last executing test programs: 5m13.66395662s ago: executing program 3 (id=1150): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@can={{0x2, 0x1}, 0x3, 0x2, 0x0, 0x0, "641b005400"}, 0x10}, 0x1, 0x0, 0x0, 0x8490}, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5m13.483012036s ago: executing program 3 (id=1153): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) 5m13.292215914s ago: executing program 3 (id=1155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0xfffffcda) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000000000085040000", @ANYRESOCT=r2]) 5m13.032070042s ago: executing program 3 (id=1159): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 5m12.880366218s ago: executing program 3 (id=1161): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d54900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c0015"], 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x20, 0x9, 0x1}}, 0xb8}}, 0x0) 5m11.212262873s ago: executing program 3 (id=1171): pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x8f5, 0x100000000000000) write(0xffffffffffffffff, 0x0, 0x0) 5m10.926636453s ago: executing program 32 (id=1171): pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x8f5, 0x100000000000000) write(0xffffffffffffffff, 0x0, 0x0) 4m47.257408805s ago: executing program 1 (id=1414): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0)={r1, 0xa9ac}, &(0x7f0000000300)=0x8) 4m47.076239868s ago: executing program 1 (id=1416): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000005"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x70bd2d, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x300, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2}}}, 0xb8}}, 0x0) 4m47.002206135s ago: executing program 1 (id=1417): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x102, 0x0) getdents(r0, 0x0, 0x0) 4m46.840271596s ago: executing program 1 (id=1419): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 4m46.796903711s ago: executing program 1 (id=1420): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 4m46.464339375s ago: executing program 1 (id=1422): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000003440)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000003580)=[{&(0x7f0000000300)="85df", 0x2}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x40) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000) 4m46.226833352s ago: executing program 33 (id=1422): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000003440)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000003580)=[{&(0x7f0000000300)="85df", 0x2}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x40) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000) 4m5.488979399s ago: executing program 4 (id=1745): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000c0506"], 0x0, 0x0, 0x0, 0x0}) 4m3.384438403s ago: executing program 4 (id=1756): fsopen(&(0x7f0000000040)='bdev\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000002140)=""/17, 0x11, 0x0) 4m3.21325437s ago: executing program 4 (id=1759): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x9, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) 4m3.056393084s ago: executing program 4 (id=1761): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 4m2.880074507s ago: executing program 4 (id=1764): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x3bdd}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x2000000, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x5, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 4m2.432292583s ago: executing program 4 (id=1769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 4m1.916063952s ago: executing program 34 (id=1769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 3m11.241691028s ago: executing program 2 (id=2326): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x89}}}], 0x40}}], 0x1, 0x0) 3m11.195968132s ago: executing program 2 (id=2327): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}}], 0x1, 0x4000881) listen(r0, 0x2000fff) accept(r0, 0xfffffffffffffffd, 0x0) 3m11.062762775s ago: executing program 2 (id=2328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) 3m10.998066598s ago: executing program 2 (id=2329): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x204) 3m10.934837868s ago: executing program 2 (id=2331): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mremap(&(0x7f0000efa000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x2) 3m10.54422215s ago: executing program 2 (id=2334): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b83, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 3m10.252656624s ago: executing program 35 (id=2334): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b83, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2m36.3431344s ago: executing program 7 (id=2675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd000011000000000000586500000000000015fa28bd93751c80b5275f1f777ac20e0001ff0200000000000000000000000000010420"], 0x7a) 2m36.120375501s ago: executing program 7 (id=2679): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) pipe(&(0x7f00000001c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m35.680273312s ago: executing program 7 (id=2682): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x2) close(r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 2m35.579840899s ago: executing program 7 (id=2683): mkdir(&(0x7f0000000140)='./file0\x00', 0x1d9) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0\x00') 2m35.48073009s ago: executing program 7 (id=2684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f00000003c0)=0xfffffff8, 0x4) 2m35.095880145s ago: executing program 7 (id=2687): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60) r0 = socket(0x10, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x2, 0x1, 0x4, 0x2}}, 0x2e) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x4000, 0x2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 2m34.809860534s ago: executing program 36 (id=2687): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60) r0 = socket(0x10, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x2, 0x1, 0x4, 0x2}}, 0x2e) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x4000, 0x2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 3.105727244s ago: executing program 5 (id=4285): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x10000, 0x2000, &(0x7f0000ee1000/0x2000)=nil}) 2.918828973s ago: executing program 5 (id=4288): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x4, 0x0, 0x0, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 2.91833409s ago: executing program 6 (id=4289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0xdddd1000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000c33000/0x4000)=nil}) 2.828312106s ago: executing program 5 (id=4291): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210928bd7000fcdbdf251b00000010002e800c0087000200aaaaaaaaaaaa08000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) 2.749298526s ago: executing program 5 (id=4292): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, 0x0) 2.746234481s ago: executing program 6 (id=4293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd0100000000001400000060e1fd2800082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) 2.536333416s ago: executing program 6 (id=4296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001384ff00"], 0x4b) 2.369924466s ago: executing program 6 (id=4299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x7ff) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) 2.219450117s ago: executing program 6 (id=4301): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a22751735810203010902120001000001000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x0, 0x15, 0x10, "3498125f4cc3035fa82d7d4272ac6210"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.263931967s ago: executing program 5 (id=4312): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) setreuid(0x0, 0xee01) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1.096328257s ago: executing program 5 (id=4314): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 960.383586ms ago: executing program 0 (id=4315): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='(', 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x6}, &(0x7f0000000380)=0x8) 942.69605ms ago: executing program 0 (id=4316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, {[@ssrr={0x89, 0x3, 0x33}]}}, {0x4e24, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9, 0x0, @val=0x80}}}}}}}}, 0x3a) 776.571647ms ago: executing program 0 (id=4318): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/241, 0xf1}], 0x1) 696.834801ms ago: executing program 0 (id=4319): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x4) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0xff40) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 696.055148ms ago: executing program 8 (id=4320): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) 556.346132ms ago: executing program 8 (id=4321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x10, 0x0, 0x1, {[@window={0x3, 0x3, 0x4}, @sack={0x5, 0xe, [0x3, 0x0, 0xd]}]}}}}}, 0x4a) 525.596878ms ago: executing program 0 (id=4322): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000002680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8\x9e\x95\xdfa\xd5\xafA)t\x7fV\xf9\xe1\xe7\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15H\x84\xb8\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xfd\xff\xff\xff\xff\xff\xff\xff\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xce\xe7\xc0\xe6v\xb5\xf5\x9d\x90W\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb-\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z\x00\xf8/\xcf\xc2\xb0\r\xde\xa3\x8aw\xf1C\x94\xb6\xf7\xde\"\xbe\xffk|\xaa\x0ez9f\b\xa9\f\xedW\xafe07\x1fP\xe0\x98\n\x93;\xea\x9b\x8c\x0f\x9d\x1a$\xe0\xa4\xd7\xc2\xe5b\xe29\xa8\xba\xc4)_\x99\xb6\xd8\xd5\xd9\x9c\xb5,]n\xeba\xbf\xc3!\x88X\x9a\xd9\x8b\xdcRF\x86\x87[\xb9\xb1\x04m\xf1Q9\x10)fZV\xd7N\xa5\x91\xa0\x12.H^\tH\xe5\x1f\x9b\x06\xad\xb8\xf2\x004G\r\xa8a\a\xf2\xbd\xa9\xd1\xe2\xd72!O\xe7C\xbb\xaawzn$\x11j\t\xc1c\xf2\xf2~\xa1@\xf60e`\x17)X\xc8(\x1b\xafJ*\xec\x16_\xcc\xbe\x85\xc4\xa4\x88\x00d\xaf!\xdd\x9e\x84W\xba\xd2\x7f;\x12\r\x01\f\x9b\xc7*.\xd84Ce).\xd7[\xdd\x87F\x19\x15\x84\x0eU\xa4P\xbdgf\xca\x8e\xa0\xc1\x04\xaf\xacj\xd9\xffQ', 0x2) mmap(&(0x7f00008d4000/0x2000)=nil, 0x2000, 0x800002, 0x11, r1, 0x5454c000) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 427.70001ms ago: executing program 8 (id=4323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x20, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 361.815888ms ago: executing program 8 (id=4324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xc2) 211.426599ms ago: executing program 8 (id=4325): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ac}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067", 0x23}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b741", 0x65}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000031c0)=""/129, 0x81}, {&(0x7f0000003280)=""/83, 0x53}, {&(0x7f0000003300)=""/156, 0x9c}, {&(0x7f00000033c0)=""/233, 0xe9}], 0x4}, 0x9}], 0x1, 0x120, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 125.000576ms ago: executing program 8 (id=4326): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000880)=[{&(0x7f0000000300)="00214717a706f600000003060000000000000000aaa6", 0x16}], 0x1, 0x7, 0x1) 114.110728ms ago: executing program 6 (id=4327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f0000000080), 0x8010, &(0x7f00000000c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) close(0x3) 0s ago: executing program 0 (id=4328): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in=@broadcast, 0x4d6, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x40000}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) kernel console output (not intermixed with test programs): ng 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.468166][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.487709][ T5949] sierra_net 6-1:1.7 wwan0: usb_control_msg failed, status -71 [ 410.491296][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.497144][ T5959] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 410.530110][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.545529][ T5959] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 410.584085][ T5959] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 410.629427][ T5959] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 410.666965][ T5959] usb 6-1: USB disconnect, device number 42 [ 410.703602][ T5959] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 410.782893][ T5959] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 410.812543][ T9] usb 9-1: usb_control_msg returned -32 [ 410.818221][ T9] usbtmc 9-1:16.0: can't read capabilities [ 410.941868][T14362] syzkaller1: entered promiscuous mode [ 410.947636][T14362] syzkaller1: entered allmulticast mode [ 411.130651][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 411.182231][T14371] usbtmc 9-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 411.308948][ T9] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 411.340021][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.353840][T14380] syzkaller1: entered promiscuous mode [ 411.359523][T14380] syzkaller1: entered allmulticast mode [ 411.360715][ T9] usb 7-1: Product: syz [ 411.371071][ T9] usb 7-1: Manufacturer: syz [ 411.375789][ T9] usb 7-1: SerialNumber: syz [ 411.393564][T12745] usb 9-1: USB disconnect, device number 12 [ 411.446204][ T9] usb 7-1: config 0 descriptor?? [ 411.690974][T12745] usb 7-1: USB disconnect, device number 35 [ 411.959245][T14396] batadv_slave_1: entered promiscuous mode [ 411.967077][T14395] batadv_slave_1: left promiscuous mode [ 412.057090][T14402] misc userio: Begin command sent, but we're already running [ 412.418433][T14414] syzkaller1: entered promiscuous mode [ 412.424216][T14414] syzkaller1: entered allmulticast mode [ 412.499965][T14416] syzkaller1: entered promiscuous mode [ 412.506333][T14416] syzkaller1: entered allmulticast mode [ 412.621941][T12745] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 412.653535][T12745] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 413.055032][T14439] syzkaller1: entered promiscuous mode [ 413.063219][T14439] syzkaller1: entered allmulticast mode [ 413.114359][ T5908] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 413.280623][ T5908] usb 9-1: Using ep0 maxpacket: 8 [ 413.288155][ T5908] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 413.297587][ T5908] usb 9-1: config 179 has no interface number 0 [ 413.304432][ T5908] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 413.315986][ T5908] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 413.329624][ T5908] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 413.342794][ T5908] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 413.354658][ T5908] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 413.370785][ T5908] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 413.380026][ T5908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.392872][T14432] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 413.627432][ T5908] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input69 [ 413.835519][ T5949] usb 9-1: USB disconnect, device number 13 [ 413.835580][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 413.849946][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 414.450985][ T9] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 414.629380][ T9] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 414.648515][ T9] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 414.669193][ T9] usb 6-1: config 150 has no interface number 0 [ 414.691256][ T9] usb 6-1: config 150 interface 204 has no altsetting 0 [ 414.705048][ T9] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 414.714575][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.719975][T14490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3305'. [ 414.741618][ T9] usb 6-1: Product: syz [ 414.746037][ T9] usb 6-1: Manufacturer: syz [ 414.756244][ T9] usb 6-1: SerialNumber: syz [ 415.002272][ T9] xr_serial 6-1:150.204: skipping garbage [ 415.002368][T14498] (syz.6.3309,14498,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 415.026041][ T9] xr_serial 6-1:150.204: xr_serial converter detected [ 415.880576][ T5959] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 416.021605][ T9] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 416.028088][ T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 416.039333][ T5959] usb 1-1: Using ep0 maxpacket: 8 [ 416.042366][ T9] usb 6-1: USB disconnect, device number 43 [ 416.053190][ T9] xr_serial 6-1:150.204: device disconnected [ 416.059405][ T5959] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 416.080216][ T5959] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.107670][ T5959] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 416.128185][ T5959] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 416.155011][ T5959] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.192751][ T5959] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 416.207211][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.454481][ T5959] usb 1-1: usb_control_msg returned -32 [ 416.462798][ T5959] usbtmc 1-1:16.0: can't read capabilities [ 416.680626][T11941] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 416.809035][T14541] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 416.821528][ T9] usb 1-1: USB disconnect, device number 69 [ 416.851300][T11941] usb 7-1: Using ep0 maxpacket: 8 [ 416.863453][T11941] usb 7-1: config 2 has an invalid interface number: 1 but max is 0 [ 416.880285][T11941] usb 7-1: config 2 has no interface number 0 [ 416.891414][T11941] usb 7-1: config 2 interface 1 has no altsetting 0 [ 416.901151][T11941] usb 7-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 416.919301][T11941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.938080][T11941] usb 7-1: Product: syz [ 416.942515][T11941] usb 7-1: Manufacturer: syz [ 416.947178][T11941] usb 7-1: SerialNumber: syz [ 417.215276][T11941] snd-usb-audio 7-1:2.1: probe with driver snd-usb-audio failed with error -22 [ 417.235075][T11941] snd-usb-us122l 7-1:2.1: usb_set_interface error [ 417.252905][T11941] snd-usb-us122l 7-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 417.295645][T11941] usb 7-1: USB disconnect, device number 36 [ 417.354579][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.699223][T14557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3333'. [ 417.705887][T14555] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3334'. [ 418.021048][T11941] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 418.182199][T11941] usb 9-1: Using ep0 maxpacket: 8 [ 418.189881][T11941] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 418.208634][T11941] usb 9-1: config 179 has no interface number 0 [ 418.216865][T11941] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 418.246493][T11941] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 418.258696][T11941] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 418.271205][T11941] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 418.284371][T11941] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 418.299553][T11941] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 418.323325][T11941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.339418][T14559] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 418.472298][ T5908] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 418.594661][ T5949] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input70 [ 418.633902][ T5908] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.654266][ T5908] usb 1-1: config 0 interface 0 has no altsetting 0 [ 418.694999][ T5908] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 418.740698][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.787144][ T5908] usb 1-1: config 0 descriptor?? [ 418.836703][ T9] usb 9-1: USB disconnect, device number 14 [ 418.836710][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 418.836852][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 419.243002][T14602] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 419.255907][ T5908] aquacomputer_d5next 0003:0C70:F014.004E: unknown main item tag 0x0 [ 419.265659][ T5908] aquacomputer_d5next 0003:0C70:F014.004E: unknown main item tag 0x0 [ 419.275724][ T5908] aquacomputer_d5next 0003:0C70:F014.004E: unknown main item tag 0x0 [ 419.291346][ T5908] aquacomputer_d5next 0003:0C70:F014.004E: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.0-1/input0 [ 419.434808][ T5908] usb 1-1: USB disconnect, device number 70 [ 419.909609][T14624] syzkaller1: entered promiscuous mode [ 419.918597][T14624] syzkaller1: entered allmulticast mode [ 420.532279][ T5908] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 420.625224][T14652] loop2: detected capacity change from 0 to 7 [ 420.633160][T14653] Bluetooth: MGMT ver 1.23 [ 420.642751][T14652] Dev loop2: unable to read RDB block 7 [ 420.654307][T14652] loop2: unable to read partition table [ 420.660264][T14652] loop2: partition table beyond EOD, truncated [ 420.667937][T14652] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 420.692482][ T5908] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 420.731333][ T5908] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 420.756862][ T5908] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 420.778197][ T5908] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 420.806381][ T5908] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.824234][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.843494][ T5908] usb 9-1: Product: syz [ 420.853541][ T5908] usb 9-1: Manufacturer: syz [ 420.861899][ T5908] usb 9-1: SerialNumber: syz [ 420.885439][T14641] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 420.912813][ T5908] cdc_mbim 9-1:1.0: skipping garbage [ 421.060789][ T5959] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 421.129116][T14641] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 421.137335][T14641] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 421.230675][ T5959] usb 1-1: Using ep0 maxpacket: 8 [ 421.248366][ T5959] usb 1-1: unable to get BOS descriptor or descriptor too short [ 421.271707][ T5959] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 421.290262][ T5959] usb 1-1: can't read configurations, error -71 [ 421.500755][T11941] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 421.620585][T12745] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 421.652492][T11941] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.663201][T11941] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 421.672231][T11941] usb 7-1: config 1 has no interface number 0 [ 421.678458][T11941] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.689492][T11941] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 421.702426][T11941] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 421.711639][T11941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.719656][T11941] usb 7-1: Product: syz [ 421.723948][T11941] usb 7-1: Manufacturer: syz [ 421.728572][T11941] usb 7-1: SerialNumber: syz [ 421.756252][T14641] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 421.765457][T14641] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 421.773284][T12745] usb 6-1: Using ep0 maxpacket: 16 [ 421.781421][ T5908] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 421.791159][T12745] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.816596][ T5908] wwan wwan0: port wwan0mbim0 attached [ 421.829656][T12745] usb 6-1: config 0 interface 0 has no altsetting 0 [ 421.841777][T12745] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 421.859536][ T5908] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 4a:c6:10:56:c3:f1 [ 421.870804][T12745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.883119][T12745] usb 6-1: config 0 descriptor?? [ 422.003167][ T9] usb 9-1: USB disconnect, device number 15 [ 422.013317][ T9] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 422.105129][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 422.328873][T12745] nzxt-smart2 0003:1E71:2009.004F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 422.659379][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3395'. [ 422.715435][T12745] usb 6-1: USB disconnect, device number 44 [ 422.765287][T11941] cdc_ncm 7-1:1.1: bind() failure [ 422.802135][T11941] usb 7-1: USB disconnect, device number 37 [ 423.090743][ T5908] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 423.273113][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 423.290829][ T5908] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.320591][ T5908] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.344840][ T5908] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.364481][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.380759][ T5908] usb 1-1: Product: syz [ 423.387158][ T5908] usb 1-1: Manufacturer: syz [ 423.400578][ T5908] usb 1-1: SerialNumber: syz [ 423.550942][ T5959] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 423.638880][ T5908] usb 1-1: 0:2 : does not exist [ 423.648104][ T5908] usb 1-1: unit 9 not found! [ 423.666022][ T5908] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 423.692288][ T5908] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 423.708782][ T5908] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 423.721253][ T5959] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 423.736971][ T5959] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 423.747432][ T5959] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 423.760242][ T5959] usb 9-1: config 0 interface 0 has no altsetting 0 [ 423.779495][ T5959] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 423.780315][ T5908] usb 1-1: USB disconnect, device number 73 [ 423.794948][T12745] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 423.798806][ T5959] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 423.835802][ T5959] usb 9-1: config 0 interface 0 has no altsetting 0 [ 423.845752][ T5959] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 423.868187][ T5959] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 423.892138][ T5959] usb 9-1: config 0 interface 0 has no altsetting 0 [ 423.912132][ T5959] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 423.922108][ T5959] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 423.933202][ T5959] usb 9-1: config 0 interface 0 has no altsetting 0 [ 423.943334][ T5959] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 423.953517][ T5959] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 423.964670][ T5959] usb 9-1: config 0 interface 0 has no altsetting 0 [ 423.971207][T12745] usb 6-1: Using ep0 maxpacket: 32 [ 423.979985][ T5959] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 423.984066][T12745] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 423.989746][ T5959] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.009599][ T5959] usb 9-1: config 0 interface 0 has no altsetting 0 [ 424.018594][ T5959] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.018667][T12745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.041337][ T5959] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.057697][T12745] usb 6-1: Product: syz [ 424.059318][ T5959] usb 9-1: config 0 interface 0 has no altsetting 0 [ 424.065936][T12745] usb 6-1: Manufacturer: syz [ 424.074342][T12745] usb 6-1: SerialNumber: syz [ 424.079667][ T5959] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.089387][T12745] usb 6-1: config 0 descriptor?? [ 424.089380][ T5959] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.089415][ T5959] usb 9-1: config 0 interface 0 has no altsetting 0 [ 424.101438][T12745] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 424.162268][ T5959] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 424.171460][ T5959] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 424.190490][ T5959] usb 9-1: Product: syz [ 424.194733][ T5959] usb 9-1: Manufacturer: syz [ 424.199356][ T5959] usb 9-1: SerialNumber: syz [ 424.241862][ T5959] usb 9-1: config 0 descriptor?? [ 424.265074][ T5959] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 424.514602][T14750] tipc: New replicast peer: 0.0.0.0 [ 424.523888][T14750] tipc: Enabled bearer , priority 10 [ 424.532732][T14750] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 424.557939][ C1] usb 9-1: yurex_control_callback - control failed: -71 [ 424.578532][ T5959] usb 9-1: USB disconnect, device number 16 [ 424.588960][ T5959] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 424.910812][T12745] gspca_ov534_9: reg_w failed -71 [ 425.210513][T12745] gspca_ov534_9: Unknown sensor 0000 [ 425.210618][T12745] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 425.256483][T12745] usb 6-1: USB disconnect, device number 45 [ 425.702451][T11941] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 425.872665][T11941] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.916291][T11941] usb 1-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 425.934120][T11941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.950142][T11941] usb 1-1: config 0 descriptor?? [ 426.107326][ T30] audit: type=1326 audit(1759415113.553:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14790 comm="syz.8.3429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f044598eec9 code=0x0 [ 426.129336][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.387678][T11941] ntrig 0003:1B96:0010.0050: hidraw0: USB HID v0.03 Device [HID 1b96:0010] on usb-dummy_hcd.0-1/input0 [ 426.440691][ T5959] psmouse serio6: Failed to reset mouse on : -5 [ 426.565973][T11941] ntrig 0003:1B96:0010.0050: Firmware version: 2.10.21.25.4 (6a84 3cbb) [ 426.710933][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 426.769816][T11941] usb 1-1: USB disconnect, device number 74 [ 426.860701][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 426.868661][ T9] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 426.877486][ T9] usb 6-1: config 0 has no interface number 0 [ 426.884081][ T9] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 426.894854][ T9] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 426.908638][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 426.918181][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.926536][ T9] usb 6-1: Product: syz [ 426.931261][ T9] usb 6-1: Manufacturer: syz [ 426.935903][ T9] usb 6-1: SerialNumber: syz [ 426.944207][ T9] usb 6-1: config 0 descriptor?? [ 426.950884][T14799] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 426.958823][T14799] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 426.982394][T14801] input: syz1 as /devices/virtual/input/input73 [ 426.989308][T14801] input: failed to attach handler leds to device input73, error: -6 [ 427.173541][T14799] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 427.182584][T14799] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 427.225957][T14807] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.226348][ T24] IPVS: starting estimator thread 0... [ 427.330677][T14809] IPVS: using max 25 ests per chain, 60000 per kthread [ 427.799559][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0xc2 [ 427.830729][ T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 427.990593][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 427.998056][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 428.008069][ T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 428.018155][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.019909][ T9] usb 6-1: USB disconnect, device number 46 [ 428.026715][ T24] usb 1-1: Product: syz [ 428.038811][ T24] usb 1-1: Manufacturer: syz [ 428.045436][ T24] usb 1-1: SerialNumber: syz [ 428.055674][ T24] usb 1-1: config 0 descriptor?? [ 428.471874][ T24] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 428.713697][ T9] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 428.877574][ T24] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 428.886742][ T24] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 428.893127][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.906235][ T9] usb 9-1: config 0 has no interface number 0 [ 428.912670][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 428.923807][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 428.936535][ T9] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 428.946017][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.957247][ T9] usb 9-1: config 0 descriptor?? [ 428.964643][T14831] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 428.977415][ T9] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 429.070730][ T5908] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 429.082810][ T9] usb 1-1: USB disconnect, device number 75 [ 429.185763][T12745] usb 9-1: USB disconnect, device number 17 [ 429.185763][ C1] iowarrior 9-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 429.243618][ T5908] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 429.251914][ T5908] usb 6-1: config 0 has no interface number 0 [ 429.258084][ T5908] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 429.272404][ T5908] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 429.281948][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.290090][ T5908] usb 6-1: Product: syz [ 429.294754][ T5908] usb 6-1: Manufacturer: syz [ 429.299385][ T5908] usb 6-1: SerialNumber: syz [ 429.306494][ T5908] usb 6-1: config 0 descriptor?? [ 429.316260][ T5908] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 429.567810][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 429.569868][ T24] usb 6-1: USB disconnect, device number 47 [ 429.586372][ T24] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 430.260574][ T5959] misc userio: Buffer overflowed, userio client isn't keeping up [ 430.587455][T14884] input: syz0 as /devices/virtual/input/input74 [ 430.882968][T14893] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 430.980935][ T24] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 431.073753][T14901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.135072][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 431.143919][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 431.154833][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 431.164317][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 431.175402][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 431.191716][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 431.201032][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 431.209067][ T24] usb 1-1: Product: syz [ 431.215208][ T24] usb 1-1: Manufacturer: syz [ 431.231915][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 431.237201][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 431.244415][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 431.250343][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 431.344561][ T5959] input: PS/2 Generic Mouse as /devices/serio6/input/input72 [ 431.570572][ T5959] psmouse serio6: Failed to enable mouse on [ 431.597961][T14909] input: syz1 as /devices/virtual/input/input76 [ 431.815813][T14916] overlayfs: conflicting lowerdir path [ 432.082791][ T5959] usb 1-1: USB disconnect, device number 76 [ 432.250634][T12745] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 432.350579][ T24] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 432.421664][T12745] usb 9-1: Using ep0 maxpacket: 16 [ 432.434373][T12745] usb 9-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 432.454775][T12745] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.472768][T12745] usb 9-1: Product: syz [ 432.477056][T12745] usb 9-1: Manufacturer: syz [ 432.482586][T12745] usb 9-1: SerialNumber: syz [ 432.542255][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.553777][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.564002][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.576992][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.586484][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.635931][ T24] usb 6-1: config 0 descriptor?? [ 432.917326][T12745] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 433.041804][T14958] tmpfs: Too small a size for current use [ 433.068826][ T24] plantronics 0003:047F:FFFF.0051: reserved main item tag 0xe [ 433.082225][ T24] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 433.105924][ T24] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 433.131585][ T5959] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 433.177766][T12745] snd-usb-audio 9-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 433.242981][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.310891][ T5959] usb 1-1: Using ep0 maxpacket: 32 [ 433.319800][ T5959] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 433.329646][ T5959] usb 1-1: config 0 has no interface number 0 [ 433.336887][ T5959] usb 1-1: config 0 interface 184 has no altsetting 0 [ 433.350615][T12745] usb 6-1: USB disconnect, device number 48 [ 433.364846][ T5959] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 433.370221][ T5908] usb 9-1: USB disconnect, device number 18 [ 433.375238][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.390119][ T5959] usb 1-1: Product: syz [ 433.399975][ T5959] usb 1-1: Manufacturer: syz [ 433.406172][ T5959] usb 1-1: SerialNumber: syz [ 433.432651][ T5959] usb 1-1: config 0 descriptor?? [ 433.444362][ T5959] smsc75xx v1.0.0 [ 434.063849][ T5959] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 434.081911][ T5959] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 434.210610][ T5949] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 434.304377][ T5959] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 434.320472][ T5959] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 434.330183][ T5959] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 434.354562][ T5959] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 434.365661][ T5959] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 434.378333][ T5949] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 434.389488][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.403023][ T5959] usb 1-1: USB disconnect, device number 77 [ 434.420575][ T5949] usb 7-1: Product: syz [ 434.431055][ T5949] usb 7-1: Manufacturer: syz [ 434.435725][ T5949] usb 7-1: SerialNumber: syz [ 434.446846][ T5949] usb 7-1: config 0 descriptor?? [ 434.458409][ T5949] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 434.600649][ T24] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 434.781196][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 434.789808][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.801589][ T24] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 434.814136][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.835163][ T24] usb 9-1: config 0 descriptor?? [ 435.272622][ T24] hid-steam 0003:28DE:1102.0052: item fetching failed at offset 4/5 [ 435.282440][ T24] hid-steam 0003:28DE:1102.0052: steam_probe:parse of hid interface failed [ 435.291972][ T24] hid-steam 0003:28DE:1102.0052: probe with driver hid-steam failed with error -22 [ 435.463618][ T5949] gspca_sunplus: reg_r err -71 [ 435.478069][ T5949] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 435.497868][ T5949] usb 7-1: USB disconnect, device number 38 [ 435.501264][T12745] usb 9-1: USB disconnect, device number 19 [ 435.652527][T15020] binder: 15019:15020 ioctl c0306201 200000000540 returned -14 [ 436.163400][T15040] syzkaller1: entered promiscuous mode [ 436.179233][T15040] syzkaller1: entered allmulticast mode [ 436.472135][ T5959] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 436.634672][ T5959] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 436.652282][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.671900][ T5959] usb 6-1: Product: syz [ 436.676029][T12745] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 436.676196][ T5959] usb 6-1: Manufacturer: syz [ 436.700858][ T5959] usb 6-1: SerialNumber: syz [ 436.715192][ T5959] usb 6-1: config 0 descriptor?? [ 436.830809][T12745] usb 7-1: Using ep0 maxpacket: 16 [ 436.842922][T12745] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 436.862718][T12745] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 436.890649][T12745] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 436.899456][T12745] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 436.908396][T12745] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 436.917781][T12745] usb 7-1: config 0 has no interface number 0 [ 436.932765][T12745] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 436.939639][ T5959] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 436.944347][T12745] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 436.981975][T12745] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 437.010707][T12745] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 437.029650][T12745] usb 7-1: config 0 interface 125 has no altsetting 0 [ 437.036807][T12745] usb 7-1: config 0 interface 125 has no altsetting 2 [ 437.047139][T12745] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 437.056869][T12745] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.065222][T12745] usb 7-1: Product: syz [ 437.069429][T12745] usb 7-1: Manufacturer: syz [ 437.074631][T12745] usb 7-1: SerialNumber: syz [ 437.092031][T12745] usb 7-1: config 0 descriptor?? [ 437.106122][T12745] usb 7-1: selecting invalid altsetting 2 [ 437.749723][ T5959] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 437.773783][ T5959] usb 6-1: USB disconnect, device number 49 [ 438.150116][T12745] usb 7-1: USB disconnect, device number 39 [ 438.381365][ T5959] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 438.480586][ T5908] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 438.552248][ T5959] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 438.571116][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.592726][ T5959] usb 1-1: config 0 descriptor?? [ 438.605749][ T5959] gspca_main: spca508-2.14.0 probing 8086:0110 [ 438.630789][ T5908] usb 9-1: Using ep0 maxpacket: 16 [ 438.644400][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.650029][T15126] syzkaller1: entered promiscuous mode [ 438.662254][T15126] syzkaller1: entered allmulticast mode [ 438.668200][ T5908] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 438.681593][ T5908] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 438.691079][ T5908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.712341][ T5908] usb 9-1: config 0 descriptor?? [ 438.811139][ T5959] gspca_spca508: reg_read err -32 [ 439.023429][ T5959] gspca_spca508: reg_read err -71 [ 439.030606][ T5959] gspca_spca508: reg_read err -71 [ 439.045020][ T5959] gspca_spca508: reg_read err -71 [ 439.053582][ T5959] gspca_spca508: reg write: error -71 [ 439.059091][ T5959] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 439.077240][ T5959] usb 1-1: USB disconnect, device number 78 [ 439.155825][ T5908] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 439.181930][ T5908] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 439.193943][ T5908] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 439.202327][ T5908] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 439.209811][ T5908] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 439.217572][ T5908] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 439.225798][ T5908] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 439.233659][ T5908] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 439.241317][ T5908] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 439.248773][ T5908] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 439.266760][ T5908] HID 045e:07da: Invalid code 65791 type 1 [ 439.281055][ T5908] HID 045e:07da: Invalid code 768 type 1 [ 439.286959][ T5908] HID 045e:07da: Invalid code 769 type 1 [ 439.297199][ T5908] HID 045e:07da: Invalid code 770 type 1 [ 439.307505][ T5908] HID 045e:07da: Invalid code 771 type 1 [ 439.314040][ T5908] HID 045e:07da: Invalid code 772 type 1 [ 439.320624][ T5908] HID 045e:07da: Invalid code 773 type 1 [ 439.340171][ T5908] HID 045e:07da: Invalid code 774 type 1 [ 439.354215][ T5908] HID 045e:07da: Invalid code 775 type 1 [ 439.359928][ T5908] HID 045e:07da: Invalid code 776 type 1 [ 439.390912][ T5908] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0053/input/input77 [ 439.445701][T15147] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 439.482053][ T5908] microsoft 0003:045E:07DA.0053: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 439.538094][ T5908] usb 9-1: USB disconnect, device number 20 [ 439.645091][T15150] fido_id[15150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 439.752117][ T5959] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 439.910821][ T5959] usb 6-1: Using ep0 maxpacket: 32 [ 439.919976][ T5959] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 439.932459][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.963692][ T5959] usb 6-1: config 0 descriptor?? [ 439.978284][ T5959] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 441.015930][ T5959] gspca_nw80x: reg_w err -71 [ 441.024276][ T5959] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 441.059934][ T5959] usb 6-1: USB disconnect, device number 50 [ 441.133165][T15205] vxcan1: tx drop: invalid da for name 0xfffffffffffffffc [ 441.776416][T15231] netlink: 428 bytes leftover after parsing attributes in process `syz.8.3631'. [ 441.786728][T15231] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3631'. [ 442.080794][ T5949] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 442.230680][ T5949] usb 9-1: Using ep0 maxpacket: 32 [ 442.248926][ T5949] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 442.275620][ T5949] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.297266][ T5949] usb 9-1: Product: syz [ 442.305785][ T5949] usb 9-1: Manufacturer: syz [ 442.311004][ T5949] usb 9-1: SerialNumber: syz [ 442.318809][ T5949] usb 9-1: config 0 descriptor?? [ 442.329320][ T5949] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 442.340647][T12745] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 442.503843][T12745] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 442.518052][T12745] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.532828][T12745] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 442.545693][T12745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.769301][T12745] usb 6-1: usb_control_msg returned -32 [ 442.777974][T12745] usbtmc 6-1:16.0: can't read capabilities [ 442.970582][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 443.130578][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 443.144686][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 443.178062][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 443.188981][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.199114][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.214129][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.232354][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.348863][ T5949] gspca_ov534_9: reg_w failed -71 [ 443.379761][ T24] usb 6-1: USB disconnect, device number 51 [ 443.458451][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 443.464609][ T9] usbtmc 7-1:16.0: can't read capabilities [ 443.650590][ T5949] gspca_ov534_9: Unknown sensor 0000 [ 443.650701][ T5949] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 443.668875][ T9] usb 7-1: USB disconnect, device number 40 [ 443.674775][ T5949] usb 9-1: USB disconnect, device number 21 [ 444.300813][ T24] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 444.463461][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 444.471050][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.476065][T15305] netlink: 19 bytes leftover after parsing attributes in process `syz.5.3661'. [ 444.484858][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.494696][T12745] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 444.503739][ T24] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 444.519613][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.530079][ T24] usb 9-1: config 0 descriptor?? [ 444.652759][T12745] usb 7-1: config index 0 descriptor too short (expected 8028, got 92) [ 444.661348][T12745] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.673115][T12745] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.686393][T12745] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.695685][T12745] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.700553][ T5949] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 444.710562][T12745] usb 7-1: Product: syz [ 444.715816][T12745] usb 7-1: Manufacturer: syz [ 444.720746][T12745] usb 7-1: SerialNumber: syz [ 444.863413][ T5949] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 444.871862][ T5949] usb 1-1: config 0 has no interface number 0 [ 444.881693][ T5949] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 444.891212][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.899300][ T5949] usb 1-1: Product: syz [ 444.903644][ T5949] usb 1-1: Manufacturer: syz [ 444.908857][ T5949] usb 1-1: SerialNumber: syz [ 444.917023][ T5949] usb 1-1: config 0 descriptor?? [ 444.947277][ T24] ft260 0003:0403:6030.0054: unknown main item tag 0x7 [ 445.142428][ T24] ft260 0003:0403:6030.0054: chip code: 0000 0000 [ 445.330248][ T5949] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 445.338458][ T5949] usb 1-1: Firmware version (0.0) predates our first public release. [ 445.347901][ T5949] usb 1-1: Please update to version 0.2 or newer [ 445.354977][ T24] ft260 0003:0403:6030.0054: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 445.515951][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.523825][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.552709][ T24] ft260 0003:0403:6030.0054: failed to retrieve status: -71, no wakeup [ 445.562973][ T24] ft260 0003:0403:6030.0054: failed to retrieve status: -71 [ 445.571708][ T24] ft260 0003:0403:6030.0054: failed to reset I2C controller: -71 [ 445.583635][ T5949] usb 1-1: USB disconnect, device number 79 [ 445.630122][ T24] usb 9-1: USB disconnect, device number 22 [ 445.743570][T12745] cdc_ncm 7-1:1.0: bind() failure [ 445.761986][T12745] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 445.768888][T12745] cdc_ncm 7-1:1.1: bind() failure [ 445.778625][T12745] usb 7-1: USB disconnect, device number 41 [ 446.146152][T15316] syzkaller1: entered promiscuous mode [ 446.151925][T15316] syzkaller1: entered allmulticast mode [ 446.400541][ T5908] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 446.503205][ T44] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 446.554078][ T5908] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 446.563088][ T5908] usb 1-1: config 0 has no interface number 0 [ 446.569267][ T5908] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 446.580689][ T5908] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 446.591655][ T5908] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 446.601003][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.611606][ T5908] usb 1-1: config 0 descriptor?? [ 446.617526][T15318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 446.629917][ T5908] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 446.670696][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 446.678188][ T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 446.690056][ T44] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 446.699406][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.710078][ T44] usb 9-1: config 0 descriptor?? [ 446.838281][ T24] usb 1-1: USB disconnect, device number 80 [ 447.124492][ T44] lua 0003:1E7D:2C2E.0055: unbalanced collection at end of report description [ 447.136261][ T44] lua 0003:1E7D:2C2E.0055: parse failed [ 447.142228][ T44] lua 0003:1E7D:2C2E.0055: probe with driver lua failed with error -22 [ 447.324943][ T9] usb 9-1: USB disconnect, device number 23 [ 448.129584][T15355] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3683'. [ 448.238041][T15359] syzkaller1: entered promiscuous mode [ 448.248910][T15359] syzkaller1: entered allmulticast mode [ 448.971522][ T5959] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 448.991154][ T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 449.161981][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 449.167564][ T5959] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 449.183623][ T24] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 449.194404][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.209096][ T5959] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 449.231013][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.239083][ T5959] usb 1-1: Product: syz [ 449.251923][ T5959] usb 1-1: Manufacturer: syz [ 449.256601][ T5959] usb 1-1: SerialNumber: syz [ 449.265396][ T24] usb 7-1: config 0 descriptor?? [ 449.489329][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 449.503474][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 449.525824][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 449.535487][ T24] usb 7-1: media controller created [ 449.573586][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.769570][T15404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.926546][ T5959] (unnamed net_device) (uninitialized): Assigned a random MAC address: a6:9d:22:d1:ca:30 [ 449.947916][ T5959] rtl8150 1-1:1.0: eth17: rtl8150 is detected [ 450.245540][T15420] syzkaller1: entered promiscuous mode [ 450.265409][T15420] syzkaller1: entered allmulticast mode [ 450.313134][ T24] az6027: usb out operation failed. (-71) [ 450.335044][ T24] stb0899_attach: Driver disabled by Kconfig [ 450.353268][ T24] az6027: no front-end attached [ 450.353268][ T24] [ 450.369661][ T24] az6027: usb out operation failed. (-71) [ 450.379122][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 450.427954][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input80 [ 450.476698][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 450.489454][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 450.522925][ T24] usb 7-1: USB disconnect, device number 42 [ 450.669163][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 451.139026][ C0] usb 1-1: Rx status -71 [ 451.143439][ C0] usb 1-1: eth17: intr status -71 [ 451.148687][ C0] usb 1-1: Rx status -71 [ 451.153041][ C0] usb 1-1: eth17: intr status -71 [ 451.158447][ C0] usb 1-1: Rx status -71 [ 451.162888][ C0] usb 1-1: eth17: intr status -71 [ 451.168863][ C0] usb 1-1: Rx status -71 [ 451.173231][ C0] usb 1-1: eth17: intr status -71 [ 451.178693][ C0] usb 1-1: Rx status -71 [ 451.183035][ C0] usb 1-1: eth17: intr status -71 [ 451.188417][ C0] usb 1-1: Rx status -71 [ 451.192754][ C0] usb 1-1: eth17: intr status -71 [ 451.198065][ C0] usb 1-1: Rx status -71 [ 451.202376][ C0] usb 1-1: eth17: intr status -71 [ 451.208664][ C0] usb 1-1: Rx status -71 [ 451.212997][ C0] usb 1-1: eth17: intr status -71 [ 451.220611][ C0] usb 1-1: Rx status -71 [ 451.224958][ C0] usb 1-1: eth17: intr status -71 [ 451.230219][ C0] usb 1-1: Rx status -71 [ 451.234574][ C0] usb 1-1: eth17: intr status -71 [ 451.239777][T12745] usb 1-1: USB disconnect, device number 81 [ 451.240667][ T24] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 451.245864][ C0] usb 1-1: eth17: intr status -71 [ 451.264520][ T5529] usb 1-1: device reset failed [ 451.406655][T15459] could not open pipe file descriptor [ 451.423535][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.443295][ T24] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 451.463992][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.496851][ T24] usb 6-1: config 0 descriptor?? [ 451.541900][ T5949] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 451.718049][ T5949] usb 7-1: Using ep0 maxpacket: 32 [ 451.743384][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.760641][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.779745][ T5949] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 451.792100][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.810898][ T5949] usb 7-1: config 0 descriptor?? [ 451.938527][ T24] keytouch 0003:0926:3333.0056: fixing up Keytouch IEC report descriptor [ 451.999868][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0056/input/input81 [ 452.192438][ T24] keytouch 0003:0926:3333.0056: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 452.212996][ T44] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 452.297170][ T5949] magicmouse 0003:05AC:0265.0057: hidraw1: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.6-1/input0 [ 452.321546][ T5949] magicmouse 0003:05AC:0265.0057: magicmouse input not registered [ 452.343405][ T5949] magicmouse 0003:05AC:0265.0057: probe with driver magicmouse failed with error -12 [ 452.402648][ T44] usb 9-1: Using ep0 maxpacket: 8 [ 452.420851][ T44] usb 9-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 452.440498][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.456979][ T44] usb 9-1: Product: syz [ 452.470952][ T44] usb 9-1: Manufacturer: syz [ 452.478006][ T44] usb 9-1: SerialNumber: syz [ 452.498280][ T44] usb 9-1: config 0 descriptor?? [ 452.518879][ T44] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 452.536201][T12745] usb 6-1: USB disconnect, device number 52 [ 452.551510][T15494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3731'. [ 452.687212][T15498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.367591][T15524] veth1_to_bond: entered allmulticast mode [ 453.375144][T15524] veth1_to_bond: left allmulticast mode [ 453.530834][ T44] gspca_sonixj: reg_w err -71 [ 453.536909][ T44] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 453.550773][ T44] usb 9-1: USB disconnect, device number 24 [ 453.860636][T12745] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 454.023992][T12745] usb 6-1: config 0 interface 0 has no altsetting 0 [ 454.035120][T12745] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 454.044862][T12745] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 454.053209][T12745] usb 6-1: Product: syz [ 454.057519][T12745] usb 6-1: Manufacturer: syz [ 454.071557][T12745] usb 6-1: SerialNumber: syz [ 454.083432][T12745] usb 6-1: config 0 descriptor?? [ 454.111842][T12745] usb 6-1: selecting invalid altsetting 0 [ 454.237764][T15550] syzkaller1: entered promiscuous mode [ 454.259636][T15550] syzkaller1: entered allmulticast mode [ 454.318776][ T44] usb 7-1: USB disconnect, device number 43 [ 454.323374][ T5985] usb 6-1: USB disconnect, device number 53 [ 454.566441][T15560] syzkaller1: entered promiscuous mode [ 454.572288][T15560] syzkaller1: entered allmulticast mode [ 454.641780][T15562] autofs: Bad value for 'fd' [ 454.939175][T15579] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 454.981182][T15579] CIFS mount error: No usable UNC path provided in device string! [ 454.981182][T15579] [ 455.008740][T15579] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 455.555007][ T5985] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 455.628757][T15607] input: syz0 as /devices/virtual/input/input82 [ 455.741692][ T5985] usb 1-1: Using ep0 maxpacket: 16 [ 455.750847][ T5985] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 455.759165][ T5985] usb 1-1: config 1 has no interface number 0 [ 455.769179][ T5985] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 455.780058][ T5985] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 455.793896][ T5985] usb 1-1: config 1 interface 105 has no altsetting 0 [ 455.804878][ T5985] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 455.814540][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.822917][ T5985] usb 1-1: Product: syz [ 455.827145][ T5985] usb 1-1: Manufacturer: syz [ 455.832243][ T5985] usb 1-1: SerialNumber: syz [ 455.841661][T15595] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 455.849095][T15595] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 455.860551][ T5949] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 455.870654][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 456.013229][ T5949] usb 7-1: config 0 has an invalid interface number: 10 but max is 0 [ 456.021557][ T5949] usb 7-1: config 0 has no interface number 0 [ 456.027721][ T5949] usb 7-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=69.f6 [ 456.036971][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.043537][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.048611][ T5949] usb 7-1: config 0 descriptor?? [ 456.063828][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.074796][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 456.089150][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 456.098354][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.109756][ T9] usb 6-1: config 0 descriptor?? [ 456.262637][T15595] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 456.270174][T15595] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 456.479752][ T5985] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 456.491767][ T5985] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 456.509970][ T5985] usb 1-1: USB disconnect, device number 82 [ 456.533309][ T9] plantronics 0003:047F:FFFF.0058: ignoring exceeding usage max [ 456.551969][ T9] plantronics 0003:047F:FFFF.0058: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 456.794381][ T44] usb 6-1: USB disconnect, device number 54 [ 456.848366][T15625] GUP no longer grows the stack in syz.8.3791 (15625): 200000004000-20000000a000 (200000002000) [ 456.862998][T15625] CPU: 0 UID: 0 PID: 15625 Comm: syz.8.3791 Not tainted syzkaller #0 PREEMPT(full) [ 456.863029][T15625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 456.863051][T15625] Call Trace: [ 456.863061][T15625] [ 456.863070][T15625] dump_stack_lvl+0x189/0x250 [ 456.863115][T15625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.863151][T15625] ? __pfx__printk+0x10/0x10 [ 456.863179][T15625] ? find_vma+0xe7/0x160 [ 456.863228][T15625] __get_user_pages+0x2470/0x2a00 [ 456.863296][T15625] get_user_pages_remote+0x2f1/0xac0 [ 456.863327][T15625] ? __pfx_mtree_load+0x10/0x10 [ 456.863359][T15625] ? __pfx_get_user_pages_remote+0x10/0x10 [ 456.863394][T15625] ? __access_remote_vm+0x367/0x7d0 [ 456.863439][T15625] __access_remote_vm+0x211/0x7d0 [ 456.863482][T15625] ? __pfx___access_remote_vm+0x10/0x10 [ 456.863519][T15625] ? alloc_pages_noprof+0xbe/0x190 [ 456.863545][T15625] proc_pid_cmdline_read+0x430/0x810 [ 456.863588][T15625] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 456.863625][T15625] ? rw_verify_area+0x2a6/0x4d0 [ 456.863652][T15625] vfs_readv+0x5aa/0x850 [ 456.863682][T15625] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 456.863718][T15625] ? __pfx_vfs_readv+0x10/0x10 [ 456.863773][T15625] ? __fget_files+0x2a/0x420 [ 456.863807][T15625] ? __fget_files+0x3a0/0x420 [ 456.863835][T15625] ? __fget_files+0x2a/0x420 [ 456.863873][T15625] __x64_sys_preadv+0x197/0x2a0 [ 456.863902][T15625] ? __pfx___x64_sys_preadv+0x10/0x10 [ 456.863933][T15625] ? do_syscall_64+0xbe/0xfa0 [ 456.863966][T15625] do_syscall_64+0xfa/0xfa0 [ 456.863992][T15625] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.864019][T15625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.864042][T15625] ? clear_bhb_loop+0x60/0xb0 [ 456.864070][T15625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.864098][T15625] RIP: 0033:0x7f044598eec9 [ 456.864123][T15625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.864144][T15625] RSP: 002b:00007f044685b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 456.864169][T15625] RAX: ffffffffffffffda RBX: 00007f0445be5fa0 RCX: 00007f044598eec9 [ 456.864187][T15625] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 456.864200][T15625] RBP: 00007f0445a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.864214][T15625] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 456.864229][T15625] R13: 00007f0445be6038 R14: 00007f0445be5fa0 R15: 00007fffba29dce8 [ 456.864266][T15625] [ 457.142837][ T5949] pegasus 7-1:0.10: probe with driver pegasus failed with error -71 [ 457.170745][ T5949] usb 7-1: USB disconnect, device number 44 [ 457.213998][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3793'. [ 457.276542][T15631] loop4: detected capacity change from 0 to 2560 [ 457.295069][ T5863] buffer_io_error: 27 callbacks suppressed [ 457.295088][ T5863] Buffer I/O error on dev loop4, logical block 0, async page read [ 457.330960][T15631] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 457.339626][T15631] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 457.356541][T15631] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 457.367359][T15631] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 457.376221][T15631] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 457.385059][T15631] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 457.395265][T15631] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 457.404174][T15631] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 457.413165][T15631] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 457.810515][ T5985] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 457.963988][ T5985] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.991390][ T5985] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.036571][ T5985] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.060710][ T5985] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.070859][ T5985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.073184][T15659] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3808'. [ 458.089344][ T5985] usb 9-1: config 0 descriptor?? [ 458.119184][T15661] netlink: 624 bytes leftover after parsing attributes in process `syz.5.3809'. [ 458.289917][T15667] netlink: 'syz.0.3811': attribute type 10 has an invalid length. [ 458.301157][T15667] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.309133][T15667] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.327537][T15667] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.334852][T15667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.342481][T15667] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.349715][T15667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.362091][T15667] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 458.486608][T15673] syzkaller1: entered promiscuous mode [ 458.500698][T15673] syzkaller1: entered allmulticast mode [ 458.527352][ T5985] plantronics 0003:047F:FFFF.0059: reserved main item tag 0xe [ 458.537737][ T5985] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 458.575860][ T5985] plantronics 0003:047F:FFFF.0059: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 458.783182][ T5949] usb 9-1: USB disconnect, device number 25 [ 458.877353][T15689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.400600][ T5985] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 459.573170][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.595844][ T5985] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 459.624339][ T5985] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 459.647770][ T5985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.688350][ T5985] usb 1-1: config 0 descriptor?? [ 459.828955][T15726] syzkaller1: entered promiscuous mode [ 459.840672][T15726] syzkaller1: entered allmulticast mode [ 460.018269][T15734] binder: 15733:15734 ioctl c018620b 200000000280 returned -14 [ 460.084889][T15737] bridge0: port 3(batadv0) entered blocking state [ 460.092012][T15737] bridge0: port 3(batadv0) entered disabled state [ 460.100098][T15737] batadv0: entered allmulticast mode [ 460.113815][T15737] batadv0: entered promiscuous mode [ 460.118110][ T5985] kovaplus 0003:1E7D:2D50.005A: unknown main item tag 0x0 [ 460.120172][T15737] bridge0: port 3(batadv0) entered blocking state [ 460.134019][T15737] bridge0: port 3(batadv0) entered forwarding state [ 460.136136][ T5985] kovaplus 0003:1E7D:2D50.005A: unknown main item tag 0x0 [ 460.151219][T15738] batadv0: left allmulticast mode [ 460.156439][T15738] batadv0: left promiscuous mode [ 460.160593][ T5985] kovaplus 0003:1E7D:2D50.005A: unknown main item tag 0x0 [ 460.165141][T15738] bridge0: port 3(batadv0) entered disabled state [ 460.179112][ T5985] kovaplus 0003:1E7D:2D50.005A: unknown main item tag 0x0 [ 460.186837][ T5985] kovaplus 0003:1E7D:2D50.005A: unknown main item tag 0x0 [ 460.201357][ T5985] kovaplus 0003:1E7D:2D50.005A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 460.415555][T15745] netlink: 184 bytes leftover after parsing attributes in process `syz.8.3847'. [ 460.715620][ T5985] kovaplus 0003:1E7D:2D50.005A: couldn't init struct kovaplus_device [ 460.748097][ T5985] kovaplus 0003:1E7D:2D50.005A: couldn't install mouse [ 460.760836][ T5985] kovaplus 0003:1E7D:2D50.005A: probe with driver kovaplus failed with error -71 [ 460.789911][ T5985] usb 1-1: USB disconnect, device number 83 [ 460.855681][T15760] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3855'. [ 461.510713][ T44] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 461.660665][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 461.668258][ T44] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.678601][ T24] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 461.686319][ T44] usb 9-1: config 0 has no interfaces? [ 461.690710][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 461.692107][ T44] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 461.709251][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.719610][ T44] usb 9-1: config 0 descriptor?? [ 461.840618][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 461.847745][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 461.853115][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.856153][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 461.867969][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.879168][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 461.887204][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.899368][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 461.910657][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.922439][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.930795][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.943445][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 461.971898][ T24] usb 6-1: config 0 descriptor?? [ 461.984579][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.219548][ T9] usb 1-1: usb_control_msg returned -32 [ 462.227686][ T9] usbtmc 1-1:16.0: can't read capabilities [ 462.398266][ T24] plantronics 0003:047F:FFFF.005B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 462.583868][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 462.602504][ T5985] usb 6-1: USB disconnect, device number 55 [ 462.614008][T15796] usbtmc 1-1:16.0: INITIATE_CLEAR returned 0 [ 462.752856][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.764043][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.773950][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 462.787590][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 462.797183][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.807667][ T9] usb 7-1: config 0 descriptor?? [ 462.817149][ T24] usb 1-1: USB disconnect, device number 84 [ 463.223591][ T9] plantronics 0003:047F:FFFF.005C: reserved main item tag 0xe [ 463.231366][ T9] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 463.247216][ T9] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 463.400840][ T24] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 463.502942][T11941] usb 7-1: USB disconnect, device number 45 [ 463.566935][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 463.575864][ T24] usb 6-1: config 1 has an invalid interface number: 161 but max is 1 [ 463.585293][ T24] usb 6-1: config 1 has no interface number 1 [ 463.591907][ T24] usb 6-1: too many endpoints for config 1 interface 0 altsetting 247: 248, using maximum allowed: 30 [ 463.603273][ T24] usb 6-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 463.614578][ T24] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 248 [ 463.629604][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 463.640024][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 463.653642][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.667270][ T24] usb 6-1: Product: syz [ 463.673588][ T24] usb 6-1: Manufacturer: syz [ 463.680511][ T24] usb 6-1: SerialNumber: syz [ 463.902493][ T24] smsusb:smsusb_probe: board id=8, interface number 0 [ 463.913411][ T24] smsusb:smsusb_probe: board id=8, interface number 161 [ 463.926721][ T24] usb 6-1: USB disconnect, device number 56 [ 464.084971][T11941] usb 9-1: USB disconnect, device number 26 [ 464.560581][T11941] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 464.741485][T11941] usb 9-1: Using ep0 maxpacket: 32 [ 464.746808][ T24] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 464.766411][T11941] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 464.776561][T11941] usb 9-1: config 0 has no interface number 0 [ 464.783799][T15828] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 464.786231][T11941] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 464.805512][T11941] usb 9-1: config 0 interface 85 has no altsetting 0 [ 464.815278][T11941] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 464.824642][T11941] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.832876][T11941] usb 9-1: Product: syz [ 464.837255][T11941] usb 9-1: Manufacturer: syz [ 464.842838][T11941] usb 9-1: SerialNumber: syz [ 464.852165][T11941] usb 9-1: config 0 descriptor?? [ 464.970505][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 464.978039][ T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 464.987320][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.999119][ T24] usb 1-1: config 0 descriptor?? [ 465.212593][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 465.223213][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 465.249563][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 465.261770][ T24] usb 1-1: media controller created [ 465.303178][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 465.412181][ T24] az6027: usb out operation failed. (-71) [ 465.426086][ T24] az6027: usb out operation failed. (-71) [ 465.441623][ T24] stb0899_attach: Driver disabled by Kconfig [ 465.447713][ T24] az6027: no front-end attached [ 465.447713][ T24] [ 465.455569][ T24] az6027: usb out operation failed. (-71) [ 465.462730][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 465.472668][T11941] appletouch 9-1:0.85: Geyser mode initialized. [ 465.481881][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input84 [ 465.512065][T11941] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input83 [ 465.524372][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 465.541818][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 465.578118][ T24] usb 1-1: USB disconnect, device number 85 [ 465.692437][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 465.739167][T12745] usb 9-1: USB disconnect, device number 27 [ 465.739211][ C1] appletouch 9-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 465.783480][T12745] appletouch 9-1:0.85: input: appletouch disconnected [ 466.200698][ T5908] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 466.300575][ T24] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 466.352169][ T5908] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.362491][ T5908] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.372611][ T5908] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 466.381738][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 466.389856][ T5908] usb 1-1: SerialNumber: syz [ 466.465690][ T24] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 466.475068][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.483176][ T24] usb 7-1: Product: syz [ 466.487450][ T24] usb 7-1: Manufacturer: syz [ 466.492204][ T24] usb 7-1: SerialNumber: syz [ 466.499716][ T24] usb 7-1: config 0 descriptor?? [ 466.530731][T12745] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 466.610784][ T5908] usb 1-1: 0:2 : does not exist [ 466.628691][ T5908] usb 1-1: USB disconnect, device number 86 [ 466.661793][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.693291][T12745] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.717565][T12745] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 466.728203][T12745] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.741210][T12745] usb 9-1: config 0 descriptor?? [ 466.971425][T12745] usbhid 9-1:0.0: can't add hid device: -71 [ 466.977520][T12745] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 466.988586][T12745] usb 9-1: USB disconnect, device number 28 [ 467.146457][ T24] mos7840 7-1:0.0: required endpoints missing [ 467.160788][ T24] usb 7-1: USB disconnect, device number 46 [ 467.280607][ T5908] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 467.432371][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.440564][ T44] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 467.444589][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.462685][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 467.472704][T12745] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 467.480366][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 467.493554][ T5908] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.504208][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.515245][ T5908] usb 6-1: config 0 descriptor?? [ 467.601665][ T44] usb 9-1: Using ep0 maxpacket: 32 [ 467.609332][ T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.620731][ T44] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 467.629827][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.642566][ T44] usb 9-1: config 0 descriptor?? [ 467.651883][ T44] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 467.665607][ T44] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 467.683144][T12745] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 467.696002][T12745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.709982][T12745] usb 1-1: Product: syz [ 467.717140][T12745] usb 1-1: Manufacturer: syz [ 467.722454][T12745] usb 1-1: SerialNumber: syz [ 467.940729][ T5908] plantronics 0003:047F:FFFF.005D: ignoring exceeding usage max [ 467.965426][ T5908] plantronics 0003:047F:FFFF.005D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 468.011046][ T44] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 468.064832][ T5908] usb 9-1: USB disconnect, device number 29 [ 468.075352][ T5908] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 468.144214][T11941] usb 6-1: USB disconnect, device number 57 [ 468.170500][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 468.178532][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.189948][ T44] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 468.199334][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.214421][ T44] usb 7-1: config 0 descriptor?? [ 468.427915][ T44] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 468.708116][T15872] input: syz0 as /devices/virtual/input/input85 [ 468.756688][T12745] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 468.781809][T12745] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 468.794143][T12745] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 468.820582][T12745] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 468.834753][T11941] usb 7-1: USB disconnect, device number 47 [ 468.841806][T12745] usb 1-1: USB disconnect, device number 87 [ 468.871753][ T44] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 469.051093][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 469.058270][ T44] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 469.068514][ T44] usb 9-1: config 0 has no interface number 0 [ 469.079362][ T44] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=da.32 [ 469.089337][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.098105][ T44] usb 9-1: Product: syz [ 469.104793][ T44] usb 9-1: Manufacturer: syz [ 469.109498][ T44] usb 9-1: SerialNumber: syz [ 469.117965][ T44] usb 9-1: config 0 descriptor?? [ 469.136911][ T44] usb_ehset_test 9-1:0.255: probe with driver usb_ehset_test failed with error -32 [ 469.329432][T15888] syzkaller1: entered promiscuous mode [ 469.347210][T15888] syzkaller1: entered allmulticast mode [ 469.355833][T12745] usb 9-1: USB disconnect, device number 30 [ 469.425567][T15892] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3914'. [ 469.434957][T15892] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3914'. [ 469.559828][T15894] syzkaller1: entered promiscuous mode [ 469.574076][T15894] syzkaller1: entered allmulticast mode [ 469.584255][T15898] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3916'. [ 469.758496][T15898] syz.6.3916 (15898) used greatest stack depth: 17832 bytes left [ 470.313876][T15933] syzkaller1: entered promiscuous mode [ 470.324731][T15933] syzkaller1: entered allmulticast mode [ 470.498635][T15942] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 470.511580][T15942] Â: renamed from pim6reg1 [ 470.773573][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3940'. [ 470.977653][T15960] binder: 15959:15960 ioctl c0306201 0 returned -14 [ 471.240516][ T24] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 471.400597][ T9] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 471.412205][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 471.420457][ T24] usb 6-1: config 0 has no interface number 0 [ 471.426606][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 471.438153][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 471.449092][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 471.458414][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.468662][ T24] usb 6-1: config 0 descriptor?? [ 471.474763][T15964] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 471.486483][ T24] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 471.490673][T12745] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 471.553168][ T9] usb 9-1: config 0 has an invalid interface number: 128 but max is 0 [ 471.562689][ T9] usb 9-1: config 0 has no interface number 0 [ 471.571718][ T9] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 471.581411][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.589428][ T9] usb 9-1: Product: syz [ 471.593647][ T9] usb 9-1: Manufacturer: syz [ 471.598276][ T9] usb 9-1: SerialNumber: syz [ 471.605327][ T9] usb 9-1: config 0 descriptor?? [ 471.660878][T12745] usb 7-1: Using ep0 maxpacket: 32 [ 471.668106][T12745] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 471.677640][T12745] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.689371][T12745] usb 7-1: config 0 descriptor?? [ 471.704531][ T24] usb 6-1: USB disconnect, device number 58 [ 471.705834][T12745] gspca_main: sq930x-2.14.0 probing 041e:403c [ 472.022371][ T9] usb 9-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (2) [ 472.030369][ T9] usb 9-1: Firmware version (0.0) predates our first public release. [ 472.038593][ T9] usb 9-1: Please update to version 0.2 or newer [ 472.277966][ T9] usb 9-1: USB disconnect, device number 31 [ 472.279029][T15981] input: syz1 as /devices/virtual/input/input86 [ 472.701096][ T24] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 472.713487][T12745] gspca_sq930x: ucbus_write failed -71 [ 472.724561][T12745] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 472.742556][T12745] usb 7-1: USB disconnect, device number 48 [ 472.860530][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 472.874483][ T24] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 472.900079][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.908647][ T24] usb 6-1: Product: syz [ 472.913277][ T24] usb 6-1: Manufacturer: syz [ 472.917917][ T24] usb 6-1: SerialNumber: syz [ 472.931363][ T24] usb 6-1: config 0 descriptor?? [ 472.962802][T15997] input: syz0 as /devices/virtual/input/input87 [ 473.145418][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 473.160541][T12745] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 473.316108][T12745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.340480][T12745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.344420][T16001] syzkaller1: entered promiscuous mode [ 473.356402][T16001] syzkaller1: entered allmulticast mode [ 473.359693][T12745] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 473.379717][T12745] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 473.389092][T12745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.403060][T12745] usb 1-1: config 0 descriptor?? [ 473.632606][T16009] syzkaller1: entered promiscuous mode [ 473.645885][T16009] syzkaller1: entered allmulticast mode [ 473.668274][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3969'. [ 473.852426][T16017] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3973'. [ 473.856566][T12745] plantronics 0003:047F:FFFF.005E: reserved main item tag 0xe [ 473.868385][T16017] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3973'. [ 473.870909][T12745] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 473.899462][T12745] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 473.981769][ T24] gspca_sunplus: reg_w_riv err -71 [ 473.988059][ T24] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 474.011291][ T24] usb 6-1: USB disconnect, device number 59 [ 474.080714][ T9] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 474.123174][ T5915] usb 1-1: USB disconnect, device number 88 [ 474.236017][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 474.244681][ T9] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 474.256016][ T9] usb 9-1: config 0 has no interface number 0 [ 474.265348][ T9] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 474.275351][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.299434][ T9] usb 9-1: Product: syz [ 474.306065][ T9] usb 9-1: Manufacturer: syz [ 474.311436][ T9] usb 9-1: SerialNumber: syz [ 474.319469][ T9] usb 9-1: config 0 descriptor?? [ 474.366493][ T9] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 474.563429][ T9] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 474.588375][ T9] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 475.024922][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 475.026368][T11941] usb 9-1: USB disconnect, device number 32 [ 475.058858][T11941] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 475.096862][T11941] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 475.122955][T11941] quatech2 9-1:0.51: device disconnected [ 475.180600][ T44] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 475.334819][ T44] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 475.348251][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.360040][ T44] usb 7-1: config 0 descriptor?? [ 475.376853][ T44] cp210x 7-1:0.0: cp210x converter detected [ 475.450614][ T5915] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 475.645313][ T5915] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 475.672331][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 475.699368][ T5915] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 475.729574][ T5915] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 475.743326][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.753908][ T5915] usb 1-1: Product: syz [ 475.758128][ T5915] usb 1-1: Manufacturer: syz [ 475.763749][ T5915] usb 1-1: SerialNumber: syz [ 475.773393][ T5915] usb 1-1: config 0 descriptor?? [ 475.779941][T16060] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 475.795135][ T44] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 475.808410][T16060] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 475.838350][ T5915] usb 1-1: ucan: probing device on interface #0 [ 476.032715][ T44] usb 7-1: cp210x converter now attached to ttyUSB0 [ 476.065320][ T5915] usb 1-1: ucan: device protocol version 65536 is not supported [ 476.081096][ T5915] usb 1-1: ucan: probe failed; try to update the device firmware [ 476.149818][T16091] input: syz1 as /devices/virtual/input/input88 [ 476.249412][ T24] usb 7-1: USB disconnect, device number 49 [ 476.266623][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 476.296675][ T24] cp210x 7-1:0.0: device disconnected [ 476.310939][ T5915] usb 1-1: USB disconnect, device number 89 [ 476.352896][T16095] overlayfs: invalid origin (000000ca67081e5f112bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f00000000000000000000) [ 477.168779][T16127] pim6reg1: entered promiscuous mode [ 477.174470][T16127] pim6reg1: entered allmulticast mode [ 477.281119][T11941] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 477.460503][T11941] usb 1-1: Using ep0 maxpacket: 16 [ 477.473026][T11941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.515225][T11941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.530979][T11941] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 477.540080][T11941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.552213][T11941] usb 1-1: config 0 descriptor?? [ 477.609094][T16141] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 477.992612][T11941] mcp2221 0003:04D8:00DD.005F: unknown main item tag 0x0 [ 477.999754][T11941] mcp2221 0003:04D8:00DD.005F: unknown main item tag 0x0 [ 478.025386][T11941] mcp2221 0003:04D8:00DD.005F: unknown main item tag 0x0 [ 478.042397][T11941] mcp2221 0003:04D8:00DD.005F: unknown main item tag 0x0 [ 478.055833][T11941] mcp2221 0003:04D8:00DD.005F: unknown main item tag 0x0 [ 478.072626][T11941] mcp2221 0003:04D8:00DD.005F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 478.196584][T11941] usb 1-1: USB disconnect, device number 90 [ 478.590621][ T44] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 478.600623][ T5915] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 478.740615][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 478.747500][ T44] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 478.757818][ T44] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.763463][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 478.769928][ T44] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.778240][ T5915] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 478.793655][ T5915] usb 6-1: config 179 has no interface number 0 [ 478.800114][ T5915] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 478.811519][ T44] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 478.811556][ T44] usb 7-1: config 7 interface 0 has no altsetting 0 [ 478.811598][ T44] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 478.811624][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.848476][ T5915] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 478.859807][ T5915] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 478.871121][ T5915] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 478.882724][ T5915] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 478.896114][ T5915] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 478.905608][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.917789][T16166] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 479.217364][ T5915] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input89 [ 479.267328][ T44] hid (null): report_id 1501 is invalid [ 479.298835][ T44] hid (null): invalid report_count 983040256 [ 479.311479][ T44] hid (null): unknown global tag 0xc [ 479.338687][ T44] hid (null): unknown global tag 0xe [ 479.395469][ T44] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.0/0003:0458:5010.0060/input/input90 [ 479.427843][T16166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.445290][T16166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.508665][ T44] kye 0003:0458:5010.0060: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 479.559412][ T44] usb 7-1: USB disconnect, device number 50 [ 479.570877][ T5915] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 479.606748][T16178] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 479.680285][ T9] usb 6-1: USB disconnect, device number 60 [ 479.680345][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 479.688109][T16179] fido_id[16179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 479.694682][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 479.740866][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 479.749987][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.775851][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.791881][ T5915] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 479.828506][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.844823][ T5915] usb 1-1: config 0 descriptor?? [ 480.278772][ T5915] mcp2221 0003:04D8:00DD.0061: unknown main item tag 0x0 [ 480.302362][ T5915] mcp2221 0003:04D8:00DD.0061: unknown main item tag 0x0 [ 480.309479][ T5915] mcp2221 0003:04D8:00DD.0061: unknown main item tag 0x0 [ 480.317310][ T5915] mcp2221 0003:04D8:00DD.0061: unknown main item tag 0x0 [ 480.324627][ T5915] mcp2221 0003:04D8:00DD.0061: unknown main item tag 0x0 [ 480.334067][ T5915] mcp2221 0003:04D8:00DD.0061: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 480.412116][T16202] loop3: detected capacity change from 0 to 7 [ 480.424198][ T5863] Dev loop3: unable to read RDB block 7 [ 480.429921][ T5863] loop3: unable to read partition table [ 480.436099][ T5863] loop3: partition table beyond EOD, truncated [ 480.456442][T16202] Dev loop3: unable to read RDB block 7 [ 480.483182][T16202] loop3: unable to read partition table [ 480.506806][T16202] loop3: partition table beyond EOD, truncated [ 480.529639][ T5915] usb 1-1: USB disconnect, device number 91 [ 480.547418][T16202] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 480.601178][ T5234] Dev loop3: unable to read RDB block 7 [ 480.606908][ T5234] loop3: unable to read partition table [ 480.615848][ T5234] loop3: partition table beyond EOD, truncated [ 481.060587][ T5915] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 481.230992][ T5915] usb 7-1: Using ep0 maxpacket: 8 [ 481.238187][ T5915] usb 7-1: config 130 has an invalid descriptor of length 0, skipping remainder of the config [ 481.254636][ T5915] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 481.280550][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.288805][ T5915] usb 7-1: Product: syz [ 481.293289][ T5915] usb 7-1: Manufacturer: syz [ 481.297918][ T5915] usb 7-1: SerialNumber: syz [ 481.322441][ T5915] ch9200 7-1:130.0: probe with driver ch9200 failed with error -22 [ 481.521881][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4065'. [ 481.544112][ T5915] usb 7-1: USB disconnect, device number 51 [ 481.880766][ T44] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 482.032273][ T44] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 482.042423][T12745] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 482.050051][ T44] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 482.050084][ T44] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.086182][ T44] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 482.095572][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.101494][ T5915] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 482.104521][ T44] usb 6-1: Product: syz [ 482.120551][ T44] usb 6-1: Manufacturer: syz [ 482.125210][ T44] usb 6-1: SerialNumber: syz [ 482.215007][T12745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.226200][T12745] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 482.237131][T12745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.249520][T12745] usb 1-1: config 0 descriptor?? [ 482.280721][ T5915] usb 9-1: Using ep0 maxpacket: 32 [ 482.292721][ T5915] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.321140][ T5915] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.333759][ T5915] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 482.343390][ T5915] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.366701][ T44] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 482.367983][ T5915] usb 9-1: config 0 descriptor?? [ 482.582473][ T9] usb 6-1: USB disconnect, device number 61 [ 482.691482][T12745] lenovo 0003:17EF:6047.0062: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 482.789885][T16251] usblp0: removed [ 482.809099][ T5915] savu 0003:1E7D:2D5A.0063: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 483.073698][ T5915] usb 9-1: USB disconnect, device number 33 [ 483.285573][T12745] lenovo 0003:17EF:6047.0062: Fn-lock setting failed: -71 [ 483.295506][T12745] lenovo 0003:17EF:6047.0062: Sensitivity setting failed: -71 [ 483.308968][T12745] usb 1-1: USB disconnect, device number 92 [ 483.425369][T16278] evm: overlay not supported [ 484.140609][ T24] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 484.163299][T16315] syzkaller1: entered promiscuous mode [ 484.168896][T16315] syzkaller1: entered allmulticast mode [ 484.273356][T16317] loop7: detected capacity change from 0 to 1 [ 484.291780][T12745] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 484.299467][ T24] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 484.309658][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.319064][ T24] usb 1-1: Product: syz [ 484.324308][ T24] usb 1-1: Manufacturer: syz [ 484.325478][T16317] Dev loop7: unable to read RDB block 1 [ 484.328938][ T24] usb 1-1: SerialNumber: syz [ 484.333557][ T24] usb 1-1: config 0 descriptor?? [ 484.343019][T16317] loop7: unable to read partition table [ 484.350826][T16317] loop7: partition table beyond EOD, truncated [ 484.351506][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 484.357187][T16317] loop_reread_partitions: partition scan of loop7 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 484.460619][T12745] usb 9-1: Using ep0 maxpacket: 16 [ 484.468078][T12745] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 484.479826][T12745] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.491338][T12745] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.503344][T12745] usb 9-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 484.516755][T12745] usb 9-1: config 7 interface 0 has no altsetting 0 [ 484.525950][T12745] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 484.536355][T12745] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.977001][T12745] hid (null): report_id 1501 is invalid [ 484.984299][T12745] hid (null): invalid report_count 983040256 [ 484.991372][T12745] hid (null): unknown global tag 0xc [ 484.997242][T12745] hid (null): unknown global tag 0xe [ 485.024041][T16337] batadv_slave_0: entered promiscuous mode [ 485.034220][T16336] batadv_slave_0: left promiscuous mode [ 485.038394][T12745] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.0/0003:0458:5010.0064/input/input91 [ 485.052359][T16335] pim6reg1: entered promiscuous mode [ 485.057699][T16335] pim6reg1: entered allmulticast mode [ 485.147704][T12745] kye 0003:0458:5010.0064: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0 [ 485.200849][T12745] usb 9-1: USB disconnect, device number 34 [ 485.290248][T16340] fido_id[16340]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 485.369608][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 485.369629][ T30] audit: type=1326 audit(1759415172.813:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.6.4111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3190d8eec9 code=0x0 [ 485.413123][ T24] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 485.632283][ T24] gspca_sq930x: Sensor ov9630 not yet treated [ 485.641732][ T24] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 485.659773][ T24] usb 1-1: USB disconnect, device number 93 [ 486.231036][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 486.281136][T16381] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 486.416771][ T24] usb 6-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 486.437466][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 486.488548][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.506408][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.518210][ T24] usb 6-1: Product: syz [ 486.526070][ T24] usb 6-1: Manufacturer: syz [ 486.531301][ T24] usb 6-1: SerialNumber: syz [ 486.646909][T16393] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.4134'. [ 486.657771][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4134'. [ 486.668535][T16393] netlink: 125920 bytes leftover after parsing attributes in process `syz.0.4134'. [ 486.720615][T12745] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 486.741936][ T5908] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 486.754010][T16369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.764512][T16369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.780056][ T24] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 486.807260][ T24] usb 6-1: USB disconnect, device number 62 [ 486.873563][T12745] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 486.891620][T12745] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.902215][ T5908] usb 9-1: Using ep0 maxpacket: 16 [ 486.907492][T12745] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 486.915891][T12745] usb 7-1: SerialNumber: syz [ 486.922982][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.935753][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.949127][ T5908] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 486.959019][ T5908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.991629][ T5908] usb 9-1: config 0 descriptor?? [ 487.118708][T16405] input: syz1 as /devices/virtual/input/input92 [ 487.127300][T16405] input: failed to attach handler leds to device input92, error: -6 [ 487.240922][ T24] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 487.400851][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 487.407927][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 487.416309][ T24] usb 6-1: config 16 has an invalid descriptor of length 121, skipping remainder of the config [ 487.423344][ T5908] mcp2221 0003:04D8:00DD.0065: unknown main item tag 0x0 [ 487.430613][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 487.434262][ T9] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 487.444351][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 487.461080][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 487.472624][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 487.473905][ T5908] mcp2221 0003:04D8:00DD.0065: unknown main item tag 0x0 [ 487.491235][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25455, setting to 1024 [ 487.492619][ T5908] mcp2221 0003:04D8:00DD.0065: unknown main item tag 0x0 [ 487.506212][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 487.514401][ T5908] mcp2221 0003:04D8:00DD.0065: unknown main item tag 0x0 [ 487.520268][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.527475][ T5908] mcp2221 0003:04D8:00DD.0065: unknown main item tag 0x0 [ 487.544335][ T5908] mcp2221 0003:04D8:00DD.0065: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 487.580234][T12745] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 487.651710][ T5908] usb 9-1: USB disconnect, device number 35 [ 487.670555][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 487.685980][ T9] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 487.711671][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.719753][ T9] usb 1-1: Product: syz [ 487.729984][ T9] usb 1-1: Manufacturer: syz [ 487.746023][ T9] usb 1-1: SerialNumber: syz [ 487.756071][ T24] usb 6-1: usb_control_msg returned -71 [ 487.780542][ T24] usbtmc 6-1:16.0: can't read capabilities [ 487.781132][ T9] usb 1-1: config 0 descriptor?? [ 487.803148][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 487.823797][ T24] usb 6-1: USB disconnect, device number 63 [ 488.524950][ T5908] usb 7-1: USB disconnect, device number 52 [ 488.552614][ T5908] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 488.812323][ T9] gspca_stk1135: reg_w 0x7 err -71 [ 488.834935][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 488.861864][ T9] gspca_stk1135: Sensor write failed [ 488.871687][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 488.878189][ T9] gspca_stk1135: Sensor write failed [ 488.900930][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 488.917551][ T9] gspca_stk1135: Sensor read failed [ 488.927697][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 488.947922][ T9] gspca_stk1135: Sensor read failed [ 488.967280][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 488.981629][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 489.020593][ T9] gspca_stk1135: Sensor read failed [ 489.030532][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 489.046440][ T9] gspca_stk1135: Sensor read failed [ 489.051908][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 489.058273][ T9] gspca_stk1135: Sensor write failed [ 489.069049][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 489.080524][ T9] gspca_stk1135: Sensor write failed [ 489.096180][ T9] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 489.140560][ T9] usb 1-1: USB disconnect, device number 94 [ 489.761016][ T5908] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 489.913770][ T5908] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 489.925192][ T5908] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 489.935856][ T5908] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 489.950224][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.992471][T16456] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 490.014294][ T5908] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.277879][ T24] usb 1-1: USB disconnect, device number 95 [ 490.769221][T16500] netlink: 6 bytes leftover after parsing attributes in process `syz.8.4168'. [ 491.270636][T11941] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 491.312410][ T24] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 491.460821][T11941] usb 7-1: Using ep0 maxpacket: 16 [ 491.471489][T11941] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.487068][T11941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.487182][ T24] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 491.508703][T11941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 491.540263][T11941] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 491.569344][T11941] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.587589][ T24] usb 6-1: config 0 has no interface number 0 [ 491.606168][ T24] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 491.617664][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.627014][ T24] usb 6-1: Product: syz [ 491.632547][T11941] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 491.642000][ T24] usb 6-1: Manufacturer: syz [ 491.646672][ T24] usb 6-1: SerialNumber: syz [ 491.651399][T11941] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 491.659422][T11941] usb 7-1: Manufacturer: syz [ 491.667904][ T24] usb 6-1: config 0 descriptor?? [ 491.682399][T11941] usb 7-1: config 0 descriptor?? [ 491.952180][ T5949] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 491.972586][T11941] rc_core: IR keymap rc-hauppauge not found [ 491.978584][T11941] Registered IR keymap rc-empty [ 491.985496][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 492.012188][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 492.032326][T11941] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 492.047455][T11941] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input93 [ 492.063902][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 492.091530][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 492.100277][ T24] usb 6-1: Firmware version (0.0) predates our first public release. [ 492.109496][ T24] usb 6-1: Please update to version 0.2 or newer [ 492.116870][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 492.125949][ T24] usb 6-1: Firmware: build [ 492.134801][ T5949] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 492.146287][ T5949] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 492.160703][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 492.180734][ T5949] usb 9-1: Product: syz [ 492.185666][ T5949] usb 9-1: Manufacturer: syz [ 492.194932][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 492.202809][ T5949] usb 9-1: SerialNumber: syz [ 492.221639][ T5949] usb 9-1: config 0 descriptor?? [ 492.230579][ T5949] ch341 9-1:0.0: ch341-uart converter detected [ 492.240594][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 492.272264][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 492.292314][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 492.320697][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 492.343603][ T24] usb 6-1: USB disconnect, device number 64 [ 492.358421][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 492.413401][T11941] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 492.422786][T11941] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 492.466406][T11941] usb 7-1: USB disconnect, device number 53 [ 492.730615][ T5959] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 492.900620][ T5959] usb 1-1: Using ep0 maxpacket: 32 [ 492.911257][ T5959] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 492.919524][ T5959] usb 1-1: config 0 has no interface number 0 [ 492.928503][ T5959] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 492.943091][ T5959] usb 1-1: config 0 interface 85 has no altsetting 0 [ 492.954961][ T5959] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 492.964435][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.973223][ T5959] usb 1-1: Product: syz [ 492.977483][ T5959] usb 1-1: Manufacturer: syz [ 492.982957][ T5959] usb 1-1: SerialNumber: syz [ 492.992760][ T5959] usb 1-1: config 0 descriptor?? [ 493.016095][T16568] syzkaller1: entered promiscuous mode [ 493.024411][T16568] syzkaller1: entered allmulticast mode [ 493.076017][T16570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.289803][ T5949] ch341-uart ttyUSB0: failed to read break control: -71 [ 493.312958][ T5949] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 493.332163][ T5949] usb 9-1: USB disconnect, device number 36 [ 493.343353][T16578] syzkaller1: entered promiscuous mode [ 493.349209][T16578] syzkaller1: entered allmulticast mode [ 493.381797][ T5949] ch341 9-1:0.0: device disconnected [ 493.425222][T16580] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 493.633769][ T5959] appletouch 1-1:0.85: Geyser mode initialized. [ 493.648166][ T5959] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input94 [ 493.849921][ T5959] usb 1-1: USB disconnect, device number 96 [ 493.881106][ T5959] appletouch 1-1:0.85: input: appletouch disconnected [ 494.320921][T16610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.749000][T16614] Set syz1 is full, maxelem 6117 reached [ 495.261769][ T2913] wlan1: Trigger new scan to find an IBSS to join [ 495.680529][ T5908] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 495.832374][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.843729][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.854828][ T5908] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 495.864170][ T5908] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 495.872456][ T5908] usb 6-1: Manufacturer: syz [ 495.879579][ T5908] usb 6-1: config 0 descriptor?? [ 496.562712][T16667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4243'. [ 496.576094][T16667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.633415][T16669] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4244'. [ 496.900353][ T5908] uclogic 0003:256C:006D.0066: failed retrieving string descriptor #100: -71 [ 496.910223][ T5908] uclogic 0003:256C:006D.0066: failed retrieving pen parameters: -71 [ 496.918570][ T5908] uclogic 0003:256C:006D.0066: failed probing pen v1 parameters: -71 [ 496.927319][ T5908] uclogic 0003:256C:006D.0066: failed probing parameters: -71 [ 496.935252][ T5908] uclogic 0003:256C:006D.0066: probe with driver uclogic failed with error -71 [ 496.947638][ T5908] usb 6-1: USB disconnect, device number 65 [ 497.030622][ T9] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 497.191421][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 497.202392][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 497.209071][ T9] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 497.218422][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.228717][ T9] usb 1-1: config 0 descriptor?? [ 497.667199][ T9] hid-generic 0003:0DFC:0101.0067: unknown main item tag 0x0 [ 497.674949][ T9] hid-generic 0003:0DFC:0101.0067: unknown main item tag 0x0 [ 497.682516][ T9] hid-generic 0003:0DFC:0101.0067: unknown main item tag 0x0 [ 497.689984][ T9] hid-generic 0003:0DFC:0101.0067: unknown main item tag 0x0 [ 497.697703][ T9] hid-generic 0003:0DFC:0101.0067: unknown main item tag 0x0 [ 497.705190][ T9] hid-generic 0003:0DFC:0101.0067: unknown main item tag 0x0 [ 497.712682][ T9] hid-generic 0003:0DFC:0101.0067: unknown main item tag 0x0 [ 497.720095][ T9] hid-generic 0003:0DFC:0101.0067: unknown main item tag 0x0 [ 497.727566][ T9] hid-generic 0003:0DFC:0101.0067: unknown main item tag 0x0 [ 497.735037][ T9] hid-generic 0003:0DFC:0101.0067: unknown main item tag 0x0 [ 497.761761][ T9] hid-generic 0003:0DFC:0101.0067: hidraw0: USB HID v0.00 Device [HID 0dfc:0101] on usb-dummy_hcd.0-1/input0 [ 497.850872][ T5959] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 497.870084][ T24] usb 1-1: USB disconnect, device number 97 [ 498.024532][ T5959] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 498.035630][ T5959] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 498.047019][ T5959] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 498.057489][ T5959] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 498.067281][ T5959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.079530][T16695] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 498.090687][ T5959] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 498.221166][ T3534] wlan1: Trigger new scan to find an IBSS to join [ 498.359711][ T5959] usb 7-1: USB disconnect, device number 54 [ 498.970607][ T5959] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 499.140904][ T5959] usb 1-1: Using ep0 maxpacket: 8 [ 499.157854][ T5959] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 499.171445][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.182668][ T5959] usb 1-1: Product: syz [ 499.186889][ T5959] usb 1-1: Manufacturer: syz [ 499.191967][ T5959] usb 1-1: SerialNumber: syz [ 499.201741][ T5959] usb 1-1: config 0 descriptor?? [ 499.217701][ T5959] gspca_main: se401-2.14.0 probing 047d:5003 [ 499.619962][ T5959] gspca_se401: Frame size: 0x2 bayer [ 499.625364][ T5959] gspca_se401: Frame size: 0x127 bayer [ 499.631238][ T5959] gspca_se401: Frame size: 256x0 bayer [ 499.832159][ T5959] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input95 [ 499.868455][ T5959] usb 1-1: USB disconnect, device number 98 [ 500.159194][ T30] audit: type=1804 audit(1759415187.603:152): pid=16756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4284" name="/newroot/712/file0/file0" dev="hugetlbfs" ino=73507 res=1 errno=0 [ 500.717691][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801c2a8000: rx timeout, send abort [ 500.729109][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801c2a8000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 500.820866][ T9] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 500.845527][T16783] syzkaller1: entered promiscuous mode [ 500.851783][T16783] syzkaller1: entered allmulticast mode [ 500.978157][T16788] kvm: user requested TSC rate below hardware speed [ 500.992043][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 501.008679][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.026389][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 501.035959][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.051814][ T9] usb 6-1: config 0 descriptor?? [ 501.181556][ T36] wlan1: Trigger new scan to find an IBSS to join [ 501.272295][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 501.360505][ T5959] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 501.485507][ T9] usb 6-1: USB disconnect, device number 66 [ 501.545717][ T5959] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 501.556558][ T5959] usb 7-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 501.570306][ T5959] usb 7-1: Product: syz [ 501.574644][ T5959] usb 7-1: Manufacturer: syz [ 501.579405][ T5959] usb 7-1: SerialNumber: syz [ 501.587932][ T5959] usb 7-1: config 0 descriptor?? [ 501.596333][ T5959] ch341 7-1:0.0: ch341-uart converter detected [ 501.801411][T12745] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 502.102004][T14191] wlan1: Creating new IBSS network, BSSID ea:e3:54:40:06:b2 [ 502.479278][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 502.563543][T16826] block nbd8: shutting down sockets [ 502.619499][ T5959] usb 7-1: failed to send control message: -71 [ 502.633799][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.637868][ T5959] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 502.650513][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 502.662424][ T5959] usb 7-1: USB disconnect, device number 55 [ 502.672387][ T5959] ch341 7-1:0.0: device disconnected [ 502.696910][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.708396][ T9] usb 6-1: config 0 descriptor?? [ 502.732126][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 502.772303][T16836] syzkaller1: entered promiscuous mode [ 502.778056][T16836] syzkaller1: entered allmulticast mode [ 502.975803][T16842] syzkaller1: entered promiscuous mode [ 502.981904][T16842] syzkaller1: entered allmulticast mode [ 503.125483][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 503.141564][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 503.257518][T16849] [ 503.259923][T16849] ====================================================== [ 503.266964][T16849] WARNING: possible circular locking dependency detected [ 503.274023][T16849] syzkaller #0 Not tainted [ 503.278465][T16849] ------------------------------------------------------ [ 503.285504][T16849] syz.6.4327/16849 is trying to acquire lock: [ 503.291600][T16849] ffffffff8e645220 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x48/0x710 [ 503.301597][T16849] [ 503.301597][T16849] but task is already holding lock: [ 503.308992][T16849] ffff888034671bd8 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 503.318641][T16849] [ 503.318641][T16849] which lock already depends on the new lock. [ 503.318641][T16849] [ 503.329057][T16849] [ 503.329057][T16849] the existing dependency chain (in reverse order) is: [ 503.338077][T16849] [ 503.338077][T16849] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 503.345915][T16849] lock_acquire+0x120/0x360 [ 503.350957][T16849] lock_sock_nested+0x48/0x100 [ 503.356256][T16849] __inet_bind+0x392/0xa90 [ 503.361290][T16849] mptcp_bind+0x128/0x1d0 [ 503.366153][T16849] __sys_bind+0x2c6/0x3e0 [ 503.371011][T16849] __x64_sys_bind+0x7a/0x90 [ 503.376046][T16849] do_syscall_64+0xfa/0xfa0 [ 503.381082][T16849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.387505][T16849] [ 503.387505][T16849] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 503.395160][T16849] lock_acquire+0x120/0x360 [ 503.400191][T16849] lock_sock_nested+0x48/0x100 [ 503.405490][T16849] inet_shutdown+0x6a/0x390 [ 503.410518][T16849] nbd_mark_nsock_dead+0x2e9/0x560 [ 503.416156][T16849] sock_shutdown+0x15e/0x260 [ 503.421284][T16849] nbd_config_put+0x342/0x790 [ 503.426500][T16849] nbd_release+0xfe/0x140 [ 503.431352][T16849] bdev_release+0x536/0x650 [ 503.436383][T16849] blkdev_release+0x15/0x20 [ 503.441510][T16849] __fput+0x44c/0xa70 [ 503.446027][T16849] task_work_run+0x1d4/0x260 [ 503.451141][T16849] exit_to_user_mode_loop+0xe9/0x130 [ 503.456962][T16849] do_syscall_64+0x2bd/0xfa0 [ 503.462116][T16849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.468570][T16849] [ 503.468570][T16849] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 503.476253][T16849] lock_acquire+0x120/0x360 [ 503.481302][T16849] __mutex_lock+0x187/0x1350 [ 503.486430][T16849] nbd_queue_rq+0x257/0xf10 [ 503.491479][T16849] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 503.497559][T16849] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 503.504424][T16849] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 503.510945][T16849] blk_mq_run_hw_queue+0x348/0x4f0 [ 503.516586][T16849] blk_mq_dispatch_list+0xd0c/0xe00 [ 503.522347][T16849] blk_mq_flush_plug_list+0x469/0x550 [ 503.528278][T16849] __blk_flush_plug+0x3d3/0x4b0 [ 503.533673][T16849] __submit_bio+0x2d3/0x5a0 [ 503.538727][T16849] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 503.544895][T16849] block_read_full_folio+0x599/0x830 [ 503.550712][T16849] filemap_read_folio+0x117/0x380 [ 503.556271][T16849] do_read_cache_folio+0x350/0x590 [ 503.562001][T16849] read_part_sector+0xb6/0x2b0 [ 503.567299][T16849] adfspart_check_ICS+0xa4/0xa50 [ 503.572769][T16849] bdev_disk_changed+0x75f/0x14b0 [ 503.578322][T16849] blkdev_get_whole+0x380/0x510 [ 503.583704][T16849] bdev_open+0x31e/0xd30 [ 503.588481][T16849] blkdev_open+0x457/0x600 [ 503.593429][T16849] do_dentry_open+0x953/0x13f0 [ 503.598734][T16849] vfs_open+0x3b/0x340 [ 503.603335][T16849] path_openat+0x2ee5/0x3830 [ 503.608456][T16849] do_filp_open+0x1fa/0x410 [ 503.613498][T16849] do_sys_openat2+0x121/0x1c0 [ 503.618729][T16849] __x64_sys_openat+0x138/0x170 [ 503.624114][T16849] do_syscall_64+0xfa/0xfa0 [ 503.629149][T16849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.635571][T16849] [ 503.635571][T16849] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 503.642802][T16849] lock_acquire+0x120/0x360 [ 503.647832][T16849] __mutex_lock+0x187/0x1350 [ 503.652949][T16849] nbd_queue_rq+0xc8/0xf10 [ 503.657907][T16849] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 503.663984][T16849] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 503.670849][T16849] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 503.677364][T16849] blk_mq_run_hw_queue+0x348/0x4f0 [ 503.683003][T16849] blk_mq_dispatch_list+0xd0c/0xe00 [ 503.688732][T16849] blk_mq_flush_plug_list+0x469/0x550 [ 503.694645][T16849] __blk_flush_plug+0x3d3/0x4b0 [ 503.700031][T16849] __submit_bio+0x2d3/0x5a0 [ 503.705064][T16849] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 503.711226][T16849] block_read_full_folio+0x599/0x830 [ 503.717038][T16849] filemap_read_folio+0x117/0x380 [ 503.722594][T16849] do_read_cache_folio+0x350/0x590 [ 503.728248][T16849] read_part_sector+0xb6/0x2b0 [ 503.733550][T16849] adfspart_check_ICS+0xa4/0xa50 [ 503.739015][T16849] bdev_disk_changed+0x75f/0x14b0 [ 503.744576][T16849] blkdev_get_whole+0x380/0x510 [ 503.749971][T16849] bdev_open+0x31e/0xd30 [ 503.754749][T16849] blkdev_open+0x457/0x600 [ 503.759704][T16849] do_dentry_open+0x953/0x13f0 [ 503.765057][T16849] vfs_open+0x3b/0x340 [ 503.769671][T16849] path_openat+0x2ee5/0x3830 [ 503.774789][T16849] do_filp_open+0x1fa/0x410 [ 503.779821][T16849] do_sys_openat2+0x121/0x1c0 [ 503.785036][T16849] __x64_sys_openat+0x138/0x170 [ 503.790425][T16849] do_syscall_64+0xfa/0xfa0 [ 503.795480][T16849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.801912][T16849] [ 503.801912][T16849] -> #3 (set->srcu){.+.+}-{0:0}: [ 503.809054][T16849] lock_sync+0xba/0x160 [ 503.813747][T16849] __synchronize_srcu+0x96/0x3a0 [ 503.819220][T16849] elevator_switch+0x12b/0x640 [ 503.824515][T16849] elevator_change+0x315/0x4c0 [ 503.829808][T16849] elevator_set_default+0x186/0x260 [ 503.835536][T16849] blk_register_queue+0x34e/0x3f0 [ 503.841094][T16849] __add_disk+0x677/0xd50 [ 503.845953][T16849] add_disk_fwnode+0xfc/0x480 [ 503.851168][T16849] nbd_dev_add+0x717/0xae0 [ 503.856117][T16849] nbd_init+0x168/0x1f0 [ 503.860802][T16849] do_one_initcall+0x236/0x820 [ 503.866093][T16849] do_initcall_level+0x104/0x190 [ 503.871573][T16849] do_initcalls+0x59/0xa0 [ 503.876450][T16849] kernel_init_freeable+0x334/0x4b0 [ 503.882288][T16849] kernel_init+0x1d/0x1d0 [ 503.887160][T16849] ret_from_fork+0x4bc/0x870 [ 503.892291][T16849] ret_from_fork_asm+0x1a/0x30 [ 503.897588][T16849] [ 503.897588][T16849] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 503.905506][T16849] lock_acquire+0x120/0x360 [ 503.910554][T16849] __mutex_lock+0x187/0x1350 [ 503.915682][T16849] elevator_change+0x1e5/0x4c0 [ 503.920975][T16849] elevator_set_none+0x42/0xb0 [ 503.926272][T16849] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 503.932615][T16849] nbd_start_device+0x17f/0xb10 [ 503.938002][T16849] nbd_genl_connect+0x135b/0x18f0 [ 503.943561][T16849] genl_family_rcv_msg_doit+0x215/0x300 [ 503.949641][T16849] genl_rcv_msg+0x60e/0x790 [ 503.954676][T16849] netlink_rcv_skb+0x208/0x470 [ 503.959981][T16849] genl_rcv+0x28/0x40 [ 503.964495][T16849] netlink_unicast+0x82f/0x9e0 [ 503.969785][T16849] netlink_sendmsg+0x805/0xb30 [ 503.975079][T16849] __sock_sendmsg+0x21c/0x270 [ 503.980291][T16849] ____sys_sendmsg+0x505/0x830 [ 503.985590][T16849] ___sys_sendmsg+0x21f/0x2a0 [ 503.990797][T16849] __x64_sys_sendmsg+0x19b/0x260 [ 503.996265][T16849] do_syscall_64+0xfa/0xfa0 [ 504.001299][T16849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.007719][T16849] [ 504.007719][T16849] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 504.016339][T16849] lock_acquire+0x120/0x360 [ 504.021372][T16849] blk_alloc_queue+0x538/0x620 [ 504.026669][T16849] __blk_mq_alloc_disk+0x15c/0x340 [ 504.032315][T16849] nbd_dev_add+0x46c/0xae0 [ 504.037267][T16849] nbd_init+0x168/0x1f0 [ 504.041954][T16849] do_one_initcall+0x236/0x820 [ 504.047247][T16849] do_initcall_level+0x104/0x190 [ 504.052724][T16849] do_initcalls+0x59/0xa0 [ 504.057582][T16849] kernel_init_freeable+0x334/0x4b0 [ 504.063323][T16849] kernel_init+0x1d/0x1d0 [ 504.068291][T16849] ret_from_fork+0x4bc/0x870 [ 504.073514][T16849] ret_from_fork_asm+0x1a/0x30 [ 504.078815][T16849] [ 504.078815][T16849] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 504.086042][T16849] validate_chain+0xb9b/0x2140 [ 504.091342][T16849] __lock_acquire+0xab9/0xd20 [ 504.096561][T16849] lock_acquire+0x120/0x360 [ 504.101596][T16849] fs_reclaim_acquire+0x72/0x100 [ 504.107066][T16849] kmem_cache_alloc_node_noprof+0x48/0x710 [ 504.113411][T16849] __alloc_skb+0x112/0x2d0 [ 504.118387][T16849] tcp_stream_alloc_skb+0x3d/0x340 [ 504.124030][T16849] tcp_connect+0x14b8/0x5060 [ 504.129154][T16849] tcp_v4_connect+0x1110/0x1a00 [ 504.134531][T16849] __inet_stream_connect+0x2ae/0xe70 [ 504.140338][T16849] inet_stream_connect+0x66/0xa0 [ 504.145800][T16849] p9_fd_create_tcp+0x409/0x640 [ 504.151183][T16849] p9_client_create+0x85e/0x10b0 [ 504.156655][T16849] v9fs_session_init+0x1d7/0x19a0 [ 504.162212][T16849] v9fs_mount+0xc8/0xa50 [ 504.166978][T16849] legacy_get_tree+0xfd/0x1a0 [ 504.172188][T16849] vfs_get_tree+0x92/0x2b0 [ 504.177130][T16849] do_new_mount+0x302/0x9e0 [ 504.182164][T16849] __se_sys_mount+0x313/0x410 [ 504.187367][T16849] do_syscall_64+0xfa/0xfa0 [ 504.192413][T16849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.198850][T16849] [ 504.198850][T16849] other info that might help us debug this: [ 504.198850][T16849] [ 504.209082][T16849] Chain exists of: [ 504.209082][T16849] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 504.209082][T16849] [ 504.221886][T16849] Possible unsafe locking scenario: [ 504.221886][T16849] [ 504.229422][T16849] CPU0 CPU1 [ 504.234788][T16849] ---- ---- [ 504.240156][T16849] lock(k-sk_lock-AF_INET); [ 504.244760][T16849] lock(sk_lock-AF_INET); [ 504.251703][T16849] lock(k-sk_lock-AF_INET); [ 504.258822][T16849] lock(fs_reclaim); [ 504.262827][T16849] [ 504.262827][T16849] *** DEADLOCK *** [ 504.262827][T16849] [ 504.270970][T16849] 1 lock held by syz.6.4327/16849: [ 504.276084][T16849] #0: ffff888034671bd8 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 504.286116][T16849] [ 504.286116][T16849] stack backtrace: [ 504.292007][T16849] CPU: 0 UID: 0 PID: 16849 Comm: syz.6.4327 Not tainted syzkaller #0 PREEMPT(full) [ 504.292029][T16849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 504.292042][T16849] Call Trace: [ 504.292051][T16849] [ 504.292059][T16849] dump_stack_lvl+0x189/0x250 [ 504.292092][T16849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.292120][T16849] ? __pfx__printk+0x10/0x10 [ 504.292146][T16849] ? print_lock_name+0xde/0x100 [ 504.292171][T16849] print_circular_bug+0x2ee/0x310 [ 504.292200][T16849] check_noncircular+0x134/0x160 [ 504.292228][T16849] validate_chain+0xb9b/0x2140 [ 504.292253][T16849] ? rt_is_expired+0x1c/0x2d0 [ 504.292277][T16849] ? rt_is_expired+0x250/0x2d0 [ 504.292300][T16849] ? __pfx_ipv4_dst_check+0x10/0x10 [ 504.292324][T16849] ? ipv4_dst_check+0x5b/0x90 [ 504.292346][T16849] ? __sk_dst_check+0x16d/0x2f0 [ 504.292366][T16849] ? inet_sk_rebuild_header+0x93/0x1d50 [ 504.292391][T16849] __lock_acquire+0xab9/0xd20 [ 504.292415][T16849] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 504.292442][T16849] lock_acquire+0x120/0x360 [ 504.292461][T16849] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 504.292494][T16849] fs_reclaim_acquire+0x72/0x100 [ 504.292511][T16849] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 504.292538][T16849] kmem_cache_alloc_node_noprof+0x48/0x710 [ 504.292565][T16849] ? __alloc_skb+0x112/0x2d0 [ 504.292584][T16849] ? ipv4_default_advmss+0x1e/0x1d0 [ 504.292613][T16849] __alloc_skb+0x112/0x2d0 [ 504.292634][T16849] tcp_stream_alloc_skb+0x3d/0x340 [ 504.292654][T16849] tcp_connect+0x14b8/0x5060 [ 504.292693][T16849] ? __pfx_tcp_connect+0x10/0x10 [ 504.292719][T16849] ? get_random_u16+0x4e8/0x940 [ 504.292749][T16849] ? __asan_memset+0x22/0x50 [ 504.292776][T16849] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 504.292802][T16849] ? sk_setup_caps+0x9ef/0xc40 [ 504.292825][T16849] ? sk_setup_caps+0x29/0xc40 [ 504.292848][T16849] tcp_v4_connect+0x1110/0x1a00 [ 504.292867][T16849] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 504.292902][T16849] ? __pfx_tcp_v4_connect+0x10/0x10 [ 504.292924][T16849] __inet_stream_connect+0x2ae/0xe70 [ 504.292945][T16849] ? __local_bh_enable_ip+0x12d/0x1c0 [ 504.292968][T16849] ? __pfx___inet_stream_connect+0x10/0x10 [ 504.292985][T16849] ? __local_bh_enable_ip+0x12d/0x1c0 [ 504.293007][T16849] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 504.293034][T16849] inet_stream_connect+0x66/0xa0 [ 504.293052][T16849] p9_fd_create_tcp+0x409/0x640 [ 504.293077][T16849] ? __pfx_p9_fd_create_tcp+0x10/0x10 [ 504.293112][T16849] ? p9_client_create+0x7d9/0x10b0 [ 504.293139][T16849] ? kfree+0x19a/0x6d0 [ 504.293164][T16849] p9_client_create+0x85e/0x10b0 [ 504.293195][T16849] ? __pfx_p9_client_create+0x10/0x10 [ 504.293228][T16849] ? rcu_is_watching+0x15/0xb0 [ 504.293254][T16849] ? __raw_spin_lock_init+0x45/0x100 [ 504.293285][T16849] v9fs_session_init+0x1d7/0x19a0 [ 504.293321][T16849] ? __pfx_v9fs_session_init+0x10/0x10 [ 504.293349][T16849] ? __kasan_kmalloc+0x93/0xb0 [ 504.293366][T16849] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 504.293403][T16849] v9fs_mount+0xc8/0xa50 [ 504.293421][T16849] ? __pfx_v9fs_mount+0x10/0x10 [ 504.293435][T16849] ? vfs_parse_fs_qstr+0x156/0x1e0 [ 504.293464][T16849] legacy_get_tree+0xfd/0x1a0 [ 504.293488][T16849] ? __pfx_v9fs_mount+0x10/0x10 [ 504.293504][T16849] vfs_get_tree+0x92/0x2b0 [ 504.293525][T16849] do_new_mount+0x302/0x9e0 [ 504.293545][T16849] ? apparmor_capable+0x137/0x1b0 [ 504.293575][T16849] ? __pfx_do_new_mount+0x10/0x10 [ 504.293595][T16849] ? ns_capable+0x8a/0xf0 [ 504.293618][T16849] ? kmem_cache_free+0x19b/0x690 [ 504.293651][T16849] __se_sys_mount+0x313/0x410 [ 504.293674][T16849] ? __pfx___se_sys_mount+0x10/0x10 [ 504.293697][T16849] ? do_syscall_64+0xbe/0xfa0 [ 504.293718][T16849] ? __x64_sys_mount+0x20/0xc0 [ 504.293740][T16849] do_syscall_64+0xfa/0xfa0 [ 504.293761][T16849] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.293782][T16849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.293800][T16849] ? clear_bhb_loop+0x60/0xb0 [ 504.293820][T16849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.293837][T16849] RIP: 0033:0x7f3190d8eec9 [ 504.293854][T16849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.293871][T16849] RSP: 002b:00007f3191b59038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 504.293890][T16849] RAX: ffffffffffffffda RBX: 00007f3190fe5fa0 RCX: 00007f3190d8eec9 [ 504.293904][T16849] RDX: 0000200000000080 RSI: 0000200000000680 RDI: 0000200000000640 [ 504.293917][T16849] RBP: 00007f3190e11f91 R08: 00002000000000c0 R09: 0000000000000000 [ 504.293930][T16849] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000000 [ 504.293941][T16849] R13: 00007f3190fe6038 R14: 00007f3190fe5fa0 R15: 00007ffef429d3c8 [ 504.293961][T16849] [ 504.768292][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 504.800096][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 504.806951][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 504.814233][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 504.821057][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 504.827841][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 504.838768][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 504.845609][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 504.854323][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 504.864230][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 504.873879][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 504.880809][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 504.887702][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 504.896782][ T9] pwc: Registered as video103. [ 504.902778][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input96 [ 504.917523][ T9] usb 6-1: USB disconnect, device number 67 [ 506.943535][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.949853][ T1301] ieee802154 phy1 wpan1: encryption failed: -22