last executing test programs: 5.436005367s ago: executing program 4 (id=6215): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40), 0x1, 0xeb1, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 5.144666492s ago: executing program 4 (id=6219): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$unix(0x1, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 5.09189915s ago: executing program 0 (id=6220): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040efc07140c"], 0xff) r0 = getpgrp(0x0) ioprio_set$pid(0x1, r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000100)={&(0x7f0000000000), 0x14, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x200000, 0x0, 0x8}, 0x18) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000040)) recvfrom(r1, &(0x7f0000000300)=""/4096, 0x1000, 0x2, &(0x7f0000001300)=@hci={0x1f, 0x3}, 0x80) 5.015614062s ago: executing program 4 (id=6221): r0 = socket(0x0, 0x3, 0x0) write(r0, &(0x7f0000000140)="f60000001a000708ab092504090007000aab0700a90100001d60369321001e00ff800000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030026000000140000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175", 0xf6) 4.924052796s ago: executing program 4 (id=6222): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nodecompose}]}, 0x0, 0x5cf, &(0x7f0000000680)="$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") 4.775924049s ago: executing program 4 (id=6223): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x80, 0x80800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2, @ANYBLOB="008000000000000079eb3604c8f42ae097206359db83986007705e9562b0b91835bb93be016ebefda5d6177e9881eb9bbc07e408c12039cf47158e9d4e58ce8c450199c6238e59a85a896861283c7dbe"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r2, @ANYBLOB="00000000040000001400128008000100677265000800028004001200"], 0x34}}, 0x0) 4.225310305s ago: executing program 1 (id=6224): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x24}}, 0x0) 4.130754769s ago: executing program 1 (id=6225): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002900), 0x0, 0x0) fchown(r0, 0x0, 0x0) 3.987788641s ago: executing program 1 (id=6226): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x1c, 0x10, 0x0, @in={0xa, 0x0, @empty}, @in={0x2, 0x0, @local}}}, 0x118) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)={0x3c, r5, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40082) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r7, @ANYBLOB="24003080200003"], 0x40}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x40055) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000fedbdf25150000000400140008000100", @ANYRES32=0x0, @ANYBLOB="07020000"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3eb27e14cf62b3acbf692fb0fcdb053446ba81a24170db706d2f2021dcc4d509befc5011fb65955d7f220ebf95b4d66cb11083c8b9ef6b5c4ad19c41edc631139377c3541b9454ad87", 0x49}, {&(0x7f00000005c0)="07222a1a2ef27e4ef0449b27a3d07c957a26944bb45f6d91869768f31671aeabaa228089b1f3c90a411304d3ebbc4ae37ad9fe89115805e1310e448e413ee1e7557b2633f71a028ed12ff12bb80cb8fbd288262c3f5e5564ff0116820fe8d2", 0x5f}], 0x100001bf, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x80, [@loopback, @loopback, @broadcast, @private=0xa010101]}, @end, @noop, @rr={0x7, 0x3, 0x25}, @timestamp_addr={0x44, 0x34, 0x6b, 0x1, 0xa, [{@loopback, 0x4}, {@remote, 0x9}, {@loopback, 0x2}, {@private=0xa010102, 0x4}, {@rand_addr=0x64010102, 0x7}, {@rand_addr=0x64010101, 0x8}]}, @end, @lsrr={0x83, 0x2f, 0x54, [@local, @private=0xa010100, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast2, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x12, "f96629427b77f36ac4c5e1198c18505c"}]}}}], 0xd8}, 0x8004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000080001000000000041ac00a4e8677f9441632a2dca5244694a0b0211995c57814e881e23"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r8, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'wlan1\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'wlan1\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x70}}, 0x8) 3.970791714s ago: executing program 1 (id=6227): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x4e, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000080)=0x4d, 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000004c0)={0x1d, r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@tracing}, 0x40) socket$inet6(0xa, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000f40)=ANY=[@ANYBLOB="ff400008000000000000"], 0xa) socket(0x0, 0x0, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x28, 0x8, 0x20000000, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) 2.463495208s ago: executing program 3 (id=6238): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.051427362s ago: executing program 0 (id=6240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="b800018ee80fc72c0f0150530f2294652e2e0f235f3ef30f1ee566aa0f06660f380a1566b80f00008066ba000000000f300f20d86635200000009bd9ee", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) capset(&(0x7f0000000000), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.747657449s ago: executing program 0 (id=6244): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$unix(0x1, 0x5, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 1.61506589s ago: executing program 2 (id=6245): r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000140)="f60000001a000708ab092504090007000aab0700a90100001d60369321001e00ff800000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030026000000140000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175", 0xf6) 1.613964909s ago: executing program 0 (id=6246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000), 0x10) 1.567663866s ago: executing program 2 (id=6247): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(r0, &(0x7f0000000140)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x31}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x0, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="869b132bd023614380db065e0361c17ea4a123b3bb9e097016930f86e5770aad078c4c277a1395029b04e6e395582175a5a51337a9cca6caa5dbca7d39f50d3c0953ced75eb50ab4bd376a823a25e25fedb026cc0bfe050a853add29e084638e80ea15d545bc95fa88627d7655fabad382915947827999877ccda8219594061cf48fe5dab16ef146649e7e028814bfaf30cab93eb504eed401a2fb150716a6846135fbe3ed3b14696dfa17f7f4e2c25287e53088614a50682c0c2fc16acefd8d9efd4fda8c9e43260fc9fdfb1c88e806ed60f2ada4838b9121780a8f84cdbf51e94b168394c9548cf4", 0xe9}, {0x0}], 0x2}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) bind$alg(r9, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000003c06000018110000", @ANYRES32=r3, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff0000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r10, 0x4) socket$nl_route(0x10, 0x3, 0x0) 1.54570193s ago: executing program 0 (id=6248): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)={0x3c, r5, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40082) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r7, @ANYBLOB="24003080200003"], 0x40}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x40055) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000fedbdf25150000000400140008000100", @ANYRES32=0x0, @ANYBLOB="07020000"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3eb27e14cf62b3acbf692fb0fcdb053446ba81a24170db706d2f2021dcc4d509befc5011fb65955d7f220ebf95b4d66cb11083c8b9ef6b5c4ad19c41edc631139377c3541b9454ad87", 0x49}, {&(0x7f00000005c0)="07222a1a2ef27e4ef0449b27a3d07c957a26944bb45f6d91869768f31671aeabaa228089b1f3c90a411304d3ebbc4ae37ad9fe89115805e1310e448e413ee1e7557b2633f71a028ed12ff12bb80cb8fbd288262c3f5e5564ff0116820fe8d2", 0x5f}], 0x100001bf, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x80, [@loopback, @loopback, @broadcast, @private=0xa010101]}, @end, @noop, @rr={0x7, 0x3, 0x25}, @timestamp_addr={0x44, 0x34, 0x6b, 0x1, 0xa, [{@loopback, 0x4}, {@remote, 0x9}, {@loopback, 0x2}, {@private=0xa010102, 0x4}, {@rand_addr=0x64010102, 0x7}, {@rand_addr=0x64010101, 0x8}]}, @end, @lsrr={0x83, 0x2f, 0x54, [@local, @private=0xa010100, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast2, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x12, "f96629427b77f36ac4c5e1198c18505c"}]}}}], 0xd8}, 0x8004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000080001000000000041ac00a4e8677f9441632a2dca5244694a0b0211995c57814e881e23"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r8, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'wlan1\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'wlan1\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x70}}, 0x8) 1.42269654s ago: executing program 4 (id=6249): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) unshare(0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792"}}}, 0xd) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000dc7a2240c80a2103c9a101020301090212000100000000"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x2, 0x0, @local}, 0x1c) socket(0x2, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r4) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsopen(&(0x7f0000000500)='v7\x00', 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f00000017c0)=0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rxrpc(0x21, 0x2, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40082104, &(0x7f0000000000)) r6 = syz_open_procfs(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x1ff) preadv(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) 1.42218901s ago: executing program 0 (id=6250): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040efc07140c"], 0xff) r0 = getpgrp(0x0) ioprio_set$pid(0x1, r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000100)={&(0x7f0000000000), 0x14, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x200000, 0x0, 0x8}, 0x18) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000040)) recvfrom(r1, &(0x7f0000000300)=""/4096, 0x1000, 0x2, &(0x7f0000001300)=@hci={0x1f, 0x3}, 0x80) 1.239773548s ago: executing program 1 (id=6251): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000009880), 0x1, 0x97f5, &(0x7f00000098c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') 1.052057967s ago: executing program 2 (id=6252): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001b80), 0x1, 0x0) writev(r0, &(0x7f0000001dc0)=[{&(0x7f0000001bc0)="c0", 0x1}, {0x0}], 0x2) 1.018154222s ago: executing program 2 (id=6253): socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001400215000000000000000000a84"], 0x48}}, 0x0) 889.041932ms ago: executing program 2 (id=6254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="b800018ee80fc72c0f0150530f2294652e2e0f235f3ef30f1ee566aa0f06660f380a1566b80f00008066ba000000000f300f20d86635200000009bd9ee", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) capset(&(0x7f0000000000), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 692.080473ms ago: executing program 2 (id=6255): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff000) creat(&(0x7f0000000040)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x0, 0x1) open(0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) fallocate(r0, 0x2b, 0xfff, 0x10000) 549.948495ms ago: executing program 3 (id=6256): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$unix(0x1, 0x5, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 378.101661ms ago: executing program 3 (id=6257): r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000140)="f60000001a000708ab092504090007000aab0700a90100001d60369321001e00ff800000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030026000000140000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175", 0xf6) 224.038415ms ago: executing program 3 (id=6258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000), 0x10) 180.411432ms ago: executing program 1 (id=6259): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x80, 0x80800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2, @ANYBLOB="008000000000000079eb3604c8f42ae097206359db83986007705e9562b0b91835bb93be016ebefda5d6177e9881eb9bbc07e408c12039cf47158e9d4e58ce8c450199c6238e59a85a896861283c7dbe"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r2, @ANYBLOB="00000000040000001400128008000100677265000800028004001200"], 0x34}}, 0x0) 172.761223ms ago: executing program 3 (id=6260): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x28) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x0) 0s ago: executing program 3 (id=6261): r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x405c) kernel console output (not intermixed with test programs): 2963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.005208][T21236] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1167.034540][ T2963] usb 1-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 1167.057407][ T2963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.093910][ T2963] usb 1-1: config 0 descriptor?? [ 1167.385418][T21236] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1167.405536][T21236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.452516][T21236] usb 3-1: config 0 descriptor?? [ 1167.455336][ T3598] usbhid 5-1:0.0: can't add hid device: -71 [ 1167.464188][ T3598] usbhid: probe of 5-1:0.0 failed with error -71 [ 1167.496677][T21236] cp210x 3-1:0.0: cp210x converter detected [ 1167.516555][ T3598] usb 5-1: USB disconnect, device number 31 [ 1167.532921][T22138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5640'. [ 1167.839212][ T2963] logitech 0003:046D:C219.00C9: invalid report_size 213086753 [ 1167.862184][ T2963] logitech 0003:046D:C219.00C9: item 0 4 1 7 parsing failed [ 1167.877688][ T2963] logitech 0003:046D:C219.00C9: parse failed [ 1167.884322][ T2963] logitech: probe of 0003:046D:C219.00C9 failed with error -22 [ 1167.916846][T22130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.967885][T21236] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1167.982110][T22130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.026808][T21236] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1168.042293][ T3598] usb 1-1: USB disconnect, device number 113 [ 1168.232209][T22130] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5638'. [ 1168.249280][ T2963] usb 3-1: USB disconnect, device number 27 [ 1168.266721][ T2963] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1168.280132][ T2963] cp210x 3-1:0.0: device disconnected [ 1168.355523][T21236] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1168.385250][ T14] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1168.728943][ T14] usb 4-1: no configurations [ 1168.733701][ T14] usb 4-1: can't read configurations, error -22 [ 1168.775532][T21236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.801345][T21236] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1168.885459][ T14] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1168.991832][T21236] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1169.001231][T21236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.018587][T21236] usb 5-1: Product: syz [ 1169.022931][T21236] usb 5-1: Manufacturer: syz [ 1169.032662][T21236] usb 5-1: SerialNumber: syz [ 1169.059559][T21236] usb 5-1: config 0 descriptor?? [ 1169.176489][ T14] usb 4-1: no configurations [ 1169.186364][ T14] usb 4-1: can't read configurations, error -22 [ 1169.221940][ T14] usb usb4-port1: attempt power cycle [ 1169.280954][T22169] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 1169.385467][ T2963] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1170.089038][ T27] audit: type=1326 audit(1719618825.546:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22147 comm="syz.4.5645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ff9175b99 code=0x0 [ 1170.205045][T22177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5653'. [ 1170.245234][ T2963] usb 1-1: Using ep0 maxpacket: 16 [ 1170.405392][ T2963] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.405457][ T14] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1170.429759][ T2963] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.459252][ T2963] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1170.494632][ T2963] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1170.502297][ T2963] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1170.519001][ T2963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.540420][ T2963] usb 1-1: config 0 descriptor?? [ 1170.565510][ T14] usb 4-1: no configurations [ 1170.570784][ T14] usb 4-1: can't read configurations, error -22 [ 1170.735258][ T14] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1170.876009][ T14] usb 4-1: no configurations [ 1170.880673][ T14] usb 4-1: can't read configurations, error -22 [ 1170.888355][ T14] usb usb4-port1: unable to enumerate USB device [ 1171.085207][T21236] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1171.245793][ T2963] usbhid 1-1:0.0: can't add hid device: -71 [ 1171.252484][ T2963] usbhid: probe of 1-1:0.0 failed with error -71 [ 1171.302859][ T2963] usb 1-1: USB disconnect, device number 114 [ 1171.339256][ T7] usb 5-1: USB disconnect, device number 32 [ 1171.606737][T21236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.618426][T21236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.628356][T21236] usb 3-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 1171.631254][T22190] dccp_close: ABORT with 726 bytes unread [ 1171.637461][T21236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.639364][T21236] usb 3-1: config 0 descriptor?? [ 1172.570712][T22214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5664'. [ 1172.646612][T22217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5666'. [ 1172.676765][T22217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5666'. [ 1172.704033][T22220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5668'. [ 1172.713610][T22220] device bridge_slave_1 left promiscuous mode [ 1172.721798][T22220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.732520][T22220] device bridge_slave_0 left promiscuous mode [ 1172.744521][T22220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.788689][ T6770] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1172.877593][T21236] logitech 0003:046D:C219.00CA: invalid report_size 213086753 [ 1172.890987][T21236] logitech 0003:046D:C219.00CA: item 0 4 1 7 parsing failed [ 1172.906862][T21236] logitech 0003:046D:C219.00CA: parse failed [ 1172.927492][T21236] logitech: probe of 0003:046D:C219.00CA failed with error -22 [ 1173.049319][T22223] loop0: detected capacity change from 0 to 512 [ 1173.130431][ T2963] usb 3-1: USB disconnect, device number 28 [ 1173.155319][ T6770] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.212603][ T6770] usb 5-1: config 0 has no interfaces? [ 1174.223016][ T6770] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1174.243996][ T6770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.271361][ T6770] usb 5-1: config 0 descriptor?? [ 1174.337121][T22223] loop0: detected capacity change from 0 to 256 [ 1174.445382][T21238] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1174.593239][ T6770] usb 5-1: USB disconnect, device number 33 [ 1174.635336][ T3598] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1174.695221][T21238] usb 4-1: Using ep0 maxpacket: 16 [ 1174.815382][T21238] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.833838][T21238] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.844198][T21238] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1174.861240][T21238] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1174.870045][T21238] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1174.879734][T21238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.895301][ T3598] usb 2-1: Using ep0 maxpacket: 32 [ 1174.899510][T21238] usb 4-1: config 0 descriptor?? [ 1175.045343][ T3598] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.056598][ T3598] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.067069][ T3598] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1175.077390][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.136431][ T3598] hub 2-1:4.0: USB hub found [ 1175.365372][ T3598] hub 2-1:4.0: 2 ports detected [ 1176.325335][T21238] usbhid 4-1:0.0: can't add hid device: -71 [ 1176.335374][T21238] usbhid: probe of 4-1:0.0 failed with error -71 [ 1176.358551][T21238] usb 4-1: USB disconnect, device number 49 [ 1176.535461][ T3598] hub 2-1:4.0: hub_hub_status failed (err = -32) [ 1176.541871][ T3598] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 1176.669086][T22262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5679'. [ 1177.149185][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.155592][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.245192][T21238] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1177.628854][T21238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.644545][T21238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.661591][T21238] usb 4-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 1177.671390][T21238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.720613][T21238] usb 4-1: config 0 descriptor?? [ 1178.055263][ T14] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1178.425420][ T14] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1178.440883][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.467470][T21238] logitech 0003:046D:C219.00CB: invalid report_size 213086753 [ 1178.476875][ T14] usb 3-1: config 0 descriptor?? [ 1178.488739][T21238] logitech 0003:046D:C219.00CB: item 0 4 1 7 parsing failed [ 1178.499914][T21238] logitech 0003:046D:C219.00CB: parse failed [ 1178.510342][T21238] logitech: probe of 0003:046D:C219.00CB failed with error -22 [ 1178.523019][ T14] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1178.664066][T21238] usb 4-1: USB disconnect, device number 50 [ 1179.085241][ T7] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1179.245332][ T14] gspca_spca508: reg_read err -110 [ 1179.265369][ T14] gspca_spca508: reg_read err -32 [ 1179.285332][ T14] gspca_spca508: reg_read err -32 [ 1179.305684][ T14] gspca_spca508: reg_read err -32 [ 1179.325311][ T14] gspca_spca508: reg write: error -32 [ 1179.332009][ T14] spca508: probe of 3-1:0.0 failed with error -32 [ 1179.339088][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 1179.455489][ T7] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.472189][ T7] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.490439][ T7] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1179.504058][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1179.517698][ T7] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1179.531286][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.559371][ T7] usb 5-1: config 0 descriptor?? [ 1179.614479][ T6770] usb 2-1: reset high-speed USB device number 57 using dummy_hcd [ 1179.655419][ T6770] usb 2-1: device reset changed ep0 maxpacket size! [ 1179.672789][ T6770] usb 2-1: USB disconnect, device number 57 [ 1179.791083][T21236] usb 3-1: USB disconnect, device number 29 [ 1180.145204][ T6770] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1180.275447][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 1180.285318][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 1180.375776][ T7] usb 5-1: USB disconnect, device number 34 [ 1180.600825][ T6770] usb 2-1: device not accepting address 58, error -71 [ 1181.498693][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 1182.275408][ T7] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1182.646736][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.686389][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.721823][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 1182.751722][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.781801][ T7] usb 5-1: config 0 descriptor?? [ 1183.115182][ T6770] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1183.215224][ T14] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1183.365229][ T6770] usb 3-1: Using ep0 maxpacket: 16 [ 1183.501248][ T6770] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.507489][ T7] logitech 0003:046D:C219.00CC: invalid report_size 213086753 [ 1183.519776][ T6770] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.535569][ T7] logitech 0003:046D:C219.00CC: item 0 4 1 7 parsing failed [ 1183.551643][ T6770] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1183.553778][ T7] logitech 0003:046D:C219.00CC: parse failed [ 1183.585016][ T6770] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1183.595588][ T7] logitech: probe of 0003:046D:C219.00CC failed with error -22 [ 1183.605669][ T6770] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1183.613724][ T14] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1183.624895][ T6770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.635199][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.670776][ T6770] usb 3-1: config 0 descriptor?? [ 1183.672855][ T14] usb 2-1: config 0 descriptor?? [ 1183.710065][ T7] usb 5-1: USB disconnect, device number 35 [ 1183.727443][ T14] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1184.362381][T22373] loop0: detected capacity change from 0 to 512 [ 1184.385291][ T6770] usbhid 3-1:0.0: can't add hid device: -71 [ 1184.392688][ T6770] usbhid: probe of 3-1:0.0 failed with error -71 [ 1184.458279][ T6770] usb 3-1: USB disconnect, device number 30 [ 1184.465382][ T14] gspca_spca508: reg_read err -110 [ 1184.485345][ T14] gspca_spca508: reg_read err -32 [ 1184.515366][ T14] gspca_spca508: reg_read err -32 [ 1184.576803][ T14] gspca_spca508: reg_read err -32 [ 1184.590209][T22373] loop0: detected capacity change from 0 to 256 [ 1184.605331][ T14] gspca_spca508: reg write: error -32 [ 1184.614491][ T14] spca508: probe of 2-1:0.0 failed with error -32 [ 1184.909881][ T6770] usb 2-1: USB disconnect, device number 60 [ 1186.545281][ T14] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1186.675281][T21238] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1186.777024][T22414] loop0: detected capacity change from 0 to 32768 [ 1186.828667][T22414] Dev loop0 SGI disklabel: csum bad, label corrupted [ 1186.851232][ T3002] Dev loop0 SGI disklabel: csum bad, label corrupted [ 1186.915320][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.926749][T21238] usb 2-1: Using ep0 maxpacket: 16 [ 1186.932132][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.948263][ T14] usb 3-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 1186.959137][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.977639][ T14] usb 3-1: config 0 descriptor?? [ 1187.045422][T21238] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.065179][T21238] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1187.095189][T21238] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1187.133057][T21238] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1187.143136][T21238] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1187.159899][T21238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.183716][T21238] usb 2-1: config 0 descriptor?? [ 1187.621823][T22449] netlink: 'syz.4.5734': attribute type 21 has an invalid length. [ 1187.640030][T22449] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5734'. [ 1187.697154][ T14] logitech 0003:046D:C219.00CD: invalid report_size 213086753 [ 1187.725462][ T14] logitech 0003:046D:C219.00CD: item 0 4 1 7 parsing failed [ 1187.746017][ T14] logitech 0003:046D:C219.00CD: parse failed [ 1187.758496][ T14] logitech: probe of 0003:046D:C219.00CD failed with error -22 [ 1187.899343][ T14] usb 3-1: USB disconnect, device number 31 [ 1187.945486][T21238] usbhid 2-1:0.0: can't add hid device: -71 [ 1187.955983][T21238] usbhid: probe of 2-1:0.0 failed with error -71 [ 1188.003241][T21238] usb 2-1: USB disconnect, device number 61 [ 1188.025227][ T3597] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1188.415281][ T3597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.435214][ T3597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.465255][ T3597] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1188.512527][ T3597] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1188.543217][ T3597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.726871][ T3597] usb 5-1: config 0 descriptor?? [ 1188.827156][T22458] autofs4:pid:22458:autofs_fill_super: called with bogus options [ 1189.982761][ T3597] gembird 0003:11FF:3331.00CE: unknown main item tag 0x0 [ 1189.995416][ T3597] gembird 0003:11FF:3331.00CE: unknown main item tag 0x0 [ 1190.002956][ T3597] gembird 0003:11FF:3331.00CE: unknown main item tag 0x0 [ 1190.011212][ T3597] gembird 0003:11FF:3331.00CE: unknown main item tag 0x0 [ 1190.011454][T22449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.030070][ T3597] gembird 0003:11FF:3331.00CE: unknown main item tag 0x0 [ 1190.088504][ T3597] gembird 0003:11FF:3331.00CE: unknown main item tag 0x0 [ 1190.105051][T22449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.132146][ T3597] gembird 0003:11FF:3331.00CE: unknown main item tag 0x0 [ 1190.164954][ T3597] gembird 0003:11FF:3331.00CE: item fetching failed at offset 19/41 [ 1190.214640][ T3597] gembird: probe of 0003:11FF:3331.00CE failed with error -22 [ 1190.271030][ T3597] usb 5-1: USB disconnect, device number 36 [ 1190.579108][T21236] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1190.616704][T22491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5743'. [ 1190.980974][T21236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.994893][T21236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.010531][T21236] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1191.020394][T21236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.043400][T21236] usb 2-1: config 0 descriptor?? [ 1191.075329][ T3598] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1191.085591][ T7] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1191.335238][ T3598] usb 3-1: Using ep0 maxpacket: 16 [ 1191.415415][T21238] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1191.455534][ T7] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1191.467579][ T7] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1191.477570][ T7] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1191.485463][ T3598] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.486664][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.503954][ T3598] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.515884][ T3597] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1191.523848][ T3598] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1191.529990][T22497] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1191.537037][ T3598] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1191.546294][T21236] keytouch 0003:0926:3333.00CF: fixing up Keytouch IEC report descriptor [ 1191.552165][ T3598] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1191.569612][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.570883][T21236] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00CF/input/input25 [ 1191.597607][ T3598] usb 3-1: config 0 descriptor?? [ 1191.660734][T21236] keytouch 0003:0926:3333.00CF: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1191.784936][T21236] keytouch 0003:0926:3333.00CF: implement() called with too large value 12 (n: 1)! (kworker/0:8) [ 1191.803473][T21238] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1191.822153][T21238] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1191.829650][ T3593] usb 5-1: USB disconnect, device number 37 [ 1191.833831][T21238] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1191.854420][ T6770] usb 2-1: USB disconnect, device number 62 [ 1191.857101][T21238] usb 4-1: config 1 has no interface number 0 [ 1191.869388][T21238] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1191.880960][T21238] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1191.893309][T21238] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1191.907409][T21238] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1191.915715][ T3597] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.918991][T21238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.938767][ T3597] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1191.965525][T22502] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1191.987825][T21238] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1192.125559][ T3597] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1192.134989][ T3597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.146902][ T3597] usb 1-1: Product: syz [ 1192.151137][ T3597] usb 1-1: Manufacturer: syz [ 1192.159742][ T3597] usb 1-1: SerialNumber: syz [ 1192.168254][ T3597] usb 1-1: config 0 descriptor?? [ 1192.295469][ T3598] usbhid 3-1:0.0: can't add hid device: -71 [ 1192.305414][ T3598] usbhid: probe of 3-1:0.0 failed with error -71 [ 1192.321672][ T3598] usb 3-1: USB disconnect, device number 32 [ 1192.591795][ T27] audit: type=1326 audit(1719618848.046:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22505 comm="syz.0.5750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaab775b99 code=0x0 [ 1193.421830][T22534] Cannot find add_set index 0 as target [ 1194.712694][ T3598] usb 1-1: USB disconnect, device number 115 [ 1195.046720][T21238] snd_usb_pod 4-1:1.1: set_interface failed [ 1195.086561][T21238] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1195.101588][T21238] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1195.133495][T21238] usb 4-1: USB disconnect, device number 51 [ 1195.430294][ T3598] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1195.598570][ T7] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1195.695195][ T3598] usb 1-1: Using ep0 maxpacket: 16 [ 1195.729133][T22577] autofs4:pid:22577:autofs_fill_super: called with bogus options [ 1195.865778][ T3598] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.877667][ T3598] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.890109][ T3598] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1196.409334][ T3598] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1196.455394][ T3598] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1196.480380][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.495354][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 1196.516746][ T3598] usb 1-1: config 0 descriptor?? [ 1196.615463][ T7] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1196.633967][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.664654][ T7] usb 5-1: config 0 descriptor?? [ 1196.670378][T21238] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1197.065263][T21238] usb 2-1: Using ep0 maxpacket: 32 [ 1197.765367][T21238] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.776435][T21238] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.786619][T21238] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1197.796069][T21238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.856413][T21238] hub 2-1:4.0: USB hub found [ 1197.955461][ T3598] usbhid 1-1:0.0: can't add hid device: -71 [ 1197.967729][ T3598] usbhid: probe of 1-1:0.0 failed with error -71 [ 1197.988618][ T3598] usb 1-1: USB disconnect, device number 116 [ 1198.080737][T21238] hub 2-1:4.0: 2 ports detected [ 1198.327763][T21238] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1198.341492][T21238] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1198.585591][T21238] usb 2-1: USB disconnect, device number 63 [ 1199.415356][ T7] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1199.432144][ T7] asix: probe of 5-1:0.0 failed with error -71 [ 1199.448804][ T7] usb 5-1: USB disconnect, device number 38 [ 1200.179848][ T27] audit: type=1804 audit(1719618855.636:152): pid=22635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5785" name="/root/syzkaller.BFpBPq/250/file0" dev="sda1" ino=2056 res=1 errno=0 [ 1200.317520][ T27] audit: type=1800 audit(1719618855.776:153): pid=22639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5788" name="file1" dev="sda1" ino=2040 res=0 errno=0 [ 1200.375699][ T27] audit: type=1804 audit(1719618855.806:154): pid=22639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5788" name="/root/syzkaller.TUIPd7/106/file1" dev="sda1" ino=2040 res=1 errno=0 [ 1200.685293][ T7] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1200.935207][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 1201.055792][ T7] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.088083][ T7] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.113738][ T7] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1201.158966][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1201.167384][ T7] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1201.186166][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.234949][ T7] usb 3-1: config 0 descriptor?? [ 1201.944931][T22680] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1201.951552][T22680] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1202.006670][T22680] vhci_hcd vhci_hcd.0: Device attached [ 1202.115474][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 1202.123981][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 1202.146196][ T7] usb 3-1: USB disconnect, device number 33 [ 1202.265730][ T3598] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1202.295248][ T3593] usb 17-1: new low-speed USB device number 4 using vhci_hcd [ 1202.630461][T22699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5805'. [ 1202.661511][T22699] netlink: 892 bytes leftover after parsing attributes in process `syz.2.5805'. [ 1202.731952][T22702] loop0: detected capacity change from 0 to 512 [ 1202.859855][ T3598] usb 5-1: New USB device found, idVendor=0cf3, idProduct=20ff, bcdDevice=10.70 [ 1202.872022][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.777714][ T3598] usb 5-1: Product: syz [ 1203.786854][ T3598] usb 5-1: Manufacturer: syz [ 1203.805232][ T7] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1203.827899][ T3598] usb 5-1: SerialNumber: syz [ 1203.834685][T22697] loop0: detected capacity change from 0 to 256 [ 1203.854765][ T3598] usb 5-1: config 0 descriptor?? [ 1203.937745][ T3598] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1204.175300][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 1204.181001][T22680] 9pnet_fd: Insufficient options for proto=fd [ 1204.223694][T21237] usb 5-1: USB disconnect, device number 39 [ 1204.295531][ T7] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1204.305712][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.323003][ T7] usb 2-1: config 0 descriptor?? [ 1204.445762][T22681] vhci_hcd: connection reset by peer [ 1204.595399][T11706] vhci_hcd: stop threads [ 1204.600782][T11706] vhci_hcd: release socket [ 1204.634943][T11706] vhci_hcd: disconnect device [ 1205.375259][ T3597] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1205.655205][ T3597] usb 5-1: Using ep0 maxpacket: 16 [ 1205.805519][ T3597] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.827237][ T3597] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.850120][ T3597] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1205.869898][ T3597] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1205.876779][ T3597] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1205.886541][ T3597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.907046][ T3597] usb 5-1: config 0 descriptor?? [ 1207.325306][ T3597] usbhid 5-1:0.0: can't add hid device: -71 [ 1207.331992][ T3597] usbhid: probe of 5-1:0.0 failed with error -71 [ 1207.353305][ T3597] usb 5-1: USB disconnect, device number 40 [ 1207.515962][ T7] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1207.593924][ T7] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1207.751759][ T7] asix: probe of 2-1:0.0 failed with error -71 [ 1207.974921][ T7] usb 2-1: USB disconnect, device number 64 [ 1208.205297][ T3593] vhci_hcd: vhci_device speed not set [ 1209.391257][T22796] device team0 entered promiscuous mode [ 1209.400835][T22796] device team_slave_0 entered promiscuous mode [ 1209.431433][T22796] device team_slave_1 entered promiscuous mode [ 1209.439120][T22795] device team0 left promiscuous mode [ 1209.455194][T22795] device team_slave_0 left promiscuous mode [ 1209.461290][T22795] device team_slave_1 left promiscuous mode [ 1209.918580][T21237] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1210.165377][T21237] usb 3-1: Using ep0 maxpacket: 16 [ 1210.285671][T21237] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.322174][T21237] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.371517][T21237] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1210.412722][T21237] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1210.424724][T21237] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1210.440512][T21237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.282823][T21237] usb 3-1: config 0 descriptor?? [ 1211.835633][T22835] device team0 entered promiscuous mode [ 1211.841256][T22835] device team_slave_0 entered promiscuous mode [ 1211.854268][T22835] device team_slave_1 entered promiscuous mode [ 1211.863252][T22834] device team0 left promiscuous mode [ 1211.869215][T22834] device team_slave_0 left promiscuous mode [ 1211.875776][T22834] device team_slave_1 left promiscuous mode [ 1212.103459][T22838] loop0: detected capacity change from 0 to 512 [ 1212.895233][T21237] usbhid 3-1:0.0: can't add hid device: -71 [ 1212.901573][T21237] usbhid: probe of 3-1:0.0 failed with error -71 [ 1212.924141][T21237] usb 3-1: USB disconnect, device number 34 [ 1213.067774][T22845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5849'. [ 1213.108685][T22845] device team0 entered promiscuous mode [ 1213.140994][T22845] device team_slave_0 entered promiscuous mode [ 1213.163285][T22845] device team_slave_1 entered promiscuous mode [ 1213.179826][T22838] loop0: detected capacity change from 0 to 256 [ 1213.304616][T22848] team0: Port device team_slave_0 removed [ 1213.362766][T22844] device team0 left promiscuous mode [ 1213.387356][T22844] device team_slave_1 left promiscuous mode [ 1214.832566][T22873] device team0 entered promiscuous mode [ 1214.849721][T22873] device team_slave_0 entered promiscuous mode [ 1214.859041][T22873] device team_slave_1 entered promiscuous mode [ 1214.874002][T22872] device team0 left promiscuous mode [ 1214.884136][T22872] device team_slave_0 left promiscuous mode [ 1214.894913][T22872] device team_slave_1 left promiscuous mode [ 1216.005206][ T2963] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1216.123581][T22887] netlink: 'syz.3.5862': attribute type 4 has an invalid length. [ 1216.405258][ T2963] usb 2-1: Using ep0 maxpacket: 16 [ 1217.155415][ T2963] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.172839][ T2963] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.371149][ T2963] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1217.384569][ T2963] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1217.391804][ T2963] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1217.401678][ T2963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.278902][ T2963] usb 2-1: config 0 descriptor?? [ 1218.610375][ T2963] usb 2-1: can't set config #0, error -71 [ 1219.393150][ T2963] usb 2-1: USB disconnect, device number 65 [ 1219.576659][T22919] tipc: Invalid UDP bearer configuration [ 1219.576791][T22919] tipc: Enabling of bearer rejected, failed to enable media [ 1219.765048][T22921] device team0 entered promiscuous mode [ 1219.785043][T22921] device team_slave_0 entered promiscuous mode [ 1219.792038][T22921] device team_slave_1 entered promiscuous mode [ 1220.127406][T22920] device team0 left promiscuous mode [ 1220.241009][T22920] device team_slave_0 left promiscuous mode [ 1220.253607][T22920] device team_slave_1 left promiscuous mode [ 1220.786795][ T7] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1221.055439][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 1221.175970][ T7] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1221.209587][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.314969][ T7] usb 4-1: config 0 descriptor?? [ 1221.703175][ T2963] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1221.775202][ T6770] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1221.955277][ T2963] usb 1-1: Using ep0 maxpacket: 32 [ 1222.029600][ T6770] usb 2-1: Using ep0 maxpacket: 16 [ 1222.055318][ T7] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1222.065658][ T7] asix: probe of 4-1:0.0 failed with error -71 [ 1222.086529][ T7] usb 4-1: USB disconnect, device number 52 [ 1222.100788][ T2963] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.112711][ T2963] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.133181][ T2963] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1222.144172][ T2963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.167713][ T6770] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.183529][ T6770] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.196748][ T6770] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1222.214397][ T2963] hub 1-1:4.0: USB hub found [ 1222.222651][ T6770] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1222.233082][ T6770] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1222.244957][ T6770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.269526][ T6770] usb 2-1: config 0 descriptor?? [ 1222.280283][T22964] device team0 entered promiscuous mode [ 1222.286054][T22964] device team_slave_0 entered promiscuous mode [ 1222.292506][T22964] device team_slave_1 entered promiscuous mode [ 1222.300324][T22963] device team0 left promiscuous mode [ 1222.311968][T22963] device team_slave_0 left promiscuous mode [ 1222.319547][T22963] device team_slave_1 left promiscuous mode [ 1222.466163][ T2963] hub 1-1:4.0: 2 ports detected [ 1222.491027][T22967] tipc: Invalid UDP bearer configuration [ 1222.491136][T22967] tipc: Enabling of bearer rejected, failed to enable media [ 1223.285425][ T2963] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 1223.294495][ T2963] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 1223.358754][ T2963] usb 1-1: USB disconnect, device number 117 [ 1223.675677][ T6770] usbhid 2-1:0.0: can't add hid device: -71 [ 1223.681746][ T6770] usbhid: probe of 2-1:0.0 failed with error -71 [ 1223.722241][T22983] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1223.726200][ T6770] usb 2-1: USB disconnect, device number 66 [ 1224.590607][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1224.604623][T22997] device team0 entered promiscuous mode [ 1224.610650][T22997] device team_slave_0 entered promiscuous mode [ 1224.620168][T22997] device team_slave_1 entered promiscuous mode [ 1224.631163][T22994] device team0 left promiscuous mode [ 1224.820460][T22994] device team_slave_0 left promiscuous mode [ 1224.827061][T22994] device team_slave_1 left promiscuous mode [ 1225.660204][T23015] bridge0: port 3(batadv0) entered blocking state [ 1225.690128][T23015] bridge0: port 3(batadv0) entered disabled state [ 1225.712497][T23015] device batadv0 entered promiscuous mode [ 1225.740943][T23015] bridge0: port 3(batadv0) entered blocking state [ 1225.747584][T23015] bridge0: port 3(batadv0) entered forwarding state [ 1225.959143][ T4841] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1225.969225][ T4841] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1226.109987][T21237] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1226.194748][ T6770] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1226.955863][T23033] tipc: Invalid UDP bearer configuration [ 1226.955923][T23033] tipc: Enabling of bearer rejected, failed to enable media [ 1227.237913][T23032] device team0 entered promiscuous mode [ 1227.245390][T21237] usb 4-1: Using ep0 maxpacket: 32 [ 1227.254784][T23032] device team_slave_0 entered promiscuous mode [ 1227.264537][T23032] device team_slave_1 entered promiscuous mode [ 1227.276870][T23030] device team0 left promiscuous mode [ 1227.282206][T23030] device team_slave_0 left promiscuous mode [ 1227.292953][T23030] device team_slave_1 left promiscuous mode [ 1227.361454][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1227.377777][T21237] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.404693][T21237] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.423439][T21237] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1227.443432][T21237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.465227][ T6770] usb 1-1: Using ep0 maxpacket: 16 [ 1227.486490][ T7] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1227.506201][T21237] hub 4-1:4.0: USB hub found [ 1227.595635][ T6770] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.622168][ T6770] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.639755][ T6770] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1227.655273][ T6770] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1227.662937][ T6770] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1227.672634][ T6770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.684625][ T6770] usb 1-1: config 0 descriptor?? [ 1227.725371][T21237] hub 4-1:4.0: 2 ports detected [ 1227.866078][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.878044][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.888393][ T7] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1227.898163][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.912925][ T7] usb 2-1: config 0 descriptor?? [ 1227.985257][T21237] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1227.991641][T21237] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1228.045890][T21237] usb 4-1: USB disconnect, device number 53 [ 1228.168381][ T6770] hid-generic 0003:045E:05DA.00D0: unknown main item tag 0x0 [ 1228.184247][ T6770] hid-generic 0003:045E:05DA.00D0: unknown main item tag 0x0 [ 1228.193467][ T6770] hid-generic 0003:045E:05DA.00D0: unknown main item tag 0x0 [ 1228.206525][ T6770] hid-generic 0003:045E:05DA.00D0: unknown main item tag 0x0 [ 1228.214357][ T6770] hid-generic 0003:045E:05DA.00D0: unknown main item tag 0x0 [ 1228.223565][ T6770] hid-generic 0003:045E:05DA.00D0: unknown main item tag 0x0 [ 1228.231590][ T6770] hid-generic 0003:045E:05DA.00D0: unknown main item tag 0x0 [ 1228.239896][ T6770] hid-generic 0003:045E:05DA.00D0: unknown main item tag 0x3 [ 1228.247785][ T6770] hid-generic 0003:045E:05DA.00D0: item fetching failed at offset 33/34 [ 1228.257514][ T6770] hid-generic: probe of 0003:045E:05DA.00D0 failed with error -22 [ 1228.402795][ T7] greenasia 0003:0E8F:0012.00D1: unknown main item tag 0x0 [ 1228.435328][ T7] greenasia 0003:0E8F:0012.00D1: unknown main item tag 0x0 [ 1228.442728][ T7] greenasia 0003:0E8F:0012.00D1: unknown main item tag 0x0 [ 1228.480859][ T7] greenasia 0003:0E8F:0012.00D1: unknown main item tag 0x0 [ 1228.488242][ T7] greenasia 0003:0E8F:0012.00D1: unknown main item tag 0x0 [ 1228.520371][ T7] greenasia 0003:0E8F:0012.00D1: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 1228.545202][ T7] greenasia 0003:0E8F:0012.00D1: no inputs found [ 1228.606443][ T6770] usb 1-1: USB disconnect, device number 118 [ 1229.649471][T23062] tipc: Invalid UDP bearer configuration [ 1229.649582][T23062] tipc: Enabling of bearer rejected, failed to enable media [ 1230.109544][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1230.264875][T21237] usb 2-1: USB disconnect, device number 67 [ 1230.288262][T23069] dccp_close: ABORT with 726 bytes unread [ 1230.785258][ T3598] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1230.929046][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1230.934283][T23102] netlink: 'syz.4.5938': attribute type 5 has an invalid length. [ 1230.985362][ T6770] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1231.075341][ T3598] usb 1-1: Using ep0 maxpacket: 32 [ 1231.216011][ T3598] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.245251][ T3598] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.255291][ T6770] usb 3-1: Using ep0 maxpacket: 16 [ 1231.281076][ T3598] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1231.307508][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.323658][T23104] device syzkaller0 entered promiscuous mode [ 1231.386518][ T3598] hub 1-1:4.0: USB hub found [ 1231.395682][ T6770] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.427476][ T6770] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.438587][ T6770] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1231.452382][ T6770] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1231.459705][ T6770] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1231.469488][ T6770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.496044][ T6770] usb 3-1: config 0 descriptor?? [ 1231.605340][ T3598] hub 1-1:4.0: 2 ports detected [ 1231.865277][ T3598] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 1231.882896][ T3598] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 1231.943801][ T3598] usb 1-1: USB disconnect, device number 119 [ 1232.001966][ T6770] hid-generic 0003:045E:05DA.00D2: unknown main item tag 0x0 [ 1232.011866][ T6770] hid-generic 0003:045E:05DA.00D2: unknown main item tag 0x0 [ 1232.024579][ T6770] hid-generic 0003:045E:05DA.00D2: unknown main item tag 0x0 [ 1232.032180][ T6770] hid-generic 0003:045E:05DA.00D2: unknown main item tag 0x0 [ 1232.040786][ T6770] hid-generic 0003:045E:05DA.00D2: unknown main item tag 0x0 [ 1232.060391][ T6770] hid-generic 0003:045E:05DA.00D2: unknown main item tag 0x0 [ 1232.069166][ T6770] hid-generic 0003:045E:05DA.00D2: unknown main item tag 0x0 [ 1232.076931][ T6770] hid-generic 0003:045E:05DA.00D2: unknown main item tag 0x3 [ 1232.084359][ T6770] hid-generic 0003:045E:05DA.00D2: item fetching failed at offset 33/34 [ 1232.093535][ T6770] hid-generic: probe of 0003:045E:05DA.00D2 failed with error -22 [ 1232.290021][T21237] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1232.681255][T21237] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1232.703900][T21237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.754718][T21237] usb 4-1: config 0 descriptor?? [ 1234.107003][T23149] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1234.113581][T23149] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1234.123932][T23149] vhci_hcd vhci_hcd.0: Device attached [ 1234.135567][T23150] vhci_hcd: cannot find the pending unlink 0 [ 1234.395363][ T3598] usb 17-1: new low-speed USB device number 5 using vhci_hcd [ 1234.425237][ T2963] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1234.976069][ T2963] usb 5-1: New USB device found, idVendor=0cf3, idProduct=20ff, bcdDevice=10.70 [ 1234.986859][ T2963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.996014][ T2963] usb 5-1: Product: syz [ 1235.000414][ T2963] usb 5-1: Manufacturer: syz [ 1235.005743][ T2963] usb 5-1: SerialNumber: syz [ 1235.020127][ T2963] usb 5-1: config 0 descriptor?? [ 1235.076138][ T2963] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1235.217169][T21237] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1235.238680][ T3593] usb 3-1: USB disconnect, device number 35 [ 1235.253442][T21237] asix: probe of 4-1:0.0 failed with error -71 [ 1235.290688][T21237] usb 4-1: USB disconnect, device number 54 [ 1235.291373][T23149] 9pnet_fd: Insufficient options for proto=fd [ 1235.353297][ T2963] usb 5-1: USB disconnect, device number 41 [ 1235.370131][T23150] vhci_hcd: connection reset by peer [ 1235.380766][ T3723] vhci_hcd: stop threads [ 1235.408041][ T3723] vhci_hcd: release socket [ 1235.418810][ T3723] vhci_hcd: disconnect device [ 1235.650194][T23171] syz.2.5965[23171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1235.650307][T23171] syz.2.5965[23171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1235.712844][T21237] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1235.936253][T23182] netlink: 'syz.2.5969': attribute type 11 has an invalid length. [ 1236.168958][T21237] usb 4-1: Using ep0 maxpacket: 32 [ 1236.174392][ T14] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1236.292502][T23193] netlink: 'syz.0.5973': attribute type 21 has an invalid length. [ 1236.301508][T23193] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5973'. [ 1236.301850][T21237] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.335731][T21237] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1236.352430][T21237] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1236.376038][T21237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.435780][T21237] hub 4-1:4.0: USB hub found [ 1236.555546][ T14] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1236.564936][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.575189][ T2963] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1236.600098][ T14] usb 2-1: config 0 descriptor?? [ 1236.655591][T21237] hub 4-1:4.0: 2 ports detected [ 1236.866958][ T14] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1236.889750][ T14] asix: probe of 2-1:0.0 failed with error -71 [ 1236.915293][T21237] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1236.926467][T21237] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1236.955842][ T14] usb 2-1: USB disconnect, device number 68 [ 1237.026879][T21237] usb 4-1: USB disconnect, device number 55 [ 1237.325361][ T2963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.343371][ T2963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.353695][ T2963] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1237.361126][T23219] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1237.367605][ T2963] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1237.373176][T23219] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1237.382806][ T2963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.397379][T23215] dccp_close: ABORT with 726 bytes unread [ 1237.400550][T23219] vhci_hcd vhci_hcd.0: Device attached [ 1237.441291][ T2963] usb 1-1: config 0 descriptor?? [ 1238.557352][ T2963] gembird 0003:11FF:3331.00D3: unknown main item tag 0x0 [ 1238.570909][ T2963] gembird 0003:11FF:3331.00D3: unknown main item tag 0x0 [ 1238.579744][ T2963] gembird 0003:11FF:3331.00D3: unknown main item tag 0x0 [ 1238.588147][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.588409][ T2963] gembird 0003:11FF:3331.00D3: unknown main item tag 0x0 [ 1238.594534][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.602257][ T2963] gembird 0003:11FF:3331.00D3: unknown main item tag 0x0 [ 1238.615410][ T3593] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1238.623298][ T2963] gembird 0003:11FF:3331.00D3: unknown main item tag 0x0 [ 1238.635718][ T2963] gembird 0003:11FF:3331.00D3: unknown main item tag 0x0 [ 1238.649751][ T2963] gembird 0003:11FF:3331.00D3: item fetching failed at offset 19/41 [ 1238.655339][ T27] audit: type=1800 audit(1719618894.106:155): pid=23242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5989" name="bus" dev="sda1" ino=2056 res=0 errno=0 [ 1238.669836][ T2963] gembird: probe of 0003:11FF:3331.00D3 failed with error -22 [ 1238.814097][T23193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.838309][T23193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.863517][ T2963] usb 1-1: USB disconnect, device number 120 [ 1239.181981][T23250] netlink: 'syz.3.5991': attribute type 10 has an invalid length. [ 1239.190014][T23250] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5991'. [ 1239.201810][T23250] device caif0 entered promiscuous mode [ 1239.207601][T23250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1239.207840][ T3593] usb 5-1: New USB device found, idVendor=0cf3, idProduct=20ff, bcdDevice=10.70 [ 1239.240054][ T3593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.250178][ T3593] usb 5-1: Product: syz [ 1239.254470][ T3593] usb 5-1: Manufacturer: syz [ 1239.264497][ T3593] usb 5-1: SerialNumber: syz [ 1239.299194][ T3593] usb 5-1: config 0 descriptor?? [ 1239.366080][ T3593] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1239.588048][T23219] 9pnet_fd: Insufficient options for proto=fd [ 1239.601321][ T2963] usb 5-1: USB disconnect, device number 42 [ 1239.616333][T23220] vhci_hcd: connection reset by peer [ 1239.625709][ T3723] vhci_hcd: stop threads [ 1239.630122][ T3723] vhci_hcd: release socket [ 1239.637805][ T3723] vhci_hcd: disconnect device [ 1239.998612][ T3598] vhci_hcd: vhci_device speed not set [ 1240.075342][ T6770] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1240.335368][ T6770] usb 1-1: Using ep0 maxpacket: 32 [ 1241.150880][ T6770] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.162985][ T6770] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.173633][ T6770] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1241.183446][ T6770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.387750][ T6770] hub 1-1:4.0: USB hub found [ 1241.600910][ T6770] hub 1-1:4.0: 2 ports detected [ 1241.669958][T23303] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1241.676695][T23303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1241.687273][T23303] vhci_hcd vhci_hcd.0: Device attached [ 1241.698258][T23304] vhci_hcd: cannot find the pending unlink 0 [ 1242.164847][ T6770] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 1242.171832][ T6770] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 1242.205172][ T7454] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1242.206067][ T6770] usb 1-1: USB disconnect, device number 121 [ 1242.249531][ T3598] usb 11-1: new low-speed USB device number 4 using vhci_hcd [ 1242.257092][ T2963] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1242.565604][ T7454] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1242.644851][ T7454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.780903][ T7454] usb 3-1: config 0 descriptor?? [ 1242.843151][ T7454] cp210x 3-1:0.0: cp210x converter detected [ 1243.277922][T23315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.289167][ T7454] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1243.325720][T23315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.696078][ T2963] usb 2-1: New USB device found, idVendor=0cf3, idProduct=20ff, bcdDevice=10.70 [ 1243.751978][ T2963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.915201][ T2963] usb 2-1: Product: syz [ 1243.935185][ T2963] usb 2-1: Manufacturer: syz [ 1243.943489][ T2963] usb 2-1: SerialNumber: syz [ 1243.978794][ T2963] usb 2-1: config 0 descriptor?? [ 1244.062157][ T2963] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1244.085815][ T7454] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1244.101940][ T7454] usb 3-1: USB disconnect, device number 36 [ 1244.140685][ T7454] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1244.172335][ T7454] cp210x 3-1:0.0: device disconnected [ 1244.521095][T23303] 9pnet_fd: Insufficient options for proto=fd [ 1244.569707][ T7] usb 2-1: USB disconnect, device number 69 [ 1244.604084][T23304] vhci_hcd: connection reset by peer [ 1244.623483][ T11] vhci_hcd: stop threads [ 1244.639341][ T11] vhci_hcd: release socket [ 1244.668019][ T11] vhci_hcd: disconnect device [ 1244.845446][T23354] program syz.4.6025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1245.985303][ T6769] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1246.162047][ T27] audit: type=1800 audit(1719618901.616:156): pid=23376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6030" name="file1" dev="sda1" ino=2047 res=0 errno=0 [ 1246.205277][ T27] audit: type=1804 audit(1719618901.646:157): pid=23376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6030" name="/root/syzkaller.A1HWBF/244/file1" dev="sda1" ino=2047 res=1 errno=0 [ 1246.235318][ T6769] usb 3-1: Using ep0 maxpacket: 32 [ 1246.385556][ T6769] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1247.009892][ T6769] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1247.058767][ T6769] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1247.100362][ T6769] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1247.169692][ T6769] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1247.404696][T23393] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1247.411265][T23393] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1247.419512][ T6769] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1247.428737][ T3598] vhci_hcd: vhci_device speed not set [ 1247.436252][T23393] vhci_hcd vhci_hcd.0: Device attached [ 1247.445314][ T6769] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1247.468331][ T6769] usb 3-1: Product: syz [ 1247.473163][ T6769] usb 3-1: Manufacturer: syz [ 1247.483841][ T6769] usb 3-1: SerialNumber: syz [ 1247.503095][ T6769] usb 3-1: config 0 descriptor?? [ 1247.510624][T23398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6038'. [ 1247.533808][T23398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6038'. [ 1247.551802][ T6769] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1247.576491][ T6769] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1247.755260][T21622] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1247.764576][ T6769] usb 9-1: new low-speed USB device number 6 using vhci_hcd [ 1248.200020][ T7454] usb 3-1: USB disconnect, device number 37 [ 1248.358395][ T7454] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1249.021678][ T27] audit: type=1800 audit(1719618904.476:158): pid=23422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6044" name="file1" dev="sda1" ino=2033 res=0 errno=0 [ 1249.062387][ T27] audit: type=1804 audit(1719618904.506:159): pid=23422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6044" name="/root/syzkaller.ea2oKp/239/file1" dev="sda1" ino=2033 res=1 errno=0 [ 1249.135455][T21622] usb 1-1: New USB device found, idVendor=0cf3, idProduct=20ff, bcdDevice=10.70 [ 1249.145140][T21622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.153347][T21622] usb 1-1: Product: syz [ 1249.161183][T21622] usb 1-1: Manufacturer: syz [ 1249.166399][T21622] usb 1-1: SerialNumber: syz [ 1249.195367][T21622] usb 1-1: config 0 descriptor?? [ 1249.246184][T21622] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1249.395256][T21623] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1249.460550][T23393] 9pnet_fd: Insufficient options for proto=fd [ 1249.662504][ T3597] usb 1-1: USB disconnect, device number 122 [ 1249.714957][T23394] vhci_hcd: connection reset by peer [ 1249.728711][ T3662] vhci_hcd: stop threads [ 1249.740990][ T3662] vhci_hcd: release socket [ 1249.747873][T23440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6050'. [ 1249.765324][T21623] usb 5-1: Using ep0 maxpacket: 8 [ 1249.775646][ T3662] vhci_hcd: disconnect device [ 1249.813770][T23440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6050'. [ 1250.107281][T21623] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 1250.128299][T21623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.143570][T21623] usb 5-1: Product: syz [ 1250.164228][T21623] usb 5-1: Manufacturer: syz [ 1250.203107][T21623] usb 5-1: SerialNumber: syz [ 1250.415485][T21623] r8152-cfgselector 5-1: config 0 descriptor?? [ 1251.049171][ T27] audit: type=1800 audit(1719618906.506:160): pid=23463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6057" name="file1" dev="sda1" ino=2056 res=0 errno=0 [ 1251.246945][T21623] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1251.287454][T21623] r8152-cfgselector 5-1: bad CDC descriptors [ 1251.399064][T21623] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1251.432833][ T27] audit: type=1804 audit(1719618906.706:161): pid=23463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6057" name="/root/syzkaller.x1is14/285/file1" dev="sda1" ino=2056 res=1 errno=0 [ 1251.556923][T21623] r8152-cfgselector 5-1: USB disconnect, device number 43 [ 1251.692662][T23453] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1252.299147][T23492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6065'. [ 1252.366727][T23495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6065'. [ 1252.583563][ T27] audit: type=1800 audit(1719618908.036:162): pid=23504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6069" name="file1" dev="sda1" ino=2034 res=0 errno=0 [ 1252.798920][T23508] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1252.823355][T23520] syz.4.6076 sent an empty control message without MSG_MORE. [ 1254.118928][ T6769] vhci_hcd: vhci_device speed not set [ 1254.139442][T23526] tipc: Invalid UDP bearer configuration [ 1254.139502][T23526] tipc: Enabling of bearer rejected, failed to enable media [ 1254.275899][ T7] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1254.704376][ T27] audit: type=1800 audit(1719618910.156:163): pid=23531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6080" name="bus" dev="sda1" ino=2056 res=0 errno=0 [ 1254.875483][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.897896][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.919282][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1254.937184][ T3597] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1254.938629][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1254.962359][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.987332][ T7] usb 4-1: config 0 descriptor?? [ 1255.072699][ T27] audit: type=1800 audit(1719618910.526:164): pid=23546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6084" name="file1" dev="sda1" ino=2055 res=0 errno=0 [ 1255.245335][ T3597] usb 5-1: Using ep0 maxpacket: 8 [ 1255.256092][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1255.416403][ T3597] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1255.463265][ T3597] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 1255.548257][ T3597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.758358][ T3597] usb 5-1: config 0 descriptor?? [ 1255.906384][ T3597] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1256.113453][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.120760][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.128011][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.135367][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.142653][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.149882][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.157103][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.164262][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.190688][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.208085][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.222261][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.229994][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.243163][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.250627][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.305247][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.921967][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.929411][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.937368][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.946708][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.954010][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.961780][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.971163][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.979079][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.987902][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1256.996977][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1257.004284][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1257.015862][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1257.026307][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1257.037783][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1257.046448][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1257.053710][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1257.062326][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1257.070144][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1257.077715][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1257.085502][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1257.092752][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1257.101458][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1257.110144][ T7] logitech 0003:046D:C623.00D4: unknown main item tag 0x0 [ 1257.171704][T23576] tipc: Invalid UDP bearer configuration [ 1257.171744][T23576] tipc: Enabling of bearer rejected, failed to enable media [ 1257.181583][ T7] logitech 0003:046D:C623.00D4: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0 [ 1257.264622][T23561] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1257.335951][ T7] usb 4-1: USB disconnect, device number 56 [ 1258.044924][T21236] usb 5-1: USB disconnect, device number 44 [ 1258.235525][ T27] audit: type=1800 audit(1719618913.696:165): pid=23593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6096" name="file1" dev="sda1" ino=2051 res=0 errno=0 [ 1258.430950][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1259.321599][ T4841] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.731802][ T4841] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.134021][ T4841] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.478799][T23615] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1260.506999][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1260.537501][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1260.548242][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1260.568991][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1260.579232][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1260.586692][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1260.723923][ T4841] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.085256][ T2963] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1262.170009][T21237] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1262.203564][T23623] chnl_net:caif_netlink_parms(): no params data found [ 1262.363982][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1262.486573][T23623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.499221][T23623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.507131][ T2963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.532030][T23663] loop0: detected capacity change from 0 to 2048 [ 1262.539766][ T2963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.545761][T21237] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.561292][T23623] device bridge_slave_0 entered promiscuous mode [ 1262.578171][ T2963] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1262.594031][T23623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.601339][T23623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.610485][ T2963] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1262.620847][T21237] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1262.621272][T23663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1262.641711][T23623] device bridge_slave_1 entered promiscuous mode [ 1262.648871][ T2963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.660861][ T2963] usb 2-1: config 0 descriptor?? [ 1262.666281][ T3562] Bluetooth: hci3: command tx timeout [ 1262.795486][T21237] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1262.813678][T21237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.822434][T21237] usb 4-1: Product: syz [ 1262.829235][T21237] usb 4-1: Manufacturer: syz [ 1262.834784][T21237] usb 4-1: SerialNumber: syz [ 1262.883860][T21237] usb 4-1: config 0 descriptor?? [ 1262.911528][T23623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.954972][T23623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.092555][T23623] team0: Port device team_slave_0 added [ 1263.203257][T23623] team0: Port device team_slave_1 added [ 1263.357706][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.369974][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.379532][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.384374][ T27] audit: type=1326 audit(1719618918.836:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23640 comm="syz.3.6112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd478d75b99 code=0x0 [ 1263.387667][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.416353][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.424813][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.435390][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.443547][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.451621][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.459200][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.466778][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.475275][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.494372][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.505372][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.520146][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.527658][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.534999][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.542746][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.550884][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.558383][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.565736][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.573104][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.580435][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.590742][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.598147][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.605343][T21237] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1263.613354][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.620652][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.628131][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.635446][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.675189][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.682434][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.708306][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.723682][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.737106][T23685] loop0: detected capacity change from 0 to 2048 [ 1263.744401][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.784600][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.803908][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.833876][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.847472][T21237] usb 3-1: Using ep0 maxpacket: 8 [ 1263.874565][ T2963] logitech 0003:046D:C623.00D5: unknown main item tag 0x0 [ 1263.897843][ T2963] logitech 0003:046D:C623.00D5: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.1-1/input0 [ 1263.921269][ T2963] usb 2-1: USB disconnect, device number 70 [ 1263.941019][T23623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.963849][T23623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.998863][T23623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1264.136226][T21237] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 1264.156808][T21237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.182603][T21237] usb 3-1: Product: syz [ 1264.192401][T21237] usb 3-1: Manufacturer: syz [ 1264.201975][T21237] usb 3-1: SerialNumber: syz [ 1264.223365][T23623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1264.232857][T23623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1264.234675][T21237] r8152-cfgselector 3-1: config 0 descriptor?? [ 1264.288015][T23623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1264.429692][T23623] device hsr_slave_0 entered promiscuous mode [ 1264.473690][T23623] device hsr_slave_1 entered promiscuous mode [ 1264.504156][T23623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1264.517684][T23623] Cannot create hsr debugfs directory [ 1264.755316][T21237] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1264.761812][ T3562] Bluetooth: hci3: command tx timeout [ 1264.771875][T21237] r8152-cfgselector 3-1: bad CDC descriptors [ 1264.805404][T21237] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1264.824126][T21237] r8152-cfgselector 3-1: USB disconnect, device number 38 [ 1264.968917][ T7454] usb 4-1: USB disconnect, device number 57 [ 1265.272340][ T4841] device hsr_slave_0 left promiscuous mode [ 1265.326509][ T4841] device hsr_slave_1 left promiscuous mode [ 1265.348367][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.402925][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.434172][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1265.474150][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1265.486297][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1265.492439][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1265.509060][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1265.518193][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1265.526760][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1265.538432][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1265.575722][ T4841] device bridge_slave_1 left promiscuous mode [ 1265.582035][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.613821][ T4841] device bridge_slave_0 left promiscuous mode [ 1265.621837][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.631956][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1265.766278][ T4841] device veth1_macvtap left promiscuous mode [ 1265.772890][ T4841] device veth0_macvtap left promiscuous mode [ 1265.788607][ T4841] device veth1_vlan left promiscuous mode [ 1265.794994][ T4841] device veth0_vlan left promiscuous mode [ 1266.828077][ T3562] Bluetooth: hci3: command tx timeout [ 1267.137861][ T4841] team0 (unregistering): Port device team_slave_1 removed [ 1267.145258][T21623] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1267.193118][ T4841] team0 (unregistering): Port device team_slave_0 removed [ 1267.249703][ T4841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.298579][ T4841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.545951][T21623] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.561518][T21623] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1267.636335][ T3562] Bluetooth: hci0: command tx timeout [ 1267.729971][T21623] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1267.739264][T21623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.747799][T21623] usb 2-1: Product: syz [ 1267.752216][T21623] usb 2-1: Manufacturer: syz [ 1267.757174][T21623] usb 2-1: SerialNumber: syz [ 1267.778980][T21623] usb 2-1: config 0 descriptor?? [ 1267.871706][ T4841] bond0 (unregistering): Released all slaves [ 1267.984992][T23728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6130'. [ 1268.251581][ T27] audit: type=1326 audit(1719618923.706:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23732 comm="syz.1.6132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff098175b99 code=0x0 [ 1268.809075][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1268.905173][ T3562] Bluetooth: hci3: command tx timeout [ 1269.084525][T23708] chnl_net:caif_netlink_parms(): no params data found [ 1269.552616][T23708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.616519][T23708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.679270][T23708] device bridge_slave_0 entered promiscuous mode [ 1269.705390][ T3562] Bluetooth: hci0: command tx timeout [ 1269.764166][T23708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.788934][T23708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.833340][T23708] device bridge_slave_1 entered promiscuous mode [ 1269.976395][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6141'. [ 1270.012909][ T7454] usb 2-1: USB disconnect, device number 71 [ 1270.179591][T23708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.215316][T23623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1270.237943][T23708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.258147][T23623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1270.356037][T23623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1270.378341][T23623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1270.430236][T23708] team0: Port device team_slave_0 added [ 1270.467455][T23708] team0: Port device team_slave_1 added [ 1270.618018][T23708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1270.627408][T23708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1270.708421][T23708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1270.776057][T23708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1270.783070][T23708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1270.845215][T23708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.069103][T23708] device hsr_slave_0 entered promiscuous mode [ 1271.096076][T23708] device hsr_slave_1 entered promiscuous mode [ 1271.107678][T23708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1271.131243][T23708] Cannot create hsr debugfs directory [ 1271.173392][T23623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.369222][T23623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.377819][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1271.407271][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1271.422465][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1271.510967][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1271.530454][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1271.560526][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.567731][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.615547][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1271.645404][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1271.654044][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.661432][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.723982][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1271.735980][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1271.765796][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1271.785539][ T3562] Bluetooth: hci0: command tx timeout [ 1271.795654][T23816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1271.816234][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1271.845480][ T7] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1271.869189][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1271.994103][T23708] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.037744][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1272.050234][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1272.074306][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1272.097890][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1272.106876][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1272.164247][T23708] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.189947][T23623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1272.229513][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.256572][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1272.262460][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.274379][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1272.298878][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1272.331027][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1272.385432][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1272.394626][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.441651][ T7] usb 2-1: config 0 descriptor?? [ 1272.450477][T23708] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.565230][ T7454] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1272.611997][T23708] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.803246][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1272.816407][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1272.825944][ T3558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1272.836794][ T3558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1272.844454][ T3558] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1272.854064][ T3558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1272.931972][ T7454] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.942318][ T7454] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1272.985544][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 1272.991671][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 1273.000858][ T7] usb 2-1: USB disconnect, device number 72 [ 1273.116901][ T7454] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1273.135405][ T7454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.143612][ T7454] usb 4-1: Product: syz [ 1273.148611][ T7454] usb 4-1: Manufacturer: syz [ 1273.153311][ T7454] usb 4-1: SerialNumber: syz [ 1273.162416][ T7454] usb 4-1: config 0 descriptor?? [ 1273.305691][T21623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1273.313213][T21623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1273.329766][T23623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.338748][T23708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1273.412335][T23708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1273.452861][T23708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1273.550182][T23708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1273.671810][ T27] audit: type=1326 audit(1719618929.126:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23820 comm="syz.3.6151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd478d75b99 code=0x0 [ 1273.875188][ T3558] Bluetooth: hci0: command tx timeout [ 1273.917026][T23829] chnl_net:caif_netlink_parms(): no params data found [ 1274.536429][T23829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.544660][T23829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.561964][T23829] device bridge_slave_0 entered promiscuous mode [ 1274.694378][T23708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.725415][T23829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.732510][T23829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.766812][T23829] device bridge_slave_1 entered promiscuous mode [ 1274.874310][T23708] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.905439][ T3558] Bluetooth: hci5: command tx timeout [ 1275.066342][ T14] usb 4-1: USB disconnect, device number 58 [ 1275.127125][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1275.142029][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1275.174249][T23829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.201965][T23829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.338604][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1275.359951][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1275.378134][T21622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.385370][T21622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.404248][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1275.413689][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1275.429251][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1275.582244][T23829] team0: Port device team_slave_0 added [ 1275.607904][T23829] team0: Port device team_slave_1 added [ 1275.634620][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1275.656374][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1275.665295][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.672641][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.705792][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1275.769682][T23623] device veth0_vlan entered promiscuous mode [ 1275.969289][T21237] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1275.995774][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1276.017951][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1276.037144][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1276.074234][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1276.094182][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1276.119743][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1276.142861][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1276.161156][T23623] device veth1_vlan entered promiscuous mode [ 1276.191289][ T4841] device hsr_slave_0 left promiscuous mode [ 1276.202449][ T4841] device hsr_slave_1 left promiscuous mode [ 1276.217186][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.224672][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.253005][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.260861][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.277932][ T4841] device bridge_slave_1 left promiscuous mode [ 1276.291419][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.315648][ T4841] device bridge_slave_0 left promiscuous mode [ 1276.334245][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.339895][T21237] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1276.361665][T21237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.391768][T21237] usb 4-1: config 0 descriptor?? [ 1276.439439][ T4841] device veth1_macvtap left promiscuous mode [ 1276.439550][T21237] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1276.452339][ T4841] device veth0_macvtap left promiscuous mode [ 1276.465385][ T4841] device veth1_vlan left promiscuous mode [ 1276.475644][ T4841] device veth0_vlan left promiscuous mode [ 1276.975208][T21623] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1276.985343][ T3558] Bluetooth: hci5: command tx timeout [ 1277.167319][T21237] gspca_spca508: reg_read err -110 [ 1277.184541][ T4841] team0 (unregistering): Port device team_slave_1 removed [ 1277.192578][T21237] gspca_spca508: reg_read err -32 [ 1277.220980][T21237] gspca_spca508: reg_read err -32 [ 1277.225278][T21623] usb 2-1: Using ep0 maxpacket: 8 [ 1277.245277][T21237] gspca_spca508: reg_read err -32 [ 1277.270533][T21237] gspca_spca508: reg write: error -32 [ 1277.276807][T21237] spca508: probe of 4-1:0.0 failed with error -32 [ 1277.290451][ T4841] team0 (unregistering): Port device team_slave_0 removed [ 1277.345891][ T4841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.353196][T21623] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1277.365871][T21623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.383985][T21623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.404338][T21623] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1277.425355][T21623] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1277.434905][T21623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.450528][T21623] usb 2-1: config 0 descriptor?? [ 1277.456248][ T4841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1277.549451][ T3597] usb 4-1: USB disconnect, device number 59 [ 1278.001208][T21623] usbhid 2-1:0.0: can't add hid device: -71 [ 1278.007497][T21623] usbhid: probe of 2-1:0.0 failed with error -71 [ 1278.022561][T21623] usb 2-1: USB disconnect, device number 73 [ 1278.150955][ T4841] bond0 (unregistering): Released all slaves [ 1278.253410][T23829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.261917][T23829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.289140][T23829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.302297][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1278.311573][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1278.319927][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1278.328493][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1278.347082][T23829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.354071][T23829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.381781][T23829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1278.443295][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1278.454692][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1278.464039][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1278.486142][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1278.510270][T23708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1278.535016][ T6769] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1278.541324][T23708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1278.591369][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1278.601129][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1278.619882][T23623] device veth0_macvtap entered promiscuous mode [ 1278.631882][T23829] device hsr_slave_0 entered promiscuous mode [ 1278.659280][T23829] device hsr_slave_1 entered promiscuous mode [ 1278.679221][T23829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1278.687949][T23829] Cannot create hsr debugfs directory [ 1278.698617][T23623] device veth1_macvtap entered promiscuous mode [ 1278.806447][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1278.822072][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.833645][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1278.845463][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.856260][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1278.867236][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.879448][T23623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.897593][T21623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1278.905906][ T6769] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.926601][T21623] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1278.934868][ T6769] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1278.949130][T21623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1278.961751][T21623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1278.977971][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.009434][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.023983][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.035244][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.045654][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.056737][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.067126][ T3558] Bluetooth: hci5: command tx timeout [ 1279.074643][T23623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.100112][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1279.123759][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1279.142151][ T6769] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1279.168357][ T6769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.177850][ T6769] usb 4-1: Product: syz [ 1279.182199][ T6769] usb 4-1: Manufacturer: syz [ 1279.192373][ T6769] usb 4-1: SerialNumber: syz [ 1279.200554][T23623] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.208664][ T6769] usb 4-1: config 0 descriptor?? [ 1279.215298][T23623] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.224186][T23623] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.247520][T23623] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.317472][T21237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1279.352068][T21237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1279.379314][T23708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.521673][T23829] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.606655][ T27] audit: type=1326 audit(1719618935.066:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23916 comm="syz.3.6164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd478d75b99 code=0x0 [ 1279.665244][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1279.674031][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1279.835456][T23829] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.886478][ T3649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.894744][ T3649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.924638][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1279.940646][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1280.013500][T23829] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.057041][T23708] device veth0_vlan entered promiscuous mode [ 1280.075585][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1280.088410][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1280.123967][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1280.167233][T23708] device veth1_vlan entered promiscuous mode [ 1280.256243][T23829] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.319668][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.338803][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1280.348480][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.370983][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1280.419681][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1280.512898][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1280.551956][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1280.641036][T23708] device veth0_macvtap entered promiscuous mode [ 1280.683541][T23943] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1280.690260][T23943] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1280.704606][T23708] device veth1_macvtap entered promiscuous mode [ 1280.718446][T23943] vhci_hcd vhci_hcd.0: Device attached [ 1280.862969][T23708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.884168][T23708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.895923][T23708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.907012][T23708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.917603][T23708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.929653][T23708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.954083][T23708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.983119][T23708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.997741][ T3598] usb 17-1: new low-speed USB device number 6 using vhci_hcd [ 1281.007452][T23708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1281.021872][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1281.035299][ T6769] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1281.048358][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1281.072541][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1281.091877][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1281.113616][T23708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.131350][T23708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.144521][T23708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.145259][ T3558] Bluetooth: hci5: command tx timeout [ 1281.145313][T21622] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1281.180261][T23708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.194982][T23708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.213715][T23708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.221434][ T7] usb 4-1: USB disconnect, device number 60 [ 1281.250105][T23708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.280640][T23708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.292419][T23708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.313275][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1281.323809][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1281.346052][T23708] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.357566][T23708] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.375241][T23708] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.394270][T23708] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.441157][T23829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1281.495245][T23829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1281.514692][T23829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1281.533915][T23829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1281.605369][T21622] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1281.642338][T21622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.651170][ T6769] usb 5-1: New USB device found, idVendor=0cf3, idProduct=20ff, bcdDevice=10.70 [ 1281.665140][ T6769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.713982][T21622] usb 2-1: config 0 descriptor?? [ 1281.719220][ T6769] usb 5-1: Product: syz [ 1281.723512][ T6769] usb 5-1: Manufacturer: syz [ 1281.745360][ T6769] usb 5-1: SerialNumber: syz [ 1281.778353][ T6769] usb 5-1: config 0 descriptor?? [ 1281.824149][ T3663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.833410][ T6769] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1281.865213][ T3663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.922355][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1281.940515][ T3649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.941811][T23829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.959350][ T3649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.990568][T21634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1282.015552][T21622] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1282.039121][T23943] 9pnet_fd: Insufficient options for proto=fd [ 1282.059249][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1282.064807][T21622] asix: probe of 2-1:0.0 failed with error -71 [ 1282.070928][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1282.096640][T23957] overlayfs: failed to resolve './file0': -2 [ 1282.103847][T21622] usb 2-1: USB disconnect, device number 74 [ 1282.130831][T23829] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.143291][T21238] usb 5-1: USB disconnect, device number 45 [ 1282.151543][T23944] vhci_hcd: connection reset by peer [ 1282.166189][ T3649] vhci_hcd: stop threads [ 1282.171633][ T3649] vhci_hcd: release socket [ 1282.194076][ T3649] vhci_hcd: disconnect device [ 1282.201506][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1282.220905][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1282.245886][ T6769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.253080][ T6769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1282.281360][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1282.322328][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1282.341719][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1282.352321][ T6769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.359506][ T6769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.368187][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1282.398005][T21634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1282.408496][T21634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1282.441080][T21634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1282.478647][T23829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1282.515219][T23829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1282.556268][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1282.566024][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1282.575015][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1282.625015][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1282.646176][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1282.670892][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1282.726711][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1282.744733][T21622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1283.292461][T23989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6188'. [ 1283.447131][T21634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1283.461876][T21634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1283.501873][T23829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.645638][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1283.675007][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1283.730947][T23829] device veth0_vlan entered promiscuous mode [ 1283.771951][T23829] device veth1_vlan entered promiscuous mode [ 1283.791681][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1283.806043][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1283.814811][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1283.846884][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1283.866016][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1283.984538][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1283.994027][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1284.014865][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1284.038452][T23829] device veth0_macvtap entered promiscuous mode [ 1284.097875][T23829] device veth1_macvtap entered promiscuous mode [ 1284.195387][ T14] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1284.202695][ T27] audit: type=1800 audit(1719618939.656:170): pid=23971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6181" name="file1" dev="sda1" ino=2033 res=0 errno=0 [ 1284.243427][T23829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.277754][T23829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.295235][T23829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.313226][T23829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.323519][T23829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.378157][T23829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.409148][T23829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.449917][T23829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.479891][T23829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.514641][T23829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.557990][T23829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.611241][ T14] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1284.622494][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.674702][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1284.696101][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1284.704575][ T14] usb 5-1: config 0 descriptor?? [ 1284.714862][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1284.744846][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1284.798206][T23829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.813573][T23829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.824393][T23829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.853063][T23829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.865994][T23829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.879166][T23829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.889599][T23829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.900625][T23829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.911222][T23829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.932740][T23829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.946580][T23829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.964702][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1284.976871][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1284.987137][T24015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6198'. [ 1285.002712][T24015] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1285.143268][T23829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.155551][ T14] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1285.166030][T23829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.176510][T23829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.186405][ T14] asix: probe of 5-1:0.0 failed with error -71 [ 1285.213570][ T14] usb 5-1: USB disconnect, device number 46 [ 1285.225545][T23829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.282213][T24030] loop0: detected capacity change from 0 to 128 [ 1285.334540][T24030] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1285.363200][T24030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1285.675580][T21622] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1285.703039][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.723585][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.750026][T24045] loop0: detected capacity change from 0 to 64 [ 1285.796533][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1286.202177][T24049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6212'. [ 1286.273481][T24049] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 1286.780492][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.795606][T21622] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1286.804729][T21622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.809108][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.819701][ T3598] vhci_hcd: vhci_device speed not set [ 1286.863640][T21622] usb 2-1: config 0 descriptor?? [ 1286.917947][T21622] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1286.955196][ T7454] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1287.048232][T21236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1287.155030][ T4841] device hsr_slave_0 left promiscuous mode [ 1287.169963][ T4841] device hsr_slave_1 left promiscuous mode [ 1287.180041][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.192683][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.210925][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.221132][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.239535][ T4841] device batadv0 left promiscuous mode [ 1287.250889][ T4841] bridge0: port 3(batadv0) entered disabled state [ 1287.262199][ T4841] device bridge_slave_1 left promiscuous mode [ 1287.274685][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.286564][ T4841] device bridge_slave_0 left promiscuous mode [ 1287.293096][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.335444][ T4841] device veth1_macvtap left promiscuous mode [ 1287.335448][ T7454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.341592][ T4841] device veth0_macvtap left promiscuous mode [ 1287.361571][ T4841] device veth1_vlan left promiscuous mode [ 1287.367862][ T4841] device veth0_vlan left promiscuous mode [ 1287.374500][ T7454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.395140][ T7454] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1287.415699][T21622] gspca_spca508: reg_read err -71 [ 1287.415738][ T6773] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1287.435528][T21622] gspca_spca508: reg_read err -71 [ 1287.436642][ T7454] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1287.449854][ T7454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.463912][ T7454] usb 4-1: config 0 descriptor?? [ 1287.469166][T21622] gspca_spca508: reg_read err -71 [ 1287.495827][T21622] gspca_spca508: reg_read err -71 [ 1287.515765][T21622] gspca_spca508: reg write: error -71 [ 1287.521874][T21622] spca508: probe of 2-1:0.0 failed with error -71 [ 1287.546932][T21622] usb 2-1: USB disconnect, device number 75 [ 1287.795363][ T6773] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1287.819036][ T6773] usb 3-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 1287.831962][ T6773] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1287.843546][ T6773] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1287.854065][ T6773] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1288.037558][ T7454] usbhid 4-1:0.0: can't add hid device: -71 [ 1288.043621][ T7454] usbhid: probe of 4-1:0.0 failed with error -71 [ 1288.050287][ T6773] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1288.061060][ T6773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.090025][ T7454] usb 4-1: USB disconnect, device number 61 [ 1288.104573][ T6773] usb 3-1: Product: syz [ 1288.112709][ T6773] usb 3-1: Manufacturer: syz [ 1288.126737][ T6773] usb 3-1: SerialNumber: syz [ 1288.449096][ T4841] team0 (unregistering): Port device team_slave_1 removed [ 1288.475516][ T6773] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1288.483583][ T6773] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1288.492865][ T6773] usb 3-1: found format II with max.bitrate = 4, frame size=0 [ 1288.501353][ T6773] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1288.509804][ T6773] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1288.520295][ T6773] usb 3-1: found format II with max.bitrate = 4, frame size=0 [ 1288.566903][ T4841] team0 (unregistering): Port device team_slave_0 removed [ 1288.645764][ T6769] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1288.690582][ T4841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.782572][ T6773] usb 3-1: USB disconnect, device number 39 [ 1288.875503][ T4841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.915567][ T6769] usb 2-1: Using ep0 maxpacket: 8 [ 1289.087018][ T6769] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1289.122009][ T6769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.130218][ T27] audit: type=1804 audit(1719618944.576:171): pid=24103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6233" name="/root/syzkaller.nzCFRm/2/file0" dev="sda1" ino=2066 res=1 errno=0 [ 1289.179881][ T6769] usb 2-1: config 0 descriptor?? [ 1290.055166][ T3598] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1290.352525][ T4841] bond0 (unregistering): Released all slaves [ 1290.414154][ T6769] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1290.430140][ T6769] asix: probe of 2-1:0.0 failed with error -71 [ 1290.471507][ T6769] usb 2-1: USB disconnect, device number 76 [ 1290.505516][ T3598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.524155][ T3598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.544348][ T3598] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1290.575182][ T3598] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1290.593144][ T3598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.617004][ T3598] usb 4-1: config 0 descriptor?? [ 1290.704889][T24077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6223'. [ 1290.847945][T24139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6247'. [ 1290.881253][T24139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6247'. [ 1291.145418][T21236] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1291.175401][ T3598] usbhid 4-1:0.0: can't add hid device: -71 [ 1291.186839][ T3598] usbhid: probe of 4-1:0.0 failed with error -71 [ 1291.219603][ T3598] usb 4-1: USB disconnect, device number 62 [ 1291.505256][T21236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.525808][T21236] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1291.685434][T21236] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1291.704823][T21236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.735158][T21236] usb 5-1: Product: syz [ 1291.745532][T21236] usb 5-1: Manufacturer: syz [ 1291.760483][T21236] usb 5-1: SerialNumber: syz [ 1291.781718][T21236] usb 5-1: config 0 descriptor?? [ 1292.121998][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6259'. [ 1292.169503][T24169] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1292.195072][ T27] audit: type=1326 audit(1719618947.646:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24141 comm="syz.4.6249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc912575b99 code=0x0 [ 1292.235024][T24171] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1292.328353][T24173] [ 1292.330732][T24173] ====================================================== [ 1292.337763][T24173] WARNING: possible circular locking dependency detected [ 1292.344774][T24173] 6.1.96-syzkaller #0 Not tainted [ 1292.349796][T24173] ------------------------------------------------------ [ 1292.356840][T24173] syz.3.6261/24173 is trying to acquire lock: [ 1292.362892][T24173] ffff88807efa4170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2b0/0x380 [ 1292.373429][T24173] [ 1292.373429][T24173] but task is already holding lock: [ 1292.380786][T24173] ffff88807efa2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0 [ 1292.392100][T24173] [ 1292.392100][T24173] which lock already depends on the new lock. [ 1292.392100][T24173] [ 1292.402580][T24173] [ 1292.402580][T24173] the existing dependency chain (in reverse order) is: [ 1292.411585][T24173] [ 1292.411585][T24173] -> #3 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1292.420020][T24173] lock_acquire+0x1f8/0x5a0 [ 1292.425066][T24173] percpu_down_read+0x44/0x1a0 [ 1292.430381][T24173] ext4_writepages+0x1e5/0x3de0 [ 1292.435786][T24173] do_writepages+0x3a2/0x670 [ 1292.440945][T24173] filemap_fdatawrite_wbc+0x121/0x180 [ 1292.446851][T24173] filemap_write_and_wait_range+0x1a4/0x290 [ 1292.453458][T24173] __iomap_dio_rw+0xb4e/0x2130 [ 1292.458786][T24173] iomap_dio_rw+0x42/0xa0 [ 1292.463691][T24173] ext4_file_write_iter+0x1464/0x1880 [ 1292.469595][T24173] do_iter_write+0x6e6/0xc50 [ 1292.474726][T24173] iter_file_splice_write+0x830/0xfc0 [ 1292.480637][T24173] direct_splice_actor+0xe3/0x1c0 [ 1292.486199][T24173] splice_direct_to_actor+0x4c7/0xc30 [ 1292.492204][T24173] do_splice_direct+0x2a5/0x3e0 [ 1292.497587][T24173] do_sendfile+0x61c/0xff0 [ 1292.502526][T24173] __se_sys_sendfile64+0x178/0x1e0 [ 1292.508257][T24173] do_syscall_64+0x3b/0xb0 [ 1292.513212][T24173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1292.519635][T24173] [ 1292.519635][T24173] -> #2 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 1292.528273][T24173] lock_acquire+0x1f8/0x5a0 [ 1292.533315][T24173] down_read+0xad/0xa30 [ 1292.537995][T24173] ext4_bmap+0x4b/0x410 [ 1292.542699][T24173] bmap+0xa1/0xd0 [ 1292.546889][T24173] jbd2_journal_flush+0x5b5/0xc40 [ 1292.552469][T24173] ext4_ioctl+0x3986/0x5f60 [ 1292.557509][T24173] __se_sys_ioctl+0xf1/0x160 [ 1292.562661][T24173] do_syscall_64+0x3b/0xb0 [ 1292.567614][T24173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1292.574048][T24173] [ 1292.574048][T24173] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 1292.582859][T24173] lock_acquire+0x1f8/0x5a0 [ 1292.587905][T24173] mutex_lock_io_nested+0x134/0xab0 [ 1292.593631][T24173] jbd2_journal_flush+0x29b/0xc40 [ 1292.599186][T24173] ext4_ioctl+0x3986/0x5f60 [ 1292.604230][T24173] __se_sys_ioctl+0xf1/0x160 [ 1292.609348][T24173] do_syscall_64+0x3b/0xb0 [ 1292.614742][T24173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1292.621166][T24173] [ 1292.621166][T24173] -> #0 (&journal->j_barrier){+.+.}-{3:3}: [ 1292.629186][T24173] validate_chain+0x1661/0x5950 [ 1292.634570][T24173] __lock_acquire+0x125b/0x1f80 [ 1292.639954][T24173] lock_acquire+0x1f8/0x5a0 [ 1292.645012][T24173] __mutex_lock+0x132/0xd80 [ 1292.650089][T24173] jbd2_journal_lock_updates+0x2b0/0x380 [ 1292.656279][T24173] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 1292.662900][T24173] ext4_fileattr_set+0xe04/0x1770 [ 1292.668486][T24173] vfs_fileattr_set+0x8f3/0xd30 [ 1292.673864][T24173] do_vfs_ioctl+0x1cd1/0x2a90 [ 1292.679062][T24173] __se_sys_ioctl+0x81/0x160 [ 1292.684182][T24173] do_syscall_64+0x3b/0xb0 [ 1292.689121][T24173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1292.695540][T24173] [ 1292.695540][T24173] other info that might help us debug this: [ 1292.695540][T24173] [ 1292.706021][T24173] Chain exists of: [ 1292.706021][T24173] &journal->j_barrier --> &sb->s_type->i_mutex_key#8 --> &sbi->s_writepages_rwsem [ 1292.706021][T24173] [ 1292.721156][T24173] Possible unsafe locking scenario: [ 1292.721156][T24173] [ 1292.728598][T24173] CPU0 CPU1 [ 1292.733981][T24173] ---- ---- [ 1292.739339][T24173] lock(&sbi->s_writepages_rwsem); [ 1292.744534][T24173] lock(&sb->s_type->i_mutex_key#8); [ 1292.752517][T24173] lock(&sbi->s_writepages_rwsem); [ 1292.760324][T24173] lock(&journal->j_barrier); [ 1292.765098][T24173] [ 1292.765098][T24173] *** DEADLOCK *** [ 1292.765098][T24173] [ 1292.773283][T24173] 4 locks held by syz.3.6261/24173: [ 1292.778614][T24173] #0: ffff88807efa0460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 1292.788308][T24173] #1: ffff8880579aca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_fileattr_set+0x135/0xd30 [ 1292.799227][T24173] #2: ffff8880579acbd8 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x115/0x6e0 [ 1292.810911][T24173] #3: ffff88807efa2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0 [ 1292.822686][T24173] [ 1292.822686][T24173] stack backtrace: [ 1292.828592][T24173] CPU: 1 PID: 24173 Comm: syz.3.6261 Not tainted 6.1.96-syzkaller #0 [ 1292.836661][T24173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1292.846727][T24173] Call Trace: [ 1292.850020][T24173] [ 1292.852963][T24173] dump_stack_lvl+0x1e3/0x2cb [ 1292.857662][T24173] ? nf_tcp_handle_invalid+0x642/0x642 [ 1292.863134][T24173] ? print_circular_bug+0x12b/0x1a0 [ 1292.868345][T24173] check_noncircular+0x2fa/0x3b0 [ 1292.873399][T24173] ? lockdep_lock+0x2a0/0x2a0 [ 1292.878091][T24173] ? add_chain_block+0x850/0x850 [ 1292.883058][T24173] ? lockdep_lock+0x11f/0x2a0 [ 1292.887755][T24173] ? validate_chain+0x112/0x5950 [ 1292.892704][T24173] ? _find_first_zero_bit+0xd0/0x100 [ 1292.898024][T24173] validate_chain+0x1661/0x5950 [ 1292.902949][T24173] ? lockdep_unlock+0x165/0x300 [ 1292.905197][ T3562] Bluetooth: hci3: command tx timeout [ 1292.907833][T24173] ? reacquire_held_locks+0x660/0x660 [ 1292.918669][T24173] ? validate_chain+0x13ce/0x5950 [ 1292.923716][T24173] ? mark_lock+0x9a/0x340 [ 1292.928068][T24173] ? __lock_acquire+0x125b/0x1f80 [ 1292.933118][T24173] ? mark_lock+0x9a/0x340 [ 1292.937487][T24173] __lock_acquire+0x125b/0x1f80 [ 1292.942355][T24173] lock_acquire+0x1f8/0x5a0 [ 1292.946892][T24173] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 1292.952749][T24173] ? read_lock_is_recursive+0x10/0x10 [ 1292.958244][T24173] ? __might_sleep+0xb0/0xb0 [ 1292.962837][T24173] ? do_raw_spin_unlock+0x137/0x8a0 [ 1292.968040][T24173] ? lockdep_hardirqs_on+0x94/0x130 [ 1292.973243][T24173] __mutex_lock+0x132/0xd80 [ 1292.977746][T24173] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 1292.983574][T24173] ? jbd2_journal_lock_updates+0x29f/0x380 [ 1292.989696][T24173] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 1292.995535][T24173] ? __lock_acquire+0x1f80/0x1f80 [ 1293.000702][T24173] ? mutex_lock_nested+0x10/0x10 [ 1293.005656][T24173] ? do_raw_read_unlock+0x70/0x70 [ 1293.010693][T24173] ? rcu_sync_enter+0x202/0x340 [ 1293.015574][T24173] jbd2_journal_lock_updates+0x2b0/0x380 [ 1293.021309][T24173] ? jbd2_journal_wait_updates+0x2d0/0x2d0 [ 1293.027146][T24173] ? rcu_is_watching+0x11/0xb0 [ 1293.031930][T24173] ? _find_next_bit+0x11b/0x120 [ 1293.036837][T24173] ? percpu_down_write+0x2b7/0x2f0 [ 1293.041999][T24173] ? rcu_is_watching+0x11/0xb0 [ 1293.046833][T24173] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 1293.053100][T24173] ext4_fileattr_set+0xe04/0x1770 [ 1293.058171][T24173] ? ext4_fileattr_get+0x200/0x200 [ 1293.063510][T24173] ? rwsem_write_trylock+0x166/0x210 [ 1293.068899][T24173] ? bpf_lsm_capable+0x5/0x10 [ 1293.073624][T24173] ? security_capable+0x86/0xb0 [ 1293.078490][T24173] ? fscrypt_prepare_setflags+0x5d/0x220 [ 1293.084149][T24173] vfs_fileattr_set+0x8f3/0xd30 [ 1293.089042][T24173] ? copy_fsxattr_to_user+0x3a0/0x3a0 [ 1293.094436][T24173] do_vfs_ioctl+0x1cd1/0x2a90 [ 1293.099299][T24173] ? __x64_compat_sys_ioctl+0x80/0x80 [ 1293.104673][T24173] ? __lock_acquire+0x1f80/0x1f80 [ 1293.109760][T24173] ? lockdep_hardirqs_on+0x94/0x130 [ 1293.114977][T24173] ? __kmem_cache_free+0x25c/0x3c0 [ 1293.120138][T24173] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 1293.125780][T24173] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 1293.131417][T24173] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 1293.137065][T24173] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1293.142549][T24173] ? __fget_files+0x28/0x4a0 [ 1293.147140][T24173] ? __fget_files+0x435/0x4a0 [ 1293.151862][T24173] ? __fget_files+0x28/0x4a0 [ 1293.156544][T24173] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1293.161478][T24173] ? security_file_ioctl+0x7d/0xa0 [ 1293.166764][T24173] __se_sys_ioctl+0x81/0x160 [ 1293.171368][T24173] do_syscall_64+0x3b/0xb0 [ 1293.175805][T24173] ? clear_bhb_loop+0x45/0xa0 [ 1293.180495][T24173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1293.186503][T24173] RIP: 0033:0x7fd478d75b99 [ 1293.191143][T24173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1293.211045][T24173] RSP: 002b:00007fd479af6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1293.219553][T24173] RAX: ffffffffffffffda RBX: 00007fd478f03fa0 RCX: 00007fd478d75b99 [ 1293.227639][T24173] RDX: 0000000020000180 RSI: 0000000040086602 RDI: 0000000000000003 [ 1293.235627][T24173] RBP: 00007fd478df677e R08: 0000000000000000 R09: 0000000000000000 [ 1293.243613][T24173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1293.251591][T24173] R13: 000000000000000b R14: 00007fd478f03fa0 R15: 00007ffda7e529a8 [ 1293.259590][T24173] [ 1294.657800][ T7454] usb 5-1: USB disconnect, device number 47 [ 1300.026637][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.032971][ T1254] ieee802154 phy1 wpan1: encryption failed: -22