last executing test programs: 24.578374845s ago: executing program 3 (id=631): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1}}]}}, 0x0) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet(0x2, 0x3, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYRES16=r5, @ANYBLOB], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) pipe2$watch_queue(0x0, 0x80) shutdown(r3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) syz_usb_connect$cdc_ncm(0x1, 0x8d, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0xc, 0x20, 0x10}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x56, 0x7, 0x70, 0xff, 0x8}, 0xfb, &(0x7f0000000640)={0x5, 0xf, 0xfb, 0x4, [@generic={0xcc, 0x10, 0x4, "a22d05c2512496713d57119809b11199e2f4e18e88c85f4c5eceb651f359818087c4b24f88a694b6e1ba732ebb736e040ad019637a32b8e9c9c466427a0a8b53d1dd86195c7a03516aff4d18229fba14f01a0283fa92ef89351888bee2f73dbf49e6036362fc079fe30ca61dbeb9b08e0398b8984c8061c5c873ce25859e66bd8e422ae433e7ff62ac5f5c3d062fd015b1fa6213a4f5e967b163310aeb77a9d2b593aa39ac18155c7c5ecac5517566f0770a0333a0f7989afe722294357cb31e2399798afef9224a83"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x59, 0x4, 0x0, 0xf566, 0x40}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x6, 0x15, 0x3, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a758bb8b62d396a92aa4a23bde31b14d"}]}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c09}}, {0xe, &(0x7f0000000380)=@string={0xe, 0x3, "8e2a05121bda972c8bcd794f"}}, {0x8e, &(0x7f00000003c0)=@string={0x8e, 0x3, "170c3e13018bf095c2bef9dd08c7b912a3aa0fb4f4b6e5f2b4516af1810faa72b6b7fb62fb133886f14eb70d51e1e0289785fb035f58fe6ff906e850d39b5feb6f9359faf05a01823ad93fe446b4946188ae2e978a6ec233570eea9e23eea880c76b9bf1d110fe52ed67528bfb2b8583516f7d2fd103d458f33a54d4b87238e58ab91004cf63de512a069cdb"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xfa454dbcbbf8458}}]}) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = timerfd_create(0x0, 0x800) timerfd_settime(r10, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r10, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000000c0)=""/188, 0xbc}], 0x2) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) 14.087637236s ago: executing program 3 (id=659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 12.329421706s ago: executing program 3 (id=665): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000080)={'\x00', 0x9, 0x1, 0x2}) syz_open_procfs(0x0, &(0x7f0000000440)='net/protocols\x00') r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt(r2, 0x7, 0xdf, 0x0, 0x0) write$nci(r1, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x74b, 0x0, &(0x7f0000000200), &(0x7f0000000240)) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x0, 0x0) prlimit64(r4, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 12.267178683s ago: executing program 2 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040)) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 12.155116908s ago: executing program 0 (id=667): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040)) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x8080) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r8, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, r1, 0x0, 0x0, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040) 11.023095434s ago: executing program 0 (id=668): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x50000048) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 10.472677084s ago: executing program 3 (id=669): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1}}]}}, 0x0) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet(0x2, 0x3, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYRES16=r5, @ANYBLOB], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) pipe2$watch_queue(0x0, 0x80) shutdown(r3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) syz_usb_connect$cdc_ncm(0x1, 0x8d, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0xc, 0x20, 0x10}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x56, 0x7, 0x70, 0xff, 0x8}, 0xfb, &(0x7f0000000640)={0x5, 0xf, 0xfb, 0x4, [@generic={0xcc, 0x10, 0x4, "a22d05c2512496713d57119809b11199e2f4e18e88c85f4c5eceb651f359818087c4b24f88a694b6e1ba732ebb736e040ad019637a32b8e9c9c466427a0a8b53d1dd86195c7a03516aff4d18229fba14f01a0283fa92ef89351888bee2f73dbf49e6036362fc079fe30ca61dbeb9b08e0398b8984c8061c5c873ce25859e66bd8e422ae433e7ff62ac5f5c3d062fd015b1fa6213a4f5e967b163310aeb77a9d2b593aa39ac18155c7c5ecac5517566f0770a0333a0f7989afe722294357cb31e2399798afef9224a83"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x59, 0x4, 0x0, 0xf566, 0x40}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x6, 0x15, 0x3, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a758bb8b62d396a92aa4a23bde31b14d"}]}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c09}}, {0xe, &(0x7f0000000380)=@string={0xe, 0x3, "8e2a05121bda972c8bcd794f"}}, {0x8e, &(0x7f00000003c0)=@string={0x8e, 0x3, "170c3e13018bf095c2bef9dd08c7b912a3aa0fb4f4b6e5f2b4516af1810faa72b6b7fb62fb133886f14eb70d51e1e0289785fb035f58fe6ff906e850d39b5feb6f9359faf05a01823ad93fe446b4946188ae2e978a6ec233570eea9e23eea880c76b9bf1d110fe52ed67528bfb2b8583516f7d2fd103d458f33a54d4b87238e58ab91004cf63de512a069cdb"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xfa454dbcbbf8458}}]}) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = timerfd_create(0x0, 0x800) timerfd_settime(r10, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r10, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000000c0)=""/188, 0xbc}], 0x2) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) 10.471347164s ago: executing program 0 (id=670): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x8080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r5, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) 9.338031499s ago: executing program 0 (id=672): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4040884) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) close_range(r1, 0xffffffffffffffff, 0x0) 8.471569452s ago: executing program 0 (id=674): rseq(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0x86) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) close(0x3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r4}, 0x38) sendmmsg(r3, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) dup3(r2, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(0x0, 0x8, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) socket$kcm(0x29, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 8.414213679s ago: executing program 4 (id=675): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, &(0x7f0000000180)=0xc) write$P9_RSTATu(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0], 0x18b) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$kcm(0x2b, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 6.98444657s ago: executing program 2 (id=678): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040)) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x8080) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r8, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, r1, 0x0, 0x0, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040) 6.112877742s ago: executing program 1 (id=679): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000080)={'\x00', 0x9, 0x1, 0x2}) syz_open_procfs(0x0, &(0x7f0000000440)='net/protocols\x00') r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt(r2, 0x7, 0xdf, 0x0, 0x0) write$nci(r1, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x74b, &(0x7f0000000140)={0x0, 0x8746, 0x1, 0x0, 0x149, 0x0, r3}, 0x0, &(0x7f0000000240)) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x0, 0x0) prlimit64(r4, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.771801638s ago: executing program 3 (id=680): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000040)={[{@dioread_nolock}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80087601, 0x0) 4.841995367s ago: executing program 2 (id=681): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.764213901s ago: executing program 4 (id=682): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x8080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r5, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) 4.612826907s ago: executing program 1 (id=683): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f7433", 0xc8}], 0x1}}], 0x1, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 3.65559903s ago: executing program 4 (id=684): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 3.539715436s ago: executing program 1 (id=685): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4040884) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) close_range(r1, 0xffffffffffffffff, 0x0) 3.142527769s ago: executing program 4 (id=686): writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a", 0x9}], 0x1) syz_open_dev$video4linux(0x0, 0x6, 0x40440) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001340)=[{0x0, 0x0, 0x0}], 0x7, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 3.070339524s ago: executing program 1 (id=687): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4040884) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) close_range(r1, 0xffffffffffffffff, 0x0) 2.945569587s ago: executing program 1 (id=688): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000c80)=[@nested_vmresume={0x130, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x0, 0x9}}, @nested_amd_invlpga={0x17d, 0x20, {0xa0000, 0x250f}}, @code={0xa, 0x77, {"66baf80cb850ec7e88ef66bafc0cb8d1d40a07ef0fc7761f450f01d1c4811c14b46e05000000c744240091000000c744240200000000c7442406000000000f011c2466baf80cb82476cb88ef66bafc0cedb8010000000f01c1c4a2e9be7206400f06470f20c6"}}, @nested_load_code={0x12e, 0x6f, {0x3, "400fc79afd7d889fb9170b0000b803000000ba000000000f3066baf80cb8a09c478cef66bafc0cedf2450f01b900c300000f30440fc728366566410f3a440cf936410f070f35b9ca020000b883080000ba000000000f30"}}, @nested_vmresume={0x130, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x4, 0x7ff}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xd5, 0x7, 0xb86, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x10000, 0x8933}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x6, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x7, 0x8, 0x1}}, @rdmsr={0x66, 0x18, {0x9b1}}, @cpuid={0x64, 0x18, {0x2, 0xff}}, @wr_drn={0x68, 0x20, {0x6, 0x5}}, @out_dx={0x6a, 0x28, {0xf7ca, 0x2, 0xfffffffffffffff9}}, @set_irq_handler={0xc8, 0x20, {0x80}}, @rdmsr={0x66, 0x18, {0x29f}}, @in_dx={0x69, 0x20, {0xa59a}}, @rdmsr={0x66, 0x18, {0x1a7}}, @uexit={0x0, 0x18, 0xf}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x0, 0x9, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x41000, 0xfd76}}, @cpuid={0x64, 0x18, {0x5, 0x6}}, @in_dx={0x69, 0x20, {0x19e2, 0x1}}, @nested_load_code={0x12e, 0x61, {0x2, "0f796606640f209e66ba4000b800400000ef66baf80cb8a3114589ef66bafc0cec66baa00066b87ea466ef66440f38cf7cbd10440f2170f20f08420f797d0b42a1f8ffffff00000000"}}, @code={0xa, 0x88, {"3355e2b805000000b9001000000f01c1c4220dba4ebbb934080000b828af2a1fba000000000f3066ba2000ec66baf80cb8f4e27583ef66bafc0cecf2400f7c1666ba410066b84de466efb971050000b888ba0000ba000000000f30c74424007e290000c74424020c7c0000c7442406000000000f011c24"}}, @uexit={0x0, 0x18, 0x100}, @nested_amd_stgi={0x17e, 0x10}], 0x4d7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.415807192s ago: executing program 0 (id=689): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x27, 0x4c, 0x3, 0x40, 0x5ab, 0x60, 0x1106, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd}}]}}, 0x0) syz_usb_connect$uac1(0x2, 0x7a, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x2c, 0x10, 0x7}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2.168122079s ago: executing program 1 (id=690): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1}}]}}, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$inet(0x2, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYBLOB], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) pipe2$watch_queue(0x0, 0x80) shutdown(r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) syz_usb_connect$cdc_ncm(0x1, 0x8d, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0xc, 0x20, 0x10}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x56, 0x7, 0x70, 0xff, 0x8}, 0xfb, &(0x7f0000000640)={0x5, 0xf, 0xfb, 0x4, [@generic={0xcc, 0x10, 0x4, "a22d05c2512496713d57119809b11199e2f4e18e88c85f4c5eceb651f359818087c4b24f88a694b6e1ba732ebb736e040ad019637a32b8e9c9c466427a0a8b53d1dd86195c7a03516aff4d18229fba14f01a0283fa92ef89351888bee2f73dbf49e6036362fc079fe30ca61dbeb9b08e0398b8984c8061c5c873ce25859e66bd8e422ae433e7ff62ac5f5c3d062fd015b1fa6213a4f5e967b163310aeb77a9d2b593aa39ac18155c7c5ecac5517566f0770a0333a0f7989afe722294357cb31e2399798afef9224a83"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x59, 0x4, 0x0, 0xf566, 0x40}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x6, 0x15, 0x3, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a758bb8b62d396a92aa4a23bde31b14d"}]}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c09}}, {0xe, &(0x7f0000000380)=@string={0xe, 0x3, "8e2a05121bda972c8bcd794f"}}, {0x8e, &(0x7f00000003c0)=@string={0x8e, 0x3, "170c3e13018bf095c2bef9dd08c7b912a3aa0fb4f4b6e5f2b4516af1810faa72b6b7fb62fb133886f14eb70d51e1e0289785fb035f58fe6ff906e850d39b5feb6f9359faf05a01823ad93fe446b4946188ae2e978a6ec233570eea9e23eea880c76b9bf1d110fe52ed67528bfb2b8583516f7d2fd103d458f33a54d4b87238e58ab91004cf63de512a069cdb"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xfa454dbcbbf8458}}]}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = timerfd_create(0x0, 0x800) timerfd_settime(r8, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r8, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000000c0)=""/188, 0xbc}], 0x2) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) 2.167577599s ago: executing program 2 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f0000000180), 0x9, 0x50f6, &(0x7f0000000340)="$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") r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) rename(&(0x7f0000000080)='./file0/file0\x00', 0x0) 2.094303653s ago: executing program 4 (id=692): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) fcntl$setflags(r0, 0x2, 0x1) openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x8040) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @local, 0x3}], 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) 1.835735497s ago: executing program 3 (id=693): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x48201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) write$P9_RSTATu(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0], 0x18b) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$kcm(0x2b, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 0s ago: executing program 2 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x8080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r5, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) kernel console output (not intermixed with test programs): ] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.920553][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.929794][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.938520][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.947883][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.953628][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.964051][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.981575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.989459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.998660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.007556][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 61.014250][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 61.015589][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.025720][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 61.034516][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.044714][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.053657][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.073007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.081088][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 61.087654][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 61.091873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.147730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.158346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.168372][ T4185] device veth0_vlan entered promiscuous mode [ 61.260403][ T4185] device veth1_vlan entered promiscuous mode [ 61.291430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.306410][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.321247][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.330388][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.397058][ T4185] device veth0_macvtap entered promiscuous mode [ 61.422593][ T4185] device veth1_macvtap entered promiscuous mode [ 61.483588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.500850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.521806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.544674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.567994][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.582323][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.592418][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.603132][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.613524][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.624480][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.640275][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.656353][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.673539][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.857774][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.968989][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.226464][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.237447][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.246335][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.257244][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.260890][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.265335][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.286212][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.296779][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.307817][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.317928][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.328615][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.338891][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.351118][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.363313][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.384012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.392905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.401865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.421536][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.431758][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.442095][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.452370][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.478056][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.486165][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.487399][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.504552][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.505290][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.515078][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.532750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.569240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.579474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.765649][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.073963][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 63.199733][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.213983][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 63.221399][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 63.234964][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 63.243115][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 63.257227][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.349572][ C0] sched: RT throttling activated [ 64.730244][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 64.736753][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 64.836618][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.862041][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.883513][ T4286] ceph: No mds server is up or the cluster is laggy [ 64.937890][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.060195][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 65.129268][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 65.610071][ T4261] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.973543][ T4261] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.031389][ T4261] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 66.150054][ T13] libceph: connect (1)[c::]:6789 error -101 [ 66.164672][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 66.301627][ T4261] usb 3-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=24.74 [ 66.378635][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.419763][ T4261] usb 3-1: Product: syz [ 66.444840][ T4261] usb 3-1: Manufacturer: syz [ 66.482303][ T4261] usb 3-1: SerialNumber: syz [ 66.509297][ T4261] usb 3-1: config 0 descriptor?? [ 66.729696][ T4261] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 66.750344][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 66.759374][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #308!!! [ 66.789599][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 66.798608][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 66.807826][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 66.816828][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 66.825848][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 66.834839][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 66.844108][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 66.853449][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.369822][ T4229] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 67.482731][ T4231] usb 3-1: USB disconnect, device number 2 [ 67.590502][ T4261] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.601789][ T4261] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 67.611898][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.636814][ T4261] usb 1-1: config 0 descriptor?? [ 67.708747][ T4261] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 67.865641][ T4229] usb 2-1: not running at top speed; connect to a high speed hub [ 68.318019][ T4261] usb 1-1: USB disconnect, device number 2 [ 68.330498][ T4229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.419734][ T4312] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.422980][ T4343] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.549887][ T4229] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.40 [ 68.559610][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.567912][ T4229] usb 2-1: Product: syz [ 68.577639][ T4229] usb 2-1: Manufacturer: syz [ 68.582958][ T4229] usb 2-1: SerialNumber: syz [ 68.699802][ T4312] usb 5-1: Using ep0 maxpacket: 32 [ 68.739818][ T4231] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.844222][ T4312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.855079][ T4312] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 68.865012][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.884005][ T4312] usb 5-1: config 0 descriptor?? [ 68.892640][ T4229] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 68.914916][ T4229] usb 2-1: USB disconnect, device number 2 [ 68.924732][ T4312] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 68.989872][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 69.110181][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.136564][ T4231] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 69.146307][ T4231] usb 3-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 69.161868][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.188170][ T4231] usb 3-1: config 0 descriptor?? [ 69.691894][ T4229] usb 3-1: USB disconnect, device number 3 [ 70.516463][ T4368] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.538176][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 70.545114][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 70.626629][ T4261] usb 5-1: USB disconnect, device number 2 [ 70.767030][ T4361] ceph: No mds server is up or the cluster is laggy [ 70.812760][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 70.822230][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 71.371198][ T4380] netlink: 136 bytes leftover after parsing attributes in process `syz.3.28'. [ 71.403635][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.412747][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.587617][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 71.790291][ T4312] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.039655][ T4312] usb 5-1: Using ep0 maxpacket: 16 [ 72.199900][ T4312] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.730454][ T4312] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 73.135670][ T4312] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 73.155414][ T4405] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.410235][ T4312] usb 5-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=6c.72 [ 73.421904][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.432645][ T4312] usb 5-1: Product: syz [ 73.437188][ T4312] usb 5-1: Manufacturer: 쯓⮯猇蓧à¸æ‚£î³Šï¼Ÿæ”„砙꛸ì™âŸ¡à²æ˜—ã‹©âªëƒ…é•æ±¡ï·“䪞ꔜಿ慈äŸå¯™è¾’ä‘â±… [ 73.452808][ T4312] usb 5-1: SerialNumber: syz [ 73.489962][ T4230] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.519644][ T4235] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.569472][ T4407] loop2: detected capacity change from 0 to 32768 [ 73.632695][ T4407] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.36 (4407) [ 73.670064][ T4407] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 73.681564][ T4407] BTRFS info (device loop2): using free space tree [ 73.690043][ T4407] BTRFS info (device loop2): has skinny extents [ 73.749711][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 73.755664][ T4312] usb 5-1: USB disconnect, device number 3 [ 73.790686][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 73.810816][ T4407] BTRFS info (device loop2): enabling ssd optimizations [ 73.890030][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.906680][ T4230] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 73.916400][ T4235] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.935190][ T4235] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 73.955036][ T4230] usb 4-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 73.965577][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.993368][ T4230] usb 4-1: config 0 descriptor?? [ 74.139829][ T4235] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 74.151517][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.165108][ T4235] usb 2-1: Product: syz [ 74.170547][ T4235] usb 2-1: Manufacturer: syz [ 74.175175][ T4235] usb 2-1: SerialNumber: syz [ 74.198989][ T4235] usb 2-1: config 0 descriptor?? [ 74.289379][ T4235] usb 4-1: USB disconnect, device number 2 [ 74.940931][ T4230] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.269756][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 75.426064][ T4435] BTRFS info (device loop2): balance: start -d -m [ 75.450671][ T4435] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 75.473693][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.495526][ T4230] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 75.504710][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.508192][ T4435] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 75.520944][ T4230] usb 1-1: config 0 descriptor?? [ 75.562572][ T4230] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 75.604782][ T4435] BTRFS info (device loop2): found 11 extents, stage: move data extents [ 75.641231][ T4435] BTRFS info (device loop2): found 1 extents, stage: update data pointers [ 75.666691][ T4435] BTRFS info (device loop2): balance: ended with status: 0 [ 75.679964][ T4235] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.955018][ T2346] libceph: connect (1)[c::]:6789 error -101 [ 75.965048][ T2346] libceph: mon0 (1)[c::]:6789 connect error [ 75.970283][ T4235] usb 4-1: Using ep0 maxpacket: 8 [ 76.059006][ T4446] ceph: No mds server is up or the cluster is laggy [ 76.111800][ T4235] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 76.120671][ T4235] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.134947][ T4235] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.149526][ T4235] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.161255][ T4235] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.176898][ T4235] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.186880][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.424133][ T4231] usb 2-1: USB disconnect, device number 3 [ 76.640361][ T4235] usb 4-1: usb_control_msg returned -32 [ 76.646135][ T4235] usbtmc 4-1:16.0: can't read capabilities [ 76.927639][ T2346] usb 4-1: USB disconnect, device number 3 [ 77.171309][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 77.192590][ T4466] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.429685][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 77.449701][ T4466] usb 5-1: Using ep0 maxpacket: 8 [ 77.620692][ T4231] usb 1-1: USB disconnect, device number 3 [ 77.659878][ T4466] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 77.691849][ T4466] usb 5-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 77.720772][ T23] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 77.756472][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.795303][ T23] usb 2-1: Product: syz [ 77.842296][ T23] usb 2-1: Manufacturer: syz [ 77.866045][ T23] usb 2-1: SerialNumber: syz [ 77.897175][ T23] usb 2-1: config 0 descriptor?? [ 77.958928][ T23] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 77.965605][ T4466] usb 5-1: string descriptor 0 read error: -22 [ 77.975212][ T4466] usb 5-1: New USB device found, idVendor=2100, idProduct=9e55, bcdDevice=e1.a8 [ 77.986758][ T4466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.414718][ T4466] usb 5-1: USB disconnect, device number 4 [ 79.081781][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 80.280399][ T23] gspca_sonixj: reg_r err -71 [ 80.285704][ T4475] loop2: detected capacity change from 0 to 32768 [ 80.359721][ T23] sonixj: probe of 2-1:0.0 failed with error -71 [ 80.386336][ T4475] (syz.2.48,4475,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 80.427681][ T23] usb 2-1: USB disconnect, device number 4 [ 80.544156][ T4475] (syz.2.48,4475,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 81.020483][ T4475] JBD2: Ignoring recovery information on journal [ 81.270042][ T4505] loop5: detected capacity change from 0 to 7 [ 81.389751][ T4505] Dev loop5: unable to read RDB block 7 [ 81.395741][ T4505] loop5: unable to read partition table [ 81.414684][ T4505] loop5: partition table beyond EOD, truncated [ 81.433632][ T4505] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 81.448194][ T4475] JBD2: recovery failed [ 81.464817][ T4475] (syz.2.48,4475,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 81.485676][ T4475] (syz.2.48,4475,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 81.514036][ T4475] (syz.2.48,4475,0):ocfs2_check_volume:2493 ERROR: status = -5 [ 81.564682][ T4475] (syz.2.48,4475,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 81.623033][ T4475] (syz.2.48,4475,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 81.642204][ T1111] cfg80211: failed to load regulatory.db [ 81.669941][ T2346] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 83.308123][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 83.329835][ T2346] usb 2-1: Using ep0 maxpacket: 32 [ 83.450126][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.509515][ T2346] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 83.586829][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.727007][ T2346] usb 2-1: config 0 descriptor?? [ 83.898508][ T2346] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 84.690615][ T1111] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 85.027138][ T4562] loop5: detected capacity change from 0 to 7 [ 85.087689][ T4562] Dev loop5: unable to read RDB block 7 [ 85.101712][ T4562] loop5: unable to read partition table [ 85.107568][ T4562] loop5: partition table beyond EOD, truncated [ 85.114007][ T4562] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.634371][ T4570] trusted_key: encrypted_key: insufficient parameters specified [ 85.790013][ T1111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.888212][ T1111] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 85.968723][ T4261] usb 2-1: USB disconnect, device number 5 [ 86.041233][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.126912][ T1111] usb 1-1: config 0 descriptor?? [ 86.219576][ T1111] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 86.305501][ T4581] process 'syz.2.86' launched './file0' with NULL argv: empty string added [ 86.519634][ T4261] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.659710][ T2346] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.759793][ T4261] usb 2-1: Using ep0 maxpacket: 16 [ 86.879910][ T4261] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.890409][ T4261] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 86.909893][ T2346] usb 5-1: Using ep0 maxpacket: 8 [ 86.982969][ T26] audit: type=1800 audit(1772278786.097:2): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.86" name="/" dev="fuse" ino=4 res=0 errno=0 [ 87.036009][ T2346] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 87.050001][ T4261] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 87.924089][ T2346] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.934115][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.942312][ T2346] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.952907][ T4261] usb 2-1: Product: syz [ 87.957199][ T4261] usb 2-1: Manufacturer: syz [ 87.961922][ T4261] usb 2-1: SerialNumber: syz [ 87.966575][ T2346] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.980109][ T4261] usb 2-1: config 0 descriptor?? [ 87.985176][ T2346] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.998366][ T2346] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.007814][ T2346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.192695][ T23] usb 1-1: USB disconnect, device number 4 [ 88.309851][ T2346] usb 5-1: usb_control_msg returned -32 [ 88.316550][ T2346] usbtmc 5-1:16.0: can't read capabilities [ 88.340923][ T4600] udc-core: couldn't find an available UDC or it's busy [ 88.350766][ T4600] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.406546][ T4466] usb 2-1: USB disconnect, device number 6 [ 88.521928][ T2346] usb 5-1: USB disconnect, device number 6 [ 88.613975][ T4605] loop5: detected capacity change from 0 to 7 [ 88.632465][ T4174] Dev loop5: unable to read RDB block 7 [ 88.638279][ T4174] loop5: unable to read partition table [ 88.644535][ T4174] loop5: partition table beyond EOD, truncated [ 88.660502][ T4605] Dev loop5: unable to read RDB block 7 [ 88.666247][ T4605] loop5: unable to read partition table [ 88.682471][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.690100][ T4605] loop5: partition table beyond EOD, truncated [ 88.699227][ T4605] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 88.715493][ T4597] loop3: detected capacity change from 0 to 32768 [ 89.015075][ T4610] loop1: detected capacity change from 0 to 64 [ 89.069987][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.090063][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.110300][ T1111] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.119082][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.137810][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.148756][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.178514][ T23] usb 1-1: config 0 descriptor?? [ 89.559731][ T1111] usb 3-1: unable to get BOS descriptor or descriptor too short [ 90.299968][ T1111] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 90.314126][ T1111] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 90.480263][ T1111] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 90.491567][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.499903][ T1111] usb 3-1: Product: syz [ 90.509702][ T1111] usb 3-1: Manufacturer: syz [ 90.516004][ T1111] usb 3-1: SerialNumber: syz [ 90.600146][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 90.733423][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 90.848574][ T4608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.88'. [ 90.931140][ T1111] usb 3-1: USB disconnect, device number 4 [ 91.127702][ T4636] loop5: detected capacity change from 0 to 7 [ 91.143464][ T4174] Dev loop5: unable to read RDB block 7 [ 91.150629][ T4174] loop5: unable to read partition table [ 91.168241][ T4174] loop5: partition table beyond EOD, truncated [ 91.201910][ T4636] Dev loop5: unable to read RDB block 7 [ 91.207660][ T4636] loop5: unable to read partition table [ 91.233376][ T4636] loop5: partition table beyond EOD, truncated [ 91.254071][ T4636] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 91.279917][ T4261] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 91.533786][ T4231] usb 1-1: USB disconnect, device number 5 [ 91.662759][ T4298] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 91.699792][ T4261] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.712056][ T4261] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 91.722667][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.785013][ T4649] trusted_key: encrypted_key: insufficient parameters specified [ 91.818284][ T4261] usb 4-1: config 0 descriptor?? [ 91.930996][ T4298] usb 5-1: Using ep0 maxpacket: 16 [ 91.992541][ T4261] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 92.070049][ T4298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.200169][ T4298] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 92.495556][ T4298] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 92.527799][ T4644] loop2: detected capacity change from 0 to 32768 [ 92.548947][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.567154][ T4298] usb 5-1: Product: syz [ 92.586754][ T4298] usb 5-1: Manufacturer: syz [ 92.648173][ T4298] usb 5-1: SerialNumber: syz [ 92.698203][ T4298] usb 5-1: config 0 descriptor?? [ 92.747804][ T4659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.107'. [ 92.817815][ T4662] trusted_key: encrypted_key: insufficient parameters specified [ 94.452580][ T4666] loop5: detected capacity change from 0 to 7 [ 94.466202][ T4670] udc-core: couldn't find an available UDC or it's busy [ 94.488967][ T4670] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 94.498804][ T4666] Dev loop5: unable to read RDB block 7 [ 94.527613][ T4666] loop5: unable to read partition table [ 94.545984][ T1111] usb 4-1: USB disconnect, device number 4 [ 94.585110][ T4666] loop5: partition table beyond EOD, truncated [ 94.616350][ T4666] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 94.740071][ T4298] usb 5-1: USB disconnect, device number 7 [ 95.779665][ T4261] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 96.000884][ T4691] trusted_key: encrypted_key: insufficient parameters specified [ 96.336959][ T1111] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.340061][ T4261] usb 2-1: Using ep0 maxpacket: 32 [ 96.523526][ T4261] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.552600][ T4261] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 96.574496][ T4261] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.634697][ T23] Process accounting resumed [ 96.663953][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 96.674115][ T4261] usb 2-1: language id specifier not provided by device, defaulting to English [ 96.701904][ T4704] trusted_key: encrypted_key: insufficient parameters specified [ 96.821028][ T4261] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.093419][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.124250][ T4261] usb 2-1: Product: syz [ 97.128679][ T4261] usb 2-1: Manufacturer: ç³² [ 97.136856][ T4261] usb 2-1: SerialNumber: syz [ 97.414126][ T4703] team0 (unregistering): Port device team_slave_0 removed [ 97.448316][ T4703] team0 (unregistering): Port device team_slave_1 removed [ 97.461044][ T4261] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 97.487975][ T4261] cdc_ncm 2-1:1.0: bind() failure [ 97.519824][ T1111] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.522560][ T4261] usb 2-1: USB disconnect, device number 7 [ 97.679794][ T1111] usb 4-1: unable to read config index 0 descriptor/all [ 97.687915][ T4719] loop5: detected capacity change from 0 to 7 [ 97.690511][ T1111] usb 4-1: can't read configurations, error -71 [ 97.713248][ T4719] Dev loop5: unable to read RDB block 7 [ 97.734745][ T4719] loop5: unable to read partition table [ 97.869313][ T4719] loop5: partition table beyond EOD, truncated [ 98.060853][ T4719] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 100.814994][ T4745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 101.009663][ T1111] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.279864][ T1111] usb 4-1: Using ep0 maxpacket: 8 [ 101.359793][ T4230] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.403173][ T1111] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 101.439723][ T1111] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 101.468345][ T1111] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.537897][ T1111] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.616776][ T1111] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.704458][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.779914][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.910566][ T4230] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 102.050290][ T4230] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 102.274924][ T4776] loop2: detected capacity change from 0 to 1024 [ 102.281924][ T4230] usb 1-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 102.310226][ T1111] usb 4-1: usb_control_msg returned -71 [ 102.316164][ T1111] usbtmc 4-1:16.0: can't read capabilities [ 102.341194][ T4779] trusted_key: encrypted_key: insufficient parameters specified [ 102.369710][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.410400][ T1111] usb 4-1: USB disconnect, device number 7 [ 102.441390][ T4230] usb 1-1: Product: syz [ 102.445764][ T4230] usb 1-1: Manufacturer: syz [ 102.507843][ T4230] usb 1-1: SerialNumber: syz [ 102.612551][ T4788] loop4: detected capacity change from 0 to 512 [ 102.794894][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 102.808168][ T4759] netlink: 48 bytes leftover after parsing attributes in process `syz.0.138'. [ 102.881368][ T4230] usb 1-1: USB disconnect, device number 6 [ 102.916120][ T4788] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.957501][ T4788] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.007461][ T4788] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 103.063922][ T4788] System zones: 1-12 [ 103.099780][ T4788] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 103.130099][ T4788] EXT4-fs (loop4): 1 truncate cleaned up [ 103.142640][ T4276] hfsplus: b-tree write err: -5, ino 4 [ 103.182309][ T4788] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 103.219880][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 104.529616][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 104.859874][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 105.442324][ T4823] loop5: detected capacity change from 0 to 7 [ 105.451164][ T2346] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.467421][ T4823] Dev loop5: unable to read RDB block 7 [ 105.475620][ T4823] loop5: unable to read partition table [ 105.484822][ T4823] loop5: partition table beyond EOD, truncated [ 105.500032][ T4823] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 105.540097][ T23] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 105.603058][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.625117][ T23] usb 4-1: Product: syz [ 105.631202][ T23] usb 4-1: Manufacturer: syz [ 105.645108][ T23] usb 4-1: SerialNumber: syz [ 105.710966][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 105.909787][ T4261] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 105.919858][ T2346] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 105.920602][ T23] usb 4-1: USB disconnect, device number 8 [ 105.959399][ T2346] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 105.969690][ T4230] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.280438][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 106.470370][ T23] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 106.480215][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.529177][ T4230] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 106.740049][ T4842] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.758800][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.780340][ T4230] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 107.019591][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.030056][ T4230] usb 3-1: Product: syz [ 107.034281][ T4230] usb 3-1: Manufacturer: syz [ 107.049584][ T4230] usb 3-1: SerialNumber: syz [ 107.632059][ T4261] usb 5-1: Using ep0 maxpacket: 32 [ 107.689969][ T2346] usb 2-1: string descriptor 0 read error: -71 [ 107.699088][ T2346] usb 2-1: New USB device found, idVendor=2100, idProduct=9e55, bcdDevice=e1.a8 [ 107.716392][ T2346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.750005][ T4261] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 107.863393][ T4230] usb 3-1: config 0 descriptor?? [ 107.929884][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.970898][ T2346] usb 2-1: can't set config #6, error -71 [ 107.974413][ T23] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.978589][ T2346] usb 2-1: USB disconnect, device number 8 [ 107.992503][ T4261] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 108.004182][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.013531][ T4261] usb 5-1: Product: syz [ 108.017726][ T4261] usb 5-1: Manufacturer: syz [ 108.022876][ T4261] usb 5-1: SerialNumber: syz [ 108.209801][ T23] usb 4-1: New USB device found, idVendor=0499, idProduct=1000, bcdDevice=e4.f5 [ 108.359680][ T4230] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 109.184511][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.204479][ T23] usb 4-1: Product: syz [ 109.208735][ T23] usb 4-1: Manufacturer: syz [ 109.214825][ T23] usb 4-1: SerialNumber: syz [ 109.225222][ T23] usb 4-1: config 0 descriptor?? [ 109.249979][ T23] usb 4-1: can't set config #0, error -71 [ 109.257432][ T23] usb 4-1: USB disconnect, device number 9 [ 109.315725][ T2346] usb 5-1: USB disconnect, device number 8 [ 109.416559][ T4862] loop5: detected capacity change from 0 to 7 [ 109.457577][ T4862] Dev loop5: unable to read RDB block 7 [ 109.464706][ T4862] loop5: unable to read partition table [ 109.500270][ T4862] loop5: partition table beyond EOD, truncated [ 109.517353][ T4862] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 109.579874][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.150009][ T4230] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 110.201860][ T4230] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 110.389850][ T4230] usb 1-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 110.759788][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.760517][ T4881] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.905274][ T4230] usb 1-1: Product: syz [ 110.909898][ T4230] usb 1-1: Manufacturer: syz [ 110.914530][ T4230] usb 1-1: SerialNumber: syz [ 111.009683][ T1108] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 111.059949][ T4883] hub 9-0:1.0: USB hub found [ 111.067523][ T4883] hub 9-0:1.0: 1 port detected [ 111.570105][ T4230] usb 1-1: can't set config #4, error -71 [ 111.885597][ T4230] usb 1-1: USB disconnect, device number 7 [ 112.184487][ T4891] trusted_key: encrypted_key: insufficient parameters specified [ 112.271164][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 113.479821][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 113.740031][ T1108] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 113.749705][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 113.768259][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.798373][ T1108] usb 5-1: Product: syz [ 113.808676][ T1108] usb 5-1: Manufacturer: syz [ 113.879761][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.110889][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.322195][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.851420][ T1108] usb 5-1: SerialNumber: syz [ 114.858189][ T1108] usb 5-1: config 0 descriptor?? [ 114.882494][ T1108] usb 5-1: can't set config #0, error -71 [ 114.895011][ T4899] loop3: detected capacity change from 0 to 4096 [ 114.901663][ T1108] usb 5-1: USB disconnect, device number 9 [ 114.938252][ T23] usb 2-1: config 0 descriptor?? [ 115.070944][ T4261] usb 3-1: USB disconnect, device number 5 [ 115.118894][ T4910] loop5: detected capacity change from 0 to 7 [ 115.126891][ T23] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 115.140021][ T4910] Dev loop5: unable to read RDB block 7 [ 115.145633][ T4910] loop5: unable to read partition table [ 115.732614][ T23] usb 2-1: USB disconnect, device number 9 [ 116.087392][ T4910] loop5: partition table beyond EOD, truncated [ 116.100249][ T4910] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 116.431802][ T4927] overlayfs: failed to resolve './bus': -2 [ 121.493266][ T4955] loop4: detected capacity change from 0 to 2048 [ 121.520411][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 121.696776][ T4962] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.789791][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 121.961704][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.988957][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.229890][ T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 122.355334][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.364092][ T23] usb 3-1: Product: syz [ 122.380719][ T23] usb 3-1: Manufacturer: syz [ 122.385555][ T23] usb 3-1: SerialNumber: syz [ 122.498136][ T23] usb 3-1: config 0 descriptor?? [ 123.079696][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 123.443852][ T4980] trusted_key: encrypted_key: insufficient parameters specified [ 124.207818][ T4983] loop5: detected capacity change from 0 to 7 [ 124.217296][ T4983] Dev loop5: unable to read RDB block 7 [ 124.223088][ T4983] loop5: unable to read partition table [ 124.228904][ T4983] loop5: partition table beyond EOD, truncated [ 124.235589][ T4983] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 124.409706][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.515645][ T23] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 124.536082][ T23] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 125.759713][ T23] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 125.779422][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.790203][ T23] usb 4-1: Product: syz [ 125.829678][ T23] usb 4-1: can't set config #4, error -71 [ 125.846746][ T23] usb 4-1: USB disconnect, device number 10 [ 126.061579][ T5018] loop5: detected capacity change from 0 to 7 [ 126.073198][ T4796] Dev loop5: unable to read RDB block 7 [ 126.078993][ T4796] loop5: unable to read partition table [ 126.093564][ T4796] loop5: partition table beyond EOD, truncated [ 126.112973][ T5018] Dev loop5: unable to read RDB block 7 [ 126.120342][ T5018] loop5: unable to read partition table [ 126.169991][ T5018] loop5: partition table beyond EOD, truncated [ 126.204602][ T5018] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 126.283524][ T5022] loop4: detected capacity change from 0 to 2048 [ 126.360862][ T4892] usb 3-1: USB disconnect, device number 6 [ 128.442481][ T5040] loop4: detected capacity change from 0 to 1024 [ 128.512282][ T5046] loop3: detected capacity change from 0 to 2048 [ 128.582279][ T5040] hfsplus: found bad thread record in catalog [ 128.627123][ T5040] hfsplus: found bad thread record in catalog [ 128.660726][ T5050] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.710089][ T4276] hfsplus: found bad thread record in catalog [ 128.720541][ T5049] loop2: detected capacity change from 0 to 2048 [ 128.759729][ T4276] hfsplus: found bad thread record in catalog [ 128.879337][ T5049] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.956645][ T5049] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.911438][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.025734][ T5068] loop5: detected capacity change from 0 to 7 [ 131.060469][ T4796] Dev loop5: unable to read RDB block 7 [ 131.070178][ T4796] loop5: unable to read partition table [ 131.152312][ T4796] loop5: partition table beyond EOD, truncated [ 131.170193][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 131.175654][ T5068] Dev loop5: unable to read RDB block 7 [ 131.181546][ T5068] loop5: unable to read partition table [ 131.205644][ T5068] loop5: partition table beyond EOD, truncated [ 131.233039][ T5068] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 131.299861][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.360680][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 131.549921][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 131.573446][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.417928][ T23] usb 5-1: Product: syz [ 132.422287][ T23] usb 5-1: Manufacturer: syz [ 132.426914][ T23] usb 5-1: SerialNumber: syz [ 132.442970][ T23] usb 5-1: config 0 descriptor?? [ 132.716798][ T5082] trusted_key: encrypted_key: insufficient parameters specified [ 132.880249][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.886765][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.646573][ T5104] loop5: detected capacity change from 0 to 7 [ 135.690158][ T5104] Dev loop5: unable to read RDB block 7 [ 135.724437][ T5104] loop5: unable to read partition table [ 135.758791][ T5104] loop5: partition table beyond EOD, truncated [ 135.808198][ T5104] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.696259][ T4892] usb 5-1: USB disconnect, device number 10 [ 137.930389][ T1108] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 139.149651][ T4313] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.199896][ T1108] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 139.208295][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.269483][ T1108] usb 3-1: config 0 has no interfaces? [ 139.278079][ T1108] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 139.327064][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.364556][ T1108] usb 3-1: config 0 descriptor?? [ 139.370254][ T5132] Zero length message leads to an empty skb [ 139.509826][ T4313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.539748][ T4313] usb 5-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 139.548945][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.670683][ T4313] usb 5-1: config 0 descriptor?? [ 139.712244][ T4313] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 139.791130][ T5140] loop5: detected capacity change from 0 to 7 [ 139.820640][ T4174] Dev loop5: unable to read RDB block 7 [ 139.828769][ T4174] loop5: unable to read partition table [ 139.874586][ T4174] loop5: partition table beyond EOD, truncated [ 139.899724][ T5140] Dev loop5: unable to read RDB block 7 [ 139.923794][ T4313] usb 5-1: USB disconnect, device number 11 [ 139.936349][ T5140] loop5: unable to read partition table [ 139.962454][ T5140] loop5: partition table beyond EOD, truncated [ 139.990904][ T5140] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 141.112512][ T5159] syz.0.260 uses obsolete (PF_INET,SOCK_PACKET) [ 141.242103][ T4230] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.402165][ T23] usb 3-1: USB disconnect, device number 7 [ 141.861015][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 142.080578][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.109892][ T4235] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 142.133588][ T4230] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 142.389963][ T4230] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 142.406192][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.416384][ T4230] usb 4-1: Product: syz [ 142.426459][ T4230] usb 4-1: Manufacturer: syz [ 142.433858][ T4230] usb 4-1: SerialNumber: syz [ 142.457469][ T4230] usb 4-1: config 0 descriptor?? [ 142.614943][ T4235] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 142.824178][ T4235] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 142.858783][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.917822][ T4235] usb 2-1: Product: syz [ 142.926793][ T4235] usb 2-1: Manufacturer: syz [ 142.937347][ T4235] usb 2-1: SerialNumber: syz [ 143.569600][ T4235] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 143.782604][ T5185] loop5: detected capacity change from 0 to 7 [ 143.802830][ T4796] Dev loop5: unable to read RDB block 7 [ 143.808531][ T4796] loop5: unable to read partition table [ 143.843858][ T4796] loop5: partition table beyond EOD, truncated [ 143.881622][ T5185] Dev loop5: unable to read RDB block 7 [ 143.892878][ T5185] loop5: unable to read partition table [ 143.907903][ T5185] loop5: partition table beyond EOD, truncated [ 143.939786][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.949652][ T5185] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 143.976068][ T4235] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 144.189992][ T4235] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 144.199090][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.268739][ T4235] usb 5-1: Product: syz [ 144.275757][ T4235] usb 5-1: Manufacturer: syz [ 144.289826][ T4235] usb 5-1: SerialNumber: syz [ 144.320561][ T4235] usb 5-1: config 0 descriptor?? [ 144.360124][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 144.471126][ T4465] usb 4-1: USB disconnect, device number 11 [ 145.481223][ T4465] usb 2-1: USB disconnect, device number 11 [ 146.668305][ T4465] usb 5-1: USB disconnect, device number 12 [ 146.793715][ T5218] vivid-002: disconnect [ 146.838532][ T5215] vivid-002: reconnect [ 147.013456][ T5222] loop5: detected capacity change from 0 to 7 [ 147.025205][ T4796] Dev loop5: unable to read RDB block 7 [ 147.045467][ T4796] loop5: unable to read partition table [ 147.065765][ T4796] loop5: partition table beyond EOD, truncated [ 147.953085][ T5222] Dev loop5: unable to read RDB block 7 [ 147.962681][ T5222] loop5: unable to read partition table [ 147.984788][ T5222] loop5: partition table beyond EOD, truncated [ 147.994881][ T5222] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 149.913173][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 152.053903][ T5263] vivid-000: disconnect [ 152.130726][ T5258] vivid-000: reconnect [ 152.149716][ T26] audit: type=1326 audit(1772278851.257:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5241 comm="syz.4.287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5270ef1799 code=0x0 [ 152.210651][ T5244] loop3: detected capacity change from 0 to 4096 [ 152.260796][ T5244] ======================================================= [ 152.260796][ T5244] WARNING: The mand mount option has been deprecated and [ 152.260796][ T5244] and is ignored by this kernel. Remove the mand [ 152.260796][ T5244] option from the mount to silence this warning. [ 152.260796][ T5244] ======================================================= [ 152.292696][ T1108] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 152.750009][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.815750][ T1108] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.106512][ T1108] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 153.125630][ T5244] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 153.130608][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.155936][ T1108] usb 3-1: Product: syz [ 153.167429][ T1108] usb 3-1: Manufacturer: syz [ 153.173015][ T1108] usb 3-1: SerialNumber: syz [ 153.201191][ T1108] usb 3-1: config 0 descriptor?? [ 153.228449][ T5244] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 153.258412][ T5271] loop5: detected capacity change from 0 to 7 [ 153.275036][ T5271] Dev loop5: unable to read RDB block 7 [ 153.285218][ T5271] loop5: unable to read partition table [ 153.303878][ T5271] loop5: partition table beyond EOD, truncated [ 153.324646][ T5271] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 153.360325][ T5274] loop4: detected capacity change from 0 to 2048 [ 153.409730][ T4262] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 153.470980][ T5274] NILFS (loop4): invalid segment: Magic number mismatch [ 153.595517][ T5274] NILFS (loop4): trying rollback from an earlier position [ 153.652111][ T5274] NILFS (loop4): recovery complete [ 153.699905][ T4262] usb 1-1: Using ep0 maxpacket: 16 [ 153.822458][ T5280] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.860222][ T4262] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.923420][ T4262] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.269422][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 154.281195][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 154.311605][ T5277] ceph: No mds server is up or the cluster is laggy [ 154.319962][ T4262] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 154.332575][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.367841][ T4262] usb 1-1: Product: syz [ 154.372497][ T4262] usb 1-1: Manufacturer: syz [ 154.377246][ T4262] usb 1-1: SerialNumber: syz [ 154.405645][ T4262] usb 1-1: config 0 descriptor?? [ 154.574247][ T5286] 9pnet: Insufficient options for proto=fd [ 156.709082][ T4235] usb 3-1: USB disconnect, device number 8 [ 156.799447][ T5307] vivid-004: disconnect [ 156.860623][ T5302] vivid-004: reconnect [ 157.310716][ T5314] trusted_key: encrypted_key: insufficient parameters specified [ 158.180973][ T5330] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 158.180973][ T5330] program syz.3.307 not setting count and/or reply_len properly [ 158.252391][ T5331] trusted_key: encrypted_key: insufficient parameters specified [ 159.004331][ T4235] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 159.450298][ T4235] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.470812][ T4235] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 159.480974][ T4235] usb 3-1: config 1 has no interface number 1 [ 159.489757][ T4235] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 159.503697][ T4235] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 159.709733][ T4235] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.339569][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.469565][ T4235] usb 3-1: Product: syz [ 160.473904][ T4235] usb 3-1: Manufacturer: syz [ 161.143585][ T4235] usb 3-1: SerialNumber: syz [ 161.639841][ T5322] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.039837][ T4235] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 162.059885][ T4235] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 162.070415][ T4467] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 162.256142][ T4235] usb 3-1: USB disconnect, device number 9 [ 162.286413][ T7] usb 1-1: USB disconnect, device number 8 [ 162.525890][ T4467] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.577623][ T4467] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 162.700170][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.810399][ T4467] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 162.906093][ T4467] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.003315][ T4467] usb 2-1: Product: syz [ 163.031679][ T4467] usb 2-1: Manufacturer: syz [ 163.126143][ T4467] usb 2-1: SerialNumber: syz [ 163.229178][ T4467] usb 2-1: config 0 descriptor?? [ 163.544187][ T5366] loop4: detected capacity change from 0 to 256 [ 163.644114][ T5371] trusted_key: encrypted_key: insufficient parameters specified [ 164.028641][ T5366] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 164.621479][ T1108] usb 2-1: USB disconnect, device number 12 [ 165.058175][ T5380] trusted_key: encrypted_key: insufficient parameters specified [ 165.542235][ T26] audit: type=1800 audit(1772278864.657:4): pid=5366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.317" name="file1" dev="loop4" ino=1048590 res=0 errno=0 [ 168.308901][ T26] audit: type=1326 audit(1772278867.417:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.3.326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7726b1b799 code=0x0 [ 169.306636][ T5401] [U]  [ 172.019563][ T5441] trusted_key: encrypted_key: insufficient parameters specified [ 172.521304][ T5446] device syzkaller0 entered promiscuous mode [ 172.779712][ T1108] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 172.869692][ T4313] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 172.925759][ T4298] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 173.138890][ T5444] udc-core: couldn't find an available UDC or it's busy [ 173.146177][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 173.165409][ T5444] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 173.290533][ T4313] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 173.301650][ T4298] usb 2-1: unable to get BOS descriptor or descriptor too short [ 173.339778][ T4298] usb 2-1: not running at top speed; connect to a high speed hub [ 173.360092][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 173.409605][ T4262] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 173.419801][ T1108] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 173.427417][ T1108] usb 5-1: can't read configurations, error -71 [ 173.459700][ T4298] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 173.470299][ T4298] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 173.480146][ T4313] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 173.489817][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.497844][ T4313] usb 1-1: Product: syz [ 173.502658][ T4313] usb 1-1: Manufacturer: syz [ 173.507458][ T4313] usb 1-1: SerialNumber: syz [ 173.533524][ T4313] usb 1-1: config 0 descriptor?? [ 173.679837][ T4298] usb 2-1: New USB device found, idVendor=798d, idProduct=9787, bcdDevice=fc.51 [ 173.689029][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.697564][ T4298] usb 2-1: Product: syz [ 173.702021][ T4892] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.709887][ T4298] usb 2-1: Manufacturer: syz [ 173.714661][ T4298] usb 2-1: SerialNumber: syz [ 173.779732][ T4262] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.808271][ T4262] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 174.009669][ T4262] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 174.014146][ T4298] usb 2-1: USB disconnect, device number 13 [ 174.018852][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.018882][ T4262] usb 3-1: Product: syz [ 174.018898][ T4262] usb 3-1: Manufacturer: syz [ 174.018912][ T4262] usb 3-1: SerialNumber: syz [ 174.038145][ T4262] usb 3-1: config 0 descriptor?? [ 174.099971][ T4892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.117654][ T4892] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 174.127673][ T4892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.158169][ T4892] usb 4-1: config 0 descriptor?? [ 174.202246][ T4892] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 174.329696][ T1108] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 174.684795][ T26] audit: type=1326 audit(1772278873.797:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.1.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd9faf5799 code=0x0 [ 174.739764][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 174.771065][ T4262] usb 3-1: USB disconnect, device number 10 [ 174.830094][ T1108] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 174.845209][ T1108] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 175.009976][ T1108] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 175.022554][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.030806][ T1108] usb 5-1: Product: syz [ 175.035057][ T1108] usb 5-1: Manufacturer: syz [ 175.045019][ T1108] usb 5-1: SerialNumber: syz [ 175.479798][ T1108] usb 5-1: USB disconnect, device number 14 [ 175.636065][ T4467] usb 1-1: USB disconnect, device number 9 [ 177.697406][ T4298] usb 4-1: USB disconnect, device number 12 [ 177.860801][ T5485] device syzkaller0 entered promiscuous mode [ 177.932026][ T5493] trusted_key: encrypted_key: insufficient parameters specified [ 178.909666][ T5504] trusted_key: encrypted_key: insufficient parameters specified [ 179.293566][ T5505] trusted_key: encrypted_key: insufficient parameters specified [ 179.522214][ T4298] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 179.939920][ T4235] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 179.949772][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 180.258747][ T4235] usb 1-1: Using ep0 maxpacket: 16 [ 180.310383][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 180.426047][ T4235] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.449845][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.504095][ T23] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.585765][ T5520] netlink: 136 bytes leftover after parsing attributes in process `syz.4.367'. [ 180.689944][ T4235] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 180.699299][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.717751][ T5520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 180.749935][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 180.759161][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.778628][ T4235] usb 1-1: Product: syz [ 180.795460][ T4235] usb 1-1: Manufacturer: syz [ 180.805037][ T23] usb 4-1: Product: syz [ 180.823807][ T4235] usb 1-1: SerialNumber: syz [ 180.829962][ T23] usb 4-1: Manufacturer: syz [ 180.850239][ T23] usb 4-1: SerialNumber: syz [ 180.921204][ T23] usb 4-1: config 0 descriptor?? [ 180.927334][ T4235] usb 1-1: config 0 descriptor?? [ 181.199724][ T4298] usb 2-1: device descriptor read/all, error -71 [ 181.246787][ T26] audit: type=1326 audit(1772278880.357:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.2.363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c259799 code=0x0 [ 181.389678][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 181.389773][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 181.429798][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 181.463564][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 181.485270][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 181.795152][ T5533] loop2: detected capacity change from 0 to 2048 [ 181.801834][ T1108] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 181.846368][ T5533] NILFS (loop2): invalid segment: Magic number mismatch [ 181.874139][ T5533] NILFS (loop2): trying rollback from an earlier position [ 181.919428][ T5533] NILFS (loop2): recovery complete [ 181.987831][ T5535] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.169742][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.229617][ T1108] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 182.276059][ T1108] usb 5-1: config 1 has no interface number 1 [ 182.306830][ T1108] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 182.346874][ T1108] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 182.530900][ T1108] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.553372][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.604596][ T1108] usb 5-1: Product: syz [ 182.617927][ T1108] usb 5-1: Manufacturer: syz [ 182.633983][ T1108] usb 5-1: SerialNumber: syz [ 182.680459][ T5529] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.725859][ T4467] usb 1-1: USB disconnect, device number 10 [ 183.729835][ T1108] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 183.751616][ T1108] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 183.783447][ T5540] loop5: detected capacity change from 0 to 7 [ 183.804726][ T4174] Dev loop5: unable to read RDB block 7 [ 183.810399][ T4174] loop5: unable to read partition table [ 183.816383][ T4174] loop5: partition table beyond EOD, truncated [ 183.828865][ T5540] Dev loop5: unable to read RDB block 7 [ 183.851877][ T5540] loop5: unable to read partition table [ 183.889420][ T5540] loop5: partition table beyond EOD, truncated [ 183.920015][ T1108] usb 5-1: USB disconnect, device number 15 [ 183.957643][ T5540] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.022560][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.058191][ T4190] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 186.037719][ T5569] device syzkaller0 entered promiscuous mode [ 186.109761][ T2346] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 186.117359][ T1108] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 186.503050][ T5562] udc-core: couldn't find an available UDC or it's busy [ 186.515919][ T5562] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 186.549883][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short [ 186.579902][ T4298] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 186.639785][ T1108] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 186.655728][ T1108] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 186.729800][ T2346] usb 5-1: unable to get BOS descriptor or descriptor too short [ 186.789725][ T2346] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 186.813817][ T2346] usb 5-1: can't read configurations, error -71 [ 186.829760][ T1108] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 186.849730][ T4298] usb 1-1: Using ep0 maxpacket: 16 [ 186.885325][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.894669][ T1108] usb 3-1: Product: syz [ 186.898875][ T1108] usb 3-1: Manufacturer: syz [ 186.909885][ T1108] usb 3-1: SerialNumber: syz [ 187.046142][ T26] audit: type=1326 audit(1772278886.157:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5577 comm="syz.1.382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd9faf5799 code=0x0 [ 187.139700][ T4298] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 187.167630][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.201706][ T1108] usb 3-1: USB disconnect, device number 11 [ 187.212456][ T4298] usb 1-1: Product: syz [ 187.219874][ T4298] usb 1-1: Manufacturer: syz [ 187.224602][ T4298] usb 1-1: SerialNumber: syz [ 187.251697][ T4298] usb 1-1: config 0 descriptor?? [ 187.276307][ T5581] netlink: 136 bytes leftover after parsing attributes in process `syz.4.383'. [ 187.434999][ T7] usb 4-1: USB disconnect, device number 13 [ 187.474220][ T5586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.383'. [ 187.723841][ T5594] loop5: detected capacity change from 0 to 7 [ 187.760056][ T5594] Dev loop5: unable to read RDB block 7 [ 187.789972][ T4298] dvb_usb_dtv5100: probe of 1-1:0.0 failed with error -71 [ 187.794563][ T5594] loop5: unable to read partition table [ 187.813636][ T5594] loop5: partition table beyond EOD, truncated [ 187.820169][ T4298] usb 1-1: USB disconnect, device number 11 [ 187.827816][ T5594] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 187.949704][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 189.709819][ T5610] device syzkaller0 entered promiscuous mode [ 189.919710][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.973100][ T7] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 190.013280][ T7] usb 4-1: config 1 has no interface number 1 [ 190.195247][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 190.209257][ T7] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 191.087687][ T5629] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.396'. [ 191.109739][ T2346] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 191.159703][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.168886][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.186671][ T4467] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 191.209725][ T7] usb 4-1: can't set config #1, error -71 [ 191.229311][ T7] usb 4-1: USB disconnect, device number 14 [ 191.426542][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 191.455974][ T4467] usb 3-1: Using ep0 maxpacket: 16 [ 191.482019][ T4235] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 191.522147][ T5646] udc-core: couldn't find an available UDC or it's busy [ 191.539433][ T5646] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.548806][ T5645] loop5: detected capacity change from 0 to 7 [ 191.563053][ T5645] Dev loop5: unable to read RDB block 7 [ 191.574157][ T5645] loop5: unable to read partition table [ 191.595945][ T5645] loop5: partition table beyond EOD, truncated [ 191.613226][ T4467] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.620024][ T5645] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 191.626310][ T4467] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 191.809701][ T2346] usb 5-1: unable to get BOS descriptor or descriptor too short [ 191.879709][ T2346] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 191.898087][ T2346] usb 5-1: can't read configurations, error -71 [ 192.031438][ T4467] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 192.041811][ T4467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.050003][ T4467] usb 3-1: Product: syz [ 192.054287][ T4467] usb 3-1: Manufacturer: syz [ 192.058933][ T4467] usb 3-1: SerialNumber: syz [ 192.066143][ T4467] usb 3-1: config 0 descriptor?? [ 192.129579][ T4235] usb 2-1: unable to get BOS descriptor or descriptor too short [ 192.182741][ T26] audit: type=1326 audit(1772278891.297:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.0.403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7041b8d799 code=0x0 [ 192.205671][ T4298] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 192.239799][ T4235] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 192.249981][ T4235] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 193.379953][ T4235] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 193.587985][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.715796][ T4235] usb 2-1: Product: syz [ 193.780620][ T4235] usb 2-1: Manufacturer: syz [ 193.789956][ T4298] usb 4-1: Using ep0 maxpacket: 16 [ 193.813334][ T4235] usb 2-1: SerialNumber: syz [ 193.905346][ T4262] usb 3-1: USB disconnect, device number 12 [ 194.070253][ T4298] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 194.114594][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.214064][ T4298] usb 4-1: Product: syz [ 194.268808][ T4298] usb 4-1: Manufacturer: syz [ 194.280054][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.288673][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.295902][ T4235] usb 2-1: USB disconnect, device number 16 [ 194.517915][ T4298] usb 4-1: SerialNumber: syz [ 194.650313][ T4298] usb 4-1: config 0 descriptor?? [ 194.861620][ T5677] device syzkaller0 entered promiscuous mode [ 195.089936][ T5683] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.412'. [ 195.149919][ T4298] dvb_usb_dtv5100: probe of 4-1:0.0 failed with error -71 [ 195.201567][ T4298] usb 4-1: USB disconnect, device number 15 [ 195.384702][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 196.649915][ T4235] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 196.870285][ T23] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 197.084106][ T5697] udc-core: couldn't find an available UDC or it's busy [ 197.202051][ T5697] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 197.339859][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.372184][ T23] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 197.416623][ T23] usb 5-1: config 1 has no interface number 1 [ 197.453922][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 197.537995][ T23] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 197.759877][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.769472][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.849891][ T4235] usb 2-1: unable to get BOS descriptor or descriptor too short [ 197.867844][ T23] usb 5-1: Product: syz [ 197.888084][ T23] usb 5-1: Manufacturer: syz [ 197.908383][ T23] usb 5-1: SerialNumber: syz [ 197.939730][ T4235] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 197.958636][ T4235] usb 2-1: can't read configurations, error -71 [ 197.980680][ T5703] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 198.145244][ T4464] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 198.181904][ T26] audit: type=1326 audit(1772278897.297:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5707 comm="syz.0.419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7041b8d799 code=0x0 [ 198.333396][ T23] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 198.349183][ T23] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 198.440691][ T4464] usb 4-1: Using ep0 maxpacket: 16 [ 198.483600][ T4298] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 198.486145][ T23] usb 5-1: USB disconnect, device number 20 [ 198.583453][ T5720] device syzkaller0 entered promiscuous mode [ 198.589737][ T4464] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.589765][ T4464] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.769941][ T4464] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 198.780126][ T4464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.825229][ T4464] usb 4-1: Product: syz [ 198.842249][ T4464] usb 4-1: Manufacturer: syz [ 198.856167][ T4464] usb 4-1: SerialNumber: syz [ 198.872274][ T4464] usb 4-1: config 0 descriptor?? [ 198.889829][ T4298] usb 3-1: unable to get BOS descriptor or descriptor too short [ 198.906421][ T5728] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.426'. [ 199.249699][ T4235] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 199.729811][ T4298] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 199.760029][ T4298] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 200.019785][ T4298] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 200.061620][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.091444][ T4298] usb 3-1: Product: syz [ 200.095757][ T4298] usb 3-1: Manufacturer: syz [ 200.155615][ T4298] usb 3-1: SerialNumber: syz [ 200.499892][ T4235] usb 2-1: Using ep0 maxpacket: 16 [ 200.831387][ T4235] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 200.863595][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.945735][ T4235] usb 2-1: Product: syz [ 200.952102][ T4235] usb 2-1: Manufacturer: syz [ 200.956742][ T4235] usb 2-1: SerialNumber: syz [ 201.045170][ T4298] usb 3-1: USB disconnect, device number 13 [ 201.813185][ T4235] usb 2-1: config 0 descriptor?? [ 201.924771][ T4235] usb 2-1: can't set config #0, error -71 [ 201.956198][ T4235] usb 2-1: USB disconnect, device number 19 [ 202.189882][ T23] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 202.208235][ T5766] device syzkaller0 entered promiscuous mode [ 202.591814][ T5754] udc-core: couldn't find an available UDC or it's busy [ 202.619387][ T5754] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 202.661352][ T4235] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 203.019845][ T4235] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.320507][ T26] audit: type=1326 audit(1772278902.437:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.1.433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd9faf5799 code=0x0 [ 203.352942][ T5780] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.440'. [ 203.369555][ T4235] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.411831][ T4235] usb 3-1: config 1 has no interface number 1 [ 203.418065][ T4235] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 203.475748][ T4235] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 203.560238][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.619860][ T23] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 203.636191][ T5788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 203.689707][ T4235] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.422276][ T23] usb 5-1: can't read configurations, error -71 [ 204.428693][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.438851][ T4235] usb 3-1: Product: syz [ 204.443702][ T4235] usb 3-1: Manufacturer: syz [ 204.448747][ T4235] usb 3-1: SerialNumber: syz [ 204.500033][ T5768] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 205.109883][ T23] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 205.120422][ T4235] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 205.140895][ T4235] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 205.379692][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 205.576754][ T4235] usb 3-1: USB disconnect, device number 14 [ 205.759591][ T23] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 205.769337][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.781358][ T23] usb 5-1: Product: syz [ 205.785764][ T23] usb 5-1: Manufacturer: syz [ 205.792327][ T23] usb 5-1: SerialNumber: syz [ 205.849700][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 206.270348][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.380519][ T7] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 206.499174][ T7] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 206.563053][ T23] usb 5-1: config 0 descriptor?? [ 206.802086][ T4795] udevd[4795]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.099637][ T23] dvb_usb_dtv5100: probe of 5-1:0.0 failed with error -71 [ 207.118043][ T23] usb 5-1: USB disconnect, device number 22 [ 207.454809][ T7] usb 1-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 207.464357][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.472475][ T7] usb 1-1: Product: syz [ 207.476823][ T7] usb 1-1: Manufacturer: syz [ 207.481555][ T7] usb 1-1: SerialNumber: syz [ 207.780654][ T7] usb 1-1: USB disconnect, device number 12 [ 207.799683][ T4262] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 207.842477][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 208.131234][ T5824] udc-core: couldn't find an available UDC or it's busy [ 208.172917][ T5824] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 209.489769][ T4262] usb 3-1: unable to get BOS descriptor or descriptor too short [ 209.579974][ T4262] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 209.594074][ T4262] usb 3-1: can't read configurations, error -71 [ 209.604024][ T5853] device syzkaller0 entered promiscuous mode [ 209.679758][ T4464] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 209.722116][ T26] audit: type=1326 audit(1772278908.837:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.4.454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5270ef1799 code=0x0 [ 209.747191][ T23] usb 4-1: USB disconnect, device number 16 [ 210.090576][ T4464] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.141024][ T4464] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 210.227343][ T4464] usb 1-1: config 1 has no interface number 1 [ 210.274654][ T4464] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 210.300467][ T4464] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 210.689994][ T4464] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.707805][ T4464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.757416][ T4464] usb 1-1: Product: syz [ 210.778784][ T4464] usb 1-1: Manufacturer: syz [ 210.797440][ T4464] usb 1-1: SerialNumber: syz [ 210.920093][ T5848] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 211.359613][ T4262] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 211.709777][ T7] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 211.773048][ T4464] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 211.839554][ T4262] usb 3-1: Using ep0 maxpacket: 16 [ 212.291402][ T4464] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 212.390958][ T5887] device syzkaller0 entered promiscuous mode [ 212.399283][ T4464] usb 1-1: USB disconnect, device number 13 [ 212.589785][ T4262] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 212.598930][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.609823][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 212.639864][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.650241][ T4262] usb 3-1: Product: syz [ 212.654455][ T4262] usb 3-1: Manufacturer: syz [ 212.655485][ T4795] udevd[4795]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.659086][ T4262] usb 3-1: SerialNumber: syz [ 212.700854][ T4262] usb 3-1: config 0 descriptor?? [ 212.749795][ T7] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 212.780089][ T7] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 212.959784][ T7] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 213.008781][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.019810][ T7] usb 5-1: Product: syz [ 213.024025][ T7] usb 5-1: Manufacturer: syz [ 213.046357][ T7] usb 5-1: SerialNumber: syz [ 213.069659][ T4892] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 213.229911][ T4262] dvb_usb_dtv5100: probe of 3-1:0.0 failed with error -71 [ 213.266307][ T4262] usb 3-1: USB disconnect, device number 17 [ 213.356268][ T7] usb 5-1: USB disconnect, device number 23 [ 213.424311][ T5900] udc-core: couldn't find an available UDC or it's busy [ 213.439584][ T5900] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 213.845342][ T4892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.189713][ T4892] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 215.197770][ T4892] usb 2-1: can't read configurations, error -71 [ 215.719735][ T4892] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 215.759955][ T5938] device syzkaller0 entered promiscuous mode [ 215.875441][ T26] audit: type=1326 audit(1772278914.987:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.4.477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5270ef1799 code=0x0 [ 216.113976][ T4892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.144798][ T4892] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 216.178901][ T4892] usb 2-1: config 1 has no interface number 1 [ 216.209340][ T4892] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 216.254129][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 216.279886][ T4892] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 216.479974][ T4892] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.505114][ T4892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.525533][ T4892] usb 2-1: Product: syz [ 216.538606][ T4892] usb 2-1: Manufacturer: syz [ 216.548424][ T4892] usb 2-1: SerialNumber: syz [ 216.589957][ T5934] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 216.749587][ T4298] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 216.819805][ T4235] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 217.369676][ T4892] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 217.505827][ T4892] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 217.646859][ T4892] usb 2-1: USB disconnect, device number 21 [ 217.738672][ T4795] udevd[4795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.739617][ T4298] usb 5-1: Using ep0 maxpacket: 16 [ 217.852555][ T23] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 217.966027][ T4235] usb 3-1: unable to get BOS descriptor or descriptor too short [ 218.273403][ T5965] udc-core: couldn't find an available UDC or it's busy [ 218.296080][ T4235] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 219.044819][ T5965] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 219.050522][ T4235] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 219.102379][ T4298] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 219.120374][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.129106][ T4298] usb 5-1: Product: syz [ 219.134375][ T4298] usb 5-1: Manufacturer: syz [ 219.139143][ T4298] usb 5-1: SerialNumber: syz [ 219.147446][ T4298] usb 5-1: config 0 descriptor?? [ 219.259934][ T4235] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 219.287028][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.306069][ T4235] usb 3-1: Product: syz [ 219.310624][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 219.318617][ T4235] usb 3-1: Manufacturer: syz [ 219.333677][ T4235] usb 3-1: SerialNumber: syz [ 219.336820][ T5976] device syzkaller0 entered promiscuous mode [ 219.399792][ T23] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 219.415575][ T23] usb 1-1: can't read configurations, error -71 [ 219.849773][ T4298] dvb_usb_dtv5100: probe of 5-1:0.0 failed with error -71 [ 220.134873][ T4235] usb 3-1: USB disconnect, device number 18 [ 220.176815][ T4298] usb 5-1: USB disconnect, device number 24 [ 220.506928][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 221.679793][ T26] audit: type=1326 audit(1772278920.777:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.1.497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd9faf5799 code=0x0 [ 222.239664][ T4892] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 222.507046][ T6014] device syzkaller0 entered promiscuous mode [ 222.634571][ T4892] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.665085][ T4892] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 222.705065][ T4892] usb 1-1: config 1 has no interface number 1 [ 222.715254][ T4892] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 222.788571][ T4892] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 222.969762][ T4892] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.089748][ T23] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 223.752060][ T4892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.760722][ T4892] usb 1-1: Product: syz [ 223.764910][ T4892] usb 1-1: Manufacturer: syz [ 223.770051][ T4892] usb 1-1: SerialNumber: syz [ 223.789947][ T6002] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 224.049869][ T4892] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 224.057965][ T4892] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 224.239898][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.341224][ T23] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 224.359390][ T23] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 224.443186][ T4892] usb 1-1: USB disconnect, device number 16 [ 224.632242][ T23] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 224.651172][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.682902][ T4230] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 224.691009][ T23] usb 2-1: Product: syz [ 224.700419][ T23] usb 2-1: Manufacturer: syz [ 224.734336][ T23] usb 2-1: SerialNumber: syz [ 224.979760][ T4230] usb 3-1: Invalid ep0 maxpacket: 32 [ 225.466394][ T23] usb 2-1: USB disconnect, device number 22 [ 225.529560][ T4230] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 225.579241][ T4892] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 225.909625][ T4230] usb 3-1: Invalid ep0 maxpacket: 32 [ 225.915276][ T4230] usb usb3-port1: attempt power cycle [ 225.943447][ T4892] usb 1-1: Using ep0 maxpacket: 16 [ 225.997165][ T6062] device syzkaller0 entered promiscuous mode [ 226.230033][ T4892] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 226.246626][ T4892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.274664][ T4892] usb 1-1: Product: syz [ 226.286019][ T4892] usb 1-1: Manufacturer: syz [ 226.291878][ T4892] usb 1-1: SerialNumber: syz [ 226.307193][ T4892] usb 1-1: config 0 descriptor?? [ 226.409588][ T4230] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 226.552355][ T4230] usb 3-1: Invalid ep0 maxpacket: 32 [ 227.110842][ T4892] dvb_usb_dtv5100: probe of 1-1:0.0 failed with error -110 [ 227.388130][ T4262] usb 1-1: USB disconnect, device number 17 [ 227.419620][ T4230] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 227.769685][ T4464] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 228.094249][ T26] audit: type=1326 audit(1772278927.207:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.516" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7726b1b799 code=0x0 [ 228.129832][ T4230] usb 3-1: device descriptor read/8, error -71 [ 228.149850][ T4464] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.162542][ T4464] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 228.172980][ T4464] usb 5-1: config 1 has no interface number 1 [ 228.179357][ T4464] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 228.192833][ T4464] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 228.250190][ T4230] usb usb3-port1: unable to enumerate USB device [ 228.268754][ T6086] netlink: 148 bytes leftover after parsing attributes in process `syz.2.522'. [ 228.380080][ T4464] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.452552][ T4464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.619373][ T4464] usb 5-1: Product: syz [ 228.700332][ T4464] usb 5-1: Manufacturer: syz [ 228.777544][ T4464] usb 5-1: SerialNumber: syz [ 228.935942][ T6077] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 229.329859][ T4464] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 229.348188][ T4464] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 229.461954][ T4230] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 229.482452][ T4464] usb 5-1: USB disconnect, device number 25 [ 229.852673][ T6095] udc-core: couldn't find an available UDC or it's busy [ 230.016096][ T6095] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 230.024862][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.098272][ T6114] device syzkaller0 entered promiscuous mode [ 230.439600][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 230.489593][ T4464] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 230.499860][ T4230] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 230.507559][ T4230] usb 1-1: can't read configurations, error -71 [ 230.800060][ T4298] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 230.949711][ T4464] usb 4-1: unable to get BOS descriptor or descriptor too short [ 231.060116][ T4298] usb 5-1: Using ep0 maxpacket: 16 [ 231.340209][ T4298] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 231.389158][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.525777][ T4298] usb 5-1: Product: syz [ 231.586217][ T4298] usb 5-1: Manufacturer: syz [ 231.650386][ T4298] usb 5-1: SerialNumber: syz [ 231.676139][ T4298] usb 5-1: config 0 descriptor?? [ 231.749795][ T4464] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 231.773301][ T4464] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 231.815717][ T6135] netlink: 148 bytes leftover after parsing attributes in process `syz.1.535'. [ 232.029829][ T4464] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 232.058700][ T4464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.129592][ T4892] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 232.149911][ T4464] usb 4-1: Product: syz [ 232.154121][ T4464] usb 4-1: Manufacturer: syz [ 232.158744][ T4464] usb 4-1: SerialNumber: syz [ 232.217914][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 232.249685][ T4298] dvb_usb_dtv5100: probe of 5-1:0.0 failed with error -71 [ 232.278121][ T4298] usb 5-1: USB disconnect, device number 26 [ 232.369698][ T4892] usb 1-1: Invalid ep0 maxpacket: 32 [ 232.390459][ T26] audit: type=1326 audit(1772278931.507:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c259799 code=0x0 [ 232.566990][ T4464] usb 4-1: USB disconnect, device number 17 [ 232.574217][ T4892] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 233.709573][ T4892] usb 1-1: Invalid ep0 maxpacket: 32 [ 233.715579][ T4892] usb usb1-port1: attempt power cycle [ 234.059703][ T23] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 234.367364][ T6160] device syzkaller0 entered promiscuous mode [ 234.490475][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.525815][ T23] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 234.684090][ T23] usb 3-1: config 1 has no interface number 1 [ 234.739577][ T4892] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 234.747367][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 234.796645][ T23] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 234.999884][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.027565][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.158885][ T4230] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 235.174186][ T23] usb 3-1: Product: syz [ 235.178731][ T23] usb 3-1: Manufacturer: syz [ 235.188966][ T23] usb 3-1: SerialNumber: syz [ 235.260071][ T6155] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 235.562711][ T6165] udc-core: couldn't find an available UDC or it's busy [ 235.589966][ T4892] usb 1-1: device descriptor read/8, error -71 [ 235.599789][ T23] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 235.627120][ T23] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 235.643057][ T6165] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 235.908782][ T23] usb 3-1: USB disconnect, device number 23 [ 236.069759][ T4230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 236.149754][ T4230] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 236.157569][ T4230] usb 4-1: can't read configurations, error -71 [ 236.184674][ T4795] udevd[4795]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.197346][ T6185] netlink: 148 bytes leftover after parsing attributes in process `syz.0.547'. [ 237.319747][ T4313] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 237.579725][ T4313] usb 2-1: Using ep0 maxpacket: 16 [ 237.860548][ T4313] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 237.886763][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 237.929425][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.093628][ T4313] usb 2-1: Product: syz [ 238.195078][ T4313] usb 2-1: Manufacturer: syz [ 238.219595][ T4313] usb 2-1: SerialNumber: syz [ 238.261540][ T4313] usb 2-1: config 0 descriptor?? [ 238.486134][ T6207] device syzkaller0 entered promiscuous mode [ 238.529560][ T23] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 238.662278][ T26] audit: type=1326 audit(1772278937.777:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.0.551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7041b8d799 code=0x0 [ 239.020088][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.131351][ T23] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 239.198518][ T23] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 239.560094][ T23] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 239.596506][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.615359][ T23] usb 3-1: Product: syz [ 239.649522][ T23] usb 3-1: Manufacturer: syz [ 239.654270][ T23] usb 3-1: SerialNumber: syz [ 240.260799][ T4313] dvb_usb_dtv5100: probe of 2-1:0.0 failed with error -71 [ 240.281348][ T4313] usb 2-1: USB disconnect, device number 23 [ 240.492338][ T23] usb 3-1: USB disconnect, device number 24 [ 240.512599][ T5548] udevd[5548]: setting mode of /dev/bus/usb/003/024 to 020664 failed: No such file or directory [ 240.564079][ T5548] udevd[5548]: setting owner of /dev/bus/usb/003/024 to uid=0, gid=0 failed: No such file or directory [ 243.849663][ T4313] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 244.099719][ T4313] usb 5-1: Using ep0 maxpacket: 16 [ 244.379791][ T4313] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 244.388898][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.407436][ T4313] usb 5-1: Product: syz [ 244.417548][ T4313] usb 5-1: Manufacturer: syz [ 244.427681][ T4313] usb 5-1: SerialNumber: syz [ 244.448674][ T4313] usb 5-1: config 0 descriptor?? [ 244.917393][ T26] audit: type=1326 audit(1772278944.027:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.2.569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c259799 code=0x0 [ 245.009675][ T4313] dvb_usb_dtv5100: probe of 5-1:0.0 failed with error -71 [ 245.040692][ T4313] usb 5-1: USB disconnect, device number 27 [ 245.953707][ T6283] netlink: 148 bytes leftover after parsing attributes in process `syz.2.576'. [ 246.127889][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 246.201309][ T4230] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 246.209156][ T4312] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 247.170169][ T6281] udc-core: couldn't find an available UDC or it's busy [ 247.177917][ T6281] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 247.185900][ T4230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 247.316058][ T4230] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 247.345818][ T4230] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 247.520061][ T4312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 247.589938][ T4312] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 247.597801][ T4230] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 247.609944][ T4312] usb 1-1: can't read configurations, error -71 [ 247.620085][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.638426][ T4230] usb 5-1: Product: syz [ 247.658744][ T4230] usb 5-1: Manufacturer: syz [ 247.663855][ T4230] usb 5-1: SerialNumber: syz [ 247.966299][ T4230] usb 5-1: USB disconnect, device number 28 [ 249.349644][ T2346] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 249.560208][ T4464] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 249.589588][ T2346] usb 4-1: Using ep0 maxpacket: 16 [ 249.682201][ T26] audit: type=1326 audit(1772278948.797:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c259799 code=0x0 [ 249.879986][ T4464] usb 5-1: Invalid ep0 maxpacket: 32 [ 249.899734][ T2346] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 249.948110][ T2346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.999784][ T2346] usb 4-1: Product: syz [ 250.004188][ T2346] usb 4-1: Manufacturer: syz [ 250.009014][ T2346] usb 4-1: SerialNumber: syz [ 250.029910][ T4464] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 250.033158][ T2346] usb 4-1: config 0 descriptor?? [ 250.399588][ T4464] usb 5-1: Invalid ep0 maxpacket: 32 [ 250.405295][ T4464] usb usb5-port1: attempt power cycle [ 250.719074][ T6338] netlink: 148 bytes leftover after parsing attributes in process `syz.2.590'. [ 250.859631][ T4464] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 250.980081][ T4464] usb 5-1: Invalid ep0 maxpacket: 32 [ 251.110054][ T2346] dvb_usb_dtv5100: probe of 4-1:0.0 failed with error -110 [ 251.269566][ T4464] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 251.956263][ T2346] usb 4-1: USB disconnect, device number 20 [ 251.969803][ T4464] usb 5-1: Invalid ep0 maxpacket: 32 [ 251.975466][ T4464] usb usb5-port1: unable to enumerate USB device [ 252.529562][ T2346] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 252.549698][ T4464] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 252.739824][ T2346] usb 3-1: device descriptor read/64, error -71 [ 252.961241][ T6357] udc-core: couldn't find an available UDC or it's busy [ 253.069552][ T6357] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 253.499877][ T4312] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 253.959681][ T4312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 254.169701][ T2346] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 254.359688][ T4464] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.379757][ T2346] usb 3-1: device descriptor read/64, error -71 [ 254.500094][ T2346] usb usb3-port1: attempt power cycle [ 254.505035][ T4312] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 254.519796][ T4464] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 254.527706][ T4464] usb 1-1: can't read configurations, error -71 [ 254.540092][ T4312] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 254.785488][ T4312] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 254.796311][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.814330][ T26] audit: type=1326 audit(1772278953.927:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.1.600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd9faf5799 code=0x0 [ 254.867073][ T4312] usb 4-1: Product: syz [ 254.895680][ T4312] usb 4-1: Manufacturer: syz [ 254.909818][ T2346] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 254.918340][ T4312] usb 4-1: SerialNumber: syz [ 255.020085][ T2346] usb 3-1: device descriptor read/8, error -71 [ 255.177264][ T6388] netlink: 148 bytes leftover after parsing attributes in process `syz.0.602'. [ 255.289239][ T4312] usb 4-1: USB disconnect, device number 21 [ 255.302497][ T2346] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 255.386602][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'. [ 255.572763][ T2346] usb 3-1: device not accepting address 28, error -71 [ 255.590220][ T2346] usb usb3-port1: unable to enumerate USB device [ 255.712972][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.719415][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.019587][ T4312] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 256.259811][ T4312] usb 5-1: Using ep0 maxpacket: 16 [ 256.469644][ T4262] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 256.540016][ T4312] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 256.559828][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.567897][ T4312] usb 5-1: Product: syz [ 256.603604][ T4312] usb 5-1: Manufacturer: syz [ 256.608610][ T4312] usb 5-1: SerialNumber: syz [ 256.700394][ T4312] usb 5-1: config 0 descriptor?? [ 256.824067][ T6418] udc-core: couldn't find an available UDC or it's busy [ 256.849755][ T6418] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 257.154294][ T2346] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 257.289982][ T4312] dvb_usb_dtv5100: probe of 5-1:0.0 failed with error -71 [ 257.368494][ T4312] usb 5-1: USB disconnect, device number 33 [ 257.409672][ T2346] usb 2-1: Using ep0 maxpacket: 16 [ 257.549685][ T4262] usb 3-1: unable to get BOS descriptor or descriptor too short [ 257.560200][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.587729][ T2346] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 257.609665][ T4262] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 257.627795][ T4262] usb 3-1: can't read configurations, error -71 [ 257.769845][ T2346] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 257.778941][ T2346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.818400][ T2346] usb 2-1: Product: syz [ 257.823013][ T2346] usb 2-1: Manufacturer: syz [ 257.827644][ T2346] usb 2-1: SerialNumber: syz [ 257.834970][ T2346] usb 2-1: config 0 descriptor?? [ 258.139815][ T4313] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 258.244871][ T6437] udc-core: couldn't find an available UDC or it's busy [ 258.266415][ T6437] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 258.349630][ T4313] usb 5-1: device descriptor read/64, error -71 [ 258.556219][ T6445] netlink: 148 bytes leftover after parsing attributes in process `syz.0.617'. [ 258.639574][ T4313] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 258.843940][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 258.879644][ T4313] usb 5-1: device descriptor read/64, error -71 [ 259.019916][ T4313] usb usb5-port1: attempt power cycle [ 259.439634][ T4313] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 259.550180][ T4313] usb 5-1: device descriptor read/8, error -71 [ 259.849676][ T4313] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 259.969725][ T4313] usb 5-1: device descriptor read/8, error -71 [ 260.099844][ T4313] usb usb5-port1: unable to enumerate USB device [ 260.185991][ T26] audit: type=1326 audit(1772278959.297:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c259799 code=0x0 [ 260.274110][ T4312] usb 2-1: USB disconnect, device number 24 [ 260.719547][ T4312] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 261.849385][ T4312] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.609806][ T4312] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 262.620396][ T4312] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 262.810220][ T4312] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 262.858860][ T6489] trusted_key: encrypted_key: insufficient parameters specified [ 263.651833][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.704374][ T4312] usb 2-1: Product: syz [ 263.721993][ T6495] netlink: 148 bytes leftover after parsing attributes in process `syz.1.629'. [ 263.731954][ T4312] usb 2-1: Manufacturer: syz [ 263.736732][ T4312] usb 2-1: SerialNumber: syz [ 263.779652][ T4262] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 263.787613][ T4312] usb 2-1: can't set config #4, error -71 [ 263.827640][ T4312] usb 2-1: USB disconnect, device number 25 [ 263.989880][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 264.153929][ T6478] udc-core: couldn't find an available UDC or it's busy [ 264.172809][ T6478] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 264.559712][ T4262] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.639578][ T4262] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 264.653184][ T4262] usb 5-1: can't read configurations, error -71 [ 264.819689][ T4298] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 265.089651][ T4298] usb 4-1: Using ep0 maxpacket: 16 [ 265.209712][ T4298] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.589937][ T4262] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 265.799633][ T4262] usb 5-1: device descriptor read/64, error -71 [ 265.930690][ T4262] usb usb5-port1: attempt power cycle [ 265.955349][ T4298] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 266.268772][ T4298] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 266.278554][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.286702][ T4298] usb 4-1: Product: syz [ 266.291152][ T4298] usb 4-1: Manufacturer: syz [ 266.296061][ T4298] usb 4-1: SerialNumber: syz [ 266.320660][ T4298] usb 4-1: config 0 descriptor?? [ 266.369584][ T4262] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 266.469881][ T4262] usb 5-1: device descriptor read/8, error -71 [ 266.760077][ T4262] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 267.016446][ T4262] usb 5-1: device descriptor read/8, error -71 [ 267.128083][ T6543] trusted_key: encrypted_key: insufficient parameters specified [ 267.429707][ T26] audit: type=1326 audit(1772278966.537:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.1.636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd9faf5799 code=0x0 [ 267.845182][ T4262] usb usb5-port1: unable to enumerate USB device [ 268.199684][ T4298] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 268.610056][ T4298] usb 3-1: unable to get BOS descriptor or descriptor too short [ 268.740685][ T4298] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 268.843234][ T4298] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 268.860771][ T6553] netlink: 148 bytes leftover after parsing attributes in process `syz.1.643'. [ 269.140543][ T4298] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 269.179591][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.256413][ T4298] usb 3-1: Product: syz [ 269.260998][ T4298] usb 3-1: Manufacturer: syz [ 269.265729][ T4298] usb 3-1: SerialNumber: syz [ 269.280938][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 269.546630][ T6545] netlink: 40 bytes leftover after parsing attributes in process `syz.2.640'. [ 269.559663][ T4892] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 269.612970][ T4298] usb 3-1: USB disconnect, device number 31 [ 269.971136][ T6559] udc-core: couldn't find an available UDC or it's busy [ 270.026840][ T6559] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 272.599638][ T4892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 272.792871][ T6602] trusted_key: encrypted_key: insufficient parameters specified [ 273.081373][ T6604] trusted_key: encrypted_key: insufficient parameters specified [ 273.095756][ T4892] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 273.095978][ T4892] usb 1-1: can't read configurations, error -71 [ 273.419992][ T6606] trusted_key: encrypted_key: insufficient parameters specified [ 273.748300][ T6610] netlink: 148 bytes leftover after parsing attributes in process `syz.2.657'. [ 274.241955][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 274.326606][ T4467] usb 4-1: USB disconnect, device number 22 [ 274.561315][ T6623] loop1: detected capacity change from 0 to 1024 [ 274.660773][ T6623] EXT4-fs (loop1): inline encryption not supported [ 274.667452][ T6623] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 274.841373][ T6623] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,journal_dev=0x0000000000000d5b,data_err=ignore,nodiscard,jqfmt=vfsv1,grpquota,init_itable,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback. [ 276.700900][ T6655] trusted_key: encrypted_key: insufficient parameters specified [ 277.499596][ T23] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 277.886103][ T6646] udc-core: couldn't find an available UDC or it's busy [ 277.924738][ T6646] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 278.354601][ T26] audit: type=1326 audit(1772278977.467:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.4.652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5270ef1799 code=0x0 [ 278.407780][ T6672] trusted_key: encrypted_key: insufficient parameters specified [ 279.139599][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 279.210178][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 279.239038][ T23] usb 2-1: can't read configurations, error -71 [ 279.289778][ T4262] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 279.599797][ T4262] usb 4-1: Using ep0 maxpacket: 16 [ 279.969785][ T4262] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.999938][ T6680] loop1: detected capacity change from 0 to 1024 [ 280.010108][ T4262] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 280.089821][ T6680] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 280.150550][ T6680] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 280.260854][ T4262] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 280.401815][ T4262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.410668][ T4262] usb 4-1: Product: syz [ 280.414948][ T4262] usb 4-1: Manufacturer: syz [ 280.420492][ T4262] usb 4-1: SerialNumber: syz [ 280.437305][ T4262] usb 4-1: config 0 descriptor?? [ 280.502157][ T6693] trusted_key: encrypted_key: insufficient parameters specified [ 281.200912][ T4262] usb 4-1: can't set config #0, error -71 [ 281.231060][ T4262] usb 4-1: USB disconnect, device number 23 [ 282.979108][ T6705] trusted_key: encrypted_key: insufficient parameters specified [ 284.869571][ T4230] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 285.273859][ T6713] udc-core: couldn't find an available UDC or it's busy [ 285.296279][ T6713] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 285.466249][ T6716] loop3: detected capacity change from 0 to 4096 [ 285.730405][ T6716] EXT4-fs (loop3): inline encryption not supported [ 285.856217][ T4230] usb 3-1: unable to get BOS descriptor or descriptor too short [ 285.969674][ T4230] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 285.983394][ T4230] usb 3-1: can't read configurations, error -71 [ 286.119150][ T6716] EXT4-fs (loop3): Test dummy encryption mode enabled [ 286.319773][ T4298] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 286.339994][ T6716] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 286.660041][ T4313] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 287.539681][ T4465] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 287.597579][ T6756] loop2: detected capacity change from 0 to 32768 [ 287.644037][ T4298] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.655060][ T6756] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.691 (6756) [ 287.686127][ T4298] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.700344][ T4298] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 287.719148][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.744868][ T6756] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 287.755444][ T6756] BTRFS info (device loop2): using free space tree [ 287.762311][ T6756] BTRFS info (device loop2): has skinny extents [ 287.769041][ T4313] usb 5-1: device descriptor read/64, error -71 [ 287.799888][ T4465] usb 2-1: Using ep0 maxpacket: 16 [ 287.841588][ T4298] usb 1-1: config 0 descriptor?? [ 288.059661][ T4313] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 288.145813][ T6743] udc-core: couldn't find an available UDC or it's busy [ 288.183257][ T6743] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 288.209424][ T6756] BTRFS info (device loop2): enabling ssd optimizations [ 288.270155][ T4313] usb 5-1: device descriptor read/64, error -71 [ 288.447559][ T4313] usb usb5-port1: attempt power cycle [ 288.500334][ T4194] ================================================================== [ 288.509007][ T4194] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x133f/0x3c90 [ 288.516977][ T4194] Read of size 1 at addr ffff88807d359c04 by task kworker/u5:3/4194 [ 288.525045][ T4194] [ 288.527367][ T4194] CPU: 0 PID: 4194 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 288.534898][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 288.545293][ T4194] Workqueue: hci3 hci_rx_work [ 288.549976][ T4194] Call Trace: [ 288.553245][ T4194] [ 288.556185][ T4194] dump_stack_lvl+0x188/0x250 [ 288.561141][ T4194] ? show_regs_print_info+0x20/0x20 [ 288.566422][ T4194] ? load_image+0x400/0x400 [ 288.571103][ T4194] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 288.576687][ T4194] ? mutex_lock_io_nested+0x60/0x60 [ 288.581925][ T4194] print_address_description+0x60/0x2d0 [ 288.587503][ T4194] ? hci_le_meta_evt+0x133f/0x3c90 [ 288.592827][ T4194] kasan_report+0xdf/0x130 [ 288.597280][ T4194] ? hci_le_meta_evt+0x133f/0x3c90 [ 288.602519][ T4194] hci_le_meta_evt+0x133f/0x3c90 [ 288.607525][ T4194] ? hci_remote_host_features_evt+0x280/0x280 [ 288.613908][ T4194] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 288.619777][ T4194] ? mark_lock+0x94/0x320 [ 288.624253][ T4194] ? mutex_unlock+0x10/0x10 [ 288.628790][ T4194] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 288.634927][ T4194] ? lock_chain_count+0x20/0x20 [ 288.639906][ T4194] ? __rwlock_init+0x140/0x140 [ 288.644796][ T4194] hci_event_packet+0xe48/0x1370 [ 288.649864][ T4194] ? lockdep_hardirqs_on+0x94/0x140 [ 288.655105][ T4194] ? rcu_lock_release+0x20/0x20 [ 288.659990][ T4194] ? hci_send_to_monitor+0x9c/0x4a0 [ 288.665227][ T4194] hci_rx_work+0x255/0xa10 [ 288.669878][ T4194] process_one_work+0x85f/0x1010 [ 288.674849][ T4194] ? worker_detach_from_pool+0x240/0x240 [ 288.680490][ T4194] ? lockdep_hardirqs_off+0x70/0x100 [ 288.685787][ T4194] ? _raw_spin_lock_irq+0xb7/0xf0 [ 288.691308][ T4194] ? _raw_spin_lock_irqsave+0x100/0x100 [ 288.697040][ T4194] ? wq_worker_running+0x97/0x170 [ 288.702081][ T4194] worker_thread+0xaa6/0x1290 [ 288.706955][ T4194] kthread+0x436/0x520 [ 288.710254][ T4465] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.711018][ T4194] ? rcu_lock_release+0x20/0x20 [ 288.726291][ T4194] ? kthread_blkcg+0xd0/0xd0 [ 288.731279][ T4194] ret_from_fork+0x1f/0x30 [ 288.735725][ T4194] [ 288.738741][ T4194] [ 288.741070][ T4194] Allocated by task 6743: [ 288.745484][ T4194] __kasan_kmalloc+0xb5/0xf0 [ 288.750167][ T4194] __alloc_skb+0x22c/0x750 [ 288.754671][ T4194] vhci_write+0xbc/0x450 [ 288.759170][ T4194] vfs_write+0x745/0xd60 [ 288.763452][ T4194] ksys_write+0x152/0x260 [ 288.767883][ T4194] do_syscall_64+0x4c/0xa0 [ 288.772333][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.778271][ T4194] [ 288.780592][ T4194] Last potentially related work creation: [ 288.786474][ T4194] kasan_save_stack+0x35/0x60 [ 288.791159][ T4194] kasan_record_aux_stack+0xb8/0x100 [ 288.796536][ T4194] call_rcu+0x189/0x950 [ 288.800683][ T4194] process_one_work+0x85f/0x1010 [ 288.805701][ T4194] worker_thread+0xaa6/0x1290 [ 288.810420][ T4194] kthread+0x436/0x520 [ 288.814504][ T4194] ret_from_fork+0x1f/0x30 [ 288.818915][ T4194] [ 288.821234][ T4194] The buggy address belongs to the object at ffff88807d359800 [ 288.821234][ T4194] which belongs to the cache kmalloc-1k of size 1024 [ 288.835580][ T4194] The buggy address is located 4 bytes to the right of [ 288.835580][ T4194] 1024-byte region [ffff88807d359800, ffff88807d359c00) [ 288.849554][ T4194] The buggy address belongs to the page: [ 288.855301][ T4194] page:ffffea0001f4d600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d358 [ 288.865585][ T4194] head:ffffea0001f4d600 order:3 compound_mapcount:0 compound_pincount:0 [ 288.873998][ T4194] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 288.882167][ T4194] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 288.890858][ T4194] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 288.899605][ T4194] page dumped because: kasan: bad access detected [ 288.906002][ T4194] page_owner tracks the page as allocated [ 288.911708][ T4194] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4188, ts 57656821511, free_ts 57651013832 [ 288.930976][ T4194] get_page_from_freelist+0x1bbd/0x1ca0 [ 288.936537][ T4194] __alloc_pages+0x1ee/0x480 [ 288.941125][ T4194] new_slab+0xc0/0x4b0 [ 288.945182][ T4194] ___slab_alloc+0x80a/0xdd0 [ 288.949757][ T4194] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 288.955749][ T4194] __alloc_skb+0x22c/0x750 [ 288.960157][ T4194] rtmsg_fib+0xe7/0x4b0 [ 288.964304][ T4194] fib_table_insert+0xd36/0x1bb0 [ 288.969316][ T4194] fib_magic+0x2e1/0x3c0 [ 288.973555][ T4194] fib_add_ifaddr+0x3f7/0x5e0 [ 288.978227][ T4194] fib_netdev_event+0x35c/0x480 [ 288.983109][ T4194] raw_notifier_call_chain+0xcb/0x160 [ 288.988588][ T4194] __dev_notify_flags+0x194/0x300 [ 288.993615][ T4194] dev_change_flags+0xe3/0x1a0 [ 288.998476][ T4194] do_setlink+0xcdb/0x3d60 [ 289.002886][ T4194] rtnl_newlink+0x1658/0x1a50 [ 289.007655][ T4194] page last free stack trace: [ 289.012680][ T4194] free_unref_page_prepare+0x637/0x6c0 [ 289.018238][ T4194] free_unref_page+0x8f/0x2a0 [ 289.023086][ T4194] __unfreeze_partials+0x1a5/0x200 [ 289.028190][ T4194] put_cpu_partial+0x12d/0x190 [ 289.033070][ T4194] qlist_free_all+0x35/0x90 [ 289.037574][ T4194] kasan_quarantine_reduce+0x150/0x160 [ 289.043024][ T4194] __kasan_slab_alloc+0x2f/0xd0 [ 289.047872][ T4194] slab_post_alloc_hook+0x4c/0x380 [ 289.053244][ T4194] kmem_cache_alloc_trace+0x103/0x2a0 [ 289.058617][ T4194] nsim_fib_event_work+0x11d2/0x33e0 [ 289.063890][ T4194] process_one_work+0x85f/0x1010 [ 289.068905][ T4194] worker_thread+0xd60/0x1290 [ 289.073760][ T4194] kthread+0x436/0x520 [ 289.077903][ T4194] ret_from_fork+0x1f/0x30 [ 289.082491][ T4194] [ 289.084907][ T4194] Memory state around the buggy address: [ 289.090523][ T4194] ffff88807d359b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.098660][ T4194] ffff88807d359b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.107286][ T4194] >ffff88807d359c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.115432][ T4194] ^ [ 289.119684][ T4194] ffff88807d359c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.127754][ T4194] ffff88807d359d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.135923][ T4194] ================================================================== [ 289.144090][ T4194] Disabling lock debugging due to kernel taint [ 289.159706][ T4194] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 289.167047][ T4194] CPU: 0 PID: 4194 Comm: kworker/u5:3 Tainted: G B syzkaller #0 [ 289.176193][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.186278][ T4194] Workqueue: hci3 hci_rx_work [ 289.191000][ T4194] Call Trace: [ 289.194299][ T4194] [ 289.194453][ T4465] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 289.197244][ T4194] dump_stack_lvl+0x188/0x250 [ 289.197272][ T4194] ? show_regs_print_info+0x20/0x20 [ 289.197288][ T4194] ? load_image+0x400/0x400 [ 289.197310][ T4194] panic+0x2e5/0x810 [ 289.224916][ T4194] ? bpf_jit_dump+0xd0/0xd0 [ 289.229423][ T4194] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 289.235426][ T4194] ? _raw_spin_unlock+0x40/0x40 [ 289.240271][ T4194] ? hci_le_meta_evt+0x133f/0x3c90 [ 289.245636][ T4194] check_panic_on_warn+0x80/0xa0 [ 289.250565][ T4194] ? hci_le_meta_evt+0x133f/0x3c90 [ 289.255839][ T4194] end_report+0x6d/0xf0 [ 289.260076][ T4194] kasan_report+0x102/0x130 [ 289.264568][ T4194] ? hci_le_meta_evt+0x133f/0x3c90 [ 289.269681][ T4194] hci_le_meta_evt+0x133f/0x3c90 [ 289.274659][ T4194] ? hci_remote_host_features_evt+0x280/0x280 [ 289.280919][ T4194] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 289.286728][ T4194] ? mark_lock+0x94/0x320 [ 289.291070][ T4194] ? mutex_unlock+0x10/0x10 [ 289.295570][ T4194] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 289.301762][ T4194] ? lock_chain_count+0x20/0x20 [ 289.306726][ T4194] ? __rwlock_init+0x140/0x140 [ 289.311528][ T4194] hci_event_packet+0xe48/0x1370 [ 289.316464][ T4194] ? lockdep_hardirqs_on+0x94/0x140 [ 289.321661][ T4194] ? rcu_lock_release+0x20/0x20 [ 289.326545][ T4194] ? hci_send_to_monitor+0x9c/0x4a0 [ 289.331738][ T4194] hci_rx_work+0x255/0xa10 [ 289.336334][ T4194] process_one_work+0x85f/0x1010 [ 289.341327][ T4194] ? worker_detach_from_pool+0x240/0x240 [ 289.347226][ T4194] ? lockdep_hardirqs_off+0x70/0x100 [ 289.352505][ T4194] ? _raw_spin_lock_irq+0xb7/0xf0 [ 289.357528][ T4194] ? _raw_spin_lock_irqsave+0x100/0x100 [ 289.363108][ T4194] ? wq_worker_running+0x97/0x170 [ 289.368451][ T4194] worker_thread+0xaa6/0x1290 [ 289.373245][ T4194] kthread+0x436/0x520 [ 289.377485][ T4194] ? rcu_lock_release+0x20/0x20 [ 289.382445][ T4194] ? kthread_blkcg+0xd0/0xd0 [ 289.387035][ T4194] ret_from_fork+0x1f/0x30 [ 289.391475][ T4194] [ 289.394921][ T4194] Kernel Offset: disabled [ 289.399447][ T4194] Rebooting in 86400 seconds..