last executing test programs: 13m16.509097217s ago: executing program 3 (id=2898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13m16.216629037s ago: executing program 1 (id=2900): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) 13m16.056588824s ago: executing program 1 (id=2902): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_CORR={0x10, 0x1, {0x7fffffff, 0x5, 0x9}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1ff, 0x1, 0xd8f, 0x1, 0x3}}]}]}}}]}, 0x90}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) 13m13.374415406s ago: executing program 1 (id=2920): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) open(0x0, 0x0, 0x11) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 13m13.192221198s ago: executing program 1 (id=2923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) 13m12.908476324s ago: executing program 3 (id=2927): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m12.76221812s ago: executing program 3 (id=2929): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_CORR={0x10, 0x1, {0x7fffffff, 0x5, 0x9}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1ff, 0x1, 0xd8f, 0x1, 0x3}}]}]}}}]}, 0x90}}, 0x4000080) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 13m12.197011018s ago: executing program 3 (id=2931): r0 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) 13m12.193059373s ago: executing program 1 (id=2932): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f0000000240)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 13m11.859068257s ago: executing program 3 (id=2934): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, 0x0) mq_getsetattr(r3, &(0x7f0000001080)={0x0, 0x20000000005, 0x8001, 0x55e}, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/107, 0x6b, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x5, 0x0) 13m11.577494204s ago: executing program 1 (id=2936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef000100ffffff88"], 0x280) 13m10.856739017s ago: executing program 0 (id=2939): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) creat(0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) 13m10.449489665s ago: executing program 0 (id=2940): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r0, &(0x7f0000001480)=""/265, 0x109, 0x6) 13m10.016524077s ago: executing program 3 (id=2941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) 13m10.016336846s ago: executing program 0 (id=2942): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m9.848886509s ago: executing program 0 (id=2943): r0 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) 13m9.654530782s ago: executing program 0 (id=2944): r0 = socket$kcm(0x10, 0x3, 0x4) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x24044895) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe06", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 13m9.517900326s ago: executing program 0 (id=2945): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) dup3(r0, r1, 0x0) 12m56.178773918s ago: executing program 32 (id=2936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef000100ffffff88"], 0x280) 12m54.685882103s ago: executing program 33 (id=2941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) 12m54.172660844s ago: executing program 34 (id=2945): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) dup3(r0, r1, 0x0) 8m39.652505472s ago: executing program 2 (id=4318): sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="92772af39148dbeafba6a03e6630e76c01ed95d5db24b646fdf2fd30bc1834f327c51049819e25b1f3251c6e9692e155e3fa09f63d76aed87401003c6ad7c798fbe7b7084a6a948479209e7948", 0x4d, 0x20000000, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x700, 0x0, 0x18}}}}}, 0x36) 8m38.950667961s ago: executing program 2 (id=4332): r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace", 0xbd}], 0x1}, 0x4880) 8m38.796112449s ago: executing program 2 (id=4335): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) 8m38.623466556s ago: executing program 2 (id=4338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) fcntl$setstatus(r3, 0x4, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x46}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@dioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x6, 0x635, &(0x7f0000001140)="$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") syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') 8m35.570910917s ago: executing program 2 (id=4348): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) 8m35.095916607s ago: executing program 2 (id=4351): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x200000c0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 8m19.156117538s ago: executing program 35 (id=4351): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x200000c0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 3m28.053877578s ago: executing program 8 (id=6265): r0 = socket$kcm(0x21, 0x2, 0xa) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) sendmsg$kcm(r0, 0x0, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4}) 3m27.01628112s ago: executing program 8 (id=6266): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0x1, 0x1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) socket$kcm(0x2d, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m26.596412985s ago: executing program 8 (id=6268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000340)) 3m26.143512244s ago: executing program 8 (id=6271): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000006340), 0x80042, 0x0) writev(r0, &(0x7f0000009980)=[{&(0x7f0000006700)="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", 0x400}], 0x1) 3m25.784135084s ago: executing program 8 (id=6273): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) listen(r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x1007}]}) clock_gettime(0x0, &(0x7f0000000180)) utimes(0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m24.787170247s ago: executing program 8 (id=6282): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bond0\x00', @multicast}) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0x0) 3m9.693761872s ago: executing program 36 (id=6282): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bond0\x00', @multicast}) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0x0) 5.774900561s ago: executing program 4 (id=7500): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 5.612064082s ago: executing program 9 (id=7502): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x4}, 0x1}, 0x18) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {}, 0xfe}, 0x18) 5.514829331s ago: executing program 9 (id=7503): syz_usb_connect$uac1(0x7, 0x71, 0x0, 0x0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 5.364071734s ago: executing program 4 (id=7504): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000c200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040800}}], 0x1, 0x4000) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) close(0x3) 5.363733012s ago: executing program 6 (id=7505): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.216208358s ago: executing program 4 (id=7506): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e93d", 0x2}], 0x1) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.439952588s ago: executing program 7 (id=7511): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00007bb000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="3e0f01c3660f3881b7037b0000d9f2640f79e10f3266ba6100edc4c27933620f64660f3830ba000000000b18", 0x2c}], 0x1, 0x42, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x121800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.439605762s ago: executing program 4 (id=7512): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/158, 0x9e}], 0x1) 4.430651288s ago: executing program 7 (id=7513): syz_open_procfs(0x0, 0x0) r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000e00)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.211729885s ago: executing program 9 (id=7514): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 3.540030989s ago: executing program 4 (id=7520): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x1) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0x6}, 0x8) 3.503805819s ago: executing program 4 (id=7521): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3001, 0x0) 3.336299924s ago: executing program 5 (id=7522): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$tun(r0, &(0x7f0000000680)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x42, 0x6, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, {[@dstopts={0x67, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x8, {0x3, 0x0, 0x6, 0x1}}]}], @payload_conn={{{0x1a, 0x0, 0x1, 0x1, 0x1, 0x6, 0x0, 0x2, 0x80, 0x0, 0x1, 0x7, 0x5, 0x0, 0xd5, 0xfffb, 0x2, 0x4e20, 0x4e24}}, [0x0, 0x0]}}}}}, 0x6a) 3.251952088s ago: executing program 5 (id=7523): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e93d", 0x2}], 0x1) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.821511943s ago: executing program 5 (id=7524): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01080004000100dbdf250b00000008000300", @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0xc0) 2.74692248s ago: executing program 5 (id=7525): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 2.599962466s ago: executing program 9 (id=7526): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) 2.141022858s ago: executing program 6 (id=7527): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005e40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000017010000030000000000d6"], 0x18, 0xc000}], 0x1, 0x0) 1.757976605s ago: executing program 6 (id=7528): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) write$sequencer(r0, 0x0, 0x10) 1.473163845s ago: executing program 6 (id=7529): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 1.276865263s ago: executing program 6 (id=7530): syz_usb_connect(0x2, 0x0, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}) 1.254688291s ago: executing program 7 (id=7531): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x1) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0x6}, 0x8) 1.250809338s ago: executing program 5 (id=7532): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000006000340000100"], 0xa0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 927.868018ms ago: executing program 7 (id=7533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x2, 0x2, 0x0, 0x0, @msi={0xa, 0x3, 0x5, 0xe00000}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 903.77773ms ago: executing program 5 (id=7534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e93d", 0x2}], 0x1) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 826.106418ms ago: executing program 9 (id=7535): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) 380.181474ms ago: executing program 6 (id=7536): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 159.82839ms ago: executing program 9 (id=7537): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 110.544762ms ago: executing program 7 (id=7538): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000009580)={0x8, {0x401, 0x279, 0x5}, {0x3, 0x96, 0x4, 0x7}, {0x25b4, 0x10000}}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 0s ago: executing program 7 (id=7539): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40044) kernel console output (not intermixed with test programs): point 0xA has invalid maxpacket 1023 [ 990.059222][ T5734] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 990.062748][ T5734] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 990.062764][ T5734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.062774][ T5734] usb 9-1: Product: syz [ 990.062781][ T5734] usb 9-1: Manufacturer: syz [ 990.062788][ T5734] usb 9-1: SerialNumber: syz [ 990.144354][ T5734] usb 9-1: config 0 descriptor?? [ 990.149979][T22144] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 990.150093][T22144] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 990.388281][T22144] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 990.388455][T22144] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 991.220103][ T5734] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 991.220133][ T5734] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 991.247972][ T5734] asix 9-1:0.34: probe with driver asix failed with error -71 [ 991.285923][ T5734] usb 9-1: USB disconnect, device number 15 [ 991.400829][T20510] bond0 (unregistering): Released all slaves [ 991.597605][T22146] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 991.597642][T22146] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 991.597657][T22146] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 991.806495][T20510] tipc: Left network mode [ 991.815054][T21888] team0: Port device team_slave_0 added [ 991.825849][T21888] team0: Port device team_slave_1 added [ 992.085893][T21888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.085910][T21888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.085934][T21888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.416921][T22170] overlayfs: missing 'lowerdir' [ 992.441728][T21888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.441738][T21888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.441752][T21888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.874440][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.874527][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.913152][T21888] hsr_slave_0: entered promiscuous mode [ 992.915173][T21888] hsr_slave_1: entered promiscuous mode [ 992.934476][T21888] debugfs: 'hsr0' already exists in 'hsr' [ 992.934502][T21888] Cannot create hsr debugfs directory [ 993.716601][T20510] hsr_slave_0: left promiscuous mode [ 993.761855][T20510] hsr_slave_1: left promiscuous mode [ 993.895050][T22209] overlayfs: missing 'lowerdir' [ 994.047343][T20510] veth1_macvtap: left promiscuous mode [ 994.047465][T20510] veth0_macvtap: left promiscuous mode [ 994.047754][T20510] veth1_vlan: left promiscuous mode [ 994.048004][T20510] veth0_vlan: left promiscuous mode [ 994.618406][T22222] netlink: 'syz.6.5930': attribute type 7 has an invalid length. [ 994.706315][T22222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5930'. [ 994.706343][T22222] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5930'. [ 995.189612][T22234] overlayfs: missing 'lowerdir' [ 996.573001][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 996.610060][T22218] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 996.615761][T22247] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 996.615800][T22247] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 996.615819][T22247] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 999.636024][ T5260] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1001.186193][ T822] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1001.339913][ T822] usb 6-1: Using ep0 maxpacket: 8 [ 1001.342213][ T822] usb 6-1: config 5 has an invalid interface number: 242 but max is 0 [ 1001.342235][ T822] usb 6-1: config 5 has no interface number 0 [ 1001.342263][ T822] usb 6-1: config 5 interface 242 has no altsetting 0 [ 1001.370327][ T822] usb 6-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=bf.5f [ 1001.370353][ T822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.370372][ T822] usb 6-1: Product: syz [ 1001.370385][ T822] usb 6-1: Manufacturer: syz [ 1001.370409][ T822] usb 6-1: SerialNumber: syz [ 1001.718124][ T822] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1001.719552][ T822] gspca_zc3xx: reg_w_i err -71 [ 1001.719637][ T822] gspca_zc3xx 6-1:5.242: probe with driver gspca_zc3xx failed with error -71 [ 1001.737002][ T822] usb 6-1: USB disconnect, device number 20 [ 1003.221264][T22406] netlink: 'syz.8.5985': attribute type 7 has an invalid length. [ 1004.043420][T22432] 9pnet: p9_errstr2errno: server reported unknown error [ 1004.129012][T14419] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1004.283744][T14419] usb 9-1: Using ep0 maxpacket: 32 [ 1004.296993][T14419] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1004.297025][T14419] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1004.332258][T22447] netlink: 'syz.5.5998': attribute type 7 has an invalid length. [ 1004.345385][T14419] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1004.345414][T14419] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.345433][T14419] usb 9-1: Product: syz [ 1004.345447][T14419] usb 9-1: Manufacturer: syz [ 1004.345461][T14419] usb 9-1: SerialNumber: syz [ 1004.359954][T14419] usb 9-1: config 0 descriptor?? [ 1004.396987][T14419] gs_usb 9-1:0.0: Required endpoints not found [ 1004.466097][ T5615] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1004.634196][ T5615] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.634221][ T5615] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1004.634255][ T5615] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1004.634277][ T5615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.664353][ T5615] usb 7-1: config 0 descriptor?? [ 1004.906632][ T5734] usb 7-1: USB disconnect, device number 24 [ 1005.171688][T21888] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1005.228558][T21888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1005.232796][T21888] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1005.313101][T21888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1005.315153][T21888] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1005.356000][ T5734] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1005.454276][T21888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1005.455634][T21888] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1005.508868][ T5734] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.508893][ T5734] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1005.508927][ T5734] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1005.508949][ T5734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.514764][ T5734] usb 7-1: config 0 descriptor?? [ 1005.590720][T21888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1005.745069][ T11] usb 7-1: USB disconnect, device number 25 [ 1005.924972][T21888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.018817][T21888] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.123108][T19039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.188435][T19039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.249125][T19039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.249286][T19039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.485094][T22508] netlink: 'syz.6.6008': attribute type 7 has an invalid length. [ 1007.142935][ T9] usb 9-1: USB disconnect, device number 16 [ 1007.587631][ T5615] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1007.765873][ T5615] usb 5-1: device descriptor read/64, error -71 [ 1007.917294][T22548] netlink: 'syz.8.6019': attribute type 7 has an invalid length. [ 1008.055779][ T5615] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1008.195764][ T5615] usb 5-1: device descriptor read/64, error -71 [ 1008.308925][ T5615] usb usb5-port1: attempt power cycle [ 1008.407517][T21888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.647748][ T5615] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1008.677574][ T5615] usb 5-1: device descriptor read/8, error -71 [ 1008.927805][ T5615] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1008.948811][ T5615] usb 5-1: device descriptor read/8, error -71 [ 1009.056152][ T5615] usb usb5-port1: unable to enumerate USB device [ 1009.291434][T21888] veth0_vlan: entered promiscuous mode [ 1009.368983][T21888] veth1_vlan: entered promiscuous mode [ 1009.472789][T22590] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6034'. [ 1011.285594][T14419] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1011.435626][T14419] usb 5-1: Using ep0 maxpacket: 16 [ 1011.439002][T14419] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1011.467079][T14419] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1011.467108][T14419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.467127][T14419] usb 5-1: Product: syz [ 1011.467142][T14419] usb 5-1: Manufacturer: syz [ 1011.467156][T14419] usb 5-1: SerialNumber: syz [ 1011.840734][T14419] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1011.880504][T14419] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1011.982443][T14419] usb 5-1: USB disconnect, device number 19 [ 1012.036286][T17984] udevd[17984]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.063541][T22593] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1012.063580][T22593] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1012.063598][T22593] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1012.107050][T21888] veth0_macvtap: entered promiscuous mode [ 1012.328784][T21888] veth1_macvtap: entered promiscuous mode [ 1012.488724][T21888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.564493][T21888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.627194][T19049] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.627808][T19049] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.699680][ T3138] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.700648][ T3138] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.202482][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.202508][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.442638][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.442656][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.625822][T22675] binder: 22673:22675 ioctl c018620c 200000000240 returned -22 [ 1016.331354][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1016.369030][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1016.373240][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1016.413382][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1016.433527][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1018.625321][ T5614] Bluetooth: hci4: command tx timeout [ 1020.188521][T22755] loop6: detected capacity change from 0 to 1024 [ 1020.200491][T22755] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1020.361051][T22755] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1020.444789][T22755] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.6089: lblock 2 mapped to illegal pblock 2 (length 1) [ 1020.444829][T22755] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1020.445088][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1020.445109][ C0] EXT4-fs (loop6): initial error at time 1783520149: ext4_map_blocks:791: inode 3: block 2 [ 1020.445146][ C0] EXT4-fs (loop6): last error at time 1783520149: ext4_map_blocks:791: inode 3: block 2 [ 1020.448901][T22755] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1020.448952][T22755] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.6089: lblock 0 mapped to illegal pblock 48 (length 1) [ 1020.448984][T22755] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1020.455131][T22755] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1020.455154][T22755] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.6089: Failed to acquire dquot type 0 [ 1020.455177][T22755] loop6: lost filesystem error report for type 5 error -117 [ 1020.488790][T22755] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1020.488815][T22755] loop6: lost filesystem error report for type 5 error -117 [ 1020.496951][T22755] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.6089: mark_inode_dirty error [ 1020.496983][T22755] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1020.500673][T22755] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1020.500771][T22755] EXT4-fs (loop6): 1 orphan inode deleted [ 1020.503542][T22755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1020.590907][ T3138] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 1020.701075][ T3138] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1020.701124][ T3138] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:15: Failed to release dquot type 0 [ 1021.369269][ T5614] Bluetooth: hci4: command tx timeout [ 1021.413166][T13775] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.418583][T22771] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 1021.450072][T13775] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1021.450102][T13775] loop6: lost filesystem error report for type 5 error -117 [ 1021.450424][T13775] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1021.450442][T13775] loop6: lost filesystem error report for type 5 error -117 [ 1021.451228][T13775] EXT4-fs error (device loop6): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 1021.451252][T13775] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1021.523300][T13775] Flush: task=syz-executor[13775] dev=loop6 state=2 [ 1021.605571][T13775] Teardown: task=syz-executor[13775] dev=loop6 state=2 [ 1021.655628][ T11] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1021.811703][ T11] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1021.811731][ T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.811752][ T11] usb 9-1: Product: syz [ 1021.811765][ T11] usb 9-1: Manufacturer: syz [ 1021.811779][ T11] usb 9-1: SerialNumber: syz [ 1021.875713][ T11] usb 9-1: config 0 descriptor?? [ 1022.065978][T22700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.068037][T22700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.068325][T22700] bridge_slave_0: entered allmulticast mode [ 1022.079525][T22700] bridge_slave_0: entered promiscuous mode [ 1022.104610][T22700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.111220][T22700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.111497][T22700] bridge_slave_1: entered allmulticast mode [ 1022.120107][T22700] bridge_slave_1: entered promiscuous mode [ 1022.144371][ T11] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1022.347000][T22700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.372654][T22700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.587255][T22700] team0: Port device team_slave_0 added [ 1022.595905][T22700] team0: Port device team_slave_1 added [ 1022.715275][T22800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1022.742200][T22700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.742216][T22700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.742239][T22700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.751278][T22700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.751293][T22700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.751319][T22700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.961863][T22700] hsr_slave_0: entered promiscuous mode [ 1022.968915][T22700] hsr_slave_1: entered promiscuous mode [ 1022.974363][T22700] debugfs: 'hsr0' already exists in 'hsr' [ 1022.974389][T22700] Cannot create hsr debugfs directory [ 1023.427139][ T5614] Bluetooth: hci4: command tx timeout [ 1023.436119][ T822] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1023.617019][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.617052][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.617075][ T822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1023.617116][ T822] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1023.617138][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.679023][ T822] usb 5-1: config 0 descriptor?? [ 1024.195971][ T822] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1024.471694][ T11] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1024.800703][ T9] usb 5-1: USB disconnect, device number 20 [ 1025.227967][T14419] usb 9-1: USB disconnect, device number 17 [ 1025.506798][ T5614] Bluetooth: hci4: command tx timeout [ 1025.592621][T22832] futex_wake_op: syz.4.6120 tries to shift op by 144; fix this program [ 1025.606959][T22700] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.183901][ T822] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1026.267122][T22700] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.364908][ T822] usb 7-1: Using ep0 maxpacket: 32 [ 1026.379016][ T822] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.379040][ T822] usb 7-1: config 0 has no interfaces? [ 1026.379071][ T822] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1026.379092][ T822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.386558][ T822] usb 7-1: config 0 descriptor?? [ 1026.839713][ T5734] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1026.862191][T22700] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.988732][ T5734] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1026.990665][ T5734] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.990688][ T5734] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1027.023391][ T5734] usb 5-1: string descriptor 0 read error: -22 [ 1027.023531][ T5734] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1027.023554][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.377391][T22700] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.402065][T22700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1028.440722][T22700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1028.464360][T22700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1028.527650][T22700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1028.536495][T22700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1028.568242][T22700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1028.569078][T22700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1028.608327][T22700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1028.861902][T22700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.960496][T16196] usb 7-1: USB disconnect, device number 26 [ 1029.024010][T22700] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.119292][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.121103][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.233378][T19794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.233616][T19794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.642892][T14419] usb 5-1: USB disconnect, device number 21 [ 1029.676979][T16196] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1029.825602][T16196] usb 7-1: Using ep0 maxpacket: 32 [ 1029.826297][T16196] usb 7-1: no configurations [ 1029.826312][T16196] usb 7-1: can't read configurations, error -22 [ 1029.985823][T16196] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1030.164715][T16196] usb 7-1: Using ep0 maxpacket: 32 [ 1030.165595][T16196] usb 7-1: no configurations [ 1030.165611][T16196] usb 7-1: can't read configurations, error -22 [ 1030.165992][T16196] usb usb7-port1: attempt power cycle [ 1030.514655][T16196] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1030.593975][T16196] usb 7-1: Using ep0 maxpacket: 32 [ 1030.597535][T16196] usb 7-1: no configurations [ 1030.597551][T16196] usb 7-1: can't read configurations, error -22 [ 1030.759587][ T5734] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1030.830886][T16196] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1030.846888][T16196] usb 7-1: Using ep0 maxpacket: 32 [ 1030.848336][T16196] usb 7-1: no configurations [ 1030.848352][T16196] usb 7-1: can't read configurations, error -22 [ 1030.849089][T16196] usb usb7-port1: unable to enumerate USB device [ 1030.991305][ T5734] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1030.999679][ T5734] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.999704][ T5734] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1031.008632][T22700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.013798][ T5734] usb 9-1: string descriptor 0 read error: -22 [ 1031.013937][ T5734] usb 9-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1031.013960][ T5734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.423865][T22992] binder: 22991:22992 ioctl c018620c 0 returned -14 [ 1031.574191][T22700] veth0_vlan: entered promiscuous mode [ 1031.589179][T22700] veth1_vlan: entered promiscuous mode [ 1031.656687][T22700] veth0_macvtap: entered promiscuous mode [ 1031.665090][T22700] veth1_macvtap: entered promiscuous mode [ 1031.709326][T22700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.730387][T22700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.765906][T19794] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.775959][T19794] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.776003][T19794] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.776035][T19794] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.019279][T22997] syz.4.6185 (22997): drop_caches: 0 [ 1032.721847][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.721864][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.947936][T19794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.947953][T19794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.446481][T22935] usb 9-1: USB disconnect, device number 18 [ 1034.083828][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1034.164412][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1034.171812][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1034.174494][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1034.179349][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1034.779777][ T11] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1034.949105][ T11] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.949155][ T11] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1034.949195][ T11] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1034.949218][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.003103][ T11] usb 9-1: config 0 descriptor?? [ 1035.030770][ T11] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1035.278125][T14534] usb 9-1: USB disconnect, device number 19 [ 1035.404289][ T11] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1035.568897][ T11] usb 7-1: Using ep0 maxpacket: 32 [ 1035.588343][ T11] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1035.588374][ T11] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1035.588397][ T11] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1035.593136][ T11] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1035.593164][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.593185][ T11] usb 7-1: Product: syz [ 1035.593341][ T11] usb 7-1: Manufacturer: syz [ 1035.593356][ T11] usb 7-1: SerialNumber: syz [ 1035.682887][ T11] usb 7-1: config 0 descriptor?? [ 1035.831834][ T9] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1035.889658][T23063] bridge_slave_0: left allmulticast mode [ 1035.889690][T23063] bridge_slave_0: left promiscuous mode [ 1035.889918][T23063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.986550][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.986598][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1035.986658][ T9] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1035.986670][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.991732][ T9] usb 9-1: config 0 descriptor?? [ 1036.063650][ T9] aiptek 9-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 1036.073972][ T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1036.106921][T23063] bridge_slave_1: left allmulticast mode [ 1036.106953][T23063] bridge_slave_1: left promiscuous mode [ 1036.107194][T23063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.135624][ T11] gs_usb 7-1:0.0: Couldn't get device config: (err=-32) [ 1036.135663][ T11] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 1036.201106][ T9] usb 9-1: USB disconnect, device number 20 [ 1036.315238][T23063] bond0: (slave bond_slave_0): Releasing backup interface [ 1036.376825][T23063] bond0: (slave bond_slave_1): Releasing backup interface [ 1036.459881][T23063] team0: Port device team_slave_0 removed [ 1036.464345][ T5614] Bluetooth: hci0: command tx timeout [ 1036.478598][T23063] team0: Port device team_slave_1 removed [ 1036.479400][T23063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.479416][T23063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.520064][T23063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.520081][T23063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.557924][T23063] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1037.691960][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1037.874209][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1037.876180][ T9] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1037.876208][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.881012][ T9] usb 9-1: config 0 descriptor?? [ 1038.064935][T14809] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1038.091763][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1038.092958][ T9] usb 9-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1038.093080][ T9] usb 9-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1038.319414][T14809] usb 6-1: Using ep0 maxpacket: 32 [ 1038.326992][T16196] usb 7-1: USB disconnect, device number 31 [ 1038.328017][T14809] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.328040][T14809] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1038.328074][T14809] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1038.328096][T14809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.432777][T14809] usb 6-1: config 0 descriptor?? [ 1038.552971][ T5614] Bluetooth: hci0: command tx timeout [ 1039.674037][T14809] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1039.798818][T23024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.799134][T23024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.799337][T23024] bridge_slave_0: entered allmulticast mode [ 1039.802642][T23024] bridge_slave_0: entered promiscuous mode [ 1039.831019][T23024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.832735][T23024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.833038][T23024] bridge_slave_1: entered allmulticast mode [ 1039.837306][T23024] bridge_slave_1: entered promiscuous mode [ 1039.861584][T14809] usb 7-1: Using ep0 maxpacket: 32 [ 1039.872004][T14809] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1039.872032][T14809] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1039.872056][T14809] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1039.902134][T14809] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1039.902151][T14809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.902162][T14809] usb 7-1: Product: syz [ 1039.902169][T14809] usb 7-1: Manufacturer: syz [ 1039.902177][T14809] usb 7-1: SerialNumber: syz [ 1039.948867][T14809] usb 7-1: config 0 descriptor?? [ 1040.408873][T14809] gs_usb 7-1:0.0: Couldn't get device config: (err=-32) [ 1040.408915][T14809] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 1040.838725][T16196] usb 6-1: USB disconnect, device number 21 [ 1041.444024][ T5734] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1041.447227][ T3727] bond0 (unregistering): Released all slaves [ 1041.507757][T23024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.517763][T23024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.645028][ T5734] usb 6-1: Using ep0 maxpacket: 32 [ 1041.646731][ T5734] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1041.646758][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.650443][ T5734] usb 6-1: config 0 descriptor?? [ 1041.740881][ T3727] tipc: Left network mode [ 1041.761245][T23024] team0: Port device team_slave_0 added [ 1041.867083][ T5734] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1041.867256][T23024] team0: Port device team_slave_1 added [ 1041.960196][T23024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.960213][T23024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.960238][T23024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.964749][T23024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.964764][T23024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.964790][T23024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.271080][T23024] hsr_slave_0: entered promiscuous mode [ 1042.277141][T23024] hsr_slave_1: entered promiscuous mode [ 1042.287312][T23024] debugfs: 'hsr0' already exists in 'hsr' [ 1042.287336][T23024] Cannot create hsr debugfs directory [ 1042.532118][ T11] usb 7-1: USB disconnect, device number 32 [ 1043.061493][ T5260] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1043.653810][ T3727] hsr_slave_0: left promiscuous mode [ 1043.693860][ T3727] hsr_slave_1: left promiscuous mode [ 1044.903733][T14419] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1045.053818][T14419] usb 7-1: Using ep0 maxpacket: 32 [ 1045.055682][T14419] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1045.055708][T14419] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1045.055731][T14419] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1045.058513][T14419] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1045.058540][T14419] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.058559][T14419] usb 7-1: Product: syz [ 1045.058573][T14419] usb 7-1: Manufacturer: syz [ 1045.058587][T14419] usb 7-1: SerialNumber: syz [ 1045.168667][T14419] usb 7-1: config 0 descriptor?? [ 1045.182770][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1045.592886][T14419] gs_usb 7-1:0.0: Couldn't get device config: (err=-32) [ 1045.592923][T14419] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 1047.087508][ T3727] IPVS: stop unused estimator thread 0... [ 1047.660436][T14809] usb 7-1: USB disconnect, device number 33 [ 1048.180404][ T37] audit: type=1326 audit(1783520177.143:145): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23264 comm="syz.8.6273" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f472da8de59 code=0x0 [ 1048.520476][T23274] syzkaller0: entered promiscuous mode [ 1048.520503][T23274] syzkaller0: entered allmulticast mode [ 1048.607441][T23274] tipc: Enabled bearer , priority 0 [ 1048.746070][T23272] tipc: Resetting bearer [ 1049.012927][T23272] tipc: Disabling bearer [ 1049.542075][T23308] bridge_slave_0: left allmulticast mode [ 1049.542096][T23308] bridge_slave_0: left promiscuous mode [ 1049.554978][T23308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.945213][T23308] bridge_slave_1: left allmulticast mode [ 1049.945233][T23308] bridge_slave_1: left promiscuous mode [ 1049.945372][T23308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.066195][T23308] veth0_to_bond: left allmulticast mode [ 1050.066216][T23308] veth0_to_bond: left promiscuous mode [ 1050.066365][T23308] bridge1: port 2(veth0_to_bond) entered disabled state [ 1050.244337][T23308] bond0: (slave bond_slave_0): Releasing backup interface [ 1050.346340][T23308] bond0: (slave bond_slave_1): Releasing backup interface [ 1050.406806][T23308] team0: Port device team_slave_0 removed [ 1050.446926][T23308] team0: Port device team_slave_1 removed [ 1050.447494][T23308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.447509][T23308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.485648][T23308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.485665][T23308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.527461][T23308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1051.177697][T23327] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6291'. [ 1051.284552][T23024] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1051.337095][T23024] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1051.341853][T23024] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1051.405737][T23024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1051.411456][T23024] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1051.468274][T23024] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1051.485060][T23024] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1051.550514][T23024] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1051.561811][T23334] syzkaller0: entered promiscuous mode [ 1051.561834][T23334] syzkaller0: entered allmulticast mode [ 1051.613733][T23334] tipc: Enabled bearer , priority 0 [ 1051.678232][T23332] tipc: Resetting bearer [ 1051.936065][T23332] tipc: Disabling bearer [ 1052.468406][T23024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.600018][T23024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.638098][T20362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.638189][T20362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.667009][T19794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.672019][T19794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.557478][T23024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.732128][T23400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6302'. [ 1054.037912][T23024] veth0_vlan: entered promiscuous mode [ 1054.115168][T23024] veth1_vlan: entered promiscuous mode [ 1054.228721][T23024] veth0_macvtap: entered promiscuous mode [ 1054.260999][T23024] veth1_macvtap: entered promiscuous mode [ 1054.287871][T23024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.329715][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.329804][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.371118][T23024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.384629][T14419] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1054.428480][T20362] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.428826][T20362] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.428862][T20362] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.428896][T20362] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.627129][T14419] usb 7-1: Using ep0 maxpacket: 16 [ 1054.629388][T14419] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.629417][T14419] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.629439][T14419] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1054.629480][T14419] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1054.629503][T14419] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.720063][T14419] usb 7-1: config 0 descriptor?? [ 1056.054359][T14419] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1056.054393][T14419] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1056.054420][T14419] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1056.054446][T14419] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1056.054472][T14419] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1056.054497][T14419] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1056.054522][T14419] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1056.054548][T14419] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1056.054574][T14419] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1056.054602][T14419] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1056.117791][T14419] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1056.117822][T14419] microsoft 0003:045E:07DA.0017: no inputs found [ 1056.117836][T14419] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 1056.179191][T14419] usb 7-1: USB disconnect, device number 34 [ 1056.255382][T23371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.255401][T23371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.513384][T23428] fido_id[23428]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1056.943852][T22524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.943874][T22524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.600552][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1057.650524][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1057.671270][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1057.687676][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1057.690213][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1058.875384][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.903237][T14419] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1059.055018][T14419] usb 5-1: Using ep0 maxpacket: 16 [ 1059.070086][T14419] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1059.071196][T14419] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1059.093847][T14419] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 1059.093863][T14419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.093877][T14419] usb 5-1: Product: syz [ 1059.093884][T14419] usb 5-1: Manufacturer: syz [ 1059.093892][T14419] usb 5-1: SerialNumber: syz [ 1059.298749][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.344038][T14419] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 04, bLength 9, bSynchAddress 02 [ 1059.662378][T14419] usb 5-1: USB disconnect, device number 22 [ 1059.811035][T17971] udevd[17971]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1059.961711][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.992874][ T60] Bluetooth: hci2: command tx timeout [ 1060.555270][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.277626][T23520] fuse: Bad value for 'user_id' [ 1061.277645][T23520] fuse: Bad value for 'user_id' [ 1061.293691][T23454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.295691][T23454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.297506][T23454] bridge_slave_0: entered allmulticast mode [ 1061.310852][T23454] bridge_slave_0: entered promiscuous mode [ 1061.323732][T23454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.327201][T23454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.395397][T23454] bridge_slave_1: entered allmulticast mode [ 1061.420705][T23454] bridge_slave_1: entered promiscuous mode [ 1061.664795][T23528] bridge_slave_0: left allmulticast mode [ 1061.664816][T23528] bridge_slave_0: left promiscuous mode [ 1061.665023][T23528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.814619][T23528] bridge_slave_1: left allmulticast mode [ 1061.814640][T23528] bridge_slave_1: left promiscuous mode [ 1061.814781][T23528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.993561][T23528] bond0: (slave bond_slave_0): Releasing backup interface [ 1062.054715][T23528] bond0: (slave bond_slave_1): Releasing backup interface [ 1062.062764][ T60] Bluetooth: hci2: command tx timeout [ 1062.137253][T23528] team0: Port device team_slave_0 removed [ 1062.178680][T23528] team0: Port device team_slave_1 removed [ 1062.179266][T23528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.179282][T23528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.214602][T23528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.214619][T23528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.236317][T23528] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1062.248380][T23454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.379409][T23454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.593598][T23454] team0: Port device team_slave_0 added [ 1062.602453][T23454] team0: Port device team_slave_1 added [ 1062.858761][T23454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.858775][T23454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.858795][T23454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.915349][T23454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.915365][T23454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.915393][T23454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.184309][T23454] hsr_slave_0: entered promiscuous mode [ 1063.186434][T23454] hsr_slave_1: entered promiscuous mode [ 1063.189625][T23454] debugfs: 'hsr0' already exists in 'hsr' [ 1063.189649][T23454] Cannot create hsr debugfs directory [ 1063.818217][ T12] veth3: left allmulticast mode [ 1063.818240][ T12] veth3: left promiscuous mode [ 1063.818410][ T12] bridge1: port 1(veth3) entered disabled state [ 1064.142678][ T60] Bluetooth: hci2: command tx timeout [ 1064.159011][T23547] fuse: Bad value for 'user_id' [ 1064.159030][T23547] fuse: Bad value for 'user_id' [ 1064.640076][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1064.697667][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1064.699404][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1064.701086][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1064.709239][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1065.568771][T23568] netlink: zone id is out of range [ 1065.568786][T23568] netlink: set zone limit has 4 unknown bytes [ 1065.851755][T23575] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6368'. [ 1066.123415][ T12] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 1066.181002][ T12] veth1_vlan: left allmulticast mode [ 1066.258038][ T60] Bluetooth: hci2: command tx timeout [ 1066.290811][ T12] bond0 (unregistering): Released all slaves [ 1066.803112][ T12] tipc: Left network mode [ 1066.942507][ T60] Bluetooth: hci5: command tx timeout [ 1068.348439][ T5260] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1069.042607][ T60] Bluetooth: hci5: command tx timeout [ 1069.573714][ T12] hsr_slave_0: left promiscuous mode [ 1069.612664][ T12] hsr_slave_1: left promiscuous mode [ 1069.725841][ T12] veth1_macvtap: left promiscuous mode [ 1069.725945][ T12] veth0_macvtap: left promiscuous mode [ 1069.726156][ T12] veth1_vlan: left promiscuous mode [ 1069.726513][ T12] veth0_vlan: left promiscuous mode [ 1071.088799][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1071.102359][ T60] Bluetooth: hci5: command tx timeout [ 1073.182243][ T60] Bluetooth: hci5: command tx timeout [ 1073.684841][T23718] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 1074.352757][T23551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.353532][T23551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.353844][T23551] bridge_slave_0: entered allmulticast mode [ 1074.359922][T23551] bridge_slave_0: entered promiscuous mode [ 1074.686227][T23551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.686540][T23551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.686833][T23551] bridge_slave_1: entered allmulticast mode [ 1074.690358][T23551] bridge_slave_1: entered promiscuous mode [ 1074.814138][T23551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.821279][T23551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1074.904913][T23551] team0: Port device team_slave_0 added [ 1074.924274][T23551] team0: Port device team_slave_1 added [ 1074.979012][T23551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.979028][T23551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.979056][T23551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.123251][T23551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.123268][T23551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.123295][T23551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.534322][T23551] hsr_slave_0: entered promiscuous mode [ 1075.536731][T23551] hsr_slave_1: entered promiscuous mode [ 1075.538539][T23551] debugfs: 'hsr0' already exists in 'hsr' [ 1075.538563][T23551] Cannot create hsr debugfs directory [ 1075.538787][T23454] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1075.604799][T23454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1075.619131][T23454] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1075.672005][T22935] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1075.702914][T23454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1075.729223][T23454] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1075.760156][T23454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1075.823366][T22935] usb 5-1: Using ep0 maxpacket: 32 [ 1075.825759][T22935] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1075.825784][T22935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.853892][T22935] usb 5-1: config 0 descriptor?? [ 1075.870819][T22935] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1076.033973][T23454] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1076.076907][T23454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1076.185495][T23775] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6419'. [ 1076.276619][T22935] gspca_nw80x: reg_r err -32 [ 1076.276712][T22935] nw80x 5-1:0.0: probe with driver nw80x failed with error -32 [ 1076.322889][T22935] usb 5-1: USB disconnect, device number 23 [ 1076.664832][T23454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.905989][T23454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.526386][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.526801][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.007000][T18180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.007249][T18180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.553972][T23551] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1078.630019][T23551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1078.660379][T23551] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1078.693014][T23551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1078.694492][T23551] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1078.777880][T23835] overlayfs: missing 'lowerdir' [ 1078.800706][T23551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1078.803997][T23551] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1078.837014][T23551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1079.074725][T23851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6442'. [ 1079.483943][T23551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.630956][T23551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.654698][T22524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.656482][T22524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.739381][T20362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.739489][T20362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.873385][T23454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.756548][T23888] qrtr: Invalid version 16 [ 1081.159412][T23454] veth0_vlan: entered promiscuous mode [ 1081.221420][T23454] veth1_vlan: entered promiscuous mode [ 1081.388252][T23454] veth0_macvtap: entered promiscuous mode [ 1081.441461][T23551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.449704][T23454] veth1_macvtap: entered promiscuous mode [ 1081.566021][T23454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.599125][T23454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.651279][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.675985][T22524] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.680165][T22524] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.704743][T22524] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.116583][T23915] loop5: detected capacity change from 0 to 1024 [ 1082.117783][T23915] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1082.128183][T23915] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1082.198993][T23915] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.6458: lblock 2 mapped to illegal pblock 2 (length 1) [ 1082.199034][T23915] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1082.199370][T23915] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1082.199435][T23915] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.6458: lblock 0 mapped to illegal pblock 48 (length 1) [ 1082.199465][T23915] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1082.200150][T23915] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1082.200170][T23915] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.6458: Failed to acquire dquot type 0 [ 1082.200205][T23915] loop5: lost filesystem error report for type 5 error -117 [ 1082.201534][ C1] EXT4-fs (loop5): error count since last fsck: 3 [ 1082.201553][ C1] EXT4-fs (loop5): initial error at time 1783520211: ext4_map_blocks:791: inode 3: block 2 [ 1082.201587][ C1] EXT4-fs (loop5): last error at time 1783520211: ext4_acquire_dquot:7041 [ 1082.213401][T23915] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1082.213435][T23915] loop5: lost filesystem error report for type 5 error -117 [ 1082.220778][T23915] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.6458: mark_inode_dirty error [ 1082.220809][T23915] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1082.244322][T23915] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1082.244455][T23915] EXT4-fs (loop5): 1 orphan inode deleted [ 1082.247037][T23915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.411905][ T57] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1082.421055][ T57] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1082.421100][ T57] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 1083.392910][T22700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.396872][T22700] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1083.396897][T22700] loop5: lost filesystem error report for type 5 error -117 [ 1083.477615][T22700] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1083.477635][T22700] loop5: lost filesystem error report for type 5 error -117 [ 1083.487019][T22700] EXT4-fs error (device loop5): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 1083.487049][T22700] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1083.565630][T22700] Flush: task=syz-executor[22700] dev=loop5 state=2 [ 1083.653472][T22700] Teardown: task=syz-executor[22700] dev=loop5 state=2 [ 1083.684217][T20362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.684237][T20362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.128445][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.128465][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.274613][T23551] veth0_vlan: entered promiscuous mode [ 1084.310380][T23551] veth1_vlan: entered promiscuous mode [ 1084.527671][T23551] veth0_macvtap: entered promiscuous mode [ 1084.654291][T23551] veth1_macvtap: entered promiscuous mode [ 1084.797012][T23551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.829646][T23551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.890032][T18180] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.890252][T18180] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.890290][T18180] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.890323][T18180] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.083911][T22524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.083931][T22524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.618972][T22524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.618991][T22524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.895665][T23985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1087.391350][T14540] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1087.521616][T14540] usb 5-1: device descriptor read/64, error -71 [ 1087.766130][T14540] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1087.971363][T23426] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1088.028751][T14540] usb 5-1: device descriptor read/64, error -71 [ 1088.852495][T14540] usb usb5-port1: attempt power cycle [ 1089.137501][T24015] syzkaller0: entered promiscuous mode [ 1089.137527][T24015] syzkaller0: entered allmulticast mode [ 1089.342109][T14540] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1089.362127][T14540] usb 5-1: device descriptor read/8, error -71 [ 1089.471244][T23426] usb 10-1: Using ep0 maxpacket: 16 [ 1090.129955][T23426] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 1090.129984][T23426] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.130003][T23426] usb 10-1: config 0 has no interface number 0 [ 1090.132933][T23426] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1090.132963][T23426] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.132984][T23426] usb 10-1: Product: syz [ 1090.132998][T23426] usb 10-1: Manufacturer: syz [ 1090.133013][T23426] usb 10-1: SerialNumber: syz [ 1090.195890][T23426] usb 10-1: config 0 descriptor?? [ 1090.241215][T14540] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1090.247387][T23426] uvcvideo 10-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1090.247463][T23426] uvcvideo 10-1:0.105: No valid video chain found. [ 1090.271789][T14540] usb 5-1: device descriptor read/8, error -71 [ 1090.348148][ T37] audit: type=1804 audit(1783520219.305:146): pid=24024 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.5.6497" name="bus" dev="ramfs" ino=81761 res=1 errno=0 [ 1090.350780][ T37] audit: type=1804 audit(1783520219.305:147): pid=24024 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=ToMToU comm="syz.5.6497" name="bus" dev="ramfs" ino=81761 res=1 errno=0 [ 1090.389378][T14540] usb usb5-port1: unable to enumerate USB device [ 1090.419809][T24017] tipc: Started in network mode [ 1090.419838][T24017] tipc: Node identity cec34157591b, cluster identity 4711 [ 1090.464577][ T1260] usb 10-1: USB disconnect, device number 2 [ 1090.496044][T24017] tipc: Enabled bearer , priority 0 [ 1090.531414][T24014] tipc: Resetting bearer [ 1090.795101][T24014] tipc: Disabling bearer [ 1091.431609][ T1260] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1091.591130][ T1260] usb 10-1: Using ep0 maxpacket: 32 [ 1091.593560][ T1260] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.593598][ T1260] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.593636][ T1260] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1091.593659][ T1260] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.604198][ T1260] usb 10-1: config 0 descriptor?? [ 1091.618331][ T1260] hub 10-1:0.0: USB hub found [ 1091.801607][T24061] fuse: Bad value for 'group_id' [ 1091.801628][T24061] fuse: Bad value for 'group_id' [ 1091.848154][ T1260] hub 10-1:0.0: 1 port detected [ 1092.014156][T24063] syzkaller0: entered promiscuous mode [ 1092.014181][T24063] syzkaller0: entered allmulticast mode [ 1092.179066][T24063] tipc: Started in network mode [ 1092.179094][T24063] tipc: Node identity 5223a882e1ac, cluster identity 4711 [ 1092.185428][T24063] tipc: Enabled bearer , priority 0 [ 1092.211634][T24062] tipc: Resetting bearer [ 1092.502223][ T1260] hub 10-1:0.0: activate --> -90 [ 1092.584863][T24062] tipc: Disabling bearer [ 1092.681533][T24079] overlayfs: missing 'lowerdir' [ 1093.001730][T14809] usb 10-1: USB disconnect, device number 3 [ 1093.761700][T24104] overlayfs: missing 'lowerdir' [ 1094.399287][T24129] fuse: Bad value for 'user_id' [ 1094.399308][T24129] fuse: Bad value for 'user_id' [ 1094.560991][T14809] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1094.741192][T14809] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1094.760400][T14809] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 1094.760427][T14809] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.760456][T14809] usb 5-1: config 63 has no interface number 0 [ 1094.760490][T14809] usb 5-1: config 63 interface 66 has no altsetting 0 [ 1094.771578][T14809] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1094.771606][T14809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.771625][T14809] usb 5-1: Product: syz [ 1094.771638][T14809] usb 5-1: Manufacturer: syz [ 1094.771652][T14809] usb 5-1: SerialNumber: syz [ 1095.256391][T14809] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1095.256504][T14809] uvcvideo 5-1:63.66: No valid video chain found. [ 1096.209180][T14809] usb 5-1: USB disconnect, device number 28 [ 1097.607676][T24173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.881372][ T822] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1098.033189][ T822] usb 7-1: Using ep0 maxpacket: 16 [ 1098.039295][ T822] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.039318][ T822] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1098.040395][ T822] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1098.040421][ T822] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1098.040439][ T822] usb 7-1: Manufacturer: syz [ 1098.058421][ T822] usb 7-1: config 0 descriptor?? [ 1098.061005][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 1098.316343][T24196] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1098.678338][T24211] ublk_ctrl_add_dev: invalid recovery flags 10 [ 1100.395016][ T5734] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1100.395094][ T5734] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1100.401695][ T5734] usb 6-1: USB disconnect, device number 22 [ 1100.450279][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1100.450353][ T9] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1100.492941][ T9] usb 9-1: USB disconnect, device number 21 [ 1100.720604][ T5734] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1100.760131][T14809] usb 7-1: USB disconnect, device number 35 [ 1100.851501][ T5734] usb 6-1: device descriptor read/64, error -71 [ 1101.100576][ T5734] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1101.240616][ T5734] usb 6-1: device descriptor read/64, error -71 [ 1101.650553][ T5734] usb usb6-port1: attempt power cycle [ 1102.456423][T14809] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1102.623425][T14809] usb 7-1: Using ep0 maxpacket: 32 [ 1102.627474][T14809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.627506][T14809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.627543][T14809] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1102.627566][T14809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.632255][T14809] usb 7-1: config 0 descriptor?? [ 1102.636519][T14809] hub 7-1:0.0: USB hub found [ 1102.847586][T14809] hub 7-1:0.0: 1 port detected [ 1102.890683][T20362] bond0 (unregistering): Released all slaves [ 1103.584923][ T5734] hub 7-1:0.0: activate --> -90 [ 1103.711750][T20362] tipc: Left network mode [ 1103.783207][ T5734] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 1103.825959][T14419] usb 7-1: USB disconnect, device number 36 [ 1104.049811][T18180] usb 7-1: Failed to suspend device, error -19 [ 1104.320123][T24337] Bluetooth: MGMT ver 1.23 [ 1109.652356][T20362] hsr_slave_0: left promiscuous mode [ 1109.715672][T20362] hsr_slave_1: left promiscuous mode [ 1110.039570][T20362] veth1_macvtap: left promiscuous mode [ 1110.039689][T20362] veth0_macvtap: left promiscuous mode [ 1110.044224][T20362] veth1_vlan: left promiscuous mode [ 1110.044431][T20362] veth0_vlan: left promiscuous mode [ 1114.536779][ T5734] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1114.749823][ T5734] usb 6-1: Using ep0 maxpacket: 32 [ 1114.752301][ T5734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.752333][ T5734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.752370][ T5734] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1114.752394][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.761550][ T5734] usb 6-1: config 0 descriptor?? [ 1114.767423][ T5734] hub 6-1:0.0: USB hub found [ 1115.915384][ T5734] hub 6-1:0.0: 1 port detected [ 1116.033200][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.033293][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.654597][ T5734] hub 6-1:0.0: activate --> -90 [ 1117.899469][ T1260] usb 6-1: USB disconnect, device number 26 [ 1120.431541][T20362] IPVS: stop unused estimator thread 0... [ 1122.136211][T24544] fuse: Unknown parameter 'group_id00000000000000000000' [ 1123.194019][T20362] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.543843][T24578] fuse: Bad value for 'user_id' [ 1123.543862][T24578] fuse: Bad value for 'user_id' [ 1125.276614][T20362] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.380354][T24598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6723'. [ 1125.540770][ T822] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1125.716878][T24611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1125.729180][ T822] usb 6-1: Using ep0 maxpacket: 32 [ 1125.736338][ T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.736369][ T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.736408][ T822] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1125.736430][ T822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.810011][ T822] usb 6-1: config 0 descriptor?? [ 1125.820666][ T822] hub 6-1:0.0: USB hub found [ 1125.997992][T24613] fuse: Bad value for 'user_id' [ 1125.998010][T24613] fuse: Bad value for 'user_id' [ 1126.021071][T20362] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.046627][ T822] hub 6-1:0.0: 1 port detected [ 1126.866104][T20362] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.931215][ T5615] usb 6-1: USB disconnect, device number 27 [ 1128.483385][T24641] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6738'. [ 1128.723653][T24646] fuse: Bad value for 'user_id' [ 1128.723674][T24646] fuse: Bad value for 'user_id' [ 1129.132357][T19659] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1129.281836][T19659] usb 7-1: Using ep0 maxpacket: 16 [ 1129.302335][T19659] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1129.302364][T19659] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.302384][T19659] usb 7-1: Product: syz [ 1129.302398][T19659] usb 7-1: Manufacturer: syz [ 1129.302411][T19659] usb 7-1: SerialNumber: syz [ 1129.453412][T19659] usb 7-1: config 0 descriptor?? [ 1129.921007][T19659] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1130.010606][T19659] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1130.011474][T19659] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1130.011525][T19659] usb 7-1: media controller created [ 1130.048285][T24677] fuse: Bad value for 'fd' [ 1130.056591][T19659] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1130.089165][ T822] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1130.278573][ T822] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1130.278603][ T822] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.352775][ T822] usb 10-1: config 0 descriptor?? [ 1130.451952][ T822] cp210x 10-1:0.0: cp210x converter detected [ 1130.495313][T19659] zl10353_read_register: readreg error (reg=127, ret==0) [ 1130.495377][T19659] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1130.495391][T19659] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1130.775276][T19659] usb 7-1: USB disconnect, device number 37 [ 1131.046473][T20362] bridge_slave_1: left allmulticast mode [ 1131.046507][T20362] bridge_slave_1: left promiscuous mode [ 1131.046847][T20362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.366479][T20362] bridge_slave_0: left allmulticast mode [ 1131.366512][T20362] bridge_slave_0: left promiscuous mode [ 1131.367883][T19659] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1131.368276][ T822] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1131.370399][T20362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.398853][ T822] usb 10-1: USB disconnect, device number 4 [ 1131.742355][T24722] fuse: Bad value for 'fd' [ 1131.807921][ T822] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1132.128850][T19659] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 1132.325858][ T822] cp210x 10-1:0.0: device disconnected [ 1132.433487][T19659] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1132.433518][T19659] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.433536][T19659] usb 7-1: Product: syz [ 1132.433549][T19659] usb 7-1: Manufacturer: syz [ 1132.433562][T19659] usb 7-1: SerialNumber: syz [ 1132.472871][T19659] usb 7-1: config 0 descriptor?? [ 1132.693478][T19659] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1133.060282][T24753] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1133.060315][T24753] overlayfs: missing 'lowerdir' [ 1133.895833][T20362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.972885][T20362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.017431][T20362] bond0 (unregistering): Released all slaves [ 1134.359696][T24784] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 1134.365768][ T5260] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1134.791780][T19659] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1134.844613][T20362] tipc: Left network mode [ 1134.849610][T19659] usb 7-1: USB disconnect, device number 38 [ 1135.353487][T20362] IPVS: stopping master sync thread 22771 ... [ 1135.718681][ T822] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1135.869217][ T822] usb 10-1: Using ep0 maxpacket: 32 [ 1135.872228][ T822] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.872256][ T822] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.872292][ T822] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1135.872316][ T822] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.882013][ T822] usb 10-1: config 0 descriptor?? [ 1135.905283][ T822] hub 10-1:0.0: USB hub found [ 1136.109237][ T822] hub 10-1:0.0: 1 port detected [ 1136.609400][ T5714] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1136.832831][ T5714] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.832862][ T5714] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.833424][ T5714] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1136.833448][ T5714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.896026][ T5714] usb 7-1: config 0 descriptor?? [ 1136.907352][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1137.133283][ T5714] usbhid 7-1:0.0: can't add hid device: -71 [ 1137.133704][ T5714] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1137.177898][ T5714] usb 7-1: USB disconnect, device number 39 [ 1137.276330][ T822] hub 10-1:0.0: hub_hub_status failed (err = -32) [ 1137.276347][ T822] hub 10-1:0.0: config failed, can't get hub status (err -32) [ 1137.286479][ T822] usbhid 10-1:0.0: can't add hid device: -32 [ 1137.286599][ T822] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 1137.399018][ T822] usb 10-1: USB disconnect, device number 5 [ 1137.740119][ T5714] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1137.791802][T24852] syzkaller0: entered promiscuous mode [ 1137.791825][T24852] syzkaller0: entered allmulticast mode [ 1137.966642][ T5714] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1137.966675][ T5714] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.966709][ T5714] usb 7-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 1137.966732][ T5714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.017888][ T5714] usb 7-1: config 0 descriptor?? [ 1138.215634][T24861] tipc: Started in network mode [ 1138.215663][T24861] tipc: Node identity 029bf0e3d62b, cluster identity 4711 [ 1138.217307][T24861] tipc: Enabled bearer , priority 0 [ 1138.241542][ T5714] usbhid 7-1:0.0: can't add hid device: -71 [ 1138.241682][ T5714] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1138.262045][ T5714] usb 7-1: USB disconnect, device number 40 [ 1138.399080][T20362] hsr_slave_0: left promiscuous mode [ 1138.443331][T20362] hsr_slave_1: left promiscuous mode [ 1138.445906][T20362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.445932][T20362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.482533][T20362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.482558][T20362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.835605][T20362] veth1_macvtap: left promiscuous mode [ 1138.835697][T20362] veth0_macvtap: left promiscuous mode [ 1138.836010][T20362] veth1_vlan: left promiscuous mode [ 1138.836205][T20362] veth0_vlan: left promiscuous mode [ 1138.935849][T24893] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6819'. [ 1139.380631][T23426] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1139.593143][T23426] usb 10-1: Using ep0 maxpacket: 32 [ 1139.615840][T23426] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1139.615920][T23426] usb 10-1: config 0 has no interface number 0 [ 1139.635915][T23426] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1139.635949][T23426] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.635975][T23426] usb 10-1: Product: syz [ 1139.635988][T23426] usb 10-1: Manufacturer: syz [ 1139.636002][T23426] usb 10-1: SerialNumber: syz [ 1139.670461][T23426] usb 10-1: config 0 descriptor?? [ 1140.502842][T23426] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1140.502873][T23426] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1140.524582][T23426] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1140.524890][T23426] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1140.553588][T20362] team0 (unregistering): Port device team_slave_1 removed [ 1140.554703][T23426] usb 10-1: USB disconnect, device number 6 [ 1140.708946][T20362] team0 (unregistering): Port device team_slave_0 removed [ 1141.588692][T24851] tipc: Resetting bearer [ 1141.872311][T24851] tipc: Disabling bearer [ 1142.011804][ T5260] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1142.023839][T19659] tipc: Node number set to 3568365795 [ 1143.418156][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 1143.812176][T24999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1144.166094][ T5260] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1144.198163][T14809] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1144.348157][T14809] usb 5-1: Using ep0 maxpacket: 16 [ 1144.351339][T14809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.351394][T14809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1144.351421][T14809] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1144.351442][T14809] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.352504][T14809] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1144.352530][T14809] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1144.352548][T14809] usb 5-1: Manufacturer: syz [ 1144.357983][T14809] usb 5-1: config 0 descriptor?? [ 1144.444035][T25018] netlink: 'syz.6.6868': attribute type 5 has an invalid length. [ 1145.519521][T25050] fuse: Invalid rootmode [ 1146.193335][T25079] fuse: Bad value for 'rootmode' [ 1146.804364][ T5734] usb 5-1: USB disconnect, device number 29 [ 1146.859079][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1147.010155][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1147.015725][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1147.015753][ T9] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1147.015775][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1147.027043][ T9] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1147.027072][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.027092][ T9] usb 7-1: Product: syz [ 1147.027104][ T9] usb 7-1: Manufacturer: syz [ 1147.027118][ T9] usb 7-1: SerialNumber: syz [ 1147.057394][ T9] usb 7-1: config 0 descriptor?? [ 1147.132867][T25114] Invalid ELF header len 2 [ 1147.410418][T25119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6908'. [ 1147.472605][ T9] gs_usb 7-1:0.0: Configuring for 207 interfaces [ 1147.677036][ T9] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1147.677110][ T9] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -121 [ 1147.797397][T25131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1147.877771][ T5714] usb 7-1: USB disconnect, device number 41 [ 1148.060059][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1148.208809][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1148.213374][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.213427][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1148.213453][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1148.213469][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1148.213480][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1148.217175][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1148.217203][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1148.217223][ T9] usb 6-1: Manufacturer: syz [ 1148.235356][ T9] usb 6-1: config 0 descriptor?? [ 1148.937985][ T5714] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1149.068110][ T822] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1149.087918][ T5714] usb 5-1: Using ep0 maxpacket: 32 [ 1149.112886][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.112919][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.112958][ T5714] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1149.112981][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.157011][ T5714] usb 5-1: config 0 descriptor?? [ 1149.169736][ T5714] hub 5-1:0.0: USB hub found [ 1149.237882][ T822] usb 10-1: Using ep0 maxpacket: 8 [ 1149.240115][ T822] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 1149.240148][ T822] usb 10-1: config 0 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1149.240227][ T822] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1149.240326][ T822] usb 10-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 1149.240461][ T822] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.302396][ T822] usb 10-1: config 0 descriptor?? [ 1149.372317][ T5714] hub 5-1:0.0: 1 port detected [ 1149.806317][ T822] hid_parser_main: 5 callbacks suppressed [ 1149.806382][ T822] betop 0003:11C0:5506.0018: unknown main item tag 0x1 [ 1149.806411][ T822] betop 0003:11C0:5506.0018: unexpected long global item [ 1149.807210][ T822] betop 0003:11C0:5506.0018: parse failed [ 1149.807282][ T822] betop 0003:11C0:5506.0018: probe with driver betop failed with error -22 [ 1149.985955][ T822] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 1149.988270][T14809] usb 5-1: USB disconnect, device number 30 [ 1150.095823][ T5734] usb 10-1: USB disconnect, device number 7 [ 1151.100466][ T9] rc_core: IR keymap rc-hauppauge not found [ 1151.100486][ T9] Registered IR keymap rc-empty [ 1151.100634][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1151.122697][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1151.153539][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1151.167325][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input15 [ 1151.191665][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1151.214846][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1151.229557][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1151.251549][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1151.270872][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1151.290307][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1151.313993][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1151.331190][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1151.347878][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1151.367818][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1151.446914][ T9] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1151.446939][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1151.531169][ T9] usb 6-1: USB disconnect, device number 28 [ 1151.900130][ T5714] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1152.067844][ T5714] usb 7-1: Using ep0 maxpacket: 8 [ 1152.072346][ T5714] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1152.072408][ T5714] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1152.072430][ T5714] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1152.072453][ T5714] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1152.072475][ T5714] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1152.072515][ T5714] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1152.072537][ T5714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.313039][ T5714] usb 7-1: GET_CAPABILITIES returned 0 [ 1152.313087][ T5714] usbtmc 7-1:16.0: can't read capabilities [ 1152.565913][ T9] usb 7-1: USB disconnect, device number 42 [ 1152.627755][T14809] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1152.785626][T14809] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1152.785654][T14809] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.785672][T14809] usb 10-1: config 0 has no interface number 0 [ 1152.785714][T14809] usb 10-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1152.785740][T14809] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1152.815605][T14809] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1152.815634][T14809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.815654][T14809] usb 10-1: Product: syz [ 1152.815667][T14809] usb 10-1: Manufacturer: syz [ 1152.815681][T14809] usb 10-1: SerialNumber: syz [ 1152.834987][T14809] usb 10-1: config 0 descriptor?? [ 1152.855696][T14809] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -22 [ 1153.044040][T14809] usb 10-1: USB disconnect, device number 8 [ 1154.198480][ T5714] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1154.337612][ T5714] usb 5-1: device descriptor read/64, error -71 [ 1154.337718][T23426] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1154.489794][T23426] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.489826][T23426] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.489856][T23426] usb 10-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1154.489868][T23426] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.501211][T23426] usb 10-1: config 0 descriptor?? [ 1154.597807][ T5714] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1154.604258][T25274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6968'. [ 1154.729077][ T5714] usb 5-1: device descriptor read/64, error -71 [ 1154.838377][ T5714] usb usb5-port1: attempt power cycle [ 1154.927646][T14809] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1154.967584][T23426] usbhid 10-1:0.0: can't add hid device: -71 [ 1154.967716][T23426] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1154.984000][T23426] usb 10-1: USB disconnect, device number 9 [ 1155.084020][T14809] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1155.096164][T14809] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.096187][T14809] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1155.120766][T14809] usb 7-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1155.120794][T14809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.120812][T14809] usb 7-1: Product: syz [ 1155.120826][T14809] usb 7-1: Manufacturer: syz [ 1155.120840][T14809] usb 7-1: SerialNumber: syz [ 1155.233850][ T5714] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1155.261956][ T5714] usb 5-1: device descriptor read/8, error -71 [ 1155.498978][ T5714] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1155.518048][ T5714] usb 5-1: device descriptor read/8, error -71 [ 1155.630933][ T5714] usb usb5-port1: unable to enumerate USB device [ 1156.207750][T25323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6979'. [ 1156.680926][T23426] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1156.848408][T23426] usb 10-1: no configurations [ 1156.848427][T23426] usb 10-1: can't read configurations, error -22 [ 1156.977680][T23426] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1157.151358][T23426] usb 10-1: no configurations [ 1157.151378][T23426] usb 10-1: can't read configurations, error -22 [ 1157.151866][T23426] usb usb10-port1: attempt power cycle [ 1157.189108][T22374] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1157.340811][T22374] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1157.343145][T22374] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.343168][T22374] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1157.343214][T22374] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1157.343251][T22374] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1157.343290][T22374] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1157.343315][T22374] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1157.352335][T22374] usb 6-1: string descriptor 0 read error: -22 [ 1157.352464][T22374] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1157.352486][T22374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.487517][T23426] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1157.523111][T23426] usb 10-1: no configurations [ 1157.523130][T23426] usb 10-1: can't read configurations, error -22 [ 1157.689670][T23426] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1157.716524][T23426] usb 10-1: no configurations [ 1157.716536][T23426] usb 10-1: can't read configurations, error -22 [ 1157.717019][T23426] usb usb10-port1: unable to enumerate USB device [ 1157.835671][T22374] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1157.835689][T22374] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1157.835700][T22374] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1157.847835][T23426] usb 7-1: USB disconnect, device number 43 [ 1158.133605][T25394] tipc: Enabling of bearer rejected, failed to enable media [ 1158.578623][T22374] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1158.612639][T22374] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1158.661605][T22374] usb 6-1: USB disconnect, device number 29 [ 1159.217752][T22374] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1159.261986][T25424] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1159.262017][T25424] overlayfs: missing 'lowerdir' [ 1159.347311][T22374] usb 6-1: device descriptor read/64, error -71 [ 1159.587490][T22374] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1159.719108][T22374] usb 6-1: device descriptor read/64, error -71 [ 1159.738943][ T1260] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1159.827812][T22374] usb usb6-port1: attempt power cycle [ 1159.889864][ T1260] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1159.891371][ T1260] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.891396][ T1260] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1159.891443][ T1260] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1159.891479][ T1260] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1159.891519][ T1260] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1159.891546][ T1260] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1159.973427][ T1260] usb 5-1: string descriptor 0 read error: -22 [ 1159.973565][ T1260] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1159.973588][ T1260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.268529][T22374] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1160.288113][T22374] usb 6-1: device descriptor read/8, error -71 [ 1160.440665][ T1260] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1160.440694][ T1260] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1160.440711][ T1260] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1160.534826][ T1260] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1160.537408][T22374] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1160.557899][T22374] usb 6-1: device descriptor read/8, error -71 [ 1160.575409][ T1260] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1160.612107][ T1260] usb 5-1: USB disconnect, device number 35 [ 1160.668495][T22374] usb usb6-port1: unable to enumerate USB device [ 1160.877316][T16196] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1161.029226][T16196] usb 7-1: no configurations [ 1161.029249][T16196] usb 7-1: can't read configurations, error -22 [ 1161.160301][T16196] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1161.163391][T25479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7024'. [ 1161.318002][T16196] usb 7-1: no configurations [ 1161.318099][T16196] usb 7-1: can't read configurations, error -22 [ 1161.319283][T16196] usb usb7-port1: attempt power cycle [ 1161.657216][T16196] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1161.678277][T16196] usb 7-1: no configurations [ 1161.678295][T16196] usb 7-1: can't read configurations, error -22 [ 1161.807173][T16196] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1161.841024][T16196] usb 7-1: no configurations [ 1161.841042][T16196] usb 7-1: can't read configurations, error -22 [ 1161.841396][T16196] usb usb7-port1: unable to enumerate USB device [ 1161.936222][T25496] netlink: 'syz.5.7028': attribute type 25 has an invalid length. [ 1163.187424][T16196] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1163.361416][T16196] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1163.362558][T16196] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.362581][T16196] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1163.362628][T16196] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1163.362673][T16196] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1163.362712][T16196] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1163.362737][T16196] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1163.367984][T16196] usb 6-1: string descriptor 0 read error: -22 [ 1163.368112][T16196] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1163.368136][T16196] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.800700][T16196] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1163.800729][T16196] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1163.800747][T16196] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1163.827058][ T5734] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1164.015379][T16196] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1164.031328][ T5734] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1164.032503][ T5734] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.032525][ T5734] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1164.034754][ T5734] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1164.034781][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.034800][ T5734] usb 5-1: Product: syz [ 1164.034814][ T5734] usb 5-1: Manufacturer: syz [ 1164.034828][ T5734] usb 5-1: SerialNumber: syz [ 1164.050821][T16196] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1164.063159][T16196] usb 6-1: USB disconnect, device number 34 [ 1166.592983][ T1260] usb 5-1: USB disconnect, device number 36 [ 1177.194510][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.194599][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.375985][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 1184.599067][T25542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7045'. [ 1185.823378][ T822] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1186.166844][ T822] usb 10-1: Using ep0 maxpacket: 16 [ 1186.178452][ T822] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.178477][ T822] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1186.218631][ T822] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1186.218661][ T822] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.218680][ T822] usb 10-1: Product: syz [ 1186.218694][ T822] usb 10-1: Manufacturer: syz [ 1186.218708][ T822] usb 10-1: SerialNumber: syz [ 1186.304722][ T822] usb 10-1: 0:2 : does not exist [ 1186.478384][ T822] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1186.656064][ T822] usb 10-1: USB disconnect, device number 14 [ 1186.818507][T25577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7057'. [ 1186.900160][T25540] udevd[25540]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1187.490424][T25606] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7069'. [ 1188.284151][ T5614] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 1188.667552][T25642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7084'. [ 1188.895806][T22374] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1189.051825][T22374] usb 6-1: Using ep0 maxpacket: 32 [ 1189.058824][T22374] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1189.058849][T22374] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.058867][T22374] usb 6-1: config 0 has no interface number 0 [ 1189.058909][T22374] usb 6-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1189.077754][T22374] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1189.077780][T22374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.077799][T22374] usb 6-1: Product: syz [ 1189.077813][T22374] usb 6-1: Manufacturer: syz [ 1189.077827][T22374] usb 6-1: SerialNumber: syz [ 1189.107189][T22374] usb 6-1: config 0 descriptor?? [ 1189.129584][T22374] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1189.135426][T22374] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 1189.461070][T25657] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7091'. [ 1189.497158][ T5614] Bluetooth: hci5: command 0x0406 tx timeout [ 1189.950596][T25674] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1191.024555][T25718] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1191.649199][T22374] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1191.703908][ T5714] usb 6-1: USB disconnect, device number 35 [ 1191.805704][T22374] usb 7-1: Using ep0 maxpacket: 32 [ 1191.808310][T22374] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1191.808335][T22374] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1191.808358][T22374] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1191.820988][T22374] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1191.821016][T22374] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.821035][T22374] usb 7-1: Product: syz [ 1191.821049][T22374] usb 7-1: Manufacturer: syz [ 1191.821063][T22374] usb 7-1: SerialNumber: syz [ 1191.848406][T22374] usb 7-1: config 0 descriptor?? [ 1191.855756][T25746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7121'. [ 1192.283128][T22374] gs_usb 7-1:0.0: Configuring for 207 interfaces [ 1192.483639][T22374] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1192.483713][T22374] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -121 [ 1192.919830][ T5714] usb 7-1: USB disconnect, device number 48 [ 1194.027756][ T5714] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1194.176153][ T5714] usb 6-1: no configurations [ 1194.176170][ T5714] usb 6-1: can't read configurations, error -22 [ 1194.309438][ T5714] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1194.467429][ T5714] usb 6-1: no configurations [ 1194.467449][ T5714] usb 6-1: can't read configurations, error -22 [ 1194.490245][ T5714] usb usb6-port1: attempt power cycle [ 1194.845543][ T5714] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1194.870693][ T5714] usb 6-1: no configurations [ 1194.870711][ T5714] usb 6-1: can't read configurations, error -22 [ 1194.995310][ T5714] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1195.019347][ T5714] usb 6-1: no configurations [ 1195.019366][ T5714] usb 6-1: can't read configurations, error -22 [ 1195.021463][ T5714] usb usb6-port1: unable to enumerate USB device [ 1197.365252][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1197.527476][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.527508][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.527530][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1197.527563][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1197.527576][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.534534][ T9] usb 6-1: config 0 descriptor?? [ 1197.635375][ T5714] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1197.788363][ T5714] usb 10-1: no configurations [ 1197.788383][ T5714] usb 10-1: can't read configurations, error -22 [ 1197.935669][ T5714] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1198.085966][ T5714] usb 10-1: no configurations [ 1198.085984][ T5714] usb 10-1: can't read configurations, error -22 [ 1198.112075][ T5714] usb usb10-port1: attempt power cycle [ 1198.121890][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1198.122003][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1198.134108][ T9] usb 6-1: USB disconnect, device number 40 [ 1198.455111][ T5714] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1198.479869][ T5714] usb 10-1: no configurations [ 1198.479889][ T5714] usb 10-1: can't read configurations, error -22 [ 1198.606438][ T5714] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1198.628452][ T5714] usb 10-1: no configurations [ 1198.628471][ T5714] usb 10-1: can't read configurations, error -22 [ 1198.628840][ T5714] usb usb10-port1: unable to enumerate USB device [ 1201.011469][ T5714] usb 7-1: new low-speed USB device number 49 using dummy_hcd [ 1201.159807][ T5714] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1201.159840][ T5714] usb 7-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1201.159865][ T5714] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1201.159897][ T5714] usb 7-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1201.159920][ T5714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.220520][ T5714] usb 7-1: config 0 descriptor?? [ 1201.221530][T26005] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1201.321940][T26026] netlink: 'syz.5.7237': attribute type 29 has an invalid length. [ 1201.323186][T26026] netlink: 'syz.5.7237': attribute type 29 has an invalid length. [ 1201.678378][ T5714] pantherlord 0003:0F30:0111.0019: unknown main item tag 0x7 [ 1201.678415][ T5714] pantherlord 0003:0F30:0111.0019: unknown global tag 0xe [ 1201.678431][ T5714] pantherlord 0003:0F30:0111.0019: item 0 0 1 14 parsing failed [ 1201.679171][ T5714] pantherlord 0003:0F30:0111.0019: parse failed [ 1201.679245][ T5714] pantherlord 0003:0F30:0111.0019: probe with driver pantherlord failed with error -22 [ 1201.852967][ T60] Bluetooth: hci2: unexpected event for opcode 0x080b [ 1202.676578][ T9] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1202.722907][T16196] usb 7-1: USB disconnect, device number 49 [ 1202.836276][ T5714] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1202.859932][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.859957][ T9] usb 6-1: config 0 has no interfaces? [ 1202.862043][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1202.862069][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.862084][ T9] usb 6-1: Product: syz [ 1202.862092][ T9] usb 6-1: Manufacturer: syz [ 1202.862100][ T9] usb 6-1: SerialNumber: syz [ 1202.913351][ T9] usb 6-1: config 0 descriptor?? [ 1202.988606][ T5714] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1202.988635][ T5714] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.999957][ T5714] usb 10-1: config 0 descriptor?? [ 1203.016800][ T5714] cp210x 10-1:0.0: cp210x converter detected [ 1203.409594][ T5714] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1203.410099][ T5714] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1203.410147][ T5714] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 1203.428742][ T5714] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1203.432208][ T5714] usb 10-1: USB disconnect, device number 19 [ 1203.443799][ T5714] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1203.444484][ T5714] cp210x 10-1:0.0: device disconnected [ 1207.175582][ T5734] usb 6-1: USB disconnect, device number 41 [ 1208.464936][T26125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7275'. [ 1211.082836][T26147] netlink: 428 bytes leftover after parsing attributes in process `syz.7.7283'. [ 1212.735946][T26169] syzkaller0: entered promiscuous mode [ 1212.735971][T26169] syzkaller0: entered allmulticast mode [ 1223.454122][T14540] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1223.617216][T14540] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 1223.617243][T14540] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.617264][T14540] usb 10-1: config 0 has no interface number 0 [ 1223.617306][T14540] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1223.617341][T14540] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1223.617362][T14540] usb 10-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1223.617389][T14540] usb 10-1: config 0 interface 52 has no altsetting 0 [ 1223.618631][T14540] usb 10-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1223.618657][T14540] usb 10-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1223.618677][T14540] usb 10-1: Manufacturer: syz [ 1223.716758][T14540] usb 10-1: config 0 descriptor?? [ 1223.722124][T14540] hub 10-1:0.52: bad descriptor, ignoring hub [ 1223.722160][T14540] hub 10-1:0.52: probe with driver hub failed with error -5 [ 1224.050048][T14540] synaptics_usb 10-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1224.050321][T14540] synaptics_usb 10-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1224.355386][T14540] usb 10-1: USB disconnect, device number 20 [ 1224.783673][T14540] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1224.943743][T14540] usb 7-1: Using ep0 maxpacket: 16 [ 1224.947859][T14540] usb 7-1: config 6 has an invalid interface number: 170 but max is 0 [ 1224.947884][T14540] usb 7-1: config 6 has no interface number 0 [ 1224.947915][T14540] usb 7-1: config 6 interface 170 has no altsetting 0 [ 1224.953269][T14540] usb 7-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=9f.85 [ 1224.953295][T14540] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.953316][T14540] usb 7-1: Product: syz [ 1224.953331][T14540] usb 7-1: Manufacturer: syz [ 1224.953346][T14540] usb 7-1: SerialNumber: syz [ 1225.263861][T14540] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 1225.608026][T14540] usb 7-1: USB disconnect, device number 50 [ 1227.806887][T26357] netlink: 'syz.7.7357': attribute type 29 has an invalid length. [ 1227.810923][T26357] netlink: 'syz.7.7357': attribute type 29 has an invalid length. [ 1227.835328][T26359] overlayfs: missing 'lowerdir' [ 1227.994872][T26363] netlink: 428 bytes leftover after parsing attributes in process `syz.4.7360'. [ 1227.994987][T26363] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7360'. [ 1228.396166][ T5714] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 1228.565724][ T5714] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1228.565760][ T5714] usb 6-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1228.565787][ T5714] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1228.565819][ T5714] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1228.565841][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.570974][ T5714] usb 6-1: config 0 descriptor?? [ 1228.572052][T26368] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1229.602886][T26398] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7373'. [ 1229.913406][ T60] Bluetooth: hci4: unexpected event for opcode 0x080b [ 1230.026038][ T5714] pantherlord 0003:0F30:0111.001A: unknown main item tag 0x7 [ 1230.026078][ T5714] pantherlord 0003:0F30:0111.001A: unknown global tag 0xe [ 1230.026094][ T5714] pantherlord 0003:0F30:0111.001A: item 0 0 1 14 parsing failed [ 1230.026784][ T5714] pantherlord 0003:0F30:0111.001A: parse failed [ 1230.026855][ T5714] pantherlord 0003:0F30:0111.001A: probe with driver pantherlord failed with error -22 [ 1230.305386][T22374] usb 6-1: USB disconnect, device number 42 [ 1230.369353][T26405] netlink: 428 bytes leftover after parsing attributes in process `syz.4.7375'. [ 1230.369542][T26405] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7375'. [ 1232.389375][T26440] netlink: 428 bytes leftover after parsing attributes in process `syz.6.7386'. [ 1232.583817][T26440] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7386'. [ 1232.991187][T26446] tipc: Enabled bearer , priority 10 [ 1233.967910][T16196] tipc: Node number set to 2547532119 [ 1235.420587][T26478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1237.251514][T26530] binder: BINDER_SET_CONTEXT_MGR already set [ 1237.251529][T26530] binder: 26529:26530 ioctl 4018620d 200000004a80 returned -16 [ 1237.608556][T26541] No control pipe specified [ 1238.632223][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.632504][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.129042][T26560] binder: 26559:26560 ioctl c0306201 0 returned -14 [ 1240.493380][ T1260] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1241.546017][ T5714] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1241.665853][ T1260] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.665879][ T1260] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1241.665914][ T1260] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1241.665937][ T1260] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.725606][ T5714] usb 10-1: Using ep0 maxpacket: 8 [ 1241.738125][ T1260] usb 7-1: config 0 descriptor?? [ 1241.741214][ T5714] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 1241.741244][ T5714] usb 10-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1241.741276][ T5714] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1241.741309][ T5714] usb 10-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 1241.741330][ T5714] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.823137][ T5714] usb 10-1: config 0 descriptor?? [ 1241.983029][ T1260] usb 7-1: USB disconnect, device number 51 [ 1243.489746][ T5714] usbhid 10-1:0.0: can't add hid device: -71 [ 1243.489831][ T5714] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1243.515361][ T5714] usb 10-1: USB disconnect, device number 21 [ 1243.610265][T26637] netlink: 428 bytes leftover after parsing attributes in process `syz.5.7452'. [ 1243.610355][T26637] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7452'. [ 1243.869033][T26645] sg_write: data in/out 410076/64 bytes for SCSI command 0x0-- guessing data in; [ 1243.869033][T26645] program syz.9.7456 not setting count and/or reply_len properly [ 1244.147329][T14540] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1244.356933][T14540] usb 6-1: device descriptor read/64, error -71 [ 1244.592567][T14540] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1244.711363][T26669] netlink: 428 bytes leftover after parsing attributes in process `syz.4.7466'. [ 1244.711468][T26669] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7466'. [ 1244.722756][T14540] usb 6-1: device descriptor read/64, error -71 [ 1244.834266][T14540] usb usb6-port1: attempt power cycle [ 1245.194773][T14540] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1245.215308][T14540] usb 6-1: device descriptor read/8, error -71 [ 1245.437178][T26696] netlink: 428 bytes leftover after parsing attributes in process `syz.6.7477'. [ 1245.437273][T26696] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7477'. [ 1245.452792][T14540] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1245.473695][T14540] usb 6-1: device descriptor read/8, error -71 [ 1245.583176][T14540] usb usb6-port1: unable to enumerate USB device [ 1245.617488][T26700] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7480'. [ 1245.617520][T26700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7480'. [ 1246.326906][T26721] netlink: 'syz.9.7489': attribute type 29 has an invalid length. [ 1246.328042][T26721] netlink: 'syz.9.7489': attribute type 29 has an invalid length. [ 1246.879230][T26733] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7490'. [ 1248.622401][ T5615] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1248.713457][ T5714] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1248.775462][ T5615] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1248.776951][ T5615] usb 10-1: config 63 has an invalid interface number: 66 but max is 0 [ 1248.776978][ T5615] usb 10-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.776998][ T5615] usb 10-1: config 63 has no interface number 0 [ 1248.777028][ T5615] usb 10-1: config 63 interface 66 has no altsetting 0 [ 1248.824833][ T5615] usb 10-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1248.824861][ T5615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.824880][ T5615] usb 10-1: Product: syz [ 1248.824894][ T5615] usb 10-1: Manufacturer: syz [ 1248.824908][ T5615] usb 10-1: SerialNumber: syz [ 1248.905441][ T5714] usb 7-1: device descriptor read/64, error -71 [ 1249.091268][ T5615] uvcvideo 10-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1249.091322][ T5615] uvcvideo 10-1:63.66: No valid video chain found. [ 1249.105220][ T5615] usb 10-1: USB disconnect, device number 22 [ 1249.142321][ T5714] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1249.283007][ T5714] usb 7-1: device descriptor read/64, error -71 [ 1249.396912][ T5714] usb usb7-port1: attempt power cycle [ 1249.735831][ T5714] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1249.752799][ T5714] usb 7-1: device descriptor read/8, error -71 [ 1249.905120][ T5615] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1249.992256][ T5714] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1250.013065][ T5714] usb 7-1: device descriptor read/8, error -71 [ 1250.056049][ T5615] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 1250.056075][ T5615] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.056089][ T5615] usb 10-1: config 0 has no interface number 0 [ 1250.056114][ T5615] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1250.056127][ T5615] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1250.056138][ T5615] usb 10-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1250.056152][ T5615] usb 10-1: config 0 interface 52 has no altsetting 0 [ 1250.058606][ T5615] usb 10-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1250.058633][ T5615] usb 10-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1250.058649][ T5615] usb 10-1: Manufacturer: syz [ 1250.070342][ T5615] usb 10-1: config 0 descriptor?? [ 1250.122938][ T5714] usb usb7-port1: unable to enumerate USB device [ 1250.170708][ T5615] hub 10-1:0.52: bad descriptor, ignoring hub [ 1250.170730][ T5615] hub 10-1:0.52: probe with driver hub failed with error -5 [ 1250.277045][T26798] sctp: [Deprecated]: syz.4.7520 (pid 26798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1250.277045][T26798] Use struct sctp_sack_info instead [ 1250.371340][ T5615] synaptics_usb 10-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1250.371476][ T5615] synaptics_usb 10-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1250.572765][ T5734] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1250.683210][ T1260] usb 10-1: USB disconnect, device number 23 [ 1250.727623][ T5734] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1250.727655][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.727674][ T5734] usb 5-1: Product: syz [ 1250.727688][ T5734] usb 5-1: Manufacturer: syz [ 1250.727700][ T5734] usb 5-1: SerialNumber: syz [ 1250.996988][ T1260] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1251.034217][T26808] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7524'. [ 1251.227926][T26800] random: crng reseeded on system resumption [ 1251.373116][ T5714] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1251.529977][ T5714] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1251.556925][ T5714] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 1251.556952][ T5714] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.556971][ T5714] usb 6-1: config 63 has no interface number 0 [ 1251.557001][ T5714] usb 6-1: config 63 interface 66 has no altsetting 0 [ 1251.581896][ T5714] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1251.581926][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.581948][ T5714] usb 6-1: Product: syz [ 1251.581962][ T5714] usb 6-1: Manufacturer: syz [ 1251.581976][ T5714] usb 6-1: SerialNumber: syz [ 1251.978356][ T5714] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1251.978538][ T5714] uvcvideo 6-1:63.66: No valid video chain found. [ 1252.016300][ T5714] usb 6-1: USB disconnect, device number 47 [ 1252.292050][ T1260] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1252.758771][T26825] sctp: [Deprecated]: syz.7.7531 (pid 26825) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1252.758771][T26825] Use struct sctp_sack_info instead [ 1252.766595][T26824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7532'. [ 1253.291375][ T9] usb 5-1: USB disconnect, device number 37 [ 1253.326856][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 1253.430469][ T1260] ath9k_htc: Failed to initialize the device [ 1253.547000][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 1253.762083][ T822] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 1253.816361][T26799] ------------[ cut here ]------------ [ 1253.816373][T26799] kcov->t != t [ 1253.816388][T26799] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x181/0x240, CPU#1: syz.4.7521/26799 [ 1253.816430][T26799] Modules linked in: [ 1253.816467][T26799] CPU: 1 UID: 0 PID: 26799 Comm: syz.4.7521 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1253.816578][T26799] Tainted: [L]=SOFTLOCKUP [ 1253.816586][T26799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1253.816606][T26799] RIP: 0010:kcov_task_exit+0x181/0x240 [ 1253.816660][T26799] Code: 90 00 00 00 e8 60 48 5a 00 4c 89 f7 5b 41 5e 41 5f e9 73 0b 60 00 7c 40 5b 41 5e 41 5f e9 17 1d 82 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 1253.816679][T26799] RSP: 0018:ffffc900057b7d20 EFLAGS: 00010207 [ 1253.816704][T26799] RAX: 78b16cda1f742300 RBX: ffff888032c13e00 RCX: 0000000000000000 [ 1253.816720][T26799] RDX: 000000008f0e0a89 RSI: ffffffff8bca6e60 RDI: 00000000ffffffff [ 1253.816734][T26799] RBP: ffffc900057b7e80 R08: 4500000000000000 R09: 0000000000000000 [ 1253.816748][T26799] R10: 0000000000000000 R11: ffffffff8e1c3840 R12: 0000000000000000 [ 1253.816762][T26799] R13: ffff888032c13e00 R14: ffff88802630c800 R15: ffff88802630c808 [ 1253.816777][T26799] FS: 0000555576fb1500(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000 [ 1253.816796][T26799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1253.816810][T26799] CR2: 0000001b3380dff8 CR3: 000000005ac06000 CR4: 00000000003526f0 [ 1253.816828][T26799] Call Trace: [ 1253.816866][T26799] [ 1253.816947][T26799] do_exit+0x159/0x2360 [ 1253.816998][T26799] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1253.817061][T26799] ? lockdep_hardirqs_on+0x7a/0x110 [ 1253.817093][T26799] ? __pfx_do_exit+0x10/0x10 [ 1253.817111][T26799] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 1253.817152][T26799] do_group_exit+0x22d/0x2f0 [ 1253.817175][T26799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.817198][T26799] __x64_sys_exit_group+0x3f/0x40 [ 1253.817218][T26799] x64_sys_call+0x221a/0x2240 [ 1253.817239][T26799] do_syscall_64+0x174/0x580 [ 1253.817276][T26799] ? trace_irq_disable+0x3b/0x140 [ 1253.817301][T26799] ? clear_bhb_loop+0x40/0x90 [ 1253.817326][T26799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.817347][T26799] RIP: 0033:0x7f4f7b18de59 [ 1253.817375][T26799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.817393][T26799] RSP: 002b:00007ffcb7460948 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1253.817413][T26799] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f7b18de59 [ 1253.817428][T26799] RDX: 0000001b33224000 RSI: 0000000000000008 RDI: 0000000000000000 [ 1253.817441][T26799] RBP: 00007ffcb74609ac R08: 0000000000000006 R09: 00000000000927c0 [ 1253.817455][T26799] R10: 00000000005e9874 R11: 0000000000000246 R12: 0000000000000133 [ 1253.817469][T26799] R13: 00000000000927c0 R14: 000000000013134c R15: 00007ffcb7460a00 [ 1253.817500][T26799] [ 1253.817514][T26799] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1253.817532][T26799] CPU: 1 UID: 0 PID: 26799 Comm: syz.4.7521 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1253.817559][T26799] Tainted: [L]=SOFTLOCKUP [ 1253.817566][T26799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1253.817579][T26799] Call Trace: [ 1253.817587][T26799] [ 1253.817595][T26799] vpanic+0x5d9/0xad0 [ 1253.817620][T26799] ? __pfx_vpanic+0x10/0x10 [ 1253.817640][T26799] ? __pfx__printk+0x10/0x10 [ 1253.817665][T26799] ? is_bpf_text_address+0x292/0x2b0 [ 1253.817691][T26799] ? is_bpf_text_address+0x26/0x2b0 [ 1253.817724][T26799] panic+0xc5/0xd0 [ 1253.817743][T26799] ? __pfx_panic+0x10/0x10 [ 1253.817780][T26799] __warn+0x315/0x4c0 [ 1253.817798][T26799] ? kcov_task_exit+0x181/0x240 [ 1253.817821][T26799] ? kcov_task_exit+0x181/0x240 [ 1253.817842][T26799] __report_bug+0x331/0x530 [ 1253.817873][T26799] ? trace_sched_exit_tp+0x3a/0x130 [ 1253.817899][T26799] ? kcov_task_exit+0x181/0x240 [ 1253.817921][T26799] ? __pfx___report_bug+0x10/0x10 [ 1253.817955][T26799] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1253.817986][T26799] ? lock_acquire+0x115/0x350 [ 1253.818016][T26799] ? kcov_task_exit+0x181/0x240 [ 1253.818036][T26799] report_bug+0x16a/0x220 [ 1253.818067][T26799] ? kcov_task_exit+0x181/0x240 [ 1253.818086][T26799] ? kcov_task_exit+0x183/0x240 [ 1253.818105][T26799] handle_bug+0x9c/0x200 [ 1253.818128][T26799] exc_invalid_op+0x1a/0x50 [ 1253.818149][T26799] asm_exc_invalid_op+0x1a/0x20 [ 1253.818169][T26799] RIP: 0010:kcov_task_exit+0x181/0x240 [ 1253.818191][T26799] Code: 90 00 00 00 e8 60 48 5a 00 4c 89 f7 5b 41 5e 41 5f e9 73 0b 60 00 7c 40 5b 41 5e 41 5f e9 17 1d 82 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 1253.818208][T26799] RSP: 0018:ffffc900057b7d20 EFLAGS: 00010207 [ 1253.818225][T26799] RAX: 78b16cda1f742300 RBX: ffff888032c13e00 RCX: 0000000000000000 [ 1253.818240][T26799] RDX: 000000008f0e0a89 RSI: ffffffff8bca6e60 RDI: 00000000ffffffff [ 1253.818261][T26799] RBP: ffffc900057b7e80 R08: 4500000000000000 R09: 0000000000000000 [ 1253.818275][T26799] R10: 0000000000000000 R11: ffffffff8e1c3840 R12: 0000000000000000 [ 1253.818289][T26799] R13: ffff888032c13e00 R14: ffff88802630c800 R15: ffff88802630c808 [ 1253.818322][T26799] do_exit+0x159/0x2360 [ 1253.818347][T26799] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1253.818378][T26799] ? lockdep_hardirqs_on+0x7a/0x110 [ 1253.818409][T26799] ? __pfx_do_exit+0x10/0x10 [ 1253.818427][T26799] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 1253.818468][T26799] do_group_exit+0x22d/0x2f0 [ 1253.818490][T26799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.818512][T26799] __x64_sys_exit_group+0x3f/0x40 [ 1253.818533][T26799] x64_sys_call+0x221a/0x2240 [ 1253.818553][T26799] do_syscall_64+0x174/0x580 [ 1253.818582][T26799] ? trace_irq_disable+0x3b/0x140 [ 1253.818606][T26799] ? clear_bhb_loop+0x40/0x90 [ 1253.818632][T26799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.818652][T26799] RIP: 0033:0x7f4f7b18de59 [ 1253.818670][T26799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.818687][T26799] RSP: 002b:00007ffcb7460948 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1253.818705][T26799] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f7b18de59 [ 1253.818720][T26799] RDX: 0000001b33224000 RSI: 0000000000000008 RDI: 0000000000000000 [ 1253.818732][T26799] RBP: 00007ffcb74609ac R08: 0000000000000006 R09: 00000000000927c0 [ 1253.818745][T26799] R10: 00000000005e9874 R11: 0000000000000246 R12: 0000000000000133 [ 1253.818758][T26799] R13: 00000000000927c0 R14: 000000000013134c R15: 00007ffcb7460a00 [ 1253.818789][T26799] [ 1253.819041][T26799] Kernel Offset: disabled