396.429209][T16210] usb 6-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2396.492050][T16210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.492073][T16210] usb 6-1: Product: syz [ 2396.492084][T16210] usb 6-1: Manufacturer: syz [ 2396.492096][T16210] usb 6-1: SerialNumber: syz [ 2396.535989][T16210] usb 6-1: config 0 descriptor?? [ 2398.283440][T26855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5707'. [ 2399.623846][T26866] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5709'. [ 2399.960350][T26872] input: syz1 as /devices/virtual/input/input145 [ 2400.038143][T16210] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 2400.038300][T16210] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82 [ 2400.068016][T16210] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 2400.068084][T16210] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 2400.068140][T16210] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 2400.110095][T16210] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2400.142039][T16210] usb 6-1: USB disconnect, device number 9 [ 2400.177783][T16210] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2400.195463][T16210] keyspan 6-1:0.133: device disconnected [ 2401.276328][T26886] input: syz1 as /devices/virtual/input/input146 [ 2402.644257][T16210] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 2402.739875][T26891] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2402.739907][T26891] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2402.740094][T26891] vhci_hcd vhci_hcd.0: Device attached [ 2402.810280][T16210] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2402.812689][T16210] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 2402.812719][T16210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2402.812741][T16210] usb 4-1: config 0 has no interface number 0 [ 2402.812770][T16210] usb 4-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2402.865059][T16210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.865090][T16210] usb 4-1: Product: syz [ 2402.865105][T16210] usb 4-1: Manufacturer: syz [ 2402.865121][T16210] usb 4-1: SerialNumber: syz [ 2402.905976][T16210] usb 4-1: config 0 descriptor?? [ 2402.933688][T26891] fuse: Unknown parameter 'group_S‚' [ 2402.975201][T26892] vhci_hcd: connection closed [ 2402.976145][T12253] vhci_hcd vhci_hcd.4: stop threads [ 2402.976174][T12253] vhci_hcd vhci_hcd.4: release socket [ 2402.979949][T12253] vhci_hcd vhci_hcd.4: disconnect device [ 2403.028091][T17857] usb 42-1: enqueue for inactive port 0 [ 2403.530622][T17857] usb usb42-port1: attempt power cycle [ 2404.117787][T17857] usb usb42-port1: unable to enumerate USB device [ 2406.157779][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.157834][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2407.113442][T16210] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 2407.132520][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 2407.133628][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 2407.133689][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 2407.133744][T16210] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 2407.180292][T16210] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2407.212614][T16210] usb 4-1: USB disconnect, device number 119 [ 2407.236304][T16210] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2407.260301][T16210] keyspan 4-1:0.133: device disconnected [ 2407.939142][T26913] input: syz1 as /devices/virtual/input/input147 [ 2408.099855][T26914] netlink: 'syz.3.5720': attribute type 4 has an invalid length. [ 2410.540368][T26926] netlink: 'syz.0.5724': attribute type 4 has an invalid length. [ 2411.993818][T26930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2414.198282][T26936] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2414.415626][ T30] audit: type=1804 audit(1792718061.629:1870): pid=26936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5726" name="bus" dev="ramfs" ino=173194 res=1 errno=0 [ 2414.446299][ T30] audit: type=1804 audit(1792718061.659:1871): pid=26936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5726" name="bus" dev="ramfs" ino=173194 res=1 errno=0 [ 2416.962212][T26954] input: syz1 as /devices/virtual/input/input148 [ 2419.422823][T26962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2419.493183][T26966] syz.0.5734 (26966): drop_caches: 2 [ 2422.629971][T26981] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2423.802913][T26990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5740'. [ 2425.684869][T26999] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2425.684895][T26999] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2425.685032][T26999] vhci_hcd vhci_hcd.0: Device attached [ 2425.807347][T26999] fuse: Unknown parameter 'group_S‚' [ 2425.841388][T27000] vhci_hcd: connection closed [ 2425.843942][ T260] vhci_hcd vhci_hcd.5: stop threads [ 2425.846500][ T260] vhci_hcd vhci_hcd.5: release socket [ 2425.846556][ T260] vhci_hcd vhci_hcd.5: disconnect device [ 2426.424583][T27010] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5743'. [ 2426.863705][T27012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5744'. [ 2428.219304][T27019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5747'. [ 2428.597087][T27029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5749'. [ 2428.607435][T27028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2429.974112][T16210] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2430.134131][T16210] usb 4-1: Using ep0 maxpacket: 32 [ 2430.134992][T16210] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2430.136402][T16210] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 2430.136423][T16210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2430.136437][T16210] usb 4-1: config 0 has no interface number 0 [ 2430.136466][T16210] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2430.136486][T16210] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2430.136503][T16210] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2430.136520][T16210] usb 4-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2430.139266][T16210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2430.139286][T16210] usb 4-1: Product: syz [ 2430.139298][T16210] usb 4-1: Manufacturer: syz [ 2430.139309][T16210] usb 4-1: SerialNumber: syz [ 2430.268534][T16210] usb 4-1: config 0 descriptor?? [ 2430.281429][T16210] usb 4-1: expecting 3 got 1 endpoints! Bailing out. [ 2431.179192][T27057] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2431.179225][T27057] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2431.201896][T27057] vhci_hcd vhci_hcd.0: Device attached [ 2431.266593][T17627] usb 4-1: USB disconnect, device number 120 [ 2431.381180][T27058] vhci_hcd: connection closed [ 2431.381367][ T1158] vhci_hcd vhci_hcd.1: stop threads [ 2431.381394][ T1158] vhci_hcd vhci_hcd.1: release socket [ 2431.381451][ T1158] vhci_hcd vhci_hcd.1: disconnect device [ 2432.812834][T27074] netlink: 'syz.1.5757': attribute type 4 has an invalid length. [ 2434.618112][T27081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2436.616764][T27088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5760'. [ 2437.987012][T27092] syz.4.5761 (27092): drop_caches: 2 [ 2438.345151][T27096] netlink: 'syz.1.5762': attribute type 4 has an invalid length. [ 2438.853643][T27104] netlink: 'syz.3.5763': attribute type 4 has an invalid length. [ 2440.157374][T16210] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 2440.347929][T16210] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2440.376855][T16210] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 2440.376882][T16210] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2440.376896][T16210] usb 6-1: config 0 has no interface number 0 [ 2440.376926][T16210] usb 6-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2440.432535][T16210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2440.432560][T16210] usb 6-1: Product: syz [ 2440.432571][T16210] usb 6-1: Manufacturer: syz [ 2440.432583][T16210] usb 6-1: SerialNumber: syz [ 2440.480686][T16210] usb 6-1: config 0 descriptor?? [ 2441.295551][T27111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2442.459286][T27114] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 2442.459311][T27114] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2442.459544][T27114] vhci_hcd vhci_hcd.0: Device attached [ 2442.757030][T17639] usb 34-1: SetAddress Request (12) to port 0 [ 2442.757086][T17639] usb 34-1: new SuperSpeed USB device number 12 using vhci_hcd [ 2442.886019][T27115] vhci_hcd: connection reset by peer [ 2442.891987][ T260] vhci_hcd vhci_hcd.0: stop threads [ 2442.892011][ T260] vhci_hcd vhci_hcd.0: release socket [ 2442.892119][ T260] vhci_hcd vhci_hcd.0: disconnect device [ 2444.211341][T16210] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 2444.230114][T16210] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82 [ 2444.231138][T16210] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 2444.231199][T16210] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 2444.231254][T16210] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 2444.297413][T16210] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2444.339104][T16210] usb 6-1: USB disconnect, device number 10 [ 2444.406625][T16210] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2444.407358][T16210] keyspan 6-1:0.133: device disconnected [ 2445.294436][T27131] input: syz1 as /devices/virtual/input/input149 [ 2446.427714][T27138] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5773'. [ 2447.863450][T17639] usb 34-1: device descriptor read/8, error -110 [ 2448.245277][T17639] usb usb34-port1: attempt power cycle [ 2448.802077][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2448.815945][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2448.820548][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2448.849391][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2448.850131][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2448.910023][T17639] usb usb34-port1: unable to enumerate USB device [ 2449.638944][T27154] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5777'. [ 2450.856487][T27167] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5780'. [ 2450.892489][T27045] syz_tun (unregistering): left allmulticast mode [ 2450.954599][ T5609] Bluetooth: hci0: command tx timeout [ 2452.543808][T27152] bridge0: port 1(bridge_slave_0) entered blocking state [ 2452.547812][T27152] bridge0: port 1(bridge_slave_0) entered disabled state [ 2452.547962][T27152] bridge_slave_0: entered allmulticast mode [ 2452.583709][T27152] bridge_slave_0: entered promiscuous mode [ 2452.612136][T27152] bridge0: port 2(bridge_slave_1) entered blocking state [ 2452.613320][T27152] bridge0: port 2(bridge_slave_1) entered disabled state [ 2452.613462][T27152] bridge_slave_1: entered allmulticast mode [ 2452.650832][T27152] bridge_slave_1: entered promiscuous mode [ 2452.679403][T27175] kvm_pr_unimpl_wrmsr: 58 callbacks suppressed [ 2452.679423][T27175] kvm [27174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2452.717731][T27175] kvm [27174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2452.718486][T27175] kvm [27174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2452.768624][T27175] kvm [27174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2452.769341][T27175] kvm [27174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2452.813582][T27175] kvm [27174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2452.845023][T27175] kvm [27174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2452.845754][T27175] kvm [27174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2452.891243][T27175] kvm [27174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2452.892928][T27175] kvm [27174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2453.034384][ T5609] Bluetooth: hci0: command tx timeout [ 2453.147619][T27152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2453.193233][T27152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2453.786028][T27152] team0: Port device team_slave_0 added [ 2454.024838][T27173] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 2454.209853][T12253] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 2454.252266][T12253] bond0: (slave netdevsim1): Releasing backup interface [ 2454.500501][T27152] team0: Port device team_slave_1 added [ 2454.698893][T27152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2454.707950][T27152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2454.707982][T27152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2454.749068][T27152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2454.749088][T27152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2454.749119][T27152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2455.114086][ T5609] Bluetooth: hci0: command tx timeout [ 2455.770831][T27152] hsr_slave_0: entered promiscuous mode [ 2455.793320][T27152] hsr_slave_1: entered promiscuous mode [ 2455.803015][T27152] debugfs: 'hsr0' already exists in 'hsr' [ 2455.803039][T27152] Cannot create hsr debugfs directory [ 2457.211979][ T5609] Bluetooth: hci0: command tx timeout [ 2457.215656][T12253] vlan2: left allmulticast mode [ 2457.215676][T12253] geneve0: left allmulticast mode [ 2457.218067][T12253] bridge0: port 3(vlan2) entered disabled state [ 2459.077917][T27213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2459.217186][T27215] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2459.378647][T12253] bond0 (unregistering): Released all slaves [ 2459.838655][T12253] ovs-dp0: left promiscuous mode [ 2460.076798][T27219] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 2461.819523][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2462.331473][T27235] kvm_pr_unimpl_wrmsr: 5 callbacks suppressed [ 2462.331492][T27235] kvm [27234]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2462.334559][T27235] kvm [27234]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2462.337424][T27235] kvm [27234]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2462.338473][T27235] kvm [27234]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2462.431365][T27235] kvm [27234]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2462.432166][T27235] kvm [27234]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2462.490054][T27235] kvm [27234]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2462.491086][T27235] kvm [27234]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2462.504884][T27235] kvm [27234]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2462.518156][T27235] kvm [27234]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2464.793754][T12253] hsr_slave_0: left promiscuous mode [ 2464.848410][T12253] hsr_slave_1: left promiscuous mode [ 2464.849504][T12253] batman_adv: batadv0: Removing interface: macsec0 [ 2465.041583][T27260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2467.611636][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.611699][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2469.253422][T27152] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2469.335256][T27152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2469.336247][T27152] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2469.532927][T27152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2469.563137][T27152] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2469.591284][T27152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2469.601640][T27152] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2469.640424][T27152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2470.188869][T12253] IPVS: stop unused estimator thread 0... [ 2470.379259][T27302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2470.498782][T27152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2470.609356][T27307] binder: 27306:27307 ioctl c0306201 0 returned -14 [ 2470.677750][T27152] 8021q: adding VLAN 0 to HW filter on device team0 [ 2470.734965][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 2470.735086][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2470.811623][ T260] bridge0: port 2(bridge_slave_1) entered blocking state [ 2470.811704][ T260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2471.336196][T27152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2471.410509][T27315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5805'. [ 2471.828483][T27152] veth0_vlan: entered promiscuous mode [ 2471.886895][T27152] veth1_vlan: entered promiscuous mode [ 2472.066245][T27152] veth0_macvtap: entered promiscuous mode [ 2472.102963][T27152] veth1_macvtap: entered promiscuous mode [ 2472.117338][T27323] netlink: 'syz.5.5806': attribute type 4 has an invalid length. [ 2472.309672][T27152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2472.366250][T27152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2472.444301][ T260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2472.444349][ T260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2472.444378][ T260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2472.444406][ T260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2473.006519][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2473.006540][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2473.245726][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2473.245748][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2473.698658][T27332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5807'. [ 2474.467183][T27346] input: syz1 as /devices/virtual/input/input150 [ 2475.481771][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2475.496396][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2475.499310][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2475.543624][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2475.552327][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2475.891763][T27354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5810'. [ 2476.883842][T27370] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5812'. [ 2477.684157][ T5611] Bluetooth: hci4: command tx timeout [ 2479.422134][T27363] bridge0: port 1(bridge_slave_0) entered blocking state [ 2479.436805][T27363] bridge0: port 1(bridge_slave_0) entered disabled state [ 2479.436961][T27363] bridge_slave_0: entered allmulticast mode [ 2479.462089][T27363] bridge_slave_0: entered promiscuous mode [ 2479.482953][T27363] bridge0: port 2(bridge_slave_1) entered blocking state [ 2479.510368][T27363] bridge0: port 2(bridge_slave_1) entered disabled state [ 2479.510558][T27363] bridge_slave_1: entered allmulticast mode [ 2479.553050][T27363] bridge_slave_1: entered promiscuous mode [ 2479.754204][ T5611] Bluetooth: hci4: command tx timeout [ 2480.225409][T27327] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 2480.251617][T27363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2480.306252][T27363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2480.328575][T27403] input: syz1 as /devices/virtual/input/input151 [ 2480.375521][T27327] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2480.376599][T27327] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 2480.376629][T27327] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2480.376643][T27327] usb 6-1: config 0 has no interface number 0 [ 2480.376671][T27327] usb 6-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2480.378963][T27327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2480.378994][T27327] usb 6-1: Product: syz [ 2480.379006][T27327] usb 6-1: Manufacturer: syz [ 2480.379017][T27327] usb 6-1: SerialNumber: syz [ 2480.383439][T27327] usb 6-1: config 0 descriptor?? [ 2481.293800][T27363] team0: Port device team_slave_0 added [ 2481.309315][T27363] team0: Port device team_slave_1 added [ 2481.837388][ T5611] Bluetooth: hci4: command tx timeout [ 2482.070786][T20722] bond0: (slave netdevsim1): Releasing backup interface [ 2482.249013][T27409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2482.281404][T27363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2482.281431][T27363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2482.281462][T27363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2482.350537][T27363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2482.350555][T27363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2482.350578][T27363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2482.486545][T27327] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 2482.494653][T27327] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82 [ 2482.495710][T27327] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 2482.495771][T27327] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 2482.495826][T27327] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 2482.549820][T27327] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2482.595666][T27327] usb 6-1: USB disconnect, device number 11 [ 2482.625146][T27327] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2482.625597][T27327] keyspan 6-1:0.133: device disconnected [ 2483.026175][T27363] hsr_slave_0: entered promiscuous mode [ 2483.042890][T27363] hsr_slave_1: entered promiscuous mode [ 2483.144119][T27223] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 2483.297190][T27223] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2483.303022][T27223] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 2483.303053][T27223] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2483.303080][T27223] usb 4-1: config 0 has no interface number 0 [ 2483.374446][T27223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2483.374479][T27223] usb 4-1: Product: syz [ 2483.374496][T27223] usb 4-1: Manufacturer: syz [ 2483.374512][T27223] usb 4-1: SerialNumber: syz [ 2483.381042][T27223] usb 4-1: config 0 descriptor?? [ 2483.914199][ T5611] Bluetooth: hci4: command tx timeout [ 2484.622274][T27413] syz.0.5819 (27413): drop_caches: 2 [ 2487.002863][T27223] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 2487.003028][T27223] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 2487.049737][T27223] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 2487.049804][T27223] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 2487.049860][T27223] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 2487.054451][T27223] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2487.069941][T27223] usb 4-1: USB disconnect, device number 121 [ 2487.133480][T27223] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2487.180179][T27223] keyspan 4-1:0.133: device disconnected [ 2487.389336][T20722] bond1 (unregistering): (slave geneve2): Releasing active interface [ 2487.656377][T20722] bond0 (unregistering): Released all slaves [ 2487.742861][T27439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2487.836369][T20722] bond1 (unregistering): Released all slaves [ 2489.587033][T27223] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 2489.734781][T27223] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2489.735908][T27223] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 2489.735929][T27223] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2489.735943][T27223] usb 6-1: config 0 has no interface number 0 [ 2489.738681][T27223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2489.738728][T27223] usb 6-1: Product: syz [ 2489.738749][T27223] usb 6-1: Manufacturer: syz [ 2489.738761][T27223] usb 6-1: SerialNumber: syz [ 2489.829556][T27223] usb 6-1: config 0 descriptor?? [ 2489.887199][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2490.366434][T27459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2490.481375][T20722] hsr_slave_0: left promiscuous mode [ 2490.520703][T20722] hsr_slave_1: left promiscuous mode [ 2490.546445][T27461] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2490.546496][T27461] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2490.546613][T27461] vhci_hcd vhci_hcd.0: Device attached [ 2490.660212][T27461] fuse: Bad value for 'rootmode' [ 2490.694379][T27462] vhci_hcd: connection closed [ 2490.700989][ T260] vhci_hcd vhci_hcd.1: stop threads [ 2490.701013][ T260] vhci_hcd vhci_hcd.1: release socket [ 2490.701373][ T260] vhci_hcd vhci_hcd.1: disconnect device [ 2491.263171][T27223] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 2491.271369][T27223] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82 [ 2491.304101][T27223] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 2491.304201][T27223] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 2491.304283][T27223] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 2491.398584][T27223] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2491.449420][T27223] usb 6-1: USB disconnect, device number 12 [ 2491.485374][T27223] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2491.508208][T27223] keyspan 6-1:0.133: device disconnected [ 2491.853485][T27467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5828'. [ 2493.460057][T27484] input: syz1 as /devices/virtual/input/input152 [ 2495.392218][T27493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5834'. [ 2495.741527][T20722] IPVS: stop unused estimator thread 0... [ 2496.380309][T27363] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2496.434424][T27363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2496.435346][T27363] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2496.483815][T27363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2496.500532][T27363] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2496.519828][T27503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2496.559329][T27363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2496.563086][T27363] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2496.615050][T27363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2497.317960][T27516] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 2497.317986][T27516] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2497.318108][T27516] vhci_hcd vhci_hcd.0: Device attached [ 2497.432617][T27363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2497.488817][T27516] fuse: Bad value for 'fd' [ 2497.553326][T27519] vhci_hcd: connection closed [ 2497.553917][T12251] vhci_hcd vhci_hcd.0: stop threads [ 2497.554997][T12251] vhci_hcd vhci_hcd.0: release socket [ 2497.555043][T12251] vhci_hcd vhci_hcd.0: disconnect device [ 2497.677079][T27363] 8021q: adding VLAN 0 to HW filter on device team0 [ 2497.715266][ T260] bridge0: port 1(bridge_slave_0) entered blocking state [ 2497.715378][ T260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2497.806383][T12251] bridge0: port 2(bridge_slave_1) entered blocking state [ 2497.806463][T12251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2498.439233][T27363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2498.817702][T27363] veth0_vlan: entered promiscuous mode [ 2498.928359][T27363] veth1_vlan: entered promiscuous mode [ 2499.333873][T27363] veth0_macvtap: entered promiscuous mode [ 2499.397215][T27363] veth1_macvtap: entered promiscuous mode [ 2499.588276][T27363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2499.658417][T27363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2499.737164][ T260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2499.737473][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2499.737518][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2499.737544][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2500.678323][T27538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2500.715217][T12251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2500.715239][T12251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2500.791917][T27544] input: syz1 as /devices/virtual/input/input153 [ 2501.162602][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2501.162622][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2503.665846][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2503.686052][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2503.688408][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2503.718813][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2503.721833][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2503.746313][T27568] blktrace: Concurrent blktraces are not allowed on sg0 [ 2504.361510][T27223] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 2504.524096][T27223] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2504.556663][T27223] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2504.556716][T27223] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2504.556734][T27223] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2504.612261][T27223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2504.612286][T27223] usb 4-1: Product: syz [ 2504.612298][T27223] usb 4-1: Manufacturer: syz [ 2504.612309][T27223] usb 4-1: SerialNumber: syz [ 2505.061398][T27223] snd-usb-caiaq 4-1:1.0: invalid EPs [ 2505.061420][T27223] usb 4-1: unable to init card! (ret=-22) [ 2505.061735][T27223] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 2505.414744][T27568] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2505.458377][T27327] usb 4-1: USB disconnect, device number 122 [ 2505.834269][ T5609] Bluetooth: hci2: command tx timeout [ 2507.915040][ T5609] Bluetooth: hci2: command tx timeout [ 2508.261169][T27575] bridge0: port 1(bridge_slave_0) entered blocking state [ 2508.265262][T27575] bridge0: port 1(bridge_slave_0) entered disabled state [ 2508.265450][T27575] bridge_slave_0: entered allmulticast mode [ 2508.277903][T27575] bridge_slave_0: entered promiscuous mode [ 2508.326813][T27575] bridge0: port 2(bridge_slave_1) entered blocking state [ 2508.328953][T27575] bridge0: port 2(bridge_slave_1) entered disabled state [ 2508.329099][T27575] bridge_slave_1: entered allmulticast mode [ 2508.376007][T27575] bridge_slave_1: entered promiscuous mode [ 2508.735042][T27575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2508.759182][T27575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2509.051551][T27575] team0: Port device team_slave_0 added [ 2509.088110][T27575] team0: Port device team_slave_1 added [ 2509.360664][T27575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2509.360681][T27575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2509.360703][T27575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2509.439264][T27575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2509.439284][T27575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2509.439306][T27575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2509.956854][T27575] hsr_slave_0: entered promiscuous mode [ 2509.985574][T27575] hsr_slave_1: entered promiscuous mode [ 2509.986450][T27575] debugfs: 'hsr0' already exists in 'hsr' [ 2509.986469][T27575] Cannot create hsr debugfs directory [ 2509.995748][ T5609] Bluetooth: hci2: command tx timeout [ 2510.028760][T27618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2510.684112][T27223] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 2510.835956][T27223] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2510.841139][T27223] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 2510.841166][T27223] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2510.841181][T27223] usb 1-1: config 0 has no interface number 0 [ 2510.841209][T27223] usb 1-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2510.926795][T27223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2510.926840][T27223] usb 1-1: Product: syz [ 2510.926859][T27223] usb 1-1: Manufacturer: syz [ 2510.926890][T27223] usb 1-1: SerialNumber: syz [ 2510.943784][T27223] usb 1-1: config 0 descriptor?? [ 2512.074055][ T5609] Bluetooth: hci2: command tx timeout [ 2513.322448][T27637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5851'. [ 2513.792328][T27575] bond0: (slave netdevsim1): Releasing backup interface [ 2514.430603][T27223] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 2514.430762][T27223] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 82 [ 2514.455803][T27223] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 2514.455868][T27223] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 2514.455924][T27223] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 2514.494505][T27223] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2514.520416][T27223] usb 1-1: USB disconnect, device number 122 [ 2514.533991][T27223] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2514.535115][T27223] keyspan 1-1:0.133: device disconnected [ 2516.174594][T27575] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2516.387462][T27575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2516.416123][T27575] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2516.482460][T27575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2516.506951][T27575] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2516.575152][T27575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2516.583274][T27575] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2516.710196][T27575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2517.178342][T27656] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2517.596978][T27575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2517.714371][T27575] 8021q: adding VLAN 0 to HW filter on device team0 [ 2517.781907][T12253] bridge0: port 1(bridge_slave_0) entered blocking state [ 2517.781992][T12253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2517.888711][T12251] bridge0: port 2(bridge_slave_1) entered blocking state [ 2517.888840][T12251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2518.733235][T27575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2518.915203][T27223] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 2519.086517][T27223] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2519.091266][T27223] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 2519.091300][T27223] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2519.091314][T27223] usb 4-1: config 0 has no interface number 0 [ 2519.091344][T27223] usb 4-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2519.173256][T27223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2519.173281][T27223] usb 4-1: Product: syz [ 2519.173292][T27223] usb 4-1: Manufacturer: syz [ 2519.173304][T27223] usb 4-1: SerialNumber: syz [ 2519.203901][T27223] usb 4-1: config 0 descriptor?? [ 2519.233403][T27575] veth0_vlan: entered promiscuous mode [ 2519.338834][T27575] veth1_vlan: entered promiscuous mode [ 2519.805282][T27575] veth0_macvtap: entered promiscuous mode [ 2519.876880][T27575] veth1_macvtap: entered promiscuous mode [ 2520.079429][T27575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2520.168380][T27575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2520.219529][ T260] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2520.219736][ T260] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2520.219803][ T260] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2520.219843][ T260] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2520.942120][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2520.942148][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2521.155164][T12253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2521.155212][T12253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2522.666801][T27223] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 2522.666961][T27223] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 2522.675813][T27223] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 2522.675886][T27223] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 2522.675942][T27223] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 2522.736546][T27223] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2522.738695][T27223] usb 4-1: USB disconnect, device number 123 [ 2522.768699][T27223] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2522.769176][T27223] keyspan 4-1:0.133: device disconnected [ 2522.818023][T27083] udevd[27083]: setting mode of /dev/bus/usb/004/123 to 020664 failed: No such file or directory [ 2522.818118][T27083] udevd[27083]: setting owner of /dev/bus/usb/004/123 to uid=0, gid=0 failed: No such file or directory [ 2523.412421][T27693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2523.738937][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2523.757482][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2523.764440][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2523.787558][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2523.788460][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2524.238514][T27708] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5865'. [ 2524.462327][T27701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5864'. [ 2525.927751][ T5609] Bluetooth: hci5: command tx timeout [ 2526.855803][T27702] bridge0: port 1(bridge_slave_0) entered blocking state [ 2526.855930][T27702] bridge0: port 1(bridge_slave_0) entered disabled state [ 2526.856069][T27702] bridge_slave_0: entered allmulticast mode [ 2526.896576][T27702] bridge_slave_0: entered promiscuous mode [ 2526.927429][T27702] bridge0: port 2(bridge_slave_1) entered blocking state [ 2526.927513][T27702] bridge0: port 2(bridge_slave_1) entered disabled state [ 2526.927885][T27702] bridge_slave_1: entered allmulticast mode [ 2526.965839][T27702] bridge_slave_1: entered promiscuous mode [ 2527.244290][T24098] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 2527.310093][T27702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2527.355683][T27702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2527.410783][T24098] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2527.416295][T24098] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 2527.416381][T24098] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2527.416435][T24098] usb 2-1: config 0 has no interface number 0 [ 2527.416543][T24098] usb 2-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2527.478247][T24098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2527.478274][T24098] usb 2-1: Product: syz [ 2527.478286][T24098] usb 2-1: Manufacturer: syz [ 2527.478297][T24098] usb 2-1: SerialNumber: syz [ 2527.521669][T24098] usb 2-1: config 0 descriptor?? [ 2527.721543][T27702] team0: Port device team_slave_0 added [ 2527.756315][T27702] team0: Port device team_slave_1 added [ 2527.994051][ T5609] Bluetooth: hci5: command tx timeout [ 2528.193975][T27702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2528.194000][T27702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2528.194029][T27702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2528.206893][T27702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2528.206921][T27702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2528.206944][T27702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2529.045560][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.045643][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.049903][T27702] hsr_slave_0: entered promiscuous mode [ 2529.077961][T27702] hsr_slave_1: entered promiscuous mode [ 2529.094031][T27702] debugfs: 'hsr0' already exists in 'hsr' [ 2529.094064][T27702] Cannot create hsr debugfs directory [ 2530.074306][ T5609] Bluetooth: hci5: command tx timeout [ 2530.957115][T27739] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5871'. [ 2531.107499][T24098] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 2531.107656][T24098] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 82 [ 2531.158057][T24098] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 2531.158127][T24098] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 2531.158183][T24098] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 2531.194183][T24098] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2531.220414][T24098] usb 2-1: USB disconnect, device number 112 [ 2531.262768][T24098] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2531.293157][T24098] keyspan 2-1:0.133: device disconnected [ 2531.706431][T27702] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2532.164296][ T5609] Bluetooth: hci5: command tx timeout [ 2532.440839][T27702] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2532.903504][T27702] .`: (slave netdevsim1): Releasing backup interface [ 2533.113693][T27702] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2533.797819][T27702] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 2534.357535][T27755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5876'. [ 2534.609240][T27761] input: syz1 as /devices/virtual/input/input154 [ 2536.185034][T27327] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 2536.185202][T27702] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2536.239123][T27702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2536.241995][T27702] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2536.295052][T27702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2536.296122][T27702] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2536.334888][T27327] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2536.343297][T27327] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 2536.343333][T27327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2536.343355][T27327] usb 4-1: config 0 has no interface number 0 [ 2536.343397][T27327] usb 4-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2536.421873][T27702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2536.435587][T27327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2536.435617][T27327] usb 4-1: Product: syz [ 2536.435634][T27327] usb 4-1: Manufacturer: syz [ 2536.435657][T27327] usb 4-1: SerialNumber: syz [ 2536.439112][T27327] usb 4-1: config 0 descriptor?? [ 2536.472779][T27702] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2536.538644][T27702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2537.649148][T27702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2537.809321][T27702] 8021q: adding VLAN 0 to HW filter on device team0 [ 2537.862922][T27672] bridge0: port 1(bridge_slave_0) entered blocking state [ 2537.863031][T27672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2537.976361][T12620] bridge0: port 2(bridge_slave_1) entered blocking state [ 2537.976512][T12620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2538.741099][T27702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2539.233859][T27702] veth0_vlan: entered promiscuous mode [ 2539.351893][T27702] veth1_vlan: entered promiscuous mode [ 2539.702290][T27327] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 2539.702450][T27327] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 2539.728656][T27327] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 2539.728722][T27327] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 2539.728786][T27327] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 2539.770581][T27327] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2539.797448][T27327] usb 4-1: USB disconnect, device number 124 [ 2539.824620][T27327] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2539.866172][T27327] keyspan 4-1:0.133: device disconnected [ 2540.159386][T27702] veth0_macvtap: entered promiscuous mode [ 2540.260538][T27702] veth1_macvtap: entered promiscuous mode [ 2540.809065][T27702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2541.160926][T27702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2541.275769][T27672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2541.306531][T27823] batadv_slave_1: entered promiscuous mode [ 2541.353731][T27820] batadv_slave_1: left promiscuous mode [ 2541.625055][T27672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2541.625107][T27672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2541.625134][T27672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2541.885854][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2541.885878][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2542.161522][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2542.161543][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2542.409693][T27837] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 2544.041508][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2544.059029][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2544.071778][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2544.095756][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2544.098691][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2544.350608][T12620] bond0: (slave bond_slave_0): interface is now down [ 2544.350640][T12620] bond0: (slave bond_slave_1): interface is now down [ 2544.496832][ T1158] bond0: (slave bond_slave_0): interface is now down [ 2544.496856][ T1158] bond0: (slave bond_slave_1): interface is now down [ 2544.672139][ T1158] bond0: now running without any active interface! [ 2545.488103][ T30] audit: type=1326 audit(1792718192.699:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27869 comm="syz.4.5916" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4c99f559 code=0x7fc00000 [ 2546.234113][ T5609] Bluetooth: hci1: command tx timeout [ 2546.446860][T27884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5921'. [ 2547.174802][T27860] bridge0: port 1(bridge_slave_0) entered blocking state [ 2547.176434][T27860] bridge0: port 1(bridge_slave_0) entered disabled state [ 2547.176642][T27860] bridge_slave_0: entered allmulticast mode [ 2547.186725][T27860] bridge_slave_0: entered promiscuous mode [ 2547.215495][T27860] bridge0: port 2(bridge_slave_1) entered blocking state [ 2547.215710][T27860] bridge0: port 2(bridge_slave_1) entered disabled state [ 2547.216387][T27860] bridge_slave_1: entered allmulticast mode [ 2547.219765][T27860] bridge_slave_1: entered promiscuous mode [ 2547.297437][T27860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2547.302554][T27860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2547.393013][T27860] team0: Port device team_slave_0 added [ 2547.404154][T27860] team0: Port device team_slave_1 added [ 2547.452423][T27860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2547.452445][T27860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2547.452475][T27860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2547.501800][T27860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2547.501820][T27860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2547.501850][T27860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2547.975250][T27860] hsr_slave_0: entered promiscuous mode [ 2547.977261][T27860] hsr_slave_1: entered promiscuous mode [ 2547.998149][T27860] debugfs: 'hsr0' already exists in 'hsr' [ 2547.998180][T27860] Cannot create hsr debugfs directory [ 2548.314201][ T5609] Bluetooth: hci1: command tx timeout [ 2550.395178][ T5609] Bluetooth: hci1: command tx timeout [ 2552.474144][ T5609] Bluetooth: hci1: command tx timeout [ 2553.029198][T27980] batadv_slave_1: entered promiscuous mode [ 2553.213201][T27980] batadv_slave_1: left promiscuous mode [ 2553.330036][T27860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2553.380177][T27860] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2553.395436][T27860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2553.455552][T27860] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2553.474727][T27860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2553.531404][T27860] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2553.552551][T27860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2553.593836][T27860] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2554.312464][T27860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2554.467872][T27860] 8021q: adding VLAN 0 to HW filter on device team0 [ 2554.538342][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 2554.538423][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2554.607554][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 2554.607635][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2554.678190][T28002] netlink: 'syz.0.5968': attribute type 1 has an invalid length. [ 2554.773400][T28002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5968'. [ 2554.799317][T28002] veth0_to_hsr: entered promiscuous mode [ 2554.799340][T28002] veth0_to_hsr: entered allmulticast mode [ 2554.932399][T28005] support for cryptoloop has been removed. Use dm-crypt instead. [ 2555.216558][T27860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2555.365284][T28013] batadv_slave_1: entered promiscuous mode [ 2555.386882][T28013] batadv_slave_1: left promiscuous mode [ 2555.563004][T27860] veth0_vlan: entered promiscuous mode [ 2555.618986][T27860] veth1_vlan: entered promiscuous mode [ 2555.998167][T27967] Buffer I/O error on dev loop7, logical block 4095, async page read [ 2556.295057][T27860] veth0_macvtap: entered promiscuous mode [ 2556.373526][T27860] veth1_macvtap: entered promiscuous mode [ 2556.515651][T27860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2556.547876][T27860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2556.636994][T12253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2556.637652][T12253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2556.746621][T27672] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2556.802687][T27826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2556.971920][T28030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2556.971949][T28030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2557.036766][T20722] ------------[ cut here ]------------ [ 2557.036785][T20722] conntrack cleanup blocked for 60s [ 2557.036804][T20722] WARNING: net/netfilter/nf_conntrack_core.c:2505 at nf_conntrack_cleanup_net_list+0x21a/0x360, CPU#0: kworker/u8:2/20722 [ 2557.060550][T20722] Modules linked in: [ 2557.065376][T20722] CPU: 0 UID: 0 PID: 20722 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 2557.077110][T20722] Tainted: [L]=SOFTLOCKUP [ 2557.081552][T20722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2557.092403][T20722] Workqueue: netns cleanup_net [ 2557.097948][T20722] RIP: 0010:nf_conntrack_cleanup_net_list+0x21a/0x360 [ 2557.104830][T20722] Code: 4c 89 ef e8 e8 2d 32 f8 4d 8b 7d 00 4d 39 ef 74 69 e8 3a 33 c1 f7 45 31 e4 e9 aa fe ff ff e8 2d 33 c1 f7 48 8d 3d 56 ac 83 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff [ 2557.125139][T20722] RSP: 0018:ffffc90003f678b0 EFLAGS: 00010293 [ 2557.131279][T20722] RAX: ffffffff8a06aa03 RBX: dffffc0000000000 RCX: ffff88803716ddc0 [ 2557.139300][T20722] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: ffffffff918a5660 [ 2557.147618][T20722] RBP: 0000000000000001 R08: ffff888026232c03 R09: 1ffff11004c46580 [ 2557.155759][T20722] R10: dffffc0000000000 R11: ffffed1004c46581 R12: 00000001000370ea [ 2557.163772][T20722] R13: ffffc90003f67a50 R14: ffffc90003f67a50 R15: 00000001000370f0 [ 2557.171847][T20722] FS: 0000000000000000(0000) GS:ffff888123aa9000(0000) knlGS:0000000000000000 [ 2557.180861][T20722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2557.188267][T20722] CR2: 00005568ed341ed8 CR3: 000000007a9ac000 CR4: 00000000003526f0 [ 2557.197785][T20722] Call Trace: [ 2557.201098][T20722] [ 2557.204260][T20722] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 2557.210345][T20722] ops_undo_list+0x4d7/0x8f0 [ 2557.214991][T20722] ? __pfx_ops_undo_list+0x10/0x10 [ 2557.220123][T20722] ? idr_destroy+0x218/0x290 [ 2557.224868][T20722] ? do_raw_spin_unlock+0xf5/0x200 [ 2557.230027][T20722] cleanup_net+0x572/0x810 [ 2557.234494][T20722] ? __pfx_cleanup_net+0x10/0x10 [ 2557.239522][T20722] ? rcu_is_watching+0x16/0xb0 [ 2557.244393][T20722] ? process_scheduled_works+0x97a/0x1630 [ 2557.250175][T20722] process_scheduled_works+0xc3d/0x1630 [ 2557.255797][T20722] ? __pfx_process_scheduled_works+0x10/0x10 [ 2557.261821][T20722] ? assign_work+0x3cf/0x5d0 [ 2557.266480][T20722] worker_thread+0xa47/0xfb0 [ 2557.271093][T20722] ? __kthread_parkme+0x71/0x1f0 [ 2557.276198][T20722] kthread+0x38b/0x480 [ 2557.280328][T20722] ? __pfx_worker_thread+0x10/0x10 [ 2557.285514][T20722] ? __pfx_kthread+0x10/0x10 [ 2557.290915][T20722] ret_from_fork+0x514/0xb70 [ 2557.295963][T20722] ? __pfx_ret_from_fork+0x10/0x10 [ 2557.301095][T20722] ? __switch_to+0xc78/0x1410 [ 2557.305844][T20722] ? __pfx_kthread+0x10/0x10 [ 2557.310460][T20722] ret_from_fork_asm+0x1a/0x30 [ 2557.315289][T20722] [ 2557.318331][T20722] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2557.325618][T20722] CPU: 0 UID: 0 PID: 20722 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 2557.336826][T20722] Tainted: [L]=SOFTLOCKUP [ 2557.341153][T20722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2557.351213][T20722] Workqueue: netns cleanup_net [ 2557.356026][T20722] Call Trace: [ 2557.359413][T20722] [ 2557.362394][T20722] vpanic+0x56d/0xa60 [ 2557.366473][T20722] ? __pfx__printk+0x10/0x10 [ 2557.371101][T20722] ? __pfx_vpanic+0x10/0x10 [ 2557.375642][T20722] ? is_bpf_text_address+0x292/0x2b0 [ 2557.380982][T20722] ? is_bpf_text_address+0x26/0x2b0 [ 2557.386211][T20722] panic+0xc5/0xd0 [ 2557.389968][T20722] ? __pfx_panic+0x10/0x10 [ 2557.394431][T20722] ? ret_from_fork_asm+0x1a/0x30 [ 2557.399414][T20722] __warn+0x315/0x4c0 [ 2557.403437][T20722] ? nf_conntrack_cleanup_net_list+0x21a/0x360 [ 2557.409608][T20722] ? nf_conntrack_cleanup_net_list+0x21a/0x360 [ 2557.415780][T20722] __report_bug+0x276/0x570 [ 2557.420427][T20722] ? __pfx___schedule+0x10/0x10 [ 2557.425384][T20722] ? nf_conntrack_cleanup_net_list+0x21a/0x360 [ 2557.431564][T20722] ? __pfx___report_bug+0x10/0x10 [ 2557.436722][T20722] ? nf_conntrack_cleanup_net_list+0x131/0x360 [ 2557.442914][T20722] report_bug_entry+0x19b/0x290 [ 2557.447799][T20722] ? nf_conntrack_cleanup_net_list+0x21a/0x360 [ 2557.453974][T20722] ? nf_conntrack_cleanup_net_list+0x21f/0x360 [ 2557.460186][T20722] handle_bug+0xce/0x200 [ 2557.464444][T20722] exc_invalid_op+0x1a/0x50 [ 2557.468959][T20722] asm_exc_invalid_op+0x1a/0x20 [ 2557.473825][T20722] RIP: 0010:nf_conntrack_cleanup_net_list+0x21a/0x360 [ 2557.480606][T20722] Code: 4c 89 ef e8 e8 2d 32 f8 4d 8b 7d 00 4d 39 ef 74 69 e8 3a 33 c1 f7 45 31 e4 e9 aa fe ff ff e8 2d 33 c1 f7 48 8d 3d 56 ac 83 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff [ 2557.500234][T20722] RSP: 0018:ffffc90003f678b0 EFLAGS: 00010293 [ 2557.506346][T20722] RAX: ffffffff8a06aa03 RBX: dffffc0000000000 RCX: ffff88803716ddc0 [ 2557.514329][T20722] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: ffffffff918a5660 [ 2557.522310][T20722] RBP: 0000000000000001 R08: ffff888026232c03 R09: 1ffff11004c46580 [ 2557.530312][T20722] R10: dffffc0000000000 R11: ffffed1004c46581 R12: 00000001000370ea [ 2557.538299][T20722] R13: ffffc90003f67a50 R14: ffffc90003f67a50 R15: 00000001000370f0 [ 2557.546298][T20722] ? nf_conntrack_cleanup_net_list+0x213/0x360 [ 2557.552513][T20722] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 2557.558602][T20722] ops_undo_list+0x4d7/0x8f0 [ 2557.563236][T20722] ? __pfx_ops_undo_list+0x10/0x10 [ 2557.568364][T20722] ? idr_destroy+0x218/0x290 [ 2557.572973][T20722] ? do_raw_spin_unlock+0xf5/0x200 [ 2557.578116][T20722] cleanup_net+0x572/0x810 [ 2557.582573][T20722] ? __pfx_cleanup_net+0x10/0x10 [ 2557.587542][T20722] ? rcu_is_watching+0x16/0xb0 [ 2557.592350][T20722] ? process_scheduled_works+0x97a/0x1630 [ 2557.598123][T20722] process_scheduled_works+0xc3d/0x1630 [ 2557.603809][T20722] ? __pfx_process_scheduled_works+0x10/0x10 [ 2557.609837][T20722] ? assign_work+0x3cf/0x5d0 [ 2557.614454][T20722] worker_thread+0xa47/0xfb0 [ 2557.619090][T20722] ? __kthread_parkme+0x71/0x1f0 [ 2557.624094][T20722] kthread+0x38b/0x480 [ 2557.628197][T20722] ? __pfx_worker_thread+0x10/0x10 [ 2557.633315][T20722] ? __pfx_kthread+0x10/0x10 [ 2557.637941][T20722] ret_from_fork+0x514/0xb70 [ 2557.642586][T20722] ? __pfx_ret_from_fork+0x10/0x10 [ 2557.647704][T20722] ? __switch_to+0xc78/0x1410 [ 2557.652396][T20722] ? __pfx_kthread+0x10/0x10 [ 2557.657028][T20722] ret_from_fork_asm+0x1a/0x30 [ 2557.661811][T20722] [ 2557.665451][T20722] Kernel Offset: disabled [ 2557.669801][T20722] Rebooting in 86400 seconds..