last executing test programs: 19.182982915s ago: executing program 4 (id=5846): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000400)="b9ff03310644268cb89614e886dd6f8ec0a5fa7a80339e916b28fea3fc5c6afe0189acc82c8112eb153b3415124ef9ab1d0dd98b72de", 0x0, 0x8003, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 18.876452567s ago: executing program 4 (id=5848): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 18.080928249s ago: executing program 4 (id=5851): r0 = socket$inet6(0xa, 0x5, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @private2, 0x4}, 0x1c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x4) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) close(0xffffffffffffffff) r5 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040), 0x0, 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000070000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000004400038040000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 15.950549366s ago: executing program 4 (id=5862): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"d0942af5df8606a6af15b416ea66c7e1", 0x0, 0x0, {0x1, 0x1}, {0x1, 0x3}, 0x9, [0xfff, 0x6, 0x1, 0x3, 0x5, 0x6, 0x8, 0x7, 0x198, 0x80, 0x9, 0x6, 0x2, 0x7fff, 0x10000, 0x35]}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/19, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000007000050401000000000000", @ANYRES32=r1, @ANYBLOB="14000180080001000000010005"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 15.737058249s ago: executing program 4 (id=5865): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0xaa180) 12.292456979s ago: executing program 4 (id=5892): r0 = socket$inet6(0xa, 0x5, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @private2, 0x4}, 0x1c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x4) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) close(0xffffffffffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x3, 0xc, 0x9, 0x3, 0x1, 0xe, 0x8, 0x18, 0x7, 0x7f, 0x3, 0x3e}, 0xe) close(0x3) fsetxattr$security_evm(r0, &(0x7f0000000040), 0x0, 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="400000002600090122bd7008faffffff0200000024003d802000e68008005800", @ANYRES32, @ANYBLOB="11006d80040074800400b480a4de5d99190000000800030047000000"], 0x40}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000070000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000004400038040000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 5.720537982s ago: executing program 1 (id=5916): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000340)={0x0, "72a59baeb6c10b67b134a5f267418d0000000000000000000000820f2cf9ff6c8d2600", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, 0x0) 5.354803573s ago: executing program 2 (id=5921): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x5b) keyctl$revoke(0x3, r0) 5.319589863s ago: executing program 3 (id=5922): r0 = socket$inet6(0xa, 0x5, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @private2, 0x4}, 0x1c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x4) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) close(0xffffffffffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040), 0x0, 0x0, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000070000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000004400038040000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 5.300089658s ago: executing program 2 (id=5923): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.060276149s ago: executing program 2 (id=5924): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffff07, 0x0, 0x1000000c, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x50000, 0x4000}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) 4.72008689s ago: executing program 1 (id=5925): add_key(0x0, 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201013014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0x73, 0xffffffffffffffff) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f00000003c0)={0x0, 0xd9a0, 0x100, 0x2, 0x1e5}, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x3, 0x158, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x22, &(0x7f00000004c0)=@new_dev={0x4, 0x177, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000500)={0x0, 0x1, 0x800, 0x83, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x1, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$HIDIOCGFEATURE(r8, 0xc0404807, &(0x7f00000002c0)={0x0, "bbbc469a5ac8e4f35da9840d945ebc82de38de97dfc6c6e5cdac7006e5516fab4b9dcf0c09867ec9493a8535e13a0351df2ec3d1228c53f19409bd8e056462c0"}) 3.265135618s ago: executing program 0 (id=5927): mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) 3.064549502s ago: executing program 0 (id=5928): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400"], 0xdd12}], 0x1}, 0x200400d1) 3.037854004s ago: executing program 3 (id=5929): add_key(0x0, 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201013014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0x73, 0xffffffffffffffff) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f00000003c0)={0x0, 0xd9a0, 0x100, 0x2, 0x1e5}, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x3, 0x158, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x22, &(0x7f00000004c0)=@new_dev={0x4, 0x177, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000500)={0x0, 0x1, 0x800, 0x83, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x1, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$HIDIOCGFEATURE(r8, 0xc0404807, &(0x7f00000002c0)={0x0, "bbbc469a5ac8e4f35da9840d945ebc82de38de97dfc6c6e5cdac7006e5516fab4b9dcf0c09867ec9493a8535e13a0351df2ec3d1228c53f19409bd8e056462c0"}) 2.962819886s ago: executing program 1 (id=5930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x100000}) fallocate(r2, 0x3, 0x0, 0x100000) (async) 2.760867554s ago: executing program 0 (id=5931): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x1000}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x10}]}}}]}, 0x48}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a80000000c0a01010000000000000000070000090900020073797a31000000000900010073797a30000000007c0003807800008008000340000000026c000b80200001800a00010071756f7461000000100002800c0001400000020000000000340001800a0001006c696d697400000024000280"], 0x12c}}, 0x0) 2.425716131s ago: executing program 0 (id=5932): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0x7ff, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x20000000000028, 0x4, 0x2}) 2.336872048s ago: executing program 1 (id=5933): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x8, 0x0) 2.183070675s ago: executing program 3 (id=5934): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000340)={0x0, "72a59baeb6c10b67b134a5f267418d0000000000000000000000820f2cf9ff6c8d2600", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, 0x0) 2.052782857s ago: executing program 1 (id=5935): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004500005c00000000002f907800000000ac14141624806558000000000001000110000800000086dd080088be81000004100000000100000000000001080022eb00000000200000000200000000000000000000000800655800000006"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x24000000) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2}, 0x5}, {{&(0x7f0000000740)=@can, 0x80, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/91, 0x5b}, {&(0x7f00000008c0)=""/131, 0x83}, {0x0}, {0x0}], 0x4, &(0x7f0000000c80)=""/4096, 0x1000}, 0x8001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f00000053c0)}, {&(0x7f0000005400)=""/115, 0x73}], 0x2, &(0x7f00000054c0)=""/69, 0x45}, 0x401}], 0x4, 0x10002, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r2, &(0x7f0000000380)=""/66, 0x42) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r2, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) 1.936492489s ago: executing program 2 (id=5936): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80004508, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "ab624f6011dc5562", "21004bb854986b0b74c0152fbf338bad", "270689dd", "2969c92218294513"}, 0x28) 1.426275915s ago: executing program 0 (id=5937): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004500005c00000000002f907800000000ac14141624806558000000000001000110000800000086dd080088be81000004100000000100000000000001080022eb00000000200000000200000000000000000000000800655800000006"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x24000000) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) recvmmsg(r3, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2}, 0x5}, {{&(0x7f0000000740)=@can, 0x80, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/91, 0x5b}, {&(0x7f00000008c0)=""/131, 0x83}, {0x0}, {0x0}], 0x4, &(0x7f0000000c80)=""/4096, 0x1000}, 0x8001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f00000053c0)}, {&(0x7f0000005400)=""/115, 0x73}], 0x2, &(0x7f00000054c0)=""/69, 0x45}, 0x401}], 0x4, 0x10002, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r2, &(0x7f0000000380)=""/66, 0x42) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r2, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) 1.311307916s ago: executing program 2 (id=5938): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r3, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.142612644s ago: executing program 3 (id=5939): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_complete(0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x15, 0x107, 0x70bd27, 0x25dfdbfd, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x24044011}, 0x2400c044) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r2 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x9000001c}) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r7, 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r8, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) r9 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x4c, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r12 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r12, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r11, 0x0, 0x0}) ioctl$VIDIOC_G_INPUT(r12, 0x80045626, &(0x7f0000000180)) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r13, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) io_setup(0xffff, &(0x7f0000000140)) 885.844324ms ago: executing program 2 (id=5940): r0 = socket$inet6(0xa, 0x5, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @private2, 0x4}, 0x1c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x4) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) r5 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040), 0x0, 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000070000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000004400038040000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 775.417021ms ago: executing program 3 (id=5941): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x5c, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000060000000000000000e2001e25b9bb47bc00", [0x8, 0xffffffff9673e35a]}}) 711.753776ms ago: executing program 1 (id=5942): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004500005c00000000002f907800000000ac14141624806558000000000001000110000800000086dd080088be81000004100000000100000000000001080022eb00000000200000000200000000000000000000000800655800000006"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x24000000) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2}, 0x5}, {{&(0x7f0000000740)=@can, 0x80, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/91, 0x5b}, {&(0x7f00000008c0)=""/131, 0x83}, {0x0}, {0x0}], 0x4, &(0x7f0000000c80)=""/4096, 0x1000}, 0x8001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f00000053c0)}, {&(0x7f0000005400)=""/115, 0x73}], 0x2, &(0x7f00000054c0)=""/69, 0x45}, 0x401}], 0x4, 0x10002, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r2, &(0x7f0000000380)=""/66, 0x42) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r2, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) 508.043553ms ago: executing program 3 (id=5943): r0 = socket$inet6(0xa, 0x5, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @private2, 0x4}, 0x1c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x4) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) r5 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040), 0x0, 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000070000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000004400038040000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 0s ago: executing program 0 (id=5944): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x8, 0x0) kernel console output (not intermixed with test programs): lave_1 (retrying later): interface not active [ 705.726162][ T5613] Bluetooth: hci1: command tx timeout [ 705.766838][ T1244] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 705.782516][ T1244] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 705.782543][ T1244] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 705.812755][ T5727] usb 2-1: not running at top speed; connect to a high speed hub [ 705.812845][ T5727] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 705.813194][ T1244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.813217][ T1244] usb 4-1: Product: syz [ 705.813231][ T1244] usb 4-1: Manufacturer: syz [ 705.813340][ T1244] usb 4-1: SerialNumber: syz [ 705.856048][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 705.856080][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 705.856109][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 705.856135][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 705.856159][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 705.856187][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 705.860157][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.860180][ T5727] usb 2-1: Product: syz [ 705.860194][ T5727] usb 2-1: Manufacturer: syz [ 705.860209][ T5727] usb 2-1: SerialNumber: syz [ 705.970462][T18134] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 705.970580][T18134] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 705.970825][T18134] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 705.970953][T18134] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 705.971074][T18134] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 706.012966][ T5727] usb 2-1: USB2VGA dongle found at address 52 [ 706.025830][ T5727] usb 2-1: Allocated 8 output buffers [ 706.025911][ T5727] usb 2-1: Not attached to USB 2.0 hub, deferring init [ 706.181319][ T1244] usblp 4-1:1.0: usblp1: USB Bidirectional printer dev 65 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 706.264909][ T1244] usb 2-1: USB disconnect, device number 52 [ 706.348061][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 706.358576][T17984] hsr_slave_0: entered promiscuous mode [ 706.359755][T17984] hsr_slave_1: entered promiscuous mode [ 706.360585][T17984] debugfs: 'hsr0' already exists in 'hsr' [ 706.360606][T17984] Cannot create hsr debugfs directory [ 706.391588][ T5727] usb 4-1: USB disconnect, device number 65 [ 706.455212][ T5727] usblp1: removed [ 707.294700][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4183'. [ 707.523713][ T5321] usb 1-1: USB disconnect, device number 90 [ 707.757659][T18168] syzkaller0: entered promiscuous mode [ 707.757683][T18168] syzkaller0: entered allmulticast mode [ 707.777795][T18173] tipc: Enabled bearer , priority 0 [ 707.781977][T18179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.024602][T18170] tipc: Resetting bearer [ 709.456746][T18165] tipc: Resetting bearer [ 709.629447][T18165] tipc: Disabling bearer [ 709.667814][T18206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.730005][T18208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4197'. [ 709.910742][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2 [ 711.548016][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4211'. [ 711.734887][ T5727] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 711.858135][ T1180] hsr_slave_0: left promiscuous mode [ 711.894900][ T5727] usb 4-1: Using ep0 maxpacket: 32 [ 711.896561][ T1180] hsr_slave_1: left promiscuous mode [ 711.899817][ T1180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.899839][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.922805][ T5727] usb 4-1: unable to get BOS descriptor or descriptor too short [ 711.922859][ T5727] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 711.947370][ T5727] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 711.947397][ T5727] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 711.947418][ T5727] usb 4-1: config 14 has no interface number 0 [ 711.947435][ T5727] usb 4-1: config 14 has no interface number 1 [ 711.947517][ T5727] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 711.947541][ T5727] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 711.947568][ T5727] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 711.947594][ T5727] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 711.947622][ T5727] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 711.947648][ T5727] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.947674][ T5727] usb 4-1: config 14 interface 57 has no altsetting 0 [ 711.947691][ T5727] usb 4-1: config 14 interface 228 has no altsetting 0 [ 712.111652][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.111678][ T5727] usb 4-1: Product: syz [ 712.111834][ T5727] usb 4-1: Manufacturer: syz [ 712.111880][ T5727] usb 4-1: SerialNumber: syz [ 712.666742][T18269] loop5: detected capacity change from 0 to 7 [ 712.913260][ T1180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.913287][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.001147][T18269] Dev loop5: unable to read RDB block 7 [ 713.001248][T18269] loop5: unable to read partition table [ 713.001576][T18269] loop5: partition table beyond EOD, truncated [ 713.001595][T18269] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 713.176937][ T1180] veth1_macvtap: left promiscuous mode [ 713.177047][ T1180] veth0_macvtap: left promiscuous mode [ 713.177308][ T1180] veth1_vlan: left promiscuous mode [ 713.177494][ T1180] veth0_vlan: left promiscuous mode [ 714.764412][ T5727] legousbtower 4-1:14.57: interrupt endpoints not found [ 714.791647][ T5727] legousbtower 4-1:14.228: get version request failed: -71 [ 714.791832][ T5727] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 714.852228][ T5727] usb 4-1: USB disconnect, device number 66 [ 715.406983][ T1180] team0 (unregistering): Port device team_slave_1 removed [ 715.460853][T18303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4225'. [ 715.485525][ T1180] team0 (unregistering): Port device team_slave_0 removed [ 717.244888][ T5707] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 717.324921][ T5727] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 717.419381][ T5707] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 717.459276][ T5707] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 717.459304][ T5707] usb 1-1: config 0 has no interface number 0 [ 717.459347][ T5707] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 717.459374][ T5707] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 717.459399][ T5707] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 717.459435][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.521118][ T5727] usb 4-1: Using ep0 maxpacket: 8 [ 717.523242][ T5727] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 717.525363][ T5727] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 717.525388][ T5727] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 717.525407][ T5727] usb 4-1: config 179 has no interface number 0 [ 717.525451][ T5727] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 717.525473][ T5727] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 717.525514][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.565125][ T5321] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 717.617891][ T5707] usb 1-1: config 0 descriptor?? [ 717.699871][ T5707] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input58 [ 717.756126][ T5321] usb 2-1: not running at top speed; connect to a high speed hub [ 717.756161][ T5321] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 717.757640][ T5321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 717.757670][ T5321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 717.757697][ T5321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 717.757723][ T5321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 717.757750][ T5321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 717.757776][ T5321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 717.760472][ T5321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.760493][ T5321] usb 2-1: Product: syz [ 717.760507][ T5321] usb 2-1: Manufacturer: syz [ 717.760522][ T5321] usb 2-1: SerialNumber: syz [ 717.809746][T18320] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 717.809924][T18320] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 717.810089][T18320] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 717.810272][T18320] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 717.810433][T18320] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 717.879361][ T5321] usb 2-1: USB2VGA dongle found at address 53 [ 717.972994][ T5321] usb 2-1: Allocated 8 output buffers [ 717.973008][ T5321] usb 2-1: Not attached to USB 2.0 hub, deferring init [ 718.096522][ T10] usb 2-1: USB disconnect, device number 53 [ 718.159484][ T5321] usb 1-1: USB disconnect, device number 91 [ 718.201633][ T5602] usb 4-1: USB disconnect, device number 67 [ 718.899744][T17984] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 718.971609][T17984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 718.979538][T17984] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 719.542680][T17984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.561428][T17984] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 719.678525][T17984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.683497][T17984] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 719.727004][T17984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 719.774883][ T5727] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 719.925007][ T5727] usb 2-1: Using ep0 maxpacket: 16 [ 719.925805][ T5727] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 719.927787][ T5727] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 81 [ 719.974148][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.974173][ T5727] usb 2-1: Product: syz [ 719.974187][ T5727] usb 2-1: Manufacturer: syz [ 719.974202][ T5727] usb 2-1: SerialNumber: syz [ 720.024934][ T10] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 720.026435][ T5727] usb 2-1: config 0 descriptor?? [ 720.061597][T18359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 720.091114][ T5727] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 720.196565][T17984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.112315][T17984] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.464093][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4241'. [ 722.357095][ T1180] usb 2-1: Failed to submit usb control message: -110 [ 722.357170][ T1180] usb 2-1: unable to send the bmi data to the device: -110 [ 722.357226][ T1180] usb 2-1: unable to get target info from device [ 722.357277][ T1180] usb 2-1: could not get target info (-110) [ 722.357470][ T1180] usb 2-1: could not probe fw (-110) [ 722.497542][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.500047][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.574149][ T5707] usb 2-1: USB disconnect, device number 54 [ 722.648632][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.648751][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.887604][T18396] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4243'. [ 722.921185][T18396] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4243'. [ 724.390307][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4251'. [ 724.421875][T18437] loop5: detected capacity change from 0 to 7 [ 724.447561][T18437] Dev loop5: unable to read RDB block 7 [ 724.447597][T18437] loop5: unable to read partition table [ 724.447767][T18437] loop5: partition table beyond EOD, truncated [ 724.447782][T18437] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 724.813916][T18448] syzkaller1: entered promiscuous mode [ 724.813941][T18448] syzkaller1: entered allmulticast mode [ 724.829391][T18445] syzkaller0: entered promiscuous mode [ 724.829411][T18445] syzkaller0: entered allmulticast mode [ 724.852532][T18445] tipc: Enabled bearer , priority 0 [ 725.317711][T18453] tipc: Resetting bearer [ 725.406687][T18442] tipc: Resetting bearer [ 725.535826][T18442] tipc: Disabling bearer [ 725.777090][T18482] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4260'. [ 726.661497][T17984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.893515][T18490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4263'. [ 727.004563][T17984] veth0_vlan: entered promiscuous mode [ 727.481069][T17984] veth1_vlan: entered promiscuous mode [ 727.577212][T17984] veth0_macvtap: entered promiscuous mode [ 727.627386][T17984] veth1_macvtap: entered promiscuous mode [ 727.826900][T18497] syzkaller1: entered promiscuous mode [ 727.826918][T18497] syzkaller1: entered allmulticast mode [ 727.872316][T17984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.120483][T18505] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 728.120507][T18505] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 728.208467][T17984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.781052][ T165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.781700][ T165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.783926][T13557] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.784105][T13557] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.016595][ T10] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 729.254839][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 729.255917][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 729.259410][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 729.259432][ T10] usb 5-1: config 0 has no interface number 0 [ 729.264056][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.264080][ T10] usb 5-1: Product: syz [ 729.264095][ T10] usb 5-1: Manufacturer: syz [ 729.264110][ T10] usb 5-1: SerialNumber: syz [ 729.358915][ T10] usb 5-1: config 0 descriptor?? [ 729.446838][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 729.711989][T13557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.712008][T13557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.913250][T18522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.929917][T18522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.028988][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 730.230488][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 730.247386][T18522] nvme_fabrics: missing parameter 'nqn=%s' [ 730.470732][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.470751][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.489463][T18531] nvme_fabrics: missing parameter 'transport=%s' [ 730.489476][T18531] nvme_fabrics: missing parameter 'nqn=%s' [ 730.751492][T18539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4279'. [ 730.954044][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 730.956270][ T5321] usb 5-1: USB disconnect, device number 79 [ 730.989243][ T5321] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 730.995926][ T5321] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 730.996884][ T5321] quatech2 5-1:0.51: device disconnected [ 731.134862][ T5707] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 731.419931][ T10] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 731.475183][ T5707] usb 4-1: Using ep0 maxpacket: 32 [ 731.514536][ T5707] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 731.598289][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 731.724058][ T5707] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 731.724085][ T5707] usb 4-1: config 0 has no interface number 0 [ 731.724123][ T5707] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 731.724145][ T5707] usb 4-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 731.724166][ T5707] usb 4-1: config 0 interface 12 has no altsetting 0 [ 731.732537][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 731.732562][ T10] usb 3-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 731.732581][ T10] usb 3-1: config 220 has no interface number 2 [ 731.732651][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 731.732678][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 731.732695][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 731.732713][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 731.749866][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.749890][ T10] usb 3-1: Product: syz [ 731.749904][ T10] usb 3-1: Manufacturer: syz [ 731.749917][ T10] usb 3-1: SerialNumber: syz [ 731.997831][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.997860][ T5707] usb 4-1: Product: syz [ 731.997874][ T5707] usb 4-1: Manufacturer: syz [ 731.997889][ T5707] usb 4-1: SerialNumber: syz [ 732.853023][ T5707] usb 4-1: config 0 descriptor?? [ 732.855268][ T10] usb 3-1: selecting invalid altsetting 0 [ 732.872735][ T5707] f81534 4-1:0.12: unsupported endpoint max packet size [ 732.893910][ T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 732.893940][ T10] uvcvideo 3-1:220.0: No valid video chain found. [ 733.013676][ T10] usb 3-1: selecting invalid altsetting 0 [ 733.013713][ T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 733.045232][ T10] usb 3-1: USB disconnect, device number 85 [ 733.161932][T18561] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4285'. [ 733.307834][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4288'. [ 733.705517][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4290'. [ 734.191686][ T5707] usb 4-1: USB disconnect, device number 68 [ 735.630205][ T5321] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 735.786800][ T5321] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 735.788117][ T5321] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 735.788142][ T5321] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 735.793162][ T5321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.793186][ T5321] usb 3-1: Product: syz [ 735.793201][ T5321] usb 3-1: Manufacturer: syz [ 735.793216][ T5321] usb 3-1: SerialNumber: syz [ 735.975538][T18597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4298'. [ 736.711730][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4301'. [ 737.176108][ T5321] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 86 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 737.184693][ T5321] usb 3-1: USB disconnect, device number 86 [ 737.194118][ T5321] usblp0: removed [ 737.470220][T18615] syzkaller0: entered promiscuous mode [ 737.470246][T18615] syzkaller0: entered allmulticast mode [ 737.686094][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 737.722328][ T5600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 737.741868][ T5600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 737.746441][ T5600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 737.785372][ T5600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 740.187783][T18656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4316'. [ 740.190851][T18656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4316'. [ 740.524928][ T5600] Bluetooth: hci3: command tx timeout [ 740.584884][ T10] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 740.734871][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 740.735441][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 740.736516][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 740.736539][ T10] usb 1-1: config 0 has no interface number 0 [ 740.736576][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 740.739305][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.739329][ T10] usb 1-1: Product: syz [ 740.739343][ T10] usb 1-1: Manufacturer: syz [ 740.739357][ T10] usb 1-1: SerialNumber: syz [ 740.807318][ T10] usb 1-1: config 0 descriptor?? [ 741.538279][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 741.538689][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 741.539153][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 741.539558][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 741.540014][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 741.540432][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 741.540869][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 741.541402][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 741.541797][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 741.542121][ T10] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 741.542171][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -32 [ 741.542188][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 741.542281][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -32 [ 741.693673][ T10] usb 1-1: USB disconnect, device number 93 [ 741.738032][T18620] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.738160][T18620] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.738328][T18620] bridge_slave_0: entered allmulticast mode [ 741.769918][T18620] bridge_slave_0: entered promiscuous mode [ 741.797090][T18620] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.797275][T18620] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.797446][T18620] bridge_slave_1: entered allmulticast mode [ 741.800201][T18620] bridge_slave_1: entered promiscuous mode [ 741.917269][T18620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.920071][T18620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.005381][T18620] team0: Port device team_slave_0 added [ 742.009543][T18620] team0: Port device team_slave_1 added [ 742.068431][T18620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.068440][T18620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.068453][T18620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.122156][T18620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.122170][T18620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.122195][T18620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.392680][T18620] hsr_slave_0: entered promiscuous mode [ 742.394043][T18620] hsr_slave_1: entered promiscuous mode [ 742.605496][ T5600] Bluetooth: hci3: command tx timeout [ 742.815267][T18710] loop5: detected capacity change from 0 to 7 [ 742.816290][T18710] Dev loop5: unable to read RDB block 7 [ 742.816330][T18710] loop5: unable to read partition table [ 742.822883][T18710] loop5: partition table beyond EOD, truncated [ 742.822903][T18710] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 742.936779][ T5727] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 742.941612][T18712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4336'. [ 743.018234][T18714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4335'. [ 743.019439][T18714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4335'. [ 743.095154][ T5727] usb 1-1: Using ep0 maxpacket: 32 [ 743.095949][ T5727] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 743.097620][ T5727] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 743.097644][ T5727] usb 1-1: config 0 has no interface number 0 [ 743.100712][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.100736][ T5727] usb 1-1: Product: syz [ 743.100748][ T5727] usb 1-1: Manufacturer: syz [ 743.100761][ T5727] usb 1-1: SerialNumber: syz [ 743.107597][ T5727] usb 1-1: config 0 descriptor?? [ 743.124277][ T5727] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 743.224899][T18526] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 743.430454][T18526] usb 2-1: unable to get BOS descriptor or descriptor too short [ 743.430510][T18526] usb 2-1: New USB device found, idVendor=046d, idProduct=092b, bcdDevice=6b.72 [ 743.432309][T18526] usb 2-1: config 114 has an invalid interface number: 183 but max is 0 [ 743.432331][T18526] usb 2-1: config 114 has no interface number 0 [ 743.432359][T18526] usb 2-1: config 114 interface 183 has no altsetting 0 [ 743.476431][T18526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.476457][T18526] usb 2-1: Product: syz [ 743.476471][T18526] usb 2-1: Manufacturer: syz [ 743.476484][T18526] usb 2-1: SerialNumber: syz [ 743.582157][ T5727] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 743.621229][T18704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.641095][T18704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.682212][ T5727] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 743.800200][T18712] netlink: 'syz.1.4336': attribute type 1 has an invalid length. [ 743.800232][T18712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.835396][T18704] nvme_fabrics: missing parameter 'nqn=%s' [ 744.258433][T18724] nvme_fabrics: missing parameter 'transport=%s' [ 744.258449][T18724] nvme_fabrics: missing parameter 'nqn=%s' [ 744.457318][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 744.480405][ T10] usb 1-1: USB disconnect, device number 94 [ 744.582405][T18526] gspca_main: spca561-2.14.0 probing 046d:092b [ 744.584045][T18526] spca561 2-1:114.183: probe with driver spca561 failed with error -22 [ 744.606089][T18526] usb 2-1: USB disconnect, device number 55 [ 744.606575][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 744.642844][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 744.670626][ T10] quatech2 1-1:0.51: device disconnected [ 744.685949][ T5600] Bluetooth: hci3: command tx timeout [ 745.077613][T18620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.473720][T18760] tipc: Enabled bearer , priority 0 [ 745.538173][T18760] tipc: Resetting bearer [ 745.622817][T18766] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 745.622839][T18766] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 745.715887][T18759] tipc: Disabling bearer [ 746.323154][T18620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.040128][T18620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.087306][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.087372][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.580146][T18620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.348428][T18620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 750.392036][T18620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 750.394642][T18620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 750.532226][T18620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 750.533300][T18620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 750.583751][T18620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 750.592331][T18620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 750.679204][T18620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 751.969857][T18620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.061648][T18620] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.078770][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.078972][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.115947][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.116050][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.632578][T18620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.704898][T18526] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 753.820829][T18620] veth0_vlan: entered promiscuous mode [ 753.875016][T18620] veth1_vlan: entered promiscuous mode [ 753.890551][T18526] usb 1-1: Using ep0 maxpacket: 8 [ 753.891538][T18526] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 753.893156][T18526] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 753.893181][T18526] usb 1-1: config 179 has no interface number 0 [ 753.893241][T18526] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 753.893268][T18526] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 753.893296][T18526] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 753.893322][T18526] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 753.893350][T18526] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 753.893392][T18526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.005340][T18983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 754.845668][T18620] veth0_macvtap: entered promiscuous mode [ 754.898204][T18620] veth1_macvtap: entered promiscuous mode [ 754.925818][ T1244] usb 1-1: USB disconnect, device number 95 [ 754.925839][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 754.925899][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 754.998153][T18620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.097263][T18620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.220273][T19009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4447'. [ 755.263615][ T1180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.277423][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.277440][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.277788][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.279332][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.279604][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.397337][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.397356][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.986276][T19053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4302'. [ 757.941561][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 757.974456][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 757.986474][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 758.007834][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 758.009818][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 758.334686][T19087] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 758.334709][T19087] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 758.624274][T19072] netlink: 'syz.0.4468': attribute type 61 has an invalid length. [ 759.085836][T18321] syz_tun (unregistering): left promiscuous mode [ 759.414893][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 759.465838][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4487'. [ 759.564928][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 759.565812][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 759.567170][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.567212][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 759.567239][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 759.567260][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 759.567282][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 759.576846][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 759.576870][ T10] usb 4-1: Manufacturer: syz [ 759.646673][ T10] usb 4-1: config 0 descriptor?? [ 760.030569][T19137] loop0: detected capacity change from 0 to 3904 [ 760.075149][ T10] rc_core: IR keymap rc-hauppauge not found [ 760.075168][ T10] Registered IR keymap rc-empty [ 760.075294][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.079734][T19137] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 760.079759][T19137] ldm_validate_privheads(): Disk read failed. [ 760.081245][T19137] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 760.081272][T19137] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 760.081286][T19137] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 760.081301][T19137] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 760.081314][T19137] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 760.081358][T19137] loop0: [ 760.081374][T19137] loop0: partition table partially beyond EOD, truncated [ 760.096834][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.147755][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 760.218431][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input59 [ 760.259934][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.283200][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.294979][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.314990][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.338248][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.355674][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.377430][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.396590][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.414994][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.443647][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.480334][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 760.480386][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 760.612250][ T10] usb 4-1: USB disconnect, device number 69 [ 761.031030][ T1173] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.345958][ T1173] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.223115][ T1173] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.756290][ T1173] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.571045][T19311] tipc: Enabling of bearer rejected, failed to enable media [ 766.065512][T19077] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.065626][T19077] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.065797][T19077] bridge_slave_0: entered allmulticast mode [ 766.082624][T19077] bridge_slave_0: entered promiscuous mode [ 766.350880][T19077] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.351315][T19077] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.351504][T19077] bridge_slave_1: entered allmulticast mode [ 766.361434][T19077] bridge_slave_1: entered promiscuous mode [ 766.718648][ T5707] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 766.742017][T19077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.780918][T19355] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 766.908814][ T5707] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 766.910666][ T5707] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 766.910732][ T5707] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 766.914129][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.914153][ T5707] usb 5-1: Product: syz [ 766.914166][ T5707] usb 5-1: Manufacturer: syz [ 766.914180][ T5707] usb 5-1: SerialNumber: syz [ 767.040709][T19077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.429522][ T31] usb 5-1: USB disconnect, device number 80 [ 768.134997][ T1173] ip6gretap0 (unregistering): left promiscuous mode [ 768.835787][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.892957][ T1173] bond0 (unregistering): Released all slaves [ 768.952415][ T1173] bond1 (unregistering): Released all slaves [ 769.303836][T19416] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.332030][T19077] team0: Port device team_slave_0 added [ 769.332915][ T1173] tipc: Disabling bearer [ 769.333242][ T1173] tipc: Left network mode [ 769.400012][T19077] team0: Port device team_slave_1 added [ 769.708913][T19077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.708930][T19077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.708954][T19077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.806369][T19077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.806385][T19077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.806411][T19077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.923065][T19482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 770.424519][T19077] hsr_slave_0: entered promiscuous mode [ 770.429606][T19077] hsr_slave_1: entered promiscuous mode [ 770.431760][T19077] debugfs: 'hsr0' already exists in 'hsr' [ 770.431783][T19077] Cannot create hsr debugfs directory [ 771.044864][ T5727] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 771.195747][ T5727] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 771.197057][ T5727] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.197110][ T5727] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 771.203742][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.203767][ T5727] usb 4-1: Product: syz [ 771.203781][ T5727] usb 4-1: Manufacturer: syz [ 771.203795][ T5727] usb 4-1: SerialNumber: syz [ 771.399173][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 771.761010][ T10] usb 4-1: USB disconnect, device number 70 [ 772.447320][ T1173] hsr_slave_0: left promiscuous mode [ 772.490503][ T1173] hsr_slave_1: left promiscuous mode [ 772.493786][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.493811][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.526806][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.526828][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.961572][ T1173] veth1_macvtap: left promiscuous mode [ 772.961685][ T1173] veth0_macvtap: left promiscuous mode [ 772.961969][ T1173] veth1_vlan: left promiscuous mode [ 772.962151][ T1173] veth0_vlan: left promiscuous mode [ 775.405788][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 775.487803][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 775.755371][T19732] loop4: detected capacity change from 0 to 7 [ 775.810456][T19732] Dev loop4: unable to read RDB block 7 [ 775.810496][T19732] loop4: unable to read partition table [ 775.810762][T19732] loop4: partition table beyond EOD, truncated [ 775.810794][T19732] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 776.144880][ T5707] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 776.272972][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2 [ 776.299063][T19646] syzkaller0: entered promiscuous mode [ 776.299088][T19646] syzkaller0: entered allmulticast mode [ 776.366469][ T5707] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 776.367818][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.367847][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.367870][ T5707] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 776.367911][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.430978][ T5707] usb 4-1: config 0 descriptor?? [ 776.880450][ T5707] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 776.880490][ T5707] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 776.880516][ T5707] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 776.880546][ T5707] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 776.880583][ T5707] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 776.944465][ T5707] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 779.124734][ T5727] usb 4-1: USB disconnect, device number 71 [ 779.745152][ T5727] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 779.925619][ T5727] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.928899][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.928928][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.928951][ T5727] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 779.928992][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.003417][ T5727] usb 5-1: config 0 descriptor?? [ 780.260621][T19897] netlink: 'syz.3.4790': attribute type 1 has an invalid length. [ 780.324134][T19901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4790'. [ 780.473914][ T5727] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 780.473953][ T5727] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 780.473980][ T5727] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 780.474006][ T5727] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 780.474048][ T5727] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 780.529051][ T5727] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 780.719488][T19897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 781.047082][T19077] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 781.082031][T19077] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 781.092204][T19077] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 781.151910][T19077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 781.154979][T19077] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 781.212458][T19077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 781.240794][T19077] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 781.293821][T19077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 781.676611][T19077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.726523][T19077] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.753305][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.753435][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.808331][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.808468][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.116509][ T5321] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 782.265032][ T5321] usb 4-1: Using ep0 maxpacket: 32 [ 782.265952][ T5321] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 782.271119][ T5321] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 782.271144][ T5321] usb 4-1: config 0 has no interface number 0 [ 782.275806][ T5321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.275829][ T5321] usb 4-1: Product: syz [ 782.275843][ T5321] usb 4-1: Manufacturer: syz [ 782.275858][ T5321] usb 4-1: SerialNumber: syz [ 782.305513][ T5321] usb 4-1: config 0 descriptor?? [ 782.335858][ T5321] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 782.564933][ T5707] usb 5-1: USB disconnect, device number 81 [ 782.750165][ T5321] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 782.834079][T19967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.846974][T19967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.075466][ T5321] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 783.184157][T19967] nvme_fabrics: missing parameter 'nqn=%s' [ 783.556767][T20009] nvme_fabrics: missing parameter 'transport=%s' [ 783.556784][T20009] nvme_fabrics: missing parameter 'nqn=%s' [ 783.821510][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 783.822266][ T1244] usb 4-1: USB disconnect, device number 72 [ 783.885628][ T1244] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 783.892299][ T1244] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 783.893141][ T1244] quatech2 4-1:0.51: device disconnected [ 784.143245][T19077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.305096][T19077] veth0_vlan: entered promiscuous mode [ 784.342617][T19077] veth1_vlan: entered promiscuous mode [ 784.511930][T19077] veth0_macvtap: entered promiscuous mode [ 784.541833][T19077] veth1_macvtap: entered promiscuous mode [ 784.713867][T19077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.814289][T19077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.877690][T20058] syzkaller0: entered promiscuous mode [ 784.877716][T20058] syzkaller0: entered allmulticast mode [ 785.032700][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4844'. [ 785.825603][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.881102][T20101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4854'. [ 785.881135][T20101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4854'. [ 786.069523][T20101] gretap0: entered promiscuous mode [ 786.229453][T20101] gretap0: left promiscuous mode [ 786.244703][T20111] netlink: 'syz.3.4857': attribute type 1 has an invalid length. [ 786.597984][T20111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 786.693785][ T1837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.693804][ T1837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.735038][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.735479][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.915377][ T1168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.976384][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.976400][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.594919][ T31] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 788.725127][ T31] usb 4-1: device descriptor read/64, error -71 [ 788.965379][ T31] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 789.094887][ T31] usb 4-1: device descriptor read/64, error -71 [ 789.094902][T18526] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 789.208129][ T31] usb usb4-port1: attempt power cycle [ 789.255425][T18526] usb 5-1: unable to get BOS descriptor or descriptor too short [ 789.256028][T18526] usb 5-1: not running at top speed; connect to a high speed hub [ 789.256064][T18526] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 789.258401][T18526] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 789.258445][T18526] usb 5-1: config 5 interface 0 has no altsetting 1 [ 789.263078][T18526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.263103][T18526] usb 5-1: Product: syz [ 789.263118][T18526] usb 5-1: Manufacturer: syz [ 789.263133][T18526] usb 5-1: SerialNumber: syz [ 789.577480][T20223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.582113][T20223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.684939][ T31] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 789.717487][ T31] usb 4-1: device descriptor read/8, error -71 [ 789.722475][T20258] fuse: Bad value for 'fd' [ 789.970058][ T31] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 790.001011][ T31] usb 4-1: device descriptor read/8, error -71 [ 790.105193][ T31] usb usb4-port1: unable to enumerate USB device [ 790.275290][T18526] usb 5-1: USB disconnect, device number 82 [ 790.477302][T16113] udevd[16113]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.974942][ T5727] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 791.137417][ T5727] usb 5-1: Using ep0 maxpacket: 8 [ 791.141082][ T5727] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 791.142271][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 791.142313][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.193286][ T5727] usb 5-1: config 0 descriptor?? [ 791.210138][ T5727] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 791.500361][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 791.554586][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 791.554593][ T1167] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.575435][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 791.582276][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 791.583007][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 792.712870][ T1167] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.172238][T20351] netlink: 'syz.3.4960': attribute type 61 has an invalid length. [ 793.537195][ T1167] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.681818][ T31] usb 5-1: USB disconnect, device number 83 [ 793.739244][ T5613] Bluetooth: hci0: command tx timeout [ 794.278995][ T1167] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.047070][T20424] netlink: 'syz.4.4993': attribute type 61 has an invalid length. [ 795.781682][T20464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5014'. [ 795.805285][ T5613] Bluetooth: hci0: command tx timeout [ 796.034928][ T31] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 796.159734][ T1167] bridge_slave_1: left allmulticast mode [ 796.159767][ T1167] bridge_slave_1: left promiscuous mode [ 796.160006][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.212160][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 796.212216][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=092b, bcdDevice=6b.72 [ 796.214200][ T31] usb 4-1: config 114 has an invalid interface number: 183 but max is 0 [ 796.214227][ T31] usb 4-1: config 114 has no interface number 0 [ 796.214271][ T31] usb 4-1: config 114 interface 183 has no altsetting 0 [ 796.255201][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.255225][ T31] usb 4-1: Product: syz [ 796.255240][ T31] usb 4-1: Manufacturer: syz [ 796.255256][ T31] usb 4-1: SerialNumber: syz [ 796.397107][ T1167] bridge_slave_0: left allmulticast mode [ 796.431107][ T1167] bridge_slave_0: left promiscuous mode [ 796.431341][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.555457][T18526] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 796.722702][T20499] netlink: 'syz.3.5014': attribute type 1 has an invalid length. [ 796.722741][T20499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.745997][T18526] usb 5-1: Using ep0 maxpacket: 8 [ 796.746662][T18526] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 796.749459][T18526] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 796.749499][T18526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.829473][T18526] usb 5-1: config 0 descriptor?? [ 796.855367][T18526] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 797.885666][ T5613] Bluetooth: hci0: command tx timeout [ 798.406027][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.482379][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.524032][ T1167] bond0 (unregistering): Released all slaves [ 799.033030][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 799.122283][ T31] gspca_main: spca561-2.14.0 probing 046d:092b [ 799.143056][ T31] spca561 4-1:114.183: probe with driver spca561 failed with error -22 [ 799.160512][ T31] usb 4-1: USB disconnect, device number 77 [ 799.360008][ T5602] usb 5-1: USB disconnect, device number 84 [ 799.965458][ T5613] Bluetooth: hci0: command tx timeout [ 800.587993][T20624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5079'. [ 800.657361][T20627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5079'. [ 800.822653][T20624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 801.370495][T20307] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.370615][T20307] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.370822][T20307] bridge_slave_0: entered allmulticast mode [ 801.408963][T20307] bridge_slave_0: entered promiscuous mode [ 801.443550][T20647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5089'. [ 801.443583][T20647] netlink: 'syz.4.5089': attribute type 7 has an invalid length. [ 801.443606][T20647] netlink: 'syz.4.5089': attribute type 8 has an invalid length. [ 801.443619][T20647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5089'. [ 801.719866][ T1167] hsr_slave_0: left promiscuous mode [ 801.800473][ T1167] hsr_slave_1: left promiscuous mode [ 801.801580][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.801605][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.838884][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.838908][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.972461][ T1167] veth1_macvtap: left promiscuous mode [ 801.972572][ T1167] veth0_macvtap: left promiscuous mode [ 801.972817][ T1167] veth1_vlan: left promiscuous mode [ 801.973101][ T1167] veth0_vlan: left promiscuous mode [ 803.886733][ T1167] team0 (unregistering): Port device team_slave_1 removed [ 803.946747][ T1167] team0 (unregistering): Port device team_slave_0 removed [ 804.563166][T20307] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.563363][T20307] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.563559][T20307] bridge_slave_1: entered allmulticast mode [ 804.594470][T20307] bridge_slave_1: entered promiscuous mode [ 804.627993][T20647] syz_tun: entered promiscuous mode [ 804.689171][T20647] syz_tun: left promiscuous mode [ 804.788869][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2 [ 804.941509][T20307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.962176][T20307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.110146][T20788] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 805.134278][T20307] team0: Port device team_slave_0 added [ 805.171139][T20307] team0: Port device team_slave_1 added [ 805.262839][T20307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.262856][T20307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.262882][T20307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.293380][T20307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.293396][T20307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.293423][T20307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.716072][T20307] hsr_slave_0: entered promiscuous mode [ 805.717409][T20307] hsr_slave_1: entered promiscuous mode [ 805.718249][T20307] debugfs: 'hsr0' already exists in 'hsr' [ 805.718270][T20307] Cannot create hsr debugfs directory [ 807.109317][T20841] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5170'. [ 808.075139][ T31] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 808.096383][ T5250] 8021q: adding VLAN 0 to HW filter on device eth3 [ 808.226446][ T31] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 808.227950][ T31] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 808.227976][ T31] usb 4-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 808.227997][ T31] usb 4-1: config 220 has no interface number 2 [ 808.228066][ T31] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 808.228096][ T31] usb 4-1: config 220 interface 0 has no altsetting 0 [ 808.228114][ T31] usb 4-1: config 220 interface 76 has no altsetting 0 [ 808.228133][ T31] usb 4-1: config 220 interface 1 has no altsetting 0 [ 808.232671][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.232696][ T31] usb 4-1: Product: syz [ 808.232712][ T31] usb 4-1: Manufacturer: syz [ 808.232727][ T31] usb 4-1: SerialNumber: syz [ 809.283684][ T1167] bridge_slave_1: left allmulticast mode [ 809.283713][ T1167] bridge_slave_1: left promiscuous mode [ 809.283989][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.334735][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.344950][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.389249][ T31] usb 4-1: selecting invalid altsetting 0 [ 809.389722][ T31] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 809.389754][ T31] uvcvideo 4-1:220.0: No valid video chain found. [ 809.436217][ T31] usb 4-1: selecting invalid altsetting 0 [ 809.436260][ T31] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 809.462744][ T31] usb 4-1: USB disconnect, device number 78 [ 809.568326][ T1167] bridge_slave_0: left allmulticast mode [ 809.568374][ T1167] bridge_slave_0: left promiscuous mode [ 809.568617][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.614939][ T9] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 809.744955][ T9] usb 5-1: device descriptor read/64, error -71 [ 809.987058][ T9] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 810.114906][ T9] usb 5-1: device descriptor read/64, error -71 [ 810.228856][ T9] usb usb5-port1: attempt power cycle [ 810.574914][ T9] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 810.595582][ T9] usb 5-1: device descriptor read/8, error -71 [ 810.864912][ T9] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 810.885534][ T9] usb 5-1: device descriptor read/8, error -71 [ 810.995247][ T9] usb usb5-port1: unable to enumerate USB device [ 811.768644][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.886681][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.958148][ T1167] bond0 (unregistering): Released all slaves [ 811.983357][ T1167] bond1 (unregistering): Released all slaves [ 812.038408][ T1167] bond2 (unregistering): Released all slaves [ 812.350918][ T1167] tipc: Disabling bearer [ 812.351071][ T1167] tipc: Left network mode [ 814.552867][T21099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5280'. [ 814.552903][T21099] netlink: 'syz.4.5280': attribute type 7 has an invalid length. [ 814.553010][T21099] netlink: 'syz.4.5280': attribute type 8 has an invalid length. [ 814.553024][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5280'. [ 814.644200][T21099] syz_tun: entered promiscuous mode [ 814.686657][T21099] syz_tun: left promiscuous mode [ 815.599899][T21147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 815.599924][T21147] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 815.768538][T21151] tipc: Enabling of bearer rejected, failed to enable media [ 815.916314][ T1167] hsr_slave_0: left promiscuous mode [ 815.956501][ T1167] hsr_slave_1: left promiscuous mode [ 815.957476][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.957499][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.307980][ T1167] veth1_macvtap: left promiscuous mode [ 816.308087][ T1167] veth0_macvtap: left promiscuous mode [ 816.308358][ T1167] veth1_vlan: left promiscuous mode [ 816.309646][ T1167] veth0_vlan: left promiscuous mode [ 817.937728][ T1167] team0 (unregistering): Port device team_slave_1 removed [ 818.015619][ T1167] team0 (unregistering): Port device team_slave_0 removed [ 818.477133][T21145] syzkaller0: entered promiscuous mode [ 818.477160][T21145] syzkaller0: entered allmulticast mode [ 819.007986][ T1244] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 819.158664][ T1244] usb 4-1: Using ep0 maxpacket: 16 [ 819.160604][ T1244] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 819.167371][ T1244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.167421][ T1244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 819.167448][ T1244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 819.167470][ T1244] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 819.167494][ T1244] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 819.169067][ T1244] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 819.169090][ T1244] usb 4-1: Manufacturer: syz [ 819.184708][ T1244] usb 4-1: config 0 descriptor?? [ 819.491819][ T1244] rc_core: IR keymap rc-hauppauge not found [ 819.491839][ T1244] Registered IR keymap rc-empty [ 819.492625][ T1244] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.505257][ T1244] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.592721][ T1244] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 819.638715][ T1244] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input60 [ 819.656009][ T1244] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.685158][ T1244] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.705064][ T1244] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.725181][ T1244] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.745060][ T1244] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.765060][ T1244] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.786858][ T1244] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.806925][ T1244] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.824977][ T1244] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.845001][ T1244] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.920595][ T1244] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 819.920611][ T1244] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 820.020810][ T1244] usb 4-1: USB disconnect, device number 79 [ 820.786051][ T1244] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 820.987149][ T1244] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 820.988642][ T1244] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 820.988667][ T1244] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 820.988704][ T1244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.274516][T21352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.303811][T21352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.502518][T20307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 821.598751][T20307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 821.608773][T20307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 821.665110][T20307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 821.670007][T20307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 821.827217][T20307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 821.834474][T20307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 821.963348][ T1167] IPVS: stop unused estimator thread 0... [ 821.966972][T20307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.340388][T20307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.439793][T20307] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.451736][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.452650][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.478691][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.480392][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.303872][ T10] usb 5-1: USB disconnect, device number 89 [ 824.433043][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5430'. [ 824.801267][T20307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.177869][T20307] veth0_vlan: entered promiscuous mode [ 825.209441][T20307] veth1_vlan: entered promiscuous mode [ 825.309395][T20307] veth0_macvtap: entered promiscuous mode [ 825.325768][ T5602] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 825.335256][T20307] veth1_macvtap: entered promiscuous mode [ 825.401015][T20307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.420803][T20307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.474969][ T5602] usb 5-1: Using ep0 maxpacket: 16 [ 825.475757][ T5602] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 825.476485][ T1170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.476547][ T1170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.476582][ T1170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.476615][ T1170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.477401][ T5602] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 81 [ 825.480307][ T5602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.480330][ T5602] usb 5-1: Product: syz [ 825.480345][ T5602] usb 5-1: Manufacturer: syz [ 825.480360][ T5602] usb 5-1: SerialNumber: syz [ 825.573382][ T5602] usb 5-1: config 0 descriptor?? [ 825.574381][T21531] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 825.666134][ T5602] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 826.845153][ T12] usb 5-1: Failed to submit usb control message: -110 [ 826.845188][ T12] usb 5-1: unable to send the bmi data to the device: -110 [ 826.845205][ T12] usb 5-1: unable to get target info from device [ 826.845220][ T12] usb 5-1: could not get target info (-110) [ 826.845345][ T12] usb 5-1: could not probe fw (-110) [ 829.286803][ T1244] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 829.405075][ T31] usb 5-1: USB disconnect, device number 90 [ 829.415139][ T1244] usb 4-1: device descriptor read/64, error -71 [ 829.549662][T13557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.549681][T13557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.694594][ T1244] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 829.831063][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.831083][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.845292][ T1244] usb 4-1: device descriptor read/64, error -71 [ 829.956658][ T1244] usb usb4-port1: attempt power cycle [ 830.464870][ T1244] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 830.502047][ T1244] usb 4-1: device descriptor read/8, error -71 [ 831.554954][ T1244] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 831.767096][ T1244] usb 4-1: device not accepting address 83, error -71 [ 831.782863][ T1244] usb usb4-port1: unable to enumerate USB device [ 831.786086][ T5600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 831.833148][ T5600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 831.892225][ T5600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 831.909512][ T5600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 831.911603][ T5600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 832.806663][T21654] syzkaller0: entered promiscuous mode [ 832.806692][T21654] syzkaller0: entered allmulticast mode [ 832.808803][T21656] tipc: Enabling of bearer rejected, failed to enable media [ 832.984868][T18526] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 833.114939][T18526] usb 4-1: device descriptor read/64, error -71 [ 833.355026][T18526] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 833.485324][T18526] usb 4-1: device descriptor read/64, error -71 [ 833.597803][T18526] usb usb4-port1: attempt power cycle [ 833.914450][T13557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.938530][T18526] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 833.960738][T18526] usb 4-1: device descriptor read/8, error -71 [ 834.132516][ T5613] Bluetooth: hci4: command tx timeout [ 834.194910][T18526] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 834.215837][T18526] usb 4-1: device descriptor read/8, error -71 [ 834.325579][T18526] usb usb4-port1: unable to enumerate USB device [ 834.679003][T13557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.471906][T13557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.621800][T21729] tipc: Enabling of bearer rejected, failed to enable media [ 835.622317][T21736] syzkaller0: entered promiscuous mode [ 835.622339][T21736] syzkaller0: entered allmulticast mode [ 836.187184][T13557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.204972][ T5613] Bluetooth: hci4: command tx timeout [ 836.314890][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 836.464873][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 836.465805][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 836.467302][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.467350][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 836.467379][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 836.467402][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 836.467427][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 836.468865][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 836.468891][ T10] usb 2-1: Manufacturer: syz [ 836.556088][ T10] usb 2-1: config 0 descriptor?? [ 836.866399][ T10] rc_core: IR keymap rc-hauppauge not found [ 836.866418][ T10] Registered IR keymap rc-empty [ 836.866534][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 836.884990][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 836.907514][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 836.910994][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input61 [ 836.971082][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 836.985509][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 837.006745][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 837.024942][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 837.044932][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 837.064903][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 837.084915][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 837.105148][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 837.124973][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 837.144930][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 837.189161][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 837.189185][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 837.249436][ T10] usb 2-1: USB disconnect, device number 56 [ 837.969955][T21625] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.970076][T21625] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.970266][T21625] bridge_slave_0: entered allmulticast mode [ 837.979371][T21625] bridge_slave_0: entered promiscuous mode [ 837.992347][T21809] syzkaller0: entered promiscuous mode [ 837.992369][T21809] syzkaller0: entered allmulticast mode [ 838.000580][T21814] tipc: Enabling of bearer rejected, failed to enable media [ 838.003980][T21625] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.004169][T21625] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.004325][T21625] bridge_slave_1: entered allmulticast mode [ 838.012395][T21625] bridge_slave_1: entered promiscuous mode [ 838.195449][T21824] loop4: detected capacity change from 0 to 7 [ 838.198867][T21824] Dev loop4: unable to read RDB block 7 [ 838.198888][T21824] loop4: AHDI p2 p3 [ 838.198898][T21824] loop4: partition table partially beyond EOD, truncated [ 838.199072][T21824] loop4: p3 start 335544320 is beyond EOD, truncated [ 838.284954][ T5613] Bluetooth: hci4: command tx timeout [ 838.418279][T21625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.674958][ T1244] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 838.708976][T21625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.828075][ T1244] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 838.829300][ T1244] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 838.829329][ T1244] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 838.829371][ T1244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.084667][T13557] bridge_slave_1: left allmulticast mode [ 839.087589][T13557] bridge_slave_1: left promiscuous mode [ 839.090977][T13557] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.114809][ T1244] usb 4-1: usb_control_msg returned -32 [ 839.114855][ T1244] usbtmc 4-1:16.0: can't read capabilities [ 839.278099][T13557] bridge_slave_0: left allmulticast mode [ 839.278132][T13557] bridge_slave_0: left promiscuous mode [ 839.278379][T13557] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.675526][ T10] usb 4-1: USB disconnect, device number 88 [ 840.064354][T21853] netlink: 'syz.1.5566': attribute type 61 has an invalid length. [ 840.308691][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5584'. [ 840.364999][ T5613] Bluetooth: hci4: command tx timeout [ 840.735668][T13557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.782833][T13557] bond0 (unregistering): Released all slaves [ 840.804432][T13557] bond1 (unregistering): Released all slaves [ 840.838254][T13557] bond2 (unregistering): Released all slaves [ 841.064913][T21625] team0: Port device team_slave_0 added [ 841.074949][T21625] team0: Port device team_slave_1 added [ 841.250038][T13557] tipc: Left network mode [ 841.259231][T21625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.259245][T21625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.259270][T21625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.269545][T21625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.269559][T21625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.269584][T21625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.624657][T21625] hsr_slave_0: entered promiscuous mode [ 841.640817][T21625] hsr_slave_1: entered promiscuous mode [ 841.641554][T21625] debugfs: 'hsr0' already exists in 'hsr' [ 841.641574][T21625] Cannot create hsr debugfs directory [ 842.388454][T21984] netlink: 'syz.3.5613': attribute type 1 has an invalid length. [ 842.459621][T21978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5613'. [ 842.582763][T21984] 8021q: adding VLAN 0 to HW filter on device bond3 [ 842.692408][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 842.968036][T13557] hsr_slave_0: left promiscuous mode [ 843.005180][T13557] hsr_slave_1: left promiscuous mode [ 843.006377][T13557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.006393][T13557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.072849][T13557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.072866][T13557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.159565][T13557] veth1_macvtap: left promiscuous mode [ 843.159633][T13557] veth0_macvtap: left promiscuous mode [ 843.159772][T13557] veth1_vlan: left promiscuous mode [ 843.159871][T13557] veth0_vlan: left promiscuous mode [ 843.251692][T22010] loop4: detected capacity change from 0 to 7 [ 843.286511][T22010] Dev loop4: unable to read RDB block 7 [ 843.286552][T22010] loop4: unable to read partition table [ 843.286751][T22010] loop4: partition table beyond EOD, truncated [ 843.288338][T22010] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 843.948582][T13557] team0 (unregistering): Port device team_slave_1 removed [ 843.975893][T13557] team0 (unregistering): Port device team_slave_0 removed [ 844.103726][T22001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5621'. [ 845.694584][T22052] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5641'. [ 847.186732][ T1244] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 847.351889][ T1244] usb 4-1: Using ep0 maxpacket: 16 [ 847.353641][ T1244] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 847.353696][ T1244] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 847.379889][ T1244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.381273][ T1244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.382519][ T1244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.383724][ T1244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.448089][ T1244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.470672][ T1244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.473528][ T1244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.475002][ T1244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.504971][ T5707] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 847.516076][ T1244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 847.516102][ T1244] usb 4-1: SerialNumber: syz [ 847.655676][ T5707] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 847.657269][ T5707] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 847.657300][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 847.657327][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 847.657351][ T5707] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 847.657394][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.777685][ T5707] usb 2-1: config 0 descriptor?? [ 847.787575][T22096] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5654'. [ 847.824094][ T1244] usb 4-1: config 0 descriptor?? [ 847.881657][ T1244] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input62 [ 848.063771][ T4940] bcm5974 4-1:0.0: could not read from device [ 848.218691][ T4940] bcm5974 4-1:0.0: could not read from device [ 848.270664][ T1244] usb 4-1: USB disconnect, device number 89 [ 848.355832][ T5707] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 848.404260][T22117] loop4: detected capacity change from 0 to 7 [ 848.435104][T22117] Dev loop4: unable to read RDB block 7 [ 848.435133][T22117] loop4: AHDI p2 p3 [ 848.435149][T22117] loop4: partition table partially beyond EOD, truncated [ 848.435344][T22117] loop4: p3 start 335544320 is beyond EOD, truncated [ 849.195913][ T5707] usb 2-1: USB disconnect, device number 57 [ 849.648698][T21625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 849.696297][T21625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 849.702820][T21625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 849.816799][T21625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 849.823996][T21625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 849.894212][T21625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 849.899051][T21625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 849.956351][T21625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 850.494473][T21625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.632683][T21625] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.676056][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.677924][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.723177][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.723303][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.210340][T21625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.383277][T21625] veth0_vlan: entered promiscuous mode [ 852.406056][T21625] veth1_vlan: entered promiscuous mode [ 852.434960][ T31] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 852.545770][T21625] veth0_macvtap: entered promiscuous mode [ 852.587926][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 852.588329][T21625] veth1_macvtap: entered promiscuous mode [ 852.608576][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.608600][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 852.614601][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.614625][ T31] usb 4-1: Product: syz [ 852.614639][ T31] usb 4-1: Manufacturer: syz [ 852.614653][ T31] usb 4-1: SerialNumber: syz [ 852.704824][ T31] usb 4-1: cannot find UAC_HEADER [ 852.800299][T21625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.969316][T21625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.071095][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 853.092626][ T31] usb 4-1: USB disconnect, device number 90 [ 853.179301][T13557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.180717][ T1180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.180757][ T1180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.180790][ T1180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.289700][T16113] udevd[16113]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 853.699560][T22271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5705'. [ 853.827064][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.827085][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.173574][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.173593][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.340556][T22284] loop4: detected capacity change from 0 to 7 [ 854.352928][T22284] Dev loop4: unable to read RDB block 7 [ 854.352956][T22284] loop4: AHDI p2 p3 [ 854.352975][T22284] loop4: partition table partially beyond EOD, truncated [ 854.353298][T22284] loop4: p3 start 335544320 is beyond EOD, truncated [ 855.299411][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 855.352345][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 855.354250][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 855.409190][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 855.411344][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 855.891470][T22316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5721'. [ 856.009486][T22313] syzkaller0: entered promiscuous mode [ 856.009511][T22313] syzkaller0: entered allmulticast mode [ 856.383011][T22336] loop4: detected capacity change from 0 to 7 [ 856.387895][T22336] Dev loop4: unable to read RDB block 7 [ 856.387921][T22336] loop4: AHDI p2 p3 [ 856.387940][T22336] loop4: partition table partially beyond EOD, truncated [ 856.388181][T22336] loop4: p3 start 335544320 is beyond EOD, truncated [ 856.514939][ T5729] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 856.668868][ T5729] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 856.677743][ T5729] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 856.677775][ T5729] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 856.677813][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.700767][T22330] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 856.718173][T22342] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5729'. [ 856.728428][ T5729] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 857.152946][ T5729] usb 1-1: USB disconnect, device number 96 [ 857.501638][ T1180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.521413][T22352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5732'. [ 857.521442][T22352] netlink: 'syz.3.5732': attribute type 7 has an invalid length. [ 857.521452][T22352] netlink: 'syz.3.5732': attribute type 8 has an invalid length. [ 857.521462][T22352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5732'. [ 857.567337][ T5613] Bluetooth: hci2: command tx timeout [ 857.639439][T22352] syz_tun: entered promiscuous mode [ 857.668174][T22352] syz_tun: left promiscuous mode [ 857.882163][T22361] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5735'. [ 858.532083][ T1180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.188504][T22382] netlink: 'syz.1.5740': attribute type 61 has an invalid length. [ 859.188527][T22382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5740'. [ 859.434016][ T1180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.645703][ T5613] Bluetooth: hci2: command tx timeout [ 859.960749][ T1180] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.027844][T22420] netlink: 'syz.4.5750': attribute type 1 has an invalid length. [ 861.092581][T22421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5750'. [ 861.283416][T22420] 8021q: adding VLAN 0 to HW filter on device bond2 [ 861.687201][T22307] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.687293][T22307] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.687423][T22307] bridge_slave_0: entered allmulticast mode [ 861.690478][T22307] bridge_slave_0: entered promiscuous mode [ 861.725317][ T5613] Bluetooth: hci2: command tx timeout [ 861.814878][ T5602] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 861.967015][ T5602] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 861.968732][ T5602] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 861.968766][ T5602] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 861.968804][ T5602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.975894][ T31] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 862.783416][T22434] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 862.784802][ T1180] bridge_slave_1: left allmulticast mode [ 862.784832][ T1180] bridge_slave_1: left promiscuous mode [ 862.785055][ T1180] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.862657][ T5602] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 862.864840][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 862.875814][ T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 862.880579][ T31] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 862.880602][ T31] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 862.880638][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.976293][ T1180] bridge_slave_0: left allmulticast mode [ 862.976314][ T1180] bridge_slave_0: left promiscuous mode [ 862.976486][ T1180] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.081666][ T5602] usb 2-1: USB disconnect, device number 58 [ 863.727122][ T1180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.805579][ T5613] Bluetooth: hci2: command tx timeout [ 863.835766][ T1180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.856698][ T1180] bond0 (unregistering): Released all slaves [ 863.895108][T22307] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.895213][T22307] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.895363][T22307] bridge_slave_1: entered allmulticast mode [ 863.897395][T22307] bridge_slave_1: entered promiscuous mode [ 864.304246][T22307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.334023][T22307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.638607][ T5786] usb 5-1: USB disconnect, device number 91 [ 864.895134][T22470] netlink: 'syz.4.5762': attribute type 1 has an invalid length. [ 864.950036][T22474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5762'. [ 864.968826][T22472] loop4: detected capacity change from 0 to 7 [ 864.976153][T22472] Dev loop4: unable to read RDB block 7 [ 864.976180][T22472] loop4: AHDI p2 p3 [ 864.976199][T22472] loop4: partition table partially beyond EOD, truncated [ 864.996340][T22472] loop4: p3 start 335544320 is beyond EOD, truncated [ 865.030193][ T4955] Dev loop4: unable to read RDB block 7 [ 865.030216][ T4955] loop4: AHDI p2 p3 [ 865.030237][ T4955] loop4: partition table partially beyond EOD, truncated [ 865.030454][ T4955] loop4: p3 start 335544320 is beyond EOD, truncated [ 865.082448][T22470] 8021q: adding VLAN 0 to HW filter on device bond3 [ 865.104278][T22307] team0: Port device team_slave_0 added [ 865.720727][T22307] team0: Port device team_slave_1 added [ 866.784792][T22307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.784808][T22307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.785344][T22307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.009087][T22307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.009104][T22307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.009131][T22307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.397828][ T1180] hsr_slave_0: left promiscuous mode [ 867.439926][ T1180] hsr_slave_1: left promiscuous mode [ 867.440821][ T1180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.440845][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.488259][ T1180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.488283][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.738729][ T1180] veth1_macvtap: left promiscuous mode [ 867.738834][ T1180] veth0_macvtap: left promiscuous mode [ 867.739089][ T1180] veth1_vlan: left promiscuous mode [ 867.739272][ T1180] veth0_vlan: left promiscuous mode [ 868.035112][ T5786] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 868.190052][ T5786] usb 2-1: unable to get BOS descriptor or descriptor too short [ 868.190108][ T5786] usb 2-1: New USB device found, idVendor=046d, idProduct=092b, bcdDevice=6b.72 [ 868.191148][ T5786] usb 2-1: config 114 has an invalid interface number: 183 but max is 0 [ 868.191173][ T5786] usb 2-1: config 114 has no interface number 0 [ 868.191206][ T5786] usb 2-1: config 114 interface 183 has no altsetting 0 [ 868.193385][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.193409][ T5786] usb 2-1: Product: syz [ 868.193422][ T5786] usb 2-1: Manufacturer: syz [ 868.193433][ T5786] usb 2-1: SerialNumber: syz [ 868.669939][T22530] netlink: 'syz.1.5774': attribute type 1 has an invalid length. [ 868.669979][T22530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.975571][ T1180] team0 (unregistering): Port device team_slave_1 removed [ 869.045635][ T1180] team0 (unregistering): Port device team_slave_0 removed [ 869.123225][T22534] netlink: 'syz.3.5775': attribute type 1 has an invalid length. [ 869.178577][T22535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5775'. [ 869.579813][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 869.916059][T22534] 8021q: adding VLAN 0 to HW filter on device bond4 [ 869.978351][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.978417][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.025737][T22307] hsr_slave_0: entered promiscuous mode [ 870.029946][T22307] hsr_slave_1: entered promiscuous mode [ 870.031286][T22307] debugfs: 'hsr0' already exists in 'hsr' [ 870.031310][T22307] Cannot create hsr debugfs directory [ 870.077983][T22547] loop4: detected capacity change from 0 to 7 [ 870.085684][T22547] Dev loop4: unable to read RDB block 7 [ 870.085715][T22547] loop4: AHDI p2 p3 [ 870.085735][T22547] loop4: partition table partially beyond EOD, truncated [ 870.085962][T22547] loop4: p3 start 335544320 is beyond EOD, truncated [ 870.968638][ T5786] gspca_main: spca561-2.14.0 probing 046d:092b [ 870.981237][ T5786] spca561 2-1:114.183: probe with driver spca561 failed with error -22 [ 871.035309][ T5786] usb 2-1: USB disconnect, device number 59 [ 871.075437][ T5602] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 871.203796][T22573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5785'. [ 871.203831][T22573] netlink: 'syz.1.5785': attribute type 7 has an invalid length. [ 871.203846][T22573] netlink: 'syz.1.5785': attribute type 8 has an invalid length. [ 871.203859][T22573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5785'. [ 871.234844][ T5602] usb 5-1: Using ep0 maxpacket: 16 [ 871.235679][ T5602] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 871.264922][ T5602] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 81 [ 871.275623][ T5602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.275648][ T5602] usb 5-1: Product: syz [ 871.275663][ T5602] usb 5-1: Manufacturer: syz [ 871.275677][ T5602] usb 5-1: SerialNumber: syz [ 871.376096][ T5602] usb 5-1: config 0 descriptor?? [ 871.378115][T22573] syz_tun: entered promiscuous mode [ 871.383027][T22564] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 871.431645][T22573] syz_tun: left promiscuous mode [ 871.444164][ T5602] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 871.746247][T22568] netlink: 'syz.3.5780': attribute type 61 has an invalid length. [ 872.594476][T13565] usb 5-1: Failed to submit usb control message: -71 [ 872.594511][T13565] usb 5-1: unable to send the bmi data to the device: -71 [ 872.594529][T13565] usb 5-1: unable to get target info from device [ 872.594544][T13565] usb 5-1: could not get target info (-71) [ 872.594649][T13565] usb 5-1: could not probe fw (-71) [ 872.700665][ T5729] usb 5-1: USB disconnect, device number 92 [ 872.975036][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2 [ 874.529621][T22614] loop4: detected capacity change from 0 to 7 [ 874.532254][T22614] Dev loop4: unable to read RDB block 7 [ 874.532282][T22614] loop4: AHDI p2 p3 [ 874.532302][T22614] loop4: partition table partially beyond EOD, truncated [ 874.532508][T22614] loop4: p3 start 335544320 is beyond EOD, truncated [ 876.740693][T22648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 877.231840][ T5786] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 877.385575][ T5786] usb 5-1: Using ep0 maxpacket: 16 [ 877.394943][ T5786] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 877.405418][ T5786] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 81 [ 877.409449][ T5786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.409472][ T5786] usb 5-1: Product: syz [ 877.409488][ T5786] usb 5-1: Manufacturer: syz [ 877.409503][ T5786] usb 5-1: SerialNumber: syz [ 877.456527][ T5786] usb 5-1: config 0 descriptor?? [ 877.461339][T22653] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 877.535107][ T5786] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 879.202651][ T1168] usb 5-1: Failed to submit usb control message: -110 [ 879.202687][ T1168] usb 5-1: unable to send the bmi data to the device: -110 [ 879.202757][ T1168] usb 5-1: unable to get target info from device [ 879.202773][ T1168] usb 5-1: could not get target info (-110) [ 879.203011][ T1168] usb 5-1: could not probe fw (-110) [ 881.015460][ T31] usb 5-1: USB disconnect, device number 93 [ 881.273052][T22700] loop4: detected capacity change from 0 to 7 [ 881.276713][T22700] Dev loop4: unable to read RDB block 7 [ 881.276739][T22700] loop4: AHDI p2 p3 [ 881.276758][T22700] loop4: partition table partially beyond EOD, truncated [ 881.292721][T22700] loop4: p3 start 335544320 is beyond EOD, truncated [ 881.583786][T22707] loop4: detected capacity change from 0 to 7 [ 881.604751][T22707] Dev loop4: unable to read RDB block 7 [ 881.604883][T22707] loop4: AHDI p2 p3 [ 881.604905][T22707] loop4: partition table partially beyond EOD, truncated [ 881.605167][T22707] loop4: p3 start 335544320 is beyond EOD, truncated [ 881.766573][T22307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 881.825308][T22307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 881.829090][T22307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 881.902587][T22307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 881.912966][T22307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 881.957498][T22307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 881.960534][T22307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 882.010512][T22307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 882.078090][T22720] Invalid logical block size (8192) [ 882.406302][ T5786] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 882.504145][T22307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.564895][ T5321] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 882.590616][ T5786] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 882.591970][T22307] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.593236][ T5786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.593289][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.676428][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.676562][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.681857][ T5786] as10x_usb: device has been detected [ 882.682697][ T5786] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 882.718756][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.718895][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.751845][ T5786] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 882.754962][ T5321] usb 2-1: Using ep0 maxpacket: 16 [ 882.767435][ T5321] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 882.781395][ T5321] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 81 [ 882.792162][ T5321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.792188][ T5321] usb 2-1: Product: syz [ 882.792202][ T5321] usb 2-1: Manufacturer: syz [ 882.792217][ T5321] usb 2-1: SerialNumber: syz [ 882.823264][ T5786] as10x_usb: error during firmware upload part1 [ 882.831478][ T5786] Registered device Abilis Systems DVB-Titan [ 882.836267][ T5321] usb 2-1: config 0 descriptor?? [ 882.841441][T22732] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 882.894588][ T5321] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 882.974987][T22729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.976874][T22729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.123061][ T5729] usb 1-1: USB disconnect, device number 97 [ 883.244636][ T5729] Unregistered device Abilis Systems DVB-Titan [ 883.269014][ T5729] as10x_usb: device has been disconnected [ 884.325626][ T5707] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 884.515840][ T5707] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 884.519251][ T5707] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.519305][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.639321][ T5707] as10x_usb: device has been detected [ 884.646670][ T5707] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 884.714948][T13557] usb 2-1: Failed to submit usb control message: -110 [ 884.714981][T13557] usb 2-1: unable to send the bmi data to the device: -110 [ 884.714999][T13557] usb 2-1: unable to get target info from device [ 884.715014][T13557] usb 2-1: could not get target info (-110) [ 884.715135][T13557] usb 2-1: could not probe fw (-110) [ 884.872584][ T5707] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 884.929149][T22765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.956505][T22765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.982583][ T5707] as10x_usb: error during firmware upload part1 [ 885.002927][ T5707] Registered device Abilis Systems DVB-Titan [ 885.312145][ T1244] usb 1-1: USB disconnect, device number 98 [ 885.481296][ T1244] Unregistered device Abilis Systems DVB-Titan [ 885.487384][ T1244] as10x_usb: device has been disconnected [ 885.518547][ T5321] usb 2-1: USB disconnect, device number 60 [ 885.934901][ T5707] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 886.014097][T22796] Invalid logical block size (8192) [ 886.033890][T22307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.085627][ T5707] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 886.086963][ T5707] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.087007][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.350437][T22307] veth0_vlan: entered promiscuous mode [ 886.363003][T22307] veth1_vlan: entered promiscuous mode [ 886.406678][ T5707] as10x_usb: device has been detected [ 886.407535][ T5707] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 887.286289][T22783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.286342][ T5707] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 887.320361][T22783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.335618][ T5707] as10x_usb: error during firmware upload part1 [ 887.339255][ T5707] Registered device Abilis Systems DVB-Titan [ 887.375044][ T5707] usb 4-1: USB disconnect, device number 91 [ 887.444486][ T5707] Unregistered device Abilis Systems DVB-Titan [ 887.461944][ T5707] as10x_usb: device has been disconnected [ 887.484666][T22803] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 887.487868][T22803] team0: Device ipvlan4 failed to register rx_handler [ 887.733344][T22307] veth0_macvtap: entered promiscuous mode [ 887.751702][T22307] veth1_macvtap: entered promiscuous mode [ 887.844189][T22307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.888233][T22307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.975495][T13565] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.268438][ T1170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.270428][ T1168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.270469][ T1168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.294882][ T5707] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 888.462629][ T5707] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 888.474182][ T5707] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 888.474231][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.591399][ T5707] as10x_usb: device has been detected [ 888.592085][ T5707] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 888.634557][ T5707] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 888.677513][ T5707] as10x_usb: error during firmware upload part1 [ 888.678124][ T5707] Registered device Abilis Systems DVB-Titan [ 888.939849][T22826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.940400][T22826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.023231][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.023251][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.423966][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.423986][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.374944][ T9] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 891.519388][T22860] netlink: 'syz.0.5840': attribute type 61 has an invalid length. [ 891.565633][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 891.567105][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.567137][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 891.567165][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 891.567189][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 891.567229][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.641831][ T9] usb 4-1: config 0 descriptor?? [ 892.125342][ T9] plantronics 0003:047F:FFFF.0026: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 892.176712][ T1244] usb 2-1: USB disconnect, device number 61 [ 892.346337][ T1244] Unregistered device Abilis Systems DVB-Titan [ 892.357033][ T1244] as10x_usb: device has been disconnected [ 892.494297][T22892] input: syz1 as /devices/virtual/input/input66 [ 893.866991][ T10] usb 4-1: USB disconnect, device number 92 [ 894.404939][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 894.565107][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 894.566448][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 894.570408][ T10] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 894.570434][ T10] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 894.570470][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.386939][T22933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5862'. [ 896.318039][T22956] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5869'. [ 896.345277][ T9] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 896.505532][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 896.506855][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 896.506874][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 896.506887][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 896.506900][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 896.506923][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.582684][ T9] usb 5-1: config 0 descriptor?? [ 896.807630][T22959] kvm: kvm [22958]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4c504700 [ 897.187984][ T5602] usb 4-1: USB disconnect, device number 93 [ 897.239859][ T9] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 897.372515][T22967] syzkaller0: entered promiscuous mode [ 897.372647][T22967] syzkaller0: entered allmulticast mode [ 897.390430][T22967] tipc: Started in network mode [ 897.390458][T22967] tipc: Node identity 8a1447c763c8, cluster identity 4711 [ 897.410648][T22967] tipc: Enabled bearer , priority 0 [ 897.427233][T22967] tipc: Resetting bearer [ 897.486687][T22966] tipc: Resetting bearer [ 897.677504][T22966] tipc: Disabling bearer [ 898.884913][ T5602] usb 5-1: reset high-speed USB device number 94 using dummy_hcd [ 899.014435][T23013] syzkaller0: entered promiscuous mode [ 899.014461][T23013] syzkaller0: entered allmulticast mode [ 899.045595][T23013] tipc: Started in network mode [ 899.045625][T23013] tipc: Node identity 5a7cc032a1ad, cluster identity 4711 [ 899.080638][T23013] tipc: Enabled bearer , priority 0 [ 899.127464][T23013] tipc: Resetting bearer [ 899.195715][T23011] tipc: Resetting bearer [ 899.438693][T23011] tipc: Disabling bearer [ 899.696044][ T10] usb 5-1: USB disconnect, device number 94 [ 900.064557][T23012] netlink: 'syz.3.5886': attribute type 61 has an invalid length. [ 900.254428][T23015] netlink: 'syz.4.5892': attribute type 61 has an invalid length. [ 901.270872][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 901.314561][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 901.327682][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 901.330931][ T5600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 901.345432][ T5600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 902.404897][ T1244] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 902.564898][ T1244] usb 1-1: Using ep0 maxpacket: 16 [ 902.566012][ T1244] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 902.567761][ T1244] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 81 [ 902.571600][ T1244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.571625][ T1244] usb 1-1: Product: syz [ 902.571641][ T1244] usb 1-1: Manufacturer: syz [ 902.571664][ T1244] usb 1-1: SerialNumber: syz [ 902.612632][ T1244] usb 1-1: config 0 descriptor?? [ 902.613796][T23068] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 902.768006][ T1244] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 903.488489][ T5613] Bluetooth: hci1: command tx timeout [ 903.810516][ T1170] usb 1-1: Failed to submit usb control message: -71 [ 903.810559][ T1170] usb 1-1: unable to send the bmi data to the device: -71 [ 903.810577][ T1170] usb 1-1: unable to get target info from device [ 903.810592][ T1170] usb 1-1: could not get target info (-71) [ 903.810712][ T1170] usb 1-1: could not probe fw (-71) [ 903.811674][ T1244] usb 1-1: USB disconnect, device number 99 [ 905.162500][ T1837] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.565522][ T5613] Bluetooth: hci1: command tx timeout [ 906.001687][ T1837] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.124940][ T5602] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 906.317061][ T5602] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 906.318367][ T5602] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 906.318398][ T5602] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 906.318435][ T5602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.393875][ T5602] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 906.394419][ T5602] usb 1-1: invalid MIDI out EP 0 [ 906.547512][ T1837] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.307268][ T5602] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 907.321420][ T5602] usb 1-1: USB disconnect, device number 100 [ 907.499872][T23155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5926'. [ 907.499895][T23155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5926'. [ 907.579661][ T1837] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.656520][ T5613] Bluetooth: hci1: command tx timeout [ 907.820703][T23155] ip6gretap0: entered promiscuous mode [ 907.821668][T23155] syz_tun: entered promiscuous mode [ 908.549937][T23172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5931'. [ 908.549955][T23172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5931'. [ 908.550001][T23172] netlink: 'syz.0.5931': attribute type 1 has an invalid length. [ 908.550009][T23172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5931'. [ 908.630700][T23049] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.631055][T23049] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.631243][T23049] bridge_slave_0: entered allmulticast mode [ 908.653406][T23049] bridge_slave_0: entered promiscuous mode [ 908.692794][T23049] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.702093][T23049] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.702465][T23049] bridge_slave_1: entered allmulticast mode [ 908.712259][T23049] bridge_slave_1: entered promiscuous mode [ 909.401199][T23049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.426157][T23049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.682130][T23049] team0: Port device team_slave_0 added [ 909.686929][T23049] team0: Port device team_slave_1 added [ 909.724987][ T5613] Bluetooth: hci1: command tx timeout [ 909.881109][ T1837] bridge_slave_1: left allmulticast mode [ 909.881143][ T1837] bridge_slave_1: left promiscuous mode [ 909.881398][ T1837] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.043299][ T1837] bridge_slave_0: left allmulticast mode [ 910.043334][ T1837] bridge_slave_0: left promiscuous mode [ 910.051995][ T1837] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.667283][T23206] loop4: detected capacity change from 0 to 7 [ 910.670675][T23206] Dev loop4: unable to read RDB block 7 [ 910.670701][T23206] loop4: AHDI p2 p3 [ 910.670722][T23206] loop4: partition table partially beyond EOD, truncated [ 910.672963][T23206] loop4: p3 start 335544320 is beyond EOD, truncated [ 911.380237][T23217] page: refcount:3 mapcount:1 mapping:ffff888027577420 index:0x347 pfn:0x40de0 [ 911.380266][T23217] memcg:fff[ 911.380266][T23217] memcg:ffff888034d66d80 [ 911.380281][T23217] aops:def_blk_aops ino:fa00000 [ 911.380801][T23217] flags: 0x8000000000092d(locked|referenced|uptodate|lru|active|owner_2|node=0|zone=1) [ 911.381152][T23217] raw: 008000000000092d ffffea0000b26bc8 ffffea0000eff608 ffff888027577420 [ 911.381554][T23217] raw: 0000000000000347 0000000000000000 0000000300000000 ffff888034d66d80 [ 911.382072][T23217] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 911.382335][T23217] page_owner tracks the page as allocated [ 911.382484][T23217] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 23202, tgid 23199 (syz.2.5940), ts 910834222561, free_ts 908044592442 [ 911.382525][T23217] post_alloc_hook+0x1f9/0x250 [ 911.382551][T23217] get_page_from_freelist+0x2630/0x26a0 [ 911.382576][T23217] __alloc_frozen_pages_noprof+0x18d/0x380 [ 911.382600][T23217] alloc_pages_mpol+0xce/0x280 [ 911.382624][T23217] alloc_pages_noprof+0xd2/0x2f0 [ 911.382648][T23217] folio_alloc_noprof+0x22/0xc0 [ 911.382671][T23217] filemap_alloc_folio_noprof+0x111/0x4d0 [ 911.382756][T23217] page_cache_ra_unbounded+0x2d6/0x8f0 [ 911.382824][T23217] page_cache_ra_order+0x2c1/0x4a0 [ 911.382852][T23217] filemap_fault+0x741/0x13c0 [ 911.382881][T23217] __do_fault+0x138/0x2a0 [ 911.382905][T23217] do_pte_missing+0x1828/0x28f0 [ 911.383826][T23217] handle_mm_fault+0xd28/0x13f0 [ 911.383853][T23217] __get_user_pages+0x166b/0x2590 [ 911.383921][T23217] populate_vma_page_range+0x2be/0x3c0 [ 911.383950][T23217] __mm_populate+0x25f/0x390 [ 911.383979][T23217] page last free pid 23133 tgid 23132 stack trace: [ 911.383992][T23217] free_unref_folios+0xcd4/0x1910 [ 911.384014][T23217] folios_put_refs+0x815/0x920 [ 911.384034][T23217] truncate_inode_pages_range+0x3cd/0xd80 [ 911.384083][T23217] blkdev_flush_mapping+0x10c/0x2f0 [ 911.384144][T23217] bdev_release+0x44e/0x690 [ 911.384163][T23217] blkdev_release+0x15/0x20 [ 911.384184][T23217] __fput+0x42a/0xa80 [ 911.384231][T23217] task_work_run+0x1d9/0x270 [ 911.384321][T23217] do_exit+0x73a/0x2360 [ 911.384409][T23217] do_group_exit+0x22d/0x2f0 [ 911.384438][T23217] get_signal+0x121b/0x12c0 [ 911.384483][T23217] arch_do_signal_or_restart+0xbb/0x860 [ 911.384574][T23217] exit_to_user_mode_loop+0x10e/0x770 [ 911.384629][T23217] do_syscall_64+0x328/0x520 [ 911.384653][T23217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.384875][T23217] ------------[ cut here ]------------ [ 911.384886][T23217] kernel BUG at mm/filemap.c:155! [ 911.392755][T23217] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 911.392835][T23217] CPU: 0 UID: 0 PID: 23217 Comm: syz.2.5940 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 911.392864][T23217] Tainted: [L]=SOFTLOCKUP [ 911.392873][T23217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 911.392886][T23217] RIP: 0010:filemap_unaccount_folio+0x506/0x550 [ 911.392915][T23217] Code: 7f c1 ff 48 89 df 48 c7 c6 c0 20 78 8b e8 a2 6a 23 ff 90 0f 0b e8 0a 7f c1 ff 48 89 df 48 c7 c6 80 1e 78 8b e8 8b 6a 23 ff 90 <0f> 0b e8 f3 7e c1 ff 48 89 df 48 c7 c6 c0 20 78 8b e8 74 6a 23 ff [ 911.392935][T23217] RSP: 0018:ffffc90005747580 EFLAGS: 00010246 [ 911.392955][T23217] RAX: 1f7d48b6f99e9200 RBX: ffffea0001037800 RCX: 0000000000000046 [ 911.392971][T23217] RDX: 0000000000000006 RSI: ffffffff8dafa05a RDI: ffff888029f78000 [ 911.392987][T23217] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 911.393000][T23217] R10: dffffc0000000000 R11: ffffed10170c4903 R12: ffffea0001037830 [ 911.393016][T23217] R13: ffff888027577420 R14: 1ffffd4000206f00 R15: 1ffffd4000206f01 [ 911.393032][T23217] FS: 00007f574265e6c0(0000) GS:ffff888125c32000(0000) knlGS:0000000000000000 [ 911.393050][T23217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 911.393064][T23217] CR2: 0000001b2f31cff8 CR3: 0000000060856000 CR4: 00000000003526f0 [ 911.393083][T23217] Call Trace: [ 911.393091][T23217] [ 911.393100][T23217] ? trace_mm_filemap_delete_from_page_cache+0x7c/0x1d0 [ 911.393128][T23217] delete_from_page_cache_batch+0x16c/0xba0 [ 911.393153][T23217] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 911.393215][T23217] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 911.393241][T23217] ? __folio_cancel_dirty+0xf2/0x3f0 [ 911.393265][T23217] ? __folio_cancel_dirty+0x303/0x3f0 [ 911.393287][T23217] ? __folio_cancel_dirty+0xf2/0x3f0 [ 911.393311][T23217] truncate_inode_pages_range+0x31b/0xd80 [ 911.393333][T23217] ? hrtimer_start_range_ns_common+0x841/0xb90 [ 911.393414][T23217] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 911.393461][T23217] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 911.393486][T23217] ? rwbase_write_lock+0x550/0x720 [ 911.393510][T23217] ? rwbase_write_lock+0x20b/0x720 [ 911.393534][T23217] truncate_bdev_range+0xc9/0x100 [ 911.393593][T23217] blkdev_common_ioctl+0x22eb/0x3250 [ 911.393670][T23217] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 911.393694][T23217] ? kasan_quarantine_put+0xbb/0x1f0 [ 911.393753][T23217] ? tomoyo_path_number_perm+0x219/0x5f0 [ 911.393804][T23217] ? tomoyo_path_number_perm+0x219/0x5f0 [ 911.393827][T23217] ? do_vfs_ioctl+0x1184/0x1550 [ 911.393883][T23217] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 911.393917][T23217] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 911.393939][T23217] ? hook_file_ioctl+0x1f3/0x600 [ 911.394016][T23217] ? __asan_memset+0x22/0x50 [ 911.394070][T23217] ? smack_file_ioctl+0x263/0x360 [ 911.394141][T23217] ? __pfx_smack_file_ioctl+0x10/0x10 [ 911.394162][T23217] blkdev_ioctl+0x52b/0x750 [ 911.394185][T23217] ? __pfx_blkdev_ioctl+0x10/0x10 [ 911.394207][T23217] ? __fget_files+0x2a/0x420 [ 911.394232][T23217] ? bpf_lsm_file_ioctl+0x9/0x20 [ 911.394252][T23217] ? __pfx_blkdev_ioctl+0x10/0x10 [ 911.394272][T23217] __se_sys_ioctl+0xff/0x170 [ 911.394301][T23217] do_syscall_64+0x166/0x520 [ 911.394321][T23217] ? trace_irq_disable+0x3b/0x140 [ 911.394341][T23217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.394362][T23217] ? clear_bhb_loop+0x70/0xc0 [ 911.394383][T23217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.394403][T23217] RIP: 0033:0x7f5744c8e0d9 [ 911.394421][T23217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.394438][T23217] RSP: 002b:00007f574265e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 911.394459][T23217] RAX: ffffffffffffffda RBX: 00007f5744f16360 RCX: 00007f5744c8e0d9 [ 911.394475][T23217] RDX: 0000200000000000 RSI: 000000000000127f RDI: 0000000000000004 [ 911.394489][T23217] RBP: 00007f5744d25024 R08: 0000000000000000 R09: 0000000000000000 [ 911.394503][T23217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.394517][T23217] R13: 00007f5744f163f8 R14: 00007f5744f16360 R15: 00007ffc4afdfc38 [ 911.394540][T23217] [ 911.394553][T23217] Modules linked in: [ 911.394586][T23217] ---[ end trace 0000000000000000 ]--- [ 911.397873][T23217] RIP: 0010:filemap_unaccount_folio+0x506/0x550 [ 911.397908][T23217] Code: 7f c1 ff 48 89 df 48 c7 c6 c0 20 78 8b e8 a2 6a 23 ff 90 0f 0b e8 0a 7f c1 ff 48 89 df 48 c7 c6 80 1e 78 8b e8 8b 6a 23 ff 90 <0f> 0b e8 f3 7e c1 ff 48 89 df 48 c7 c6 c0 20 78 8b e8 74 6a 23 ff [ 911.397928][T23217] RSP: 0018:ffffc90005747580 EFLAGS: 00010246 [ 911.397947][T23217] RAX: 1f7d48b6f99e9200 RBX: ffffea0001037800 RCX: 0000000000000046 [ 911.397963][T23217] RDX: 0000000000000006 RSI: ffffffff8dafa05a RDI: ffff888029f78000 [ 911.397979][T23217] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 911.397992][T23217] R10: dffffc0000000000 R11: ffffed10170c4903 R12: ffffea0001037830 [ 911.398009][T23217] R13: ffff888027577420 R14: 1ffffd4000206f00 R15: 1ffffd4000206f01 [ 911.398026][T23217] FS: 00007f574265e6c0(0000) GS:ffff888125c32000(0000) knlGS:0000000000000000 [ 911.398044][T23217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 911.398058][T23217] CR2: 0000001b2f31aff8 CR3: 0000000060856000 CR4: 00000000003526f0 [ 911.398085][T23217] Kernel panic - not syncing: Fatal exception [ 911.398343][T23217] Kernel Offset: disabled