last executing test programs: 44.714401393s ago: executing program 2 (id=1683): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6a01a604000c1100000000000000000000ff0200000000000000000000000000014e234e20000c9078a101000000000000000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0x1, 0x5, 0xf}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0xfffffffffffffff0, 0x0, 0x4, 0x68ab, 0xfffffffffffffffe}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) gettid() r7 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) userfaultfd(0x1) 43.745783519s ago: executing program 2 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 42.71850044s ago: executing program 2 (id=1689): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x7ff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) tkill(0x0, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 41.127418103s ago: executing program 2 (id=1690): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x18080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xfffffff000000000) r3 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x88f0b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000002580)=""/4096}, {&(0x7f00000014c0)=""/155}, {&(0x7f00000024c0)=""/170}], 0x1}}], 0x40000000000013e, 0x2, 0x0) 38.049113627s ago: executing program 2 (id=1700): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x7ff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) tkill(0x0, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 35.651561381s ago: executing program 2 (id=1704): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r5, 0x2285, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r6, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x70) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r7, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314770026bd7000fbdbdf2509000200f3797a3200000000080041007369770014003300776c616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x48049}, 0x800) 19.081716608s ago: executing program 32 (id=1704): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r5, 0x2285, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r6, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x70) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r7, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314770026bd7000fbdbdf2509000200f3797a3200000000080041007369770014003300776c616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x48049}, 0x800) 10.663533419s ago: executing program 3 (id=1766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) 7.331707176s ago: executing program 3 (id=1769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3}, {0x5000, 0x10000, 0xc, 0xeb, 0x2, 0x0, 0x4, 0x0, 0x7, 0xff}, {0xeeee0000, 0x1000, 0xc, 0x80, 0x7, 0xc4, 0x0, 0x0, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x200000, 0x4, 0x0, 0x0, 0x74, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x160, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x10001, 0xfffffffffffffffe]}) 7.243923724s ago: executing program 3 (id=1772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r1, 0xffffffffffffffff, 0xa, 0x0, @void}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x181205, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) close(r2) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000001980)={0x15c8, 0x7, 0xa, 0x601, 0x70bd25, 0x25dfdbfd, {0x1, 0x0, 0x2}, [@typed={0x4, 0x137}, @generic="d28ae3bf4401a9e189edc2650878dc0b7821396c335ee381dabcd5f588fe77986753e55513a412d76f88b88474c30b9926e4a864a0132e8753a3e9c13dd197502edef9aacbe6b4fe69d63511f5a79264cf86b3d05cba1d5758e264fcf25b752f1b8ef07961d9f31ae6758c41815f45ab6d0829fd5bdf6539392bfc490f43b78be6dddf378afdd207e980eff53d7d9f3231736d48cbf1836a2f39621f13cf5492c14c83215cfbbd86e195a88c169818a51581c194dffa399b227a2d4ca2aad2b06dc96d7d", @typed={0xc2, 0x47, 0x0, 0x0, @binary="686e1488e4e4b5bcc1f472ab8881fc6d08670a58e4ace389b56029d82c1242f85de1faea16019ec3ddc78101fee9105be3be361bbf055ff1df578892278e35ade80a0cdc488c65d581ccb71c25db431be867b9aebd5cd715bfecb0a137ee0a33b424fa70fe4c687e48b6a8731180c860d816e6f2651e5eac2e5e382271ce000b2f1da42890d1ccc978749ce310da54b85fda5b287a2f255800b2b072b1eed87a9527d347fe25fa8ba54e2079e6ae102672ca7c0f0e97545d3f1ba2e6d477"}, @generic="657c3e747920939bbee0beaf4b5f754b7ecab24e5ed52367a685e37becb26129de160b62c9cd0b8daf9fa65c1fd2188a99c62c6b2f1bb7", @typed={0x8, 0xb2, 0x0, 0x0, @uid=0xee00}, @generic="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", @nested={0xa6, 0x70, 0x0, 0x1, [@generic="85938bbb11363fdccb8b6a2974a0df522381ef1d949f576ce3b0d5367761caccc0126168fe8edff28f8dffc290e11820ffc12a0be2bedd9b525476b125a123ea929e68f2af703dd4a5b5e7dd62a3790caf169132cb1be154d48b563bb655708756f190182614d2ec6f4538b1021e13d4101daa421a6a0bb3f25d0f97927becd1d20d3b07c947773d31ec78ec85c7f89ae1b0c5fb2801", @nested={0x4, 0x11}, @typed={0x8, 0xb2, 0x0, 0x0, @fd=r4}]}, @nested={0x215, 0x36, 0x0, 0x1, [@generic="6bec7cc10aa36259c6df117ab57c1fe4e6d197163cfa2ad7f2220aacb76f951ffe64a59ac9593ba3443b10ad4868479abe0d4de958aa4734af6cc8181ba0b34252afd1033440da3b3f26aa14ace0d57dbaaa880cdf71295a4886dc94d537e9a856bddfbba195ef5ca73abed423ca6834bb7701f74cf8c6d8170f755e965c0abd7a8d1a5cc3c8876f6b6937e3da1ff31d21029f6f67868e9481d75aa418ed43442787920f84ea65e007bae5752758e663603da75037bd76982768ec5ca10e9abbb301048ae2176b347e1cc7eabfbaff1639fb0c9040d9dfa24c17532e8fe62198dd37da", @typed={0xf3, 0x17, 0x0, 0x0, @binary="7580f0f975c3a8e8cd8ba6879cb900a614c7de676afe85642cd6a1dc0c65d1a7db6d09f4503d340b66b24f249ee79064d97bbc294891bee8ca5ef00b08084fcbe62ff4291c99f2a75435d2ea8137235aa658cc0a54a7b4290c976d3898a24d79b97c40daf3e0fd201a757fa6d1a3994bf9b57c0858d4a3cc5e07f9b7555a7813385efe9efc9d258f4209c90841366cb4027ddebb4aefbcf9747dd3f5f8dfdeef9f55f57eaaddc0a265818d80f5e6fe631d7e8aa2b58e5a809ec66a5f0c418419b8cd9668a976afa42442d2c4b88f1cec8923b224739e0f4ec59d6928b567aeed8326baba742b0f6ca0f40787d29278"}, @nested={0x4, 0x3}, @generic="602e48f4c90cba7426554ac1c94f1345e50846ea05dbcffda07715cdd46a02c5289cee851541a0cf388a933a1bfc6422c73e", @nested={0x4, 0xaa}]}, @generic="e6e9723b0eb9a34a03393dab93903c1c16932d30e5dc24644c85e5c272678996af064e476521083fbf1e9ce82c56b4eba082733c5fb84b59156ade9c4e9f6e119ef635f91cc10212e8a8585c634396677ecbe64d0418ee7fd5fc9d3beb0834476740a92c3fbd11fb7ea3e2a8a54fad11017ca1c1b42b0a92df399a39342bc16dccaaf90ef13ca116bb036123", @generic="18459380e90d838db3e655bdde2a266aeb07009eb4789e13caf3b01f2c279039698ac0fe0bf740a0bf039ba9d8f4176070bfb56d98037effec4847cb85ce46988aa1a6161ed47687b5db044df720542e0f2f36f1a8f9a94545ee3b3d994596c7e0012976799d80db9df30ff7580b0432902707e5df5d57dbfce740022410cef9179d8179fd363ebbb39dd1cf3b3b48262dc8a78f93bd5e53ffaee1c5e2"]}, 0x15c8}}, 0x4008081) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) write$cgroup_type(r5, &(0x7f0000000280), 0x9) 6.923280432s ago: executing program 3 (id=1774): madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000140)=r0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) 6.679651564s ago: executing program 1 (id=1776): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001280)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000012c0)=0x3, 0x12) 6.135423163s ago: executing program 1 (id=1777): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, 0x0, 0xfe) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c93012000e"], 0x17) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) 6.093304086s ago: executing program 3 (id=1779): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003900)={0xffffffffffffffff, 0x6, 0x8}, 0xc) 6.019908023s ago: executing program 3 (id=1780): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.766362114s ago: executing program 1 (id=1785): r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x7fff) getpid() mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @empty}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0xaa6c, r2, 0x0}]) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x15, 0x0, 0x1, 0x20000}, {0x1, 0x0, 0x0, 0xfffffffe}]}) 2.760734934s ago: executing program 1 (id=1791): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) setns(0xffffffffffffffff, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.757040574s ago: executing program 0 (id=1793): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x4000080) open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd2(0x4001, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x30, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_init1(0x80800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103081, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0) 2.697435949s ago: executing program 1 (id=1794): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, 0x0, 0xfe) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c93012000e"], 0x17) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) 2.217128892s ago: executing program 4 (id=1796): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) 2.071977495s ago: executing program 0 (id=1797): syz_clone(0x8000, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0) 1.893816621s ago: executing program 0 (id=1798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x4000006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xfffffdc9, 0x4008811, 0x0, 0x45) openat$fuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/101, 0xfffffe17, 0x0, &(0x7f00000001c0)={0xa, 0x4e24, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff800000}, 0x1c) socket$inet6(0xa, 0x800, 0x2) 1.639576784s ago: executing program 4 (id=1799): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x80000) mknodat(r0, &(0x7f0000000100)='./file2\x00', 0x2, 0xd) 1.56781998s ago: executing program 4 (id=1800): r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x7fff) getpid() mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @empty}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0xaa6c, r2, 0x0}]) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x15, 0x0, 0x1, 0x20000}, {0x1, 0x0, 0x0, 0xfffffffe}]}) 1.199937303s ago: executing program 4 (id=1801): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000180)=@sg0, 0xee01, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.172347275s ago: executing program 0 (id=1802): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x0) 459.281769ms ago: executing program 4 (id=1803): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) getpgid(0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r1, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 419.055613ms ago: executing program 0 (id=1804): socket(0x10, 0x3, 0x0) close(0x3) 301.251083ms ago: executing program 4 (id=1805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) fcntl$dupfd(r3, 0x0, r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x2) 678.119µs ago: executing program 0 (id=1806): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x4000080) open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd2(0x4001, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x30, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_init1(0x80800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103081, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0) 0s ago: executing program 1 (id=1807): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') pwritev(r0, 0x0, 0x0, 0xfffffffb, 0x1) kernel console output (not intermixed with test programs): b 5-1: USB disconnect, device number 5 [ 204.052074][ T1108] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 204.161863][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.325217][ T1108] usb 1-1: config 0 descriptor?? [ 204.341968][ T1108] usb 1-1: can't set config #0, error -71 [ 204.357325][ T1108] usb 1-1: USB disconnect, device number 3 [ 204.751645][ T5978] device syzkaller0 entered promiscuous mode [ 207.676378][ T6027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.483'. [ 207.686432][ T6027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.483'. [ 207.719748][ T6027] device syzkaller0 entered promiscuous mode [ 207.989284][ T6034] loop0: detected capacity change from 0 to 512 [ 208.127454][ T6034] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 208.142865][ T6034] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.329724][ T6043] device syzkaller0 entered promiscuous mode [ 208.392033][ T4191] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 208.422029][ T6050] device syzkaller1 entered promiscuous mode [ 209.362216][ T4191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.373331][ T4191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.383265][ T4191] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.396320][ T4191] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.641857][ T4191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.652602][ T4191] usb 3-1: config 0 descriptor?? [ 210.875330][ T6071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 210.885755][ T6071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 211.103933][ T6073] loop4: detected capacity change from 0 to 512 [ 211.259742][ T6071] device syzkaller0 entered promiscuous mode [ 211.343190][ T4191] usbhid 3-1:0.0: can't add hid device: -71 [ 211.349179][ T4191] usbhid: probe of 3-1:0.0 failed with error -71 [ 211.512611][ T4191] usb 3-1: USB disconnect, device number 7 [ 211.551714][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.557196][ T6073] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 211.558991][ C0] bridge0: topology change detected, propagating [ 211.574589][ T6073] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.582459][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.598072][ C0] bridge0: topology change detected, propagating [ 211.624678][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.436803][ T6104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.739043][ T6104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.888902][ T6112] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 217.805397][ T6144] loop4: detected capacity change from 0 to 512 [ 219.246469][ T6144] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 219.262494][ T6144] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.428822][ T6150] device syzkaller0 entered promiscuous mode [ 220.704017][ T6168] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 220.788064][ T6168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.101844][ T4191] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 221.412187][ T4191] usb 1-1: Using ep0 maxpacket: 8 [ 221.542193][ T4191] usb 1-1: config 0 interface 0 altsetting 35 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.607223][ T4191] usb 1-1: config 0 interface 0 has no altsetting 0 [ 221.637567][ T4191] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 221.958903][ T6178] device syzkaller0 entered promiscuous mode [ 222.363663][ T4191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.452624][ T4191] usb 1-1: config 0 descriptor?? [ 223.381838][ T4191] samsung 0003:0419:0001.0004: hidraw0: USB HID v10.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0 [ 225.230337][ T6194] block device autoloading is deprecated and will be removed. [ 225.254117][ T5117] usb 1-1: USB disconnect, device number 4 [ 225.596478][ T6195] siw: device registration error -23 [ 227.070339][ T6193] fido_id[6193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 227.504795][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.532'. [ 227.670070][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.532'. [ 229.679528][ T6214] device syzkaller0 entered promiscuous mode [ 231.851052][ T6260] loop3: detected capacity change from 0 to 7 [ 232.224359][ T6260] Dev loop3: unable to read RDB block 7 [ 232.229951][ T6260] loop3: unable to read partition table [ 232.235685][ T6260] loop3: partition table beyond EOD, truncated [ 232.241873][ T6260] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 232.423578][ T6270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.550'. [ 232.648503][ T6270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.550'. [ 232.768789][ T6270] device syzkaller0 entered promiscuous mode [ 233.700439][ T6278] device syzkaller0 entered promiscuous mode [ 233.815079][ T1108] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 234.092529][ T4292] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 234.142033][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 234.422147][ T4292] usb 2-1: Using ep0 maxpacket: 8 [ 234.562467][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.592143][ T5117] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 234.630054][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.692093][ T4292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 234.975684][ T4292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.008314][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 235.132287][ T4292] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.144499][ T1108] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 235.154696][ T4292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 235.164974][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.173135][ T4292] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 235.188714][ T1108] usb 3-1: config 0 descriptor?? [ 235.193942][ T4292] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 235.203143][ T5117] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.213743][ T5117] usb 1-1: config 0 has no interfaces? [ 235.219220][ T5117] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 235.228539][ T4292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.237503][ T5117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.246534][ T4292] usb 2-1: config 0 descriptor?? [ 235.338550][ T4202] Bluetooth: hci5: urb ffff888029ade700 submission failed (90) [ 235.341291][ T6301] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 235.356525][ T5117] usb 1-1: config 0 descriptor?? [ 235.500818][ T6307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.563'. [ 235.510288][ T6307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.563'. [ 235.520552][ T6307] device syzkaller0 entered promiscuous mode [ 235.541273][ T23] usb 2-1: USB disconnect, device number 7 [ 235.641822][ T4256] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 235.693667][ T1108] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 235.701536][ T1108] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 235.711192][ T1108] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 235.718794][ T1108] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 235.727061][ T1108] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 235.734723][ T1108] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 235.742323][ T1108] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 235.749787][ T1108] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 235.757393][ T1108] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 235.766015][ T1108] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 235.786253][ T1108] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input11 [ 235.878636][ T1108] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 235.901309][ T1108] usb 3-1: USB disconnect, device number 8 [ 235.985992][ T6314] fido_id[6314]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 236.011950][ T4256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.029117][ T4256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.041231][ T4256] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 236.051785][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.096331][ T4256] usb 5-1: config 0 descriptor?? [ 237.213602][ T5117] usb 1-1: USB disconnect, device number 5 [ 237.285360][ T4256] hid-generic 0003:0458:5012.0006: hidraw0: USB HID v0.00 Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0 [ 238.457573][ T23] usb 5-1: USB disconnect, device number 6 [ 239.310185][ T6342] fido_id[6342]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 240.764759][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.574'. [ 240.812466][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.574'. [ 240.830503][ T6365] device syzkaller0 entered promiscuous mode [ 241.051868][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 241.182314][ T6336] syz.2.570 (6336): drop_caches: 2 [ 241.996677][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 242.131818][ T23] usb 4-1: config 5 has an invalid interface number: 128 but max is 0 [ 242.140020][ T23] usb 4-1: config 5 has no interface number 0 [ 242.166770][ T23] usb 4-1: config 5 interface 128 has no altsetting 0 [ 242.352228][ T23] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=ab.9e [ 242.376167][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.398027][ T23] usb 4-1: Product: syz [ 242.410179][ T23] usb 4-1: Manufacturer: syz [ 242.421516][ T23] usb 4-1: SerialNumber: syz [ 243.393045][ T23] redrat3 4-1:5.128: Couldn't find all endpoints [ 243.413159][ T23] usb 4-1: USB disconnect, device number 7 [ 243.511742][ T4256] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 244.266310][ T4256] usb 2-1: device descriptor read/64, error -71 [ 245.191805][ T4256] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 245.523583][ T6415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.594'. [ 245.617435][ T6415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.594'. [ 245.634092][ T6415] device syzkaller0 entered promiscuous mode [ 246.731822][ T4292] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 246.909967][ T6444] loop0: detected capacity change from 0 to 2048 [ 247.140828][ T6444] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 247.151957][ T6444] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 247.256909][ T6444] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 247.271575][ T6444] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.578889][ T6447] loop0: detected capacity change from 0 to 2048 [ 247.653886][ T6447] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 247.687155][ T4292] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.731984][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop0 [ 247.751266][ T6447] NILFS (loop0): mounting unchecked fs [ 247.757489][ T4292] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.836511][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop0 [ 247.873865][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop0 [ 248.276491][ T6447] NILFS (loop0): recovery complete [ 248.317314][ T6463] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.396707][ T4292] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 248.405890][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 248.413938][ T4292] usb 5-1: SerialNumber: syz [ 248.860535][ T6467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.608'. [ 249.628192][ T6478] (syz.0.610,6478,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 249.649968][ T6467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.608'. [ 249.855927][ T4292] usb 5-1: 0:2 : does not exist [ 249.861947][ T6478] (syz.0.610,6478,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 249.869805][ T6467] device syzkaller0 entered promiscuous mode [ 250.183854][ T6489] loop4: detected capacity change from 0 to 2048 [ 250.207883][ T6489] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 250.219854][ T6489] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 250.234247][ T6489] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 250.247508][ T6489] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.384988][ T4292] usb 5-1: USB disconnect, device number 7 [ 251.497595][ T5117] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 252.335195][ T5117] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 252.346456][ T5117] usb 1-1: config 0 has no interface number 0 [ 252.355332][ T5117] usb 1-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 252.367451][ T5117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.388192][ T5117] usb 1-1: config 0 descriptor?? [ 252.945991][ T5117] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 255.222256][ T5117] gspca_ov534_9: reg_w failed -110 [ 256.164566][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.172503][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.367067][ T6528] loop0: detected capacity change from 0 to 2048 [ 259.905341][ T6528] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 259.915899][ T6528] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 259.931580][ T6528] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 259.942933][ T6528] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.006518][ T6543] comedi comedi3: comedi_test: 3 microvolt, 5 microsecond waveform attached [ 260.160576][ T6549] comedi comedi3: comedi_config --init_data is deprecated [ 260.180720][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.186509][ T5117] gspca_ov534_9: Unknown sensor 0000 [ 260.188023][ T5117] ov534_9: probe of 1-1:0.111 failed with error -22 [ 260.200727][ T6551] capability: warning: `syz.2.629' uses 32-bit capabilities (legacy support in use) [ 260.227274][ T5117] usb 1-1: USB disconnect, device number 6 [ 260.270931][ T6542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.384533][ T6598] block device autoloading is deprecated and will be removed. [ 268.811811][ T6597] siw: device registration error -23 [ 271.402239][ T4292] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 271.767393][ T6636] loop3: detected capacity change from 0 to 2048 [ 271.797708][ T6636] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 271.825765][ T4179] udevd[4179]: incorrect nilfs2 checksum on /dev/loop3 [ 271.834984][ T6636] NILFS (loop3): mounting unchecked fs [ 271.879917][ T6636] NILFS (loop3): recovery complete [ 271.898650][ T6643] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.971797][ T4247] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 273.430806][ T4292] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.441307][ T4292] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.532500][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 273.571045][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.042532][ T1325] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 274.082966][ T4247] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.100358][ T4247] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 274.109918][ T4247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.385152][ T4247] usb 2-1: config 0 descriptor?? [ 275.055403][ T4247] hid (null): bogus close delimiter [ 275.172632][ T4247] hid-u2fzero 0003:10C4:8ACF.0007: bogus close delimiter [ 275.220354][ T4247] hid-u2fzero 0003:10C4:8ACF.0007: item 0 0 2 10 parsing failed [ 275.502057][ T4247] hid-u2fzero: probe of 0003:10C4:8ACF.0007 failed with error -22 [ 275.722177][ T4247] usb 2-1: USB disconnect, device number 10 [ 275.883918][ T4256] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 276.191784][ T4292] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 277.036299][ T1325] usb 1-1: device not accepting address 7, error -71 [ 277.043707][ T4292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.051791][ T4292] usb 5-1: Product: syz [ 277.058416][ T4292] usb 5-1: config 0 descriptor?? [ 277.081875][ T4292] usb 5-1: can't set config #0, error -71 [ 277.093991][ T4292] usb 5-1: USB disconnect, device number 8 [ 277.180551][ T4256] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 277.195661][ T4256] usb 4-1: config 5 has no interface number 0 [ 277.232716][ T4256] usb 4-1: config 5 interface 123 altsetting 7 has an invalid endpoint with address 0x47, skipping [ 277.893391][ T4256] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 255, setting to 64 [ 277.954201][ T6690] overlayfs: unrecognized mount option "verity=on" or missing value [ 277.957954][ T6682] loop2: detected capacity change from 0 to 2048 [ 277.971884][ T4256] usb 4-1: config 5 interface 123 has no altsetting 0 [ 278.061760][ T4256] usb 4-1: string descriptor 0 read error: -71 [ 278.068024][ T4256] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 278.091394][ T6682] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 278.110634][ T6682] NILFS (loop2): mounting unchecked fs [ 278.216964][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.249958][ T4256] usb 4-1: can't set config #5, error -71 [ 278.276140][ T6682] NILFS (loop2): recovery complete [ 278.353602][ T4256] usb 4-1: USB disconnect, device number 8 [ 278.411824][ T4247] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 278.662475][ T6698] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.741939][ T4256] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 278.933348][ T4247] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 278.987010][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.018678][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.047388][ T4247] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.066157][ T4247] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.075823][ T4247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.174270][ T4247] usb 2-1: config 0 descriptor?? [ 279.211751][ T4256] usb 4-1: Using ep0 maxpacket: 32 [ 281.411863][ T4256] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 281.419479][ T4256] usb 4-1: can't read configurations, error -71 [ 281.668247][ T4247] usbhid 2-1:0.0: can't add hid device: -71 [ 281.702849][ T4247] usbhid: probe of 2-1:0.0 failed with error -71 [ 282.087239][ T4247] usb 2-1: USB disconnect, device number 11 [ 283.069393][ T6730] fuse: Bad value for 'fd' [ 284.481792][ T4247] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 284.761810][ T4247] usb 1-1: Using ep0 maxpacket: 32 [ 285.173214][ T4247] usb 1-1: config 0 interface 0 has no altsetting 0 [ 286.068547][ T6761] loop3: detected capacity change from 0 to 7 [ 286.241573][ T4247] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 286.259143][ T6761] Dev loop3: unable to read RDB block 7 [ 286.271752][ T4247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.290103][ T6761] loop3: unable to read partition table [ 286.306412][ T4247] usb 1-1: Product: syz [ 286.313455][ T6761] loop3: partition table beyond EOD, truncated [ 286.346881][ T4247] usb 1-1: Manufacturer: syz [ 286.386697][ T4247] usb 1-1: SerialNumber: syz [ 286.408373][ T6761] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 286.614698][ T4247] usb 1-1: config 0 descriptor?? [ 288.169258][ T4256] usb 1-1: USB disconnect, device number 9 [ 289.511814][ T4292] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 289.571419][ T6814] block device autoloading is deprecated and will be removed. [ 289.761774][ T4292] usb 5-1: Using ep0 maxpacket: 32 [ 291.122298][ T4292] usb 5-1: config 0 interface 0 has no altsetting 0 [ 291.365841][ T4292] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 291.404735][ T4292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.440423][ T4292] usb 5-1: Product: syz [ 291.479280][ T4292] usb 5-1: Manufacturer: syz [ 291.498815][ T4292] usb 5-1: SerialNumber: syz [ 291.572658][ T4292] usb 5-1: config 0 descriptor?? [ 293.892097][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 293.906174][ T4256] usb 5-1: USB disconnect, device number 9 [ 294.176461][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 294.196856][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.204463][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.361244][ T6853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.471276][ T4256] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 300.694922][ T4235] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 300.971818][ T4256] usb 5-1: Using ep0 maxpacket: 16 [ 301.772108][ T4256] usb 5-1: config 0 has no interfaces? [ 301.812271][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.985557][ T4235] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 302.002015][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.612067][ T4235] usb 2-1: config 0 descriptor?? [ 302.775422][ T4235] usb 2-1: can't set config #0, error -71 [ 302.797238][ T4235] usb 2-1: USB disconnect, device number 12 [ 302.803335][ T4256] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 302.815165][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.027838][ T4256] usb 5-1: config 0 descriptor?? [ 303.072176][ T4256] usb 5-1: can't set config #0, error -71 [ 303.692778][ T4256] usb 5-1: USB disconnect, device number 10 [ 307.867047][ T6984] device syzkaller1 entered promiscuous mode [ 308.131966][ T5117] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 309.101856][ T5117] usb 4-1: Using ep0 maxpacket: 32 [ 309.641820][ T5117] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 309.669097][ T5117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.708638][ T5117] usb 4-1: config 0 descriptor?? [ 309.764361][ T5117] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 311.651833][ T5117] gspca_vc032x: reg_w err -110 [ 311.682233][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 311.687595][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 311.764509][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 311.769871][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 311.836372][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 311.866763][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 311.896778][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 311.946402][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 311.971817][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 311.987472][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.001961][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.007273][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.024595][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.029917][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.072877][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.094530][ T7036] loop3: detected capacity change from 0 to 7 [ 312.106454][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.125942][ T4179] Dev loop3: unable to read RDB block 7 [ 312.131550][ T4179] loop3: unable to read partition table [ 312.145892][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.157368][ T4179] loop3: partition table beyond EOD, truncated [ 312.170304][ T5117] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.201791][ T5117] gspca_vc032x: Unknown sensor... [ 312.221815][ T5117] vc032x: probe of 4-1:0.0 failed with error -22 [ 312.268710][ T5117] usb 4-1: USB disconnect, device number 11 [ 312.479959][ T7036] Dev loop3: unable to read RDB block 7 [ 312.486081][ T7036] loop3: unable to read partition table [ 312.492661][ T7036] loop3: partition table beyond EOD, truncated [ 312.499081][ T7036] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 312.591839][ T1325] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 312.863633][ T1325] usb 5-1: Using ep0 maxpacket: 16 [ 313.237957][ T7030] atomic_op ffff8880779ce198 conn xmit_atomic 0000000000000000 [ 313.402524][ T1325] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 313.425368][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.441699][ T1325] usb 5-1: Product: syz [ 313.456104][ T1325] usb 5-1: Manufacturer: syz [ 313.460738][ T1325] usb 5-1: SerialNumber: syz [ 313.493382][ T1325] usb 5-1: config 0 descriptor?? [ 313.594384][ T7052] loop0: detected capacity change from 0 to 2048 [ 313.630079][ T7052] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 313.640856][ T7052] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 313.651666][ T4235] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 313.660607][ T7052] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 313.673351][ T7052] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.748466][ T7054] loop3: detected capacity change from 0 to 512 [ 313.899235][ T7054] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 313.927126][ T7054] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.072051][ T4235] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 314.080219][ T4235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.121723][ T4235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.147654][ T4235] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.179754][ T4235] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.239901][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.293888][ T4235] usb 3-1: config 0 descriptor?? [ 314.786176][ T4235] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 314.804546][ T4235] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 314.859848][ T4235] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 315.173581][ T4235] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 315.209810][ T1325] usb_8dev 5-1:0.0 can0: sending command message failed [ 315.226161][ T1325] usb_8dev 5-1:0.0 can0: can't get firmware version [ 315.257212][ T5117] usb 3-1: USB disconnect, device number 9 [ 315.893514][ T4235] usb 2-1: Using ep0 maxpacket: 16 [ 315.993040][ T1325] usb_8dev: probe of 5-1:0.0 failed with error -22 [ 316.031976][ T4235] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.105820][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 316.127162][ T7081] lo speed is unknown, defaulting to 1000 [ 316.194283][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 316.245058][ T7081] wlan1 speed is unknown, defaulting to 1000 [ 316.276003][ T4235] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 316.558122][ T4235] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.605393][ T1325] usb 5-1: USB disconnect, device number 11 [ 316.716876][ T4235] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 316.736332][ T4235] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 316.766716][ T4235] usb 2-1: Manufacturer: syz [ 316.802686][ T4235] usb 2-1: config 0 descriptor?? [ 317.145003][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.152829][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.263738][ T4235] rc_core: IR keymap rc-hauppauge not found [ 317.269696][ T4235] Registered IR keymap rc-empty [ 317.275889][ T4235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 317.329753][ T4235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 317.461094][ T7101] loop2: detected capacity change from 0 to 2048 [ 317.491577][ T4235] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 317.505337][ T4235] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 317.611779][ T1325] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 317.695397][ T7101] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 317.706143][ T7101] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 317.746674][ T7101] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 317.776375][ T7101] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.972191][ T1325] usb 4-1: Using ep0 maxpacket: 8 [ 318.079080][ T4235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.092023][ T1325] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 318.108749][ T1325] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 318.139834][ T1325] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 318.157098][ T1325] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 318.180390][ T1325] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.222367][ T1325] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 318.240496][ T4235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.257146][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.271894][ T4235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.885987][ T4235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.902035][ T1325] usb 4-1: GET_CAPABILITIES returned 0 [ 318.918075][ T1325] usbtmc 4-1:16.0: can't read capabilities [ 318.932006][ T4235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 319.097882][ T4235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 319.136756][ T4235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 319.173018][ T1325] usb 4-1: USB disconnect, device number 12 [ 319.232450][ T4235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 319.341738][ T4235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 319.402695][ T4235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 319.446151][ T4235] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 319.506462][ T4235] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 319.564417][ T4235] usb 2-1: USB disconnect, device number 13 [ 320.465313][ T7140] loop1: detected capacity change from 0 to 512 [ 320.632518][ T7142] comedi comedi2: ni_at_a2150: I/O port conflict (0xafff,28) [ 320.832439][ T7140] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 320.929144][ T7140] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.307179][ T7170] siw: device registration error -23 [ 324.241780][ T4256] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 324.631876][ T4256] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.661694][ T4256] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.889026][ T4256] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.977396][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.293024][ T4256] usb 4-1: usb_control_msg returned -32 [ 325.311480][ T4256] usbtmc 4-1:16.0: can't read capabilities [ 325.332384][ T2164] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 326.161831][ T5117] usb 4-1: USB disconnect, device number 13 [ 326.181748][ T2164] usb 1-1: Using ep0 maxpacket: 32 [ 326.451863][ T2164] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 326.460109][ T2164] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 326.471488][ T2164] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 327.116940][ T2164] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 327.133694][ T2164] usb 1-1: config 0 interface 0 has no altsetting 0 [ 327.390642][ T2164] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 327.586849][ T2164] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 328.106889][ T2164] usb 1-1: Product: syz [ 328.111103][ T2164] usb 1-1: Manufacturer: syz [ 328.116406][ T2164] usb 1-1: SerialNumber: syz [ 328.122854][ T2164] usb 1-1: config 0 descriptor?? [ 328.208974][ T2164] usb 1-1: can't set config #0, error -71 [ 328.215953][ T2164] usb 1-1: USB disconnect, device number 10 [ 328.969273][ T7223] siw: device registration error -23 [ 330.406148][ T7239] loop4: detected capacity change from 0 to 512 [ 331.237232][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 331.287470][ T7256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.347157][ T7239] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 331.687678][ T7258] netlink: 'syz.0.825': attribute type 2 has an invalid length. [ 331.717050][ T7258] netlink: 'syz.0.825': attribute type 2 has an invalid length. [ 331.729832][ T7239] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.449311][ T2164] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 333.701333][ T7289] siw: device registration error -23 [ 333.992311][ T2164] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 334.113538][ T2164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.512094][ T2164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.070625][ T7297] loop3: detected capacity change from 0 to 7 [ 335.153177][ T7297] Dev loop3: unable to read RDB block 7 [ 335.159195][ T7297] loop3: unable to read partition table [ 335.165528][ T7297] loop3: partition table beyond EOD, truncated [ 335.172131][ T7297] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 335.740488][ T2164] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 336.141862][ T2164] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 336.151429][ T2164] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 336.161471][ T2164] usb 3-1: Manufacturer: syz [ 336.519773][ T2164] usb 3-1: config 0 descriptor?? [ 336.663400][ T2164] usb 3-1: can't set config #0, error -71 [ 336.707403][ T2164] usb 3-1: USB disconnect, device number 10 [ 341.390965][ T7373] loop2: detected capacity change from 0 to 512 [ 341.556330][ T7376] netlink: 'syz.0.858': attribute type 29 has an invalid length. [ 341.572003][ T7376] netlink: 'syz.0.858': attribute type 29 has an invalid length. [ 342.208059][ T7376] netlink: 'syz.0.858': attribute type 29 has an invalid length. [ 342.217359][ T7373] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 342.232779][ T7373] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.390540][ T7384] loop0: detected capacity change from 0 to 2048 [ 342.448514][ T7384] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 342.470909][ T7386] device syzkaller0 entered promiscuous mode [ 342.483773][ T7384] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 342.507692][ T7384] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 342.518609][ T4228] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 342.537285][ T7384] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.775187][ T4228] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.786701][ T4228] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 343.859022][ T4228] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.899745][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.982634][ T7382] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 344.215178][ T5117] usb 2-1: USB disconnect, device number 14 [ 346.415806][ T4247] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 346.433003][ T7427] device syzkaller0 entered promiscuous mode [ 347.317052][ T2164] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 347.493400][ T4247] usb 3-1: Using ep0 maxpacket: 32 [ 347.597919][ T7444] loop3: detected capacity change from 0 to 512 [ 348.019714][ T4247] usb 3-1: device descriptor read/all, error -71 [ 348.053217][ T7444] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 348.068757][ T7444] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.171684][ T2164] usb 5-1: Using ep0 maxpacket: 32 [ 348.372167][ T2164] usb 5-1: config 0 has an invalid interface number: 191 but max is 0 [ 348.401440][ T2164] usb 5-1: config 0 has no interface number 0 [ 348.415842][ T1325] Bluetooth: hci4: command 0x0405 tx timeout [ 348.441756][ T2164] usb 5-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 348.692204][ T2164] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 348.705591][ T2164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.723354][ T2164] usb 5-1: Product: syz [ 348.738072][ T2164] usb 5-1: Manufacturer: syz [ 348.747093][ T7457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 348.756567][ T2164] usb 5-1: SerialNumber: syz [ 348.770610][ T2164] usb 5-1: config 0 descriptor?? [ 348.792063][ T7420] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 348.817271][ T7457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.015750][ T7420] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 349.160358][ T7461] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 349.922144][ T2164] asix 5-1:0.191 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 350.085994][ T2164] asix 5-1:0.191 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 350.258800][ T7472] device syzkaller0 entered promiscuous mode [ 350.296601][ T2164] asix 5-1:0.191 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 350.312324][ T2164] asix 5-1:0.191 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 350.507215][ T2164] asix 5-1:0.191 eth1: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, a2:94:1d:e8:1f:37 [ 350.540493][ T2164] usb 5-1: USB disconnect, device number 12 [ 350.548880][ T2164] asix 5-1:0.191 eth1: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet [ 350.580626][ T7486] loop1: detected capacity change from 0 to 2048 [ 350.759554][ T7486] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 350.827051][ T7486] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 351.102238][ T4235] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 351.126129][ T7486] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 351.569632][ T7486] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.601839][ T4235] usb 1-1: Using ep0 maxpacket: 32 [ 351.722027][ T4235] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 351.731145][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.807629][ T4235] usb 1-1: config 0 descriptor?? [ 351.903701][ T4235] gspca_main: sunplus-2.14.0 probing 041e:400b [ 352.932159][ T4235] gspca_sunplus: reg_r err -71 [ 352.937352][ T4235] sunplus: probe of 1-1:0.0 failed with error -71 [ 353.187126][ T4235] usb 1-1: USB disconnect, device number 11 [ 353.621707][ T4247] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 354.241494][ T4247] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 354.405568][ T4247] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 354.617172][ T4247] usb 4-1: config 0 interface 0 has no altsetting 0 [ 354.941263][ T7516] device syzkaller0 entered promiscuous mode [ 355.009805][ T7518] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 355.041984][ T4247] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 355.068243][ T4247] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 355.078798][ T4247] usb 4-1: Product: syz [ 355.087677][ T4247] usb 4-1: Manufacturer: syz [ 355.093717][ T4247] usb 4-1: SerialNumber: syz [ 355.115718][ T4247] usb 4-1: config 0 descriptor?? [ 355.152781][ T4247] hub 4-1:0.0: bad descriptor, ignoring hub [ 355.161061][ T4247] hub: probe of 4-1:0.0 failed with error -5 [ 355.200674][ T4247] usb 4-1: selecting invalid altsetting 0 [ 356.472570][ T4247] usb 4-1: USB disconnect, device number 14 [ 357.504193][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.075496][ T7557] loop4: detected capacity change from 0 to 512 [ 359.248874][ T7557] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 359.264940][ T7557] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.417547][ T7566] device syzkaller0 entered promiscuous mode [ 359.776720][ T4985] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 360.051687][ T4985] usb 2-1: Using ep0 maxpacket: 32 [ 360.998123][ T4985] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.021670][ T4985] usb 2-1: config 0 has no interface number 0 [ 361.027806][ T4985] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 361.051660][ T4985] usb 2-1: config 0 interface 1 has no altsetting 0 [ 361.393544][ T4985] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 361.526890][ T4985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.605863][ T4985] usb 2-1: Product: syz [ 361.653733][ T4985] usb 2-1: Manufacturer: syz [ 361.697618][ T4985] usb 2-1: SerialNumber: syz [ 361.851894][ T4985] usb 2-1: config 0 descriptor?? [ 362.678938][ T4985] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 362.781880][ T4985] cx231xx 2-1:0.1: Failed to read PCB config [ 362.788154][ T4985] cx231xx: probe of 2-1:0.1 failed with error -71 [ 362.883621][ T4985] usb 2-1: USB disconnect, device number 15 [ 363.764740][ T4247] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 363.935108][ T7607] device syzkaller0 entered promiscuous mode [ 364.121734][ T2164] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 364.431802][ T4247] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 364.440864][ T4247] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 364.461166][ T4247] usb 4-1: Product: syz [ 364.470622][ T4247] usb 4-1: Manufacturer: syz [ 364.475283][ T4247] usb 4-1: SerialNumber: syz [ 364.499415][ T4247] usb 4-1: config 0 descriptor?? [ 364.572776][ T4247] ch341 4-1:0.0: ch341-uart converter detected [ 364.611918][ T2164] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.626747][ T2164] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 364.638932][ T2164] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 364.648673][ T2164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.662139][ T2164] usb 5-1: config 0 descriptor?? [ 364.702974][ T2164] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 364.714190][ T2164] dvb-usb: bulk message failed: -22 (3/0) [ 364.734816][ T2164] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 364.768658][ T2164] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 364.777263][ T2164] usb 5-1: media controller created [ 364.881070][ T2164] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.900021][ T2164] dvb-usb: bulk message failed: -22 (6/0) [ 364.907906][ T2164] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 364.908173][ T7603] dvb-usb: bulk message failed: -22 (2/0) [ 364.967918][ T2164] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 365.278055][ T2164] dvb-usb: schedule remote query interval to 150 msecs. [ 365.384505][ T2164] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 365.761769][ T4247] ch341-uart ttyUSB0: failed to read break control: -71 [ 365.770043][ T2164] usb 5-1: USB disconnect, device number 13 [ 365.784873][ T4247] ch341-uart: probe of ttyUSB0 failed with error -71 [ 365.976955][ T4247] usb 4-1: USB disconnect, device number 15 [ 366.567941][ T4247] ch341 4-1:0.0: device disconnected [ 366.636951][ T2164] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 367.039239][ T7639] lo speed is unknown, defaulting to 1000 [ 367.139818][ T2164] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 367.148013][ T7639] wlan1 speed is unknown, defaulting to 1000 [ 367.451777][ T2164] usb 5-1: Using ep0 maxpacket: 32 [ 367.581902][ T2164] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.590371][ T2164] usb 5-1: config 0 has no interface number 0 [ 367.631959][ T2164] usb 5-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 367.643037][ T2164] usb 5-1: config 0 interface 1 has no altsetting 0 [ 367.811922][ T2164] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 367.821771][ T2164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.832156][ T2164] usb 5-1: Product: syz [ 367.851689][ T2164] usb 5-1: Manufacturer: syz [ 367.856944][ T2164] usb 5-1: SerialNumber: syz [ 367.872249][ T2164] usb 5-1: config 0 descriptor?? [ 368.038447][ T7655] device syzkaller0 entered promiscuous mode [ 368.091986][ T7658] device syzkaller0 entered promiscuous mode [ 368.153447][ T2164] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 369.081850][ T2164] cx231xx 5-1:0.1: Failed to read PCB config [ 369.474571][ T2164] cx231xx: probe of 5-1:0.1 failed with error -71 [ 369.514510][ T2164] usb 5-1: USB disconnect, device number 14 [ 372.141755][ T2164] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 372.421890][ T2164] usb 2-1: Using ep0 maxpacket: 8 [ 372.571744][ T2164] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 372.600569][ T2164] usb 2-1: config 0 has no interface number 0 [ 372.608944][ T7697] device syzkaller0 entered promiscuous mode [ 372.617831][ T2164] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 372.669554][ T2164] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 372.690703][ T2164] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 372.739205][ T2164] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 372.765117][ T2164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.802856][ T2164] usb 2-1: config 0 descriptor?? [ 372.878080][ T2164] ldusb 2-1:0.55: Interrupt in endpoint not found [ 373.038883][ T7704] loop3: detected capacity change from 0 to 2048 [ 373.100722][ T7704] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 373.138083][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop3 [ 373.163729][ T5121] usb 2-1: USB disconnect, device number 16 [ 373.168221][ T7704] NILFS (loop3): mounting unchecked fs [ 373.358596][ T7704] NILFS (loop3): recovery complete [ 373.550116][ T7712] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.901750][ T5121] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 374.336008][ T5121] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 374.421915][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 374.711944][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 374.861901][ T23] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 374.934739][ T23] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 375.107279][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 375.191664][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 375.391107][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 375.418296][ T5121] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 375.429216][ T5121] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 376.060237][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 376.171654][ T23] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 376.221818][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.388108][ T23] usb 3-1: config 0 descriptor?? [ 376.611791][ T5121] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 376.619470][ T5121] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 376.630271][ T5121] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 376.751910][ T5121] usb 5-1: unable to read config index 2 descriptor/start: -71 [ 376.772340][ T5121] usb 5-1: can't read configurations, error -71 [ 376.961277][ T4247] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 376.991353][ T23] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 377.008483][ T23] usb 3-1: USB disconnect, device number 13 [ 377.017821][ T23] usblp0: removed [ 377.114135][ T7755] device syzkaller0 entered promiscuous mode [ 377.206722][ T5121] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 377.371913][ T4247] usb 2-1: unable to get BOS descriptor or descriptor too short [ 377.531014][ T23] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 377.574858][ T5121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 377.592244][ T4247] usb 2-1: config 0 has no interfaces? [ 377.783760][ T4247] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.825063][ T4247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.909196][ T4247] usb 2-1: Product: syz [ 377.991228][ T4247] usb 2-1: Manufacturer: syz [ 378.058892][ T4247] usb 2-1: SerialNumber: syz [ 378.215776][ T7773] device syzkaller0 entered promiscuous mode [ 378.221695][ T4247] usb 2-1: config 0 descriptor?? [ 378.287778][ T7777] loop2: detected capacity change from 0 to 2048 [ 378.294353][ T23] usb 3-1: unable to read config index 0 descriptor/all [ 378.349209][ T23] usb 3-1: can't read configurations, error -71 [ 378.358814][ T7777] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 378.395740][ T4179] udevd[4179]: incorrect nilfs2 checksum on /dev/loop2 [ 378.420190][ T7777] NILFS (loop2): mounting unchecked fs [ 378.459783][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop2 [ 378.471204][ T5121] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 378.480758][ T4256] usb 2-1: USB disconnect, device number 17 [ 378.481350][ T5121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.494858][ T5121] usb 5-1: Product: syz [ 378.499035][ T5121] usb 5-1: Manufacturer: syz [ 378.503774][ T5121] usb 5-1: SerialNumber: syz [ 378.510675][ T5121] usb 5-1: config 0 descriptor?? [ 378.527651][ T7777] NILFS (loop2): recovery complete [ 378.537723][ T7783] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.555107][ T5121] hub 5-1:0.0: bad descriptor, ignoring hub [ 378.566351][ T5121] hub: probe of 5-1:0.0 failed with error -5 [ 378.585305][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.592987][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.606512][ T5121] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 379.884875][ T2164] usb 5-1: USB disconnect, device number 16 [ 381.998035][ T7825] device syzkaller0 entered promiscuous mode [ 382.538632][ T7832] loop3: detected capacity change from 0 to 2048 [ 382.595898][ T7832] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 382.609119][ T7832] NILFS (loop3): mounting unchecked fs [ 382.641973][ T7832] NILFS (loop3): recovery complete [ 382.681652][ T7836] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.911790][ T5121] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 383.282639][ T5121] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 383.300681][ T5121] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 383.481866][ T5121] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 383.507875][ T5121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.553687][ T5121] usb 1-1: Product: syz [ 383.704685][ T5121] usb 1-1: Manufacturer: syz [ 383.709805][ T5121] usb 1-1: SerialNumber: syz [ 383.716742][ T5121] usb 1-1: config 0 descriptor?? [ 384.445664][ T5117] usb 1-1: USB disconnect, device number 12 [ 384.691918][ T7861] device syzkaller1 entered promiscuous mode [ 385.228851][ T7871] device syzkaller0 entered promiscuous mode [ 387.165992][ T7891] loop2: detected capacity change from 0 to 2048 [ 387.219496][ T7891] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 387.255198][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop2 [ 387.277188][ T7891] NILFS (loop2): mounting unchecked fs [ 387.307347][ T7891] NILFS (loop2): recovery complete [ 387.341739][ T4228] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 387.361812][ T7894] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 387.697797][ T7899] loop3: detected capacity change from 0 to 512 [ 387.767311][ T7899] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 387.783503][ T7899] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.842481][ T4228] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 387.859323][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.016502][ T4228] usb 5-1: config 0 descriptor?? [ 388.593714][ T4228] [drm:udl_init] *ERROR* Selecting channel failed [ 388.650515][ T4228] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 388.676230][ T4228] [drm] Initialized udl on minor 2 [ 388.730054][ T4228] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 388.768401][ T7915] device syzkaller0 entered promiscuous mode [ 388.776868][ T4228] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 388.817371][ T4228] usb 5-1: USB disconnect, device number 17 [ 388.847310][ T5121] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 388.876245][ T5121] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 388.922023][ T5121] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 389.171861][ T23] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 389.379899][ T7931] loop2: detected capacity change from 0 to 2048 [ 389.508090][ T7931] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 389.553379][ T7931] NILFS (loop2): mounting unchecked fs [ 389.571681][ T5117] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 389.780716][ T7931] NILFS (loop2): recovery complete [ 389.821978][ T5117] usb 4-1: Using ep0 maxpacket: 8 [ 389.869760][ T7937] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.102740][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 390.318105][ T23] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 390.336206][ T23] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 390.435989][ T5117] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 390.451862][ T5117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.459956][ T5117] usb 4-1: Product: syz [ 390.464219][ T5117] usb 4-1: Manufacturer: syz [ 390.468819][ T5117] usb 4-1: SerialNumber: syz [ 390.580384][ T5117] usb 4-1: config 0 descriptor?? [ 390.623610][ T5117] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 390.633668][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.643248][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.651247][ T23] usb 2-1: Product: syz [ 390.655587][ T23] usb 2-1: Manufacturer: syz [ 390.660186][ T23] usb 2-1: SerialNumber: syz [ 390.727481][ T23] cdc_mbim 2-1:1.0: skipping garbage [ 392.561914][ T23] cdc_mbim 2-1:1.0: bind() failure [ 392.569653][ T23] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 392.637332][ T23] cdc_ncm 2-1:1.1: bind() failure [ 392.830763][ T23] usb 2-1: USB disconnect, device number 18 [ 393.296540][ T5117] gspca_vc032x: reg_r err -71 [ 393.301291][ T5117] vc032x: probe of 4-1:0.0 failed with error -71 [ 393.316214][ T5117] usb 4-1: USB disconnect, device number 16 [ 393.359098][ T7957] device syzkaller0 entered promiscuous mode [ 393.564500][ T7964] loop1: detected capacity change from 0 to 512 [ 393.688238][ T7964] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 393.703689][ T7964] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.816262][ T7981] loop2: detected capacity change from 0 to 2048 [ 395.301304][ T7981] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 395.396857][ T7981] NILFS (loop2): mounting unchecked fs [ 395.439012][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop2 [ 395.567736][ T7981] NILFS (loop2): recovery complete [ 395.601369][ T7991] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 396.242060][ T4235] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 396.521911][ T4235] usb 1-1: Using ep0 maxpacket: 32 [ 396.672230][ T4235] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.713222][ T4235] usb 1-1: config 0 has no interface number 0 [ 396.839649][ T4235] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 396.864442][ T4235] usb 1-1: config 0 interface 1 has no altsetting 0 [ 397.192771][ T4235] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 397.261450][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.607981][ T4235] usb 1-1: Product: syz [ 397.634999][ T4235] usb 1-1: Manufacturer: syz [ 397.639635][ T4235] usb 1-1: SerialNumber: syz [ 397.656825][ T4235] usb 1-1: config 0 descriptor?? [ 398.423512][ T4235] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 398.836951][ T8010] device syzkaller0 entered promiscuous mode [ 398.981745][ T4235] cx231xx 1-1:0.1: Failed to read PCB config [ 398.988177][ T4235] cx231xx: probe of 1-1:0.1 failed with error -71 [ 399.007758][ T4235] usb 1-1: USB disconnect, device number 13 [ 399.183624][ T5121] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 399.461698][ T4235] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 399.502485][ T5121] usb 3-1: Using ep0 maxpacket: 32 [ 399.562385][ T8025] netlink: 'syz.4.1037': attribute type 2 has an invalid length. [ 399.572864][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1037'. [ 399.621945][ T5121] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 399.645790][ T5121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.785801][ T5121] usb 3-1: config 0 descriptor?? [ 399.815342][ T8030] loop4: detected capacity change from 0 to 2048 [ 400.463699][ T8030] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 400.464173][ T4235] usb 1-1: device not accepting address 14, error -71 [ 400.508246][ T5121] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 400.514567][ T8030] NILFS (loop4): mounting unchecked fs [ 400.523723][ T5121] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 400.632615][ T8030] NILFS (loop4): recovery complete [ 400.660963][ T8036] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.674709][ T5121] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 400.684381][ T5121] usb 3-1: media controller created [ 400.708504][ T5121] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.661861][ T5121] az6027: usb out operation failed. (-71) [ 401.672912][ T5121] stb0899_attach: Driver disabled by Kconfig [ 401.686725][ T5121] az6027: no front-end attached [ 401.686725][ T5121] [ 401.724599][ T5121] az6027: usb out operation failed. (-71) [ 401.730896][ T5121] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 401.745582][ T5121] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 401.802126][ T5121] dvb-usb: schedule remote query interval to 400 msecs. [ 401.819439][ T5121] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 401.842257][ T5121] usb 3-1: USB disconnect, device number 16 [ 402.219419][ T5121] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 402.731807][ T8070] siw: device registration error -23 [ 405.671672][ T2164] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 406.072658][ T2164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 406.108779][ T2164] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 406.158162][ T2164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.212580][ T2164] usb 1-1: config 0 descriptor?? [ 406.261970][ T8092] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 406.619081][ T8102] device syzkaller1 entered promiscuous mode [ 406.718772][ T2164] bigben 0003:146B:0902.0009: unexpected rdesc, please submit for review [ 406.740427][ T2164] bigben 0003:146B:0902.0009: item fetching failed at offset 3/5 [ 406.772295][ T2164] bigben 0003:146B:0902.0009: parse failed [ 406.778243][ T2164] bigben: probe of 0003:146B:0902.0009 failed with error -22 [ 406.927763][ T2164] usb 1-1: USB disconnect, device number 16 [ 407.114117][ T8111] loop3: detected capacity change from 0 to 512 [ 407.437383][ T8111] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 407.452947][ T8111] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.242840][ T4228] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 408.470811][ T5121] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 408.531650][ T4228] usb 1-1: Using ep0 maxpacket: 32 [ 408.791938][ T4228] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 408.816364][ T4228] usb 1-1: config 0 has no interface number 0 [ 408.846893][ T4228] usb 1-1: config 0 interface 12 has no altsetting 0 [ 408.975381][ T5121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.003718][ T5121] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 409.031998][ T4228] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 409.051419][ T5121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.061553][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.075229][ T4228] usb 1-1: Product: syz [ 409.079415][ T4228] usb 1-1: Manufacturer: syz [ 409.116078][ T5121] usb 3-1: config 0 descriptor?? [ 409.132074][ T4228] usb 1-1: SerialNumber: syz [ 409.157369][ T4228] usb 1-1: config 0 descriptor?? [ 409.583071][ T5121] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 409.644608][ T5121] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000A/input/input17 [ 409.832131][ T5121] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 411.209161][ T2164] usb 3-1: USB disconnect, device number 17 [ 412.321755][ T4228] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 412.513369][ T4228] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 412.984946][ T4228] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 412.994348][ T4228] f81534: probe of 1-1:0.12 failed with error -71 [ 413.004439][ T4228] usb 1-1: USB disconnect, device number 17 [ 413.821686][ T2164] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 414.442074][ T2164] usb 4-1: config 0 has an invalid interface number: 111 but max is 0 [ 414.463217][ T2164] usb 4-1: config 0 has no interface number 0 [ 414.469344][ T2164] usb 4-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 414.514891][ T2164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.559792][ T2164] usb 4-1: config 0 descriptor?? [ 414.601798][ T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 415.252691][ T4228] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 415.505791][ T4228] usb 2-1: Using ep0 maxpacket: 8 [ 415.625878][ T4228] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 415.644527][ T4228] usb 2-1: config 0 has no interface number 0 [ 415.662722][ T4228] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 415.690596][ T4228] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 415.717816][ T4228] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 415.747173][ T4228] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.931878][ T4228] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 415.953316][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.975174][ T4228] usb 2-1: Product: syz [ 415.987649][ T4228] usb 2-1: Manufacturer: syz [ 415.999394][ T4228] usb 2-1: SerialNumber: syz [ 416.039363][ T4228] usb 2-1: config 0 descriptor?? [ 416.081819][ T2164] usb 4-1: can't set config #0, error -71 [ 416.101877][ T2164] usb 4-1: USB disconnect, device number 17 [ 416.123490][ T4228] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 416.537678][ T23] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 416.549211][ T23] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 416.559349][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 416.568678][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.602197][ T8218] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 416.626094][ T2164] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 416.927755][ T23] usb 1-1: USB disconnect, device number 18 [ 416.933750][ T2164] usb 4-1: Using ep0 maxpacket: 16 [ 417.062058][ T2164] usb 4-1: config 0 has no interfaces? [ 417.231833][ T2164] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 417.251981][ T2164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.275209][ T2164] usb 4-1: Product: syz [ 417.279458][ T2164] usb 4-1: Manufacturer: syz [ 417.284233][ T2164] usb 4-1: SerialNumber: syz [ 417.307581][ T2164] usb 4-1: config 0 descriptor?? [ 417.657408][ T5121] usb 4-1: USB disconnect, device number 18 [ 418.036864][ T2164] usb 2-1: USB disconnect, device number 19 [ 419.571797][ T5121] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 419.928677][ T8286] comedi comedi0: Minor 3396 is invalid! [ 419.934957][ T5121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.957254][ T5121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.993959][ T5121] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 420.051207][ T5121] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 420.078434][ T5121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.112318][ T5121] usb 3-1: config 0 descriptor?? [ 420.196653][ T8290] device syzkaller0 entered promiscuous mode [ 420.673897][ T5121] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 420.696656][ T5121] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 420.772544][ T8302] loop4: detected capacity change from 0 to 512 [ 420.929196][ T8302] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 420.944705][ T8302] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.095813][ T5121] usb 3-1: USB disconnect, device number 18 [ 422.832621][ T5113] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 423.082281][ T5113] usb 3-1: Using ep0 maxpacket: 32 [ 423.202450][ T5113] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 423.215024][ T8333] comedi comedi0: adq12b: a I/O base address must be specified [ 423.215933][ T5113] usb 3-1: config 0 has no interface number 0 [ 423.242857][ T5113] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 423.304640][ T5113] usb 3-1: config 0 interface 85 has no altsetting 0 [ 423.531785][ T5113] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 423.557362][ T5113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.565729][ T5113] usb 3-1: Product: syz [ 423.577570][ T5113] usb 3-1: Manufacturer: syz [ 423.588792][ T5113] usb 3-1: SerialNumber: syz [ 423.610684][ T5113] usb 3-1: config 0 descriptor?? [ 424.321956][ T5113] appletouch 3-1:0.85: Geyser mode initialized. [ 424.329256][ T5113] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input18 [ 424.397005][ T2164] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 424.560632][ T4256] usb 3-1: USB disconnect, device number 19 [ 424.637023][ T4256] appletouch 3-1:0.85: input: appletouch disconnected [ 424.689585][ T4430] kworker/dying (4430) used greatest stack depth: 15992 bytes left [ 424.819077][ T8351] loop3: detected capacity change from 0 to 7 [ 424.836644][ T8351] Dev loop3: unable to read RDB block 7 [ 424.842613][ T8351] loop3: unable to read partition table [ 424.848461][ T2164] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 424.857793][ T8351] loop3: partition table beyond EOD, truncated [ 424.864167][ T8351] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 424.930280][ T2164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.034641][ T2164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 425.136091][ T2164] usb 2-1: config 1 has no interface number 0 [ 425.197096][ T2164] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 425.308106][ T2164] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 425.657017][ T2164] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.823068][ T2164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.932150][ T2164] usb 2-1: Product: syz [ 425.947955][ T2164] usb 2-1: Manufacturer: syz [ 426.115409][ T2164] usb 2-1: SerialNumber: syz [ 426.371708][ T4228] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 426.392041][ T2164] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 426.420259][ T2164] usb 2-1: USB disconnect, device number 20 [ 426.502090][ T5121] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 426.531779][ T4256] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 426.741866][ T4228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.752335][ T5121] usb 4-1: Using ep0 maxpacket: 8 [ 426.757576][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.841774][ T4228] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 426.850833][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 426.871757][ T5121] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 426.879959][ T5121] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 426.889738][ T4228] usb 3-1: SerialNumber: syz [ 426.903001][ T5121] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 426.926558][ T4256] usb 5-1: Using ep0 maxpacket: 32 [ 426.941640][ T5121] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.952205][ T5121] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.987731][ T5121] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 426.997273][ T5121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.202050][ T4256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.214009][ T4228] usb 3-1: 0:2 : does not exist [ 427.218499][ T4256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.229895][ T4256] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 427.233351][ T4228] usb 3-1: USB disconnect, device number 20 [ 427.258995][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.275132][ T4256] usb 5-1: config 0 descriptor?? [ 427.301808][ T5121] usb 4-1: usb_control_msg returned -32 [ 427.307604][ T5121] usbtmc 4-1:16.0: can't read capabilities [ 427.502582][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.292935][ T4256] zydacron 0003:13EC:0006.000C: item fetching failed at offset 0/2 [ 428.301201][ T4256] zydacron 0003:13EC:0006.000C: parse failed [ 428.307641][ T4256] zydacron: probe of 0003:13EC:0006.000C failed with error -22 [ 428.317127][ T4256] usb 5-1: USB disconnect, device number 18 [ 429.577787][ T4228] usb 4-1: USB disconnect, device number 19 [ 429.941504][ T8418] md: md2 stopped. [ 430.393166][ T8427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 430.420489][ T8427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 430.841826][ T5121] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 431.713268][ T5121] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 431.730258][ T5121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.961711][ T5121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.991678][ T5121] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.024605][ T5121] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.051905][ T5121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.104884][ T5121] usb 3-1: config 0 descriptor?? [ 432.594119][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.608506][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.641956][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.649396][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.667582][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.698555][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.718730][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.731870][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.747272][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.754828][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.771690][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.779388][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.799956][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.820252][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.840571][ T5121] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 432.851929][ T5121] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 432.874219][ T5121] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 432.930939][ T5121] usb 3-1: USB disconnect, device number 21 [ 433.113021][ T8451] fido_id[8451]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 434.015615][ T8473] loop3: detected capacity change from 0 to 7 [ 434.031752][ T8473] Dev loop3: unable to read RDB block 7 [ 434.037628][ T8473] loop3: unable to read partition table [ 434.043921][ T8473] loop3: partition table beyond EOD, truncated [ 434.050193][ T8473] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 434.681546][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 434.704885][ T8478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.871874][ T5121] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 436.241978][ T5121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.263803][ T5121] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 436.280786][ T5121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.302712][ T5121] usb 3-1: config 0 descriptor?? [ 436.701837][ T5121] usbhid 3-1:0.0: can't add hid device: -71 [ 436.710018][ T5121] usbhid: probe of 3-1:0.0 failed with error -71 [ 436.763630][ T5121] usb 3-1: USB disconnect, device number 22 [ 436.863911][ T8514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 436.873014][ T8514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 437.231729][ T5116] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 437.475678][ T5116] usb 2-1: Using ep0 maxpacket: 32 [ 437.515844][ T5121] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 437.592901][ T5116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.619063][ T5116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.631832][ T23] Bluetooth: hci4: command 0x0405 tx timeout [ 437.807392][ T5116] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 437.816560][ T5116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.831828][ T5116] usb 2-1: config 0 descriptor?? [ 437.872852][ T5116] hub 2-1:0.0: USB hub found [ 437.921794][ T5121] usb 3-1: Using ep0 maxpacket: 16 [ 438.171921][ T5116] hub 2-1:0.0: 1 port detected [ 438.231890][ T5121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.250249][ T5121] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 438.260639][ T5121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.276725][ T5121] usb 3-1: config 0 descriptor?? [ 438.462458][ T5121] usbhid 3-1:0.0: can't add hid device: -71 [ 438.478863][ T5121] usbhid: probe of 3-1:0.0 failed with error -71 [ 438.507682][ T5121] usb 3-1: USB disconnect, device number 23 [ 439.311900][ T5116] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 439.392739][ T5116] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 439.621884][ T5116] usbhid 2-1:0.0: can't add hid device: -32 [ 439.641753][ T5116] usbhid: probe of 2-1:0.0 failed with error -32 [ 439.877507][ T5116] usb 2-1: USB disconnect, device number 21 [ 439.924525][ T8549] loop2: detected capacity change from 0 to 2048 [ 440.000928][ T8549] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 440.020860][ T8549] NILFS (loop2): mounting unchecked fs [ 440.029618][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.036541][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.073492][ T8549] NILFS (loop2): recovery complete [ 440.102520][ T8555] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 442.277238][ T8590] loop3: detected capacity change from 0 to 7 [ 442.295054][ T8590] Dev loop3: unable to read RDB block 7 [ 442.301169][ T8590] loop3: unable to read partition table [ 442.307493][ T8590] loop3: partition table beyond EOD, truncated [ 442.313861][ T8590] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 443.644877][ T4256] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 443.951679][ T4256] usb 4-1: Using ep0 maxpacket: 16 [ 444.111764][ T4256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.131626][ T4256] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.166886][ T4256] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 444.189299][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.222099][ T4256] usb 4-1: config 0 descriptor?? [ 444.734264][ T4256] logitech-djreceiver 0003:046D:C537.000E: unknown main item tag 0x0 [ 444.747807][ T4256] logitech-djreceiver 0003:046D:C537.000E: unknown main item tag 0x0 [ 444.764866][ T4256] logitech-djreceiver 0003:046D:C537.000E: unknown main item tag 0x0 [ 444.773508][ T4256] logitech-djreceiver 0003:046D:C537.000E: unknown main item tag 0x0 [ 444.782243][ T4256] logitech-djreceiver 0003:046D:C537.000E: unknown main item tag 0x0 [ 444.989472][ T5113] usb 4-1: USB disconnect, device number 20 [ 446.502928][ T8632] loop3: detected capacity change from 0 to 7 [ 446.541774][ T8632] Dev loop3: unable to read RDB block 7 [ 446.547734][ T8632] loop3: unable to read partition table [ 446.554362][ T8632] loop3: partition table beyond EOD, truncated [ 446.560864][ T8632] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 448.646696][ T5117] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 449.692393][ T8662] siw: device registration error -23 [ 450.891648][ T5117] usb 3-1: Using ep0 maxpacket: 8 [ 450.930398][ T8674] loop3: detected capacity change from 0 to 7 [ 450.946178][ T8674] Dev loop3: unable to read RDB block 7 [ 450.952128][ T8674] loop3: unable to read partition table [ 450.958458][ T8674] loop3: partition table beyond EOD, truncated [ 450.964871][ T8674] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 451.012185][ T5117] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 451.053284][ T5117] usb 3-1: config 0 has no interface number 0 [ 451.140825][ T5117] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 452.201997][ T5117] usb 3-1: string descriptor 0 read error: -71 [ 452.209189][ T5117] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 452.220580][ T5117] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 452.234675][ T5117] usb 3-1: config 0 descriptor?? [ 452.252185][ T5117] usb 3-1: can't set config #0, error -71 [ 452.261418][ T5117] usb 3-1: USB disconnect, device number 24 [ 453.047589][ T8699] siw: device registration error -23 [ 453.299207][ T26] audit: type=1326 audit(1771448763.526:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.0.1250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b6bb70629 code=0x0 [ 454.822649][ T8723] loop3: detected capacity change from 0 to 7 [ 454.882234][ T4175] Dev loop3: unable to read RDB block 7 [ 454.916941][ T4175] loop3: unable to read partition table [ 454.990364][ T4175] loop3: partition table beyond EOD, truncated [ 455.083782][ T8723] Dev loop3: unable to read RDB block 7 [ 455.089899][ T8723] loop3: unable to read partition table [ 455.096583][ T8723] loop3: partition table beyond EOD, truncated [ 455.103121][ T8723] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 458.281822][ T8766] loop3: detected capacity change from 0 to 7 [ 458.297832][ T8766] Dev loop3: unable to read RDB block 7 [ 458.303620][ T8766] loop3: unable to read partition table [ 458.309860][ T8766] loop3: partition table beyond EOD, truncated [ 458.316238][ T8766] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 463.661722][ T2164] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 464.331724][ T2164] usb 3-1: Using ep0 maxpacket: 16 [ 464.502108][ T2164] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 464.531749][ T2164] usb 3-1: config 0 has no interface number 0 [ 464.561203][ T2164] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 464.596770][ T2164] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 464.802041][ T2164] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 464.960113][ T2164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.981686][ T2164] usb 3-1: Product: syz [ 464.985881][ T2164] usb 3-1: Manufacturer: syz [ 464.990477][ T2164] usb 3-1: SerialNumber: syz [ 465.003336][ T2164] usb 3-1: config 0 descriptor?? [ 465.031932][ T8826] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 465.039148][ T8826] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 465.285698][ T8826] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 465.309492][ T8826] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 465.438666][ T8847] device syzkaller0 entered promiscuous mode [ 465.981731][ T2164] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 465.997912][ T2164] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 466.019188][ T2164] asix: probe of 3-1:0.251 failed with error -71 [ 466.222078][ T2164] usb 3-1: USB disconnect, device number 25 [ 466.490991][ T8868] loop3: detected capacity change from 0 to 7 [ 466.510261][ T8868] Dev loop3: unable to read RDB block 7 [ 466.516126][ T8868] loop3: unable to read partition table [ 466.522546][ T8868] loop3: partition table beyond EOD, truncated [ 466.528818][ T8868] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 467.801635][ T2164] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 468.081716][ T2164] usb 5-1: Using ep0 maxpacket: 16 [ 468.212305][ T2164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.233402][ T2164] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 468.246892][ T8880] loop3: detected capacity change from 0 to 512 [ 468.251628][ T2164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.288352][ T2164] usb 5-1: config 0 descriptor?? [ 468.513741][ T8880] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 468.671950][ T8880] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.774540][ T2164] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 468.794260][ T2164] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 468.821657][ T2164] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 468.845401][ T2164] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 468.871763][ T2164] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 468.899229][ T2164] cm6533_jd 0003:0D8C:0022.000F: No inputs registered, leaving [ 468.920483][ T2164] cm6533_jd 0003:0D8C:0022.000F: hiddev0,hidraw0: USB HID v0.05 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 469.576327][ T8889] sctp: failed to load transform for md5: -2 [ 470.312078][ T8908] loop1: detected capacity change from 0 to 2048 [ 470.417734][ T8908] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 470.434642][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop1 [ 470.437952][ T8908] NILFS (loop1): mounting unchecked fs [ 470.486609][ T8908] NILFS (loop1): recovery complete [ 470.517610][ T8910] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 470.542270][ T4191] usb 5-1: USB disconnect, device number 19 [ 471.830538][ T8933] loop3: detected capacity change from 0 to 7 [ 472.716602][ T8933] Dev loop3: unable to read RDB block 7 [ 472.722271][ T8933] loop3: unable to read partition table [ 472.741536][ T8933] loop3: partition table beyond EOD, truncated [ 472.769646][ T8933] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 474.464434][ T8962] loop0: detected capacity change from 0 to 512 [ 474.574488][ T8960] sctp: failed to load transform for md5: -2 [ 475.318123][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 475.329959][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 475.751919][ T8980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.826318][ T8962] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 475.868861][ T8962] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.593263][ T8996] siw: device registration error -23 [ 477.058236][ T9007] loop1: detected capacity change from 0 to 2048 [ 477.189469][ T9007] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 477.231844][ T9007] NILFS (loop1): mounting unchecked fs [ 477.261333][ T9012] kvm: pic: non byte write [ 477.266203][ T9007] NILFS (loop1): recovery complete [ 477.292675][ T9014] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 477.752965][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 477.763210][ T9019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 479.080465][ T9032] sctp: failed to load transform for md5: -2 [ 480.534426][ T5117] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 480.827940][ T9059] loop3: detected capacity change from 0 to 2048 [ 480.891001][ T9059] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 480.901912][ T5117] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 480.911062][ T9059] NILFS (loop3): mounting unchecked fs [ 480.915759][ T5117] usb 3-1: config 0 has no interface number 0 [ 480.938110][ T5117] usb 3-1: config 0 interface 200 altsetting 2 has an invalid endpoint with address 0xB5, skipping [ 480.949543][ T5117] usb 3-1: config 0 interface 200 has no altsetting 0 [ 480.950485][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop3 [ 480.979507][ T9059] NILFS (loop3): recovery complete [ 481.038721][ T9062] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 481.111807][ T1325] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 481.206834][ T5117] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 481.227115][ T5117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.257779][ T5117] usb 3-1: Product: syz [ 481.276049][ T5117] usb 3-1: Manufacturer: syz [ 481.281218][ T5117] usb 3-1: SerialNumber: syz [ 481.318751][ T5117] usb 3-1: config 0 descriptor?? [ 481.351803][ T1325] usb 1-1: Using ep0 maxpacket: 32 [ 481.471751][ T1325] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 481.482206][ T1325] usb 1-1: config 0 has no interface number 0 [ 481.501652][ T1325] usb 1-1: config 0 interface 184 has no altsetting 0 [ 481.705126][ T5117] usbhid 3-1:0.200: couldn't find an input interrupt endpoint [ 481.712945][ T1325] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 481.723967][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.742155][ T5117] usb 3-1: USB disconnect, device number 26 [ 481.749911][ T1325] usb 1-1: Product: syz [ 481.754173][ T1325] usb 1-1: Manufacturer: syz [ 481.759560][ T1325] usb 1-1: SerialNumber: syz [ 481.783609][ T1325] usb 1-1: config 0 descriptor?? [ 481.840666][ T1325] smsc75xx v1.0.0 [ 482.150400][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 482.298832][ T9071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.011815][ T1325] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 483.040402][ T1325] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 483.457047][ T9088] siw: device registration error -23 [ 484.111819][ T1325] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 484.138535][ T1325] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 484.176739][ T1325] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 484.215905][ T1325] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 484.291166][ T1325] usb 1-1: USB disconnect, device number 19 [ 485.541822][ T1325] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 485.603428][ T9107] usb usb7: usbfs: process 9107 (syz.3.1357) did not claim interface 0 before use [ 485.941685][ T1325] usb 1-1: Using ep0 maxpacket: 32 [ 486.044466][ T9115] loop3: detected capacity change from 0 to 512 [ 486.071877][ T1325] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 486.083529][ T1325] usb 1-1: config 0 has no interface number 0 [ 486.089659][ T1325] usb 1-1: config 0 interface 184 has no altsetting 0 [ 486.151399][ T9115] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 486.166958][ T9115] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.251994][ T1325] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 487.771645][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.771991][ T9132] siw: device registration error -23 [ 487.779663][ T1325] usb 1-1: Product: syz [ 487.779680][ T1325] usb 1-1: Manufacturer: syz [ 487.779692][ T1325] usb 1-1: SerialNumber: syz [ 487.822605][ T1325] usb 1-1: config 0 descriptor?? [ 488.000378][ T1325] smsc75xx v1.0.0 [ 489.536721][ T1325] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 489.547186][ T1325] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 489.565640][ T1325] usb 1-1: USB disconnect, device number 20 [ 491.452355][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 491.511111][ T9167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.524504][ T9172] siw: device registration error -23 [ 492.610956][ T9174] device syzkaller0 entered promiscuous mode [ 493.709222][ T9195] loop3: detected capacity change from 0 to 512 [ 494.040645][ T9195] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 494.056030][ T9195] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.398759][ T9231] loop3: detected capacity change from 0 to 7 [ 497.416706][ T9231] Dev loop3: unable to read RDB block 7 [ 497.422561][ T9231] loop3: unable to read partition table [ 497.428966][ T9231] loop3: partition table beyond EOD, truncated [ 497.435414][ T9231] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 499.090779][ T9248] netlink: 'syz.0.1397': attribute type 29 has an invalid length. [ 499.152897][ T9248] netlink: 47738 bytes leftover after parsing attributes in process `syz.0.1397'. [ 500.765647][ T9264] loop3: detected capacity change from 0 to 512 [ 500.898121][ T9264] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 500.913931][ T9264] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.464343][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.472078][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.690871][ T9274] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 501.765484][ T9274] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 505.407772][ T1325] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 505.691778][ T1325] usb 5-1: Using ep0 maxpacket: 32 [ 505.821965][ T1325] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 505.842277][ T1325] usb 5-1: config 0 has no interface number 0 [ 506.961845][ T1325] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 506.970920][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.044414][ T1325] usb 5-1: Product: syz [ 507.048694][ T1325] usb 5-1: Manufacturer: syz [ 507.058693][ T1325] usb 5-1: SerialNumber: syz [ 507.222892][ T1325] usb 5-1: config 0 descriptor?? [ 507.433205][ T1325] smsc95xx v2.0.0 [ 507.811758][ T1325] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 507.839199][ T1325] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 508.351798][ T1325] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000020: -71 [ 508.363299][ T1325] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 508.383448][ T1325] usb 5-1: USB disconnect, device number 20 [ 509.171697][ T23] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 509.632741][ T23] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 509.723579][ T23] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 509.885591][ T23] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.342215][ T23] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 510.371164][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.412325][ T23] usb 5-1: Product: syz [ 510.416530][ T23] usb 5-1: Manufacturer: syz [ 510.465942][ T23] usb 5-1: SerialNumber: syz [ 510.553276][ T23] usblp0: Disabling reads from problematic bidirectional printer [ 510.764294][ T23] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 511.515684][ T23] usb 5-1: USB disconnect, device number 21 [ 511.526624][ T23] usblp0: removed [ 512.487865][ T9415] sctp: failed to load transform for md5: -2 [ 512.615566][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 512.624083][ T9419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.291762][ T2164] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 520.887741][ T2164] usb 5-1: Using ep0 maxpacket: 32 [ 521.062697][ T2164] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 521.369572][ T2164] usb 5-1: config 0 has no interface number 0 [ 521.581906][ T2164] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 521.611612][ T2164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.619641][ T2164] usb 5-1: Product: syz [ 521.644862][ T2164] usb 5-1: Manufacturer: syz [ 521.665064][ T2164] usb 5-1: SerialNumber: syz [ 521.683765][ T2164] usb 5-1: config 0 descriptor?? [ 521.772618][ T2164] smsc95xx v2.0.0 [ 522.510933][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 522.931825][ T2164] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 523.353263][ T9538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 523.475255][ T2164] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 523.501099][ T2164] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 523.552718][ T2164] usb 5-1: USB disconnect, device number 22 [ 526.224870][ T9581] lo speed is unknown, defaulting to 1000 [ 526.259130][ T9581] wlan1 speed is unknown, defaulting to 1000 [ 526.704580][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 526.717172][ T9586] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 526.805416][ T9586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.699542][ T9629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 530.845489][ T9629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.971192][ T9803] siw: device registration error -23 [ 547.469742][ T9831] lo speed is unknown, defaulting to 1000 [ 547.516599][ T9831] wlan1 speed is unknown, defaulting to 1000 [ 550.701643][ T4235] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 551.701606][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 551.821668][ T4235] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 551.829864][ T4235] usb 2-1: config 0 has no interface number 0 [ 551.861622][ T4235] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 552.082013][ T4235] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 552.101156][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.145866][ T4235] usb 2-1: Product: syz [ 552.169132][ T4235] usb 2-1: Manufacturer: syz [ 552.194393][ T4235] usb 2-1: SerialNumber: syz [ 552.242406][ T4235] usb 2-1: config 0 descriptor?? [ 552.291976][ T9858] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 552.376079][ T9879] lo speed is unknown, defaulting to 1000 [ 552.392792][ T9879] wlan1 speed is unknown, defaulting to 1000 [ 552.521355][ T9858] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 554.371717][ T4228] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 554.893712][ T4235] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 555.061959][ T4228] usb 3-1: Using ep0 maxpacket: 16 [ 555.111735][ T4235] asix: probe of 2-1:0.188 failed with error -71 [ 555.331848][ T4235] usb 2-1: USB disconnect, device number 22 [ 555.382374][ T4228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.394196][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.561854][ T4228] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 555.573132][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.585398][ T4228] usb 3-1: Product: syz [ 555.593890][ T4228] usb 3-1: Manufacturer: syz [ 555.601485][ T4228] usb 3-1: SerialNumber: syz [ 555.934355][ T4228] usb 3-1: 0:2 : does not exist [ 555.980562][ T4228] usb 3-1: USB disconnect, device number 27 [ 556.485251][ T9919] loop1: detected capacity change from 0 to 2048 [ 556.511667][ T4235] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 556.563421][ T9919] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 556.610782][ T9919] NILFS (loop1): mounting unchecked fs [ 556.628035][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop1 [ 556.653103][ T9919] NILFS (loop1): recovery complete [ 556.682510][ T9925] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 556.771768][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 557.101677][ T4235] usb 5-1: unable to get BOS descriptor or descriptor too short [ 557.117821][ T4235] usb 5-1: no configurations [ 557.129911][ T4235] usb 5-1: can't read configurations, error -22 [ 557.591175][ T9935] lo speed is unknown, defaulting to 1000 [ 557.921086][ T9935] wlan1 speed is unknown, defaulting to 1000 [ 559.765036][ T9959] usb usb7: usbfs: process 9959 (syz.2.1591) did not claim interface 0 before use [ 560.544786][ T9972] loop2: detected capacity change from 0 to 2048 [ 560.667366][ T9972] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 560.801735][ T9972] NILFS (loop2): mounting unchecked fs [ 561.021006][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop2 [ 561.426931][ T9972] NILFS (loop2): recovery complete [ 561.482377][ T9980] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 562.910884][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.339490][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.984767][T10033] loop1: detected capacity change from 0 to 2048 [ 566.065535][T10033] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 566.641435][T10033] NILFS (loop1): mounting unchecked fs [ 566.692251][T10033] NILFS (loop1): recovery complete [ 566.824775][T10044] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 566.996300][T10046] fuse: Bad value for 'fd' [ 571.366939][T10094] loop4: detected capacity change from 0 to 2048 [ 571.451300][T10094] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 571.525329][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop4 [ 571.535655][T10101] fuse: Bad value for 'fd' [ 571.687860][T10094] NILFS (loop4): mounting unchecked fs [ 571.730442][T10094] NILFS (loop4): recovery complete [ 571.768053][T10105] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 575.765809][T10148] loop1: detected capacity change from 0 to 2048 [ 575.852866][T10148] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 575.879911][T10148] NILFS (loop1): mounting unchecked fs [ 575.946745][T10148] NILFS (loop1): recovery complete [ 576.128363][T10158] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 578.369370][T10184] fuse: Bad value for 'fd' [ 581.585056][T10210] loop1: detected capacity change from 0 to 2048 [ 581.643598][T10210] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 581.678224][T10210] NILFS (loop1): mounting unchecked fs [ 581.709140][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop1 [ 581.735151][T10210] NILFS (loop1): recovery complete [ 581.910730][T10221] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 582.338757][T10231] block device autoloading is deprecated and will be removed. [ 585.847630][T10274] loop1: detected capacity change from 0 to 2048 [ 586.061034][T10274] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 586.093906][T10274] NILFS (loop1): mounting unchecked fs [ 586.694635][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop1 [ 586.716587][T10274] NILFS (loop1): recovery complete [ 586.756915][T10281] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 590.185622][T10303] loop3: detected capacity change from 0 to 7 [ 590.307131][ T4175] Dev loop3: unable to read RDB block 7 [ 590.315030][ T4175] loop3: unable to read partition table [ 590.333000][ T4175] loop3: partition table beyond EOD, truncated [ 591.021407][T10303] Dev loop3: unable to read RDB block 7 [ 591.085778][T10303] loop3: unable to read partition table [ 591.125971][T10303] loop3: partition table beyond EOD, truncated [ 591.150458][T10303] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 592.819084][T10327] loop2: detected capacity change from 0 to 2048 [ 592.936698][T10327] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 593.473958][T10327] NILFS (loop2): mounting unchecked fs [ 594.365838][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop2 [ 594.757107][T10327] NILFS (loop2): recovery complete [ 594.785567][T10353] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 598.180154][T10373] loop3: detected capacity change from 0 to 7 [ 598.189471][T10373] Dev loop3: unable to read RDB block 7 [ 598.195140][T10373] loop3: unable to read partition table [ 598.200834][T10373] loop3: partition table beyond EOD, truncated [ 598.207026][T10373] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 600.228251][T10402] loop1: detected capacity change from 0 to 2048 [ 601.029665][T10402] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 601.061784][T10402] NILFS (loop1): mounting unchecked fs [ 601.190438][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop1 [ 601.320751][T10402] NILFS (loop1): recovery complete [ 601.358672][T10419] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 603.304795][T10432] loop3: detected capacity change from 0 to 7 [ 603.317521][T10432] Dev loop3: unable to read RDB block 7 [ 603.323166][T10432] loop3: unable to read partition table [ 603.328847][T10432] loop3: partition table beyond EOD, truncated [ 603.985259][T10432] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 605.821702][ T23] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 606.545645][T10463] loop4: detected capacity change from 0 to 2048 [ 606.561855][ T23] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 606.607172][T10463] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 606.609960][ T23] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.651681][T10463] NILFS (loop4): mounting unchecked fs [ 606.663474][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop4 [ 606.693574][T10463] NILFS (loop4): recovery complete [ 606.706685][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 606.722949][T10466] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 606.733891][ T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 606.769443][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.803229][ T23] usb 2-1: config 0 descriptor?? [ 607.432767][ T23] hid-generic 0003:17EF:60EE.0010: item fetching failed at offset 3/5 [ 607.640124][ T23] hid-generic: probe of 0003:17EF:60EE.0010 failed with error -22 [ 607.902141][ T23] usb 2-1: USB disconnect, device number 23 [ 609.154684][T10486] loop3: detected capacity change from 0 to 7 [ 609.164929][T10486] Dev loop3: unable to read RDB block 7 [ 609.170496][T10486] loop3: unable to read partition table [ 609.176252][T10486] loop3: partition table beyond EOD, truncated [ 609.182416][T10486] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 612.461579][ T5113] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 612.732191][ T5113] usb 5-1: Using ep0 maxpacket: 32 [ 612.852620][ T5113] usb 5-1: config 0 has no interfaces? [ 614.361705][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 614.781690][ T5113] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 615.562511][ T5113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.570543][ T5113] usb 5-1: Product: syz [ 616.161886][ T5113] usb 5-1: Manufacturer: syz [ 616.619522][ T5113] usb 5-1: config 0 descriptor?? [ 616.831795][ T5113] usb 5-1: can't set config #0, error -71 [ 616.971168][ T5113] usb 5-1: USB disconnect, device number 25 [ 619.755299][T10558] lo speed is unknown, defaulting to 1000 [ 619.903830][T10558] wlan1 speed is unknown, defaulting to 1000 [ 620.702004][ T5117] Bluetooth: hci3: command 0x0409 tx timeout [ 620.960661][ T4464] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.977556][T10588] fuse: Bad value for 'fd' [ 621.066851][ T4464] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.157767][ T4464] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.176662][T10558] chnl_net:caif_netlink_parms(): no params data found [ 621.335954][ T4464] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.466948][T10558] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.741970][ T5113] Bluetooth: hci3: command 0x041b tx timeout [ 623.821955][T10558] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.830527][T10558] device bridge_slave_0 entered promiscuous mode [ 623.847995][T10558] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.855235][T10558] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.863740][T10558] device bridge_slave_1 entered promiscuous mode [ 625.152221][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.152315][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.323154][T10622] loop3: detected capacity change from 0 to 7 [ 626.327138][T10622] Dev loop3: unable to read RDB block 7 [ 626.327181][T10622] loop3: unable to read partition table [ 626.327249][T10622] loop3: partition table beyond EOD, truncated [ 626.327260][T10622] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 626.496185][T10558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.498294][T10558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.528886][T10558] team0: Port device team_slave_0 added [ 626.530546][T10558] team0: Port device team_slave_1 added [ 626.660050][ T5116] Bluetooth: hci3: command 0x040f tx timeout [ 626.719855][T10558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.727056][T10558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.755563][T10631] fuse: Bad value for 'fd' [ 626.766197][T10558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.788478][T10558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.801262][T10558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.857324][T10558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.347689][T10645] fuse: Bad value for 'fd' [ 628.823027][ T5117] Bluetooth: hci3: command 0x0419 tx timeout [ 628.830734][T10558] device hsr_slave_0 entered promiscuous mode [ 628.928812][T10558] device hsr_slave_1 entered promiscuous mode [ 629.606449][T10558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.632989][T10558] Cannot create hsr debugfs directory [ 629.709258][T10665] lo speed is unknown, defaulting to 1000 [ 629.778565][T10665] wlan1 speed is unknown, defaulting to 1000 [ 630.121070][T10558] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 630.284826][T10558] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 630.331340][T10558] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 631.144246][T10558] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 631.576041][T10558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.607115][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 631.675878][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 631.851989][T10558] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.152658][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 632.184521][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 632.271905][ T4515] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.278997][ T4515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.498913][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 632.526193][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 632.574894][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 632.632328][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.639496][ T4515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.292870][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 633.582748][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 633.623273][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 633.670309][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 633.698592][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 633.729172][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 633.738493][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 633.768220][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 633.777194][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 633.796728][T10558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 633.838678][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 633.904130][ T5117] wlan1 speed is unknown, defaulting to 1000 [ 633.944393][ T5117] ================================================================== [ 633.952959][ T5117] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450 [ 633.960179][ T5117] Read of size 4 at addr ffff8880612e80d8 by task kworker/0:12/5117 [ 633.968156][ T5117] [ 633.970506][ T5117] CPU: 0 PID: 5117 Comm: kworker/0:12 Not tainted syzkaller #0 [ 633.978056][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.988117][ T5117] Workqueue: infiniband ib_cache_event_task [ 633.994035][ T5117] Call Trace: [ 633.997311][ T5117] [ 634.000337][ T5117] dump_stack_lvl+0x188/0x250 [ 634.005024][ T5117] ? show_regs_print_info+0x20/0x20 [ 634.010221][ T5117] ? _printk+0xda/0x130 [ 634.014380][ T5117] ? load_image+0x400/0x400 [ 634.018877][ T5117] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 634.024346][ T5117] print_address_description+0x60/0x2d0 [ 634.029893][ T5117] ? siw_query_port+0x358/0x450 [ 634.034737][ T5117] kasan_report+0xdf/0x130 [ 634.039156][ T5117] ? siw_query_port+0x358/0x450 [ 634.044028][ T5117] siw_query_port+0x358/0x450 [ 634.048714][ T5117] ib_cache_update+0x1bf/0x9c0 [ 634.053486][ T5117] ? ib_cache_setup_one+0x5d0/0x5d0 [ 634.058702][ T5117] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.064687][ T5117] ? read_lock_is_recursive+0x10/0x10 [ 634.070067][ T5117] ib_cache_event_task+0xd4/0x1c0 [ 634.075110][ T5117] process_one_work+0x85f/0x1010 [ 634.080066][ T5117] ? worker_detach_from_pool+0x240/0x240 [ 634.085696][ T5117] ? lockdep_hardirqs_off+0x70/0x100 [ 634.090988][ T5117] ? _raw_spin_lock_irq+0xb7/0xf0 [ 634.096010][ T5117] ? _raw_spin_lock_irqsave+0x100/0x100 [ 634.101560][ T5117] ? wq_worker_running+0x97/0x170 [ 634.106594][ T5117] worker_thread+0xaa6/0x1290 [ 634.111295][ T5117] ? lockdep_hardirqs_on+0x94/0x140 [ 634.116493][ T5117] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 634.122396][ T5117] kthread+0x436/0x520 [ 634.126550][ T5117] ? rcu_lock_release+0x20/0x20 [ 634.131395][ T5117] ? kthread_blkcg+0xd0/0xd0 [ 634.136087][ T5117] ret_from_fork+0x1f/0x30 [ 634.140510][ T5117] [ 634.143610][ T5117] [ 634.145926][ T5117] The buggy address belongs to the page: [ 634.151544][ T5117] page:ffffea000184ba00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x612e8 [ 634.161685][ T5117] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 634.168794][ T5117] raw: 00fff00000000000 ffffea000185dd08 ffff8880b90409f0 0000000000000000 [ 634.177376][ T5117] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 634.185948][ T5117] page dumped because: kasan: bad access detected [ 634.192360][ T5117] page_owner tracks the page as freed [ 634.197716][ T5117] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_ZERO), pid 4188, ts 57394689574, free_ts 633927645809 [ 634.217077][ T5117] get_page_from_freelist+0x1bbd/0x1ca0 [ 634.222741][ T5117] __alloc_pages+0x1ee/0x480 [ 634.227336][ T5117] kmalloc_large_node+0x7d/0x190 [ 634.232360][ T5117] __kmalloc_node+0x232/0x3b0 [ 634.237127][ T5117] kvmalloc_node+0x84/0x130 [ 634.241622][ T5117] alloc_netdev_mqs+0x84/0xc40 [ 634.246391][ T5117] ieee80211_if_add+0x11f8/0x1dc0 [ 634.251413][ T5117] ieee80211_register_hw+0x2bde/0x3af0 [ 634.256905][ T5117] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 634.262710][ T5117] hwsim_new_radio_nl+0xa6f/0xc40 [ 634.267824][ T5117] genl_rcv_msg+0xcea/0xf90 [ 634.272327][ T5117] netlink_rcv_skb+0x1f5/0x440 [ 634.277085][ T5117] genl_rcv+0x24/0x40 [ 634.281063][ T5117] netlink_unicast+0x774/0x920 [ 634.285825][ T5117] netlink_sendmsg+0x8ba/0xbe0 [ 634.290587][ T5117] __sys_sendto+0x46d/0x620 [ 634.295094][ T5117] page last free stack trace: [ 634.299768][ T5117] free_unref_page_prepare+0x637/0x6c0 [ 634.305249][ T5117] free_unref_page+0x8f/0x2a0 [ 634.309940][ T5117] free_nonslab_page+0xe2/0x150 [ 634.314791][ T5117] device_release+0x92/0x1c0 [ 634.319847][ T5117] kobject_put+0x21d/0x460 [ 634.324289][ T5117] netdev_run_todo+0x8f4/0xa70 [ 634.329090][ T5117] ieee80211_unregister_hw+0x5a/0x220 [ 634.334470][ T5117] mac80211_hwsim_del_radio+0x282/0x470 [ 634.340017][ T5117] hwsim_exit_net+0x589/0x650 [ 634.344688][ T5117] cleanup_net+0x706/0xba0 [ 634.349101][ T5117] process_one_work+0x85f/0x1010 [ 634.354037][ T5117] worker_thread+0xaa6/0x1290 [ 634.358713][ T5117] kthread+0x436/0x520 [ 634.362777][ T5117] ret_from_fork+0x1f/0x30 [ 634.367193][ T5117] [ 634.369510][ T5117] Memory state around the buggy address: [ 634.375134][ T5117] ffff8880612e7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 634.383190][ T5117] ffff8880612e8000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 634.391244][ T5117] >ffff8880612e8080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 634.399291][ T5117] ^ [ 634.406215][ T5117] ffff8880612e8100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 634.414274][ T5117] ffff8880612e8180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 634.422324][ T5117] ================================================================== [ 634.430373][ T5117] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 635.381551][ T5117] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 635.388777][ T5117] CPU: 0 PID: 5117 Comm: kworker/0:12 Tainted: G B syzkaller #0 [ 635.397709][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.407760][ T5117] Workqueue: infiniband ib_cache_event_task [ 635.413663][ T5117] Call Trace: [ 635.416941][ T5117] [ 635.419869][ T5117] dump_stack_lvl+0x188/0x250 [ 635.424545][ T5117] ? show_regs_print_info+0x20/0x20 [ 635.429740][ T5117] ? load_image+0x400/0x400 [ 635.434245][ T5117] panic+0x2e5/0x810 [ 635.438133][ T5117] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 635.444282][ T5117] ? bpf_jit_dump+0xd0/0xd0 [ 635.448781][ T5117] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 635.454754][ T5117] ? _raw_spin_unlock+0x40/0x40 [ 635.459600][ T5117] ? siw_query_port+0x358/0x450 [ 635.464447][ T5117] check_panic_on_warn+0x80/0xa0 [ 635.469380][ T5117] ? siw_query_port+0x358/0x450 [ 635.474224][ T5117] end_report+0x6d/0xf0 [ 635.478371][ T5117] kasan_report+0x102/0x130 [ 635.482870][ T5117] ? siw_query_port+0x358/0x450 [ 635.487716][ T5117] siw_query_port+0x358/0x450 [ 635.492389][ T5117] ib_cache_update+0x1bf/0x9c0 [ 635.497160][ T5117] ? ib_cache_setup_one+0x5d0/0x5d0 [ 635.502442][ T5117] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 635.508424][ T5117] ? read_lock_is_recursive+0x10/0x10 [ 635.513797][ T5117] ib_cache_event_task+0xd4/0x1c0 [ 635.518824][ T5117] process_one_work+0x85f/0x1010 [ 635.523768][ T5117] ? worker_detach_from_pool+0x240/0x240 [ 635.529403][ T5117] ? lockdep_hardirqs_off+0x70/0x100 [ 635.534688][ T5117] ? _raw_spin_lock_irq+0xb7/0xf0 [ 635.539707][ T5117] ? _raw_spin_lock_irqsave+0x100/0x100 [ 635.545246][ T5117] ? wq_worker_running+0x97/0x170 [ 635.550279][ T5117] worker_thread+0xaa6/0x1290 [ 635.554979][ T5117] ? lockdep_hardirqs_on+0x94/0x140 [ 635.560186][ T5117] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 635.566077][ T5117] kthread+0x436/0x520 [ 635.570165][ T5117] ? rcu_lock_release+0x20/0x20 [ 635.575026][ T5117] ? kthread_blkcg+0xd0/0xd0 [ 635.579621][ T5117] ret_from_fork+0x1f/0x30 [ 635.584046][ T5117] [ 635.587154][ T5117] Kernel Offset: disabled [ 635.591461][ T5117] Rebooting in 86400 seconds..