last executing test programs: 10m24.840355721s ago: executing program 2 (id=34594): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x4000080, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r0, 0xfff) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x800) 10m24.613522848s ago: executing program 2 (id=34599): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6057761ab0f200736ceae852a03caf381f413af6c96075ecb03b216edfcdf6142457f01689d1141660d64a06272cf6d7741d88888d2c4a16b91149c93113284", 0x84}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea0", 0xa9}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m23.973390698s ago: executing program 2 (id=34611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd700000dcdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000560000001400040073797a6b616c6c6572300000000000000a00050007"], 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 10m23.857571937s ago: executing program 2 (id=34614): open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x44) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x40000008) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 10m23.751835395s ago: executing program 2 (id=34617): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000016c0)={0x2020}, 0x2020) 10m22.714106912s ago: executing program 2 (id=34627): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 10m6.428615666s ago: executing program 32 (id=34627): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 10m1.83221703s ago: executing program 3 (id=34786): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) 10m1.609948378s ago: executing program 3 (id=34789): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) r2 = eventfd2(0x0, 0x1) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 10m1.31951058s ago: executing program 3 (id=34794): fadvise64(0xffffffffffffffff, 0x7, 0xd544, 0x2) r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 10m0.920203375s ago: executing program 3 (id=34802): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 10m0.713721315s ago: executing program 3 (id=34807): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(r0, 0x25, 0x4) 9m59.566487327s ago: executing program 3 (id=34831): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x7, 0x2}, 0xc) 9m59.081939392s ago: executing program 33 (id=34831): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x7, 0x2}, 0xc) 9m8.243343845s ago: executing program 4 (id=35333): accept(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x9, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x6, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x5, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x100007ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r1, 0x0, 0x7, 0x0, &(0x7f0000000080)) 9m8.015858955s ago: executing program 4 (id=35340): capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x101, 0x6, 0x7, 0x8}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, 0x0, 0x1432a8, 0x12) 9m7.685681075s ago: executing program 4 (id=35347): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000340)=')', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000023c0)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8) 9m7.303933691s ago: executing program 4 (id=35355): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x18f883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 9m7.144112248s ago: executing program 4 (id=35359): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9m2.379505746s ago: executing program 4 (id=35429): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) 9m1.936022078s ago: executing program 34 (id=35429): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) 1m10.208365385s ago: executing program 5 (id=43796): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 1m10.024495104s ago: executing program 5 (id=43801): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m9.957557296s ago: executing program 5 (id=43803): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x6, 0x94, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x20024, &(0x7f0000000100)=ANY=[@ANYRESHEX]) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000100)=0x1b) 1m9.063583001s ago: executing program 5 (id=43804): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea800000000001090224000100000000090400000103000000092100"], 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x7) 1m7.753107828s ago: executing program 5 (id=43807): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x5}, @const={0x0, {0x0, 0x3400, 0x0, 0x5715}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x11, 0x37, &(0x7f0000000100)="67d48d9470d5b5298f17b078f7567b5310495043c8b941710cb75e42d4b08588ef09c8fe0e32eb56d428fed08c51012059359a461d2565"}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001480)={0x0, 0x648, &(0x7f0000000480)="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"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 1m6.880424981s ago: executing program 5 (id=43830): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x87}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48000) 1m6.621039504s ago: executing program 35 (id=43830): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x87}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48000) 45.928271571s ago: executing program 6 (id=44122): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0xaaf, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401c, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff9, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x4], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) 45.637076118s ago: executing program 6 (id=44129): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e22, @empty}}, 0xfe01, 0xae}, 0x90) 45.481804369s ago: executing program 6 (id=44133): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r1, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0x70ba, 0x8, 0x1, 0x2, 'syz1\x00'}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000001800)=[{@none}]}) 45.275619524s ago: executing program 6 (id=44138): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 45.02331348s ago: executing program 6 (id=44144): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 44.89557563s ago: executing program 6 (id=44148): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='-pids'], 0x6) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) 28.230297157s ago: executing program 36 (id=44148): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='-pids'], 0x6) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) 5.007395595s ago: executing program 7 (id=44471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f00003ab000/0x1000)=nil, &(0x7f00003a3000/0xc00000)=nil, &(0x7f000084e000/0x3000)=nil, &(0x7f0000858000/0x3000)=nil, &(0x7f000056b000/0x2000)=nil, &(0x7f0000628000/0x2000)=nil, &(0x7f0000945000/0x2000)=nil, &(0x7f0000dcb000/0x2000)=nil, &(0x7f0000f6b000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000574000/0x3000)=nil, &(0x7f0000000200), 0x0, r1}, 0x68) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80c1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.332097332s ago: executing program 7 (id=44484): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg$alg(r1, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="087671274f91e085d87f0b75acd0856be4ff08d778bb4fc5f66f0fec", 0x1c}], 0x1, 0x0, 0x0, 0x4008004}], 0x1, 0x20) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/73, 0x49}], 0x1}, 0x10000) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 1.899428667s ago: executing program 7 (id=44495): socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={""/10, ""/2, @empty}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e4, &(0x7f0000000380)) 1.714567839s ago: executing program 8 (id=44312): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'dvmrp0\x00', {0x2, 0x0, @multicast1}}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x8}, 0x8) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) 1.633697152s ago: executing program 7 (id=44498): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) chdir(&(0x7f0000000080)='./file0\x00') mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) 1.584380177s ago: executing program 8 (id=44499): syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c002356578c236b"], 0x2c}}, 0x64000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x8, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 709.93377ms ago: executing program 7 (id=44508): socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240000d4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 696.364594ms ago: executing program 1 (id=44509): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x8, @mcast2, 0x4}, 0x1c, 0x0}}], 0x1, 0x24000045) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000"], 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 580.28458ms ago: executing program 1 (id=44510): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x5, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) 580.007373ms ago: executing program 0 (id=44511): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1e9100, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x34) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x185) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0xfffffffffffffff8, 0x0) 485.352332ms ago: executing program 0 (id=44512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 457.593398ms ago: executing program 1 (id=44513): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 343.765074ms ago: executing program 7 (id=44514): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000814) pipe2(0x0, 0x80) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x2, 0x0, 0x0, &(0x7f0000003200)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x16, 0x6, 0xfd, 0x407}]}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) timer_delete(r0) 342.615618ms ago: executing program 0 (id=44523): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) 339.076456ms ago: executing program 1 (id=44515): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="00036c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000680)={0x40, 0x7, 0x4, "292cc4ed"}, 0x0, 0x0, 0x0, 0x0}) 245.433652ms ago: executing program 8 (id=44517): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40408a1, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @multicast2}}}, 0x84) 140.524534ms ago: executing program 0 (id=44518): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 140.306762ms ago: executing program 1 (id=44519): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) shutdown(r1, 0x2) 119.212767ms ago: executing program 0 (id=44520): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 51.804059ms ago: executing program 0 (id=44521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=44522): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): ce found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1950.534342][T32229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.534366][T32229] usb 6-1: Product: syz [ 1950.534384][T32229] usb 6-1: Manufacturer: syz [ 1950.534401][T32229] usb 6-1: SerialNumber: syz [ 1950.608328][T32229] usb 6-1: config 0 descriptor?? [ 1950.921552][T20777] netlink: 24 bytes leftover after parsing attributes in process `syz.6.37983'. [ 1951.279529][ T1394] usb 6-1: USB disconnect, device number 28 [ 1952.202980][T20823] netlink: zone id is out of range [ 1952.203012][T20823] netlink: zone id is out of range [ 1952.301219][T32229] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1952.463942][T32229] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1952.463996][T32229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1952.464028][T32229] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1952.464075][T32229] usb 6-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.00 [ 1952.464103][T32229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.491103][T32229] usb 6-1: config 0 descriptor?? [ 1952.519983][T20815] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1953.330803][T32238] usb 6-1: USB disconnect, device number 29 [ 1953.511313][T20876] netlink: 'syz.6.38032': attribute type 62 has an invalid length. [ 1954.051480][T20899] netlink: 160 bytes leftover after parsing attributes in process `syz.5.38043'. [ 1954.051508][T20899] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1954.964912][ T5858] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1955.140238][ T5858] usb 6-1: Using ep0 maxpacket: 16 [ 1955.142223][ T5858] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1955.142282][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1955.142316][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1955.142336][ T5858] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1955.142355][ T5858] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1955.143777][ T5858] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1955.143805][ T5858] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1955.143832][ T5858] usb 6-1: Manufacturer: syz [ 1955.147947][ T5858] usb 6-1: config 0 descriptor?? [ 1955.474394][ T5858] rc_core: IR keymap rc-hauppauge not found [ 1955.474420][ T5858] Registered IR keymap rc-empty [ 1955.474956][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1955.496411][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1955.521854][ T5858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1955.524285][ T5858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input118 [ 1955.527504][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1955.559118][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1955.572058][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1955.593883][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1955.615932][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1955.645177][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1955.660299][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1955.664037][ C0] mceusb 6-1:0.0: long-range (0x9d) receiver active [ 1955.687366][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1955.702237][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1955.723772][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1955.751204][ T5858] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1955.751303][ T5858] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x9d active) [ 1955.921538][T14145] usb 6-1: USB disconnect, device number 30 [ 1959.014554][ T8238] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1959.216073][T21067] usb usb7: usbfs: process 21067 (syz.6.38125) did not claim interface 9 before use [ 1959.815676][T21100] vivid-000: disconnect [ 1959.816769][T21099] vivid-000: reconnect [ 1960.253068][T21121] Option ' ' to dns_resolver key: bad/missing value [ 1961.045589][T21164] vivid-000: disconnect [ 1961.046583][T21163] vivid-000: reconnect [ 1961.725575][T21192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.38188'. [ 1961.852721][T21198] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 1962.742711][T21242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.38207'. [ 1965.947161][T21411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.38289'. [ 1970.079868][T21574] kvm_intel: kvm [21573]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x462 [ 1974.828525][T21800] netlink: 128 bytes leftover after parsing attributes in process `syz.6.38481'. [ 1976.082818][ T6073] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1976.239106][ T6073] usb 6-1: Using ep0 maxpacket: 16 [ 1976.241925][ T6073] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1976.241983][ T6073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1976.242016][ T6073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1976.242047][ T6073] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1976.242074][ T6073] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1976.244512][ T6073] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1976.244543][ T6073] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1976.244566][ T6073] usb 6-1: Manufacturer: syz [ 1976.339292][ T6073] usb 6-1: config 0 descriptor?? [ 1976.651080][ T6073] rc_core: IR keymap rc-hauppauge not found [ 1976.651103][ T6073] Registered IR keymap rc-empty [ 1976.651589][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1976.673087][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1976.696116][ T6073] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1976.699681][ T6073] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input119 [ 1976.703758][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1976.739871][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1976.760275][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1976.783462][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1976.803198][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1976.835782][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1976.857455][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1976.878833][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1976.900693][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1976.923337][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1976.960040][ T6073] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1976.960068][ T6073] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1977.084724][ T6073] usb 6-1: USB disconnect, device number 31 [ 1979.283922][T21946] netlink: 40 bytes leftover after parsing attributes in process `syz.5.38551'. [ 1981.040242][T32229] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1981.205325][T32229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1981.205365][T32229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1981.205395][T32229] usb 6-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 1981.205412][T32229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.235509][T32229] usb 6-1: config 0 descriptor?? [ 1984.134531][ T6073] usb 6-1: USB disconnect, device number 32 [ 1984.469747][T22118] kvm: user requested TSC rate below hardware speed [ 1985.874849][T29937] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1986.040762][T29937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1986.065553][T29937] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1986.065587][T29937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.065612][T29937] usb 6-1: Product: syz [ 1986.065630][T29937] usb 6-1: Manufacturer: syz [ 1986.065648][T29937] usb 6-1: SerialNumber: syz [ 1986.104984][T29937] usb 6-1: config 0 descriptor?? [ 1986.118968][T29937] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1986.776370][T29937] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1986.776593][T29937] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1986.803038][T29937] usb 6-1: USB disconnect, device number 33 [ 1988.542490][T32238] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1988.709417][T32238] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1988.709453][T32238] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1988.709482][T32238] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1988.714637][T32238] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1988.714670][T32238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.714694][T32238] usb 6-1: Product: syz [ 1988.714712][T32238] usb 6-1: Manufacturer: syz [ 1988.714728][T32238] usb 6-1: SerialNumber: syz [ 1988.796056][T32238] usb 6-1: config 0 descriptor?? [ 1988.800345][T22296] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1988.800604][T22296] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1988.826053][T32238] usb 6-1: ucan: probing device on interface #0 [ 1989.023467][T32238] usb 6-1: ucan: device protocol version 0 is not supported [ 1989.023495][T32238] usb 6-1: ucan: probe failed; try to update the device firmware [ 1989.132344][T14760] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1989.248159][ T1394] usb 6-1: USB disconnect, device number 34 [ 1989.577929][T22345] blkio.reset_stats is deprecated [ 1989.686341][T22359] netlink: 72 bytes leftover after parsing attributes in process `syz.6.38755'. [ 1990.212402][T22380] kvm: emulating exchange as write [ 1991.016285][T22426] netlink: 72 bytes leftover after parsing attributes in process `syz.5.38790'. [ 1991.453474][T22447] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1991.680120][T22458] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1991.680151][T22458] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1991.688633][T22458] vhci_hcd vhci_hcd.0: Device attached [ 1991.758891][T22458] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 1991.758923][T22458] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1991.758983][T22458] vhci_hcd vhci_hcd.0: Device attached [ 1991.759690][T22459] usbip_core: unknown command [ 1991.759703][T22459] vhci_hcd: unknown pdu 1166236402 [ 1991.759717][T22459] usbip_core: unknown command [ 1991.762171][T18933] vhci_hcd vhci_hcd.5: stop threads [ 1991.762198][T18933] vhci_hcd vhci_hcd.5: release socket [ 1991.762239][T18933] vhci_hcd vhci_hcd.5: disconnect device [ 1991.762582][T22465] vhci_hcd: connection closed [ 1991.764242][T18933] vhci_hcd vhci_hcd.5: stop threads [ 1991.764263][T18933] vhci_hcd vhci_hcd.5: release socket [ 1991.764305][T18933] vhci_hcd vhci_hcd.5: disconnect device [ 1992.641646][T14816] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1994.589273][T22590] netlink: 182 bytes leftover after parsing attributes in process `syz.5.38869'. [ 1994.809270][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1994.809426][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1995.270412][T32229] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1995.432602][T32229] usb 6-1: Using ep0 maxpacket: 16 [ 1995.440893][T32229] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1995.440953][T32229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1995.440983][T32229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1995.441014][T32229] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1995.441040][T32229] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1995.442961][T32229] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1995.442993][T32229] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1995.443016][T32229] usb 6-1: Manufacturer: syz [ 1995.534284][T32229] usb 6-1: config 0 descriptor?? [ 1995.833587][T32229] rc_core: IR keymap rc-hauppauge not found [ 1995.833609][T32229] Registered IR keymap rc-empty [ 1995.835697][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1995.858472][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1995.880968][T32229] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1995.885651][T32229] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input120 [ 1995.927150][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1995.942286][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1995.964207][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1995.986353][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1996.008039][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1996.028975][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1996.053313][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1996.072608][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1996.094062][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1996.119119][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1996.172063][T32229] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1996.172093][T32229] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1996.247158][ T6073] usb 6-1: USB disconnect, device number 35 [ 2000.553669][T22774] overlayfs: invalid origin (0000) [ 2000.630005][T22786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.38961'. [ 2002.798822][T22887] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.39008'. [ 2003.719828][T29937] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 2003.826172][T29937] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2004.985676][T22975] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.39040'. [ 2004.994615][T22975] netlink: 4228 bytes leftover after parsing attributes in process `syz.5.39040'. [ 2008.405316][T32238] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2008.569086][T32238] usb 6-1: Using ep0 maxpacket: 16 [ 2008.571147][T32238] usb 6-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 2008.571205][T32238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2008.571241][T32238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 2008.571261][T32238] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2008.571279][T32238] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2008.572895][T32238] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2008.572926][T32238] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2008.572950][T32238] usb 6-1: Manufacturer: syz [ 2008.582537][T32238] usb 6-1: config 0 descriptor?? [ 2008.958481][T32238] rc_core: IR keymap rc-hauppauge not found [ 2008.958506][T32238] Registered IR keymap rc-empty [ 2008.960509][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2008.994822][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2009.013856][T32238] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2009.016268][T32238] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input121 [ 2009.025010][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2009.056680][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2009.078193][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2009.099779][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2009.123237][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2009.143846][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2009.164669][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2009.192085][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2009.215311][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2009.230351][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2009.368522][T32238] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2009.368551][T32238] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2009.423274][T32238] usb 6-1: USB disconnect, device number 36 [ 2011.879603][T23256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.39173'. [ 2011.879669][T23256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.39173'. [ 2015.287158][ T6045] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2015.449714][ T6045] usb 6-1: Using ep0 maxpacket: 8 [ 2015.458832][ T6045] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2015.458891][ T6045] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2015.458918][ T6045] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2015.458946][ T6045] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2015.458973][ T6045] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2015.459020][ T6045] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2015.459045][ T6045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2015.747069][ T6045] usb 6-1: GET_CAPABILITIES returned 0 [ 2015.747117][ T6045] usbtmc 6-1:16.0: can't read capabilities [ 2015.977937][T32238] usb 6-1: USB disconnect, device number 37 [ 2017.324649][ T5858] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 2017.502983][ T5858] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2017.503015][ T5858] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2017.503039][ T5858] usb 6-1: config 1 has no interface number 0 [ 2017.503087][ T5858] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2017.503118][ T5858] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2017.503148][ T5858] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2017.506739][ T5858] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2017.506772][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2017.506795][ T5858] usb 6-1: Product: syz [ 2017.506812][ T5858] usb 6-1: Manufacturer: syz [ 2017.506828][ T5858] usb 6-1: SerialNumber: syz [ 2017.645669][T23446] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2018.099140][T23446] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2018.779032][ T5858] cdc_ncm 6-1:1.1: bind() failure [ 2018.841488][ T5858] usb 6-1: USB disconnect, device number 38 [ 2019.771543][T23552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.39318'. [ 2021.399495][T32238] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2021.562992][T32238] usb 6-1: Using ep0 maxpacket: 16 [ 2021.566039][T32238] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2021.566097][T32238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2021.566130][T32238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 2021.566160][T32238] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2021.566187][T32238] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2021.567505][T32238] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2021.567537][T32238] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2021.567562][T32238] usb 6-1: Manufacturer: syz [ 2021.666127][T32238] usb 6-1: config 0 descriptor?? [ 2021.953169][T32238] rc_core: IR keymap rc-hauppauge not found [ 2021.953189][T32238] Registered IR keymap rc-empty [ 2021.953645][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2021.983567][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2021.997377][T32238] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2021.999805][T32238] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input122 [ 2022.003137][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2022.036083][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2022.052340][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2022.071835][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2022.093566][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2022.117452][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2022.138017][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2022.165541][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2022.180232][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2022.201841][T32238] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2022.231691][T32238] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2022.231789][T32238] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2022.401900][T32238] usb 6-1: USB disconnect, device number 39 [ 2026.376584][ T8238] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2026.800977][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068f5ac00: rx timeout, send abort [ 2026.801159][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888068f5ac00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 2028.792182][T23837] syzkaller1: entered promiscuous mode [ 2028.792210][T23837] syzkaller1: entered allmulticast mode [ 2031.079566][T23918] trusted_key: encrypted_key: keyword 'n3Ny;xgew' not recognized [ 2033.548601][ T6045] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 2033.713512][ T6045] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2033.713573][ T6045] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2033.713594][ T6045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2033.713615][ T6045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2033.713637][ T6045] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2033.716120][ T6045] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2033.716155][ T6045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2033.716171][ T6045] usb 6-1: Product: syz [ 2033.716195][ T6045] usb 6-1: Manufacturer: syz [ 2033.716206][ T6045] usb 6-1: SerialNumber: syz [ 2033.815475][ T6045] usb 6-1: config 0 descriptor?? [ 2034.042770][ T6045] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2034.042799][ T6045] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2034.261697][ T6045] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 2034.261726][ T6045] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2034.261750][ T6045] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2034.482949][ T6045] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2034.483011][ T6045] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 2034.483449][ T6045] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2034.513450][ T6045] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 2034.531856][ T6045] usb 6-1: USB disconnect, device number 40 [ 2034.674734][T23943] kexec: Could not allocate control_code_buffer [ 2036.106114][ T6073] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2036.280395][ T6073] usb 6-1: Using ep0 maxpacket: 16 [ 2036.282812][ T6073] usb 6-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 2036.282872][ T6073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2036.282905][ T6073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 2036.282936][ T6073] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2036.282962][ T6073] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2036.285045][ T6073] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2036.285077][ T6073] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2036.285101][ T6073] usb 6-1: Manufacturer: syz [ 2036.386215][ T6073] usb 6-1: config 0 descriptor?? [ 2036.669712][ T6073] rc_core: IR keymap rc-hauppauge not found [ 2036.669738][ T6073] Registered IR keymap rc-empty [ 2036.670224][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2036.702597][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2036.725448][ T6073] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2036.727966][ T6073] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input123 [ 2036.730811][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2036.766523][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2036.779998][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2036.800125][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2036.832747][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2036.854825][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2036.875962][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2036.897664][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2036.920572][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2036.951902][ T6073] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2036.980159][ T6073] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2036.980397][ T6073] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2037.091832][T14145] usb 6-1: USB disconnect, device number 41 [ 2039.520047][ T1394] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2039.682545][ T1394] usb 6-1: Using ep0 maxpacket: 8 [ 2039.685897][ T1394] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2039.685924][ T1394] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2039.685979][ T1394] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2039.689970][ T1394] usb 6-1: string descriptor 0 read error: -22 [ 2039.690102][ T1394] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2039.690122][ T1394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.762520][ T1394] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 2039.762555][ T1394] cdc_ncm 6-1:1.0: bind() failure [ 2040.002601][ T1394] usb 6-1: USB disconnect, device number 42 [ 2041.113743][ T1394] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2041.293266][ T1394] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2041.293302][ T1394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.293327][ T1394] usb 6-1: Product: syz [ 2041.293343][ T1394] usb 6-1: Manufacturer: syz [ 2041.293360][ T1394] usb 6-1: SerialNumber: syz [ 2041.331040][ T1394] usb 6-1: config 0 descriptor?? [ 2041.791346][ T1394] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 2041.791368][ T1394] usb 6-1: Firmware version (0.0) predates our first public release. [ 2041.791382][ T1394] usb 6-1: Please update to version 0.2 or newer [ 2042.071498][ T1394] usb 6-1: USB disconnect, device number 43 [ 2042.910981][T24254] syzkaller0: refused to change device tx_queue_len [ 2043.552191][T29937] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 2043.721077][T29937] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2043.721109][T29937] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2043.723561][T29937] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2043.723597][T29937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.723613][T29937] usb 6-1: Product: syz [ 2043.723624][T29937] usb 6-1: Manufacturer: syz [ 2043.723635][T29937] usb 6-1: SerialNumber: syz [ 2043.786351][T29937] usb 6-1: 0:2 : does not exist [ 2044.002555][T29937] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2044.047130][T29937] usb 6-1: USB disconnect, device number 44 [ 2044.087348][T24100] udevd[24100]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2047.377547][ T1394] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2047.541193][ T1394] usb 6-1: Using ep0 maxpacket: 8 [ 2047.544135][ T1394] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2047.544196][ T1394] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2047.544222][ T1394] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2047.544251][ T1394] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2047.544278][ T1394] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2047.544325][ T1394] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2047.544351][ T1394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.860497][ T1394] usb 6-1: usb_control_msg returned -32 [ 2047.860550][ T1394] usbtmc 6-1:16.0: can't read capabilities [ 2048.044023][T24469] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (comedi_parport) [ 2048.535924][T24495] netlink: 14 bytes leftover after parsing attributes in process `syz.6.39769'. [ 2048.711921][T24500] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 2048.872414][T32238] usb 6-1: USB disconnect, device number 45 [ 2049.536052][T24510] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (comedi_parport) [ 2054.877352][T32229] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2055.040031][T32229] usb 6-1: Using ep0 maxpacket: 16 [ 2055.054126][T32229] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2055.054164][T32229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2055.058489][T32229] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2055.059951][T32229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.059978][T32229] usb 6-1: Product: syz [ 2055.059996][T32229] usb 6-1: Manufacturer: syz [ 2055.060013][T32229] usb 6-1: SerialNumber: syz [ 2055.109623][T32229] usb 6-1: config 0 descriptor?? [ 2055.124632][T32229] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2055.124671][T32229] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 2055.793068][T32229] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2055.793962][T32229] em28xx 6-1:0.0: Config register raw data: 0x27 [ 2055.793986][T32229] em28xx 6-1:0.0: I2S Audio (1 sample rate(s)) [ 2055.794008][T32229] em28xx 6-1:0.0: No AC97 audio processor [ 2056.038072][T32229] usb 6-1: USB disconnect, device number 46 [ 2057.510459][T14145] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2057.678876][T14145] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2057.699305][T14145] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2057.699365][T14145] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2057.699398][T14145] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2057.708892][T14145] usb 6-1: string descriptor 0 read error: -22 [ 2057.709304][T14145] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 2057.709392][T14145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.784653][T24844] cgroup: fork rejected by pids controller in /syz6 [ 2058.261532][T14145] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 2058.261580][T14145] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 2058.261609][T14145] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 2058.261639][T14145] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 2058.261679][T14145] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 2058.261705][T14145] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 2058.261731][T14145] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 2058.261758][T14145] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 2058.261785][T14145] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 2058.261813][T14145] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 2058.440882][T14145] kone 0003:1E7D:2CED.0051: hidraw0: USB HID v0.05 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 2058.476849][T14145] kone 0003:1E7D:2CED.0051: couldn't init struct kone_device [ 2058.476914][T14145] kone 0003:1E7D:2CED.0051: couldn't install mouse [ 2058.502174][T14145] kone 0003:1E7D:2CED.0051: probe with driver kone failed with error -5 [ 2058.558007][T14145] usb 6-1: USB disconnect, device number 47 [ 2058.577212][T24883] fido_id[24883]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 2060.118250][T14817] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2060.201234][ T4927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2060.207330][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2060.230859][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2060.268740][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2060.359212][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2060.963772][T31378] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.438150][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2061.438267][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2061.503190][T31378] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.849530][T31378] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.890618][T24914] vcan0 speed is unknown, defaulting to 1000 [ 2062.199689][T31378] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.608939][ T5860] Bluetooth: hci4: command tx timeout [ 2062.817504][T24914] bridge0: port 1(bridge_slave_0) entered blocking state [ 2062.817942][T24914] bridge0: port 1(bridge_slave_0) entered disabled state [ 2062.818564][T24914] bridge_slave_0: entered allmulticast mode [ 2062.822411][T24914] bridge_slave_0: entered promiscuous mode [ 2062.871291][T24914] bridge0: port 2(bridge_slave_1) entered blocking state [ 2062.871627][T24914] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.871963][T24914] bridge_slave_1: entered allmulticast mode [ 2062.898462][T24914] bridge_slave_1: entered promiscuous mode [ 2062.970696][T24914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2063.089259][T24914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2063.237549][T24914] team0: Port device team_slave_0 added [ 2063.250949][T24914] team0: Port device team_slave_1 added [ 2063.378104][T24914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2063.378122][T24914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2063.378146][T24914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2063.432044][T24914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2063.432058][T24914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2063.432080][T24914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2063.765032][T31378] bridge_slave_1: left allmulticast mode [ 2063.765073][T31378] bridge_slave_1: left promiscuous mode [ 2063.787769][T31378] bridge0: port 2(bridge_slave_1) entered disabled state [ 2063.895290][T31378] bridge_slave_0: left allmulticast mode [ 2063.895329][T31378] bridge_slave_0: left promiscuous mode [ 2063.895599][T31378] bridge0: port 1(bridge_slave_0) entered disabled state [ 2064.861910][ T5860] Bluetooth: hci4: command tx timeout [ 2065.043421][T31378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2065.109133][T31378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2065.153929][T31378] bond0 (unregistering): Released all slaves [ 2065.181777][T24914] hsr_slave_0: entered promiscuous mode [ 2065.200800][T24914] hsr_slave_1: entered promiscuous mode [ 2065.202388][T24914] debugfs: 'hsr0' already exists in 'hsr' [ 2065.202414][T24914] Cannot create hsr debugfs directory [ 2066.155478][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2067.115183][ T5860] Bluetooth: hci4: command tx timeout [ 2067.346293][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2068.121633][T31378] hsr_slave_0: left promiscuous mode [ 2068.163859][T31378] hsr_slave_1: left promiscuous mode [ 2068.164869][T31378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2068.164889][T31378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2068.208749][T31378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2068.208782][T31378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2068.332902][T31378] veth1_macvtap: left promiscuous mode [ 2068.332979][T31378] veth0_macvtap: left promiscuous mode [ 2068.333176][T31378] veth1_vlan: left promiscuous mode [ 2068.333307][T31378] veth0_vlan: left promiscuous mode [ 2069.129081][T31378] team0 (unregistering): Port device team_slave_1 removed [ 2069.172416][T31378] team0 (unregistering): Port device team_slave_0 removed [ 2069.367055][ T5860] Bluetooth: hci4: command tx timeout [ 2071.645835][T24914] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2071.681949][T24914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2071.683737][T24914] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2071.739194][T24914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2071.793491][T24914] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2071.794035][T31378] IPVS: stop unused estimator thread 0... [ 2071.863819][T24914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2071.865321][T24914] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2071.902275][T24914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2072.172445][T24914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2072.295200][T24914] 8021q: adding VLAN 0 to HW filter on device team0 [ 2072.382026][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 2072.382337][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2072.430995][ T3185] bridge0: port 2(bridge_slave_1) entered blocking state [ 2072.431263][ T3185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2073.173349][T24914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2073.483777][T24914] veth0_vlan: entered promiscuous mode [ 2073.503321][T24914] veth1_vlan: entered promiscuous mode [ 2073.630029][T24914] veth0_macvtap: entered promiscuous mode [ 2073.646800][T24914] veth1_macvtap: entered promiscuous mode [ 2073.688660][T24914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2073.714623][T24914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2073.750550][T18933] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.751878][T18933] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.754482][T18933] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.786414][T18933] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.972754][T14817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.972773][T14817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2075.183933][T14139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2075.183956][T14139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2075.924570][ T1394] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2076.086432][ T1394] usb 6-1: Using ep0 maxpacket: 16 [ 2076.089189][ T1394] usb 6-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 2076.089249][ T1394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2076.089287][ T1394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 2076.089308][ T1394] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2076.089325][ T1394] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2076.091940][ T1394] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2076.091975][ T1394] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2076.091990][ T1394] usb 6-1: Manufacturer: syz [ 2076.124088][ T1394] usb 6-1: config 0 descriptor?? [ 2076.508898][ T1394] rc_core: IR keymap rc-hauppauge not found [ 2076.508922][ T1394] Registered IR keymap rc-empty [ 2076.509397][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2076.531410][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2076.566522][ T1394] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2076.585295][ T1394] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input124 [ 2076.607434][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2076.633948][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2076.657158][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2076.683928][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2076.709558][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2076.727791][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2076.756480][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2076.781107][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2076.810554][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2076.823853][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2076.863125][ T1394] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2076.863568][ T1394] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2076.942645][ T1394] usb 6-1: USB disconnect, device number 48 [ 2082.036054][ T1394] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2082.231874][ T1394] usb 6-1: Using ep0 maxpacket: 8 [ 2082.234964][ T1394] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 2082.234995][ T1394] usb 6-1: config 2 has no interface number 0 [ 2082.235069][ T1394] usb 6-1: config 2 interface 31 has no altsetting 0 [ 2082.258399][ T1394] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 2082.258496][ T1394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.258554][ T1394] usb 6-1: Product: syz [ 2082.258596][ T1394] usb 6-1: Manufacturer: syz [ 2082.258635][ T1394] usb 6-1: SerialNumber: syz [ 2082.790064][ T1394] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 2082.823346][ T1394] usb 6-1: USB disconnect, device number 49 [ 2083.653332][T25384] gretap0: entered promiscuous mode [ 2083.655570][T25384] gretap0: left promiscuous mode [ 2086.327775][ T1394] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2086.492053][ T1394] usb 6-1: Using ep0 maxpacket: 16 [ 2086.494878][ T1394] usb 6-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 2086.494935][ T1394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2086.494965][ T1394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 2086.494995][ T1394] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2086.495022][ T1394] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2086.496292][ T1394] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2086.496322][ T1394] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2086.496349][ T1394] usb 6-1: Manufacturer: syz [ 2086.520396][ T1394] usb 6-1: config 0 descriptor?? [ 2086.880396][ T1394] rc_core: IR keymap rc-hauppauge not found [ 2086.880418][ T1394] Registered IR keymap rc-empty [ 2086.880879][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2086.905262][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2086.932405][ T1394] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2086.946001][ T1394] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input125 [ 2086.972250][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2086.990291][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2087.015399][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2087.044630][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2087.068769][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2087.088798][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2087.108324][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2087.132644][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2087.152497][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2087.173679][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2087.270719][ T1394] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2087.270810][ T1394] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2087.325979][ T1394] usb 6-1: USB disconnect, device number 50 [ 2088.035085][T25548] Unknown status report in ack skb [ 2088.153605][T25558] loop0: detected capacity change from 0 to 7 [ 2088.199095][T14816] lo_rw_aio(loop0) starting read with raw_refcnt=0x1, refcnt=2 [ 2088.212399][T25558] Dev loop0: unable to read RDB block 7 [ 2088.212446][T25558] loop0: unable to read partition table [ 2088.212691][T25558] loop0: partition table beyond EOD, truncated [ 2088.212726][T25558] loop_reread_partitions: partition scan of loop0 (被x ) failed (rc=-5) [ 2088.434324][T24100] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 2089.676484][ T1394] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2089.855906][ T1394] usb 6-1: Using ep0 maxpacket: 16 [ 2089.864657][ T1394] usb 6-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 2089.864717][ T1394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2089.864750][ T1394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 2089.864780][ T1394] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2089.864807][ T1394] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2089.870857][ T1394] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2089.870888][ T1394] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2089.870911][ T1394] usb 6-1: Manufacturer: syz [ 2089.898721][ T1394] usb 6-1: config 0 descriptor?? [ 2090.351090][ T1394] rc_core: IR keymap rc-hauppauge not found [ 2090.351114][ T1394] Registered IR keymap rc-empty [ 2090.351590][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2090.374304][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2090.394535][ T1394] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2090.419684][ T1394] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input126 [ 2090.518815][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2090.546183][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2090.572812][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2090.588010][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2090.619844][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2090.641454][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2090.664562][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2090.684851][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2090.706544][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2090.728851][ T1394] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2090.735791][T25638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2090.809610][ T1394] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2090.809639][ T1394] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2090.843860][ T1394] usb 6-1: USB disconnect, device number 51 [ 2091.465210][T25660] loop0: detected capacity change from 0 to 7 [ 2091.469083][T14817] lo_rw_aio(loop0) starting read with raw_refcnt=0x1, refcnt=2 [ 2091.473531][T25660] Dev loop0: unable to read RDB block 7 [ 2091.473576][T25660] loop0: unable to read partition table [ 2091.473796][T25660] loop0: partition table beyond EOD, truncated [ 2091.473817][T25660] loop_reread_partitions: partition scan of loop0 (被x ) failed (rc=-5) [ 2091.561719][T24100] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 2091.741360][T25669] netlink: 'syz.6.40269': attribute type 83 has an invalid length. [ 2091.926626][T25674] netlink: 'syz.6.40269': attribute type 83 has an invalid length. [ 2093.851078][T14139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2099.202707][ T5858] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2099.376833][ T5858] usb 6-1: Using ep0 maxpacket: 16 [ 2099.383128][ T5858] usb 6-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 2099.383186][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2099.383218][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 2099.383248][ T5858] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2099.383381][ T5858] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2099.385866][ T5858] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2099.385898][ T5858] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2099.385921][ T5858] usb 6-1: Manufacturer: syz [ 2099.508043][ T5858] usb 6-1: config 0 descriptor?? [ 2099.820899][ T5858] rc_core: IR keymap rc-hauppauge not found [ 2099.820922][ T5858] Registered IR keymap rc-empty [ 2099.821705][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2099.855234][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2099.878867][ T5858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2099.884603][ T5858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input127 [ 2099.919734][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2099.940092][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2099.975471][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2099.995102][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2100.016630][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2100.037984][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2100.106231][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2100.124315][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2100.146118][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2100.178602][ T5858] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2100.223754][ T5858] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2100.223784][ T5858] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2100.265915][ T5858] usb 6-1: USB disconnect, device number 52 [ 2102.356614][T32229] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2102.520288][T32229] usb 6-1: Using ep0 maxpacket: 16 [ 2102.524988][T32229] usb 6-1: config index 0 descriptor too short (expected 94, got 18) [ 2102.528809][T32229] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 2102.528858][T32229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2102.528882][T32229] usb 6-1: Product: syz [ 2102.528898][T32229] usb 6-1: Manufacturer: syz [ 2102.528915][T32229] usb 6-1: SerialNumber: syz [ 2103.341546][T32229] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 2103.352925][T32229] usb 6-1: USB disconnect, device number 53 [ 2105.394020][T32229] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2105.555590][T32229] usb 6-1: Using ep0 maxpacket: 16 [ 2105.558141][T32229] usb 6-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 2105.558196][T32229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2105.558317][T32229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 2105.558349][T32229] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2105.558375][T32229] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2105.560652][T32229] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2105.560683][T32229] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2105.560707][T32229] usb 6-1: Manufacturer: syz [ 2105.633714][T32229] usb 6-1: config 0 descriptor?? [ 2105.988528][T32229] rc_core: IR keymap rc-hauppauge not found [ 2105.988552][T32229] Registered IR keymap rc-empty [ 2105.989040][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2106.012366][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2106.036439][T32229] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2106.061294][T32229] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input128 [ 2106.085681][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2106.109322][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2106.130991][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2106.153145][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2106.174888][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2106.193527][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2106.215598][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2106.237949][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2106.258255][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2106.284890][T32229] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2106.438534][T32229] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2106.438563][T32229] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2106.546857][T32229] usb 6-1: USB disconnect, device number 54 [ 2114.418868][T29937] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2114.582082][T29937] usb 6-1: Using ep0 maxpacket: 16 [ 2114.592726][T29937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2114.592786][T29937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2114.592818][T29937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 2114.592856][T29937] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2114.592882][T29937] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2114.640299][T29937] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2114.640427][T29937] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2114.640481][T29937] usb 6-1: Manufacturer: syz [ 2114.697658][T29937] usb 6-1: config 0 descriptor?? [ 2115.048084][T29937] rc_core: IR keymap rc-hauppauge not found [ 2115.048107][T29937] Registered IR keymap rc-empty [ 2115.049361][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2115.069865][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2115.097069][T29937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2115.124031][T29937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input129 [ 2115.143262][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2115.171689][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2115.189283][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2115.210511][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2115.232446][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2115.254103][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2115.276376][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2115.300104][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2115.321131][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2115.340976][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2115.375990][T29937] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2115.376019][T29937] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2115.459394][T29937] usb 6-1: USB disconnect, device number 55 [ 2116.106193][T29937] IPVS: starting estimator thread 0... [ 2116.217896][T26494] IPVS: using max 10 ests per chain, 24000 per kthread [ 2116.449681][T26507] netlink: 240 bytes leftover after parsing attributes in process `syz.5.40665'. [ 2116.663653][T26518] netlink: 28 bytes leftover after parsing attributes in process `syz.5.40665'. [ 2118.228277][ T6045] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2118.396224][ T6045] usb 6-1: Using ep0 maxpacket: 8 [ 2118.406261][ T6045] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2118.428061][ T6045] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2118.428097][ T6045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.428129][ T6045] usb 6-1: Product: syz [ 2118.428146][ T6045] usb 6-1: Manufacturer: syz [ 2118.428163][ T6045] usb 6-1: SerialNumber: syz [ 2118.481803][ T6045] usb 6-1: config 0 descriptor?? [ 2118.508266][ T6045] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2122.050255][ T6045] gspca_zc3xx: reg_w_i err -71 [ 2122.081203][ T6045] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2122.096730][ T6045] usb 6-1: USB disconnect, device number 56 [ 2124.055444][ T6045] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2124.216042][ T6045] usb 6-1: Using ep0 maxpacket: 32 [ 2124.218990][ T6045] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2124.235129][ T6045] usb 6-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 2124.235163][ T6045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.235187][ T6045] usb 6-1: Product: syz [ 2124.235204][ T6045] usb 6-1: Manufacturer: syz [ 2124.235221][ T6045] usb 6-1: SerialNumber: syz [ 2124.531816][ T6045] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2124.531876][ T6045] usb 6-1: MIDIStreaming interface descriptor not found [ 2124.669884][ T6045] usb 6-1: USB disconnect, device number 57 [ 2124.764198][T25642] udevd[25642]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2127.810073][T31378] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2127.989838][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2127.989955][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2131.319903][T32238] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2131.482553][T32238] usb 6-1: config 255 has an invalid interface number: 97 but max is 0 [ 2131.482584][T32238] usb 6-1: config 255 has no interface number 0 [ 2131.482619][T32238] usb 6-1: config 255 interface 97 has no altsetting 0 [ 2131.486468][T32238] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 2131.486501][T32238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.486524][T32238] usb 6-1: Product: syz [ 2131.486540][T32238] usb 6-1: Manufacturer: syz [ 2131.486556][T32238] usb 6-1: SerialNumber: syz [ 2131.857725][T32238] rndis_host 6-1:255.97: ACM capabilities 01, not really RNDIS? [ 2132.078877][T32238] usb 6-1: USB disconnect, device number 58 [ 2133.434510][T27080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.40942'. [ 2133.434538][T27080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.40942'. [ 2138.264200][ T5948] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2138.434952][ T5948] usb 6-1: Using ep0 maxpacket: 16 [ 2138.454976][ T5948] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2138.455036][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2138.455067][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 2138.455096][ T5948] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2138.455122][ T5948] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2138.494773][ T5948] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2138.494808][ T5948] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2138.494830][ T5948] usb 6-1: Manufacturer: syz [ 2138.543693][ T5948] usb 6-1: config 0 descriptor?? [ 2138.901127][ T5948] rc_core: IR keymap rc-hauppauge not found [ 2138.901151][ T5948] Registered IR keymap rc-empty [ 2138.901638][ T5948] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2138.922897][ T5948] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2138.950569][ T5948] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2138.969508][ T5948] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input130 [ 2139.006529][ T5948] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2139.031450][ T5948] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2139.063938][ T5948] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2139.086902][ T5948] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2139.118848][ T5948] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2139.140566][ T5948] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2139.173343][ T5948] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2139.193908][ T5948] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2139.216537][ T5948] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2139.238654][ T5948] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2139.265303][ T5948] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2139.265332][ T5948] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2139.294036][ T5948] usb 6-1: USB disconnect, device number 59 [ 2142.743512][T27407] usb usb8: usbfs: process 27407 (syz.6.41099) did not claim interface 0 before use [ 2143.536561][T27446] netlink: 'syz.6.41115': attribute type 5 has an invalid length. [ 2143.536585][T27446] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.41115'. [ 2146.840429][T27583] binder: 27582:27583 ioctl 400c620e 200000000440 returned -22 [ 2150.320485][T27771] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2150.997359][T27808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.41291'. [ 2152.088757][T27872] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.41324'. [ 2153.080005][ T38] audit: type=1400 audit(1999.013:90): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=27921 comm="syz.5.41346" [ 2153.861182][T27957] lo speed is unknown, defaulting to 1000 [ 2153.861890][T27957] lo speed is unknown, defaulting to 1000 [ 2153.984008][T27957] lo speed is unknown, defaulting to 1000 [ 2153.993188][T27957] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2153.993217][T27957] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2153.993278][T27957] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2154.151554][T27957] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2154.384259][T27982] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 2154.526962][T27957] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2154.563207][T27989] netlink: 'syz.6.41381': attribute type 11 has an invalid length. [ 2154.563234][T27989] netlink: 224 bytes leftover after parsing attributes in process `syz.6.41381'. [ 2154.979898][T27957] lo speed is unknown, defaulting to 1000 [ 2154.986876][T27957] lo speed is unknown, defaulting to 1000 [ 2155.049503][T27957] lo speed is unknown, defaulting to 1000 [ 2155.052053][T27957] lo speed is unknown, defaulting to 1000 [ 2155.057924][T27957] lo speed is unknown, defaulting to 1000 [ 2155.116081][T27957] lo speed is unknown, defaulting to 1000 [ 2158.202340][T28169] program syz.5.41468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2158.235434][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2159.985114][T28251] netlink: 188 bytes leftover after parsing attributes in process `syz.5.41507'. [ 2160.586984][T32238] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2160.690082][T28286] netlink: 224 bytes leftover after parsing attributes in process `syz.6.41526'. [ 2160.753137][T32238] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2160.753183][T32238] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2160.759566][T32238] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 2160.759602][T32238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2160.759625][T32238] usb 6-1: Product: syz [ 2160.759641][T32238] usb 6-1: Manufacturer: syz [ 2160.759658][T32238] usb 6-1: SerialNumber: syz [ 2160.846842][T32238] usb 6-1: config 0 descriptor?? [ 2160.877598][T32238] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 2160.942090][T32238] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2160.946565][T32238] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 2160.946642][T32238] usb 6-1: media controller created [ 2161.026721][T32238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2161.284470][T32238] DVB: Unable to find symbol tda10046_attach() [ 2161.284489][T32238] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 2161.284507][T32238] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 2161.436179][ T3185] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2161.511905][T32238] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 2161.547361][T32238] usb 6-1: USB disconnect, device number 60 [ 2162.276962][T28353] netlink: 620 bytes leftover after parsing attributes in process `syz.5.41558'. [ 2164.802020][T28489] 9pnet_fd: p9_fd_create_unix (28489): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2165.324959][T28513] program syz.5.41637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2165.984423][T29937] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2166.146738][T29937] usb 6-1: Using ep0 maxpacket: 16 [ 2166.151694][T29937] usb 6-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 2166.151754][T29937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2166.151786][T29937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 2166.151818][T29937] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2166.151844][T29937] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2166.153067][T29937] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2166.153099][T29937] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2166.153122][T29937] usb 6-1: Manufacturer: syz [ 2166.175890][T29937] usb 6-1: config 0 descriptor?? [ 2166.580257][T29937] rc_core: IR keymap rc-hauppauge not found [ 2166.580281][T29937] Registered IR keymap rc-empty [ 2166.582217][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2166.603010][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2166.628960][T29937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2166.651980][T29937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input132 [ 2166.669258][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2166.697502][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2166.710943][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2166.732728][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2166.754080][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2166.775844][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2166.798994][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2166.821386][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2166.841406][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2166.862631][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2166.902906][T29937] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2166.903165][T29937] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2167.044130][T32238] usb 6-1: USB disconnect, device number 61 [ 2167.644680][T28622] netlink: 666 bytes leftover after parsing attributes in process `syz.5.41690'. [ 2169.727302][T28735] netlink: 'syz.5.41747': attribute type 21 has an invalid length. [ 2170.568870][T29937] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2170.731182][T29937] usb 6-1: Using ep0 maxpacket: 32 [ 2170.734519][T29937] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2170.739277][T29937] usb 6-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 2170.739311][T29937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2170.739334][T29937] usb 6-1: Product: syz [ 2170.739351][T29937] usb 6-1: Manufacturer: syz [ 2170.739369][T29937] usb 6-1: SerialNumber: syz [ 2171.135578][T29937] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 2171.161000][T29937] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 2171.208859][T29937] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 2171.233817][T29937] usb 6-1: USB disconnect, device number 62 [ 2172.393686][T29937] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2172.563949][T29937] usb 6-1: Using ep0 maxpacket: 16 [ 2172.566606][T29937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2172.566665][T29937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2172.566698][T29937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 2172.566729][T29937] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2172.566756][T29937] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2172.568719][T29937] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2172.568795][T29937] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2172.568858][T29937] usb 6-1: Manufacturer: syz [ 2172.673684][T29937] usb 6-1: config 0 descriptor?? [ 2173.021076][T29937] rc_core: IR keymap rc-hauppauge not found [ 2173.021106][T29937] Registered IR keymap rc-empty [ 2173.021608][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2173.040573][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2173.075806][T29937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2173.104618][T29937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input133 [ 2173.206678][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2173.224524][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2173.249231][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2173.268530][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2173.289084][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2173.313387][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2173.333057][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2173.354336][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2173.376213][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2173.397710][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2173.431919][T29937] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2173.432180][T29937] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2173.528805][T29937] usb 6-1: USB disconnect, device number 63 [ 2178.267408][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2179.726396][T29937] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2179.888767][T29937] usb 6-1: Using ep0 maxpacket: 16 [ 2179.891412][T29937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2179.891451][T29937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2179.891478][T29937] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2179.891524][T29937] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2179.891552][T29937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.920008][T29937] usb 6-1: config 0 descriptor?? [ 2180.493182][T29937] microsoft 0003:045E:07DA.0052: ignoring exceeding usage max [ 2180.495856][T29937] microsoft 0003:045E:07DA.0052: item 0 4 0 9 parsing failed [ 2180.498016][T29937] microsoft 0003:045E:07DA.0052: parse failed [ 2180.498307][T29937] microsoft 0003:045E:07DA.0052: probe with driver microsoft failed with error -22 [ 2180.719563][T14058] usb 6-1: USB disconnect, device number 64 [ 2183.380976][T14058] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2183.566044][T14058] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2183.567640][T14058] usb 6-1: config 4 has an invalid interface number: 186 but max is 0 [ 2183.567672][T14058] usb 6-1: config 4 has no interface number 0 [ 2183.567708][T14058] usb 6-1: config 4 interface 186 has no altsetting 0 [ 2183.571691][T14058] usb 6-1: New USB device found, idVendor=19d2, idProduct=1256, bcdDevice= d.bb [ 2183.571724][T14058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2183.571747][T14058] usb 6-1: Product: syz [ 2183.571763][T14058] usb 6-1: Manufacturer: 馜쥔镸࿁좘䐇ﶬ藱ﺘ䝆៺ǣ츝篔ᦴ㓩ⅎ赧姧鉚멘蒇斈ꃧ鬖㉢솿鸧¤ꈱ當ьﯜ杯嗈覥ᰂ [ 2183.571787][T14058] usb 6-1: SerialNumber: syz [ 2183.925743][T14058] option 6-1:4.186: GSM modem (1-port) converter detected [ 2183.956111][T14058] usb 6-1: USB disconnect, device number 65 [ 2183.970986][T14058] option 6-1:4.186: device disconnected [ 2184.906633][T29937] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2185.070927][T29937] usb 6-1: Using ep0 maxpacket: 16 [ 2185.074141][T29937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2185.074200][T29937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2185.074233][T29937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 2185.074263][T29937] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2185.074305][T29937] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2185.077168][T29937] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2185.077202][T29937] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2185.077227][T29937] usb 6-1: Manufacturer: syz [ 2185.216701][T29937] usb 6-1: config 0 descriptor?? [ 2185.549221][T29937] rc_core: IR keymap rc-hauppauge not found [ 2185.549246][T29937] Registered IR keymap rc-empty [ 2185.549711][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2185.570539][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2185.596099][T29937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2185.625936][T29937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input134 [ 2185.641038][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2185.654825][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2185.680192][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2185.698281][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2185.719889][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2185.746101][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2185.763296][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2185.784769][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2185.806840][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2185.829224][T29937] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2185.856025][T29937] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2185.856052][T29937] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2185.888621][T29937] usb 6-1: USB disconnect, device number 66 [ 2187.243690][T29639] sctp: [Deprecated]: syz.5.42189 (pid 29639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2187.243690][T29639] Use struct sctp_sack_info instead [ 2187.244640][T29639] sctp: [Deprecated]: syz.5.42189 (pid 29639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2187.244640][T29639] Use struct sctp_sack_info instead [ 2187.429673][T29647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.42192'. [ 2187.916913][T29672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.42205'. [ 2188.703981][T29715] netlink: 188 bytes leftover after parsing attributes in process `syz.6.42227'. [ 2190.469678][T29794] sg_write: data in/out 398301/274 bytes for SCSI command 0x0-- guessing data in; [ 2190.469678][T29794] program syz.6.42263 not setting count and/or reply_len properly [ 2190.907848][T29812] tipc: Started in network mode [ 2190.907881][T29812] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 2190.954231][T29812] tipc: Enabled bearer , priority 6 [ 2191.337755][T14058] hid_parser_main: 4007 callbacks suppressed [ 2191.337784][T14058] hid-generic 0003:0004:0000.0053: unknown main item tag 0x0 [ 2191.337817][T14058] hid-generic 0003:0004:0000.0053: unknown main item tag 0x0 [ 2191.337846][T14058] hid-generic 0003:0004:0000.0053: unknown main item tag 0x0 [ 2191.389934][T14058] hid-generic 0003:0004:0000.0053: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 2191.609590][T29835] fido_id[29835]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2192.114234][T14058] tipc: Node number set to 9480874 [ 2193.269683][T29923] tmpfs: Cannot enable quota on remount [ 2193.795106][T29937] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2193.959817][T29937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 2193.959872][T29937] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 2193.959900][T29937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.997424][T29937] usb 6-1: config 0 descriptor?? [ 2193.998683][T29936] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2194.464057][T29937] asus 0003:0B05:1ABE.0054: unknown main item tag 0x0 [ 2194.464097][T29937] asus 0003:0B05:1ABE.0054: unknown main item tag 0x0 [ 2194.464128][T29937] asus 0003:0B05:1ABE.0054: unknown main item tag 0x0 [ 2194.464156][T29937] asus 0003:0B05:1ABE.0054: unknown main item tag 0x0 [ 2194.464185][T29937] asus 0003:0B05:1ABE.0054: unknown main item tag 0x0 [ 2194.464213][T29937] asus 0003:0B05:1ABE.0054: unknown main item tag 0x0 [ 2194.464240][T29937] asus 0003:0B05:1ABE.0054: unknown main item tag 0x0 [ 2194.549390][T29937] asus 0003:0B05:1ABE.0054: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.5-1/input0 [ 2194.600595][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2194.600708][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2194.690153][T29937] usb 6-1: USB disconnect, device number 67 [ 2194.753742][T29980] fido_id[29980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2195.062655][T14816] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2195.717787][T30029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.42381'. [ 2195.943477][T30041] IPv6: syztnl1: Disabled Multicast RS [ 2196.037013][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2196.676436][T29937] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 2196.839775][ T5860] Bluetooth: hci4: command 0x0406 tx timeout [ 2196.847885][T29937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2196.847915][T29937] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2196.847975][T29937] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2196.848003][T29937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2196.909498][T29937] usb 6-1: config 0 descriptor?? [ 2196.931905][T29937] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2196.931953][T29937] dvb-usb: bulk message failed: -22 (3/0) [ 2196.964500][T29937] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2196.978336][T29937] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2196.978394][T29937] usb 6-1: media controller created [ 2196.996026][T29937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2197.290320][T29937] dvb-usb: bulk message failed: -22 (6/0) [ 2197.290439][T29937] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2197.316077][T29937] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input135 [ 2197.339472][T29937] dvb-usb: schedule remote query interval to 150 msecs. [ 2197.339499][T29937] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2197.364515][T29937] usb 6-1: USB disconnect, device number 68 [ 2197.514575][T29937] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2200.063099][T30220] sg_write: data in/out 262235/345 bytes for SCSI command 0x26-- guessing data in; [ 2200.063099][T30220] program syz.6.42472 not setting count and/or reply_len properly [ 2205.976083][T30336] netlink: 'syz.6.42523': attribute type 29 has an invalid length. [ 2206.563613][T30352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.42531'. [ 2206.829023][T30367] 9p: p9: multiple sources not supported [ 2206.922169][T30371] binder: 30370:30371 ioctl c018620b 200000000240 returned -14 [ 2208.294279][ T6045] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2208.457775][ T6045] usb 6-1: Using ep0 maxpacket: 32 [ 2208.465766][ T6045] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2208.465803][ T6045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2208.465827][ T6045] usb 6-1: Product: syz [ 2208.465845][ T6045] usb 6-1: Manufacturer: syz [ 2208.465862][ T6045] usb 6-1: SerialNumber: syz [ 2208.497434][ T6045] usb 6-1: config 0 descriptor?? [ 2208.538919][ T6045] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2209.199197][ T6045] gspca_ov534_9: reg_w failed -71 [ 2209.540424][ T6045] gspca_ov534_9: Unknown sensor 0000 [ 2209.540513][ T6045] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 2209.549963][ T6045] usb 6-1: USB disconnect, device number 69 [ 2209.753485][T30509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.42607'. [ 2210.602730][ T6045] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2210.786600][ T6045] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2210.789362][ T6045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2210.789391][ T6045] usb 6-1: Product: syz [ 2210.789408][ T6045] usb 6-1: Manufacturer: syz [ 2210.789425][ T6045] usb 6-1: SerialNumber: syz [ 2210.831473][ T6045] usb 6-1: config 0 descriptor?? [ 2210.856662][ T6045] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2210.930450][ T6045] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2210.939429][ T6045] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2210.939623][ T6045] usb 6-1: media controller created [ 2211.101674][ T6045] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2211.463949][ T6045] DVB: Unable to find symbol mt352_attach() [ 2211.633495][ T6045] DVB: Unable to find symbol nxt6000_attach() [ 2211.633514][ T6045] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2211.645503][ T6045] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input136 [ 2211.814180][ T6045] dvb-usb: schedule remote query interval to 1000 msecs. [ 2211.814211][ T6045] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2211.814232][ T6045] dvb-usb: bulk message failed: -22 (7/0) [ 2211.814251][ T6045] dvb-usb: bulk message failed: -22 (7/0) [ 2211.854859][ T6045] usb 6-1: USB disconnect, device number 70 [ 2212.091186][T30595] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 2212.205886][ T6045] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2214.024343][T30690] fuse: Bad value for 'group_id' [ 2214.024368][T30690] fuse: Bad value for 'group_id' [ 2219.349266][T29937] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2219.511084][T29937] usb 6-1: Using ep0 maxpacket: 32 [ 2219.514245][T29937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2219.514280][T29937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2219.514696][T29937] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 2219.514726][T29937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.576235][T29937] usb 6-1: config 0 descriptor?? [ 2220.037257][T29937] hid_parser_main: 469 callbacks suppressed [ 2220.037284][T29937] koneplus 0003:1E7D:2D51.0055: unknown main item tag 0x0 [ 2220.037318][T29937] koneplus 0003:1E7D:2D51.0055: unknown main item tag 0x0 [ 2220.037346][T29937] koneplus 0003:1E7D:2D51.0055: unknown main item tag 0x0 [ 2220.037374][T29937] koneplus 0003:1E7D:2D51.0055: unknown main item tag 0x0 [ 2220.037404][T29937] koneplus 0003:1E7D:2D51.0055: unknown main item tag 0x0 [ 2220.041212][T29937] koneplus 0003:1E7D:2D51.0055: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 2220.251670][T29937] koneplus 0003:1E7D:2D51.0055: couldn't init struct koneplus_device [ 2220.251730][T29937] koneplus 0003:1E7D:2D51.0055: couldn't install mouse [ 2220.257646][T29937] koneplus 0003:1E7D:2D51.0055: probe with driver koneplus failed with error -71 [ 2220.289369][T29937] usb 6-1: USB disconnect, device number 71 [ 2222.024424][T30962] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.42826'. [ 2225.652036][T31104] Failed to get privilege flags for destination (handle=0x2:0x0) [ 2225.905374][T29937] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2226.071486][T29937] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 2226.071521][T29937] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 2226.071544][T29937] usb 6-1: config 0 has no interface number 0 [ 2226.103291][T29937] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 2226.103326][T29937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.103351][T29937] usb 6-1: Product: syz [ 2226.103369][T29937] usb 6-1: Manufacturer: syz [ 2226.103385][T29937] usb 6-1: SerialNumber: syz [ 2226.121556][T29937] usb 6-1: config 0 descriptor?? [ 2226.577956][T29937] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 2226.577996][T29937] uvcvideo 6-1:0.64: No valid video chain found. [ 2226.802932][T29937] usb 6-1: USB disconnect, device number 72 [ 2228.409720][T29937] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2228.578198][T29937] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2228.578235][T29937] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2228.578264][T29937] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2228.620100][T29937] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2228.620135][T29937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.620159][T29937] usb 6-1: Product: syz [ 2228.620175][T29937] usb 6-1: Manufacturer: syz [ 2228.620193][T29937] usb 6-1: SerialNumber: syz [ 2228.671647][T29937] usb 6-1: config 0 descriptor?? [ 2228.672767][T31218] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2228.673062][T31218] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2228.675548][T29937] usb 6-1: ucan: probing device on interface #0 [ 2228.799498][ T1135] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2229.392439][T29937] ucan 6-1:0.0 can0: registered device [ 2229.564826][T29937] ucan 6-1:0.0 can0: firmware string: unknown [ 2229.584133][T29937] usb 6-1: USB disconnect, device number 73 [ 2230.814766][T29937] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2230.988140][T29937] usb 6-1: Using ep0 maxpacket: 8 [ 2230.990432][T29937] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 2230.990461][T29937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2230.990488][T29937] usb 6-1: config 0 has no interface number 0 [ 2230.990522][T29937] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 74, changing to 10 [ 2230.990544][T29937] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2230.990564][T29937] usb 6-1: config 0 interface 52 has no altsetting 0 [ 2230.992384][T29937] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 2230.992415][T29937] usb 6-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 2230.992440][T29937] usb 6-1: Product: syz [ 2230.992451][T29937] usb 6-1: SerialNumber: syz [ 2230.996873][T29937] usb 6-1: config 0 descriptor?? [ 2231.254286][T29937] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input137 [ 2231.452025][ C1] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 2231.452032][ T5858] usb 6-1: USB disconnect, device number 74 [ 2234.803453][ T5858] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2234.971622][ T5858] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2234.971654][ T5858] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2234.971679][ T5858] usb 6-1: config 1 has no interface number 0 [ 2234.971726][ T5858] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2234.974269][ T5858] usb 6-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40 [ 2234.974303][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.974325][ T5858] usb 6-1: Product: syz [ 2234.974336][ T5858] usb 6-1: Manufacturer: syz [ 2234.974348][ T5858] usb 6-1: SerialNumber: syz [ 2235.055769][ T5858] cdc_ncm 6-1:1.1: skipping garbage [ 2235.055792][ T5858] usb 6-1: selecting invalid altsetting 1 [ 2235.935140][ T5858] cdc_ncm 6-1:1.1: SET_NTB_FORMAT failed [ 2235.950819][ T5858] usb 6-1: selecting invalid altsetting 1 [ 2235.950864][ T5858] cdc_ncm 6-1:1.1: bind() failure [ 2235.976918][ T5858] usb 6-1: USB disconnect, device number 75 [ 2236.824094][T31494] input: syz1 as /devices/virtual/input/input139 [ 2240.464511][T31643] dvmrp1: entered allmulticast mode [ 2241.048971][T31665] vcan0 speed is unknown, defaulting to 1000 [ 2241.690096][T31665] lo speed is unknown, defaulting to 1000 [ 2242.877899][ T6045] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2243.088473][ T6045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2243.088512][ T6045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2243.088555][ T6045] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 2243.088583][ T6045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.146123][ T6045] usb 6-1: config 0 descriptor?? [ 2243.619053][ T6045] hid-thrustmaster 0003:044F:B65D.0056: unknown main item tag 0x0 [ 2243.619092][ T6045] hid-thrustmaster 0003:044F:B65D.0056: unknown main item tag 0x0 [ 2243.619121][ T6045] hid-thrustmaster 0003:044F:B65D.0056: unknown main item tag 0x0 [ 2243.619149][ T6045] hid-thrustmaster 0003:044F:B65D.0056: item fetching failed at offset 3/7 [ 2243.621731][ T6045] hid-thrustmaster 0003:044F:B65D.0056: parse failed with error -22 [ 2243.621820][ T6045] hid-thrustmaster 0003:044F:B65D.0056: probe with driver hid-thrustmaster failed with error -22 [ 2243.859433][T14058] usb 6-1: USB disconnect, device number 76 [ 2245.023023][ T5858] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2245.187317][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 2245.189822][ T5858] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 2245.189868][ T5858] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2245.189936][ T5858] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2245.189967][ T5858] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2245.189998][ T5858] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2245.193056][ T5858] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2245.193089][ T5858] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2245.193115][ T5858] usb 6-1: Product: syz [ 2245.193131][ T5858] usb 6-1: Manufacturer: syz [ 2245.193149][ T5858] usb 6-1: SerialNumber: syz [ 2245.307317][ T5858] usb 6-1: config 0 descriptor?? [ 2245.344963][ T5858] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2245.470882][ T5858] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2245.687259][ T5858] usb 6-1: USB disconnect, device number 77 [ 2245.736548][ T5858] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 2249.098691][T32000] netlink: 104 bytes leftover after parsing attributes in process `syz.6.43336'. [ 2249.191773][T32003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.43337'. [ 2249.665621][T32033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.43351'. [ 2249.842951][T32039] loop5: detected capacity change from 0 to 7 [ 2250.046902][T30303] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.121874][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2250.122082][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 2250.122363][T30303] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.122421][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2250.122453][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 2250.234232][T30288] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.234312][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2250.234362][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2250.234646][T30288] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.234706][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2250.234736][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2250.235082][T30288] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.235142][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2250.235172][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2250.235486][T30288] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.235770][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2250.235798][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2250.262925][T30288] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.263110][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2250.263180][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2250.263514][T32039] ldm_validate_partition_table(): Disk read failed. [ 2250.264267][T30288] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.264376][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2250.264482][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2250.287465][ T8238] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.287677][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2250.287710][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2250.471066][T14817] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.471533][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2250.471567][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2250.499667][T14817] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.501018][T32039] Dev loop5: unable to read RDB block 0 [ 2250.501476][T14817] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.502203][T14817] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.506255][T14817] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.516961][T14817] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 2250.518840][T32039] loop5: unable to read partition table [ 2250.519526][T32039] loop5: partition table beyond EOD, truncated [ 2250.519634][T32039] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 2250.700537][T14817] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 2250.829357][T14817] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 2250.830672][T14817] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 2250.869396][T14817] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 2250.871542][T14817] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 2250.956702][T24100] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 2251.222567][T32087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.43378'. [ 2253.415279][T32176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2254.582401][T32241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2257.609425][T32231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2258.964336][T32321] bridge0: port 3(wlan1) entered blocking state [ 2258.974549][T32321] bridge0: port 3(wlan1) entered disabled state [ 2259.036667][T32321] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 2259.190371][T32321] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 2261.167270][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2261.167383][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2262.493623][ T6045] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2262.539747][T30303] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2262.658557][ T6045] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 2262.658590][ T6045] usb 6-1: config 0 has no interface number 0 [ 2262.658639][ T6045] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2262.665712][ T6045] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2262.665753][ T6045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.665811][ T6045] usb 6-1: Product: syz [ 2262.665864][ T6045] usb 6-1: Manufacturer: syz [ 2262.665908][ T6045] usb 6-1: SerialNumber: syz [ 2262.735123][ T6045] usb 6-1: config 0 descriptor?? [ 2262.882865][ T6045] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 2262.971529][T29937] usb 6-1: USB disconnect, device number 78 [ 2263.036019][T29937] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 2264.874759][ T38] audit: type=1326 audit(2102.163:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32518 comm="syz.5.43582" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8373dcce59 code=0x0 [ 2267.492684][T32621] Invalid argument reading file caps for ./file0 [ 2268.132448][T14058] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2268.291429][T14058] usb 6-1: Using ep0 maxpacket: 16 [ 2268.293862][T14058] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2268.293929][T14058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2268.293963][T14058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 2268.293994][T14058] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2268.294021][T14058] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2268.296528][T14058] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2268.296558][T14058] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2268.296582][T14058] usb 6-1: Manufacturer: syz [ 2268.396834][T14058] usb 6-1: config 0 descriptor?? [ 2268.724755][T14058] rc_core: IR keymap rc-hauppauge not found [ 2268.724778][T14058] Registered IR keymap rc-empty [ 2268.725251][T14058] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2268.753408][T14058] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2268.772378][T14058] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2268.777917][T14058] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input140 [ 2268.835886][T14058] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2268.855686][T14058] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2268.877934][T14058] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2268.899581][T14058] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2268.921140][T14058] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2268.942026][T14058] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2268.963570][T14058] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2268.985242][T14058] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2269.007351][T14058] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2269.028588][T14058] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 2269.079460][T14058] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2269.079490][T14058] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2269.157707][ T6045] usb 6-1: USB disconnect, device number 79 [ 2271.169103][T32748] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2275.574209][T32229] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2275.738876][T32229] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2275.738912][T32229] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2275.740231][T32229] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2275.740263][T32229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2275.740279][T32229] usb 6-1: SerialNumber: syz [ 2276.022457][T32229] usb 6-1: 0:2 : does not exist [ 2276.059760][T32229] usb 6-1: USB disconnect, device number 80 [ 2276.124440][T24100] udevd[24100]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2276.827445][ T464] pimreg: entered allmulticast mode [ 2276.830636][ T464] pimreg: left allmulticast mode [ 2278.760452][ T6045] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2278.936993][ T6045] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2278.937056][ T6045] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2278.937089][ T6045] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2278.937107][ T6045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2278.941123][ T6045] usb 6-1: config 0 descriptor?? [ 2278.955777][ T6045] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2279.170776][T32229] usb 6-1: USB disconnect, device number 81 [ 2280.607458][ T548] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 2281.137403][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2281.217471][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2281.247974][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2281.249453][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2281.250395][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2282.000955][ T599] 9pnet: p9_errstr2errno: server reported unknown error [ 2282.259543][ T617] input: syz1 as /devices/virtual/input/input141 [ 2282.411974][ T565] vcan0 speed is unknown, defaulting to 1000 [ 2283.013945][ T565] lo speed is unknown, defaulting to 1000 [ 2283.694121][T29978] Bluetooth: hci3: command tx timeout [ 2284.107892][ T565] bridge0: port 1(bridge_slave_0) entered blocking state [ 2284.108233][ T565] bridge0: port 1(bridge_slave_0) entered disabled state [ 2284.108472][ T565] bridge_slave_0: entered allmulticast mode [ 2284.111162][ T565] bridge_slave_0: entered promiscuous mode [ 2284.119285][ T565] bridge0: port 2(bridge_slave_1) entered blocking state [ 2284.120007][ T565] bridge0: port 2(bridge_slave_1) entered disabled state [ 2284.120903][ T565] bridge_slave_1: entered allmulticast mode [ 2284.132998][ T565] bridge_slave_1: entered promiscuous mode [ 2284.223594][ T565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2284.230135][ T565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2284.299966][ T565] team0: Port device team_slave_0 added [ 2284.305033][ T565] team0: Port device team_slave_1 added [ 2284.352930][ T565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2284.352945][ T565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2284.352968][ T565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2284.355904][ T565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2284.355916][ T565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2284.355938][ T565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2284.524718][ T565] hsr_slave_0: entered promiscuous mode [ 2284.529677][ T565] hsr_slave_1: entered promiscuous mode [ 2284.533851][ T565] debugfs: 'hsr0' already exists in 'hsr' [ 2284.533879][ T565] Cannot create hsr debugfs directory [ 2285.250042][ T565] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2285.268389][ T565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2285.269821][ T565] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2285.322819][ T565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2285.324081][ T565] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2285.466058][ T565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2285.477021][ T565] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2285.499618][ T565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2285.753876][ T565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2285.796797][ T565] 8021q: adding VLAN 0 to HW filter on device team0 [ 2285.815237][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 2285.815388][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2285.866471][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 2285.866679][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2285.950340][T29978] Bluetooth: hci3: command tx timeout [ 2287.123474][ T565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2288.200135][T29978] Bluetooth: hci3: command tx timeout [ 2288.334501][ T565] veth0_vlan: entered promiscuous mode [ 2288.470977][ T565] veth1_vlan: entered promiscuous mode [ 2288.650136][ T565] veth0_macvtap: entered promiscuous mode [ 2288.664835][ T565] veth1_macvtap: entered promiscuous mode [ 2288.704402][ T565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2288.727203][ T565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2288.766091][T30282] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2288.766369][T30282] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2288.766411][T30282] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2288.766450][T30282] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2290.011445][T30282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2290.011468][T30282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2290.113891][T25698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2290.113915][T25698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2290.460417][T29978] Bluetooth: hci3: command tx timeout [ 2296.276637][T25698] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2299.034144][ T1118] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2301.611602][ T1247] input: syz0 as /devices/virtual/input/input142 [ 2302.294731][ T1283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.44138'. [ 2307.631296][ T1424] vcan0 speed is unknown, defaulting to 1000 [ 2307.877006][ T1424] lo speed is unknown, defaulting to 1000 [ 2309.228165][ T1467] binder: 1466:1467 ioctl c0306201 200000000640 returned -22 [ 2319.484541][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2319.543159][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2319.547638][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2319.551604][ T5860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2319.589506][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2320.813227][ T1654] vcan0 speed is unknown, defaulting to 1000 [ 2321.244901][ T1654] lo speed is unknown, defaulting to 1000 [ 2321.817158][ T1654] bridge0: port 1(bridge_slave_0) entered blocking state [ 2321.817539][ T1654] bridge0: port 1(bridge_slave_0) entered disabled state [ 2321.817818][ T1654] bridge_slave_0: entered allmulticast mode [ 2321.842918][ T1654] bridge_slave_0: entered promiscuous mode [ 2321.853810][ T1654] bridge0: port 2(bridge_slave_1) entered blocking state [ 2321.854159][ T1654] bridge0: port 2(bridge_slave_1) entered disabled state [ 2321.854438][ T1654] bridge_slave_1: entered allmulticast mode [ 2321.860426][ T1654] bridge_slave_1: entered promiscuous mode [ 2321.926692][T29978] Bluetooth: hci5: command tx timeout [ 2321.946414][ T1654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2321.985674][ T1654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2322.047313][ T1654] team0: Port device team_slave_0 added [ 2322.051787][ T1654] team0: Port device team_slave_1 added [ 2322.104826][ T1654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2322.104845][ T1654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2322.104877][ T1654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2322.109162][ T1654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2322.109181][ T1654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2322.109214][ T1654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2322.339174][ T1654] hsr_slave_0: entered promiscuous mode [ 2322.341698][ T1654] hsr_slave_1: entered promiscuous mode [ 2322.357299][ T1654] debugfs: 'hsr0' already exists in 'hsr' [ 2322.357363][ T1654] Cannot create hsr debugfs directory [ 2322.682231][T14817] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2323.334980][T14817] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2323.829154][T14817] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2324.180884][T29978] Bluetooth: hci5: command tx timeout [ 2324.365711][T14817] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.487588][ T1654] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2325.547663][ T1654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2325.549298][ T1654] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2325.598075][ T1654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2325.603332][ T1654] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2325.734716][ T1654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2325.751432][ T1654] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2325.942526][ T1654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2326.435248][T29978] Bluetooth: hci5: command tx timeout [ 2327.137134][T14817] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 2327.267869][T14817] mac80211_hwsim hwsim22 wlan1: left promiscuous mode [ 2327.268372][T14817] bridge0: port 3(wlan1) entered disabled state [ 2327.444051][T14817] bridge_slave_1: left allmulticast mode [ 2327.444079][T14817] bridge_slave_1: left promiscuous mode [ 2327.444333][T14817] bridge0: port 2(bridge_slave_1) entered disabled state [ 2327.682894][T14817] bridge_slave_0: left allmulticast mode [ 2327.682923][T14817] bridge_slave_0: left promiscuous mode [ 2327.683208][T14817] bridge0: port 1(bridge_slave_0) entered disabled state [ 2327.749006][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2327.749101][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2328.689382][T29978] Bluetooth: hci5: command tx timeout [ 2328.852803][T14817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2328.919888][T14817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2328.962823][T14817] bond0 (unregistering): Released all slaves [ 2328.997697][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2329.185685][ T1654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2329.320135][ T1654] 8021q: adding VLAN 0 to HW filter on device team0 [ 2329.339528][T30303] bridge0: port 1(bridge_slave_0) entered blocking state [ 2329.339679][T30303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2329.414881][T30303] bridge0: port 2(bridge_slave_1) entered blocking state [ 2329.415056][T30303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2329.917285][ T8238] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2331.519594][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2332.106471][ T1654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2333.954195][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2335.080580][ T1909] syzkaller1: entered promiscuous mode [ 2335.080609][ T1909] syzkaller1: entered allmulticast mode [ 2336.229866][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2336.565227][ T1654] veth0_vlan: entered promiscuous mode [ 2336.749903][ T1654] veth1_vlan: entered promiscuous mode [ 2337.185722][ T1654] veth0_macvtap: entered promiscuous mode [ 2337.327934][ T1654] veth1_macvtap: entered promiscuous mode [ 2337.540642][ T1654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2338.022075][T14817] hsr_slave_0: left promiscuous mode [ 2338.067367][T14817] hsr_slave_1: left promiscuous mode [ 2338.072014][T14817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2338.072040][T14817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2338.148273][T14817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2338.148303][T14817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2338.687517][T14817] veth1_macvtap: left promiscuous mode [ 2338.687622][T14817] veth0_macvtap: left promiscuous mode [ 2338.822065][T14817] veth1_vlan: left promiscuous mode [ 2340.291559][ T2044] binder: 2041:2044 ioctl c0306201 200000000080 returned -14 [ 2340.318142][ T2044] binder: 2041:2044 ioctl c0306201 2000000003c0 returned -14 [ 2341.514059][T14817] team0 (unregistering): Port device team_slave_1 removed [ 2341.575940][T14817] team0 (unregistering): Port device team_slave_0 removed [ 2341.834306][T32229] lo speed is unknown, defaulting to 1000 [ 2341.834376][T32229] syz2: Port: 1 Link DOWN [ 2341.850657][T30288] smbdirect: ib_dev[syz2] removed [ 2341.889625][ T1654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2341.949137][T30307] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2341.951520][T30307] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2341.954130][T30307] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2342.006254][T30307] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2342.173434][ T2094] tipc: Failed to remove unknown binding: 66,0,0/0:4085445573/4085445574 [ 2342.173806][ T2094] tipc: Failed to remove unknown binding: 66,0,0/0:4085445573/4085445574 [ 2344.448319][T30288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2344.448341][T30288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2344.587461][T14816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2344.587484][T14816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2346.353628][ T2175] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 2346.423138][ T2175] kvm: requested 193600 ns i8254 timer period limited to 200000 ns [ 2346.423331][ T2175] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 2346.423518][ T2175] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 2346.425888][ T2175] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 2346.427026][ T2175] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 2346.427206][ T2175] kvm: requested 94704 ns i8254 timer period limited to 200000 ns [ 2346.429186][ T2175] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 2346.534538][ T2175] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 2346.540697][ T2175] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 2347.254802][ T38] audit: type=1326 audit(2178.185:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2209 comm="syz.7.44514" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f829be1ce59 code=0x0 [ 2364.081228][ T44] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2394.333582][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2394.333721][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2397.707283][ T44] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2418.771588][T29978] Bluetooth: hci3: command 0x0406 tx timeout [ 2431.333550][T30282] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2452.075839][ T5860] Bluetooth: hci5: command 0x0406 tx timeout [ 2460.913757][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2460.913873][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2464.959429][T30282] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2476.861484][ T39] [ 2476.861484][ T39] INFO: task syz.6.44148:1309 blocked for more than 143 seconds. [ 2476.861515][ T39] Tainted: G L syzkaller #0 [ 2476.861528][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2476.861539][ T39] task:syz.6.44148 state:D stack:28040 pid:1309 tgid:1302 ppid:24914 task_flags:0x400040 flags:0x00080002 [ 2476.861611][ T39] Call Trace: [ 2476.861620][ T39] [ 2476.861637][ T39] __schedule+0x16f9/0x5500 [ 2476.861692][ T39] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 2476.861728][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2476.861781][ T39] ? __pfx___schedule+0x10/0x10 [ 2476.861823][ T39] ? schedule+0x90/0x360 [ 2476.861857][ T39] schedule+0x164/0x360 [ 2476.861891][ T39] cgroup_lock_and_drain_offline+0x516/0x650 [ 2476.861939][ T39] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 2476.861976][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2476.862027][ T39] cgroup_kn_lock_live+0x120/0x230 [ 2476.862064][ T39] cgroup_subtree_control_write+0x4b3/0x10a0 [ 2476.862113][ T39] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 2476.862149][ T39] ? kernfs_root+0x1c/0x230 [ 2476.862181][ T39] ? kernfs_root+0x1c/0x230 [ 2476.862215][ T39] ? kernfs_root+0x1ea/0x230 [ 2476.862250][ T39] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 2476.862285][ T39] cgroup_file_write+0x331/0x8f0 [ 2476.862324][ T39] ? __pfx_cgroup_file_write+0x10/0x10 [ 2476.862355][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2476.862402][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 2476.862448][ T39] ? __pfx_cgroup_file_write+0x10/0x10 [ 2476.862478][ T39] kernfs_fop_write_iter+0x3b0/0x540 [ 2476.862512][ T39] vfs_write+0x629/0xba0 [ 2476.862545][ T39] ? __pfx_vfs_write+0x10/0x10 [ 2476.862593][ T39] ? mutex_lock_nested+0x168/0x1d0 [ 2476.862618][ T39] ? __fget_files+0x2a/0x420 [ 2476.862660][ T39] ksys_write+0x156/0x270 [ 2476.862686][ T39] ? __pfx_ksys_write+0x10/0x10 [ 2476.862708][ T39] ? __pfx_kcov_ioctl+0x10/0x10 [ 2476.862795][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2476.862822][ T39] do_syscall_64+0x15f/0xf80 [ 2476.862885][ T39] ? trace_irq_disable+0x3b/0x140 [ 2476.862921][ T39] ? clear_bhb_loop+0x40/0x90 [ 2476.862951][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2476.862975][ T39] RIP: 0033:0x7f819c69ce59 [ 2476.862997][ T39] RSP: 002b:00007f819a8d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2476.863022][ T39] RAX: ffffffffffffffda RBX: 00007f819c916090 RCX: 00007f819c69ce59 [ 2476.863039][ T39] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000005 [ 2476.863055][ T39] RBP: 00007f819c732d6f R08: 0000000000000000 R09: 0000000000000000 [ 2476.863070][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2476.863084][ T39] R13: 00007f819c916128 R14: 00007f819c916090 R15: 00007ffdf3b8d388 [ 2476.863121][ T39] [ 2476.863157][ T39] [ 2476.863157][ T39] Showing all locks held in the system: [ 2476.863170][ T39] 1 lock held by khungtaskd/39: [ 2476.863184][ T39] #0: ffffffff8e1ca240 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2476.863240][ T39] 5 locks held by kworker/u8:2/44: [ 2476.863254][ T39] #0: ffff888032933938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2476.863318][ T39] #1: ffffc90000b57c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2476.863384][ T39] #2: ffffffff8e1ca240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 2476.863448][ T39] #3: ffffffff8e1ca240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 2476.863514][ T39] #4: ffff88805c549d58 (&hash->list_locks[i]){+...}-{3:3}, at: __batadv_dat_purge+0x131/0x400 [ 2476.863600][ T39] 2 locks held by getty/5366: [ 2476.863613][ T39] #0: ffff88803614b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2476.863673][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 2476.863759][ T39] 3 locks held by syz.6.44148/1309: [ 2476.863773][ T39] #0: ffff88803674bb28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 2476.863837][ T39] #1: ffff88803c322480 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 2476.863892][ T39] #2: ffff888068e23c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2476.863948][ T39] [ 2476.863954][ T39] ============================================= [ 2476.863954][ T39] [ 2476.863971][ T39] NMI backtrace for cpu 1 [ 2476.863991][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2476.864021][ T39] Tainted: [L]=SOFTLOCKUP [ 2476.864029][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2476.864043][ T39] Call Trace: [ 2476.864052][ T39] [ 2476.864061][ T39] dump_stack_lvl+0xe8/0x150 [ 2476.864091][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 2476.864119][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2476.864148][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2476.864177][ T39] sys_info+0x135/0x170 [ 2476.864201][ T39] watchdog+0xfd3/0x1030 [ 2476.864241][ T39] ? watchdog+0x1c9/0x1030 [ 2476.864280][ T39] kthread+0x389/0x470 [ 2476.864305][ T39] ? __pfx_watchdog+0x10/0x10 [ 2476.864336][ T39] ? __pfx_kthread+0x10/0x10 [ 2476.864362][ T39] ret_from_fork+0x514/0xb70 [ 2476.864393][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 2476.864420][ T39] ? __switch_to+0xc79/0x1410 [ 2476.864444][ T39] ? __pfx_kthread+0x10/0x10 [ 2476.864490][ T39] ret_from_fork_asm+0x1a/0x30 [ 2476.864539][ T39] [ 2476.864548][ T39] Sending NMI from CPU 1 to CPUs 0: [ 2476.864587][ C0] NMI backtrace for cpu 0 [ 2476.864608][ C0] CPU: 0 UID: 0 PID: 14816 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2476.864635][ C0] Tainted: [L]=SOFTLOCKUP [ 2476.864642][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2476.864656][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 2476.864682][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x80 [ 2476.864711][ C0] Code: d1 10 81 e6 00 00 ff 00 ba 00 01 00 00 23 91 e4 0b 00 00 89 d7 09 f7 74 11 85 f6 75 39 85 d2 74 35 83 b9 bc 16 00 00 00 74 2c <8b> 91 98 16 00 00 83 fa 02 75 21 48 8b 91 a0 16 00 00 48 8b 32 48 [ 2476.864739][ C0] RSP: 0018:ffffc9000fff75b8 EFLAGS: 00000246 [ 2476.864754][ C0] RAX: ffffffff89110300 RBX: 0000000000118f80 RCX: ffff888029cebd80 [ 2476.864769][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2476.864780][ C0] RBP: ffffc9000fff7760 R08: 0000000000000000 R09: 0000000000000000 [ 2476.864792][ C0] R10: ffffc9000fff7520 R11: fffff52001ffeea8 R12: e00000000cb23093 [ 2476.864806][ C0] R13: e00000000cb23092 R14: 1ffffffff34dcf6c R15: e00000000cb23092 [ 2476.864821][ C0] FS: 0000000000000000(0000) GS:ffff888125cab000(0000) knlGS:0000000000000000 [ 2476.864836][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2476.864849][ C0] CR2: 000055dfab83ade8 CR3: 000000000dfb8000 CR4: 00000000003526f0 [ 2476.864866][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 2476.864879][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2476.864892][ C0] Call Trace: [ 2476.864899][ C0] [ 2476.864907][ C0] save_dst_trace_buffer+0x1e0/0x5b0 [ 2476.864932][ C0] ? __pfx_save_dst_trace_buffer+0x10/0x10 [ 2476.864950][ C0] ? dst_cache_per_cpu_dst_set+0xe4/0x1c0 [ 2476.864973][ C0] ? dst_cache_set_ip6+0x40a/0x580 [ 2476.864995][ C0] ? send6+0x533/0x910 [ 2476.865014][ C0] ? wg_socket_send_skb_to_peer+0x128/0x200 [ 2476.865037][ C0] ? wg_packet_handshake_send_worker+0x203/0x350 [ 2476.865059][ C0] ? process_one_work+0x98b/0x1630 [ 2476.865083][ C0] ? worker_thread+0xb49/0x1140 [ 2476.865108][ C0] ? kthread+0x389/0x470 [ 2476.865126][ C0] ? ret_from_fork+0x514/0xb70 [ 2476.865146][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 2476.865176][ C0] ? dst_cache_set_ip6+0x170/0x580 [ 2476.865201][ C0] ? dst_release+0x7f/0x1b0 [ 2476.865221][ C0] dst_cache_per_cpu_dst_set+0xe4/0x1c0 [ 2476.865247][ C0] dst_cache_set_ip6+0x40a/0x580 [ 2476.865269][ C0] ? dst_cache_set_ip6+0x170/0x580 [ 2476.865293][ C0] send6+0x533/0x910 [ 2476.865320][ C0] ? send6+0x255/0x910 [ 2476.865341][ C0] ? __pfx_send6+0x10/0x10 [ 2476.865361][ C0] ? rcu_is_watching+0x15/0xb0 [ 2476.865393][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 2476.865420][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 2476.865444][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 2476.865468][ C0] wg_socket_send_skb_to_peer+0x128/0x200 [ 2476.865494][ C0] wg_packet_handshake_send_worker+0x203/0x350 [ 2476.865525][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 2476.865564][ C0] ? process_one_work+0x8be/0x1630 [ 2476.865588][ C0] process_one_work+0x98b/0x1630 [ 2476.865626][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2476.865650][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 2476.865687][ C0] worker_thread+0xb49/0x1140 [ 2476.865727][ C0] kthread+0x389/0x470 [ 2476.865747][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2476.865773][ C0] ? __pfx_kthread+0x10/0x10 [ 2476.865793][ C0] ret_from_fork+0x514/0xb70 [ 2476.865817][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2476.865839][ C0] ? __switch_to+0xc79/0x1410 [ 2476.865858][ C0] ? __pfx_kthread+0x10/0x10 [ 2476.865878][ C0] ret_from_fork_asm+0x1a/0x30 [ 2476.865912][ C0] [ 2476.868239][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 2476.868264][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2476.868295][ T39] Tainted: [L]=SOFTLOCKUP [ 2476.868304][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2476.868318][ T39] Call Trace: [ 2476.868328][ T39] [ 2476.868338][ T39] vpanic+0x56c/0xa60 [ 2476.868376][ T39] ? __pfx___schedule+0x10/0x10 [ 2476.868408][ T39] ? __pfx_vpanic+0x10/0x10 [ 2476.868452][ T39] panic+0xc5/0xd0 [ 2476.868484][ T39] ? __pfx_panic+0x10/0x10 [ 2476.868518][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 2476.868560][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2476.868593][ T39] watchdog+0x102c/0x1030 [ 2476.868635][ T39] ? watchdog+0x1c9/0x1030 [ 2476.868675][ T39] kthread+0x389/0x470 [ 2476.868700][ T39] ? __pfx_watchdog+0x10/0x10 [ 2476.868734][ T39] ? __pfx_kthread+0x10/0x10 [ 2476.868771][ T39] ret_from_fork+0x514/0xb70 [ 2476.868804][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 2476.868834][ T39] ? __switch_to+0xc79/0x1410 [ 2476.868860][ T39] ? __pfx_kthread+0x10/0x10 [ 2476.868883][ T39] ret_from_fork_asm+0x1a/0x30 [ 2476.868926][ T39] [ 2476.869531][ T39] Kernel Offset: disabled