last executing test programs: 9m54.500547499s ago: executing program 2 (id=3504): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)=r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 9m51.011075656s ago: executing program 2 (id=3512): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) socket(0x2b, 0x80801, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 9m49.407417372s ago: executing program 2 (id=3517): socket(0x10, 0x3, 0xffffffff) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRESHEX], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 9m45.642533856s ago: executing program 2 (id=3523): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3", @ANYRESHEX, @ANYRESDEC=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a", 0xd5}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedf", 0x3d}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985", 0x15}, {&(0x7f0000000b80)}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df", 0xc4}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m44.779584965s ago: executing program 2 (id=3528): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a", 0xd5}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea", 0x73}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985", 0x15}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55", 0x3f}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be", 0xbe}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m41.820486442s ago: executing program 2 (id=3533): mkdirat(0xffffffffffffff9c, 0x0, 0x180) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) unshare(0x60000600) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) listen(0xffffffffffffffff, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) getdents64(0xffffffffffffffff, 0x0, 0x4f) 9m24.190910356s ago: executing program 32 (id=3533): mkdirat(0xffffffffffffff9c, 0x0, 0x180) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) unshare(0x60000600) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) listen(0xffffffffffffffff, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) getdents64(0xffffffffffffffff, 0x0, 0x4f) 8.216687276s ago: executing program 5 (id=5227): r0 = getpid() ioperm(0x1, 0x9, 0x4) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)={0x1, 0x0, @b}, 0x48, r6) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x1], [{0x0, 0xffffffff, 0x0, 0x1}, {0x32, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x10000}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e0, 0x20a, 0x278, 0x1e0, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [0x0, 0x0, 0xffff00], 'batadv_slave_0\x00', 'veth1_to_bond\x00', {}, {}, 0x6, 0x0, 0x0, 0x60}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@loopback, @local, [0x0, 0x0, 0xff, 0xff000000], [], 'syzkaller1\x00', 'vxcan1\x00', {}, {}, 0x1, 0x0, 0x0, 0x8}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x80800, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 7.11524882s ago: executing program 5 (id=5228): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4840, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 6.841384557s ago: executing program 0 (id=5230): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 6.70877486s ago: executing program 0 (id=5231): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe2(&(0x7f0000000680), 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0xa) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 6.457633106s ago: executing program 0 (id=5233): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@remote, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x800000000000, 0x4, 0x40000, 0x3, 0x0, 0x0, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x4d5, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 5.316642011s ago: executing program 4 (id=5238): ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") socket(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0x40044102, 0x0) 5.246510113s ago: executing program 0 (id=5240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)={0x1, 0x0, @b}, 0x48, r4) 5.192724423s ago: executing program 5 (id=5241): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006c40)=@newchain={0x24, 0x64, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xf, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x200000000000021f, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 4.944879969s ago: executing program 3 (id=5242): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9", 0xe, 0x24008040, &(0x7f0000000540)={0xc9, 0x6558, r1, 0x1, 0xff, 0x6, @remote}, 0x14) 4.768882603s ago: executing program 4 (id=5243): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d7461904000000e4e2bae9275486a670f5d48930aa2ba267873f7e7c0d109a"], 0x38}}, 0x40040) 4.757618473s ago: executing program 1 (id=5244): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f00000001c0)) 3.644683348s ago: executing program 0 (id=5245): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019480)=""/102400, 0x19000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) poll(&(0x7f0000000240)=[{r4, 0x4a0}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x401, 0x7, {0x3, 0xbb}, 0x41, 0x2, 0x9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8003}]}) unshare(0x6a040000) 3.58487297s ago: executing program 1 (id=5246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6_vti0\x00', &(0x7f00000016c0)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x69, 0x234f, 0x7, @mcast1, @mcast1, 0x7800, 0x10, 0x0, 0x7}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x54, r1, 0x1, 0x20000002, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}]}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 3.55955975s ago: executing program 3 (id=5247): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000980)={{0x200006, 0x3, 0x5, 0x101, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x3, 0x0, 0x4, 0x2, 'syz1\x00', &(0x7f0000000440)=['syz0\x00\x9cB\xd1}\xb7\xe2\xde\xb0\xc0\xab\x18]\xe5\xa1\x1anK\xadL\xe0\x00\xfd\xbc\xf2\x89\x8f\xe5)\xa8\xdeuYD\x14\x84\x01\xd3e?\xde/\x80y]\xa6\xb4^\xa66_\xb2RR\r\xc2\xa6\xb2\xa23\x1e\x880$\x87\xcdb\xa1\xf1\x19\x00d\xf1}\"\x9f#\x9a\xd2T\xfc\x84\xce\x8cW[AQ\xc4R\xec\xef7o\x03\x90\x8c\x01O\x89\xb7\r\x90\xd1\xde\xa6`\xbe\x93\xe96\xeei8\x8b~b+\x02\xbfy\x96\xb3\xc2E{=8\b\b\xc5\v\xeac\x98\xd8\x95\xd3\x1f\x03\x00\x9d\x8f\xeb\x16 \xa0u\xad\xc2\xd4UH\x82\xbb\xe5\xd9\x19\xb7P\xfc\xf2\x02{\xba&\x0f/\xb2d\aC\xd0Q\x9e\xb2\x16\xea\xfe\x06\x92`\xdaV\xe3\xb0', '})\x00', '\x80', '\x00'], 0xc3}) 3.444862133s ago: executing program 3 (id=5248): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="4700000001003f", 0x7) recvmmsg(r0, 0x0, 0x0, 0x40010020, 0x0) 3.444694293s ago: executing program 5 (id=5249): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.418848943s ago: executing program 1 (id=5250): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0xb, 0x0, 0x3, 0xa}, {0x7, 0x0, 0x40000000007, 0x6811221d, 0x8, 0x7fffffffffffffff, 0x200000200000003, 0xd}, {0x7, 0xfffffffffffffffd, 0x6, 0x7}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in6=@remote, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) 3.383434724s ago: executing program 3 (id=5251): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf25000000000000000000000000efffffff00000000000000000000ff09b7f9571c3e14a400000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000030000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b00000000000000fe80000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet(0x2, 0x3, 0x81) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x20000810) 3.327684016s ago: executing program 1 (id=5252): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 3.327193265s ago: executing program 4 (id=5253): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3.208692358s ago: executing program 3 (id=5254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0xa002, &(0x7f0000000180)={[{@grpjquota_path={'grpjquota', 0x3d, './file1'}}]}, 0x4, 0x795, &(0x7f0000001740)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.208533018s ago: executing program 4 (id=5255): syz_open_procfs(0x0, &(0x7f00000000c0)='net/connector\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) memfd_create(0x0, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0xffe}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.189167819s ago: executing program 1 (id=5256): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = dup(r0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000280)={{0x8, 0xffffffff}, {0xfc, 0x273ec22f}, 0x1001, 0x4}) 3.089652201s ago: executing program 1 (id=5257): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x35, 0x0, 0x1}, 0x28) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0xd4, &(0x7f00000002c0)={0x1, 0x100002, 0x4, 0x9}, 0x10}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffb, 0x204000) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r0, 0x1) ioprio_set$pid(0x1, r2, 0x2000) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x3b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYRES8, @ANYBLOB="3a8d75a267b001234a1e919d26dfdd0d8b316510e9c9cf606c6db6505304ee2649c88f03f9ef98bcebc5d721a7081b3509e543147eec5a0fa6d6eb57eed4197249efe6fa10323b6cf959897b3f1908c82c14974d31b0d080f8c86c196c0ee8eb707a73d201bbe15a02a37118aa1d4aaa4d2484b05dbb73e44387f620f46a3a2e06436e6296b05bd07717accf667e0331c0f323a7529f6b471ec30340347d3f405257c8bad57ddef290ea1d376a20", @ANYRESOCT=0x0, @ANYRES8, @ANYRES32=r4, @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cf983f83bb9cceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1bd30bbd42aa24b2dc9171de68d92ac848e00000000000000", @ANYRES64, @ANYRESDEC], 0x81, 0x1515, &(0x7f0000002a80)="$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") add_key$keyring(&(0x7f00000101c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 2.272690489s ago: executing program 4 (id=5258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000007c0)=ANY=[]) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000060000/0x2000)=nil, 0x2000, 0x1, 0x80050, 0xffffffffffffffff, 0x4733000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.24529393s ago: executing program 5 (id=5259): syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='./bus\x00') r0 = socket$netlink(0x10, 0x3, 0x9) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x55) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x3ec, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}}], {0x14, 0x3f6}}, 0x3c}}, 0x8000) 2.040975254s ago: executing program 5 (id=5260): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) getgroups(0x2, &(0x7f0000000300)=[0x0, 0x0]) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x22000c0e, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,umask=00000000000000000007777,dmask=00000000000000000000152,iocharset=default,gid=', @ANYRESHEX=r2, @ANYRES32=r1, @ANYRESHEX=0xee00, @ANYRES8=r2], 0x81, 0x1504, &(0x7f0000002a80)="$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") utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xd, 0x80000000000008}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 244.759234ms ago: executing program 4 (id=5261): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000300)={[{@oldalloc}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f0000001040)="$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") syz_mount_image$fuse(0x0, 0x0, 0x40020, 0x0, 0x1, 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) 196.983835ms ago: executing program 3 (id=5262): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x8000, "676617a4eca5d2a958539a8de82f7d6d9b105ff00a8040cada37fdbec1cb2090"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x141c42) writev(r1, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000000c0)=@arm64_extra={0x603000000013c03d, &(0x7f0000000080)=0x8}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x31) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) 0s ago: executing program 0 (id=5263): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): T4227] r8152-cfgselector 3-1: USB disconnect, device number 89 [ 1182.931919][T11261] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1183.141600][T11261] usb 5-1: device descriptor read/64, error -71 [ 1183.421777][T11261] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1183.631682][T11261] usb 5-1: device descriptor read/64, error -71 [ 1183.762567][T11261] usb usb5-port1: attempt power cycle [ 1184.181683][T11261] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1184.291820][T11261] usb 5-1: device descriptor read/8, error -71 [ 1184.591681][T11261] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1184.712119][T11261] usb 5-1: device descriptor read/8, error -71 [ 1184.853336][T11261] usb usb5-port1: unable to enumerate USB device [ 1194.124190][T16604] hub 8-0:1.0: USB hub found [ 1194.128992][T16604] hub 8-0:1.0: 1 port detected [ 1194.927350][T12554] Bluetooth: hci4: command 0x0406 tx timeout [ 1195.800711][T11261] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1196.108942][T16629] hub 8-0:1.0: USB hub found [ 1196.114514][T16629] hub 8-0:1.0: 1 port detected [ 1196.901780][T11261] usb 4-1: Using ep0 maxpacket: 16 [ 1197.139620][T11261] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1197.672618][T11261] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1197.819059][T11261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.831580][T11261] usb 4-1: Product: syz [ 1197.841729][T11261] usb 4-1: Manufacturer: syz [ 1197.846328][T11261] usb 4-1: SerialNumber: syz [ 1197.852887][T11261] r8152-cfgselector 4-1: config 0 descriptor?? [ 1198.741644][T11261] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1198.761650][T11261] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1198.768069][T11261] r8152-cfgselector 4-1: bad CDC descriptors [ 1198.811595][T11261] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1198.819364][T11261] r8152-cfgselector 4-1: USB disconnect, device number 57 [ 1218.147998][ T4227] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1218.541829][ T4227] usb 3-1: Using ep0 maxpacket: 16 [ 1218.702366][ T4227] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1220.411607][ T4227] usb 3-1: string descriptor 0 read error: -71 [ 1220.467084][ T4227] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1220.511660][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.521460][ T4227] r8152-cfgselector 3-1: config 0 descriptor?? [ 1220.564202][ T4227] r8152-cfgselector 3-1: can't set config #0, error -71 [ 1221.101682][ T4227] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1221.131979][ T4227] r8152-cfgselector 3-1: USB disconnect, device number 90 [ 1223.419570][T16819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1229.352109][T11436] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1229.531682][ T4227] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1229.821596][T11436] usb 5-1: Using ep0 maxpacket: 16 [ 1229.923245][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 1230.051720][ T4227] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1230.242228][ T4227] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1231.091086][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.127982][ T4227] usb 4-1: Product: syz [ 1231.145921][ T4227] usb 4-1: Manufacturer: syz [ 1231.150561][ T4227] usb 4-1: SerialNumber: syz [ 1231.207855][ T4227] r8152-cfgselector 4-1: config 0 descriptor?? [ 1232.557038][T11436] usb 5-1: unable to read config index 0 descriptor/all [ 1232.564118][ T4227] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1232.581613][ T4227] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1232.587940][T11436] usb 5-1: can't read configurations, error -71 [ 1232.599736][ T4227] r8152-cfgselector 4-1: bad CDC descriptors [ 1232.792454][ T4227] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1232.810258][ T4227] r8152-cfgselector 4-1: USB disconnect, device number 58 [ 1234.066754][T16916] input: syz0 as /devices/virtual/input/input20 [ 1234.856940][T16927] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1235.798529][T10736] Bluetooth: hci1: command 0x0406 tx timeout [ 1238.713348][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.720148][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.891968][T10736] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1244.151942][T10736] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1244.986786][T10736] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1245.572035][T10736] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1245.581059][T10736] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1245.592344][T10736] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1245.651595][T10736] usb 3-1: string descriptor 0 read error: -71 [ 1245.657822][T10736] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1245.667197][T10736] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1245.701633][T10736] usb 3-1: can't set config #1, error -71 [ 1245.711954][T10736] usb 3-1: USB disconnect, device number 91 [ 1247.721738][T12553] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1247.991776][T12553] usb 4-1: Using ep0 maxpacket: 16 [ 1248.112044][T12553] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1248.302287][T12553] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1248.562019][T12553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.570051][T12553] usb 4-1: Product: syz [ 1248.574893][T12553] usb 4-1: Manufacturer: syz [ 1248.579552][T12553] usb 4-1: SerialNumber: syz [ 1248.601882][T12553] r8152-cfgselector 4-1: config 0 descriptor?? [ 1250.230150][T12553] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1250.274667][T12553] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1250.338308][T12553] r8152-cfgselector 4-1: bad CDC descriptors [ 1250.401609][T12553] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1250.447716][T12553] r8152-cfgselector 4-1: USB disconnect, device number 59 [ 1254.113006][T17094] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1256.237424][ T6197] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1256.511970][ T6197] usb 5-1: Using ep0 maxpacket: 16 [ 1257.121929][ T6197] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1257.292038][ T6197] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1257.301927][ T6197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.310282][ T6197] usb 5-1: Product: syz [ 1257.321666][ T6197] usb 5-1: Manufacturer: syz [ 1257.326307][ T6197] usb 5-1: SerialNumber: syz [ 1257.351055][ T6197] r8152-cfgselector 5-1: config 0 descriptor?? [ 1258.661644][ T6197] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1258.982980][ T6197] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1258.996528][ T6197] r8152-cfgselector 5-1: bad CDC descriptors [ 1259.283432][ T6197] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1259.327758][ T6197] r8152-cfgselector 5-1: USB disconnect, device number 79 [ 1264.790512][T17192] input: syz0 as /devices/virtual/input/input21 [ 1283.562467][T11536] Bluetooth: hci3: command 0x0409 tx timeout [ 1283.731937][T17259] chnl_net:caif_netlink_parms(): no params data found [ 1283.974792][T17259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.991969][T17259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.025440][T17259] device bridge_slave_0 entered promiscuous mode [ 1284.064256][T17259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.101677][T17259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.153380][ T1325] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1284.171135][T17259] device bridge_slave_1 entered promiscuous mode [ 1284.868637][T17259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.880078][T17259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.944913][T17259] team0: Port device team_slave_0 added [ 1284.976451][T17259] team0: Port device team_slave_1 added [ 1285.027357][T17259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1285.095160][T17259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.174121][T17259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1285.192996][ T1325] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1285.205163][ T1325] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1285.236423][ T1325] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1285.268916][ T1325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1285.327645][ T1325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1285.427653][T17259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1285.436198][T17259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.507620][T17259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1285.521742][ T1325] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1285.530813][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1285.561682][ T1325] usb 5-1: Product: syz [ 1285.565855][ T1325] usb 5-1: Manufacturer: syz [ 1285.581643][ T6197] Bluetooth: hci3: command 0x041b tx timeout [ 1285.615429][T17259] device hsr_slave_0 entered promiscuous mode [ 1285.636990][T17259] device hsr_slave_1 entered promiscuous mode [ 1285.653030][ T1325] cdc_wdm 5-1:1.0: skipping garbage [ 1285.659985][T17259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1285.661570][ T1325] cdc_wdm 5-1:1.0: skipping garbage [ 1285.678150][T17259] Cannot create hsr debugfs directory [ 1285.724274][ T1325] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1285.730196][ T1325] cdc_wdm 5-1:1.0: Unknown control protocol [ 1286.228811][T17259] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1286.280760][T17259] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1286.333347][T17259] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1286.399415][T17259] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1286.561614][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 1286.572829][ T1325] usb 5-1: USB disconnect, device number 80 [ 1288.271678][T11536] Bluetooth: hci3: command 0x040f tx timeout [ 1288.941379][T17259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.009526][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1289.020783][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1289.173950][T17259] 8021q: adding VLAN 0 to HW filter on device team0 [ 1289.571728][ T1325] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1289.588863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1289.925603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1289.964013][T17332] hub 8-0:1.0: USB hub found [ 1289.973558][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.975471][T17332] hub 8-0:1.0: 1 port detected [ 1289.980660][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.009598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1290.037453][T11198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1290.052606][T11198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1290.121567][ T1325] usb 4-1: Using ep0 maxpacket: 16 [ 1290.225876][T11198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.233010][T11198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.251219][T11198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1290.260826][T11198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1290.286042][T16267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1290.301606][T11536] Bluetooth: hci3: command 0x0419 tx timeout [ 1290.321836][ T1325] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1290.344207][T16267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1290.382302][T16267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1290.425479][T16267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1290.498285][T16267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1290.506536][ T1325] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1290.515757][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.525567][T16267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1290.533548][ T1325] usb 4-1: Product: syz [ 1290.537748][ T1325] usb 4-1: Manufacturer: syz [ 1290.544216][T16267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1290.575713][ T1325] usb 4-1: SerialNumber: syz [ 1290.582037][T16267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1290.597560][ T1325] r8152-cfgselector 4-1: config 0 descriptor?? [ 1290.737684][T17259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1290.800585][T16267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1291.545231][T13599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1291.552815][ T4227] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1291.564834][T13599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1291.597863][T17259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1292.902189][ T1325] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1293.114186][ T4227] usb 5-1: Using ep0 maxpacket: 16 [ 1293.259694][ T4321] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.271838][ T1325] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1293.278281][ T1325] r8152-cfgselector 4-1: bad CDC descriptors [ 1293.411662][ T4227] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1294.671655][ T1325] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1294.680840][ T1325] r8152-cfgselector 4-1: USB disconnect, device number 60 [ 1294.691626][ T4227] usb 5-1: string descriptor 0 read error: -71 [ 1294.698714][ T4227] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1294.712145][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.724970][ T4227] r8152-cfgselector 5-1: config 0 descriptor?? [ 1294.741734][ T4227] r8152-cfgselector 5-1: can't set config #0, error -71 [ 1294.761733][ T4227] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1294.799482][ T4227] r8152-cfgselector 5-1: USB disconnect, device number 81 [ 1296.904516][ T4321] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.995861][ T4321] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.101473][ T4321] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.201035][T13599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1297.210286][T13599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1297.508053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1297.570922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1297.717737][T17259] device veth0_vlan entered promiscuous mode [ 1297.794843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1297.852846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1298.344779][T17259] device veth1_vlan entered promiscuous mode [ 1298.408483][T17259] device veth0_macvtap entered promiscuous mode [ 1298.518363][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1299.064664][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1299.111653][T17259] device veth1_macvtap entered promiscuous mode [ 1299.291448][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1299.308502][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1300.363202][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.369504][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.439871][T17259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1300.459956][T17259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.473240][T17259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.901689][T17259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.951582][T17259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1303.000662][T17259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.019778][T17259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1303.035213][T17259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.048246][T17259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1303.064798][T17259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.570105][T17259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1303.585119][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1303.644641][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1303.736137][T17259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.761610][T17259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.780877][T17259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.837918][T17259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.895141][T17259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.948352][T17259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.958379][T17259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.972959][T17259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.983696][T17259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.994456][T17259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.006655][T17259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1304.028719][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1304.060881][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1304.104634][T17259] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.121570][T17259] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.130389][T17259] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.205378][T17259] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.861623][ T4227] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1305.454819][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 1305.484125][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.916736][ T4227] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1306.614295][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.617025][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.637001][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.673352][ T4227] usb 4-1: config 0 descriptor?? [ 1306.706322][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.773605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1306.941835][ T4227] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1307.060643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1307.089940][ T4227] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1307.107901][ T4227] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1307.167467][T17451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3607'. [ 1309.851627][ T1325] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1311.203911][ T1325] usb 2-1: Using ep0 maxpacket: 16 [ 1311.295659][ T4321] device hsr_slave_0 left promiscuous mode [ 1311.332650][ T4321] device hsr_slave_1 left promiscuous mode [ 1311.343060][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.350625][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.371788][ T1325] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1311.401894][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.409311][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.551032][ T4321] device bridge_slave_1 left promiscuous mode [ 1311.571778][ T1325] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1311.580941][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.597387][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.666902][ T1325] usb 2-1: Product: syz [ 1311.671189][ T1325] usb 2-1: Manufacturer: syz [ 1311.675893][ T1325] usb 2-1: SerialNumber: syz [ 1311.689987][ T4321] device bridge_slave_0 left promiscuous mode [ 1311.690419][ T1325] r8152-cfgselector 2-1: config 0 descriptor?? [ 1311.713562][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.801706][ T1325] r8152-cfgselector 2-1: can't set config #0, error -71 [ 1311.821624][ T1325] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1311.829898][ T4321] device veth1_macvtap left promiscuous mode [ 1311.836129][ T4321] device veth0_macvtap left promiscuous mode [ 1311.842641][ T1325] r8152-cfgselector 2-1: USB disconnect, device number 67 [ 1311.851794][ T4321] device veth1_vlan left promiscuous mode [ 1311.857814][ T4321] device veth0_vlan left promiscuous mode [ 1314.411710][ T4321] team0 (unregistering): Port device team_slave_1 removed [ 1314.544459][ T4321] team0 (unregistering): Port device team_slave_0 removed [ 1314.752792][ T4321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1314.973655][ T4321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1315.571286][ T4321] bond0 (unregistering): Released all slaves [ 1323.982516][T10736] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1325.052817][T10736] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1325.061458][T10736] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1325.071934][T10736] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1325.081464][T10736] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1325.092555][T10736] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1325.232204][T10736] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1326.152133][T10736] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1326.160162][T10736] usb 6-1: Product: syz [ 1326.164397][T10736] usb 6-1: Manufacturer: syz [ 1326.226229][T10736] cdc_wdm 6-1:1.0: skipping garbage [ 1326.233369][T10736] cdc_wdm 6-1:1.0: skipping garbage [ 1326.253368][T10736] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1326.269451][T10736] cdc_wdm 6-1:1.0: Unknown control protocol [ 1326.278330][T10736] usb 6-1: USB disconnect, device number 2 [ 1350.101638][T10736] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1351.881556][T10736] usb 6-1: Using ep0 maxpacket: 16 [ 1352.106824][T10736] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1352.921774][T10736] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1354.041686][T10736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.049722][T10736] usb 6-1: Product: syz [ 1354.056045][T10736] r8152-cfgselector 6-1: config 0 descriptor?? [ 1354.081679][T10736] r8152-cfgselector 6-1: can't set config #0, error -71 [ 1354.101692][T10736] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1354.109150][T10736] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 1358.041621][T17456] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1358.891644][T17456] usb 5-1: Using ep0 maxpacket: 16 [ 1360.361611][T17456] usb 5-1: device descriptor read/all, error -71 [ 1360.801606][T11535] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1361.171682][T11535] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1361.583867][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.590440][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.073773][T11535] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1362.084267][T11535] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1362.093674][T11535] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1362.104890][T11535] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1362.171647][T11535] usb 6-1: string descriptor 0 read error: -71 [ 1362.177887][T11535] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1362.197285][T11535] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1362.241671][T11535] usb 6-1: can't set config #1, error -71 [ 1362.256744][T11535] usb 6-1: USB disconnect, device number 4 [ 1371.990439][ T7503] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1372.203318][ T4227] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1372.252223][ T4227] dvb_usb_az6027: probe of 4-1:0.0 failed with error -110 [ 1372.266505][ T4227] usb 4-1: USB disconnect, device number 61 [ 1372.482288][ T7503] usb 6-1: Using ep0 maxpacket: 16 [ 1373.323216][ T7503] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1373.532033][ T7503] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1373.548927][ T7503] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.691007][ T7503] usb 6-1: Product: syz [ 1373.710794][ T7503] usb 6-1: Manufacturer: syz [ 1373.727713][ T7503] usb 6-1: SerialNumber: syz [ 1373.761093][ T7503] r8152-cfgselector 6-1: config 0 descriptor?? [ 1375.109444][ T7503] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1375.381661][ T7503] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1375.389784][ T7503] r8152-cfgselector 6-1: bad CDC descriptors [ 1375.413151][ T7503] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1375.427726][ T7503] r8152-cfgselector 6-1: USB disconnect, device number 5 [ 1380.089650][T18356] syz.3.3805 uses obsolete (PF_INET,SOCK_PACKET) [ 1380.577240][ T1325] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1380.671647][ T7503] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1381.011707][ T1325] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1381.062722][ T7503] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1381.097332][ T7503] usb 5-1: config 1 has no interface number 0 [ 1381.177815][ T7503] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1381.289499][ T7503] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1382.274800][ T1325] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1382.290402][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.309522][ T1325] usb 4-1: config 0 descriptor?? [ 1382.311864][ T7503] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1382.316985][ T7503] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.396946][ T7503] usb 5-1: Product: syz [ 1382.552296][ T7503] usb 5-1: Manufacturer: syz [ 1382.557345][ T7503] usb 5-1: SerialNumber: syz [ 1382.601649][T15924] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1382.610617][T18356] ubi0: attaching mtd0 [ 1382.621842][T18365] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1382.636852][T18356] ubi0: scanning is finished [ 1382.644299][T18356] ubi0: empty MTD device detected [ 1382.871627][T15924] usb 2-1: Using ep0 maxpacket: 16 [ 1383.022436][T15924] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1383.142207][ T7503] usb 5-1: Expected 3 endpoints, found: 2 [ 1383.176453][T18356] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1383.194808][T18356] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 1383.214956][T18356] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1383.239975][T18356] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 1383.260510][T15924] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1383.282921][T15924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.301245][T15924] usb 2-1: Product: syz [ 1383.310510][T15924] usb 2-1: Manufacturer: syz [ 1383.315346][T18356] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1383.331588][T18356] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 1383.382607][T15924] usb 2-1: SerialNumber: syz [ 1383.408906][T15924] r8152-cfgselector 2-1: config 0 descriptor?? [ 1383.425113][T18356] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1065234325 [ 1383.475917][T18356] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1383.521612][T18405] ubi0: background thread "ubi_bgt0d" started, PID 18405 [ 1383.560998][ T7503] usb 4-1: USB disconnect, device number 62 [ 1384.611019][ T4227] usb 5-1: USB disconnect, device number 84 [ 1385.151692][T15924] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1385.188159][T15924] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1385.215084][T15924] r8152-cfgselector 2-1: bad CDC descriptors [ 1385.276296][T15924] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1385.304016][T15924] r8152-cfgselector 2-1: USB disconnect, device number 68 [ 1387.644965][T18460] tipc: Started in network mode [ 1387.649885][T18460] tipc: Node identity 7228085c7f49, cluster identity 4711 [ 1387.721173][T18460] tipc: Enabled bearer , priority 0 [ 1387.832052][T18470] tipc: Resetting bearer [ 1387.973970][T18459] tipc: Disabling bearer [ 1397.386547][T12554] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1397.611581][T12554] usb 4-1: device descriptor read/64, error -71 [ 1398.261575][T12554] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1398.451592][T12554] usb 4-1: device descriptor read/64, error -71 [ 1398.571710][T12554] usb usb4-port1: attempt power cycle [ 1399.561071][T18625] tipc: Enabled bearer , priority 0 [ 1399.589147][T18625] device syzkaller0 entered promiscuous mode [ 1399.658390][T18625] tipc: Resetting bearer [ 1399.712253][T18624] tipc: Resetting bearer [ 1399.765502][T18624] tipc: Disabling bearer [ 1399.926233][T12554] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1400.210392][T12554] usb 4-1: device not accepting address 65, error -71 [ 1402.280198][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3865'. [ 1403.529627][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060263400: rx timeout, send abort [ 1404.827388][ T6935] Bluetooth: hci3: command 0x0406 tx timeout [ 1408.411636][T18747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3881'. [ 1408.431616][T17457] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1408.901563][T17457] usb 2-1: Using ep0 maxpacket: 16 [ 1409.881853][T17457] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1410.305682][ T4195] Bluetooth: hci5: SCO packet for unknown connection handle 46 [ 1410.311700][T17457] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1411.141844][T17457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.153896][T17457] r8152-cfgselector 2-1: config 0 descriptor?? [ 1411.173405][T17457] r8152-cfgselector 2-1: can't set config #0, error -71 [ 1411.384278][T17457] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1411.392357][T17457] r8152-cfgselector 2-1: USB disconnect, device number 69 [ 1413.071655][T17457] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1413.521686][T17457] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1413.937659][T17457] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1413.948271][T17457] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1413.957495][T17457] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1413.969242][T17457] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1414.092108][T17457] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1414.209540][T17457] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1414.218158][T17457] usb 2-1: Product: syz [ 1414.222592][T17457] usb 2-1: Manufacturer: syz [ 1414.433086][T17457] cdc_wdm 2-1:1.0: skipping garbage [ 1414.472985][T17457] cdc_wdm 2-1:1.0: skipping garbage [ 1414.632962][T17457] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1414.737756][T17457] cdc_wdm 2-1:1.0: Unknown control protocol [ 1415.069481][T15924] usb 2-1: USB disconnect, device number 70 [ 1418.587555][T18822] input: syz0 as /devices/virtual/input/input22 [ 1419.851780][T17456] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1420.121714][T17456] usb 2-1: Using ep0 maxpacket: 16 [ 1420.241788][T17456] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1420.401743][T17456] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1420.411567][T17456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.419564][T17456] usb 2-1: Product: syz [ 1420.424166][T17456] usb 2-1: Manufacturer: syz [ 1420.428769][T17456] usb 2-1: SerialNumber: syz [ 1420.491668][T17456] r8152-cfgselector 2-1: config 0 descriptor?? [ 1421.296546][T18862] binder: 18861:18862 ioctl 4018620d 0 returned -22 [ 1421.306323][T18862] binder: 18861:18862 ioctl 4018620d 0 returned -22 [ 1421.316687][T18862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3915'. [ 1422.335802][T17456] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1422.391710][T17456] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1422.398350][T17456] r8152-cfgselector 2-1: bad CDC descriptors [ 1422.482370][T17456] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1422.548513][T17456] r8152-cfgselector 2-1: USB disconnect, device number 71 [ 1423.025928][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.032423][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.423583][T18880] input: syz0 as /devices/virtual/input/input23 [ 1424.632793][ T1325] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1424.872012][ T1325] usb 6-1: Using ep0 maxpacket: 16 [ 1425.011947][ T1325] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1426.141650][ T1325] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1426.268435][ T1325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.277765][ T1325] usb 6-1: Product: syz [ 1426.282958][ T1325] usb 6-1: Manufacturer: syz [ 1426.288682][ T1325] usb 6-1: SerialNumber: syz [ 1426.302525][ T1325] r8152-cfgselector 6-1: config 0 descriptor?? [ 1427.649212][ T1325] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1428.957452][ T1325] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1429.519288][ T1325] r8152-cfgselector 6-1: bad CDC descriptors [ 1429.641748][ T1325] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1429.670505][T18920] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1429.775356][ T1325] r8152-cfgselector 6-1: USB disconnect, device number 6 [ 1434.611657][T17664] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1434.871603][T17664] usb 5-1: Using ep0 maxpacket: 16 [ 1435.004243][T17664] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1435.032109][T17456] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1435.202179][T17664] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1435.595549][T17664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.624161][T17664] usb 5-1: Product: syz [ 1435.643898][T17664] usb 5-1: Manufacturer: syz [ 1435.652467][T17664] usb 5-1: SerialNumber: syz [ 1435.772324][T17664] r8152-cfgselector 5-1: config 0 descriptor?? [ 1435.911761][T17456] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1436.439440][T17456] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1436.481815][T17456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.546028][T17456] usb 6-1: config 0 descriptor?? [ 1436.671640][T11535] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1436.901582][T18947] ubi: mtd0 is already attached to ubi0 [ 1436.941919][T11535] usb 4-1: Using ep0 maxpacket: 16 [ 1436.951764][ T4227] usb 6-1: USB disconnect, device number 7 [ 1437.103438][T11535] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1437.103440][T17664] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1437.261781][T11535] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1437.921714][T17664] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1437.931792][T17664] r8152-cfgselector 5-1: bad CDC descriptors [ 1437.937890][T11535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.971854][T17664] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1438.001841][T17664] r8152-cfgselector 5-1: USB disconnect, device number 85 [ 1438.005420][T11535] usb 4-1: Product: syz [ 1438.074436][T11535] usb 4-1: Manufacturer: syz [ 1438.114736][T11535] usb 4-1: SerialNumber: syz [ 1438.192520][T11535] r8152-cfgselector 4-1: config 0 descriptor?? [ 1439.580207][T11535] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1439.613806][T11535] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1439.620153][T11535] r8152-cfgselector 4-1: bad CDC descriptors [ 1439.726834][T11535] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1439.740029][T11535] r8152-cfgselector 4-1: USB disconnect, device number 67 [ 1445.927817][T19065] input: syz0 as /devices/virtual/input/input24 [ 1452.061611][T11436] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1453.131549][T11436] usb 4-1: Using ep0 maxpacket: 16 [ 1453.301723][T11436] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1454.241617][T11436] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1454.250756][T11436] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.267586][T11436] usb 4-1: Product: syz [ 1454.321701][T11436] usb 4-1: Manufacturer: syz [ 1454.368949][T11436] r8152-cfgselector 4-1: config 0 descriptor?? [ 1454.446315][T11436] r8152-cfgselector 4-1: can't set config #0, error -71 [ 1454.501711][T11436] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1454.542962][T11436] r8152-cfgselector 4-1: USB disconnect, device number 68 [ 1458.101559][T11436] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1459.911632][T11436] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1461.075004][T11436] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1461.084517][T11436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.097650][T11436] usb 2-1: config 0 descriptor?? [ 1461.121611][T11436] usb 2-1: can't set config #0, error -71 [ 1461.131847][T11436] usb 2-1: USB disconnect, device number 72 [ 1461.361985][T19223] tipc: Started in network mode [ 1461.371207][T19223] tipc: Node identity eab080c5ee15, cluster identity 4711 [ 1461.389020][T19223] tipc: Enabled bearer , priority 0 [ 1461.439070][T19223] tipc: Resetting bearer [ 1461.469031][T19222] tipc: Disabling bearer [ 1461.558732][T17457] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1462.631807][T17457] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1462.776789][T17457] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1462.807268][T17457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.845980][T17457] usb 6-1: config 0 descriptor?? [ 1463.141735][T17457] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1463.493378][T19219] ubi: mtd0 is already attached to ubi0 [ 1463.601834][T17457] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1463.739100][T17457] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1463.791156][T17457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.829633][T17457] usb 5-1: config 0 descriptor?? [ 1463.847856][T17456] usb 6-1: USB disconnect, device number 8 [ 1464.154559][T19241] ubi: mtd0 is already attached to ubi0 [ 1464.268934][T17664] usb 5-1: USB disconnect, device number 86 [ 1465.579737][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4024'. [ 1465.921006][T19263] device syzkaller0 entered promiscuous mode [ 1469.661863][T19285] device syzkaller0 entered promiscuous mode [ 1473.163895][T17664] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1473.551656][T17664] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1475.214269][T17664] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1475.224791][T17664] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1475.236011][T17664] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1475.258849][T17664] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1475.336812][T19338] tipc: Started in network mode [ 1475.342267][T19338] tipc: Node identity 76c683b3ea2, cluster identity 4711 [ 1475.353340][T19338] tipc: Enabled bearer , priority 0 [ 1475.618840][T17664] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1476.224149][T17664] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1476.224291][T19338] tipc: Resetting bearer [ 1476.246493][T17664] usb 5-1: Product: syz [ 1476.275972][T17664] usb 5-1: Manufacturer: syz [ 1476.388956][T17664] usb 5-1: can't set config #1, error -71 [ 1476.411878][ T4228] tipc: Node number set to 2632352691 [ 1476.599069][T17664] usb 5-1: USB disconnect, device number 87 [ 1476.636440][T19336] tipc: Disabling bearer [ 1482.530405][T19411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4065'. [ 1484.464432][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.470760][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.062521][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4071'. [ 1493.311608][T17456] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1493.681942][T17456] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1493.708845][T17456] usb 2-1: config 1 has no interface number 0 [ 1493.777923][T17456] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1493.887567][T17456] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.151799][T17456] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1494.883089][T17456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.306793][T17456] usb 2-1: Product: syz [ 1495.324691][T17456] usb 2-1: Manufacturer: syz [ 1495.329405][T17456] usb 2-1: SerialNumber: syz [ 1495.371746][T19501] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1496.371660][T17456] usb 2-1: can't set config #1, error -71 [ 1496.378512][T17456] usb 2-1: USB disconnect, device number 73 [ 1497.522081][T19539] binder: 19535:19539 ioctl 4018620d 0 returned -22 [ 1497.580054][T19539] binder: 19535:19539 ioctl 4018620d 0 returned -22 [ 1498.484395][T19547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4097'. [ 1499.221617][T15924] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1499.481580][T15924] usb 2-1: Using ep0 maxpacket: 16 [ 1500.315470][T15924] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1500.521635][T15924] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1501.352789][T15924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.360949][T15924] usb 2-1: Product: syz [ 1501.366004][T15924] usb 2-1: Manufacturer: syz [ 1501.370833][T15924] usb 2-1: SerialNumber: syz [ 1501.395882][T15924] r8152-cfgselector 2-1: config 0 descriptor?? [ 1502.689116][T15924] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1502.791771][T15924] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1502.809006][T15924] r8152-cfgselector 2-1: bad CDC descriptors [ 1502.991931][T15924] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1503.788738][T15924] r8152-cfgselector 2-1: USB disconnect, device number 74 [ 1505.381714][T11534] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1505.391656][T11535] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1506.335309][T19638] binder: 19637:19638 ioctl 4018620d 0 returned -22 [ 1506.343570][T19638] binder: 19637:19638 ioctl 4018620d 0 returned -22 [ 1506.352873][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4124'. [ 1506.491681][T11534] usb 5-1: Using ep0 maxpacket: 32 [ 1506.532185][ T6197] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1506.611655][T11535] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1506.620295][T11535] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1506.631274][T11534] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1506.640511][T11534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.657109][T11534] usb 5-1: config 0 descriptor?? [ 1506.662275][T11535] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1506.671239][T11535] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1506.682703][T11535] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1506.811863][T11535] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1506.821442][T11535] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1506.829594][T11535] usb 4-1: Product: syz [ 1506.834313][T11535] usb 4-1: Manufacturer: syz [ 1506.882680][T11535] cdc_wdm 4-1:1.0: skipping garbage [ 1506.888397][T11535] cdc_wdm 4-1:1.0: skipping garbage [ 1506.893870][ T6197] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1506.908603][T11535] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1506.914686][ T6197] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1506.925296][T11534] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1506.934591][T11535] cdc_wdm 4-1:1.0: Unknown control protocol [ 1506.942076][T11534] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1506.951866][ T6197] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1506.963716][T11534] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1506.972251][ T6197] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1506.985848][ T6197] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1507.111707][ T6197] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1507.132592][ T6197] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1507.133565][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4118'. [ 1507.140670][ T6197] usb 2-1: Product: syz [ 1507.159455][ T6197] usb 2-1: Manufacturer: syz [ 1507.213709][ T6197] cdc_wdm 2-1:1.0: skipping garbage [ 1507.223085][ T6197] cdc_wdm 2-1:1.0: skipping garbage [ 1507.231314][ T6197] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1507.239611][ T6197] cdc_wdm 2-1:1.0: Unknown control protocol [ 1507.711680][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 1507.719702][T11535] usb 4-1: USB disconnect, device number 69 [ 1507.865536][T19654] binder: 19653:19654 ioctl 4018620d 0 returned -22 [ 1507.874279][T19654] binder: 19653:19654 ioctl 4018620d 0 returned -22 [ 1507.883500][T19654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4129'. [ 1509.302612][T15924] usb 2-1: USB disconnect, device number 75 [ 1513.082829][ T4231] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1513.083748][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4142'. [ 1513.461666][ T4231] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1513.508055][T19718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4146'. [ 1514.101017][ T4231] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1514.112622][ T4231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1514.211717][ T4231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1514.224162][ T4231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1514.361645][ T4231] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1514.370869][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1514.379535][ T4231] usb 2-1: Product: syz [ 1514.384028][ T4231] usb 2-1: Manufacturer: syz [ 1514.442773][ T4231] cdc_wdm 2-1:1.0: skipping garbage [ 1514.448149][ T4231] cdc_wdm 2-1:1.0: skipping garbage [ 1514.469452][ T4231] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1514.477439][ T4231] cdc_wdm 2-1:1.0: Unknown control protocol [ 1514.601623][T15924] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1515.031650][T15924] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1515.040736][T15924] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1515.056763][T15924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.075171][T15924] usb 6-1: config 0 descriptor?? [ 1515.281606][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 1515.291889][T15924] usb 2-1: USB disconnect, device number 76 [ 1515.492176][T19721] ubi: mtd0 is already attached to ubi0 [ 1515.588881][ T4228] usb 6-1: USB disconnect, device number 9 [ 1518.881606][T15924] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1519.791644][T15924] usb 6-1: device descriptor read/64, error -71 [ 1520.061621][T15924] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1520.264086][T15924] usb 6-1: device descriptor read/64, error -71 [ 1521.232552][T15924] usb usb6-port1: attempt power cycle [ 1522.773997][T19790] tipc: Enabled bearer , priority 0 [ 1522.985860][T19788] tipc: Disabling bearer [ 1523.201562][ T4228] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1523.224696][T19804] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1523.405488][ T4228] usb 2-1: device descriptor read/64, error -71 [ 1530.199679][T19855] tipc: Enabled bearer , priority 0 [ 1530.219910][T19854] tipc: Disabling bearer [ 1530.611638][T17457] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1531.036563][T17457] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1531.051694][T17457] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1531.084890][T17457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.135219][T17457] usb 2-1: config 0 descriptor?? [ 1531.389942][T19860] ubi: mtd0 is already attached to ubi0 [ 1531.616237][T17457] usb 2-1: USB disconnect, device number 79 [ 1531.691631][T19883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4190'. [ 1533.031576][T17457] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1534.031597][T17457] usb 6-1: Using ep0 maxpacket: 16 [ 1534.951714][T17457] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1535.111745][T17457] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1535.129815][T17457] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.148270][T17457] usb 6-1: Product: syz [ 1535.158222][T17457] usb 6-1: Manufacturer: syz [ 1535.166166][T17457] usb 6-1: SerialNumber: syz [ 1535.191363][T17457] r8152-cfgselector 6-1: config 0 descriptor?? [ 1536.591686][T17457] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1537.301334][T17457] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1537.316906][T17457] r8152-cfgselector 6-1: bad CDC descriptors [ 1537.347505][T17457] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1537.409305][T17457] r8152-cfgselector 6-1: USB disconnect, device number 13 [ 1539.061722][T17457] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1539.771570][T17457] usb 2-1: device descriptor read/64, error -71 [ 1543.006331][T19990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4221'. [ 1545.904624][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.910936][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.732560][T20026] input: syz0 as /devices/virtual/input/input25 [ 1552.990568][T20095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4247'. [ 1559.270536][ T4195] Bluetooth: hci0: SCO packet for unknown connection handle 46 [ 1561.561700][T11436] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1561.771722][ T4227] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1561.801600][T11436] usb 2-1: Using ep0 maxpacket: 16 [ 1561.922181][T11436] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1562.075537][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 1562.121654][T11436] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1562.130706][T11436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.147177][T11436] usb 2-1: Product: syz [ 1562.164087][T11436] usb 2-1: Manufacturer: syz [ 1562.173965][T11436] usb 2-1: SerialNumber: syz [ 1562.179847][T11436] r8152-cfgselector 2-1: config 0 descriptor?? [ 1562.191801][ T4227] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1562.351821][ T4227] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1562.373071][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.428709][ T4227] usb 4-1: Product: syz [ 1562.441817][T11436] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1562.451414][ T4227] usb 4-1: Manufacturer: syz [ 1562.478730][ T4227] usb 4-1: SerialNumber: syz [ 1562.484875][T11436] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1562.503168][T11436] r8152-cfgselector 2-1: bad CDC descriptors [ 1562.538197][ T4227] r8152-cfgselector 4-1: config 0 descriptor?? [ 1562.591897][T11436] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1562.642637][T11436] r8152-cfgselector 2-1: USB disconnect, device number 82 [ 1562.841724][ T4227] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1562.875965][ T4227] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1562.904320][ T4227] r8152-cfgselector 4-1: bad CDC descriptors [ 1562.934399][ T4227] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1563.357269][ T4227] r8152-cfgselector 4-1: USB disconnect, device number 70 [ 1564.754910][T20206] tipc: Started in network mode [ 1564.759976][T20206] tipc: Node identity fa10c85f8435, cluster identity 4711 [ 1564.768524][T20206] tipc: Enabled bearer , priority 0 [ 1564.778959][T20206] device syzkaller0 entered promiscuous mode [ 1564.801602][T20206] tipc: Resetting bearer [ 1564.813645][T20205] tipc: Resetting bearer [ 1564.835071][T20205] tipc: Disabling bearer [ 1565.500420][T20224] binder: 20223:20224 ioctl 4018620d 0 returned -22 [ 1565.528150][T20224] binder: 20223:20224 ioctl 4018620d 0 returned -22 [ 1565.670514][T20230] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1565.679030][T20235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4285'. [ 1567.511681][ T4231] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1568.211764][ T4231] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1568.211853][ T4231] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1568.218737][ T4231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1568.249812][ T4231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1568.259945][ T4231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1568.671730][ T4231] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1568.671750][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1568.671761][ T4231] usb 2-1: Product: syz [ 1568.671769][ T4231] usb 2-1: Manufacturer: syz [ 1568.714275][ T4231] cdc_wdm 2-1:1.0: skipping garbage [ 1568.714287][ T4231] cdc_wdm 2-1:1.0: skipping garbage [ 1568.714316][ T4231] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1570.892438][T17457] usb 2-1: USB disconnect, device number 83 [ 1571.547440][T11534] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1571.547488][T11534] dvb_usb_az6027: probe of 5-1:0.0 failed with error -110 [ 1571.568711][T11534] usb 5-1: USB disconnect, device number 88 [ 1574.788988][T20357] device syzkaller0 entered promiscuous mode [ 1575.252265][T20387] tipc: Enabled bearer , priority 0 [ 1575.261723][T20387] device syzkaller0 entered promiscuous mode [ 1575.283662][T20387] tipc: Resetting bearer [ 1575.320880][T20386] tipc: Resetting bearer [ 1575.355278][T20386] tipc: Disabling bearer [ 1577.390206][T20423] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1580.831192][T20489] futex_wake_op: syz.0.4353 tries to shift op by 32; fix this program [ 1580.941661][T11702] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1581.451696][T11702] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1582.380359][T11702] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1582.389813][T11702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.400221][T11702] usb 4-1: config 0 descriptor?? [ 1582.732965][T20476] ubi: mtd0 is already attached to ubi0 [ 1582.794387][T11702] usb 4-1: USB disconnect, device number 71 [ 1585.261666][T11702] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1585.601615][T11702] usb 4-1: device descriptor read/64, error -71 [ 1586.483576][T11702] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1588.631633][T11436] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1589.611703][T11436] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1590.055350][T11436] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1590.541612][T11436] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1590.550926][T11436] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1590.562490][T11436] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1590.691836][T11436] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1590.727511][T11436] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1591.669201][T11436] usb 5-1: Product: syz [ 1591.676101][T11436] usb 5-1: Manufacturer: syz [ 1591.701723][T11436] usb 5-1: can't set config #1, error -71 [ 1591.709270][T11436] usb 5-1: USB disconnect, device number 89 [ 1591.969886][T20608] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1596.892171][T20666] futex_wake_op: syz.1.4404 tries to shift op by 32; fix this program [ 1597.030438][T20668] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1597.211620][T12555] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1597.451573][T12555] usb 2-1: Using ep0 maxpacket: 32 [ 1597.611653][T12555] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1597.691628][T12555] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1597.691654][T12555] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.691691][T12555] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1597.851656][T12555] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 1597.851686][T12555] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.851706][T12555] usb 2-1: Product: syz [ 1597.851718][T12555] usb 2-1: Manufacturer: syz [ 1597.851726][T12555] usb 2-1: SerialNumber: syz [ 1598.311964][T12555] usb 2-1: MIDIStreaming interface descriptor not found [ 1598.351473][T12555] usb 2-1: USB disconnect, device number 84 [ 1598.551696][T17457] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1598.941748][T17457] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1598.980518][T17457] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1599.007225][T17242] udevd[17242]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1599.119464][T17457] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1599.250564][T17457] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1599.373390][T17457] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1599.562193][T17457] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1599.595578][T17457] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1599.659219][T17457] usb 5-1: Product: syz [ 1599.726012][T17457] usb 5-1: Manufacturer: syz [ 1600.849021][T17457] cdc_wdm 5-1:1.0: skipping garbage [ 1600.933671][T17457] cdc_wdm 5-1:1.0: skipping garbage [ 1600.942633][T17456] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1600.989555][T17457] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1601.151584][T17456] usb 2-1: device descriptor read/64, error -71 [ 1602.031586][T17456] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1602.241577][T17456] usb 2-1: device descriptor read/64, error -71 [ 1602.362226][T17456] usb usb2-port1: attempt power cycle [ 1602.432957][T11535] usb 5-1: USB disconnect, device number 90 [ 1602.440050][T20724] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1602.871136][T20740] futex_wake_op: syz.1.4422 tries to shift op by 32; fix this program [ 1603.118818][ T4195] Bluetooth: hci2: SCO packet for unknown connection handle 46 [ 1603.291599][T17456] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1603.402579][T17456] usb 2-1: Using ep0 maxpacket: 32 [ 1603.561741][T17456] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1603.642090][T20762] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1603.651754][T17456] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1603.660959][T17456] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.672476][T17456] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1603.763757][T20768] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1603.841813][T17456] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 1603.851132][T17456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.860266][T17456] usb 2-1: Product: syz [ 1603.864672][T17456] usb 2-1: Manufacturer: syz [ 1603.869270][T17456] usb 2-1: SerialNumber: syz [ 1604.284873][T17456] usb 2-1: MIDIStreaming interface descriptor not found [ 1605.375981][T17456] usb 2-1: USB disconnect, device number 87 [ 1605.719640][ T4195] Bluetooth: hci3: SCO packet for unknown connection handle 46 [ 1606.558676][T20803] ubi: mtd0 is already attached to ubi0 [ 1607.343755][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.350023][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.960294][ T4195] Bluetooth: hci5: SCO packet for unknown connection handle 46 [ 1610.324555][T20854] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1610.599921][T20866] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1614.095497][T20909] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1614.800420][T20928] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1618.433003][T20980] tipc: Enabled bearer , priority 0 [ 1618.485258][T20983] device syzkaller0 entered promiscuous mode [ 1618.503317][T20980] device syzkaller0 entered promiscuous mode [ 1619.706429][ T4228] tipc: Node number set to 77955269 [ 1619.732902][T20980] tipc: Resetting bearer [ 1619.745558][T20983] tipc: Enabled bearer , priority 0 [ 1619.775057][T20978] tipc: Resetting bearer [ 1619.799394][T20978] tipc: Disabling bearer [ 1619.893746][T20983] tipc: Resetting bearer [ 1620.052844][T20981] tipc: Resetting bearer [ 1620.144972][T20981] tipc: Disabling bearer [ 1623.047952][T21031] ubi: mtd0 is already attached to ubi0 [ 1623.381659][T21035] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4509'. [ 1623.491073][T21035] netlink: 'syz.3.4509': attribute type 1 has an invalid length. [ 1623.501718][T21035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4509'. [ 1623.583472][T21038] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1623.591016][T21041] tipc: Enabled bearer , priority 0 [ 1623.610011][T21047] tipc: Enabling of bearer rejected, failed to enable media [ 1623.628157][T21041] device syzkaller0 entered promiscuous mode [ 1623.639844][T21046] tipc: Enabled bearer , priority 0 [ 1623.659018][T21046] device syzkaller0 entered promiscuous mode [ 1623.679492][T21041] tipc: Resetting bearer [ 1623.696530][T21046] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1623.715028][T21040] tipc: Resetting bearer [ 1623.744954][T21040] tipc: Disabling bearer [ 1623.772631][T21046] tipc: Resetting bearer [ 1623.796417][T21044] tipc: Resetting bearer [ 1623.817312][T21044] tipc: Disabling bearer [ 1625.043062][T21084] futex_wake_op: syz.4.4520 tries to shift op by 32; fix this program [ 1625.052900][T21089] tipc: Enabled bearer , priority 0 [ 1625.060653][T21089] device syzkaller0 entered promiscuous mode [ 1625.111463][T21089] tipc: Resetting bearer [ 1625.134499][T21086] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4523'. [ 1625.150091][T21088] tipc: Resetting bearer [ 1625.166404][T21088] tipc: Disabling bearer [ 1625.173589][T21086] netlink: 'syz.3.4523': attribute type 1 has an invalid length. [ 1625.182929][T21086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4523'. [ 1625.361750][T11534] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1625.651716][T11534] usb 5-1: Using ep0 maxpacket: 32 [ 1626.981905][T11534] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1627.111861][T11534] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1627.349047][T11534] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.457251][T11534] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1627.663397][T11534] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 1627.679802][T11534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.689919][T11534] usb 5-1: Product: syz [ 1627.694478][T11534] usb 5-1: Manufacturer: syz [ 1627.699098][T11534] usb 5-1: SerialNumber: syz [ 1627.881736][T11534] usb 5-1: can't set config #1, error -71 [ 1627.899455][T11534] usb 5-1: USB disconnect, device number 91 [ 1629.713218][T21144] ubi: mtd0 is already attached to ubi0 [ 1629.906869][T21153] futex_wake_op: syz.4.4539 tries to shift op by 32; fix this program [ 1629.987025][T21147] ubi: mtd0 is already attached to ubi0 [ 1630.401722][ T4227] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1630.641718][ T4227] usb 5-1: Using ep0 maxpacket: 32 [ 1630.811819][ T4227] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1630.861019][T21172] futex_wake_op: syz.1.4545 tries to shift op by 32; fix this program [ 1630.866498][T21168] tipc: Enabled bearer , priority 0 [ 1630.891859][ T4227] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1630.905844][ T4227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.907032][T21168] device syzkaller0 entered promiscuous mode [ 1630.939405][ T4227] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1630.985774][T21180] ubi: mtd0 is already attached to ubi0 [ 1630.993207][T21168] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1631.040367][T21168] tipc: Resetting bearer [ 1631.051441][T21162] tipc: Resetting bearer [ 1631.072697][T21162] tipc: Disabling bearer [ 1631.111832][ T4227] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 1631.121026][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.221758][ T7503] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1631.492024][ T7503] usb 2-1: Using ep0 maxpacket: 32 [ 1631.682078][ T7503] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1631.791889][ T7503] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1631.825783][ T7503] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.884232][ T7503] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1632.016027][ T4227] usb 5-1: Product: syz [ 1632.020244][ T4227] usb 5-1: Manufacturer: syz [ 1632.024918][ T4227] usb 5-1: SerialNumber: syz [ 1632.181771][ T7503] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 1632.193396][ T7503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.201846][ T7503] usb 2-1: Product: syz [ 1632.206025][ T7503] usb 2-1: Manufacturer: syz [ 1632.210626][ T7503] usb 2-1: SerialNumber: syz [ 1632.911702][ T4227] usb 5-1: MIDIStreaming interface descriptor not found [ 1633.215235][ T4227] usb 5-1: USB disconnect, device number 92 [ 1633.301848][ T7503] usb 2-1: MIDIStreaming interface descriptor not found [ 1633.400172][T21212] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1633.410782][T21206] ubi: mtd0 is already attached to ubi0 [ 1633.430628][ T7503] usb 2-1: USB disconnect, device number 88 [ 1633.510115][T21220] tipc: Enabling of bearer rejected, failed to enable media [ 1633.623157][T17242] udevd[17242]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1633.827240][T21231] tipc: Enabled bearer , priority 0 [ 1633.846798][T21231] device syzkaller0 entered promiscuous mode [ 1634.804329][T21231] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1634.867848][T11534] tipc: Node number set to 224462940 [ 1634.907418][T21231] tipc: Resetting bearer [ 1634.976245][T21230] tipc: Resetting bearer [ 1635.022256][T21230] tipc: Disabling bearer [ 1635.122839][T21244] binder: 21243:21244 ioctl 4018620d 0 returned -22 [ 1635.219973][T21251] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4567'. [ 1635.286622][T21244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4566'. [ 1635.311078][T21251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4567'. [ 1635.377323][T21256] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1635.386695][T21253] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1635.403013][T21266] futex_wake_op: syz.5.4570 tries to shift op by 32; fix this program [ 1635.701873][T11702] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1635.961696][T11702] usb 6-1: Using ep0 maxpacket: 32 [ 1636.121957][T11702] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1636.242250][T11702] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1636.300437][T11702] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.393837][T11702] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1636.689654][T21283] tipc: Started in network mode [ 1636.694865][T21283] tipc: Node identity 6ab3278da8c2, cluster identity 4711 [ 1636.703670][T21283] tipc: Enabled bearer , priority 0 [ 1636.751927][T11702] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 1636.782382][T11702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.794468][T21288] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1636.799970][T11702] usb 6-1: Product: syz [ 1636.807113][T11702] usb 6-1: Manufacturer: syz [ 1636.815221][T11702] usb 6-1: SerialNumber: syz [ 1636.853593][T21289] tipc: Enabled bearer , priority 0 [ 1636.878861][T21286] device syzkaller0 entered promiscuous mode [ 1636.910507][T21289] device syzkaller0 entered promiscuous mode [ 1636.929290][T21283] tipc: Resetting bearer [ 1636.955809][T21284] tipc: Resetting bearer [ 1636.968068][T21281] tipc: Resetting bearer [ 1637.002020][T21281] tipc: Disabling bearer [ 1637.018816][T21282] tipc: Resetting bearer [ 1637.031323][T21282] tipc: Disabling bearer [ 1637.061638][T21291] netlink: 'syz.1.4578': attribute type 1 has an invalid length. [ 1637.071446][T21291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4578'. [ 1637.089654][T11534] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1637.264216][T11702] usb 6-1: MIDIStreaming interface descriptor not found [ 1637.371592][T11534] usb 5-1: Using ep0 maxpacket: 16 [ 1637.481619][ T4227] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1637.674638][T11702] usb 6-1: USB disconnect, device number 14 [ 1637.691641][ T4227] usb 4-1: device descriptor read/64, error -71 [ 1637.971724][ T4227] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1638.191697][ T4227] usb 4-1: device descriptor read/64, error -71 [ 1638.301811][T11534] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1638.323203][ T4227] usb usb4-port1: attempt power cycle [ 1638.482377][T11534] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1638.541409][T11534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.771574][ T4227] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1639.491167][T11534] usb 5-1: Product: syz [ 1639.498526][T11534] usb 5-1: Manufacturer: syz [ 1639.498548][T11534] usb 5-1: SerialNumber: syz [ 1639.516342][T11534] r8152-cfgselector 5-1: config 0 descriptor?? [ 1639.541767][ T4227] usb 4-1: device descriptor read/8, error -71 [ 1639.703629][T21318] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1639.726599][T11534] r8152-cfgselector 5-1: can't set config #0, error -71 [ 1639.765623][T11534] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1639.791313][T11534] r8152-cfgselector 5-1: USB disconnect, device number 93 [ 1639.811809][ T4227] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1639.883231][T21326] binder: 21325:21326 ioctl 4018620d 0 returned -22 [ 1639.921814][ T4227] usb 4-1: device descriptor read/8, error -71 [ 1640.035357][T21326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4589'. [ 1640.045526][ T4227] usb usb4-port1: unable to enumerate USB device [ 1641.050662][T21345] device syzkaller0 entered promiscuous mode [ 1641.116039][T21345] tipc: Enabled bearer , priority 0 [ 1641.189526][T21353] tipc: Resetting bearer [ 1641.226870][T21351] tipc: Enabled bearer , priority 0 [ 1641.258463][T21341] tipc: Resetting bearer [ 1641.297607][T21341] tipc: Disabling bearer [ 1641.316479][T21355] device syzkaller0 entered promiscuous mode [ 1641.342025][T21351] tipc: Resetting bearer [ 1641.358230][T21356] tipc: Enabled bearer , priority 0 [ 1641.398900][T21356] device syzkaller0 entered promiscuous mode [ 1641.439594][T21350] tipc: Resetting bearer [ 1641.462873][T21350] tipc: Disabling bearer [ 1641.509838][T21356] tipc: Resetting bearer [ 1641.529826][T21354] tipc: Resetting bearer [ 1641.620649][T21354] tipc: Disabling bearer [ 1643.265235][T21368] netlink: 'syz.4.4601': attribute type 1 has an invalid length. [ 1643.316460][T21368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4601'. [ 1647.128260][T21410] tipc: Enabled bearer , priority 0 [ 1647.144100][T21410] device syzkaller0 entered promiscuous mode [ 1648.143377][T21410] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1648.225781][T21410] tipc: Resetting bearer [ 1648.259783][T21416] atomic_op ffff888073661998 conn xmit_atomic 0000000000000000 [ 1648.283940][T21409] tipc: Resetting bearer [ 1648.328942][T21409] tipc: Disabling bearer [ 1648.625765][T21424] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1653.616749][T21465] tipc: Enabled bearer , priority 0 [ 1653.628505][T21465] device syzkaller0 entered promiscuous mode [ 1653.650186][T21465] tipc: Resetting bearer [ 1653.666006][T21460] tipc: Resetting bearer [ 1653.685408][T21460] tipc: Disabling bearer [ 1653.737022][T21464] tipc: Enabling of bearer rejected, failed to enable media [ 1659.131645][T11534] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1660.111611][ T4228] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1660.180554][T21531] tipc: Enabled bearer , priority 0 [ 1660.187997][T21531] device syzkaller0 entered promiscuous mode [ 1660.204188][T21531] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1660.218886][T21531] tipc: Resetting bearer [ 1660.232489][T21530] tipc: Resetting bearer [ 1660.244049][T21530] tipc: Disabling bearer [ 1660.481727][ T4228] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1660.489770][ T4228] usb 4-1: config 1 has no interface number 0 [ 1660.883623][T21543] futex_wake_op: syz.0.4644 tries to shift op by 32; fix this program [ 1661.515332][ T4228] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1661.525995][ T4228] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.717484][ T4228] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1662.994506][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.096012][ T4228] usb 4-1: Product: syz [ 1663.170891][ T4228] usb 4-1: Manufacturer: syz [ 1663.221635][ T4228] usb 4-1: SerialNumber: syz [ 1663.286796][ T4228] usb 4-1: can't set config #1, error -71 [ 1663.311833][ T4228] usb 4-1: USB disconnect, device number 78 [ 1663.491715][T10736] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1663.681640][T10736] usb 5-1: device descriptor read/64, error -71 [ 1666.201882][T21103] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1667.191695][T21103] usb 4-1: device descriptor read/64, error -71 [ 1667.481609][T21103] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1668.521598][T21103] usb 4-1: device descriptor read/64, error -71 [ 1668.662124][T21103] usb usb4-port1: attempt power cycle [ 1668.784065][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.790935][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.587651][T21611] tipc: Enabling of bearer rejected, failed to enable media [ 1670.661658][ T4231] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1670.851625][ T4231] usb 6-1: device descriptor read/64, error -71 [ 1671.131690][ T4231] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1672.151581][ T4231] usb 6-1: device descriptor read/64, error -71 [ 1672.351757][ T4231] usb usb6-port1: attempt power cycle [ 1672.831787][ T4231] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1673.621704][ T4231] usb 6-1: device not accepting address 17, error -71 [ 1675.206383][T21651] tipc: Enabled bearer , priority 0 [ 1675.248656][T21651] device syzkaller0 entered promiscuous mode [ 1675.310220][T21652] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1675.392118][T21651] tipc: Resetting bearer [ 1675.641618][T21103] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1676.388418][T21650] tipc: Resetting bearer [ 1676.523783][T21650] tipc: Disabling bearer [ 1676.548743][ T4231] tipc: Node number set to 2116405343 [ 1676.671592][T21103] usb 2-1: Using ep0 maxpacket: 32 [ 1676.728064][T21663] ubi: mtd0 is already attached to ubi0 [ 1676.816792][T21103] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.837607][T21103] usb 2-1: config 0 has no interfaces? [ 1676.843759][T21103] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1676.861634][T21103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.883972][T21103] usb 2-1: config 0 descriptor?? [ 1676.971183][T21677] capability: warning: `syz.4.4685' uses 32-bit capabilities (legacy support in use) [ 1678.659877][ T4228] usb 2-1: USB disconnect, device number 90 [ 1681.222215][T21724] binder: 21722:21724 ioctl 4018620d 0 returned -22 [ 1681.241297][T21724] binder: 21722:21724 ioctl 4018620d 0 returned -22 [ 1681.382806][T21730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4698'. [ 1681.448243][T21733] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1681.691651][ T7503] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1682.811591][ T7503] usb 4-1: Using ep0 maxpacket: 16 [ 1683.142132][ T7503] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1683.392062][ T7503] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1683.454305][ T7503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.575604][ T7503] usb 4-1: Product: syz [ 1683.580312][ T7503] usb 4-1: Manufacturer: syz [ 1683.586580][ T7503] usb 4-1: SerialNumber: syz [ 1683.603090][ T7503] r8152-cfgselector 4-1: config 0 descriptor?? [ 1684.091609][ T4228] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1684.837724][T21784] binder: 21783:21784 ioctl 4018620d 0 returned -22 [ 1684.860116][T21784] binder: 21783:21784 ioctl 4018620d 0 returned -22 [ 1684.921777][ T7503] r8152-cfgselector 4-1: can't set config #0, error -71 [ 1684.955827][ T7503] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1684.974336][T21790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4714'. [ 1685.039280][ T7503] r8152-cfgselector 4-1: USB disconnect, device number 82 [ 1685.091568][ T4228] usb 5-1: Using ep0 maxpacket: 32 [ 1685.951719][ T4228] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1687.111698][ T4228] usb 5-1: unable to read config index 0 descriptor/all [ 1687.118713][ T4228] usb 5-1: can't read configurations, error -71 [ 1691.618698][T21861] ubi: mtd0 is already attached to ubi0 [ 1693.764931][T21910] device syzkaller0 entered promiscuous mode [ 1698.761048][T21964] tipc: Enabling of bearer rejected, failed to enable media [ 1701.201801][ T4228] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1702.194500][T22005] tipc: Enabled bearer , priority 0 [ 1702.227864][T22005] device syzkaller0 entered promiscuous mode [ 1702.300124][T22005] tipc: Resetting bearer [ 1702.338376][T22000] tipc: Resetting bearer [ 1702.373454][T22000] tipc: Disabling bearer [ 1702.411674][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 1702.612071][ T4228] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1702.882486][ T4228] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1704.046317][ T4228] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1704.285405][ T4228] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1704.424650][ T4228] usb 2-1: string descriptor 0 read error: -71 [ 1704.491608][ T4228] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 1704.560190][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.431681][ T4228] usb 2-1: can't set config #1, error -71 [ 1705.446880][ T4228] usb 2-1: USB disconnect, device number 91 [ 1707.631663][ T7503] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1707.891640][ T7503] usb 4-1: Using ep0 maxpacket: 16 [ 1708.066678][ T7503] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1709.431683][ T7503] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1709.440776][ T7503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.464422][ T7503] usb 4-1: Product: syz [ 1709.468694][ T7503] usb 4-1: Manufacturer: syz [ 1709.481724][ T7503] usb 4-1: SerialNumber: syz [ 1709.490706][ T7503] r8152-cfgselector 4-1: config 0 descriptor?? [ 1711.007944][T22120] tipc: Enabled bearer , priority 0 [ 1711.030777][T22120] device syzkaller0 entered promiscuous mode [ 1711.066324][T22121] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1711.094286][T22119] tipc: Resetting bearer [ 1711.175390][T22119] tipc: Disabling bearer [ 1711.192251][ T7503] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1711.220293][ T7503] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1711.247156][ T7503] r8152-cfgselector 4-1: bad CDC descriptors [ 1711.290343][ T7503] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1711.322419][T22130] netlink: 'syz.0.4802': attribute type 1 has an invalid length. [ 1711.343835][ T7503] r8152-cfgselector 4-1: USB disconnect, device number 83 [ 1715.315358][ T4195] Bluetooth: hci3: SCO packet for unknown connection handle 46 [ 1715.621592][ T4227] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1716.654787][ T4227] usb 6-1: Using ep0 maxpacket: 16 [ 1716.859572][ T4227] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1716.958660][T22181] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1717.051748][ T4227] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1717.063906][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.086870][ T4227] usb 6-1: Product: syz [ 1717.091405][ T4227] usb 6-1: Manufacturer: syz [ 1717.097158][ T4227] usb 6-1: SerialNumber: syz [ 1717.113383][ T4227] r8152-cfgselector 6-1: config 0 descriptor?? [ 1717.219833][T22190] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4818'. [ 1717.268892][T22190] netlink: 'syz.3.4818': attribute type 1 has an invalid length. [ 1717.291145][T22190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4818'. [ 1717.401695][ T4227] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1717.431970][ T4227] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1717.447897][ T4227] r8152-cfgselector 6-1: bad CDC descriptors [ 1717.491658][ T4227] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1717.514778][ T4227] r8152-cfgselector 6-1: USB disconnect, device number 19 [ 1718.980464][T22203] tipc: Enabled bearer , priority 0 [ 1719.019697][T22203] tipc: Resetting bearer [ 1719.048143][T22202] tipc: Disabling bearer [ 1719.327260][ T4227] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1720.991574][ T4227] usb 6-1: Using ep0 maxpacket: 32 [ 1721.834246][ T4227] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1721.899333][T22222] ubi: mtd0 is already attached to ubi0 [ 1721.971756][ T4227] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1721.991805][ T4227] usb 6-1: can't read configurations, error -71 [ 1723.132456][T22236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4833'. [ 1723.163050][T22238] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1724.144499][T22260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4837'. [ 1724.181375][T22262] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1729.699887][T22292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4854'. [ 1729.715145][T22311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4847'. [ 1730.223096][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.229459][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.641615][T12554] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1731.621639][T12554] usb 4-1: Using ep0 maxpacket: 16 [ 1732.531688][T12554] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1732.621610][ T4228] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1732.721760][T12554] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1732.754568][T12554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.793113][T22354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4860'. [ 1732.820191][T12554] usb 4-1: Product: syz [ 1732.853590][T12554] usb 4-1: Manufacturer: syz [ 1732.883192][T12554] usb 4-1: SerialNumber: syz [ 1732.925266][T12554] r8152-cfgselector 4-1: config 0 descriptor?? [ 1733.045315][T22357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4861'. [ 1733.111710][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 1733.197526][T12554] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1733.272175][ T4228] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1734.001688][T12554] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1734.008064][T12554] r8152-cfgselector 4-1: bad CDC descriptors [ 1734.029284][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.041683][T12554] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1734.058165][T12554] r8152-cfgselector 4-1: USB disconnect, device number 84 [ 1734.186071][ T4228] usb 2-1: config 0 descriptor?? [ 1735.561844][ T4228] usb 2-1: can't set config #0, error -71 [ 1735.574988][ T4228] usb 2-1: USB disconnect, device number 92 [ 1740.981668][ T4228] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1741.631611][ T4228] usb 5-1: Using ep0 maxpacket: 32 [ 1741.871871][ T4228] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1742.646598][ T4228] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1742.877872][ T4228] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.888471][ T4228] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1743.081930][ T4228] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 1744.051600][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.059646][ T4228] usb 5-1: Product: syz [ 1744.188034][ T4228] usb 5-1: Manufacturer: syz [ 1744.196381][ T4228] usb 5-1: SerialNumber: syz [ 1745.882697][ T4228] usb 5-1: can't set config #1, error -71 [ 1745.889697][ T4228] usb 5-1: USB disconnect, device number 98 [ 1750.491593][T11702] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1750.496180][T22560] device syzkaller0 entered promiscuous mode [ 1750.781608][T11702] usb 6-1: Using ep0 maxpacket: 32 [ 1750.991660][T11702] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1751.081849][T11702] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1751.096696][T11702] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.129322][T11702] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1751.304097][T22579] input: syz0 as /devices/virtual/input/input26 [ 1751.351804][T11702] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 1751.371595][T11702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.399971][T11702] usb 6-1: Product: syz [ 1751.413694][T11702] usb 6-1: Manufacturer: syz [ 1751.426189][T11702] usb 6-1: SerialNumber: syz [ 1751.831897][T11702] usb 6-1: MIDIStreaming interface descriptor not found [ 1751.945893][T11702] usb 6-1: USB disconnect, device number 22 [ 1752.381616][T11536] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1753.181805][T11536] usb 4-1: device descriptor read/64, error -71 [ 1753.486381][T11536] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1753.653818][T22586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4919'. [ 1753.686586][T11536] usb 4-1: device descriptor read/64, error -71 [ 1753.811799][T11536] usb usb4-port1: attempt power cycle [ 1755.201631][T11536] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1755.884791][T11536] usb 4-1: device descriptor read/8, error -71 [ 1756.076236][T22638] loop1: detected capacity change from 0 to 512 [ 1756.139483][T22637] device syzkaller0 entered promiscuous mode [ 1756.182930][T22637] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1759.392801][T22638] EXT4-fs: failed to create workqueue [ 1759.398213][T22638] EXT4-fs (loop1): mount failed [ 1760.730959][T22667] tipc: Enabled bearer , priority 0 [ 1760.909755][T22667] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1761.831599][T15924] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1762.091603][T15924] usb 5-1: Using ep0 maxpacket: 16 [ 1762.231620][T15924] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1762.308007][T22666] tipc: Disabling bearer [ 1762.412193][T15924] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1762.442084][T15924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.450142][T15924] usb 5-1: Product: syz [ 1762.465663][T15924] usb 5-1: Manufacturer: syz [ 1762.474744][T15924] usb 5-1: SerialNumber: syz [ 1762.488158][T15924] r8152-cfgselector 5-1: config 0 descriptor?? [ 1763.833714][T15924] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1763.851725][T15924] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1763.858959][T15924] r8152-cfgselector 5-1: bad CDC descriptors [ 1763.893428][T15924] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1763.935038][T15924] r8152-cfgselector 5-1: USB disconnect, device number 99 [ 1763.953428][T22704] device syzkaller0 entered promiscuous mode [ 1764.075898][T22704] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1769.534471][T22772] device syzkaller0 entered promiscuous mode [ 1769.582773][T22772] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1774.541827][T10736] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1774.881704][T10736] usb 4-1: Using ep0 maxpacket: 16 [ 1774.966855][T22819] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4975'. [ 1775.021946][T10736] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1775.057218][T22819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4975'. [ 1775.202628][T10736] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1775.275308][T10736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.320699][T10736] usb 4-1: Product: syz [ 1775.460894][T10736] usb 4-1: Manufacturer: syz [ 1775.543799][T10736] usb 4-1: SerialNumber: syz [ 1775.699001][T10736] r8152-cfgselector 4-1: config 0 descriptor?? [ 1776.503011][T11534] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1776.881892][T11534] usb 5-1: config index 0 descriptor too short (expected 45, got 18) [ 1776.897669][T11534] usb 5-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1776.906052][T22845] tipc: Enabled bearer , priority 0 [ 1776.911815][T11534] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1776.928304][T22845] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1776.940241][T22844] tipc: Disabling bearer [ 1776.995765][ T1325] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1777.081824][T11534] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1777.090906][T11534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.238518][T10736] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1777.322865][T10736] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1777.360777][T10736] r8152-cfgselector 4-1: bad CDC descriptors [ 1777.472119][T10736] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1777.481675][ T1325] usb 2-1: Using ep0 maxpacket: 16 [ 1777.589694][T10736] r8152-cfgselector 4-1: USB disconnect, device number 89 [ 1777.632375][ T1325] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1777.850385][T11534] usb 5-1: Product: syz [ 1777.854665][T11534] usb 5-1: Manufacturer: syz [ 1777.859515][T11534] usb 5-1: SerialNumber: syz [ 1777.861828][ T1325] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1777.908338][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.929040][ T1325] usb 2-1: Product: syz [ 1777.935808][ T1325] usb 2-1: Manufacturer: syz [ 1777.940644][ T1325] usb 2-1: SerialNumber: syz [ 1777.959264][ T1325] r8152-cfgselector 2-1: config 0 descriptor?? [ 1778.262102][T11534] rtl8150 5-1:1.0: couldn't find required endpoints [ 1778.269996][T11534] rtl8150: probe of 5-1:1.0 failed with error -5 [ 1778.309680][T11534] usb 5-1: USB disconnect, device number 100 [ 1779.639038][ T1325] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1779.721648][T12555] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1779.751834][ T1325] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1779.768548][ T1325] r8152-cfgselector 2-1: bad CDC descriptors [ 1779.811733][ T1325] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1779.821928][ T1325] r8152-cfgselector 2-1: USB disconnect, device number 93 [ 1783.284118][T12555] usb 6-1: Using ep0 maxpacket: 16 [ 1783.541628][T12555] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1783.549286][T12555] usb 6-1: can't read configurations, error -71 [ 1783.641602][T17456] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1783.881572][T17456] usb 2-1: Using ep0 maxpacket: 16 [ 1785.098975][T17456] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1785.231830][T17456] usb 2-1: string descriptor 0 read error: -71 [ 1785.307392][T17456] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1785.431690][T17456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.604950][T17456] r8152-cfgselector 2-1: config 0 descriptor?? [ 1785.831897][T17456] r8152-cfgselector 2-1: can't set config #0, error -71 [ 1786.561774][T17456] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1786.591829][T17456] r8152-cfgselector 2-1: USB disconnect, device number 94 [ 1789.271591][ T6935] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1789.604413][T22924] tipc: Enabling of bearer rejected, failed to enable media [ 1789.671628][T22931] device syzkaller0 entered promiscuous mode [ 1789.921641][ T6935] usb 6-1: device descriptor read/64, error -71 [ 1790.189706][T22940] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1790.221649][ T6935] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1790.481566][ T6935] usb 6-1: Using ep0 maxpacket: 32 [ 1791.192773][ T6935] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1791.663385][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.669727][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.109009][ T6935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.124536][ T6935] usb 6-1: config 0 descriptor?? [ 1792.182636][ T6935] usb 6-1: can't set config #0, error -71 [ 1792.202447][ T6935] usb 6-1: USB disconnect, device number 26 [ 1793.364107][T22964] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5014'. [ 1793.389247][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5014'. [ 1793.476305][T22973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5016'. [ 1794.001800][T12555] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1794.291807][T12555] usb 4-1: Using ep0 maxpacket: 16 [ 1794.471352][T22984] tipc: Enabling of bearer rejected, failed to enable media [ 1794.494913][T12555] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1794.871582][T15924] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1795.361886][T12555] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1795.378358][T12555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.401634][T15924] usb 2-1: Using ep0 maxpacket: 16 [ 1795.409331][T12555] usb 4-1: Product: syz [ 1795.426008][T12555] usb 4-1: Manufacturer: syz [ 1795.430662][T12555] usb 4-1: SerialNumber: syz [ 1795.472252][T12555] r8152-cfgselector 4-1: config 0 descriptor?? [ 1795.521881][T15924] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1795.801919][T15924] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1796.815815][T12555] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1797.334943][T15924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.343124][T15924] usb 2-1: Product: syz [ 1797.348313][T15924] usb 2-1: Manufacturer: syz [ 1797.353023][T15924] usb 2-1: SerialNumber: syz [ 1797.405622][T15924] r8152-cfgselector 2-1: config 0 descriptor?? [ 1797.412249][T12555] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1797.431661][T15924] r8152-cfgselector 2-1: can't set config #0, error -71 [ 1797.451653][T15924] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1798.426762][T12555] r8152-cfgselector 4-1: bad CDC descriptors [ 1798.439987][T15924] r8152-cfgselector 2-1: USB disconnect, device number 95 [ 1798.452806][T12555] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1798.466303][T12555] r8152-cfgselector 4-1: USB disconnect, device number 90 [ 1799.191811][T12555] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1799.771600][T12555] usb 4-1: Using ep0 maxpacket: 16 [ 1800.272388][T12555] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1800.471897][T12555] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1800.495073][T12555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.616926][T12555] usb 4-1: Product: syz [ 1800.645572][T12555] usb 4-1: Manufacturer: syz [ 1800.666731][T12555] usb 4-1: SerialNumber: syz [ 1800.712338][T12555] r8152-cfgselector 4-1: config 0 descriptor?? [ 1800.927083][T15924] FS-Cache: Duplicate cookie detected [ 1800.933134][T15924] FS-Cache: O-cookie c=0000000c [p=00000006 fl=222 nc=0 na=1] [ 1800.940735][T15924] FS-Cache: O-cookie d=ffffffff8c745d00{AFS.cell} n=ffff88802424d800 [ 1800.948827][T15924] FS-Cache: O-key=[1] 'ff' [ 1800.953290][T15924] FS-Cache: N-cookie c=0000000d [p=00000006 fl=2 nc=0 na=1] [ 1800.960583][T15924] FS-Cache: N-cookie d=ffffffff8c745d00{AFS.cell} n=ffff88807855b800 [ 1800.968727][T15924] FS-Cache: N-key=[1] 'ff' [ 1802.097471][T12555] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1802.141775][T12555] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1802.158390][T12555] r8152-cfgselector 4-1: bad CDC descriptors [ 1803.234470][T12555] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1803.242449][T23091] loop3: detected capacity change from 0 to 256 [ 1803.277351][T12555] r8152-cfgselector 4-1: USB disconnect, device number 91 [ 1803.287094][T23099] loop4: detected capacity change from 0 to 2048 [ 1803.292421][T23091] exfat: Unknown parameter 'sys_tz' [ 1803.324641][T23102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5059'. [ 1804.383973][T23117] loop5: detected capacity change from 0 to 256 [ 1804.808554][T23117] FAT-fs (loop5): Directory bread(block 64) failed [ 1804.918790][T23120] binder: 23118:23120 ioctl c0306201 0 returned -14 [ 1805.151993][T23117] FAT-fs (loop5): Directory bread(block 65) failed [ 1805.159574][T23117] FAT-fs (loop5): Directory bread(block 66) failed [ 1805.330844][T23117] FAT-fs (loop5): Directory bread(block 67) failed [ 1805.383426][T23117] FAT-fs (loop5): Directory bread(block 68) failed [ 1805.431625][T23117] FAT-fs (loop5): Directory bread(block 69) failed [ 1805.475802][T23117] FAT-fs (loop5): Directory bread(block 70) failed [ 1805.521653][T23117] FAT-fs (loop5): Directory bread(block 71) failed [ 1805.545981][T23117] FAT-fs (loop5): Directory bread(block 72) failed [ 1805.587746][T23117] FAT-fs (loop5): Directory bread(block 73) failed [ 1805.704964][T23131] loop4: detected capacity change from 0 to 1024 [ 1805.705499][T23117] attempt to access beyond end of device [ 1805.705499][T23117] loop5: rw=0, want=1164, limit=256 [ 1805.830067][T23111] loop3: detected capacity change from 0 to 128 [ 1805.841696][T23138] binder: 23137:23138 ioctl c0306201 0 returned -14 [ 1805.940481][T23111] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1805.986028][T23111] ext4 filesystem being mounted at /410/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1806.831199][ T25] audit: type=1326 audit(1783425783.037:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23151 comm="syz.3.5075" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b6b1e59 code=0x7ffc0000 [ 1806.975894][T23155] loop5: detected capacity change from 0 to 2048 [ 1807.035728][ T25] audit: type=1326 audit(1783425783.077:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23151 comm="syz.3.5075" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b6b1e59 code=0x7ffc0000 [ 1807.059079][T23131] hfsplus: bad catalog folder entry [ 1807.671820][ T25] audit: type=1326 audit(1783425783.077:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23151 comm="syz.3.5075" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b6b1e59 code=0x7ffc0000 [ 1808.071811][ T25] audit: type=1326 audit(1783425783.077:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23151 comm="syz.3.5075" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fa84b6b1e59 code=0x7ffc0000 [ 1808.113281][ T25] audit: type=1326 audit(1783425783.147:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23151 comm="syz.3.5075" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b6b1e59 code=0x7ffc0000 [ 1808.256060][ T25] audit: type=1326 audit(1783425783.147:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23151 comm="syz.3.5075" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84b6b1e59 code=0x7ffc0000 [ 1808.304317][T23155] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1808.338971][ T4321] hfsplus: bad catalog folder entry [ 1808.374504][ T4321] hfsplus: bad catalog file entry [ 1808.484822][ T25] audit: type=1326 audit(1783425783.157:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23151 comm="syz.3.5075" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa84b6b1e59 code=0x7ffc0000 [ 1808.546556][ T25] audit: type=1326 audit(1783425783.157:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23151 comm="syz.3.5075" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa84b6b1e59 code=0x7ffc0000 [ 1808.625398][T23155] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.5074: Unrecognised inode hash code 20 [ 1808.641736][T23155] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.5074: Corrupt directory, running e2fsck is recommended [ 1808.712432][T23155] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.5074: Invalid inode bitmap blk 15739495880381224637 in block_group 0 [ 1809.995537][T23188] loop3: detected capacity change from 0 to 8 [ 1810.876526][T23197] loop1: detected capacity change from 0 to 128 [ 1810.992612][T23197] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1811.067953][T23197] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1812.731964][T23216] netem: change failed [ 1812.741661][T15924] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1813.051675][T15924] usb 6-1: Using ep0 maxpacket: 32 [ 1813.171675][T15924] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1813.187156][T15924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.232607][T23230] loop3: detected capacity change from 0 to 512 [ 1813.240641][T15924] usb 6-1: config 0 has no interface number 0 [ 1813.261239][T15924] usb 6-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1813.291611][T15924] usb 6-1: config 0 interface 2 has no altsetting 0 [ 1813.353256][T23230] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1813.411874][T23230] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1813.561737][T15924] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1813.901732][T15924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.909773][T15924] usb 6-1: Product: syz [ 1813.923076][T23230] EXT4-fs (loop3): 1 truncate cleaned up [ 1813.930429][T23230] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1814.548542][ T25] audit: type=1800 audit(1783425790.717:14): pid=23236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5104" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1814.570580][T15924] usb 6-1: Manufacturer: syz [ 1814.575568][T15924] usb 6-1: SerialNumber: syz [ 1814.585290][T15924] usb 6-1: config 0 descriptor?? [ 1814.601783][T15924] usb 6-1: can't set config #0, error -71 [ 1814.642605][T15924] usb 6-1: USB disconnect, device number 27 [ 1816.306979][T23269] loop1: detected capacity change from 0 to 512 [ 1816.427906][T23269] EXT4-fs (loop1): Ignoring removed oldalloc option [ 1816.517486][T23269] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 1816.572362][T23269] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1816.644342][T23269] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1816.693048][T23274] loop3: detected capacity change from 0 to 512 [ 1816.758976][T23282] Cannot find add_set index 0 as target [ 1816.822341][T23269] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1816.862976][T23269] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.5113: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1817.998565][T23269] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.5113: couldn't read orphan inode 13 (err -117) [ 1818.082201][T23269] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,nobarrier,debug,oldalloc,journal_ioprio=0x0000000000000006,grpid,,errors=continue. Quota mode: writeback. [ 1818.167799][T23269] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1818.210553][T23269] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 1818.263590][T23269] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1819.021837][T23291] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1819.067666][T23291] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 1819.102842][T23291] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 1819.582706][T23306] xt_hashlimit: max too large, truncated to 1048576 [ 1819.589621][T23306] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 1820.186038][T23309] loop4: detected capacity change from 0 to 512 [ 1820.321870][T23309] EXT4-fs (loop4): Ignoring removed nobh option [ 1820.328212][T23309] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1820.421406][T23309] EXT4-fs (loop4): 1 truncate cleaned up [ 1820.467596][T23309] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 1821.728605][T23350] loop5: detected capacity change from 0 to 1024 [ 1821.788554][T23355] loop4: detected capacity change from 0 to 1024 [ 1821.863303][ T25] audit: type=1800 audit(1783425798.077:15): pid=23350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5131" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 1821.901650][T11702] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1823.533482][T23372] binder: 23366:23372 ioctl c0306201 0 returned -14 [ 1824.264645][T23378] loop5: detected capacity change from 0 to 512 [ 1824.313101][T23377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5152'. [ 1824.336700][T11702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1824.347934][T23377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5152'. [ 1824.379064][T11702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1824.411955][T11702] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1824.434121][T23378] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 1824.611065][T23381] EXT4-fs warning (device loop5): verify_group_input:147: Cannot add at group 3391 (only 1 groups) [ 1825.086956][T11702] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1825.111802][T11702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.142474][T11702] usb 4-1: config 0 descriptor?? [ 1826.521699][T11702] usbhid 4-1:0.0: can't add hid device: -71 [ 1826.527788][T11702] usbhid: probe of 4-1:0.0 failed with error -71 [ 1826.571400][T11702] usb 4-1: USB disconnect, device number 92 [ 1826.619494][T23397] loop5: detected capacity change from 0 to 512 [ 1826.702059][T23395] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5158'. [ 1827.088109][T23410] loop1: detected capacity change from 0 to 256 [ 1827.175543][T23413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5162'. [ 1827.222572][ T25] audit: type=1326 audit(1783425803.437:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23414 comm="syz.5.5165" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0aa661ae59 code=0x0 [ 1827.466992][T23427] loop1: detected capacity change from 0 to 128 [ 1827.529747][T23427] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,nodelalloc,,errors=continue. Quota mode: none. [ 1827.561788][T23427] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1827.721074][ T25] audit: type=1800 audit(1783425803.927:17): pid=23427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5167" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 1827.914450][T23442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5173'. [ 1828.534803][T23453] loop1: detected capacity change from 0 to 256 [ 1828.799826][T23455] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1828.838648][T23456] loop5: detected capacity change from 0 to 1024 [ 1828.866576][T23453] binfmt_misc: register: failed to install interpreter file ./file0 [ 1828.947470][T23462] loop4: detected capacity change from 0 to 512 [ 1828.972738][T23456] hfsplus: unable to parse mount options [ 1828.995613][T23462] EXT4-fs (loop4): Ignoring removed nobh option [ 1830.072530][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1830.073109][T12554] Bluetooth: hci3: command 0x0405 tx timeout [ 1830.157552][T23462] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1830.212415][T23462] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5181: invalid indirect mapped block 256 (level 1) [ 1830.308547][T23462] EXT4-fs (loop4): Remounting filesystem read-only [ 1830.342298][T23462] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5181: invalid indirect mapped block 2683928664 (level 1) [ 1830.358964][T23473] loop5: detected capacity change from 0 to 1024 [ 1830.427277][T23462] EXT4-fs (loop4): Remounting filesystem read-only [ 1830.452919][T23462] EXT4-fs (loop4): 1 truncate cleaned up [ 1830.466451][T23462] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,auto_da_alloc=0x000000000000000c,nobh,nodioread_nolock,discard,usrjquota=.noacl,errors=remount-ro,jqfmt=vfsv0,auto_da_alloc,,. Quota mode: writeback. [ 1830.530163][T23480] loop3: detected capacity change from 0 to 128 [ 1831.326110][T23493] loop3: detected capacity change from 0 to 512 [ 1831.475522][T23493] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5191: invalid indirect mapped block 4294967295 (level 1) [ 1831.631893][T23493] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5191: invalid indirect mapped block 4294967295 (level 1) [ 1831.680508][T23493] EXT4-fs (loop3): 2 truncates cleaned up [ 1831.756995][T23493] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 1832.868090][T23493] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.5191: bg 0: block 5: invalid block bitmap [ 1833.706601][T23527] loop3: detected capacity change from 0 to 1024 [ 1833.769901][T23530] loop5: detected capacity change from 0 to 512 [ 1833.860563][T23530] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1833.890960][T23530] EXT4-fs (loop5): group descriptors corrupted! [ 1834.164897][T23537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1834.182767][ T4195] Bluetooth: Wrong link type (-22) [ 1834.226043][T23544] loop5: detected capacity change from 0 to 128 [ 1836.121952][T23571] loop5: detected capacity change from 0 to 256 [ 1836.354758][T23577] loop3: detected capacity change from 0 to 256 [ 1836.383289][T23571] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1836.447634][T23577] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1836.509508][T23577] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1836.523250][T23577] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x3626540a, utbl_chksum : 0xe619d30d) [ 1836.614430][T15924] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1837.741777][T23588] No such timeout policy "syz1" [ 1838.191797][T15924] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1838.204586][T15924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.222504][T15924] usb 2-1: config 0 descriptor?? [ 1838.283052][T15924] cp210x 2-1:0.0: cp210x converter detected [ 1838.499952][T23576] loop1: detected capacity change from 0 to 512 [ 1838.686804][T23576] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1838.763102][T23576] EXT4-fs (loop1): Mount option "journal_path=./file0" incompatible with ext2 [ 1839.301740][T15924] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1839.374049][T23610] loop5: detected capacity change from 0 to 512 [ 1839.410953][T15924] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1839.518064][T23610] EXT4-fs (loop5): inline encryption not supported [ 1839.551655][T23610] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1839.589966][T15924] usb 2-1: USB disconnect, device number 96 [ 1839.653354][T15924] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1839.678063][T23610] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.5228: bad orphan inode 15 [ 1839.679716][T23615] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1839.699725][T23610] ext4_test_bit(bit=14, block=5) = 0 [ 1839.705683][T23610] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,inlinecrypt,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 1839.765202][T23622] loop4: detected capacity change from 0 to 256 [ 1839.770252][T15924] cp210x 2-1:0.0: device disconnected [ 1839.783980][T10736] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1839.816258][T23622] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 1839.842976][T10736] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1839.879934][T10736] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1840.350448][T10736] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1841.431235][T10736] rtc rtc0: __rtc_set_alarm: err=-22 [ 1841.730921][T23647] loop5: detected capacity change from 0 to 512 [ 1841.936676][T23660] loop4: detected capacity change from 0 to 128 [ 1842.009327][T23661] loop3: detected capacity change from 0 to 2048 [ 1842.030740][T23647] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 1842.212214][T23660] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1842.233420][T23660] ext4 filesystem being mounted at /423/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1842.804494][T23667] loop1: detected capacity change from 0 to 256 [ 1842.852078][T23667] exfat: Bad value for 'uid' [ 1844.922351][T23687] loop4: detected capacity change from 0 to 512 [ 1844.946743][T23687] EXT4-fs (loop4): Ignoring removed oldalloc option [ 1844.962144][T23688] loop5: detected capacity change from 0 to 256 [ 1845.111627][T23687] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1845.465059][T23691] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 1845.475003][T23691] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 23691, name: syz.3.5262 [ 1845.484135][T23691] 1 lock held by syz.3.5262/23691: [ 1845.489225][T23691] #0: ffffffff8c344838 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 1845.499015][T23691] irq event stamp: 4938 [ 1845.503156][T23691] hardirqs last enabled at (4937): [] asm_sysvec_call_function_single+0x16/0x20 [ 1845.513923][T23691] hardirqs last disabled at (4938): [] _raw_spin_lock_irq+0x86/0xf0 [ 1845.523561][T23691] softirqs last enabled at (4842): [] ip_setsockopt+0x58a/0x31e0 [ 1845.532927][T23691] softirqs last disabled at (4840): [] release_sock+0x2b/0x1b0 [ 1845.542098][T23691] Preemption disabled at: [ 1845.542105][T23691] [<0000000000000000>] 0x0 [ 1845.550791][T23691] CPU: 0 PID: 23691 Comm: syz.3.5262 Not tainted syzkaller #0 [ 1845.558221][T23691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1845.568263][T23691] Call Trace: [ 1845.571573][T23691] [ 1845.574525][T23691] dump_stack_lvl+0x188/0x250 [ 1845.579200][T23691] ? ip_setsockopt+0x58a/0x31e0 [ 1845.584066][T23691] ? show_regs_print_info+0x20/0x20 [ 1845.589243][T23691] ? load_image+0x410/0x410 [ 1845.593747][T23691] ___might_sleep+0x493/0x610 [ 1845.598463][T23691] ? __might_sleep+0xf0/0xf0 [ 1845.603035][T23691] down_read+0x20/0x2e0 [ 1845.607172][T23691] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 1845.612480][T23691] ? kernfs_find_ns+0x510/0x510 [ 1845.617307][T23691] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 1845.623435][T23691] cgroup_get_from_path+0x5f/0x2f0 [ 1845.628521][T23691] cgroup_mt_check_v1+0x1d2/0x2d0 [ 1845.633592][T23691] xt_check_match+0x499/0xc50 [ 1845.638335][T23691] ? xt_check_proc_name+0x240/0x240 [ 1845.643512][T23691] ? pcpu_alloc+0x11e6/0x16d0 [ 1845.648245][T23691] ? xt_find_match+0x1e1/0x210 [ 1845.652986][T23691] translate_table+0x1481/0x1f60 [ 1845.657974][T23691] ? ipt_register_table+0x7b0/0x7b0 [ 1845.663148][T23691] ? __might_fault+0xb7/0x110 [ 1845.667842][T23691] ? __lock_acquire+0x7b50/0x7b50 [ 1845.672907][T23691] ? _copy_from_user+0x111/0x170 [ 1845.677871][T23691] do_ipt_set_ctl+0x963/0xd70 [ 1845.682527][T23691] ? nf_setsockopt+0x218/0x280 [ 1845.687304][T23691] ? ipt_unregister_table_exit+0x220/0x220 [ 1845.693090][T23691] ? __lock_acquire+0x7b50/0x7b50 [ 1845.698088][T23691] ? __mutex_lock_common+0x435/0x2400 [ 1845.703441][T23691] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1845.709055][T23691] ? mutex_unlock+0x10/0x10 [ 1845.713538][T23691] ? lockdep_hardirqs_on+0x94/0x140 [ 1845.718790][T23691] nf_setsockopt+0x25f/0x280 [ 1845.723366][T23691] ip_setsockopt+0x29c3/0x31e0 [ 1845.728140][T23691] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 1845.733493][T23691] ? __might_sleep+0xf0/0xf0 [ 1845.738060][T23691] ? rcu_lock_release+0x9/0x20 [ 1845.742837][T23691] tcp_setsockopt+0x229/0x1e60 [ 1845.747585][T23691] ? aa_sk_perm+0x7dc/0x910 [ 1845.752115][T23691] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 1845.757465][T23691] ? aa_af_perm+0x340/0x340 [ 1845.761950][T23691] ? __fget_files+0x402/0x470 [ 1845.766605][T23691] ? aa_sock_opt_perm+0x74/0x100 [ 1845.771520][T23691] ? sock_common_setsockopt+0x32/0xb0 [ 1845.776867][T23691] ? sock_common_recvmsg+0x1c0/0x1c0 [ 1845.782128][T23691] __sys_setsockopt+0x2bf/0x3d0 [ 1845.786961][T23691] __x64_sys_setsockopt+0xb1/0xc0 [ 1845.791965][T23691] do_syscall_64+0x4c/0xa0 [ 1845.796358][T23691] ? clear_bhb_loop+0x30/0x80 [ 1845.801066][T23691] ? clear_bhb_loop+0x30/0x80 [ 1845.805715][T23691] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1845.811594][T23691] RIP: 0033:0x7fa84b6b1e59 [ 1845.816027][T23691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1845.835654][T23691] RSP: 002b:00007fa8498e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1845.844046][T23691] RAX: ffffffffffffffda RBX: 00007fa84b93a090 RCX: 00007fa84b6b1e59 [ 1845.851991][T23691] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 1845.859936][T23691] RBP: 00007fa84b747e6f R08: 00000000000022f8 R09: 0000000000000000 [ 1845.867881][T23691] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 1845.875828][T23691] R13: 00007fa84b93a128 R14: 00007fa84b93a090 R15: 00007ffc7f409e48 [ 1845.883785][T23691] [ 1845.886782][T23691] [ 1845.889078][T23691] ============================= [ 1845.893896][T23691] [ BUG: Invalid wait context ] [ 1845.898710][T23691] syzkaller #0 Tainted: G W [ 1845.904482][T23691] ----------------------------- [ 1845.909298][T23691] syz.3.5262/23691 is trying to lock: [ 1845.914636][T23691] ffffffff8c44fc30 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2c0 [ 1845.924085][T23691] other info that might help us debug this: [ 1845.929944][T23691] context-{4:4} [ 1845.933374][T23691] 1 lock held by syz.3.5262/23691: [ 1845.938453][T23691] #0: ffffffff8c344838 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 1845.948158][T23691] stack backtrace: [ 1845.951847][T23691] CPU: 0 PID: 23691 Comm: syz.3.5262 Tainted: G W syzkaller #0 [ 1845.960663][T23691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1845.970692][T23691] Call Trace: [ 1845.973951][T23691] [ 1845.976861][T23691] dump_stack_lvl+0x188/0x250 [ 1845.981519][T23691] ? show_regs_print_info+0x20/0x20 [ 1845.986691][T23691] ? load_image+0x410/0x410 [ 1845.991167][T23691] ? _printk+0xda/0x130 [ 1845.995298][T23691] __lock_acquire+0x1bb7/0x7b50 [ 1846.000129][T23691] ? verify_lock_unused+0x140/0x140 [ 1846.005301][T23691] ? __printk_cpu_unlock+0x5f/0x70 [ 1846.010405][T23691] ? dump_stack_lvl+0x1fd/0x250 [ 1846.015225][T23691] ? ip_setsockopt+0x58a/0x31e0 [ 1846.020049][T23691] ? show_regs_print_info+0x20/0x20 [ 1846.025221][T23691] ? load_image+0x410/0x410 [ 1846.029700][T23691] lock_acquire+0x19e/0x400 [ 1846.034178][T23691] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 1846.039611][T23691] ? __might_sleep+0xf0/0xf0 [ 1846.044175][T23691] ? read_lock_is_recursive+0x10/0x10 [ 1846.049522][T23691] down_read+0x44/0x2e0 [ 1846.053654][T23691] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 1846.059086][T23691] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 1846.064343][T23691] ? kernfs_find_ns+0x510/0x510 [ 1846.069166][T23691] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 1846.075293][T23691] cgroup_get_from_path+0x5f/0x2f0 [ 1846.080379][T23691] cgroup_mt_check_v1+0x1d2/0x2d0 [ 1846.085378][T23691] xt_check_match+0x499/0xc50 [ 1846.090028][T23691] ? xt_check_proc_name+0x240/0x240 [ 1846.095199][T23691] ? pcpu_alloc+0x11e6/0x16d0 [ 1846.099850][T23691] ? xt_find_match+0x1e1/0x210 [ 1846.104586][T23691] translate_table+0x1481/0x1f60 [ 1846.109503][T23691] ? ipt_register_table+0x7b0/0x7b0 [ 1846.114674][T23691] ? __might_fault+0xb7/0x110 [ 1846.119321][T23691] ? __lock_acquire+0x7b50/0x7b50 [ 1846.124326][T23691] ? _copy_from_user+0x111/0x170 [ 1846.129239][T23691] do_ipt_set_ctl+0x963/0xd70 [ 1846.133895][T23691] ? nf_setsockopt+0x218/0x280 [ 1846.138630][T23691] ? ipt_unregister_table_exit+0x220/0x220 [ 1846.144410][T23691] ? __lock_acquire+0x7b50/0x7b50 [ 1846.149413][T23691] ? __mutex_lock_common+0x435/0x2400 [ 1846.154765][T23691] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1846.160372][T23691] ? mutex_unlock+0x10/0x10 [ 1846.164844][T23691] ? lockdep_hardirqs_on+0x94/0x140 [ 1846.170018][T23691] nf_setsockopt+0x25f/0x280 [ 1846.174581][T23691] ip_setsockopt+0x29c3/0x31e0 [ 1846.179323][T23691] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 1846.184670][T23691] ? __might_sleep+0xf0/0xf0 [ 1846.189240][T23691] ? rcu_lock_release+0x9/0x20 [ 1846.193976][T23691] tcp_setsockopt+0x229/0x1e60 [ 1846.198715][T23691] ? aa_sk_perm+0x7dc/0x910 [ 1846.203192][T23691] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 1846.208533][T23691] ? aa_af_perm+0x340/0x340 [ 1846.213007][T23691] ? __fget_files+0x402/0x470 [ 1846.217656][T23691] ? aa_sock_opt_perm+0x74/0x100 [ 1846.222566][T23691] ? sock_common_setsockopt+0x32/0xb0 [ 1846.227909][T23691] ? sock_common_recvmsg+0x1c0/0x1c0 [ 1846.233165][T23691] __sys_setsockopt+0x2bf/0x3d0 [ 1846.237990][T23691] __x64_sys_setsockopt+0xb1/0xc0 [ 1846.242989][T23691] do_syscall_64+0x4c/0xa0 [ 1846.247378][T23691] ? clear_bhb_loop+0x30/0x80 [ 1846.252026][T23691] ? clear_bhb_loop+0x30/0x80 [ 1846.256675][T23691] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1846.262540][T23691] RIP: 0033:0x7fa84b6b1e59 [ 1846.266928][T23691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1846.286504][T23691] RSP: 002b:00007fa8498e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1846.294891][T23691] RAX: ffffffffffffffda RBX: 00007fa84b93a090 RCX: 00007fa84b6b1e59 [ 1846.302836][T23691] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 1846.310781][T23691] RBP: 00007fa84b747e6f R08: 00000000000022f8 R09: 0000000000000000 [ 1846.318723][T23691] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 1846.326665][T23691] R13: 00007fa84b93a128 R14: 00007fa84b93a090 R15: 00007ffc7f409e48 [ 1846.334614][T23691] [ 1846.340880][T23691] xt_cgroup: invalid path, errno=-2 [ 1846.387177][T23688] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1846.447555][T23687] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1846.465533][T23687] ext4 filesystem being mounted at /425/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1853.102746][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.109042][ T1423] ieee802154 phy1 wpan1: encryption failed: -22