last executing test programs: 17m31.948773692s ago: executing program 4 (id=936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0xa0}}, 0x0) 17m31.808023344s ago: executing program 4 (id=939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x3c}}, 0x0) 17m31.674856756s ago: executing program 4 (id=942): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x80}, {0x6, 0x0, 0x1}]}, 0x10) 17m31.502816569s ago: executing program 4 (id=945): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fusectl\x00', 0x8014, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, 0x0) 17m31.198105463s ago: executing program 4 (id=951): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x10, 0x0, 0x0, 0xffff, 0x0, "090000d7d3002000"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) 17m29.601234088s ago: executing program 4 (id=978): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x600a, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200), 0xfd, 0x4ab, &(0x7f0000000980)="$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") 17m29.42202666s ago: executing program 32 (id=978): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x600a, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200), 0xfd, 0x4ab, &(0x7f0000000980)="$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") 2.860917726s ago: executing program 2 (id=20279): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xf0}, 0x0}) 2.432702713s ago: executing program 5 (id=20283): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001940)="08193fa210", 0xbdef}], 0x1}, 0x0) 2.310361475s ago: executing program 5 (id=20289): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.230822176s ago: executing program 5 (id=20290): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.30509606s ago: executing program 3 (id=20302): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80804000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x1, r0, 0x0, 0xfffffffffffffffe) 1.30422098s ago: executing program 0 (id=20315): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) 1.2787157s ago: executing program 0 (id=20303): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2025) 1.213266931s ago: executing program 0 (id=20307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x5c, r1, 0x101, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x5c}}, 0x4800) 1.160171672s ago: executing program 0 (id=20309): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 1.039458544s ago: executing program 3 (id=20314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x880) 1.007536295s ago: executing program 3 (id=20316): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000200)={0x44, r2, 0x1, 0x70bd27, 0x4000, {{}, {@val={0x8, 0x1, 0x2e}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x44}, 0x1, 0x0, 0x0, 0x24000081}, 0x6008014) 955.638865ms ago: executing program 1 (id=20318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020323000000000000000000000000000800010001"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 953.579095ms ago: executing program 3 (id=20319): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x2afe, 0x6, 0x8001, 0x2, 0x7, "d171a6307f02690000e400", 0x42, 0x200068e}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 806.443008ms ago: executing program 3 (id=20320): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000001c0), 0xe) listen(r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 805.779648ms ago: executing program 1 (id=20330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) inotify_init1(0x0) 688.03408ms ago: executing program 3 (id=20321): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') poll(&(0x7f0000000180)=[{r0}, {r0}], 0x2, 0x7a0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 681.257629ms ago: executing program 1 (id=20322): unshare(0x68040200) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x4000, &(0x7f0000000900)={[{@bsdgroups}, {@noquota}, {@usrjquota}, {@orlov}, {@test_dummy_encryption}, {@minixdf}, {@nobh}, {@nodioread_nolock}]}, 0xa, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="6d616e676c88000000000000000000000000000000000000000000000000000002"], 0x48) 521.573982ms ago: executing program 2 (id=20323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) 379.824084ms ago: executing program 1 (id=20324): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 379.624464ms ago: executing program 2 (id=20325): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1, r0}, 0x6) 318.406865ms ago: executing program 1 (id=20326): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000030000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000", @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0x40000000}, 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x3f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) 315.198675ms ago: executing program 2 (id=20327): unshare(0x400) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 239.534166ms ago: executing program 1 (id=20328): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 211.345767ms ago: executing program 2 (id=20329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000008004503"]) 211.171967ms ago: executing program 5 (id=20331): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) 138.338048ms ago: executing program 0 (id=20332): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e24, @rand_addr=0x5}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='^', 0x1}], 0x1, 0x0, 0x0, 0x20004811}, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xc8d1, 0x4}, 0x8) 134.641118ms ago: executing program 5 (id=20333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x54, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='@'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b168fa3167"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) 412.09µs ago: executing program 0 (id=20334): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 222.57µs ago: executing program 2 (id=20335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c8c5}, 0x8000) 0s ago: executing program 5 (id=20336): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES64], 0x0, 0x54fe, &(0x7f0000006000)="$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") chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): tem [ 1043.518087][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1043.652967][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1043.691226][T10222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17577'. [ 1043.718905][T29908] udevd[29908]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1043.721734][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1043.767656][T29908] udevd[29908]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1044.025435][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1044.056365][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1044.180487][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1044.234050][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1045.079477][T10292] overlayfs: unrecognized mount option "\" or missing value [ 1045.095130][T10288] device tunl0 entered promiscuous mode [ 1045.136320][T10288] netlink: 'syz.3.17609': attribute type 1 has an invalid length. [ 1045.156089][T10288] netlink: 9 bytes leftover after parsing attributes in process `syz.3.17609'. [ 1045.959704][T10345] netlink: 164 bytes leftover after parsing attributes in process `syz.2.17636'. [ 1046.621195][ T4271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1046.714486][ T5140] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1046.773389][T10402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17663'. [ 1046.795695][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17663'. [ 1046.809202][T10402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17663'. [ 1046.823632][T10402] netlink: 'syz.1.17663': attribute type 19 has an invalid length. [ 1046.966186][ T5140] usb 3-1: Using ep0 maxpacket: 32 [ 1046.967183][T10412] mkiss: ax0: crc mode is auto. [ 1047.084519][ T5140] usb 3-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.137586][ T5140] usb 3-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.168416][ T5140] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1047.182582][ T5140] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1047.215045][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.260837][ T5140] usb 3-1: config 0 descriptor?? [ 1047.460586][T10435] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17681'. [ 1047.766273][ T5140] petalynx 0003:18B1:0037.0106: unknown main item tag 0x0 [ 1047.804826][ T5140] petalynx 0003:18B1:0037.0106: unknown main item tag 0x0 [ 1047.830342][ T5140] petalynx 0003:18B1:0037.0106: unknown main item tag 0x0 [ 1047.856062][ T5140] petalynx 0003:18B1:0037.0106: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 1048.014591][ T5140] usb 3-1: USB disconnect, device number 117 [ 1048.122637][T10460] fido_id[10460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1048.184873][T10468] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1048.369275][T10474] hpfs: bad mount options. [ 1048.530838][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1048.579124][T29908] udevd[29908]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1048.580368][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1048.618724][T29908] udevd[29908]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1048.800985][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1048.838464][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1048.948190][T10144] udevd[10144]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1049.018669][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1049.044003][T10144] udevd[10144]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1049.082019][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1049.294838][ T4259] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1049.503482][T10513] binder_alloc: binder_alloc_mmap_handler: 10512 200000ffc000-200001000000 already mapped failed -16 [ 1049.564845][ T4259] usb 6-1: Using ep0 maxpacket: 8 [ 1049.705094][ T4259] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1049.735502][ T4259] usb 6-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00 [ 1049.770025][ T4259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.816324][ T4259] usb 6-1: config 0 descriptor?? [ 1050.269189][T10543] nbd: couldn't find device at index 0 [ 1050.338272][ T4259] wacom 0003:056A:00D4.0107: Unknown device_type for 'HID 056a:00d4'. Assuming pen. [ 1050.366929][ T4259] wacom 0003:056A:00D4.0107: hidraw0: USB HID v0.00 Device [HID 056a:00d4] on usb-dummy_hcd.5-1/input0 [ 1050.383027][ T4228] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1050.418589][ T4259] input: Wacom Bamboo Pen Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00D4.0107/input/input141 [ 1050.543758][ T4259] usb 6-1: USB disconnect, device number 122 [ 1050.654349][T10562] fido_id[10562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1050.775265][ T4228] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1050.792110][ T4228] usb 3-1: config 0 has no interface number 0 [ 1050.979161][ T4228] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1051.000509][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.034358][ T4228] usb 3-1: Product: syz [ 1051.038573][ T4228] usb 3-1: Manufacturer: syz [ 1051.082627][ T4228] usb 3-1: SerialNumber: syz [ 1051.099683][ T4228] usb 3-1: config 0 descriptor?? [ 1051.110590][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17757'. [ 1051.180621][T10591] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 1051.196198][ T4228] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1051.395130][ T4228] gspca_spca1528: reg_w err -71 [ 1051.425956][ T4228] spca1528: probe of 3-1:0.1 failed with error -71 [ 1051.446001][ T4228] usb 3-1: USB disconnect, device number 118 [ 1051.488924][T26528] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 1051.534968][T10605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17764'. [ 1051.545927][T10604] delete_channel: no stack [ 1051.739449][T10615] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17769'. [ 1051.878569][T26528] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1051.887164][T26528] usb 4-1: config 0 has no interface number 0 [ 1051.902256][T26528] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1051.969136][T10629] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1052.096444][T26528] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1052.119591][T26528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.150480][T26528] usb 4-1: Product: syz [ 1052.158314][T26528] usb 4-1: Manufacturer: syz [ 1052.163074][T26528] usb 4-1: SerialNumber: syz [ 1052.203608][T26528] usb 4-1: config 0 descriptor?? [ 1052.908997][T26528] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 1052.941313][T26528] usb 4-1: USB disconnect, device number 123 [ 1053.103208][T10692] sctp: [Deprecated]: syz.1.17795 (pid 10692) Use of int in maxseg socket option. [ 1053.103208][T10692] Use struct sctp_assoc_value instead [ 1053.581833][T29908] udevd[29908]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1053.625949][T29908] udevd[29908]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1053.656121][T10722] program syz.2.17806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1053.791669][T10144] udevd[10144]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1053.850180][T10144] udevd[10144]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1053.993882][T29908] udevd[29908]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1054.031474][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1054.057133][T29908] udevd[29908]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1054.100693][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1054.156538][T10139] udevd[10139]: setting mode of /dev/vcs27 to 020660 failed: Read-only file system [ 1054.156632][T10139] udevd[10139]: setting owner of /dev/vcs27 to uid=0, gid=5 failed: Read-only file system [ 1054.174920][T10753] tmpfs: Bad value for 'mpol' [ 1054.254965][T10758] gfs2: path_lookup on c::: returned error -2 [ 1054.466507][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.466514][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1054.481471][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.608203][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1055.094446][T10796] netlink: 'syz.0.17843': attribute type 1 has an invalid length. [ 1055.138325][T10796] netlink: 'syz.0.17843': attribute type 2 has an invalid length. [ 1055.279363][T10802] mkiss: ax0: crc mode is auto. [ 1055.669892][T10819] netlink: 192 bytes leftover after parsing attributes in process `syz.3.17853'. [ 1055.698091][T10819] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17853'. [ 1056.218598][T10860] xt_hashlimit: max too large, truncated to 1048576 [ 1056.226791][ T4228] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1056.579768][T10887] program syz.3.17886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1056.645168][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.659016][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.676308][ T4228] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1056.688305][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.715554][ T4228] usb 3-1: config 0 descriptor?? [ 1056.851490][T10903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17895'. [ 1056.862576][T10903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17895'. [ 1057.226856][ T4228] samsung 0003:0419:0001.0108: item fetching failed at offset 3/7 [ 1057.242869][ T4228] samsung 0003:0419:0001.0108: parse failed [ 1057.249737][ T4228] samsung: probe of 0003:0419:0001.0108 failed with error -22 [ 1057.427547][ T4228] usb 3-1: USB disconnect, device number 119 [ 1057.435111][ T4259] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1057.507228][T10940] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1057.772046][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17919'. [ 1057.916166][ T9864] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1057.999031][ T4259] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1058.030035][ T4259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.050153][ T4259] usb 4-1: Product: syz [ 1058.060304][ T4259] usb 4-1: Manufacturer: syz [ 1058.069404][ T4259] usb 4-1: SerialNumber: syz [ 1058.083654][ T4259] usb 4-1: config 0 descriptor?? [ 1058.136958][ T4259] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1058.154635][T26528] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1058.163112][ T4259] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1058.185023][ T9864] usb 2-1: Using ep0 maxpacket: 8 [ 1058.195755][ T4259] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 1058.340134][ T4259] usb 4-1: USB disconnect, device number 124 [ 1058.364839][ T9864] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1058.404311][T26528] usb 6-1: Using ep0 maxpacket: 8 [ 1058.444948][ T9864] usb 2-1: config 9 has an invalid interface number: 5 but max is 1 [ 1058.452974][ T9864] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.463671][ T9864] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 1058.472946][ T9864] usb 2-1: config 9 has no interface number 0 [ 1058.479571][ T9864] usb 2-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x81, skipping [ 1058.490555][ T9864] usb 2-1: config 9 interface 5 has no altsetting 0 [ 1058.524429][T26528] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 62432, setting to 1024 [ 1058.535762][T26528] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1058.546019][T26528] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1058.555115][T26528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.565196][T26528] usb 6-1: config 0 descriptor?? [ 1058.585141][T10958] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1058.605429][T26528] hso 6-1:0.0: Can't find BULK OUT endpoint [ 1058.665470][ T9864] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 1058.675062][ T9864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.683061][ T9864] usb 2-1: Product: syz [ 1058.687912][ T9864] usb 2-1: Manufacturer: syz [ 1058.692521][ T9864] usb 2-1: SerialNumber: syz [ 1058.812556][ T4259] usb 6-1: USB disconnect, device number 123 [ 1058.843411][T29908] udevd[29908]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1058.869009][T29908] udevd[29908]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1058.953521][T10980] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1058.986666][T29908] udevd[29908]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1059.031510][ T9864] usb 2-1: USB disconnect, device number 124 [ 1059.040435][T29908] udevd[29908]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1059.146559][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1059.171056][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1059.300616][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1059.372324][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1059.380947][T29908] udevd[29908]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1059.486517][T29908] udevd[29908]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1059.776670][T11030] netlink: 96 bytes leftover after parsing attributes in process `syz.3.17955'. [ 1060.321932][T11049] device team_slave_0 left promiscuous mode [ 1060.333447][T11049] device team_slave_1 left promiscuous mode [ 1060.364728][T11049] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1061.141525][T11095] overlayfs: unrecognized mount option "\" or missing value [ 1061.173591][T11096] ODEBUG: Out of memory. ODEBUG disabled [ 1061.536654][T11111] device tunl0 entered promiscuous mode [ 1061.569767][T11111] netlink: 'syz.2.17990': attribute type 1 has an invalid length. [ 1061.590099][T11111] netlink: 9 bytes leftover after parsing attributes in process `syz.2.17990'. [ 1061.926943][T26528] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1062.284876][ T9864] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1062.445112][ T7] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1062.465498][T26528] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1062.478166][T26528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.486959][T26528] usb 4-1: Product: syz [ 1062.491135][T26528] usb 4-1: Manufacturer: syz [ 1062.496860][T26528] usb 4-1: SerialNumber: syz [ 1062.545892][T26528] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1062.684852][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 1062.724967][ T9864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1062.804934][ T9864] usb 3-1: config 4 has an invalid interface number: 210 but max is 0 [ 1062.804971][ T7] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1062.813265][ T9864] usb 3-1: config 4 has no interface number 0 [ 1062.828232][ T9864] usb 3-1: config 4 interface 210 has no altsetting 0 [ 1062.828278][ T7] usb 2-1: config 0 has no interface number 0 [ 1062.994919][ T7] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1063.004086][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.012821][ T7] usb 2-1: Product: syz [ 1063.017777][ T7] usb 2-1: Manufacturer: syz [ 1063.022386][ T7] usb 2-1: SerialNumber: syz [ 1063.032543][ T7] usb 2-1: config 0 descriptor?? [ 1063.035349][ T9864] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=8d.40 [ 1063.046767][ T9864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.055614][ T9864] usb 3-1: Product: syz [ 1063.059794][ T9864] usb 3-1: Manufacturer: syz [ 1063.065023][ T9864] usb 3-1: SerialNumber: syz [ 1063.076497][ T7] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1063.174791][T26528] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1063.376046][ T9864] smsusb:smsusb_probe: board id=8, interface number 210 [ 1063.390018][ T9864] usb 3-1: USB disconnect, device number 120 [ 1063.395167][ C0] usb 4-1: ath: unknown panic pattern! [ 1063.598541][ T5138] usb 4-1: USB disconnect, device number 125 [ 1063.734878][ T7] gspca_spca1528: reg_w err -71 [ 1063.764736][ T5140] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1063.772540][ T7] spca1528: probe of 2-1:0.1 failed with error -71 [ 1063.786066][ T7] usb 2-1: USB disconnect, device number 125 [ 1064.014703][ T5140] usb 6-1: Using ep0 maxpacket: 32 [ 1064.135035][ T5140] usb 6-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.155035][ T5140] usb 6-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.171014][ T5140] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1064.178795][ T5140] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1064.188782][ T5140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.206352][ T5140] usb 6-1: config 0 descriptor?? [ 1064.225181][T26528] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1064.242009][T26528] ath9k_htc: Failed to initialize the device [ 1064.259195][ T5138] usb 4-1: ath9k_htc: USB layer deinitialized [ 1064.832259][ T5140] petalynx 0003:18B1:0037.0109: unknown main item tag 0x0 [ 1064.849675][ T5140] petalynx 0003:18B1:0037.0109: unknown main item tag 0x0 [ 1064.857491][ T5140] petalynx 0003:18B1:0037.0109: unknown main item tag 0x0 [ 1064.875018][ T5140] petalynx 0003:18B1:0037.0109: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.5-1/input0 [ 1064.954982][ T9864] usb 6-1: USB disconnect, device number 124 [ 1065.033037][T11205] fido_id[11205]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1065.503336][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1065.517870][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1066.596327][T11213] netlink: 'syz.5.18043': attribute type 5 has an invalid length. [ 1066.635155][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1066.707673][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1066.780060][T10144] udevd[10144]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1066.887015][T10144] udevd[10144]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1066.918542][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1067.022972][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1067.111459][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18056'. [ 1067.123365][T10144] udevd[10144]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1067.176704][T10144] udevd[10144]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1067.193598][T26528] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1067.434840][T26528] usb 3-1: Using ep0 maxpacket: 32 [ 1067.555178][T26528] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1067.566129][T26528] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1067.604860][T26528] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1067.616790][T26528] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1067.634077][T26528] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1067.795194][T26528] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1067.815091][T26528] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=6 [ 1067.832505][T26528] usb 3-1: Product: syz [ 1067.837709][T26528] usb 3-1: Manufacturer: syz [ 1067.842341][T26528] usb 3-1: SerialNumber: syz [ 1067.854109][T11293] netlink: 96 bytes leftover after parsing attributes in process `syz.1.18073'. [ 1067.884030][T26528] usb 3-1: config 0 descriptor?? [ 1067.936284][T26528] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1067.979620][T26528] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1068.130641][T26528] usb 3-1: USB disconnect, device number 121 [ 1068.165655][T26528] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1068.475297][T11337] misc userio: Invalid payload size [ 1068.517531][T11337] misc userio: The device must be registered before sending interrupts [ 1068.767304][T11355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18097'. [ 1069.290525][T11390] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1069.919363][ T9864] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1070.149805][T26528] kernel write not supported for file /adsp1 (pid: 26528 comm: kworker/0:2) [ 1070.195013][ T9864] usb 4-1: Using ep0 maxpacket: 16 [ 1070.293367][T11422] mkiss: ax0: crc mode is auto. [ 1070.325211][ T9864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.350801][ T9864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.362257][ T9864] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 1070.400206][ T9864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.435562][ T9864] usb 4-1: config 0 descriptor?? [ 1070.585274][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1070.647472][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1070.694319][T26528] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1070.736623][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1070.782837][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1070.908019][ T9864] wacom 0003:056A:0003.010A: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 1070.929531][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1070.934893][T26528] usb 6-1: Using ep0 maxpacket: 16 [ 1070.963553][ T9864] wacom 0003:056A:0003.010A: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.3-1/input0 [ 1070.989344][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1071.006708][ T9864] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0003.010A/input/input146 [ 1071.012265][T11464] 9pnet: p9_fd_create_unix (11464): problem connecting socket: ./file0: -13 [ 1071.087648][T26528] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1071.114856][T26528] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.173631][ T9864] usb 4-1: USB disconnect, device number 126 [ 1071.181396][T26528] usb 6-1: config 0 has no interface number 0 [ 1071.207767][T10139] udevd[10139]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1071.249792][T11466] fido_id[11466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1071.270710][T10139] udevd[10139]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1071.365066][T26528] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1071.374179][T26528] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.412817][T26528] usb 6-1: Product: syz [ 1071.430003][T29908] udevd[29908]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1071.432783][T26528] usb 6-1: Manufacturer: syz [ 1071.442794][T11484] RDS: rds_bind could not find a transport for ::4006:0:20:0, load rds_tcp or rds_rdma? [ 1071.462597][T26528] usb 6-1: SerialNumber: syz [ 1071.470598][T29908] udevd[29908]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1071.491156][T26528] usb 6-1: config 0 descriptor?? [ 1071.539725][T26528] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 1071.568322][T26528] usb 6-1: No valid video chain found. [ 1071.787209][T26528] usb 6-1: USB disconnect, device number 125 [ 1073.061806][T11568] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18199'. [ 1073.136853][T11572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18201'. [ 1073.815022][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18221'. [ 1074.664996][ T4228] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1074.814945][ T9864] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1075.078382][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1075.090565][ T9864] usb 6-1: Using ep0 maxpacket: 16 [ 1075.101844][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.120422][ T4228] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1075.130586][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.146119][ T4228] usb 3-1: config 0 descriptor?? [ 1075.195309][ T6470] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1075.215333][ T9864] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1075.228116][ T9864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.238920][ T9864] usb 6-1: config 0 descriptor?? [ 1075.276386][ T9864] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1075.394960][T26528] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 1075.444742][ T6470] usb 2-1: Using ep0 maxpacket: 32 [ 1075.485198][ T9864] usb 6-1: Detected FT232BM [ 1075.575081][ T6470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.586723][ T6470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.597164][ T6470] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1075.606964][ T6470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.618243][ T6470] usb 2-1: config 0 descriptor?? [ 1075.639273][ T4228] waltop 0003:172F:0034.010B: hidraw0: USB HID v0.01 Device [HID 172f:0034] on usb-dummy_hcd.2-1/input0 [ 1075.754759][T26528] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 1075.762950][T26528] usb 4-1: config 0 has no interface number 0 [ 1075.769603][T26528] usb 4-1: config 0 interface 29 has no altsetting 0 [ 1075.842097][ T5138] usb 3-1: USB disconnect, device number 122 [ 1075.915015][ T9864] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1075.922761][ T9864] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1075.932623][ T9864] usb 6-1: USB disconnect, device number 126 [ 1075.935190][T26528] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1075.947148][ T9864] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1075.959330][T26528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.964320][ T9864] ftdi_sio 6-1:0.0: device disconnected [ 1075.968321][T26528] usb 4-1: Product: syz [ 1075.977649][T26528] usb 4-1: Manufacturer: syz [ 1075.982259][T26528] usb 4-1: SerialNumber: syz [ 1075.993506][T26528] usb 4-1: config 0 descriptor?? [ 1076.085574][ T6470] hid (null): unknown global tag 0xe [ 1076.092872][ T6470] hid-generic 0003:0C70:F0B6.010C: unknown global tag 0xe [ 1076.100560][ T6470] hid-generic 0003:0C70:F0B6.010C: item 0 1 1 14 parsing failed [ 1076.109225][ T6470] hid-generic: probe of 0003:0C70:F0B6.010C failed with error -22 [ 1076.244982][T26528] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1076.288343][ T9864] usb 2-1: USB disconnect, device number 126 [ 1076.465048][T26528] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 1076.471989][T26528] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 1076.483225][T10144] udevd[10144]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1076.488578][T26528] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 1076.498992][T10144] udevd[10144]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1076.617460][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1076.644988][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1076.659756][T26528] peak_usb: probe of 4-1:0.29 failed with error -22 [ 1076.680039][T26528] usb 4-1: USB disconnect, device number 127 [ 1077.105095][ T5138] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1077.233499][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1077.260781][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1077.360018][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1077.371875][ T5138] usb 3-1: Using ep0 maxpacket: 8 [ 1077.399708][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1077.481877][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1077.495030][ T5138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.508967][ T5138] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1077.528003][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1077.542671][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.553374][ T5138] usb 3-1: config 0 descriptor?? [ 1077.792552][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18288'. [ 1078.038518][ T5138] hid-multitouch 0003:0EEF:72C4.010D: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 1078.250798][ T6470] usb 3-1: USB disconnect, device number 123 [ 1078.265241][ T26] kauditd_printk_skb: 2579 callbacks suppressed [ 1078.265254][ T26] audit: type=1326 audit(2000000314.962:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.1.18301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32b77ae9a9 code=0x0 [ 1078.954973][T26528] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1079.049021][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18315'. [ 1079.325015][T26528] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1079.331737][T26528] usb 6-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 1079.357194][T26528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.416404][T26528] usb 6-1: config 0 descriptor?? [ 1079.898030][T26528] wacom 0003:056A:0315.010E: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 1079.945205][T26528] wacom 0003:056A:0315.010E: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.5-1/input0 [ 1079.982898][T26528] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0315.010E/input/input149 [ 1080.098205][T26528] usb 6-1: USB disconnect, device number 127 [ 1080.118444][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18319'. [ 1080.176769][T11846] fido_id[11846]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1080.291361][T11850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18334'. [ 1080.555000][T11835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1081.542896][T10144] udevd[10144]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1081.603621][T10144] udevd[10144]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1081.672880][T29908] udevd[29908]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1081.761807][T29908] udevd[29908]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1081.883204][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1081.918202][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1082.167477][T29908] udevd[29908]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1082.240732][T29908] udevd[29908]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1082.466531][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1082.553290][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1082.660148][T11953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18383'. [ 1082.705360][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18383'. [ 1082.737634][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18386'. [ 1082.873954][T11963] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1083.210094][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18399'. [ 1083.241550][ T26] audit: type=1326 audit(2000000319.942:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.1.18400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32b77ae9a9 code=0x0 [ 1083.339878][T11990] [U] „ [ 1083.844947][T26528] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1084.215107][T26528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.270230][T26528] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1084.316596][T26528] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1084.334844][T26528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.366361][T26528] usb 4-1: config 0 descriptor?? [ 1084.846721][T26528] ortek 0003:1223:3F07.010F: unknown main item tag 0x6 [ 1084.874120][T26528] ortek 0003:1223:3F07.010F: bogus close delimiter [ 1084.901524][T26528] ortek 0003:1223:3F07.010F: item 0 0 2 10 parsing failed [ 1084.939991][T26528] ortek: probe of 0003:1223:3F07.010F failed with error -22 [ 1085.057362][T26528] usb 4-1: USB disconnect, device number 2 [ 1085.301837][T12077] netlink: 332 bytes leftover after parsing attributes in process `syz.0.18445'. [ 1085.332154][T12077] netlink: 'syz.0.18445': attribute type 9 has an invalid length. [ 1085.372784][T12077] netlink: 108 bytes leftover after parsing attributes in process `syz.0.18445'. [ 1085.400039][T12077] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18445'. [ 1085.641078][ T1225] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1086.352466][ T1225] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1086.484935][ T4228] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1086.579108][T26528] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1086.622449][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1086.667041][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1086.705465][T12148] syz.0.18480 (12148): attempted to duplicate a private mapping with mremap. This is not supported. [ 1086.839895][T26528] usb 4-1: Using ep0 maxpacket: 8 [ 1086.895119][ T4228] usb 6-1: config 64 has an invalid interface number: 157 but max is 0 [ 1086.905376][ T4228] usb 6-1: config 64 has no interface number 0 [ 1086.933185][ T4228] usb 6-1: config 64 interface 157 has no altsetting 0 [ 1086.964988][T26528] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1086.987981][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1087.021357][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1087.043610][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18485'. [ 1087.065206][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18485'. [ 1087.077967][T12158] netlink: 'syz.1.18485': attribute type 12 has an invalid length. [ 1087.088884][T12158] netlink: 'syz.1.18485': attribute type 14 has an invalid length. [ 1087.125883][T26528] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1087.145223][ T4228] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=39.96 [ 1087.155134][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.163239][ T4228] usb 6-1: Product: syz [ 1087.168474][ T4228] usb 6-1: Manufacturer: syz [ 1087.173610][ T4228] usb 6-1: SerialNumber: syz [ 1087.179736][T26528] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1087.209167][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1087.231904][T26528] usb 4-1: Product: syz [ 1087.242018][T26528] usb 4-1: Manufacturer: syz [ 1087.252145][T26528] usb 4-1: SerialNumber: syz [ 1087.262657][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1087.361855][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1087.410851][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1087.509103][ T4228] comedi comedi4: Wrong number of endpoints [ 1087.525453][T26528] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1087.525990][ T4228] ni6501 6-1:64.157: driver 'ni6501' failed to auto-configure device. [ 1087.533297][T26528] usb 4-1: Handspring Visor / Palm OS: Number of ports: 1 [ 1087.601178][ T4228] usb 6-1: USB disconnect, device number 2 [ 1087.747358][T26528] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 1087.780265][T26528] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1087.820469][T26528] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1087.849236][T26528] usb 4-1: USB disconnect, device number 3 [ 1087.888621][T26528] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1087.909586][T29908] udevd[29908]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1087.932675][T26528] visor 4-1:1.0: device disconnected [ 1087.948570][T29908] udevd[29908]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1088.468466][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18501'. [ 1088.498353][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18501'. [ 1088.785909][T12204] program syz.2.18508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1089.677638][T12236] tmpfs: Bad value for 'mpol' [ 1090.181408][T12250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18526'. [ 1090.366207][T12261] netlink: 64 bytes leftover after parsing attributes in process `syz.5.18536'. [ 1091.230567][T12259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.883504][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1091.982853][T29908] udevd[29908]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1091.987495][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1092.080880][T29908] udevd[29908]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1092.163495][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1092.175654][T12302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.213706][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1092.294533][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1092.351885][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1092.548820][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1092.613103][T29905] udevd[29905]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:0' failed: Read-only file system [ 1093.092943][T12364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18586'. [ 1093.804891][ T5138] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 1093.885431][T26528] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1094.135487][T26528] usb 4-1: Using ep0 maxpacket: 16 [ 1094.175562][ T5138] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 1094.183667][ T5138] usb 3-1: config 0 has no interface number 0 [ 1094.200418][ T5138] usb 3-1: config 0 interface 29 has no altsetting 0 [ 1094.219748][T12424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18615'. [ 1094.265567][T26528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.278031][T26528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.293045][T26528] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1094.307315][T26528] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1094.317781][T26528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.336505][T26528] usb 4-1: config 0 descriptor?? [ 1094.365612][ T5138] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1094.380731][ T5138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.397243][ T5138] usb 3-1: Product: syz [ 1094.401442][ T5138] usb 3-1: Manufacturer: syz [ 1094.407933][ T5138] usb 3-1: SerialNumber: syz [ 1094.423991][ T5138] usb 3-1: config 0 descriptor?? [ 1094.674387][ T5138] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1094.817060][T26528] microsoft 0003:045E:07DA.0110: unknown main item tag 0x0 [ 1094.831938][T26528] microsoft 0003:045E:07DA.0110: unknown main item tag 0x0 [ 1094.840419][T26528] microsoft 0003:045E:07DA.0110: unknown main item tag 0x0 [ 1094.857291][T26528] microsoft 0003:045E:07DA.0110: unknown main item tag 0x0 [ 1094.868237][T26528] microsoft 0003:045E:07DA.0110: unknown main item tag 0x0 [ 1094.880729][T26528] microsoft 0003:045E:07DA.0110: unknown main item tag 0x0 [ 1094.891789][T26528] microsoft 0003:045E:07DA.0110: unknown main item tag 0x0 [ 1094.902051][ T5138] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 1094.912977][T26528] microsoft 0003:045E:07DA.0110: unknown main item tag 0x0 [ 1094.923125][ T5138] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 1094.934090][T26528] microsoft 0003:045E:07DA.0110: unknown main item tag 0x0 [ 1094.948305][ T5138] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 1094.957333][T26528] microsoft 0003:045E:07DA.0110: unknown main item tag 0x0 [ 1094.969694][T26528] microsoft 0003:045E:07DA.0110: No inputs registered, leaving [ 1094.980540][T26528] microsoft 0003:045E:07DA.0110: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1094.998716][T26528] microsoft 0003:045E:07DA.0110: no inputs found [ 1095.006973][T26528] microsoft 0003:045E:07DA.0110: could not initialize ff, continuing anyway [ 1095.041882][T26528] usb 4-1: USB disconnect, device number 4 [ 1095.111314][T12449] fido_id[12449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1095.648478][T12441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.681320][ T6470] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1095.701911][ T6470] hid-generic 0000:0000:0000.0111: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1095.826415][T12456] fido_id[12456]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1096.275620][ T5138] peak_usb: probe of 3-1:0.29 failed with error -22 [ 1096.302055][ T5138] usb 3-1: USB disconnect, device number 124 [ 1096.416499][T12475] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1096.705073][T12495] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1096.859561][T12508] trusted_key: encrypted_key: insufficient parameters specified [ 1097.198572][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1097.221472][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1097.313325][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1097.342351][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1097.459063][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1097.479176][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1097.548363][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1097.551339][T12490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.569991][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1097.668226][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1097.715789][T29905] udevd[29905]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 1098.322397][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18677'. [ 1098.336405][T12553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18677'. [ 1098.359433][T12553] netlink: 'syz.2.18677': attribute type 12 has an invalid length. [ 1098.812670][T12586] devtmpfs: Cannot retroactively limit size [ 1099.025562][T26528] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1099.275916][T26528] usb 2-1: Using ep0 maxpacket: 32 [ 1099.405623][T26528] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1099.428709][T26528] usb 2-1: config 0 has no interface number 0 [ 1099.533100][T12636] IPv6: sit2: Disabled Multicast RS [ 1099.595635][T26528] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1099.630190][T26528] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.664198][T26528] usb 2-1: Product: syz [ 1099.679797][T26528] usb 2-1: Manufacturer: syz [ 1099.700029][T26528] usb 2-1: SerialNumber: syz [ 1099.732251][T26528] usb 2-1: config 0 descriptor?? [ 1099.776678][T26528] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1099.987083][T26528] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1100.035759][T26528] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1100.446472][T26528] usb 2-1: USB disconnect, device number 127 [ 1100.467923][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 1100.478681][T26528] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1100.502820][T26528] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1100.528277][T26528] quatech2 2-1:0.51: device disconnected [ 1101.132126][T12692] program syz.5.18743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1101.768146][T12736] netlink: 'syz.2.18765': attribute type 3 has an invalid length. [ 1101.914949][ T9864] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1102.087930][T12754] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18774'. [ 1102.160867][ T9864] usb 2-1: Using ep0 maxpacket: 32 [ 1102.279076][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18781'. [ 1102.613895][ T9864] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1102.631553][ T9864] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1102.645481][ T9864] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1102.829972][ T9864] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1102.850768][ T9864] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1102.885221][ T9864] usb 2-1: Product: syz [ 1102.889438][ T9864] usb 2-1: Manufacturer: syz [ 1102.920126][ T9864] usb 2-1: SerialNumber: syz [ 1102.992586][ T9864] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input153 [ 1103.472141][T12815] xt_policy: neither incoming nor outgoing policy selected [ 1103.655486][ T5140] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1103.899512][T12798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.915385][ T5140] usb 3-1: Using ep0 maxpacket: 16 [ 1104.035213][ T5140] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 1104.050529][ T5140] usb 3-1: config 0 has no interface number 0 [ 1104.058229][ T5140] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.235982][ T5140] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1104.249216][ T5140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.259833][ T5140] usb 3-1: Product: syz [ 1104.266178][ T5140] usb 3-1: Manufacturer: syz [ 1104.270991][ T5140] usb 3-1: SerialNumber: syz [ 1104.292843][ T5140] usb 3-1: config 0 descriptor?? [ 1104.375842][ T5140] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1104.515649][T26528] usb 2-1: USB disconnect, device number 2 [ 1104.552358][ T5147] usb 3-1: USB disconnect, device number 125 [ 1104.565230][ T144] usb 3-1: Failed to submit usb control message: -71 [ 1104.593187][ T144] usb 3-1: unable to send the bmi data to the device: -71 [ 1104.610425][ T144] usb 3-1: unable to get target info from device [ 1104.618958][T26528] appletouch 2-1:1.0: input: appletouch disconnected [ 1104.619848][ T144] usb 3-1: could not get target info (-71) [ 1104.632182][ T144] usb 3-1: could not probe fw (-71) [ 1105.024929][ T9864] Bluetooth: hci3: command 0x0405 tx timeout [ 1105.335036][ T9864] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1105.405203][T12868] sctp: [Deprecated]: syz.2.18824 (pid 12868) Use of int in maxseg socket option. [ 1105.405203][T12868] Use struct sctp_assoc_value instead [ 1105.549595][T12879] xt_CT: No such helper "snmp" [ 1105.597990][ T9864] usb 4-1: Using ep0 maxpacket: 16 [ 1105.752513][ T9864] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1105.773683][ T9864] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1105.832345][ T9864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.880268][T12906] netlink: 108 bytes leftover after parsing attributes in process `syz.5.18835'. [ 1105.901195][ T9864] usb 4-1: config 0 descriptor?? [ 1106.367316][T12936] binder: 12935:12936 ioctl c0306201 0 returned -14 [ 1106.396524][ T9864] hid (null): unknown global tag 0xd [ 1106.407017][ T9864] hid (null): unknown global tag 0xd [ 1106.413682][ T9864] hid (null): usage index exceeded [ 1106.456037][T12941] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18847'. [ 1106.492303][T12941] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18847'. [ 1106.508163][T12944] program syz.2.18848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1106.605482][ T9864] usb 4-1: USB disconnect, device number 5 [ 1106.883061][T12959] netlink: 140 bytes leftover after parsing attributes in process `syz.0.18854'. [ 1107.594091][ T6470] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1107.655777][ T6470] hid-generic 0000:0000:0000.0113: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1107.905958][ T9864] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1108.295160][ T9864] usb 2-1: config 0 has no interfaces? [ 1108.390207][ T9864] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1108.410400][ T9864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1108.439818][ T9864] usb 2-1: SerialNumber: syz [ 1108.461630][ T9864] usb 2-1: config 0 descriptor?? [ 1108.748632][ T6470] usb 2-1: USB disconnect, device number 3 [ 1109.303229][T13004] binder: 13003:13004 ioctl 400c620e 0 returned -14 [ 1109.726875][T12994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1110.482122][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18886'. [ 1113.094874][ T6470] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1114.285310][ T5140] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1114.524931][ T6470] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1114.535420][ T5140] usb 6-1: Using ep0 maxpacket: 8 [ 1114.535427][ T6470] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.563380][ T6470] usb 3-1: config 0 descriptor?? [ 1114.656448][ T5140] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1114.677649][ T5140] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1114.700172][ T5140] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1114.731386][ T5140] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1114.770713][ T5140] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1114.789467][ T5140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.850546][ T6470] cp210x 3-1:0.0: cp210x converter detected [ 1114.899913][T13161] netlink: 88 bytes leftover after parsing attributes in process `syz.1.18949'. [ 1114.909917][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18949'. [ 1115.105017][ T5140] usb 6-1: GET_CAPABILITIES returned 0 [ 1115.105165][ T6470] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1115.110632][ T5140] usbtmc 6-1:16.0: can't read capabilities [ 1115.198104][ T6470] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1115.284941][ T5147] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1115.313132][ T5140] usb 6-1: USB disconnect, device number 3 [ 1115.412131][ T6470] usb 3-1: USB disconnect, device number 126 [ 1115.427728][ T6470] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1115.450013][ T6470] cp210x 3-1:0.0: device disconnected [ 1115.535335][ T5147] usb 4-1: Using ep0 maxpacket: 32 [ 1115.654958][ T5147] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.674799][ T5147] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1115.681556][ T5147] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1115.715326][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.737016][ T5147] usb 4-1: config 0 descriptor?? [ 1115.906632][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.913135][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.948416][T13179] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18957'. [ 1116.085223][T13183] block nbd1: server does not support multiple connections per device. [ 1116.099540][T13183] block nbd1: shutting down sockets [ 1116.211023][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18965'. [ 1116.226744][ T5147] logitech 0003:046D:C50C.0114: unexpected long global item [ 1116.243590][ T5147] logitech 0003:046D:C50C.0114: parse failed [ 1116.265515][ T5147] logitech: probe of 0003:046D:C50C.0114 failed with error -22 [ 1116.334926][ T6470] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1116.398231][T13206] netlink: 1 bytes leftover after parsing attributes in process `syz.2.18969'. [ 1116.430155][ T5147] usb 4-1: USB disconnect, device number 6 [ 1116.562415][T13213] xt_CT: No such helper "snmp" [ 1116.662496][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1116.767514][ T6470] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1116.777352][ T6470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.790535][ T6470] usb 6-1: config 0 descriptor?? [ 1116.840856][ T6470] cp210x 6-1:0.0: cp210x converter detected [ 1117.169126][T13237] vxcan0: tx address claim with dlc 0 [ 1117.203251][T13239] netlink: 104 bytes leftover after parsing attributes in process `syz.2.18983'. [ 1117.255125][ T6470] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1117.317969][ T6470] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1117.379685][ T9804] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1117.523906][ T6470] usb 6-1: USB disconnect, device number 4 [ 1117.535966][ T6470] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1117.551790][ T6470] cp210x 6-1:0.0: device disconnected [ 1117.595330][ T5147] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1117.964910][ T5147] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1117.974020][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.007631][ T5147] usb 4-1: config 0 descriptor?? [ 1118.046504][ T5147] cp210x 4-1:0.0: cp210x converter detected [ 1118.376324][T13283] netlink: 'syz.5.19005': attribute type 2 has an invalid length. [ 1118.486763][ T5147] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1118.687842][ T5147] usb 4-1: USB disconnect, device number 7 [ 1118.713911][ T5147] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1118.729375][ T5147] cp210x 4-1:0.0: device disconnected [ 1118.851008][T13314] syzkaller1: tun_chr_ioctl cmd 1074025694 [ 1119.037419][ T5140] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1119.295438][ T5140] usb 2-1: Using ep0 maxpacket: 16 [ 1119.415257][ T5140] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1119.434799][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.447812][ T5140] usb 2-1: config 0 descriptor?? [ 1119.500381][ T5140] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1119.702665][T13358] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 1119.702665][T13358] [ 1119.789605][T13362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19041'. [ 1119.925526][ T5140] gspca_sonixj: reg_r err -71 [ 1119.930286][ T5140] sonixj: probe of 2-1:0.0 failed with error -71 [ 1119.959608][ T5140] usb 2-1: USB disconnect, device number 4 [ 1120.289390][ T6470] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1120.551337][ T6470] usb 4-1: Using ep0 maxpacket: 16 [ 1120.699385][ T6470] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1120.719769][ T6470] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1120.736898][ T6470] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1120.749360][ T6470] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1120.810150][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19059'. [ 1120.820251][T13399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19059'. [ 1120.830425][ T5140] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1120.897791][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19061'. [ 1120.949707][ T6470] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1120.959589][ T6470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.968155][ T6470] usb 4-1: Product: syz [ 1120.972837][ T6470] usb 4-1: Manufacturer: syz [ 1120.982994][ T6470] usb 4-1: SerialNumber: syz [ 1120.990182][ T6470] usb 4-1: config 0 descriptor?? [ 1121.225155][ T9864] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1121.273615][T13411] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 1121.280595][ T6470] usb 4-1: Can not set alternate setting to 1, error: -71 [ 1121.298552][ T6470] synaptics_usb: probe of 4-1:0.0 failed with error -71 [ 1121.316114][ T6470] usb 4-1: USB disconnect, device number 8 [ 1121.374990][ T5140] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1121.385392][ T5140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.393416][ T5140] usb 6-1: Product: syz [ 1121.398641][ T5140] usb 6-1: Manufacturer: syz [ 1121.403254][ T5140] usb 6-1: SerialNumber: syz [ 1121.418203][ T5140] usb 6-1: config 0 descriptor?? [ 1121.460053][ T5140] ch341 6-1:0.0: ch341-uart converter detected [ 1121.484861][ T9864] usb 2-1: Using ep0 maxpacket: 8 [ 1121.624973][ T9864] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1121.633219][ T9864] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1121.654950][ T9864] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1121.674287][ T9864] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1121.694320][ T9864] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1121.724863][ T9864] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1121.733956][ T9864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.835060][ T6470] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1122.025016][ T9864] usb 2-1: GET_CAPABILITIES returned 0 [ 1122.030570][ T9864] usbtmc 2-1:16.0: can't read capabilities [ 1122.215140][ T6470] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1122.234939][ T6470] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1122.242706][T13412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.246210][ T6470] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1122.246237][ T6470] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1122.282879][ T5147] usb 2-1: USB disconnect, device number 5 [ 1122.324320][ T5140] usb 6-1: failed to send control message: -71 [ 1122.330819][ T5140] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1122.359151][ T5140] usb 6-1: USB disconnect, device number 5 [ 1122.369368][ T5140] ch341 6-1:0.0: device disconnected [ 1122.655161][ T6470] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1122.675327][ T6470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.713332][ T6470] usb 4-1: Product: syz [ 1122.724674][ T6470] usb 4-1: SerialNumber: syz [ 1122.820701][ T6470] usb 4-1: config 0 descriptor?? [ 1123.084986][ T6470] usb 4-1: Can not set alternate setting to 1, error: -71 [ 1123.102379][ T6470] synaptics_usb: probe of 4-1:0.0 failed with error -71 [ 1123.165479][ T6470] usb 4-1: USB disconnect, device number 9 [ 1123.612882][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19075'. [ 1123.662608][T13437] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 1124.716956][T13457] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1124.943117][T13444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.536690][T13457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.545158][T13457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.915051][ T4259] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1125.999488][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19103'. [ 1126.168195][T13502] netlink: 104 bytes leftover after parsing attributes in process `syz.5.19104'. [ 1126.275105][ T4259] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1126.312035][ T4259] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1126.345088][ T4259] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1126.400595][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.465403][T13477] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1126.624825][ T5140] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1126.644035][T13513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19109'. [ 1126.861821][ T4259] usb 2-1: USB disconnect, device number 6 [ 1126.994945][ T5140] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1127.003087][ T5140] usb 6-1: config 0 has no interface number 0 [ 1127.027536][ T5140] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1127.048755][ T5140] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1127.215413][T13503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1127.226480][ T5140] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1127.236647][ T5140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.255431][ T5140] usb 6-1: Product: syz [ 1127.259700][ T5140] usb 6-1: Manufacturer: syz [ 1127.277567][ T5140] usb 6-1: SerialNumber: syz [ 1127.315444][ T5140] usb 6-1: config 0 descriptor?? [ 1127.335512][T13506] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1127.375343][ T5140] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1127.440961][ T5140] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1127.854119][ T5140] usb 6-1: USB disconnect, device number 6 [ 1127.870463][ T5140] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1127.910910][ T5140] cyberjack 6-1:0.69: device disconnected [ 1129.346363][T13565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1129.413053][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19141'. [ 1130.718781][T13619] program syz.2.19157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1131.175950][T13606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1131.201802][T13633] kvm [13631]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 1131.339528][T13640] program syz.3.19167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1131.846027][T13656] netlink: 277 bytes leftover after parsing attributes in process `syz.2.19175'. [ 1133.044913][T13673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1133.627419][ T4259] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1133.775833][T13725] netlink: 'syz.2.19207': attribute type 4 has an invalid length. [ 1133.919652][ T4259] usb 6-1: Using ep0 maxpacket: 16 [ 1134.064659][ T4259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1134.272566][ T4199] block nbd1: Receive control failed (result -32) [ 1134.282873][ T4259] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1134.293121][ T4259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.306848][ T4259] usb 6-1: Product: syz [ 1134.311031][ T4259] usb 6-1: Manufacturer: syz [ 1134.324345][ T4259] usb 6-1: SerialNumber: syz [ 1134.334125][ T4259] usb 6-1: config 0 descriptor?? [ 1134.390440][ T4259] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1134.411003][ T4259] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1135.450155][ T5140] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1135.695493][ T5140] usb 2-1: Using ep0 maxpacket: 32 [ 1135.710563][T13808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19243'. [ 1135.758256][ T4259] em28xx 6-1:0.0: chip ID is em2874 [ 1135.826952][ T5140] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1135.878786][ T5140] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1135.900386][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19248'. [ 1135.901221][ T5140] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1135.925038][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.940236][ T5140] usb 2-1: config 0 descriptor?? [ 1136.069189][ T4199] block nbd2: Receive control failed (result -32) [ 1136.104412][ T4259] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1136.115692][ T4259] em28xx 6-1:0.0: board has no eeprom [ 1136.234477][ T4259] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1136.242384][ T4259] em28xx 6-1:0.0: dvb set to bulk mode. [ 1136.269881][ T4259] usb 6-1: USB disconnect, device number 7 [ 1136.283279][ T4259] em28xx 6-1:0.0: Disconnecting em28xx [ 1136.299218][ T4228] em28xx 6-1:0.0: Binding DVB extension [ 1136.405318][ T4228] em28xx 6-1:0.0: Registering input extension [ 1136.424063][ T5140] corsair-cpro 0003:1B1C:0C10.0115: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 1136.541122][ T5140] corsair-cpro: probe of 0003:1B1C:0C10.0115 failed with error -38 [ 1136.561349][ T4228] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1136.575901][ T4228] Registered IR keymap rc-empty [ 1136.619848][ T5140] usb 2-1: USB disconnect, device number 7 [ 1136.631185][ T4228] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1136.688344][ T4228] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input156 [ 1136.762663][ T4228] em28xx 6-1:0.0: Input extension successfully initialized [ 1136.785290][T13859] fido_id[13859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1136.804285][ T4259] em28xx 6-1:0.0: Closing input extension [ 1136.885279][ T4259] em28xx 6-1:0.0: Freeing device [ 1136.977265][T13873] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19272'. [ 1138.489797][T13939] sp0: Synchronizing with TNC [ 1139.068534][T24803] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1139.089137][ T5147] kernel read not supported for file /dsp1 (pid: 5147 comm: kworker/0:16) [ 1139.715465][T24803] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.744815][T24803] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1139.855100][T24803] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1139.869711][T24803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1139.896529][T24803] usb 2-1: SerialNumber: syz [ 1140.047793][T14014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19328'. [ 1140.074445][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19328'. [ 1140.141082][T14019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19328'. [ 1140.184327][T14019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19328'. [ 1140.207766][T24803] usb 2-1: 0:2 : does not exist [ 1140.212736][T24803] usb 2-1: unit 255 not found! [ 1140.280988][T24803] usb 2-1: USB disconnect, device number 8 [ 1140.332348][ T4228] kernel read not supported for file /dsp (pid: 4228 comm: kworker/1:3) [ 1140.557723][T29905] udevd[29905]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1140.687542][T14037] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19338'. [ 1140.780619][T14043] xt_HMARK: spi-set and port-set can't be combined [ 1140.876555][T14045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19342'. [ 1141.198446][ T26] audit: type=1326 audit(2000000377.902:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14059 comm="syz.5.19350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21fc69a9 code=0x7ffc0000 [ 1141.271624][ T26] audit: type=1326 audit(2000000377.902:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14059 comm="syz.5.19350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fad21fc69a9 code=0x7ffc0000 [ 1141.344840][ T26] audit: type=1326 audit(2000000377.952:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14059 comm="syz.5.19350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad21fc69a9 code=0x0 [ 1141.451724][ T26] audit: type=1326 audit(2000000378.152:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.3.19353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fbdff9a9 code=0x7ffc0000 [ 1141.518807][ T26] audit: type=1326 audit(2000000378.152:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.3.19353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f16fbdff9a9 code=0x7ffc0000 [ 1141.578755][ T26] audit: type=1326 audit(2000000378.152:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.3.19353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fbdff9a9 code=0x7ffc0000 [ 1141.660942][ T26] audit: type=1326 audit(2000000378.222:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.3.19353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fbdff9a9 code=0x7ffc0000 [ 1141.767439][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19358'. [ 1141.911334][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19360'. [ 1142.345404][T24803] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1142.508687][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19376'. [ 1142.585415][T24803] usb 4-1: Using ep0 maxpacket: 32 [ 1142.705178][T24803] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1142.745456][T24803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.778302][T24803] usb 4-1: config 0 descriptor?? [ 1142.817517][T24803] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1143.079484][T14147] 9pnet: Insufficient options for proto=fd [ 1143.715083][T24803] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 1143.785570][T24803] sq930x: probe of 4-1:0.0 failed with error -71 [ 1143.795570][T24803] usb 4-1: USB disconnect, device number 10 [ 1143.889333][ T26] audit: type=1326 audit(2000000380.592:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14191 comm="syz.5.19411" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad21fc69a9 code=0x0 [ 1143.914496][ T4228] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1144.055182][ T5140] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1144.184311][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 1144.212859][T14197] netlink: 'syz.3.19413': attribute type 2 has an invalid length. [ 1144.295414][ T5140] usb 3-1: Using ep0 maxpacket: 8 [ 1144.304595][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.327031][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.347275][ T4228] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1144.362519][T14206] netlink: 176 bytes leftover after parsing attributes in process `syz.0.19417'. [ 1144.371895][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.382727][T14206] device ip6gretap0 entered promiscuous mode [ 1144.392871][ T4228] usb 2-1: config 0 descriptor?? [ 1144.401760][T14206] netlink: 176 bytes leftover after parsing attributes in process `syz.0.19417'. [ 1144.414899][ T5140] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1144.424969][ T5140] usb 3-1: too many configurations: 73, using maximum allowed: 8 [ 1144.505501][ T5140] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1144.515573][ T5140] usb 3-1: can't read configurations, error -71 [ 1144.806992][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19425'. [ 1144.891494][ T4228] saitek 0003:06A3:0621.0116: item fetching failed at offset 3/7 [ 1144.924398][ T4228] saitek 0003:06A3:0621.0116: parse failed [ 1144.944281][ T4228] saitek: probe of 0003:06A3:0621.0116 failed with error -22 [ 1145.092477][ T4228] usb 2-1: USB disconnect, device number 9 [ 1145.405359][ T5140] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1145.655560][ T5140] usb 3-1: Using ep0 maxpacket: 16 [ 1145.768875][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19449'. [ 1145.779068][ T5140] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.791005][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1145.793182][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19450'. [ 1145.803506][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1145.823069][ T5140] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1145.842080][ T5140] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1145.935216][ T5140] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1145.945056][ T5140] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1145.953185][ T5140] usb 3-1: Manufacturer: syz [ 1145.961157][ T5140] usb 3-1: config 0 descriptor?? [ 1146.015419][T24803] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1146.104302][ T4228] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1146.285131][ T5140] rc_core: IR keymap rc-hauppauge not found [ 1146.291063][ T5140] Registered IR keymap rc-empty [ 1146.297082][ T5140] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1146.334981][ T5140] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1146.365446][ T5140] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1146.379189][T24803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.391475][ T5140] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input157 [ 1146.405809][T24803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.416589][T24803] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1146.426916][T24803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.436365][ T5140] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1146.446430][T24803] usb 2-1: config 0 descriptor?? [ 1146.469258][ T5140] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1146.484506][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.495633][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.505434][ T4228] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1146.505853][ T5140] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1146.514708][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.516451][ T4228] usb 4-1: config 0 descriptor?? [ 1146.565623][ T5140] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1146.595096][ T5140] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1146.627933][ T5140] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1146.668664][ T5140] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1146.705321][ T5140] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1146.735386][ T5140] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1146.765408][ T5140] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1146.796306][ T5140] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1146.812646][ T5140] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1146.847848][T14286] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 1146.864528][T14286] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 1146.926647][T24803] keytouch 0003:0926:3333.0117: fixing up Keytouch IEC report descriptor [ 1146.948896][T24803] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0117/input/input158 [ 1146.970946][ T5140] usb 3-1: USB disconnect, device number 2 [ 1147.026125][ T4228] arvo 0003:1E7D:30D4.0118: unknown main item tag 0x0 [ 1147.045489][ T4228] arvo 0003:1E7D:30D4.0118: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 1147.068059][T24803] keytouch 0003:0926:3333.0117: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1147.233655][T14276] udc-core: couldn't find an available UDC or it's busy [ 1147.243139][T14276] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1147.264560][ T4228] arvo 0003:1E7D:30D4.0118: couldn't init struct arvo_device [ 1147.271984][ T4228] arvo 0003:1E7D:30D4.0118: couldn't install keyboard [ 1147.291821][ T4228] arvo: probe of 0003:1E7D:30D4.0118 failed with error -71 [ 1147.303649][ T4228] usb 4-1: USB disconnect, device number 11 [ 1147.348649][ T4259] usb 2-1: USB disconnect, device number 10 [ 1147.387894][T14296] fido_id[14296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1147.689606][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1147.756056][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19466'. [ 1147.802710][T14316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19467'. [ 1148.033692][T14329] netlink: 165 bytes leftover after parsing attributes in process `syz.5.19473'. [ 1148.088366][ T5140] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1148.257771][T14346] sch_fq: defrate 9 ignored. [ 1148.345400][ T5140] usb 4-1: Using ep0 maxpacket: 16 [ 1148.406993][ T9804] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1148.465502][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1148.578711][T14362] netlink: 'syz.1.19490': attribute type 25 has an invalid length. [ 1148.588172][T14362] netlink: 184 bytes leftover after parsing attributes in process `syz.1.19490'. [ 1148.665613][ T5140] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1148.678075][ T5140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.692275][ T5140] usb 4-1: Product: syz [ 1148.715331][ T5140] usb 4-1: Manufacturer: syz [ 1148.719971][ T5140] usb 4-1: SerialNumber: syz [ 1148.747965][ T5140] usb 4-1: config 0 descriptor?? [ 1148.760476][T14370] device bond0 entered promiscuous mode [ 1148.787407][ T5140] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1148.808940][ T5140] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1149.425537][ T5140] em28xx 4-1:0.0: chip ID is em2882/3 [ 1149.588309][T24803] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1149.775254][ T5140] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1149.783288][ T5140] em28xx 4-1:0.0: board has no eeprom [ 1149.794479][ T4259] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1149.835083][T24803] usb 3-1: Using ep0 maxpacket: 32 [ 1149.895557][ T5140] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1149.903934][ T5140] em28xx 4-1:0.0: dvb set to bulk mode. [ 1149.911539][T26528] em28xx 4-1:0.0: Binding DVB extension [ 1149.923993][ T5140] usb 4-1: USB disconnect, device number 12 [ 1149.936573][ T5140] em28xx 4-1:0.0: Disconnecting em28xx [ 1149.955015][T24803] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.981512][T24803] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.003376][T26528] em28xx 4-1:0.0: Registering input extension [ 1150.058757][T14429] program syz.5.19519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1150.075655][T26528] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1150.082522][T26528] Registered IR keymap rc-empty [ 1150.103514][T26528] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1150.121635][T26528] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input159 [ 1150.145332][T24803] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1150.167827][T26528] em28xx 4-1:0.0: Input extension successfully initialized [ 1150.176256][T24803] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1150.195380][ T5140] em28xx 4-1:0.0: Closing input extension [ 1150.201306][T24803] usb 3-1: Product: syz [ 1150.206423][T24803] usb 3-1: Manufacturer: syz [ 1150.224692][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1150.241331][ T5140] em28xx 4-1:0.0: Freeing device [ 1150.242779][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.255806][T24803] hub 3-1:4.0: USB hub found [ 1150.278681][ T4259] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1150.291036][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.301106][ T4259] usb 2-1: config 0 descriptor?? [ 1150.360489][ T4259] hub 2-1:0.0: USB hub found [ 1150.534967][T24803] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1150.579488][ T4259] hub 2-1:0.0: 2 ports detected [ 1150.854449][ T4228] usb 3-1: USB disconnect, device number 3 [ 1151.046252][ T4259] usb 2-1: USB disconnect, device number 11 [ 1151.802839][T14482] tun0: tun_chr_ioctl cmd 2148553947 [ 1152.115523][T26528] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1152.215314][ T5140] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1152.495611][T26528] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1152.515645][T26528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.545680][T26528] usb 4-1: config 0 descriptor?? [ 1152.585827][ T5140] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1152.596951][T26528] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1152.615286][ T5140] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1152.625990][ T5140] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.637122][ T5140] usb 6-1: config 220 has no interface number 2 [ 1152.643417][ T5140] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1152.657905][ T5140] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1152.666168][ T5140] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1152.673419][ T5140] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1152.815484][T26528] gp8psk: usb in 128 operation failed. [ 1152.855473][T26528] gp8psk: usb in 137 operation failed. [ 1152.860990][T26528] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1152.874056][ T5140] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1152.895454][ T5140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.903478][ T5140] usb 6-1: Product: syz [ 1152.932355][ T5140] usb 6-1: Manufacturer: syz [ 1152.945620][T26528] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1152.958496][ T5140] usb 6-1: SerialNumber: syz [ 1152.965673][T26528] usb 4-1: media controller created [ 1153.018733][T26528] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1153.090190][T26528] gp8psk_fe: Frontend attached [ 1153.119232][T26528] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1153.146868][T26528] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1153.335625][ T5140] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1153.342140][ T5140] usb 6-1: No valid video chain found. [ 1153.361145][ T5140] usb 6-1: selecting invalid altsetting 0 [ 1153.476397][ T5140] usb 6-1: selecting invalid altsetting 0 [ 1153.482179][ T5140] usbtest: probe of 6-1:220.1 failed with error -22 [ 1153.525503][ T5140] usb 6-1: USB disconnect, device number 8 [ 1153.535645][T26528] gp8psk: usb in 138 operation failed. [ 1153.541129][T26528] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1153.541592][T14535] netlink: 'syz.0.19567': attribute type 1 has an invalid length. [ 1153.602658][T26528] gp8psk: found Genpix USB device pID = 203 (hex) [ 1153.631273][T26528] usb 4-1: USB disconnect, device number 13 [ 1153.660922][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19567'. [ 1153.853974][T26528] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1154.646098][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19594'. [ 1155.033983][T14608] mkiss: ax0: crc mode is auto. [ 1155.098659][T14608] Falling back ldisc for ttyS3. [ 1155.845313][T26528] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1156.084779][T26528] usb 2-1: Using ep0 maxpacket: 16 [ 1156.205425][T26528] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.245446][T26528] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1156.293385][T26528] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.338307][T26528] usb 2-1: config 0 descriptor?? [ 1156.818850][T26528] creative-sb0540 0003:041E:3100.0119: unknown main item tag 0x0 [ 1156.852913][T26528] creative-sb0540 0003:041E:3100.0119: item fetching failed at offset 3/5 [ 1156.868829][T26528] creative-sb0540 0003:041E:3100.0119: parse failed [ 1156.876798][T26528] creative-sb0540: probe of 0003:041E:3100.0119 failed with error -22 [ 1157.024292][ T4259] usb 2-1: USB disconnect, device number 12 [ 1157.576535][T14707] netlink: 192 bytes leftover after parsing attributes in process `syz.0.19648'. [ 1157.782463][ T26] audit: type=1326 audit(2000000394.478:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14718 comm="syz.1.19655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32b77ae9a9 code=0x0 [ 1157.814633][ T4259] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1158.012301][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19660'. [ 1158.074233][ T4259] usb 6-1: Using ep0 maxpacket: 8 [ 1158.145342][T26528] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1158.208117][ T4259] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1158.229444][ T4259] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1158.252178][ T4259] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1158.272441][ T4259] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1158.294257][ T4259] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1158.313444][ T4259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.515456][T26528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.532715][T26528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.544945][T26528] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1158.558809][T26528] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1158.569342][T26528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.579398][ T4259] usb 6-1: GET_CAPABILITIES returned 0 [ 1158.580849][T26528] usb 3-1: config 0 descriptor?? [ 1158.587491][ T4259] usbtmc 6-1:16.0: can't read capabilities [ 1158.794445][T14703] usb 6-1: usbtmc_ioctl_clear_in_halt returned -32 [ 1158.802615][ T4259] usb 6-1: USB disconnect, device number 9 [ 1158.978236][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19670'. [ 1159.067453][T26528] hid-udraw 0003:20D6:CB17.011A: collection stack underflow [ 1159.085371][T26528] hid-udraw 0003:20D6:CB17.011A: item 0 4 0 12 parsing failed [ 1159.098035][T26528] hid-udraw 0003:20D6:CB17.011A: parse failed [ 1159.118138][T26528] hid-udraw: probe of 0003:20D6:CB17.011A failed with error -22 [ 1159.270451][T26528] usb 3-1: USB disconnect, device number 4 [ 1159.441952][T14774] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1159.448501][T14774] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1159.459671][T14774] vhci_hcd vhci_hcd.0: Device attached [ 1159.545373][T14774] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 1159.551925][T14774] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1159.665898][T14774] vhci_hcd vhci_hcd.0: Device attached [ 1159.701023][T14787] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 1159.707578][T14787] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1159.725251][ T5140] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 1159.820274][T14787] vhci_hcd vhci_hcd.0: Device attached [ 1159.907682][T14790] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(7) [ 1159.914243][T14790] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1160.011410][T14790] vhci_hcd vhci_hcd.0: Device attached [ 1160.058929][T14791] vhci_hcd: connection closed [ 1160.059283][ T1225] vhci_hcd: stop threads [ 1160.075648][T14788] vhci_hcd: connection closed [ 1160.075988][T14781] vhci_hcd: connection closed [ 1160.124041][ T1225] vhci_hcd: release socket [ 1160.155462][T14777] vhci_hcd: connection reset by peer [ 1160.181131][ T1225] vhci_hcd: disconnect device [ 1160.265599][ T1225] vhci_hcd: stop threads [ 1160.285599][ T1225] vhci_hcd: release socket [ 1160.320098][ T1225] vhci_hcd: disconnect device [ 1160.342892][ T1225] vhci_hcd: stop threads [ 1160.378782][ T1225] vhci_hcd: release socket [ 1160.399009][ T1225] vhci_hcd: disconnect device [ 1160.430237][ T1225] vhci_hcd: stop threads [ 1160.465333][ T1225] vhci_hcd: release socket [ 1160.506406][ T1225] vhci_hcd: disconnect device [ 1160.742949][T14813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19695'. [ 1160.929040][T14825] cifs: Unknown parameter 'mode' [ 1161.190659][T14839] program syz.5.19708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1161.299255][ T4259] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1161.352261][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19711'. [ 1161.564483][ T4259] usb 4-1: Using ep0 maxpacket: 32 [ 1161.642532][T14855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19716'. [ 1161.704562][ T4259] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1161.727463][ T4259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.757535][ T4259] usb 4-1: config 0 descriptor?? [ 1162.049064][ T4259] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1162.062752][ T4259] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1162.100710][T14875] netlink: 2 bytes leftover after parsing attributes in process `syz.1.19726'. [ 1162.104787][ T4259] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1162.124133][ T4259] usb 4-1: media controller created [ 1162.147804][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19727'. [ 1162.156098][ T4259] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1162.170077][T14877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19727'. [ 1162.274568][ T4259] az6027: usb out operation failed. (-71) [ 1162.309432][ T4259] az6027: usb out operation failed. (-71) [ 1162.315480][ T4259] stb0899_attach: Driver disabled by Kconfig [ 1162.321476][ T4259] az6027: no front-end attached [ 1162.321476][ T4259] [ 1162.384372][ T4259] az6027: usb out operation failed. (-71) [ 1162.390916][ T4259] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1162.401344][ T4259] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input160 [ 1162.414532][ T4259] dvb-usb: schedule remote query interval to 400 msecs. [ 1162.421587][ T4259] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1162.432704][ T4259] usb 4-1: USB disconnect, device number 14 [ 1162.489205][ T4259] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1162.644745][ T6470] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1162.914284][ T6470] usb 6-1: Using ep0 maxpacket: 32 [ 1163.044431][ T6470] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1163.058029][ T6470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.068175][ T6470] usb 6-1: config 0 descriptor?? [ 1163.324417][ T6470] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1163.336870][ T6470] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1163.364681][ T6470] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1163.376400][ T6470] usb 6-1: media controller created [ 1163.391790][ T6470] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1163.534393][ T6470] az6027: usb out operation failed. (-71) [ 1163.554416][ T6470] az6027: usb out operation failed. (-71) [ 1163.561808][ T6470] stb0899_attach: Driver disabled by Kconfig [ 1163.572584][ T6470] az6027: no front-end attached [ 1163.572584][ T6470] [ 1163.597355][ T6470] az6027: usb out operation failed. (-71) [ 1163.603237][ T6470] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1163.621360][ T6470] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input161 [ 1163.639515][ T6470] dvb-usb: schedule remote query interval to 400 msecs. [ 1163.670790][ T6470] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1163.687842][ T6470] usb 6-1: USB disconnect, device number 10 [ 1163.722053][ T6470] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1163.896971][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19746'. [ 1164.199384][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19751'. [ 1164.526836][T14954] netlink: 72 bytes leftover after parsing attributes in process `syz.1.19759'. [ 1164.804369][ T4259] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1164.865398][ T5140] vhci_hcd: vhci_device speed not set [ 1165.174479][ T4259] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1165.206134][ T4259] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1165.294622][T14988] netlink: 'syz.0.19776': attribute type 1 has an invalid length. [ 1165.314483][ T4259] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1165.339973][T14988] netlink: 'syz.0.19776': attribute type 2 has an invalid length. [ 1165.348146][ T4259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1165.364212][ T4259] usb 6-1: SerialNumber: syz [ 1165.415179][ T4259] usb 6-1: bad CDC descriptors [ 1165.422864][ T4259] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1165.478866][ T4259] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1165.568628][ T4259] scsi host1: usb-storage 6-1:1.0 [ 1165.723557][T15002] netlink: 14 bytes leftover after parsing attributes in process `syz.0.19780'. [ 1165.835748][T15008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19783'. [ 1166.395974][T15028] overlayfs: failed to decode file handle (len=5, type=2, flags=0, err=-22) [ 1166.882547][ T5140] usb 6-1: USB disconnect, device number 11 [ 1167.354379][ T6470] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1167.624418][ T6470] usb 4-1: Using ep0 maxpacket: 8 [ 1167.755533][ T6470] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1167.778959][ T6470] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1167.792721][ T6470] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1167.803713][ T6470] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1167.999986][ T6470] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1168.012491][ T6470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.033879][ T6470] usb 4-1: Product: syz [ 1168.045392][ T6470] usb 4-1: Manufacturer: syz [ 1168.060177][ T6470] usb 4-1: SerialNumber: syz [ 1168.105528][T15058] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1168.139893][ T6470] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1168.181674][ T6470] usbtest 4-1:1.0: Linux user mode ISO test driver [ 1168.202372][ T6470] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1168.246704][ T26] audit: type=1800 audit(2000000404.938:5751): pid=15100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.19823" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 1168.345193][ T6470] usb 4-1: USB disconnect, device number 15 [ 1168.845144][T15119] binder: 15118:15119 ioctl 400c620e 0 returned -14 [ 1170.603148][T15153] binder: 15151:15153 ioctl 400c620e 0 returned -14 [ 1171.905395][ T5140] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1172.275095][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.297344][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.336831][ T5140] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1172.339890][T15227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19883'. [ 1172.351466][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.373407][ T5140] usb 4-1: config 0 descriptor?? [ 1172.695479][T15250] device bond_slave_0 entered promiscuous mode [ 1172.788412][T15250] : (slave bond_slave_0): Releasing backup interface [ 1172.832827][T15250] bridge0: port 3(bond_slave_0) entered blocking state [ 1172.854387][T15250] bridge0: port 3(bond_slave_0) entered disabled state [ 1173.330129][ T5140] hid-led: probe of 0003:0FC5:B080.011B failed with error -71 [ 1173.348416][ T5140] usb 4-1: USB disconnect, device number 16 [ 1173.405379][T24803] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1173.655265][T24803] usb 2-1: Using ep0 maxpacket: 16 [ 1173.775933][T24803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1173.783204][T24803] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1173.807429][T24803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.866046][T24803] usb 2-1: config 0 descriptor?? [ 1174.356857][T24803] hid (null): unknown global tag 0xd [ 1174.362374][T24803] hid (null): unknown global tag 0xd [ 1174.376655][T24803] hid (null): usage index exceeded [ 1174.485416][ T5140] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1174.579830][T24803] usb 2-1: USB disconnect, device number 13 [ 1174.849921][ T5140] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.881246][ T5140] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1175.069929][ T5140] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1175.082298][ T5140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.104278][T15329] openvswitch: netlink: Actions may not be safe on all matching packets [ 1175.117538][ T5140] usb 4-1: Product: syz [ 1175.121725][ T5140] usb 4-1: Manufacturer: syz [ 1175.141320][ T5140] usb 4-1: SerialNumber: syz [ 1175.485352][ T5140] usb 4-1: 0:2 : does not exist [ 1175.534137][ T5140] usb 4-1: USB disconnect, device number 17 [ 1175.748250][T29905] udevd[29905]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1176.455533][T15351] vxcan0: tx address claim with dest, not broadcast [ 1177.295336][T15388] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1177.347131][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.353495][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.699729][T15392] netlink: 104 bytes leftover after parsing attributes in process `syz.3.19963'. [ 1178.614887][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1179.433783][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1179.716269][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19996'. [ 1180.186005][T15486] netlink: 'syz.2.20005': attribute type 2 has an invalid length. [ 1180.514976][T15493] netlink: 1 bytes leftover after parsing attributes in process `syz.0.20009'. [ 1181.598447][T15527] netlink: 1 bytes leftover after parsing attributes in process `syz.5.20024'. [ 1181.749999][T15532] syzkaller1: tun_chr_ioctl cmd 1074025694 [ 1182.224117][T15562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20051'. [ 1182.265423][T24803] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1182.645520][T24803] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1182.661796][T24803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.683822][T24803] usb 3-1: config 0 descriptor?? [ 1182.737051][T24803] cp210x 3-1:0.0: cp210x converter detected [ 1182.774335][ T4259] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1183.034338][ T4259] usb 2-1: Using ep0 maxpacket: 8 [ 1183.154566][ T4259] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1183.168323][T24803] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1183.170883][ T4259] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1183.220947][ T4259] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1183.231869][ T4259] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1183.245792][ T4259] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1183.276453][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.370467][T24803] usb 3-1: USB disconnect, device number 5 [ 1183.378579][T24803] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1183.387420][T24803] cp210x 3-1:0.0: device disconnected [ 1183.534422][ T4259] usb 2-1: GET_CAPABILITIES returned 0 [ 1183.540485][ T4259] usbtmc 2-1:16.0: can't read capabilities [ 1183.745244][ T4259] usb 2-1: USB disconnect, device number 14 [ 1183.971490][T15621] netlink: 140 bytes leftover after parsing attributes in process `syz.2.20068'. [ 1184.342918][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20080'. [ 1184.353070][T15647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20080'. [ 1184.437489][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20082'. [ 1184.477481][T15655] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 1184.525343][T24803] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1184.775213][T24803] usb 6-1: Using ep0 maxpacket: 16 [ 1184.844287][ T4228] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1184.895136][ T5140] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1184.902777][T24803] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1184.912554][T24803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.922781][T24803] usb 6-1: config 0 descriptor?? [ 1184.966475][T24803] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1185.025458][T26528] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1185.145192][ T5140] usb 3-1: Using ep0 maxpacket: 8 [ 1185.264942][ T5140] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1185.273309][ T5140] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1185.284104][ T5140] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1185.295752][ T5140] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1185.306460][ T5140] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1185.320259][ T5140] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1185.329864][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.384495][ T4228] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1185.393725][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.395487][T26528] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1185.402253][ T4228] usb 2-1: Product: syz [ 1185.410723][T24803] gspca_sonixj: reg_r err -71 [ 1185.414084][ T4228] usb 2-1: Manufacturer: syz [ 1185.423143][ T4228] usb 2-1: SerialNumber: syz [ 1185.426570][T24803] sonixj: probe of 6-1:0.0 failed with error -71 [ 1185.438991][T26528] usb 4-1: no configurations [ 1185.442445][ T4228] usb 2-1: config 0 descriptor?? [ 1185.443595][T26528] usb 4-1: can't read configurations, error -22 [ 1185.457362][T24803] usb 6-1: USB disconnect, device number 12 [ 1185.485561][ T4228] ch341 2-1:0.0: ch341-uart converter detected [ 1185.595249][ T5140] usb 3-1: GET_CAPABILITIES returned 0 [ 1185.600785][ T5140] usbtmc 3-1:16.0: can't read capabilities [ 1185.801821][ T4259] usb 3-1: USB disconnect, device number 6 [ 1185.963335][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20103'. [ 1186.380950][ T4228] usb 2-1: failed to send control message: -71 [ 1186.387799][ T4228] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1186.416879][ T4228] usb 2-1: USB disconnect, device number 15 [ 1186.428107][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20094'. [ 1186.439196][ T4228] ch341 2-1:0.0: device disconnected [ 1186.520192][T15688] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1186.607914][T24803] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1186.641178][T15694] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 1187.915378][T24803] usb 6-1: Using ep0 maxpacket: 16 [ 1187.991652][T15725] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1188.005729][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1188.035208][T24803] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 1188.046218][T15725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.047046][T24803] usb 6-1: config 0 has no interface number 0 [ 1188.053632][T15725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.088884][T24803] usb 6-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.206278][T15733] netlink: 104 bytes leftover after parsing attributes in process `syz.2.20124'. [ 1188.246834][T15735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20123'. [ 1188.265567][T24803] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1188.285544][T24803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.305518][T24803] usb 6-1: Product: syz [ 1188.313041][T24803] usb 6-1: Manufacturer: syz [ 1188.318676][T24803] usb 6-1: SerialNumber: syz [ 1188.361868][T24803] usb 6-1: config 0 descriptor?? [ 1188.462706][T24803] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1188.546328][T15747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20127'. [ 1188.674648][ T154] usb 6-1: Failed to submit usb control message: -71 [ 1188.677747][T24803] usb 6-1: USB disconnect, device number 13 [ 1188.687335][ T154] usb 6-1: unable to send the bmi data to the device: -71 [ 1188.745338][ T154] usb 6-1: unable to get target info from device [ 1188.757241][ T154] usb 6-1: could not get target info (-71) [ 1188.793645][ T154] usb 6-1: could not probe fw (-71) [ 1189.061339][T15768] vxcan0: tx address claim with dlc 0 [ 1189.194371][ T4228] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1189.402023][ T4259] hid-generic 0000:0000:0000.011D: unknown main item tag 0x0 [ 1189.413432][ T4259] hid-generic 0000:0000:0000.011D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1189.604552][T15802] block nbd3: server does not support multiple connections per device. [ 1189.614576][T15806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20150'. [ 1189.624632][ T4228] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1189.641987][T15802] block nbd3: shutting down sockets [ 1189.648513][ T4228] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1189.659014][ T4228] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1189.668949][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.694589][T15759] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1190.115947][T24803] usb 4-1: USB disconnect, device number 20 [ 1190.318684][T15820] netlink: 88 bytes leftover after parsing attributes in process `syz.2.20157'. [ 1190.328903][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20157'. [ 1190.694505][ T4228] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1190.748263][T15838] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 1190.748263][T15838] [ 1191.077947][ T4228] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1191.086339][ T4228] usb 3-1: config 0 has no interface number 0 [ 1191.092431][ T4228] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1191.102536][ T4228] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1191.124319][ T4259] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1191.314437][ T4228] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1191.323810][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.331857][ T4228] usb 3-1: Product: syz [ 1191.336203][ T4228] usb 3-1: Manufacturer: syz [ 1191.340820][ T4228] usb 3-1: SerialNumber: syz [ 1191.352281][ T4228] usb 3-1: config 0 descriptor?? [ 1191.374511][T15826] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1191.406214][ T4228] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1191.417510][ T4228] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1191.504361][ T4259] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1191.513434][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.525437][ T4259] usb 2-1: config 0 descriptor?? [ 1191.565649][ T4259] cp210x 2-1:0.0: cp210x converter detected [ 1191.895609][ T4228] usb 3-1: USB disconnect, device number 7 [ 1191.925687][ T4228] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1191.970087][ T4228] cyberjack 3-1:0.69: device disconnected [ 1191.995545][ T4259] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1192.031192][T15869] program syz.3.20190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1192.061747][ T4259] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1192.133245][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20181'. [ 1192.261409][ T7] usb 2-1: USB disconnect, device number 16 [ 1192.282824][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1192.293611][ T7] cp210x 2-1:0.0: device disconnected [ 1192.351835][T15885] kvm [15884]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 1192.729672][T15914] program syz.5.20201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1192.852176][T15924] netlink: 277 bytes leftover after parsing attributes in process `syz.5.20206'. [ 1192.881174][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20207'. [ 1193.534938][T15964] netlink: 'syz.0.20235': attribute type 4 has an invalid length. [ 1194.448052][ T4199] block nbd3: Receive control failed (result -32) [ 1194.908654][ T4199] block nbd4: Receive control failed (result -32) [ 1194.987668][T16047] netlink: 16 bytes leftover after parsing attributes in process `syz.5.20261'. [ 1195.151226][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20266'. [ 1195.464943][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1195.479908][T16077] netlink: 48 bytes leftover after parsing attributes in process `syz.3.20288'. [ 1195.704953][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 1195.824862][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1196.025234][ T7] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1196.042144][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.056937][ T7] usb 3-1: Product: syz [ 1196.063419][ T7] usb 3-1: Manufacturer: syz [ 1196.072180][ T7] usb 3-1: SerialNumber: syz [ 1196.085053][ T7] usb 3-1: config 0 descriptor?? [ 1196.136892][ T7] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1196.147256][T24803] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1196.159909][ T7] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1196.394544][T24803] usb 6-1: Using ep0 maxpacket: 32 [ 1196.514891][T24803] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1196.533888][T24803] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1196.541753][T24803] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1196.554804][T24803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.571161][T24803] usb 6-1: config 0 descriptor?? [ 1196.764417][ T7] em28xx 3-1:0.0: chip ID is em2874 [ 1197.060572][T24803] corsair-cpro 0003:1B1C:0C10.011E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 1197.105887][ T7] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1197.116577][ T7] em28xx 3-1:0.0: board has no eeprom [ 1197.136235][T16168] sp0: Synchronizing with TNC [ 1197.170478][T24803] corsair-cpro: probe of 0003:1B1C:0C10.011E failed with error -38 [ 1197.239842][ T7] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1197.252862][ T7] em28xx 3-1:0.0: dvb set to bulk mode. [ 1197.278726][ T5147] em28xx 3-1:0.0: Binding DVB extension [ 1197.285683][T24803] usb 6-1: USB disconnect, device number 14 [ 1197.307577][ T7] usb 3-1: USB disconnect, device number 8 [ 1197.341404][ T7] em28xx 3-1:0.0: Disconnecting em28xx [ 1197.405858][ T5147] em28xx 3-1:0.0: Registering input extension [ 1197.484687][ T5147] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1197.491778][ T5147] Registered IR keymap rc-empty [ 1197.503243][ T5147] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1197.553947][ T5147] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input164 [ 1197.573429][ T5147] em28xx 3-1:0.0: Input extension successfully initialized [ 1197.583927][ T7] em28xx 3-1:0.0: Closing input extension [ 1197.620068][ T7] em28xx 3-1:0.0: Freeing device [ 1198.120677][T16211] [ 1198.123048][T16211] ====================================================== [ 1198.130073][T16211] WARNING: possible circular locking dependency detected [ 1198.137120][T16211] 5.15.189-syzkaller #0 Not tainted [ 1198.142314][T16211] ------------------------------------------------------ [ 1198.149332][T16211] syz.0.20334/16211 is trying to acquire lock: [ 1198.155481][T16211] ffff8880255e0120 (msk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xef6/0x1b50 [ 1198.165067][T16211] [ 1198.165067][T16211] but task is already holding lock: [ 1198.172438][T16211] ffffc900017563b8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 1198.182023][T16211] [ 1198.182023][T16211] which lock already depends on the new lock. [ 1198.182023][T16211] [ 1198.192423][T16211] [ 1198.192423][T16211] the existing dependency chain (in reverse order) is: [ 1198.201440][T16211] [ 1198.201440][T16211] -> #2 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 1198.209346][T16211] _raw_spin_lock+0x2a/0x40 [ 1198.214384][T16211] inet_unhash+0xd0/0x540 [ 1198.219252][T16211] tcp_set_state+0x35b/0x520 [ 1198.224381][T16211] __tcp_close+0x91/0xf10 [ 1198.229263][T16211] __mptcp_close_ssk+0x1ea/0x460 [ 1198.234735][T16211] __mptcp_destroy_sock+0x3f6/0x720 [ 1198.240472][T16211] mptcp_close+0x5a4/0x9f0 [ 1198.245412][T16211] inet_release+0x139/0x180 [ 1198.250446][T16211] sock_close+0xd5/0x240 [ 1198.255221][T16211] __fput+0x234/0x930 [ 1198.259732][T16211] task_work_run+0x125/0x1a0 [ 1198.264857][T16211] exit_to_user_mode_loop+0x10f/0x130 [ 1198.270769][T16211] exit_to_user_mode_prepare+0xb1/0x140 [ 1198.276847][T16211] syscall_exit_to_user_mode+0x16/0x40 [ 1198.282833][T16211] do_syscall_64+0x58/0xa0 [ 1198.287780][T16211] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1198.294210][T16211] [ 1198.294210][T16211] -> #1 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}: [ 1198.302313][T16211] mptcp_close+0x297/0x9f0 [ 1198.307255][T16211] inet_release+0x139/0x180 [ 1198.312285][T16211] sock_release+0x7b/0x140 [ 1198.317227][T16211] mptcp_nl_cmd_add_addr+0xa5d/0xcf0 [ 1198.323053][T16211] genl_rcv_msg+0xbc6/0xf40 [ 1198.328087][T16211] netlink_rcv_skb+0x1e0/0x430 [ 1198.333380][T16211] genl_rcv+0x24/0x40 [ 1198.337885][T16211] netlink_unicast+0x774/0x920 [ 1198.343174][T16211] netlink_sendmsg+0x8ab/0xbc0 [ 1198.348465][T16211] ____sys_sendmsg+0x5a2/0x8c0 [ 1198.353756][T16211] ___sys_sendmsg+0x1f0/0x260 [ 1198.358962][T16211] __se_sys_sendmsg+0x190/0x250 [ 1198.364360][T16211] do_syscall_64+0x4c/0xa0 [ 1198.369319][T16211] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1198.375745][T16211] [ 1198.375745][T16211] -> #0 (msk_lock-AF_INET){+.+.}-{0:0}: [ 1198.383486][T16211] __lock_acquire+0x2c33/0x7c60 [ 1198.388868][T16211] lock_acquire+0x197/0x3f0 [ 1198.393898][T16211] mptcp_diag_get_info+0x1db/0x990 [ 1198.399568][T16211] inet_sk_diag_fill+0xef6/0x1b50 [ 1198.405128][T16211] mptcp_diag_dump+0xcca/0x1290 [ 1198.410541][T16211] __inet_diag_dump+0x1f6/0x380 [ 1198.415936][T16211] inet_diag_dump_compat+0x161/0x200 [ 1198.421751][T16211] netlink_dump+0x676/0xcd0 [ 1198.426783][T16211] __netlink_dump_start+0x523/0x700 [ 1198.432514][T16211] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 1198.438583][T16211] sock_diag_rcv_msg+0x164/0x3e0 [ 1198.444067][T16211] netlink_rcv_skb+0x1e0/0x430 [ 1198.449543][T16211] sock_diag_rcv+0x26/0x40 [ 1198.454492][T16211] netlink_unicast+0x774/0x920 [ 1198.459789][T16211] netlink_sendmsg+0x8ab/0xbc0 [ 1198.465105][T16211] ____sys_sendmsg+0x5a2/0x8c0 [ 1198.470417][T16211] ___sys_sendmsg+0x1f0/0x260 [ 1198.475617][T16211] __se_sys_sendmsg+0x190/0x250 [ 1198.481003][T16211] do_syscall_64+0x4c/0xa0 [ 1198.485948][T16211] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1198.492377][T16211] [ 1198.492377][T16211] other info that might help us debug this: [ 1198.492377][T16211] [ 1198.502602][T16211] Chain exists of: [ 1198.502602][T16211] msk_lock-AF_INET --> k-sk_lock-AF_INET6/1 --> &h->lhash2[i].lock [ 1198.502602][T16211] [ 1198.514364][ T4259] kernel read not supported for file /dsp1 (pid: 4259 comm: kworker/1:6) [ 1198.516426][T16211] Possible unsafe locking scenario: [ 1198.516426][T16211] [ 1198.516434][T16211] CPU0 CPU1 [ 1198.516439][T16211] ---- ---- [ 1198.516445][T16211] lock(&h->lhash2[i].lock); [ 1198.547676][T16211] lock(k-sk_lock-AF_INET6/1); [ 1198.555056][T16211] lock(&h->lhash2[i].lock); [ 1198.562270][T16211] lock(msk_lock-AF_INET); [ 1198.566773][T16211] [ 1198.566773][T16211] *** DEADLOCK *** [ 1198.566773][T16211] [ 1198.574905][T16211] 6 locks held by syz.0.20334/16211: [ 1198.580174][T16211] #0: ffffffff8d23fa28 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 1198.589471][T16211] #1: ffffffff8d23f8e8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x14a/0x3e0 [ 1198.599852][T16211] #2: ffff88801a9d9690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 1198.610605][T16211] #3: ffffffff8d319d08 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 1198.620880][T16211] #4: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1198.630177][T16211] #5: ffffc900017563b8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 1198.640178][T16211] [ 1198.640178][T16211] stack backtrace: [ 1198.646055][T16211] CPU: 0 PID: 16211 Comm: syz.0.20334 Not tainted 5.15.189-syzkaller #0 [ 1198.654367][T16211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1198.664426][T16211] Call Trace: [ 1198.667708][T16211] [ 1198.670626][T16211] dump_stack_lvl+0x168/0x230 [ 1198.675294][T16211] ? load_image+0x3b0/0x3b0 [ 1198.679782][T16211] ? show_regs_print_info+0x20/0x20 [ 1198.684999][T16211] ? print_circular_bug+0x12b/0x1a0 [ 1198.690198][T16211] check_noncircular+0x274/0x310 [ 1198.695127][T16211] ? add_chain_block+0x940/0x940 [ 1198.700074][T16211] ? lockdep_lock+0xdc/0x1e0 [ 1198.704658][T16211] ? __lock_acquire+0x13ad/0x7c60 [ 1198.709681][T16211] ? mark_lock+0x94/0x320 [ 1198.714035][T16211] __lock_acquire+0x2c33/0x7c60 [ 1198.718902][T16211] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1198.724872][T16211] ? verify_lock_unused+0x140/0x140 [ 1198.730063][T16211] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 1198.736033][T16211] ? verify_lock_unused+0x140/0x140 [ 1198.741237][T16211] ? __local_bh_enable_ip+0xcb/0x1b0 [ 1198.746508][T16211] ? __local_bh_enable_ip+0x12a/0x1b0 [ 1198.751868][T16211] ? lockdep_hardirqs_on+0x94/0x140 [ 1198.757055][T16211] ? __local_bh_enable_ip+0x12a/0x1b0 [ 1198.762412][T16211] ? _local_bh_enable+0xa0/0xa0 [ 1198.767265][T16211] ? skb_put+0x117/0x210 [ 1198.771499][T16211] lock_acquire+0x197/0x3f0 [ 1198.775993][T16211] ? inet_sk_diag_fill+0xef6/0x1b50 [ 1198.781182][T16211] ? read_lock_is_recursive+0x10/0x10 [ 1198.786543][T16211] ? rcu_lock_release+0x5/0x20 [ 1198.791297][T16211] ? __lock_acquire+0x7c60/0x7c60 [ 1198.796332][T16211] ? inet_sk_diag_fill+0xef6/0x1b50 [ 1198.801517][T16211] mptcp_diag_get_info+0x1db/0x990 [ 1198.806619][T16211] ? inet_sk_diag_fill+0xef6/0x1b50 [ 1198.811805][T16211] inet_sk_diag_fill+0xef6/0x1b50 [ 1198.816818][T16211] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 1198.822523][T16211] ? rcu_lock_release+0x5/0x20 [ 1198.827275][T16211] ? do_raw_spin_lock+0x11d/0x280 [ 1198.832293][T16211] ? inet_diag_bc_sk+0x187/0x10c0 [ 1198.837310][T16211] ? preempt_schedule_thunk+0x16/0x18 [ 1198.842670][T16211] mptcp_diag_dump+0xcca/0x1290 [ 1198.847524][T16211] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 1198.854124][T16211] __inet_diag_dump+0x1f6/0x380 [ 1198.858989][T16211] inet_diag_dump_compat+0x161/0x200 [ 1198.864266][T16211] ? inet_diag_dump_start_compat+0x20/0x20 [ 1198.864294][T16211] ? memset+0x1e/0x40 [ 1198.874106][T16211] ? __alloc_skb+0x473/0x750 [ 1198.878701][T16211] netlink_dump+0x676/0xcd0 [ 1198.883201][T16211] ? netlink_lookup+0x1d0/0x1d0 [ 1198.888048][T16211] ? __inet_diag_dump_start+0x805/0x970 [ 1198.893585][T16211] __netlink_dump_start+0x523/0x700 [ 1198.898781][T16211] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 1198.904325][T16211] ? inet_diag_unregister+0xb0/0xb0 [ 1198.909516][T16211] ? mutex_lock_io_nested+0x60/0x60 [ 1198.914707][T16211] ? __inet_diag_dump+0x380/0x380 [ 1198.919721][T16211] ? inet_diag_dump_start_compat+0x20/0x20 [ 1198.925520][T16211] ? inet_diag_dump+0x50/0x50 [ 1198.930202][T16211] ? sock_diag_rcv+0x17/0x40 [ 1198.934782][T16211] ? sock_diag_rcv+0x17/0x40 [ 1198.939369][T16211] ? inet_diag_unregister+0xb0/0xb0 [ 1198.944559][T16211] sock_diag_rcv_msg+0x164/0x3e0 [ 1198.949492][T16211] netlink_rcv_skb+0x1e0/0x430 [ 1198.954248][T16211] ? sock_diag_bind+0xa0/0xa0 [ 1198.958944][T16211] ? netlink_ack+0xb60/0xb60 [ 1198.963527][T16211] ? __lock_acquire+0x7c60/0x7c60 [ 1198.968553][T16211] sock_diag_rcv+0x26/0x40 [ 1198.972973][T16211] netlink_unicast+0x774/0x920 [ 1198.977730][T16211] netlink_sendmsg+0x8ab/0xbc0 [ 1198.982506][T16211] ? netlink_getsockopt+0x560/0x560 [ 1198.987723][T16211] ? aa_sock_msg_perm+0x94/0x150 [ 1198.992660][T16211] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1198.997955][T16211] ? security_socket_sendmsg+0x7c/0xa0 [ 1199.003431][T16211] ? netlink_getsockopt+0x560/0x560 [ 1199.008635][T16211] ____sys_sendmsg+0x5a2/0x8c0 [ 1199.013407][T16211] ? memset+0x1e/0x40 [ 1199.017388][T16211] ? __sys_sendmsg_sock+0x30/0x30 [ 1199.022411][T16211] ? import_iovec+0x6f/0xa0 [ 1199.026917][T16211] ___sys_sendmsg+0x1f0/0x260 [ 1199.031607][T16211] ? __sys_sendmsg+0x250/0x250 [ 1199.036373][T16211] ? percpu_counter_add_batch+0x13b/0x160 [ 1199.042099][T16211] ? __fdget+0x18b/0x210 [ 1199.046338][T16211] __se_sys_sendmsg+0x190/0x250 [ 1199.051185][T16211] ? __x64_sys_sendmsg+0x80/0x80 [ 1199.056120][T16211] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1199.062103][T16211] ? lockdep_hardirqs_on+0x94/0x140 [ 1199.067296][T16211] do_syscall_64+0x4c/0xa0 [ 1199.071705][T16211] ? clear_bhb_loop+0x30/0x80 [ 1199.076366][T16211] ? clear_bhb_loop+0x30/0x80 [ 1199.081029][T16211] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1199.086923][T16211] RIP: 0033:0x7f0364b279a9 [ 1199.091324][T16211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.110920][T16211] RSP: 002b:00007f036298f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1199.119327][T16211] RAX: ffffffffffffffda RBX: 00007f0364d4efa0 RCX: 00007f0364b279a9 [ 1199.127287][T16211] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1199.135254][T16211] RBP: 00007f0364ba9ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1199.143208][T16211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1199.151171][T16211] R13: 0000000000000000 R14: 00007f0364d4efa0 R15: 00007fff7ea05738 [ 1199.159150][T16211] [ 1199.169332][T16211] BUG: sleeping function called from invalid context at net/core/sock.c:3283 [ 1199.178399][T16211] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16211, name: syz.0.20334 [ 1199.187626][T16211] INFO: lockdep is turned off. [ 1199.192380][T16211] Preemption disabled at: [ 1199.192387][T16211] [<0000000000000000>] 0x0 [ 1199.201152][T16211] CPU: 0 PID: 16211 Comm: syz.0.20334 Not tainted 5.15.189-syzkaller #0 [ 1199.209474][T16211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1199.219514][T16211] Call Trace: [ 1199.222778][T16211] [ 1199.225696][T16211] dump_stack_lvl+0x168/0x230 [ 1199.230365][T16211] ? show_regs_print_info+0x20/0x20 [ 1199.235550][T16211] ? load_image+0x3b0/0x3b0 [ 1199.240040][T16211] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1199.246183][T16211] ___might_sleep+0x47c/0x600 [ 1199.250846][T16211] ? __might_sleep+0xf0/0xf0 [ 1199.255429][T16211] ? read_lock_is_recursive+0x10/0x10 [ 1199.260814][T16211] ? rcu_lock_release+0x5/0x20 [ 1199.265575][T16211] __lock_sock_fast+0x2f/0xe0 [ 1199.270244][T16211] ? inet_sk_diag_fill+0xef6/0x1b50 [ 1199.275435][T16211] mptcp_diag_get_info+0x1e7/0x990 [ 1199.280567][T16211] inet_sk_diag_fill+0xef6/0x1b50 [ 1199.285699][T16211] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 1199.291426][T16211] ? rcu_lock_release+0x5/0x20 [ 1199.296202][T16211] ? do_raw_spin_lock+0x11d/0x280 [ 1199.301233][T16211] ? inet_diag_bc_sk+0x187/0x10c0 [ 1199.306264][T16211] ? preempt_schedule_thunk+0x16/0x18 [ 1199.311647][T16211] mptcp_diag_dump+0xcca/0x1290 [ 1199.316490][T16211] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 1199.323070][T16211] __inet_diag_dump+0x1f6/0x380 [ 1199.327912][T16211] inet_diag_dump_compat+0x161/0x200 [ 1199.333183][T16211] ? inet_diag_dump_start_compat+0x20/0x20 [ 1199.338974][T16211] ? memset+0x1e/0x40 [ 1199.342968][T16211] ? __alloc_skb+0x473/0x750 [ 1199.347556][T16211] netlink_dump+0x676/0xcd0 [ 1199.352052][T16211] ? netlink_lookup+0x1d0/0x1d0 [ 1199.356901][T16211] ? __inet_diag_dump_start+0x805/0x970 [ 1199.362454][T16211] __netlink_dump_start+0x523/0x700 [ 1199.367647][T16211] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 1199.373178][T16211] ? inet_diag_unregister+0xb0/0xb0 [ 1199.378362][T16211] ? mutex_lock_io_nested+0x60/0x60 [ 1199.383568][T16211] ? __inet_diag_dump+0x380/0x380 [ 1199.388578][T16211] ? inet_diag_dump_start_compat+0x20/0x20 [ 1199.394371][T16211] ? inet_diag_dump+0x50/0x50 [ 1199.399041][T16211] ? sock_diag_rcv+0x17/0x40 [ 1199.403623][T16211] ? sock_diag_rcv+0x17/0x40 [ 1199.408301][T16211] ? inet_diag_unregister+0xb0/0xb0 [ 1199.413493][T16211] sock_diag_rcv_msg+0x164/0x3e0 [ 1199.418425][T16211] netlink_rcv_skb+0x1e0/0x430 [ 1199.423176][T16211] ? sock_diag_bind+0xa0/0xa0 [ 1199.427838][T16211] ? netlink_ack+0xb60/0xb60 [ 1199.432420][T16211] ? __lock_acquire+0x7c60/0x7c60 [ 1199.437454][T16211] sock_diag_rcv+0x26/0x40 [ 1199.441858][T16211] netlink_unicast+0x774/0x920 [ 1199.446621][T16211] netlink_sendmsg+0x8ab/0xbc0 [ 1199.451375][T16211] ? netlink_getsockopt+0x560/0x560 [ 1199.456562][T16211] ? aa_sock_msg_perm+0x94/0x150 [ 1199.461486][T16211] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1199.466755][T16211] ? security_socket_sendmsg+0x7c/0xa0 [ 1199.472208][T16211] ? netlink_getsockopt+0x560/0x560 [ 1199.477410][T16211] ____sys_sendmsg+0x5a2/0x8c0 [ 1199.482163][T16211] ? memset+0x1e/0x40 [ 1199.486139][T16211] ? __sys_sendmsg_sock+0x30/0x30 [ 1199.491167][T16211] ? import_iovec+0x6f/0xa0 [ 1199.495655][T16211] ___sys_sendmsg+0x1f0/0x260 [ 1199.500322][T16211] ? __sys_sendmsg+0x250/0x250 [ 1199.505117][T16211] ? percpu_counter_add_batch+0x13b/0x160 [ 1199.510869][T16211] ? __fdget+0x18b/0x210 [ 1199.515121][T16211] __se_sys_sendmsg+0x190/0x250 [ 1199.519969][T16211] ? __x64_sys_sendmsg+0x80/0x80 [ 1199.524893][T16211] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1199.530871][T16211] ? lockdep_hardirqs_on+0x94/0x140 [ 1199.536068][T16211] do_syscall_64+0x4c/0xa0 [ 1199.540477][T16211] ? clear_bhb_loop+0x30/0x80 [ 1199.545149][T16211] ? clear_bhb_loop+0x30/0x80 [ 1199.549827][T16211] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1199.555717][T16211] RIP: 0033:0x7f0364b279a9 [ 1199.560136][T16211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.579723][T16211] RSP: 002b:00007f036298f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1199.588129][T16211] RAX: ffffffffffffffda RBX: 00007f0364d4efa0 RCX: 00007f0364b279a9 [ 1199.596091][T16211] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1199.604060][T16211] RBP: 00007f0364ba9ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1199.612026][T16211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1199.619989][T16211] R13: 0000000000000000 R14: 00007f0364d4efa0 R15: 00007fff7ea05738 [ 1199.627960][T16211]