last executing test programs: 5.296468051s ago: executing program 3 (id=2302): r0 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x901900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1000000000023) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="60239c0000009c0759cfaf4e75677492fb88b6a638b9dc058bd3b9772c6130304711a5c9cdb2ab0b665a560433133d682ee064cb91e47351be79eadbcb50f66d9331db583bcea6172363fc19e31a6d8d399767afe461b8e6dcc455a7c5023dd2860aac3ee05ca44a6cecdda3737a8ffa0bf28d69dd035fc36888"], &(0x7f0000000280)={0x0, 0x3, 0xd, @string={0xd, 0x3, "0b7562dfaca900f158e554"}}, &(0x7f00000002c0)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x10, 0x0, 0x422fb77, 0xf, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "8b90ee636b9ddb4ba45c3b08ad5f92a4"}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x60, 0x20, 0x3, "b2fb90a6", "fea8d620"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x8, 0xe, 0x8, 0x4, 0x5, 0x7}}}, &(0x7f0000000800)={0x84, 0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2f}, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x40, 0x8, [0xff00]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000540)={0x40, 0xb, 0x2, "5895"}, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'h>'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x20d}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xc5}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x21}}) landlock_restrict_self(r6, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socket(0x26, 0x5, 0xd) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 4.671041381s ago: executing program 3 (id=2304): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000033", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.835200648s ago: executing program 0 (id=2306): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x0, 0x10000000}, @flat=@weak_binder={0x77622a85, 0x1000, 0x10000000}, @fda={0x66646185, 0x6, 0x0, 0x26}}, &(0x7f0000000200)={0x0, 0x18, 0x3b}}, 0x40}], 0x0, 0x0, 0x0}) 3.749404311s ago: executing program 0 (id=2307): socket(0x1e, 0x4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x2, 0x6, 0x47, 0x3, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x8, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x229, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x200000b, 0xfff]}, 0x45c) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000013}) 3.748649171s ago: executing program 3 (id=2308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x3f}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 3.587374716s ago: executing program 3 (id=2310): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0xf) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) 3.558591887s ago: executing program 0 (id=2311): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, 0x0, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xfffffffe}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42400, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0xeff9, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.207398688s ago: executing program 3 (id=2314): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004cc0)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0x100}}], 0x2, 0x801) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x2, 0x57, {0x57, 0xe, "fad4ad148a52f4218e0c57ebb4aa8e104d043d764d440490e729b1006818e618c52eed38d9e2abae098b92644c3bbb2ea0d25984fb2c778d33528b99d239ce00dfbd99ec2dc73e6cf4895ef498b98ad79d338eed53"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, &(0x7f0000001200)={0x1c, &(0x7f0000000240)={0x0, 0x0, 0x98, "77a5b3302d965fe41e25ca1e915581b084dd4abe9b08e3e6ba720c96272430caf0781b91365d75a040dd87a02a1f1cf5a13148539b7ce5e68e4bc2b5666c2409757ec98fcab6e99294d273af86c3d1d85cca1ab5664f720a2a1da213db436cd41b8eae780dd53f9f0886d582ce2f893b21cfe835ae29b81dd884a31e6cf19baff2fb3b523bf90d4af5a5705d87ad32ba76e04a8a682d129b"}, &(0x7f0000000d80)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000011c0)}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xbfc) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b02, 0x0) 3.113315201s ago: executing program 1 (id=2315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x60880, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.014840594s ago: executing program 1 (id=2316): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x592, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 2.891415778s ago: executing program 1 (id=2317): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r5, 0x0, 0xff00) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x38}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xeeee8000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xddccb000, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, {0x118004, 0xdddd8000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x84, 0x0, 0x3}, {0x1000, 0x0, 0xd, 0x8, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0xeeef0000, 0x8, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x10000, 0xf, 0x0, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x3}, {0xd000, 0x41000, 0x3, 0x82, 0xfc, 0x10, 0x4, 0xe}, {0x0, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x0, 0x10, 0x1000000000000001, 0x0, 0x80a0000, [0x0, 0x0, 0x2, 0x5]}) ioctl$KVM_SET_MSRS(r9, 0x4140aecd, &(0x7f0000000340)={0x8, 0x0, [{0x814, 0x0, 0xffffffffffffe1d2}, {0x30b, 0x0, 0x80000000}, {0xb1b, 0x0, 0x8}, {0xae0597178a4dbc15, 0x0, 0x100000000}, {0x0, 0x0, 0x3}, {0xa47, 0x0, 0x5}, {0xaa0, 0x0, 0xb}, {0x912, 0x0, 0x7ff}]}) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x113002, 0x1a0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) 1.931370478s ago: executing program 0 (id=2321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="0a001800e6020303030300002682020000008150f8ae"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) syz_open_dev$video4linux(&(0x7f0000000480), 0xffffffffffffff52, 0x450202) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x4, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) 1.86696488s ago: executing program 0 (id=2322): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x400, @empty, 0x6eb3}], 0x1c) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.626591258s ago: executing program 0 (id=2323): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000079104000000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0], 0x14}}, 0x6048800) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1.510262572s ago: executing program 2 (id=2324): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x11, r0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000140)="1e", 0x1, 0x4b, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x8227, r0, 0x0, 0x0, 0x9, 0x0, 0x2}]) 1.465247053s ago: executing program 2 (id=2325): ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup2(r0, r1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.374263966s ago: executing program 2 (id=2326): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f00000001c0)=@raw=[@exit], &(0x7f0000000000)='GPL\x00', 0x2, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x11}, 0x94) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.201714632s ago: executing program 2 (id=2327): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x3f}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 1.115789034s ago: executing program 2 (id=2328): socket(0x1e, 0x4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x2, 0x6, 0x47, 0x3, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x8, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x229, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x200000b, 0xfff]}, 0x45c) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000013}) 1.074893206s ago: executing program 2 (id=2329): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201df00020000402505a1ae1c00010203010902680002010040000904000001020e0000052406000105240000000d370f010000e5ffffff00000006240d0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="000500000000973017d021b99ca7cf7f74a89831d5e088b9b4a3e1688cd87efab3a4bbaa16a62c98a8bc3df5167523547e4c1ce0d47abeea4c307dedcf26e94eab77102569602f1ad2475d5c6cae2462db8501bd285fae10999954081924802f50a964690b62ae9bdedeb4e4a418cdcde3ed4459a6d523e2e994b959bf0207123f7c7c7ed73c95789f322a79488a1ec58acdd0578bd977e0333fdd8cc5bf300adcb5ae0fc501e956d0a9bf79af6f94d615bb52bda775a59c43aaf063a4274e4dba1e032c2fcc131cedc68ed933591ad4"], &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, 0x0, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xb}, 0x0, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000740)={0x20, 0x83, 0x2, 0xfffe}, 0x0, 0x0}) syz_kvm_add_vcpu$x86(0x0, 0x0) geteuid() r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) write(r2, &(0x7f0000000000)="fc00", 0x2) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000880)=0x2) 229.349132ms ago: executing program 1 (id=2330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x87, 0x1ffffe, 0x11, 0x10002, 0x4, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 97.008697ms ago: executing program 1 (id=2331): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 21.253299ms ago: executing program 1 (id=2332): openat$ptmx(0xffffffffffffff9c, 0x0, 0x408c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1, 0x410, 0x1) write$tun(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="0000001c000104000800060007004a08013b0002000007019078640101010000000044208cb0000000050001000000000b2d0000004100000e4e000100f8ff00000244100c8000000009000000060000000089175eac1e00010000000064010100e0000001e0000001440cef43ac141424000080010000009078006501008350a5fa2604b8f133e893ff0969e2decacce0781977d583174eb7854a9de09a589d20c04075e93cc8993331a31e54fe66f5bf92c7e772d39b03b83e7495ab754b8ea77807705b84e909d46e67033f05704211ed01593058cbbe052b977fe43b99e86f85b87dc8c9766d5ddc1b7dc5b73bf4e313242e6c06075c3f8492a2ebdcfa08ddd246ae44f4785d30c205656d40739b872a2541ea3ff3482df318ae23d7e4df9a94ca6191f8f6840f56a77f9b2c0bf0ac322081f234b03e709d175f7e"], 0x149) ioctl$sock_ifreq(0xffffffffffffffff, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='batadv0\x00'}) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000140)) pipe2(&(0x7f0000000100), 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e00000/0x3000)=nil, 0x3000, &(0x7f0000000040)='8\xbd\xf37:\xab\x9e\xd7\xdd\x8d,\xb2\x81v\xf7\x06E\xdf\xc0.\xf1,\x17(\xab\x1d\xe0\xf5\x10\f\xedw\x9f\xe6\x8f\xf2:@\xb2Pp=\x8b\xd0+\xd83\xb8\x03\xd0\\\x1d$\xa0\xe5\xfcnv\xfe=\xa3 rejected, failed to enable media [ 369.845315][ T9662] syzkaller0: entered promiscuous mode [ 369.851635][ T9662] syzkaller0: entered allmulticast mode [ 372.100064][ T9702] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.107489][ T9702] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.586896][ T9702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.636388][ T9702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.957116][ T9702] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.966444][ T9702] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.975434][ T9702] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.984312][ T9702] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.086816][ T9709] syz0: rxe_set_mtu: Set mtu to 1024 [ 373.092886][ T9709] infiniband syz0: set active [ 373.109502][ T9709] syz_tun: entered promiscuous mode [ 373.179167][ T5815] lo speed is unknown, defaulting to 1000 [ 373.589890][ T9752] netlink: 'syz.0.1159': attribute type 13 has an invalid length. [ 373.598458][ T9752] netlink: 'syz.0.1159': attribute type 17 has an invalid length. [ 373.647926][ T9749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1158'. [ 373.665907][ T9749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1158'. [ 373.886565][ T9752] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.909852][ T9752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.013634][ T9765] syzkaller0: entered promiscuous mode [ 374.021466][ T9765] syzkaller0: entered allmulticast mode [ 374.290287][ T96] block nbd3: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 180 seconds [ 374.301675][ T96] block nbd3: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 180 seconds [ 374.313076][ T96] block nbd3: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 180 seconds [ 374.325189][ T96] block nbd3: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 180 seconds [ 374.411266][ T9752] syz.0.1159 (9752) used greatest stack depth: 20584 bytes left [ 376.170621][ T9800] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1170'. [ 376.524774][ T9818] syzkaller0: entered promiscuous mode [ 376.544692][ T9818] syzkaller0: entered allmulticast mode [ 377.118530][ T9849] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 378.736699][ T9861] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 378.758771][ T9861] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 378.773250][ T9865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1192'. [ 378.788679][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.795251][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.038753][ T9880] syzkaller1: entered promiscuous mode [ 379.044542][ T9880] syzkaller1: entered allmulticast mode [ 379.175276][ T9877] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1197'. [ 379.204541][ T9877] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1197'. [ 379.332789][ T9890] ip6gretap0: entered promiscuous mode [ 379.338592][ T9890] ip6gretap0: entered allmulticast mode [ 379.850447][ T9911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1212'. [ 379.863653][ T9911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1212'. [ 380.464960][ T9944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1226'. [ 380.513397][ T9950] syzkaller0: entered promiscuous mode [ 380.530682][ T9950] syzkaller0: entered allmulticast mode [ 380.687415][ T9960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1230'. [ 381.279279][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1238'. [ 381.312638][ T9979] syzkaller0: entered promiscuous mode [ 381.329831][ T9979] syzkaller0: entered allmulticast mode [ 381.438229][ T9989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1242'. [ 381.862275][T10009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1252'. [ 381.932732][T10011] syzkaller0: entered promiscuous mode [ 381.952716][T10011] syzkaller0: entered allmulticast mode [ 382.035636][T10015] lo speed is unknown, defaulting to 1000 [ 382.073963][T10016] netlink: 'syz.0.1255': attribute type 13 has an invalid length. [ 382.231044][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e865400: rx timeout, send abort [ 382.614684][ T7027] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 382.731162][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e864800: rx timeout, send abort [ 382.740005][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e865400: abort rx timeout. Force session deactivation [ 382.814778][ T7027] usb 4-1: Using ep0 maxpacket: 32 [ 382.880971][ T7027] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.045170][ T7027] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 383.190043][ T7027] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.239433][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e864800: abort rx timeout. Force session deactivation [ 383.257650][ T7027] usb 4-1: Product: syz [ 383.306929][ T7027] usb 4-1: Manufacturer: syz [ 383.320123][ T7027] usb 4-1: SerialNumber: syz [ 383.332824][ T7027] usb 4-1: config 0 descriptor?? [ 383.356412][ T7027] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 383.410709][ T7027] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 383.449321][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.607755][T10049] trusted_key: encrypted_key: key user:syz not found [ 384.032982][T10063] __nla_validate_parse: 2 callbacks suppressed [ 384.032994][T10063] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1273'. [ 384.544510][ T5813] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 384.694801][ T5813] usb 2-1: device descriptor read/64, error -71 [ 384.964652][ T5813] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 385.134943][ T5813] usb 2-1: device descriptor read/64, error -71 [ 385.256493][ T5813] usb usb2-port1: attempt power cycle [ 385.269153][T10081] netlink: 'syz.0.1281': attribute type 13 has an invalid length. [ 385.279281][T10081] netlink: 'syz.0.1281': attribute type 17 has an invalid length. [ 385.311059][T10081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.340801][ T5842] usb 4-1: USB disconnect, device number 11 [ 385.382647][T10084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1282'. [ 385.574014][T10089] syzkaller0: entered promiscuous mode [ 385.579657][T10089] syzkaller0: entered allmulticast mode [ 385.684447][ T5813] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 385.725361][ T5813] usb 2-1: device descriptor read/8, error -71 [ 385.825703][T10095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1287'. [ 385.979446][T10100] syzkaller0: create flow: hash 1695942753 index 1 [ 385.996596][ T5813] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 386.035257][ T5813] usb 2-1: device descriptor read/8, error -71 [ 386.171085][ T5813] usb usb2-port1: unable to enumerate USB device [ 386.234689][ T7051] syzkaller0: tun_net_xmit 76 [ 386.284480][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 386.389615][T10114] syzkaller0: entered promiscuous mode [ 386.395301][T10114] syzkaller0: entered allmulticast mode [ 386.494495][ T5813] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 386.670296][T10092] syzkaller0: delete flow: hash 1695942753 index 1 [ 386.684595][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 386.693200][ T5813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.707190][ T5813] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 386.716595][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.724863][ T5813] usb 4-1: Product: syz [ 386.729691][ T5813] usb 4-1: Manufacturer: syz [ 386.734766][ T5813] usb 4-1: SerialNumber: syz [ 386.750861][ T5813] usb 4-1: config 0 descriptor?? [ 386.767593][ T5813] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 386.802121][ T5813] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 386.840484][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.043041][T10125] trusted_key: encrypted_key: key user:syz not found [ 388.611603][T10147] syzkaller0: entered promiscuous mode [ 388.624967][T10147] syzkaller0: entered allmulticast mode [ 389.193867][ T9] usb 4-1: USB disconnect, device number 12 [ 391.619420][T10179] 9pnet: Could not find request transport: fd0x0000000000000007 [ 393.849281][T10204] syzkaller0: entered promiscuous mode [ 393.872443][T10204] syzkaller0: entered allmulticast mode [ 394.044957][ T5813] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 394.211710][T10219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1320'. [ 394.234593][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 394.252999][ T5813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.282390][ T5813] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 394.293336][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.301887][ T5813] usb 4-1: Product: syz [ 394.306848][ T5813] usb 4-1: Manufacturer: syz [ 394.314977][ T5813] usb 4-1: SerialNumber: syz [ 394.340630][ T5813] usb 4-1: config 0 descriptor?? [ 394.355851][ T5813] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 394.396186][ T5813] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 394.445776][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.861191][T10248] syzkaller0: entered promiscuous mode [ 394.866891][T10248] syzkaller0: entered allmulticast mode [ 395.711762][T10285] syzkaller0: entered promiscuous mode [ 395.717620][T10285] syzkaller0: entered allmulticast mode [ 396.522043][T10329] syzkaller0: entered promiscuous mode [ 396.531135][T10329] syzkaller0: entered allmulticast mode [ 396.768653][ T7051] usb 4-1: USB disconnect, device number 13 [ 397.564467][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 397.574553][ T7051] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 397.734590][ T7051] usb 2-1: device descriptor read/64, error -71 [ 397.754468][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 397.769665][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.787400][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 397.797081][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.806400][ T9] usb 1-1: Product: syz [ 397.809664][T10385] syzkaller0: entered promiscuous mode [ 397.811427][ T9] usb 1-1: Manufacturer: syz [ 397.816605][T10385] syzkaller0: entered allmulticast mode [ 397.821989][ T9] usb 1-1: SerialNumber: syz [ 397.838144][ T9] usb 1-1: config 0 descriptor?? [ 397.850996][ T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 397.880277][ T9] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 397.906162][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.024540][ T7051] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 398.176148][ T7051] usb 2-1: device descriptor read/64, error -71 [ 398.209151][T10397] syzkaller0: entered promiscuous mode [ 398.214799][T10397] syzkaller0: entered allmulticast mode [ 398.321245][ T7051] usb usb2-port1: attempt power cycle [ 398.774870][ T7051] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 398.838690][ T7051] usb 2-1: device descriptor read/8, error -71 [ 399.144500][ T7051] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 399.186844][ T7051] usb 2-1: device descriptor read/8, error -71 [ 399.304778][ T7051] usb usb2-port1: unable to enumerate USB device [ 400.159225][T10422] syzkaller0: entered promiscuous mode [ 400.165123][T10422] syzkaller0: entered allmulticast mode [ 400.251478][T10424] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1387'. [ 400.314828][ T9] usb 1-1: USB disconnect, device number 13 [ 400.469189][T10432] syzkaller0: entered promiscuous mode [ 400.475082][T10432] syzkaller0: entered allmulticast mode [ 402.069365][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 402.078468][T10438] netlink: 'syz.2.1393': attribute type 9 has an invalid length. [ 402.436479][ T2199] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 402.454627][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 402.595496][ T2199] usb 4-1: device descriptor read/64, error -71 [ 402.644418][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 402.652073][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.678318][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 402.688167][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.696306][ T9] usb 1-1: Product: syz [ 402.700488][ T9] usb 1-1: Manufacturer: syz [ 402.705209][ T9] usb 1-1: SerialNumber: syz [ 402.712340][ T9] usb 1-1: config 0 descriptor?? [ 402.720857][ T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 402.745785][ T9] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 402.776674][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.807115][T10472] syzkaller0: entered promiscuous mode [ 402.812790][T10472] syzkaller0: entered allmulticast mode [ 402.874449][ T2199] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 403.038483][ T2199] usb 4-1: device descriptor read/64, error -71 [ 403.164794][ T2199] usb usb4-port1: attempt power cycle [ 403.597918][ T2199] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 403.645635][ T2199] usb 4-1: device descriptor read/8, error -71 [ 403.917405][ T2199] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 403.957793][ T2199] usb 4-1: device descriptor read/8, error -71 [ 404.095888][ T2199] usb usb4-port1: unable to enumerate USB device [ 404.377468][ T96] block nbd3: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 210 seconds [ 404.388850][ T96] block nbd3: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 210 seconds [ 404.400079][ T96] block nbd3: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 210 seconds [ 404.411485][ T96] block nbd3: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 210 seconds [ 404.640114][T10488] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1415'. [ 404.707041][T10492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1416'. [ 404.867700][T10500] netlink: 'syz.2.1420': attribute type 1 has an invalid length. [ 404.877011][T10500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1420'. [ 405.209492][ T2199] usb 1-1: USB disconnect, device number 14 [ 405.266651][T10506] syzkaller0: entered promiscuous mode [ 405.276995][T10506] syzkaller0: entered allmulticast mode [ 405.290125][T10510] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1425'. [ 406.787832][T10516] netlink: 'syz.3.1426': attribute type 13 has an invalid length. [ 406.796086][T10516] netlink: 'syz.3.1426': attribute type 17 has an invalid length. [ 407.085431][T10516] ip6gretap0: left promiscuous mode [ 407.090780][T10516] ip6gretap0: left allmulticast mode [ 407.207434][T10516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.226838][T10516] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.261491][T10516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.457470][T10547] syzkaller0: entered promiscuous mode [ 407.463069][T10547] syzkaller0: entered allmulticast mode [ 407.513225][T10550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1437'. [ 407.700107][T10552] syzkaller0: entered promiscuous mode [ 407.720147][T10552] syzkaller0: entered allmulticast mode [ 410.194176][T10569] netlink: 'syz.1.1443': attribute type 13 has an invalid length. [ 410.203447][T10569] netlink: 'syz.1.1443': attribute type 17 has an invalid length. [ 410.230952][T10569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.238509][T10569] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.248098][T10569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.822750][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 411.071027][T10612] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 411.095251][T10610] syzkaller0: entered promiscuous mode [ 411.100790][T10610] syzkaller0: entered allmulticast mode [ 412.101908][T10638] Illegal XDP return value 4294967274 on prog (id 71) dev syz_tun, expect packet loss! [ 413.040234][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 413.057958][T10669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1472'. [ 413.067192][T10669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1472'. [ 413.076346][T10669] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1472'. [ 413.125893][ T5779] Bluetooth: hci0: command tx timeout [ 413.604636][T10674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1477'. [ 413.767267][T10676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1478'. [ 414.554311][T10711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1488'. [ 414.801137][T10721] syzkaller0: create flow: hash 1695942753 index 1 [ 414.887136][T10723] syzkaller0: entered promiscuous mode [ 414.892741][T10723] syzkaller0: entered allmulticast mode [ 415.026335][T10729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1495'. [ 415.999951][T10713] syzkaller0: delete flow: hash 1695942753 index 1 [ 416.098842][T10748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1499'. [ 417.840335][T10769] syzkaller0: entered promiscuous mode [ 417.854763][T10769] syzkaller0: entered allmulticast mode [ 417.881513][T10773] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1505'. [ 418.009816][T10777] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 418.318217][T10797] syzkaller1: entered promiscuous mode [ 418.332098][T10797] syzkaller1: entered allmulticast mode [ 418.352611][T10800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1514'. [ 418.373316][T10800] bridge1: entered allmulticast mode [ 418.513534][T10804] syzkaller0: entered promiscuous mode [ 418.524646][T10804] syzkaller0: entered allmulticast mode [ 418.540074][T10806] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1518'. [ 418.612410][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1521'. [ 418.656308][T10812] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 418.673100][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1522'. [ 419.050776][T10833] syzkaller1: entered promiscuous mode [ 419.053103][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1531'. [ 419.056475][T10833] syzkaller1: entered allmulticast mode [ 419.182152][T10838] syzkaller0: entered promiscuous mode [ 419.194409][T10838] syzkaller0: entered allmulticast mode [ 419.275627][T10844] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 419.497638][T10859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'. [ 419.555733][T10854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1540'. [ 419.764967][T10871] syzkaller1: entered promiscuous mode [ 419.770661][T10871] syzkaller1: entered allmulticast mode [ 419.872229][T10875] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 419.948713][T10878] syzkaller0: entered promiscuous mode [ 419.954574][T10878] syzkaller0: entered allmulticast mode [ 420.054230][ T5779] Bluetooth: hci0: command tx timeout [ 420.211940][T10885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1553'. [ 420.313454][T10892] syzkaller0: entered promiscuous mode [ 420.329871][T10892] syzkaller0: entered allmulticast mode [ 420.411066][T10894] syzkaller1: entered promiscuous mode [ 420.423712][T10894] syzkaller1: entered allmulticast mode [ 420.594735][T10903] syzkaller0: entered promiscuous mode [ 420.604235][T10903] syzkaller0: entered allmulticast mode [ 420.620240][T10906] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 420.974105][T10923] syzkaller0: entered promiscuous mode [ 420.990584][T10923] syzkaller0: entered allmulticast mode [ 421.082982][T10925] syzkaller1: entered promiscuous mode [ 421.104863][T10925] syzkaller1: entered allmulticast mode [ 421.504735][ T9732] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 421.525251][T10947] __nla_validate_parse: 1 callbacks suppressed [ 421.525267][T10947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1579'. [ 421.577464][T10954] syzkaller0: entered promiscuous mode [ 421.583000][T10954] syzkaller0: entered allmulticast mode [ 421.671269][T10958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1585'. [ 421.711845][T10960] syzkaller1: entered promiscuous mode [ 421.719726][ T9732] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 421.731050][T10960] syzkaller1: entered allmulticast mode [ 421.737223][ T9732] usb 1-1: config 0 has no interface number 0 [ 421.757236][ T9732] usb 1-1: config 0 interface 41 has no altsetting 0 [ 421.769149][ T9732] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 421.785329][ T9732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.800769][ T9732] usb 1-1: Product: syz [ 421.814558][ T9732] usb 1-1: Manufacturer: syz [ 421.832401][ T9732] usb 1-1: SerialNumber: syz [ 421.846362][ T9732] usb 1-1: config 0 descriptor?? [ 422.205732][T10979] syzkaller0: entered promiscuous mode [ 422.211814][T10979] syzkaller0: entered allmulticast mode [ 422.472330][ T9732] CoreChips: probe of 1-1:0.41 failed with error -22 [ 422.553247][T10994] syzkaller0: entered promiscuous mode [ 422.559794][T10994] syzkaller0: entered allmulticast mode [ 422.687785][ T5779] Bluetooth: hci0: command tx timeout [ 424.241888][T11014] syzkaller0: entered promiscuous mode [ 424.248746][T11014] syzkaller0: entered allmulticast mode [ 424.485961][T11020] syzkaller0: entered promiscuous mode [ 424.491505][T11020] syzkaller0: entered allmulticast mode [ 424.631221][T11027] 9pnet_fd: Insufficient options for proto=fd [ 425.982408][ T9] usb 1-1: USB disconnect, device number 15 [ 426.558923][T11025] syzkaller0: entered promiscuous mode [ 426.602693][T11025] syzkaller0: entered allmulticast mode [ 429.168235][T11059] ieee802154 phy0 wpan0: encryption failed: -22 [ 429.218635][T11061] syzkaller0: entered promiscuous mode [ 429.224157][T11061] syzkaller0: entered allmulticast mode [ 429.331017][T11069] syzkaller1: entered promiscuous mode [ 429.340099][T11069] syzkaller1: entered allmulticast mode [ 429.443484][T11073] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1622'. [ 429.511549][T11075] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 429.521904][T11077] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1623'. [ 429.654686][ T5842] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 429.669084][T11081] syzkaller0: entered promiscuous mode [ 429.686591][T11081] syzkaller0: entered allmulticast mode [ 429.712535][T11085] ieee802154 phy0 wpan0: encryption failed: -22 [ 429.861524][ T5842] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 429.874130][ T5842] usb 1-1: config 0 has no interface number 0 [ 429.885855][ T5842] usb 1-1: config 0 interface 41 has no altsetting 0 [ 429.914713][ T5842] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 429.923806][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.935606][ T5842] usb 1-1: Product: syz [ 429.953428][ T5842] usb 1-1: Manufacturer: syz [ 429.967787][ T5842] usb 1-1: SerialNumber: syz [ 429.976058][ T5842] usb 1-1: config 0 descriptor?? [ 430.823623][ T5842] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 431.464673][T11093] syzkaller0: entered promiscuous mode [ 431.470217][T11093] syzkaller0: entered allmulticast mode [ 431.546135][T11106] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 431.571301][ T5779] Bluetooth: hci0: command tx timeout [ 431.595000][T11108] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1635'. [ 431.741763][T11117] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1638'. [ 431.790398][T11119] ieee802154 phy0 wpan0: encryption failed: -22 [ 431.949520][T11126] syzkaller1: entered promiscuous mode [ 431.975692][T11126] syzkaller1: entered allmulticast mode [ 432.095028][T11130] syzkaller0: entered promiscuous mode [ 432.100643][T11130] syzkaller0: entered allmulticast mode [ 432.182181][T11133] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 432.342937][ T5842] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 432.357545][ T5842] CoreChips: probe of 1-1:0.41 failed with error -71 [ 432.372368][ T5842] usb 1-1: USB disconnect, device number 16 [ 434.206558][ T5779] Bluetooth: hci0: command tx timeout [ 434.663041][ T96] block nbd3: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 240 seconds [ 434.680066][ T96] block nbd3: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 240 seconds [ 434.695275][ T96] block nbd3: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 240 seconds [ 434.706775][ T96] block nbd3: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 240 seconds [ 436.105156][ T5141] udevd[5141]: worker [5879] /devices/virtual/block/nbd3 timeout; kill it [ 436.120788][ T5141] udevd[5141]: seq 11786 '/devices/virtual/block/nbd3' killed [ 436.357861][T11138] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 436.366090][T11138] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 436.559155][T11165] syzkaller1: entered promiscuous mode [ 436.573062][T11165] syzkaller1: entered allmulticast mode [ 436.895197][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 436.916776][T11183] syzkaller0: entered promiscuous mode [ 436.922306][T11183] syzkaller0: entered allmulticast mode [ 437.098116][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 437.107158][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.135721][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 437.145321][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 437.178394][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 437.195729][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 437.203775][ T9] usb 2-1: Product: syz [ 437.216788][ T9] usb 2-1: Manufacturer: syz [ 437.227518][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 437.242065][ T9] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 439.068814][ T9732] usb 2-1: USB disconnect, device number 19 [ 439.245156][T11218] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 439.749760][T11238] syzkaller0: entered promiscuous mode [ 439.764400][T11238] syzkaller0: entered allmulticast mode [ 439.784453][ T9732] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 439.898200][T11240] syzkaller0: entered promiscuous mode [ 439.903795][T11240] syzkaller0: entered allmulticast mode [ 439.989105][ T9732] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 440.010469][ T9732] usb 4-1: config 0 has no interface number 0 [ 440.016970][ T9732] usb 4-1: config 0 interface 41 has no altsetting 0 [ 440.026695][ T9732] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 440.040191][ T9732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.048795][ T9732] usb 4-1: Product: syz [ 440.053140][ T9732] usb 4-1: Manufacturer: syz [ 440.068180][ T9732] usb 4-1: SerialNumber: syz [ 440.086765][ T9732] usb 4-1: config 0 descriptor?? [ 440.211299][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.218825][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.932162][ T9732] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 441.327524][ T5779] Bluetooth: hci0: command tx timeout [ 441.975623][T11257] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 442.451343][ T9732] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 442.467156][ T9732] CoreChips: probe of 4-1:0.41 failed with error -71 [ 442.487998][ T9732] usb 4-1: USB disconnect, device number 18 [ 443.464645][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'. [ 443.865079][ T5842] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 443.876566][T11285] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 443.966308][T11288] syzkaller1: entered promiscuous mode [ 443.972031][T11288] syzkaller1: entered allmulticast mode [ 444.044537][ T5779] Bluetooth: hci0: command tx timeout [ 444.056314][ T5842] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 444.074394][ T5842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.084603][ T5842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 444.104409][ T5842] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 444.130028][ T5842] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 444.139428][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 444.147599][ T5842] usb 4-1: Product: syz [ 444.151853][ T5842] usb 4-1: Manufacturer: syz [ 444.161715][ T5842] cdc_wdm 4-1:1.0: skipping garbage [ 444.168300][ T5842] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 444.218289][T11290] syzkaller0: entered promiscuous mode [ 444.223882][T11290] syzkaller0: entered allmulticast mode [ 445.893674][ T9732] usb 4-1: USB disconnect, device number 19 [ 446.284126][T11313] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1702'. [ 446.359245][T11304] netlink: 'syz.1.1698': attribute type 13 has an invalid length. [ 446.373893][T11304] netlink: 'syz.1.1698': attribute type 17 has an invalid length. [ 446.413272][T11304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.421689][T11304] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.433933][T11304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 446.472883][T11314] syzkaller1: entered promiscuous mode [ 446.485352][T11314] syzkaller1: entered allmulticast mode [ 446.593148][T11324] syzkaller0: entered promiscuous mode [ 446.599678][T11324] syzkaller0: entered allmulticast mode [ 446.922638][T11304] syz.1.1698 (11304) used greatest stack depth: 20456 bytes left [ 448.419062][T11347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1713'. [ 448.624415][T11352] netlink: 'syz.3.1715': attribute type 13 has an invalid length. [ 448.644500][ T7054] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 448.672372][T11352] netlink: 'syz.3.1715': attribute type 17 has an invalid length. [ 448.739354][T11352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.748082][T11352] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.759264][T11352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.776507][T11354] syzkaller1: entered promiscuous mode [ 448.782239][T11354] syzkaller1: entered allmulticast mode [ 448.836454][ T7054] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 448.845587][ T7054] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.856500][ T7054] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 448.865686][ T7054] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.880919][ T7054] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 448.890586][ T7054] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 448.899031][ T7054] usb 3-1: Product: syz [ 448.903481][ T7054] usb 3-1: Manufacturer: syz [ 448.919471][ T7054] cdc_wdm 3-1:1.0: skipping garbage [ 448.924995][ T7054] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 449.125502][ T7054] usb 3-1: USB disconnect, device number 9 [ 449.669685][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'. [ 450.290586][T11388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1721'. [ 450.299784][T11388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1721'. [ 450.309065][T11388] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1721'. [ 450.504828][T11396] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 452.524961][ T5779] Bluetooth: hci0: command tx timeout [ 453.316181][T11416] netlink: 'syz.1.1729': attribute type 13 has an invalid length. [ 453.459436][T11416] netlink: 'syz.1.1729': attribute type 17 has an invalid length. [ 453.558456][T11416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.568608][T11416] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.582324][T11416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 453.714976][T11437] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1736'. [ 454.444947][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1739'. [ 454.454083][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1739'. [ 454.463699][T11451] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1739'. [ 454.605219][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 456.999527][T11479] netlink: 'syz.0.1745': attribute type 13 has an invalid length. [ 457.028786][T11479] netlink: 'syz.0.1745': attribute type 17 has an invalid length. [ 457.068342][T11488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1749'. [ 457.099568][T11479] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.117673][T11479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.154544][ T5817] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 458.244016][T11502] syzkaller0: entered promiscuous mode [ 458.249773][T11502] syzkaller0: entered allmulticast mode [ 458.357589][ T5817] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 458.366640][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.377323][ T5817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 458.386762][ T5817] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 458.412548][ T5817] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 458.422143][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 458.430941][ T5817] usb 3-1: Product: syz [ 458.435521][ T5817] usb 3-1: Manufacturer: syz [ 458.445991][ T5817] cdc_wdm 3-1:1.0: skipping garbage [ 458.451326][ T5817] cdc_wdm 3-1:1.0: skipping garbage [ 458.461069][ T5817] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 458.669670][ T7054] usb 3-1: USB disconnect, device number 10 [ 458.989076][T11516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1759'. [ 458.998300][T11516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1759'. [ 459.007575][T11516] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1759'. [ 460.244829][T11521] infiniband syz0: set down [ 460.246453][T11523] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1762'. [ 460.502156][T11521] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.509598][T11521] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.551269][T11521] bond_slave_0: left promiscuous mode [ 460.560166][T11521] bond_slave_1: left promiscuous mode [ 460.900191][T11521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.935823][T11521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.238506][T11521] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.247771][T11521] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.257210][T11521] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.271229][T11521] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.445970][ T5817] lo speed is unknown, defaulting to 1000 [ 461.448092][T11524] netlink: 'syz.2.1761': attribute type 13 has an invalid length. [ 461.462068][T11524] netlink: 'syz.2.1761': attribute type 17 has an invalid length. [ 461.475927][T11524] infiniband syz0: set active [ 461.481221][T11524] infiniband syz0: set active [ 461.491880][T11524] infiniband syz0: set active [ 461.639415][T11524] syz_tun: left promiscuous mode [ 461.708116][T11524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.716936][T11524] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.726868][T11524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.849250][T10576] lo speed is unknown, defaulting to 1000 [ 461.858157][ T7054] lo speed is unknown, defaulting to 1000 [ 461.865806][ T23] lo speed is unknown, defaulting to 1000 [ 461.880354][ T7053] lo speed is unknown, defaulting to 1000 [ 461.887328][ T23] lo speed is unknown, defaulting to 1000 [ 462.229985][T11548] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.467606][T11567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1773'. [ 463.476735][T11567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1773'. [ 463.485860][T11567] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1773'. [ 464.880674][T11537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 465.165443][ T96] block nbd3: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 270 seconds [ 465.176415][ T96] block nbd3: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 270 seconds [ 465.187563][ T96] block nbd3: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 270 seconds [ 465.198816][ T96] block nbd3: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 270 seconds [ 465.338815][T11582] syzkaller0: entered promiscuous mode [ 465.358511][T11582] syzkaller0: entered allmulticast mode [ 465.503773][T11584] syzkaller0: entered promiscuous mode [ 465.524414][T11584] syzkaller0: entered allmulticast mode [ 466.075986][T11592] IPVS: Scheduler module ip_vs_sip not found [ 466.195353][T11598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1785'. [ 466.404527][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 466.612976][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 466.621833][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.651740][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 466.672492][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.690393][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 466.709008][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 466.726355][ T9] usb 3-1: Product: syz [ 466.730593][ T9] usb 3-1: Manufacturer: syz [ 466.753578][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 466.761772][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 466.767181][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 466.772541][ T9] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 467.841497][ T23] usb 3-1: USB disconnect, device number 11 [ 467.962924][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 467.973907][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 468.030676][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1794'. [ 468.389621][T11648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1796'. [ 468.398835][T11648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1796'. [ 468.407929][T11648] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1796'. [ 469.039126][T11650] syzkaller0: entered promiscuous mode [ 469.047526][T11650] syzkaller0: entered allmulticast mode [ 469.279172][T11663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1804'. [ 469.702785][T11667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1805'. [ 471.561447][T11676] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1809'. [ 472.198368][T11696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1814'. [ 472.207562][T11696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1814'. [ 472.216699][T11696] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1814'. [ 472.468631][ T23] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 472.727269][ T23] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 472.739251][ T23] usb 2-1: config 0 has no interface number 0 [ 472.747193][ T23] usb 2-1: config 0 interface 41 has no altsetting 0 [ 472.771329][ T23] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 472.791076][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.812334][ T23] usb 2-1: Product: syz [ 472.822227][ T23] usb 2-1: Manufacturer: syz [ 472.832307][ T23] usb 2-1: SerialNumber: syz [ 472.853570][ T23] usb 2-1: config 0 descriptor?? [ 473.019753][T11705] netlink: 'syz.3.1817': attribute type 13 has an invalid length. [ 473.027749][T11705] netlink: 'syz.3.1817': attribute type 17 has an invalid length. [ 473.058566][T11705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.067043][T11705] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.077617][T11705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.157131][T11710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1818'. [ 473.263962][T11712] syzkaller0: entered promiscuous mode [ 473.269665][T11712] syzkaller0: entered allmulticast mode [ 473.672441][ T23] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 474.966701][ T23] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 475.172885][ T23] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 475.186486][ T23] CoreChips: probe of 2-1:0.41 failed with error -71 [ 475.202793][ T23] usb 2-1: USB disconnect, device number 20 [ 475.217891][ T5774] udevd[5774]: setting mode of /dev/bus/usb/002/020 to 020664 failed: No such file or directory [ 475.240794][ T5774] udevd[5774]: setting owner of /dev/bus/usb/002/020 to uid=0, gid=0 failed: No such file or directory [ 475.608732][T11750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1827'. [ 475.697927][T11752] syzkaller0: entered promiscuous mode [ 475.703461][T11752] syzkaller0: entered allmulticast mode [ 477.641740][T11790] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1837'. [ 477.673646][T11795] syzkaller0: entered promiscuous mode [ 477.679200][T11795] syzkaller0: entered allmulticast mode [ 477.802883][T11801] syzkaller0: entered promiscuous mode [ 477.809331][T11801] syzkaller0: entered allmulticast mode [ 479.468240][T11812] syzkaller0: entered promiscuous mode [ 479.473847][T11812] syzkaller0: entered allmulticast mode [ 479.721116][T11823] syzkaller0: entered promiscuous mode [ 479.727093][T11823] syzkaller0: entered allmulticast mode [ 479.826212][T11827] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1849'. [ 479.893707][T11830] syzkaller0: entered promiscuous mode [ 479.899654][T11830] syzkaller0: entered allmulticast mode [ 480.563423][T11785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.677165][T11843] syzkaller0: entered promiscuous mode [ 481.682700][T11843] syzkaller0: entered allmulticast mode [ 482.141329][T11865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1857'. [ 482.158309][T11865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1857'. [ 482.167512][T11865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1857'. [ 482.176677][T11865] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1857'. [ 482.989005][T11879] syzkaller0: entered promiscuous mode [ 482.995639][T11879] syzkaller0: entered allmulticast mode [ 483.175620][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 483.391976][ T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 483.400832][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.418402][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 483.433912][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.473862][ T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 483.483106][ T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 483.491238][ T23] usb 3-1: Product: syz [ 483.496163][ T23] usb 3-1: Manufacturer: syz [ 483.512336][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 483.517714][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 483.523634][ T23] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 483.730777][ T23] usb 3-1: USB disconnect, device number 12 [ 485.074648][T11908] netlink: 'syz.0.1873': attribute type 1 has an invalid length. [ 485.188090][T11908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.260803][T11920] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.286419][T11920] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.327653][T11920] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.357964][T11920] bond0: (slave geneve2): making interface the new active one [ 485.394582][T11920] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 485.466068][T11920] syz.0.1873 (11920) used greatest stack depth: 19976 bytes left [ 485.662049][T11938] syzkaller0: entered promiscuous mode [ 485.674637][T11938] syzkaller0: entered allmulticast mode [ 485.937183][T11941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1878'. [ 486.618981][T11944] syzkaller0: entered promiscuous mode [ 486.624917][T11944] syzkaller0: entered allmulticast mode [ 487.349061][T11954] kernel read not supported for file /cpuacct.usage_percpu_user (pid: 11954 comm: syz.3.1883) [ 487.369670][ T27] audit: type=1800 audit(1779404990.615:2): pid=11954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1883" name="cpuacct.usage_percpu_user" dev="mqueue" ino=28410 res=0 errno=0 [ 488.572347][T11964] input: syz0 as /devices/virtual/input/input5 [ 488.742445][T11964] input: syz1 as /devices/virtual/input/input6 [ 488.750768][T11970] syzkaller0: entered promiscuous mode [ 488.775350][T11970] syzkaller0: entered allmulticast mode [ 489.194063][T11981] syzkaller0: entered promiscuous mode [ 489.207846][T11981] syzkaller0: entered allmulticast mode [ 489.266249][T11979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1892'. [ 490.538149][T12003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1898'. [ 492.764607][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 492.974427][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 493.072854][T12035] could not allocate digest TFM handle -¿ÆqøêÊâ4¿OÃ(0&qú´f·=¯*΀¯òøj„¸$€ŒÆª­ü€«;º}'üj°O [ 493.620542][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 493.646055][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 493.666579][ T23] usb 3-1: can't read configurations, error -71 [ 493.859718][T12065] syzkaller0: entered promiscuous mode [ 493.866147][T12065] syzkaller0: entered allmulticast mode [ 495.253772][ T96] block nbd3: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 300 seconds [ 495.264793][ T96] block nbd3: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 300 seconds [ 495.275915][ T96] block nbd3: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 300 seconds [ 495.287154][ T96] block nbd3: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 300 seconds [ 495.800086][T12110] capability: warning: `syz.3.1918' uses 32-bit capabilities (legacy support in use) [ 496.961107][T12128] input: syz0 as /devices/virtual/input/input7 [ 497.234446][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 497.432780][ T9] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 497.452661][ T9] usb 1-1: config 0 has no interface number 0 [ 497.470021][ T9] usb 1-1: config 0 interface 41 has no altsetting 0 [ 497.487577][ T9] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 497.497948][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.521592][ T9] usb 1-1: Product: syz [ 497.530763][ T9] usb 1-1: Manufacturer: syz [ 497.540514][ T9] usb 1-1: SerialNumber: syz [ 497.556183][ T9] usb 1-1: config 0 descriptor?? [ 498.106788][T12146] syzkaller0: entered promiscuous mode [ 498.112557][T12146] syzkaller0: entered allmulticast mode [ 498.248072][T12150] syzkaller0: entered promiscuous mode [ 498.253580][T12150] syzkaller0: entered allmulticast mode [ 498.385809][ T9] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 498.424513][ T7053] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 498.627506][ T7053] usb 4-1: Using ep0 maxpacket: 32 [ 498.641503][ T7053] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.661651][ T7053] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 498.685232][ T7053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.696045][ T7053] usb 4-1: config 0 descriptor?? [ 499.193685][ T7053] input: HID 5543:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0001/input/input8 [ 499.345747][ T7053] input: HID 5543:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0001/input/input9 [ 499.493527][ T7053] uclogic 0003:5543:0042.0001: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.3-1/input0 [ 499.529978][ T7053] usb 4-1: USB disconnect, device number 20 [ 499.690286][T12171] fido_id[12171]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 499.860181][ T9] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 499.871968][ T9] CoreChips: probe of 1-1:0.41 failed with error -71 [ 499.887244][ T9] usb 1-1: USB disconnect, device number 17 [ 500.865602][T12178] syzkaller0: entered promiscuous mode [ 500.871204][T12178] syzkaller0: entered allmulticast mode [ 501.036738][T12196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1937'. [ 501.656764][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.665334][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.015275][T12215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1942'. [ 504.028240][T12215] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.037454][T12215] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.046316][T12215] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.055135][T12215] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.066048][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1942'. [ 504.076223][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1942'. [ 504.134689][ T7053] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 504.330600][ T7053] usb 1-1: Using ep0 maxpacket: 32 [ 504.358529][ T7053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.405603][ T7053] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 504.463966][ T7053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.503760][ T7053] usb 1-1: config 0 descriptor?? [ 504.992023][ T7053] input: HID 5543:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0002/input/input10 [ 505.073227][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1951'. [ 505.442811][ T7053] input: HID 5543:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0002/input/input11 [ 505.590449][T12271] syzkaller0: entered promiscuous mode [ 505.596118][T12271] syzkaller0: entered allmulticast mode [ 505.651786][ T7053] uclogic 0003:5543:0042.0002: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 505.747583][ T7053] usb 1-1: USB disconnect, device number 18 [ 505.832843][T12275] fido_id[12275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 506.286592][T12282] syzkaller0: entered promiscuous mode [ 506.298931][T12282] syzkaller0: entered allmulticast mode [ 508.364595][ T7053] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 508.564529][ T7053] usb 3-1: Using ep0 maxpacket: 32 [ 508.574749][ T7053] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.602207][ T7053] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.628996][ T7053] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 508.648468][ T7053] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 508.667312][ T7053] usb 3-1: Product: syz [ 508.676071][ T7053] usb 3-1: Manufacturer: syz [ 508.693197][ T7053] hub 3-1:4.0: USB hub found [ 508.908667][ T7053] hub 3-1:4.0: 2 ports detected [ 508.945393][T12330] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 509.492737][T12315] bridge0: port 3(geneve1) entered blocking state [ 509.523117][T12315] bridge0: port 3(geneve1) entered disabled state [ 509.591098][T12315] geneve1: entered allmulticast mode [ 509.613458][T12315] geneve1: entered promiscuous mode [ 509.640661][ T7053] hub 3-1:4.0: set hub depth failed [ 509.654071][ T7053] usb 3-1: USB disconnect, device number 15 [ 510.290812][T12351] syzkaller0: entered promiscuous mode [ 510.326884][T12351] syzkaller0: entered allmulticast mode [ 510.369517][T12358] syzkaller0: entered promiscuous mode [ 510.414248][T12358] syzkaller0: entered allmulticast mode [ 514.044048][T12361] tipc: Enabled bearer , priority 0 [ 514.051741][T12357] tipc: Resetting bearer [ 514.097871][T12357] tipc: Disabling bearer [ 514.144772][T12404] infiniband syz0: set down [ 514.514549][T12405] netlink: 'syz.2.1989': attribute type 13 has an invalid length. [ 514.533686][T12405] netlink: 'syz.2.1989': attribute type 17 has an invalid length. [ 514.545857][T12405] infiniband syz0: set active [ 514.551029][T12405] infiniband syz0: set active [ 514.591035][T12405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.601211][T12405] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.616682][T12405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.644019][ T7053] lo speed is unknown, defaulting to 1000 [ 514.667196][ T7053] lo speed is unknown, defaulting to 1000 [ 514.688120][ T7055] lo speed is unknown, defaulting to 1000 [ 514.708183][ T7054] lo speed is unknown, defaulting to 1000 [ 514.951090][T12433] syzkaller0: entered promiscuous mode [ 514.978956][T12433] syzkaller0: entered allmulticast mode [ 515.320858][T12447] program syz.2.2002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.750077][ T7027] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 515.947072][ T7027] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 515.964905][ T7027] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.976026][ T7027] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 516.002149][ T7027] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.023314][ T7027] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 516.041623][ T7027] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 516.050449][ T7027] usb 3-1: Product: syz [ 516.064206][ T7027] usb 3-1: Manufacturer: syz [ 516.090364][ T7027] cdc_wdm 3-1:1.0: skipping garbage [ 516.111115][ T7027] cdc_wdm 3-1:1.0: skipping garbage [ 516.116997][ T7027] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 517.323185][T12437] syzkaller0: entered promiscuous mode [ 517.344583][T12437] syzkaller0: entered allmulticast mode [ 517.794526][ T23] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 517.994439][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 518.022946][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.044595][ T23] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 518.063530][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.086277][ T23] usb 1-1: config 0 descriptor?? [ 518.535328][ T23] input: HID 5543:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0003/input/input14 [ 518.700454][ T23] input: HID 5543:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0003/input/input15 [ 518.785445][ T23] uclogic 0003:5543:0042.0003: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 518.831839][ T23] usb 1-1: USB disconnect, device number 19 [ 518.941805][T12475] fido_id[12475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 520.230936][ T7027] usb 3-1: USB disconnect, device number 16 [ 520.416905][T12495] infiniband syz0: set down [ 520.838046][T12510] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2021'. [ 520.908719][T10576] lo speed is unknown, defaulting to 1000 [ 520.915035][T12499] netlink: 'syz.2.2019': attribute type 13 has an invalid length. [ 520.934538][T12499] netlink: 'syz.2.2019': attribute type 17 has an invalid length. [ 520.956051][T12499] infiniband syz0: set active [ 520.960977][T12499] infiniband syz0: set active [ 521.032934][T12499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.052011][T12499] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.074520][T12499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.104748][T10576] lo speed is unknown, defaulting to 1000 [ 521.126934][ T23] lo speed is unknown, defaulting to 1000 [ 521.132747][ T7055] lo speed is unknown, defaulting to 1000 [ 521.138797][ T7055] lo speed is unknown, defaulting to 1000 [ 521.404591][T10576] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 521.594693][T10576] usb 4-1: Using ep0 maxpacket: 32 [ 521.606652][T10576] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.618099][ T5817] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 521.629737][T10576] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.646565][T10576] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 521.661523][T10576] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 521.680272][T10576] usb 4-1: Product: syz [ 521.690461][T10576] usb 4-1: Manufacturer: syz [ 521.703952][T10576] hub 4-1:4.0: USB hub found [ 521.728762][T12521] syzkaller0: entered promiscuous mode [ 521.734276][T12521] syzkaller0: entered allmulticast mode [ 521.818059][ T5817] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 521.845770][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.867249][ T5817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 521.895544][ T5817] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.914812][T10576] hub 4-1:4.0: 2 ports detected [ 521.929272][ T5817] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 521.939313][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 521.948088][ T5817] usb 3-1: Product: syz [ 521.956536][ T5817] usb 3-1: Manufacturer: syz [ 521.970005][ T5817] cdc_wdm 3-1:1.0: skipping garbage [ 521.978843][ T5817] cdc_wdm 3-1:1.0: skipping garbage [ 521.984194][ T5817] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 522.083219][T12538] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2032'. [ 522.185329][ T7055] usb 3-1: USB disconnect, device number 17 [ 522.330162][T10576] hub 4-1:4.0: set hub depth failed [ 522.347407][T10576] usb 4-1: USB disconnect, device number 21 [ 522.519763][T12543] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.529129][T12543] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.538307][T12543] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.547264][T12543] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.572355][T12544] netlink: 'syz.1.2034': attribute type 13 has an invalid length. [ 522.580598][T12544] netlink: 'syz.1.2034': attribute type 17 has an invalid length. [ 522.615239][T12544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.622717][T12544] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.633398][T12544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 523.193750][T12553] syzkaller0: entered promiscuous mode [ 523.201142][T12553] syzkaller0: entered allmulticast mode [ 523.884466][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 523.992290][T12581] netlink: 'syz.3.2047': attribute type 13 has an invalid length. [ 524.009942][T12581] netlink: 'syz.3.2047': attribute type 17 has an invalid length. [ 524.067185][T12581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.074505][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 524.080553][T12581] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.091787][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.104067][T12581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.119801][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 524.131961][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.142352][ T9] usb 3-1: config 0 descriptor?? [ 524.264293][T12584] syzkaller0: entered promiscuous mode [ 524.270306][T12584] syzkaller0: entered allmulticast mode [ 524.600670][ T9] input: HID 5543:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0004/input/input16 [ 524.728979][ T9] input: HID 5543:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0004/input/input17 [ 524.805629][ T9] uclogic 0003:5543:0042.0004: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 524.877953][ T9] usb 3-1: USB disconnect, device number 18 [ 524.961387][T12610] fido_id[12610]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 525.134809][T10576] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 525.325033][T10576] usb 4-1: Using ep0 maxpacket: 32 [ 525.334709][ T96] block nbd3: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 330 seconds [ 525.345809][ T96] block nbd3: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 330 seconds [ 525.357309][ T96] block nbd3: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 330 seconds [ 525.357544][T10576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.368325][ T96] block nbd3: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 330 seconds [ 525.396733][T10576] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 525.410035][T10576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.432793][T10576] usb 4-1: config 0 descriptor?? [ 525.902610][T10576] input: HID 5543:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0005/input/input18 [ 526.000274][T10576] input: HID 5543:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0005/input/input19 [ 526.042283][T10576] uclogic 0003:5543:0042.0005: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.3-1/input0 [ 526.176352][ T7055] usb 4-1: USB disconnect, device number 22 [ 526.249488][T12623] fido_id[12623]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0005/report_descriptor': No such device [ 528.803028][T12651] syzkaller1: entered promiscuous mode [ 528.812344][T12651] syzkaller1: entered allmulticast mode [ 529.025173][T12661] input: syz0 as /devices/virtual/input/input20 [ 529.184451][T12665] syzkaller0: entered promiscuous mode [ 529.189981][T12665] syzkaller0: entered allmulticast mode [ 529.214240][T12667] syzkaller0: entered promiscuous mode [ 529.222074][T12667] syzkaller0: entered allmulticast mode [ 529.392011][T12670] syzkaller0: entered promiscuous mode [ 529.404607][T12670] syzkaller0: entered allmulticast mode [ 529.741578][T12683] syzkaller0: entered promiscuous mode [ 529.747555][T12683] syzkaller0: entered allmulticast mode [ 529.933693][T12685] syzkaller0: create flow: hash 1695942753 index 1 [ 529.974399][ T7055] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 530.150110][T12693] input: syz0 as /devices/virtual/input/input21 [ 530.166820][ T7055] usb 2-1: Using ep0 maxpacket: 32 [ 530.177760][ T7055] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.192443][ T7055] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 530.203410][ T7055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.226931][ T7055] usb 2-1: config 0 descriptor?? [ 530.361061][T12702] syzkaller0: entered promiscuous mode [ 530.369158][T12702] syzkaller0: entered allmulticast mode [ 530.631787][T12682] syzkaller0: delete flow: hash 1695942753 index 1 [ 530.683691][ T7055] input: HID 5543:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.0006/input/input22 [ 530.787313][ T7055] input: HID 5543:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.0006/input/input23 [ 530.819939][ T7055] uclogic 0003:5543:0042.0006: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 530.912143][ T7055] usb 2-1: USB disconnect, device number 21 [ 531.004190][T12717] fido_id[12717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 531.891851][ T7055] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 532.088024][ T7055] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 532.099718][ T7055] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.111080][ T7055] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 532.129394][ T7055] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.141626][ T7055] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 532.151369][ T7055] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 532.159867][ T7055] usb 2-1: Product: syz [ 532.164189][ T7055] usb 2-1: Manufacturer: syz [ 532.177347][ T7055] cdc_wdm 2-1:1.0: skipping garbage [ 532.194401][ T7055] cdc_wdm 2-1:1.0: skipping garbage [ 532.199726][ T7055] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 532.534486][ T7055] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 532.756827][ T7055] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 532.765964][ T7055] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 532.777996][ T7055] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 532.787486][ T7055] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 532.798930][ T7055] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 532.812463][ T7055] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 532.822064][ T7055] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 532.830581][ T7055] usb 3-1: Product: syz [ 532.835132][ T7055] usb 3-1: Manufacturer: syz [ 532.851964][ T7055] cdc_wdm 3-1:1.0: skipping garbage [ 532.857793][ T7055] cdc_wdm 3-1:1.0: skipping garbage [ 532.905391][ T7055] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 532.911355][ T7055] cdc_wdm 3-1:1.0: Unknown control protocol [ 533.127920][T12711] syzkaller0: entered promiscuous mode [ 533.133409][T12711] syzkaller0: entered allmulticast mode [ 533.161498][ T23] usb 2-1: USB disconnect, device number 22 [ 533.244158][T12730] syzkaller0: entered promiscuous mode [ 533.253452][T12730] syzkaller0: entered allmulticast mode [ 533.297624][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'. [ 534.392108][ T7054] usb 3-1: USB disconnect, device number 19 [ 534.654425][ T23] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 534.834401][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 534.846608][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.874391][ T23] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 534.883489][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.906626][ T23] usb 4-1: config 0 descriptor?? [ 535.295353][T12762] syzkaller0: create flow: hash 1695942753 index 1 [ 535.339727][ T23] input: HID 5543:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0007/input/input24 [ 535.441998][ T23] input: HID 5543:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0007/input/input25 [ 535.485783][T12764] syzkaller0: entered promiscuous mode [ 535.492688][ T23] uclogic 0003:5543:0042.0007: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.3-1/input0 [ 535.510420][T12764] syzkaller0: entered allmulticast mode [ 535.559165][ T23] usb 4-1: USB disconnect, device number 23 [ 535.609073][T12765] fido_id[12765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 535.989755][T12773] netlink: 'syz.1.2101': attribute type 13 has an invalid length. [ 535.998102][T12773] netlink: 'syz.1.2101': attribute type 17 has an invalid length. [ 536.023662][T12773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.033474][T12773] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.042575][T12773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.064643][T12755] syzkaller0: delete flow: hash 1695942753 index 1 [ 537.557013][ T7055] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 537.759088][ T7055] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.781175][ T7055] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.801473][ T7055] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.832410][ T7055] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.852061][ T7055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.881425][ T7055] usb 2-1: config 0 descriptor?? [ 538.319709][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.341483][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.357722][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.365957][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.373387][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.381029][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.388497][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.397194][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.405742][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.413176][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.434490][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.454439][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.461881][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.484719][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.492184][ T7055] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 538.501879][ T7055] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 538.593804][ T7055] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 538.615468][ T7055] usb 2-1: USB disconnect, device number 23 [ 538.719786][T12823] fido_id[12823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 539.350251][T12831] infiniband syz0: set down [ 539.577749][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2115'. [ 539.586998][ T7053] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 539.594762][ T7054] lo speed is unknown, defaulting to 1000 [ 539.609426][T12837] netlink: 'syz.2.2113': attribute type 13 has an invalid length. [ 539.622853][T12837] netlink: 'syz.2.2113': attribute type 17 has an invalid length. [ 539.633126][T12837] infiniband syz0: set active [ 539.638818][T12837] infiniband syz0: set active [ 539.671965][T12837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.680283][T12837] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.692318][T12837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.736950][ T7054] lo speed is unknown, defaulting to 1000 [ 539.753127][ T7055] lo speed is unknown, defaulting to 1000 [ 539.759134][ T7055] lo speed is unknown, defaulting to 1000 [ 539.765399][ T7052] lo speed is unknown, defaulting to 1000 [ 539.808891][ T7053] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 539.817435][ T7053] usb 2-1: config 0 has no interface number 0 [ 539.837456][ T7053] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 539.847629][ T7053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.858128][ T7053] usb 2-1: Product: syz [ 539.862408][ T7053] usb 2-1: Manufacturer: syz [ 539.868567][ T7053] usb 2-1: SerialNumber: syz [ 539.878145][ T7053] usb 2-1: config 0 descriptor?? [ 540.096421][ T7053] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 540.118637][ T7053] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 540.133770][ T7053] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 540.144112][ T7053] usb 2-1: media controller created [ 540.197616][ T7053] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 541.054766][ T7052] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 541.244514][ T7052] usb 3-1: Using ep0 maxpacket: 32 [ 541.310435][ T7052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.325284][ T7052] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 541.337176][ T7052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.347571][ T7053] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 541.364133][ T7052] usb 3-1: config 0 descriptor?? [ 541.373474][T12874] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.414690][T12874] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.426097][T12874] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.441544][T12875] netlink: 'syz.0.2127': attribute type 13 has an invalid length. [ 541.451630][T12875] netlink: 'syz.0.2127': attribute type 17 has an invalid length. [ 541.547892][T12875] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.576275][T12875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.859833][ T7052] input: HID 5543:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0009/input/input26 [ 541.979100][ T7052] input: HID 5543:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0009/input/input27 [ 542.031480][ T7052] uclogic 0003:5543:0042.0009: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 542.179657][ T23] usb 3-1: USB disconnect, device number 20 [ 542.512710][ T7053] usb 2-1: USB disconnect, device number 24 [ 543.318693][T12903] netlink: 'syz.0.2136': attribute type 13 has an invalid length. [ 543.336740][T12903] netlink: 'syz.0.2136': attribute type 17 has an invalid length. [ 543.391073][T12903] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.403376][T12903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.903028][T12915] syzkaller0: entered promiscuous mode [ 543.909099][T12915] syzkaller0: entered allmulticast mode [ 543.924541][ T2199] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 544.065090][ T7027] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 544.114519][ T2199] usb 2-1: Using ep0 maxpacket: 32 [ 544.121360][ T2199] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.132707][ T2199] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.139663][ T23] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 544.145581][ T2199] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 544.159816][ T2199] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 544.168651][ T2199] usb 2-1: Product: syz [ 544.172817][ T2199] usb 2-1: Manufacturer: syz [ 544.183038][ T2199] hub 2-1:4.0: USB hub found [ 544.246091][ T7027] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 544.255037][ T7027] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.265552][ T7027] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 544.274961][ T7027] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.287184][ T7027] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 544.296640][ T7027] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 544.304916][ T7027] usb 4-1: Product: syz [ 544.309179][ T7027] usb 4-1: Manufacturer: syz [ 544.321645][ T7027] cdc_wdm 4-1:1.0: skipping garbage [ 544.327134][ T7027] cdc_wdm 4-1:1.0: skipping garbage [ 544.332403][ T7027] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 544.344692][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 544.355104][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.368701][ T23] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 544.378222][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.387863][ T2199] hub 2-1:4.0: 2 ports detected [ 544.392934][ T23] usb 3-1: config 0 descriptor?? [ 544.540587][ T7027] usb 4-1: USB disconnect, device number 24 [ 544.802027][ T2199] hub 2-1:4.0: set hub depth failed [ 544.818846][ T2199] usb 2-1: USB disconnect, device number 25 [ 544.842643][ T23] input: HID 5543:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.000A/input/input28 [ 544.964844][ T23] input: HID 5543:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.000A/input/input29 [ 545.006700][ T23] uclogic 0003:5543:0042.000A: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 545.137578][ T23] usb 3-1: USB disconnect, device number 21 [ 545.959202][T12937] netlink: 'syz.1.2149': attribute type 13 has an invalid length. [ 545.985500][T12937] netlink: 'syz.1.2149': attribute type 17 has an invalid length. [ 546.113487][T12937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.157159][T12937] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.214672][T12937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.253572][T12945] syzkaller0: entered promiscuous mode [ 546.268960][T12945] syzkaller0: entered allmulticast mode [ 547.194654][T12980] netlink: 'syz.3.2159': attribute type 13 has an invalid length. [ 547.202658][T12980] netlink: 'syz.3.2159': attribute type 17 has an invalid length. [ 547.230373][T12980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.237940][T12980] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.248343][T12980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.264792][T12981] syzkaller0: entered promiscuous mode [ 547.270288][T12981] syzkaller0: entered allmulticast mode [ 547.965617][T13008] xt_hashlimit: size too large, truncated to 1048576 [ 549.677666][T13043] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 550.396737][ T5817] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 550.584456][ T5817] usb 2-1: Using ep0 maxpacket: 8 [ 550.591454][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.612696][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.656559][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 550.687301][ T5817] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 550.709851][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.735922][ T5817] usb 2-1: config 0 descriptor?? [ 550.980109][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'. [ 551.121871][T13067] syzkaller0: entered promiscuous mode [ 551.144457][T13067] syzkaller0: entered allmulticast mode [ 551.179933][ T5817] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 551.206903][ T5817] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 551.213936][ T5817] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 551.238242][ T5817] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 551.251354][ T5817] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 551.258788][ T5817] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 551.265917][ T5817] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 551.283210][ T5817] elecom 0003:056E:00FE.000B: item fetching failed at offset 12/70 [ 551.314964][ T5817] elecom: probe of 0003:056E:00FE.000B failed with error -22 [ 551.447716][T13049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.476008][T13049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.619992][T13078] qrtr: Invalid version 0 [ 551.639373][T13078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.661836][T13078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.188264][T13090] syzkaller0: entered promiscuous mode [ 552.193766][T13090] syzkaller0: entered allmulticast mode [ 552.281528][ T23] usb 2-1: USB disconnect, device number 26 [ 552.472328][T13012] Set syz1 is full, maxelem 65536 reached [ 552.670443][T13104] syzkaller0: entered promiscuous mode [ 552.676062][T13104] syzkaller0: entered allmulticast mode [ 553.376330][ T5817] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 553.567067][T13126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.576693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.585811][ T5817] usb 1-1: Using ep0 maxpacket: 32 [ 553.594246][ T5817] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.607742][ T5817] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.635958][ T5817] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 553.657700][ T5817] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 553.677902][ T5817] usb 1-1: Product: syz [ 553.691492][ T5817] usb 1-1: Manufacturer: syz [ 553.711809][ T5817] hub 1-1:4.0: USB hub found [ 553.911955][ T5817] hub 1-1:4.0: 2 ports detected [ 555.404751][ T5817] hub 1-1:4.0: set hub depth failed [ 555.410270][ T96] block nbd3: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 360 seconds [ 555.417558][ T5817] usb 1-1: USB disconnect, device number 20 [ 555.424429][ T96] block nbd3: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 360 seconds [ 555.438061][ T96] block nbd3: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 360 seconds [ 555.449125][ T96] block nbd3: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 360 seconds [ 555.790893][T13159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.799499][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.932595][ T5817] IPVS: starting estimator thread 0... [ 555.988772][T13167] binder_alloc: 13166: binder_alloc_buf, no vma [ 556.034479][T13165] IPVS: using max 22 ests per chain, 52800 per kthread [ 556.086328][T13169] syzkaller0: entered promiscuous mode [ 556.092338][T13169] syzkaller0: entered allmulticast mode [ 556.397236][ T2199] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 556.614013][ T2199] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 556.630862][ T2199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.665076][ T2199] usb 1-1: config 0 descriptor?? [ 556.680209][ T2199] cp210x 1-1:0.0: cp210x converter detected [ 557.085005][ T2199] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 557.101080][ T2199] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 557.108900][ T2199] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 557.127287][ T2199] usb 1-1: cp210x converter now attached to ttyUSB0 [ 557.837354][T13178] syzkaller0: entered promiscuous mode [ 557.842985][T13178] syzkaller0: entered allmulticast mode [ 558.060732][T13192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.069302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.267030][T13201] binder_alloc: 13200: binder_alloc_buf, no vma [ 558.494523][ T2199] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 558.531046][T13207] syzkaller0: entered promiscuous mode [ 558.537512][T13207] syzkaller0: entered allmulticast mode [ 558.685885][ T2199] usb 2-1: Using ep0 maxpacket: 32 [ 558.701544][ T2199] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.713202][ T2199] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.736286][ T2199] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 558.755286][ T2199] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 558.773481][ T2199] usb 2-1: Product: syz [ 558.778241][ T2199] usb 2-1: Manufacturer: syz [ 558.790025][ T2199] hub 2-1:4.0: USB hub found [ 558.995573][ T2199] hub 2-1:4.0: 2 ports detected [ 559.148140][ T5817] usb 1-1: USB disconnect, device number 21 [ 559.172818][ T5817] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 559.202623][ T5817] cp210x 1-1:0.0: device disconnected [ 559.413720][ T2199] hub 2-1:4.0: set hub depth failed [ 559.435441][ T2199] usb 2-1: USB disconnect, device number 27 [ 561.507505][T13218] xfrm0: Caught tx_queue_len zero misconfig [ 562.644936][T13245] netlink: 'syz.1.2244': attribute type 13 has an invalid length. [ 562.666778][T13245] netlink: 'syz.1.2244': attribute type 17 has an invalid length. [ 562.732062][T13245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.746959][T13245] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.764838][T13245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.109595][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.124560][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.363586][T13273] syzkaller0: entered promiscuous mode [ 563.379944][T13273] syzkaller0: entered allmulticast mode [ 563.566409][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2253'. [ 566.408586][T13289] netlink: 'syz.0.2255': attribute type 10 has an invalid length. [ 566.416806][T13289] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2255'. [ 566.428020][T13289] ipvlan1: entered promiscuous mode [ 566.433668][T13289] bridge0: port 2(ipvlan1) entered blocking state [ 566.440793][T13289] bridge0: port 2(ipvlan1) entered disabled state [ 566.460110][T13289] ipvlan1: entered allmulticast mode [ 566.474436][T13289] veth0_vlan: entered allmulticast mode [ 566.483723][T13289] ipvlan1: left allmulticast mode [ 566.489277][T13289] veth0_vlan: left allmulticast mode [ 566.495005][T13289] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 566.520480][T13312] infiniband syz0: set down [ 566.794302][T13317] netlink: 'syz.2.2258': attribute type 13 has an invalid length. [ 566.809060][T13317] netlink: 'syz.2.2258': attribute type 17 has an invalid length. [ 566.825117][T13317] infiniband syz0: set active [ 566.831463][T13317] infiniband syz0: set active [ 566.866799][T13317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.875688][T13317] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.886951][T13317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.908264][ T7052] lo speed is unknown, defaulting to 1000 [ 566.955415][ T2199] lo speed is unknown, defaulting to 1000 [ 566.961628][ T5817] lo speed is unknown, defaulting to 1000 [ 566.968945][ T7052] lo speed is unknown, defaulting to 1000 [ 568.416171][T13398] syzkaller0: entered promiscuous mode [ 568.421981][T13398] syzkaller0: entered allmulticast mode [ 568.634558][ T7052] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 568.855426][ T7052] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 568.863471][ T7052] usb 3-1: config 0 has no interface number 0 [ 568.900152][ T7052] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 568.914527][ T7052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.933221][ T7052] usb 3-1: Product: syz [ 568.946936][ T7052] usb 3-1: Manufacturer: syz [ 568.954550][ T7052] usb 3-1: SerialNumber: syz [ 568.990536][ T7052] usb 3-1: config 0 descriptor?? [ 569.222060][ T7052] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 569.252043][ T7052] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 569.264252][ T7052] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 569.296784][ T7052] usb 3-1: media controller created [ 569.368587][ T7052] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.448516][ T7052] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 570.562592][ T7052] usb 3-1: USB disconnect, device number 22 [ 571.682261][T13404] netlink: 'syz.0.2275': attribute type 13 has an invalid length. [ 571.693148][T13404] netlink: 'syz.0.2275': attribute type 17 has an invalid length. [ 571.729639][T13404] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.753409][T13404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 571.894778][ T23] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 572.094629][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 572.107461][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.119910][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.125218][T13420] syzkaller0: create flow: hash 1695942753 index 1 [ 572.130349][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 572.146560][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.175726][ T23] usb 2-1: config 0 descriptor?? [ 572.188525][ T23] hub 2-1:0.0: USB hub found [ 572.304637][ T7055] syzkaller0: tun_net_xmit 76 [ 572.384642][ T7053] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 572.397986][ T23] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 572.588138][ T7053] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 572.599938][ T7053] usb 4-1: config 0 has no interface number 0 [ 572.618280][ T7053] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 572.636072][ T7053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.653543][ T7053] usb 4-1: Product: syz [ 572.658238][ T7055] syzkaller0: tun_net_xmit 76 [ 572.663904][ T7053] usb 4-1: Manufacturer: syz [ 572.675457][ T7053] usb 4-1: SerialNumber: syz [ 572.690334][ T7053] usb 4-1: config 0 descriptor?? [ 572.822394][ T23] hid-generic 0003:046D:C31C.000C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 572.845839][T13414] syzkaller0: delete flow: hash 1695942753 index 1 [ 572.918595][ T7053] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 572.947708][ T7053] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 572.984039][ T7053] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 572.999568][ T7053] usb 4-1: media controller created [ 573.076374][ T7053] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.280042][ T23] usb 2-1: USB disconnect, device number 28 [ 574.015501][T13445] process 'syz.1.2286' launched './file0' with NULL argv: empty string added [ 574.236721][ T7053] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 574.302636][ T7053] usb 4-1: USB disconnect, device number 25 [ 575.782476][T13448] fuse: Bad value for 'rootmode' [ 577.898184][T13452] netlink: 'syz.3.2287': attribute type 13 has an invalid length. [ 577.925678][T13452] netlink: 'syz.3.2287': attribute type 17 has an invalid length. [ 578.004974][T13452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.045272][T13452] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.065387][T13452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.345761][T13483] binder: BINDER_SET_CONTEXT_MGR already set [ 578.358807][T13483] binder: 13481:13483 ioctl 4018620d 200000000040 returned -16 [ 578.604444][ T7052] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 578.654422][ T7027] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 578.806333][ T7052] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 578.814767][ T7052] usb 3-1: config 0 has no interface number 0 [ 578.827080][ T7052] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 578.834411][ T7027] usb 2-1: Using ep0 maxpacket: 32 [ 578.841714][ T7052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.852581][ T7052] usb 3-1: Product: syz [ 578.857497][ T7052] usb 3-1: Manufacturer: syz [ 578.862508][ T7052] usb 3-1: SerialNumber: syz [ 578.868660][ T7027] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.883467][ T7052] usb 3-1: config 0 descriptor?? [ 578.895875][ T7027] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.917613][ T7027] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 578.934570][ T7027] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 578.943035][ T7027] usb 2-1: Product: syz [ 578.964783][ T7027] usb 2-1: Manufacturer: syz [ 578.981475][ T7027] hub 2-1:4.0: USB hub found [ 579.095724][ T7052] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 579.110506][ T7052] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 579.122468][ T7052] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 579.134285][ T7052] usb 3-1: media controller created [ 579.160722][ T7052] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 579.182117][ T7027] hub 2-1:4.0: 2 ports detected [ 579.368686][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2301'. [ 579.396789][ T7027] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 579.403681][ T7027] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 579.478424][ T7027] usb 2-1: USB disconnect, device number 29 [ 580.102474][T13503] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 580.298531][ T7052] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 580.504793][ T7052] usb 3-1: USB disconnect, device number 23 [ 580.585636][T13507] netlink: 'syz.3.2304': attribute type 13 has an invalid length. [ 580.603936][T13507] netlink: 'syz.3.2304': attribute type 17 has an invalid length. [ 580.676984][T13507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.703635][T13507] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.730794][T13507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 581.014663][T13516] binder: BINDER_SET_CONTEXT_MGR already set [ 581.025475][T13516] binder: 13515:13516 ioctl 4018620d 200000000040 returned -16 [ 581.195840][T13522] fuse: Unknown parameter '0x0000000000000004' [ 581.605313][ T7052] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 581.723032][T13541] syzkaller0: entered promiscuous mode [ 581.729346][T13541] syzkaller0: entered allmulticast mode [ 581.804594][ T7052] usb 1-1: Using ep0 maxpacket: 32 [ 581.815666][ T7052] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.827438][ T7052] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.844450][ T7052] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 581.853530][ T7052] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 581.862162][ T7052] usb 1-1: Product: syz [ 581.866427][ T7052] usb 1-1: Manufacturer: syz [ 581.884766][ T7025] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 581.887647][ T7052] hub 1-1:4.0: USB hub found [ 582.074534][ T7025] usb 4-1: Using ep0 maxpacket: 8 [ 582.081978][ T7052] hub 1-1:4.0: 2 ports detected [ 582.090194][ T7025] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 582.114722][ T7025] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 582.129755][ T7025] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 582.142265][ T7025] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 582.156134][ T7025] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.170376][ T7025] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 582.182038][ T7025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.194476][ T23] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 582.311185][ T7052] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 582.319555][ T7052] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 582.386003][ T7052] usb 1-1: USB disconnect, device number 22 [ 582.413548][ T7025] usb 4-1: usb_control_msg returned -32 [ 582.418692][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.433908][ T23] usb 2-1: config 0 has no interface number 0 [ 582.447052][ T7025] usbtmc 4-1:16.0: can't read capabilities [ 582.448777][ T23] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 582.462294][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.483213][ T23] usb 2-1: Product: syz [ 582.491839][ T23] usb 2-1: Manufacturer: syz [ 582.500662][ T23] usb 2-1: SerialNumber: syz [ 582.514115][ T23] usb 2-1: config 0 descriptor?? [ 582.728846][ T23] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 582.743908][ T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 582.757751][ T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 582.766160][ T23] usb 2-1: media controller created [ 582.787037][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.026396][T13560] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 583.470312][T13573] syzkaller0: entered promiscuous mode [ 583.476077][T13573] syzkaller0: entered allmulticast mode [ 583.484851][ T5834] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 583.519705][T13574] usbtmc 4-1:16.0: CHECK_CLEAR_STATUS returned 57 [ 583.673879][ T5834] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 583.687888][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.706126][ T5834] usb 1-1: config 0 descriptor?? [ 583.723400][ T5834] cp210x 1-1:0.0: cp210x converter detected [ 583.884789][ T23] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 583.966170][ T23] usb 2-1: USB disconnect, device number 30 [ 584.044851][ T7025] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 584.120033][ T5834] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 584.129180][ T5834] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 584.137082][ T5834] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 584.147369][ T5834] usb 1-1: cp210x converter now attached to ttyUSB0 [ 584.226137][ T7025] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.236622][ T7025] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 584.242954][T13582] usb usb8: usbfs: process 13582 (syz.0.2323) did not claim interface 0 before use [ 584.258727][ T7025] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 584.269634][ T7025] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 584.280846][ T7025] usb 3-1: New USB device found, idVendor=0525, idProduct=aea1, bcdDevice= 0.1c [ 584.289984][ T7025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.298237][ T7025] usb 3-1: Product: syz [ 584.302432][ T7025] usb 3-1: Manufacturer: syz [ 584.307224][ T7025] usb 3-1: SerialNumber: syz [ 584.315330][T13580] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 584.324630][ T7025] cdc_mbim 3-1:1.0: skipping garbage [ 584.330386][ T7025] usb 3-1: selecting invalid altsetting 1 [ 584.743405][ T7025] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 584.758961][ T7025] cdc_mbim 3-1:1.0: bind() failure [ 584.782988][ T7025] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 584.798283][ T5834] usb 4-1: USB disconnect, device number 26 [ 584.804508][ T7025] cdc_ncm 3-1:1.1: bind() failure [ 584.832760][ T7025] usb 3-1: USB disconnect, device number 24 [ 584.844575][ T29] INFO: task udevd:5879 blocked for more than 143 seconds. [ 584.854217][ T29] Not tainted syzkaller #0 [ 584.872594][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.886854][ T29] task:udevd state:D stack:25680 pid:5879 ppid:5141 flags:0x00004006 [ 584.898079][ T29] Call Trace: [ 584.901931][ T29] [ 584.906513][ T29] __schedule+0x1553/0x45a0 [ 584.911199][ T29] ? asan.module_dtor+0x20/0x20 [ 584.918718][ T29] ? mark_lock+0x94/0x320 [ 584.923195][ T29] ? lock_chain_count+0x20/0x20 [ 584.930069][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 584.936576][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 584.942435][ T29] schedule+0xbd/0x170 [ 584.947802][ T29] io_schedule+0x80/0xd0 [ 584.952097][ T29] folio_wait_bit_common+0x714/0xfa0 [ 584.959536][ T29] ? folio_wait_bit+0x30/0x30 [ 584.964266][ T29] ? _compound_head+0x120/0x120 [ 584.970468][ T29] ? filemap_add_folio+0x192/0x3c0 [ 584.977431][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 584.982837][ T29] ? blkdev_writepage+0x30/0x30 [ 584.989223][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 584.999211][ T29] ? blkdev_writepage+0x30/0x30 [ 585.006397][ T29] read_part_sector+0xd2/0x340 [ 585.012238][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 585.020585][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 585.027721][ T29] ? put_partition+0x370/0x370 [ 585.032811][ T29] ? alloc_pages+0x4dc/0x740 [ 585.039042][ T29] bdev_disk_changed+0x740/0x1420 [ 585.045345][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 585.051095][ T29] blkdev_get_whole+0x30d/0x390 [ 585.057599][ T29] blkdev_get_by_dev+0x279/0x600 [ 585.063758][ T29] blkdev_open+0x152/0x360 [ 585.072322][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 585.080125][ T29] do_dentry_open+0x8c6/0x1500 [ 585.085687][ T29] path_openat+0x27f1/0x3230 [ 585.090279][ T29] ? finish_task_switch+0x265/0x8f0 [ 585.097143][ T29] ? verify_lock_unused+0x140/0x140 [ 585.102615][ T29] ? do_filp_open+0x430/0x430 [ 585.109119][ T29] ? asan.module_dtor+0x20/0x20 [ 585.114197][ T29] do_filp_open+0x1f5/0x430 [ 585.122887][ T29] ? vfs_tmpfile+0x490/0x490 [ 585.128964][ T29] ? _raw_spin_unlock+0x28/0x40 [ 585.133927][ T29] ? alloc_fd+0x58f/0x630 [ 585.140447][ T29] do_sys_openat2+0x134/0x1d0 [ 585.146016][ T29] ? do_sys_open+0xe0/0xe0 [ 585.150623][ T29] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 585.158385][ T29] __x64_sys_openat+0x139/0x160 [ 585.163465][ T29] do_syscall_64+0x55/0xb0 [ 585.169641][ T29] ? clear_bhb_loop+0x40/0x90 [ 585.178788][ T29] ? clear_bhb_loop+0x40/0x90 [ 585.185381][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.191658][ T29] RIP: 0033:0x7fe8eeaa7407 [ 585.197765][ T29] RSP: 002b:00007fffe997c740 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 585.207845][ T29] RAX: ffffffffffffffda RBX: 00007fe8ef1b2880 RCX: 00007fe8eeaa7407 [ 585.217967][ T29] RDX: 00000000000a0800 RSI: 000055d4a7a252d0 RDI: ffffffffffffff9c [ 585.227090][ T29] RBP: 000055d4a7a24910 R08: 0000000000000000 R09: 0000000000000000 [ 585.236718][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d4a7a457d0 [ 585.246090][ T29] R13: 000055d4a7a3c410 R14: 0000000000000000 R15: 000055d4a7a457d0 [ 585.256790][ T29] [ 585.259952][ T29] [ 585.259952][ T29] Showing all locks held in the system: [ 585.285836][ T29] 1 lock held by khungtaskd/29: [ 585.290783][ T29] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 585.302969][ T29] 2 locks held by getty/5532: [ 585.308637][ T29] #0: ffff8880313480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 585.320261][ T29] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 585.332241][ T29] 1 lock held by udevd/5879: [ 585.339813][ T29] #0: ffff888021d9b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 585.351222][ T29] 2 locks held by kworker/1:10/7053: [ 585.359389][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 585.372000][ T29] #1: ffffc90004a4fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 585.386804][ T29] 5 locks held by syz.1.2332/13592: [ 585.392206][ T29] [ 585.396332][ T29] ============================================= [ 585.396332][ T29] [ 585.405511][ T29] NMI backtrace for cpu 0 [ 585.409870][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 585.417072][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.427146][ T29] Call Trace: [ 585.430446][ T29] [ 585.433390][ T29] dump_stack_lvl+0x18c/0x250 [ 585.438094][ T29] ? show_regs_print_info+0x20/0x20 [ 585.443318][ T29] ? load_image+0x420/0x420 [ 585.447864][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 585.452828][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 585.458998][ T29] ? _printk+0xde/0x130 [ 585.463185][ T29] ? load_image+0x420/0x420 [ 585.467792][ T29] ? load_image+0x420/0x420 [ 585.472296][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 585.478379][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 585.484370][ T29] watchdog+0xf3d/0xf80 [ 585.488529][ T29] ? watchdog+0x1e1/0xf80 [ 585.492868][ T29] kthread+0x2fa/0x390 [ 585.496932][ T29] ? hungtask_pm_notify+0x90/0x90 [ 585.501956][ T29] ? kthread_blkcg+0xd0/0xd0 [ 585.506534][ T29] ret_from_fork+0x48/0x80 [ 585.510947][ T29] ? kthread_blkcg+0xd0/0xd0 [ 585.515530][ T29] ret_from_fork_asm+0x11/0x20 [ 585.520304][ T29] [ 585.523646][ T29] Sending NMI from CPU 0 to CPUs 1: [ 585.528914][ C1] NMI backtrace for cpu 1 [ 585.528924][ C1] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 585.528946][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.528956][ C1] Workqueue: rcu_gp process_srcu [ 585.528979][ C1] RIP: 0010:preempt_count_add+0x6a/0x1a0 [ 585.529004][ C1] Code: a7 7e 48 c7 c0 80 e4 2c 97 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e6 00 00 00 83 3d 4f 57 d0 15 00 75 11 65 8b 05 8e 28 a7 7e <0f> b6 c0 3d f5 00 00 00 73 58 65 8b 05 7d 28 a7 7e 25 ff ff ff 7f [ 585.529017][ C1] RSP: 0018:ffffc900001d79e0 EFLAGS: 00000246 [ 585.529029][ C1] RAX: 0000000080000001 RBX: 0000000000002afa RCX: ffffffff972ce403 [ 585.529041][ C1] RDX: 0000000000000130 RSI: ffffffff8b1c9840 RDI: 0000000000000001 [ 585.529051][ C1] RBP: 0000000000000001 R08: ffffe8ffffd10dc7 R09: 1ffffd1ffffa21b8 [ 585.529062][ C1] R10: dffffc0000000000 R11: fffff91ffffa21b9 R12: 0000000000000002 [ 585.529072][ C1] R13: ffffe8ffffd10dc0 R14: 00000130acfd9784 R15: dffffc0000000000 [ 585.529084][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 585.529097][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.529108][ C1] CR2: 000020000027f030 CR3: 000000002ebc7000 CR4: 00000000003506e0 [ 585.529123][ C1] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000000000 [ 585.529132][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 585.529142][ C1] Call Trace: [ 585.529147][ C1] [ 585.529154][ C1] delay_tsc+0x65/0xc0 [ 585.529171][ C1] try_check_zero+0x39a/0x3e0 [ 585.529195][ C1] process_srcu+0x243/0x1330 [ 585.529222][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 585.529240][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 585.529260][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 585.529278][ C1] process_scheduled_works+0xa5d/0x15d0 [ 585.529310][ C1] ? worker_attach_to_pool+0x380/0x380 [ 585.529332][ C1] ? assign_work+0x3d2/0x5d0 [ 585.529353][ C1] worker_thread+0xa55/0xfc0 [ 585.529384][ C1] kthread+0x2fa/0x390 [ 585.529398][ C1] ? pr_cont_work+0x560/0x560 [ 585.529417][ C1] ? kthread_blkcg+0xd0/0xd0 [ 585.529431][ C1] ret_from_fork+0x48/0x80 [ 585.529448][ C1] ? kthread_blkcg+0xd0/0xd0 [ 585.529463][ C1] ret_from_fork_asm+0x11/0x20 [ 585.529491][ C1] [ 585.758779][ T96] block nbd3: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 390 seconds [ 585.769713][ T96] block nbd3: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 390 seconds [ 585.780787][ T96] block nbd3: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 390 seconds [ 585.791861][ T96] block nbd3: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 390 seconds [ 585.824407][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 585.831297][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 585.838507][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.848578][ T29] Call Trace: [ 585.851863][ T29] [ 585.854791][ T29] dump_stack_lvl+0x18c/0x250 [ 585.859486][ T29] ? show_regs_print_info+0x20/0x20 [ 585.864699][ T29] ? load_image+0x420/0x420 [ 585.869221][ T29] panic+0x2dc/0x730 [ 585.873156][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 585.878817][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 585.883351][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 585.888936][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 585.895104][ T29] watchdog+0xf7c/0xf80 [ 585.899254][ T29] ? watchdog+0x1e1/0xf80 [ 585.903583][ T29] kthread+0x2fa/0x390 [ 585.907658][ T29] ? hungtask_pm_notify+0x90/0x90 [ 585.912688][ T29] ? kthread_blkcg+0xd0/0xd0 [ 585.917278][ T29] ret_from_fork+0x48/0x80 [ 585.921779][ T29] ? kthread_blkcg+0xd0/0xd0 [ 585.926395][ T29] ret_from_fork_asm+0x11/0x20 [ 585.931185][ T29] [ 585.934681][ T29] Kernel Offset: disabled [ 585.939026][ T29] Rebooting in 86400 seconds..