last executing test programs: 4.161680826s ago: executing program 3 (id=1403): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x80000006) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x20000402, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000340), &(0x7f0000000f00)=""/20}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x3e, 0x6, "06abf4e701c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x48068, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x3, 0x9fd, 0x84, 0x105}, 0x50) read$eventfd(0xffffffffffffffff, &(0x7f0000000340), 0x8) readv(r1, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r6, 0xc0086442, &(0x7f0000000980)) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d28f75d96a2566e506bce1e8", 0x14}], 0x1}, 0x0) 3.622711839s ago: executing program 1 (id=1408): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="503bfde51b257f40", 0x8}], 0x1) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[], 0x50}}, 0x0) r2 = fsopen(&(0x7f0000000540)='tracefs\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r4, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 3.454545894s ago: executing program 1 (id=1409): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) 3.035123714s ago: executing program 1 (id=1410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0xfff, 0x2}}}}]}, 0x44}}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.754457151s ago: executing program 4 (id=1412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}, {&(0x7f0000000440)="93156be5c0f2770567", 0x9}], 0x2}, 0x0) 2.542184746s ago: executing program 2 (id=1415): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$proc_mixer(r0, &(0x7f0000000840)=[{'DIGITAL1', @void}, {'IGAIN', @val={' \'', 'Synth Capture Switch'}}, {'SYNTH', @val={' \'', 'Synth Capture Switch'}}, {'LINE', @val={' \'', 'Line Capture Switch'}}], 0x9d) dup3(r1, r0, 0x0) 2.535400047s ago: executing program 1 (id=1416): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e06, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents(r1, &(0x7f00000001c0)=""/35, 0x23) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xac, 0x14, 0x14, 0x3d}, 0xf, 0x7}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8e2ef89e051818bb, 0x8000}) 2.337579172s ago: executing program 2 (id=1417): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r4], 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffff", @ANYRES32=r7, @ANYBLOB="0100"], 0x3c}}, 0x0) 2.177726465s ago: executing program 1 (id=1418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) 1.97452255s ago: executing program 3 (id=1420): unshare(0x2040680) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) 1.974356821s ago: executing program 2 (id=1421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = eventfd2(0x0, 0x0) io_setup(0x4, 0x0) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 1.973379601s ago: executing program 4 (id=1422): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000438000/0x3000)=nil, 0x3000, 0x3000001, 0x304831, 0xffffffffffffffff, 0xec776000) listen(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b551d77f9565b777f41282e", 0xd8}], 0x1}, 0x10) r1 = inotify_init() r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES8, @ANYRES32=r3, @ANYRESOCT=r2, @ANYRESDEC=r1], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) madvise(&(0x7f00002d6000/0x2000)=nil, 0x2000, 0xb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$vim2m(&(0x7f0000000380), 0x41000ffffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xc76, 0x0, 0x6, 0x1ff, 0x45, 0x9, 0x3, 0x0, 0x0, 0x2}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.854667624s ago: executing program 2 (id=1425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1800) setrlimit(0xf, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) 1.803730245s ago: executing program 3 (id=1426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0xfff, 0x2}}}}]}, 0x44}}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.803518875s ago: executing program 0 (id=1427): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r0, 0x0, 0x0) dup3(r1, r0, 0x0) 1.61867277s ago: executing program 0 (id=1428): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e06, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents(r1, &(0x7f00000001c0)=""/35, 0x23) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xac, 0x14, 0x14, 0x3d}, 0xf, 0x7}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8e2ef89e051818bb, 0x8000}) 1.480047413s ago: executing program 3 (id=1429): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e23, 0x180000, @local, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x30000004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000001a80)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b8ff05", 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 1.476910213s ago: executing program 2 (id=1430): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x825, 0x18bd, 0xa000000, 0x8, 0x43, 0x52e6ac5d, 0x2000fff7fffe, 0x9657, 0xffdffffffffffffe, 0x9, 0x8000000000000, 0x5, 0x80000007, 0x80000000000000, 0x919, 0xfffffffffffffffe, 0x85, 0x17, 0x3, 0x100000000, 0x5, 0x200000006, 0xfffffffffffffffc, 0x7, 0xa}) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1.257947538s ago: executing program 2 (id=1431): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000000c0)="6766c7442400f3ffffff6766c7442402856000006766c744240600000000670f0114240f015f0a0f080f20d86635080000000f22d80f01b778700f20d86635080000000f22d8b8d2000f00d00f320f12c6ea0000d200", 0x56}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) unshare(0x22020600) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) splice(r1, 0x0, r0, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="1201500200000040b804020240000102030109021b00010105100709040009020701010509050102400008a9047d0727b0c30bce9a90bb22934bbd9bcaa1891e15d1c0c16c994e7186ac4056a169235f47e370e22b17ba02ab4660798f32d1572e5ac9a5138577dfe0a4a689981a7d0ab25609bf3fe049f9a5dfc53b0f098aaf08f667b0aad61100a5e403e2dfc70261f3e0dc5e546220eb1352d00af6aa32881e9d25401f5dbc216ac46b4770"], &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7c, 0xfc, 0x7, 0x40, 0x9}, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0x9, 0x1ff}]}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000140)) r4 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x4) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r5, &(0x7f0000000400)='./file0/../file0/file0/file0\x00', 0x8800, &(0x7f0000000000)={0x0, 0xa, 0x40000, {r5}}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='coredump_filter\x00') readv(r6, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x1e}, {0x0}], 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.236203129s ago: executing program 3 (id=1432): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r4], 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff00", @ANYRES32=r7, @ANYBLOB="0100"], 0x3c}}, 0x0) 1.113430072s ago: executing program 0 (id=1433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}, {&(0x7f0000000440)="93156be5c0f2770567", 0x9}], 0x2}, 0x0) 960.402956ms ago: executing program 4 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x18) 828.079309ms ago: executing program 4 (id=1435): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="503bfde51b257f40", 0x8}], 0x1) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[], 0x50}}, 0x0) r2 = fsopen(&(0x7f0000000540)='tracefs\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r4, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 813.00977ms ago: executing program 3 (id=1436): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x50b, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x88d4}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x1007e, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x7fffffff, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x6, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 703.305282ms ago: executing program 4 (id=1437): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) writev(r4, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) 539.298857ms ago: executing program 0 (id=1438): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r0, 0x0, 0x0) dup3(r1, r0, 0x0) 396.26344ms ago: executing program 0 (id=1439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0xfff, 0x2}}}}]}, 0x44}}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 173.945626ms ago: executing program 4 (id=1440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1800) setrlimit(0xf, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) 160.435416ms ago: executing program 0 (id=1441): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000280)={0xf0f022}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000140), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xb4}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f00000000c0)={0x20071026}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r9, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$TIOCSETD(r8, 0x5423, 0x0) ioctl$TCFLSH(r8, 0x400455c8, 0x4) 0s ago: executing program 1 (id=1442): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e23, 0x180000, @local, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x30000004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000001a80)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b8ff05", 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) kernel console output (not intermixed with test programs): short [ 139.113409][ T4233] usb 1-1: config 8 has an invalid interface number: 129 but max is 0 [ 139.121799][ T4233] usb 1-1: config 8 has no interface number 0 [ 139.198330][ T4189] usb 5-1: USB disconnect, device number 15 [ 139.199605][ T6020] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 139.204407][ C0] usblp0: nonzero write bulk status received: -71 [ 139.228965][ T5976] usblp0: removed [ 139.338542][ T6025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.526'. [ 139.353237][ T4233] usb 1-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 139.364788][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.373492][ T4233] usb 1-1: Product: syz [ 139.377707][ T4233] usb 1-1: Manufacturer: syz [ 139.380680][ T6025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.383444][ T4233] usb 1-1: SerialNumber: syz [ 139.432250][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 139.470069][ T6020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'. [ 139.515012][ T6020] 8021q: adding VLAN 0 to HW filter on device bond6 [ 139.793376][ T6031] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.812547][ T4233] cxacru 1-1:8.129: usbatm_usb_probe: bind failed: -19! [ 139.832813][ T4233] usb 1-1: USB disconnect, device number 11 [ 140.033396][ T6037] device syzkaller0 entered promiscuous mode [ 140.051383][ T6036] device syzkaller0 entered promiscuous mode [ 140.114287][ T6036] tipc: Enabling of bearer rejected, failed to enable media [ 140.237448][ T6041] device syzkaller0 entered promiscuous mode [ 140.426445][ T6050] netlink: 'syz.1.537': attribute type 1 has an invalid length. [ 140.500234][ T6051] tipc: Enabled bearer , priority 0 [ 140.536863][ T6054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.537'. [ 140.610581][ T6054] 8021q: adding VLAN 0 to HW filter on device bond7 [ 140.633761][ T6056] device syzkaller0 entered promiscuous mode [ 140.681774][ T6056] tipc: Resetting bearer [ 140.719953][ T6048] tipc: Resetting bearer [ 140.761201][ T6048] tipc: Disabling bearer [ 140.780710][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 140.791158][ T6063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.540'. [ 140.831450][ T6063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.982814][ T13] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 141.031280][ T4232] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 141.152439][ T6073] device syzkaller0 entered promiscuous mode [ 141.192906][ T4189] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 141.300837][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 141.383163][ T13] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.445958][ T6076] device syzkaller0 entered promiscuous mode [ 141.488837][ T6076] tipc: Enabling of bearer rejected, failed to enable media [ 141.569502][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 141.581657][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 141.618483][ T4232] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 141.627821][ T13] usb 5-1: Product: syz [ 141.632218][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.641085][ T4189] usb 1-1: unable to get BOS descriptor or descriptor too short [ 141.649048][ T13] usb 5-1: Manufacturer: syz [ 141.654171][ T13] usb 5-1: SerialNumber: syz [ 141.659197][ T4232] usb 3-1: Product: syz [ 141.666831][ T4232] usb 3-1: Manufacturer: syz [ 141.671595][ T4232] usb 3-1: SerialNumber: syz [ 141.734048][ T4189] usb 1-1: config 8 has an invalid interface number: 129 but max is 0 [ 141.759609][ T4189] usb 1-1: config 8 has no interface number 0 [ 141.833457][ T6079] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2875) [ 141.843118][ T6079] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 141.944792][ T4189] usb 1-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 141.954732][ T13] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 141.972820][ T4189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.989227][ T4189] usb 1-1: Product: syz [ 141.994146][ T4189] usb 1-1: Manufacturer: syz [ 142.001349][ T4189] usb 1-1: SerialNumber: syz [ 142.010603][ T6082] device syzkaller0 entered promiscuous mode [ 142.019002][ T4232] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 142.041355][ T4232] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 142.059799][ T4232] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 142.069614][ T4232] usb 3-1: media controller created [ 142.107560][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.146417][ T4229] usb 5-1: USB disconnect, device number 16 [ 142.155081][ T4232] zl10353_read_register: readreg error (reg=127, ret==-71) [ 142.169460][ T4229] usblp0: removed [ 142.232190][ T4232] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 142.274458][ T4232] usb 3-1: USB disconnect, device number 13 [ 142.373051][ T4189] cxacru 1-1:8.129: usbatm_usb_probe: bind failed: -19! [ 142.395239][ T4189] usb 1-1: USB disconnect, device number 12 [ 142.445042][ T6091] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 142.485202][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.552'. [ 142.501018][ T6091] 8021q: adding VLAN 0 to HW filter on device bond8 [ 142.616886][ T6094] tipc: Enabled bearer , priority 0 [ 142.696087][ T6100] netlink: 'syz.2.554': attribute type 29 has an invalid length. [ 142.716380][ T6101] device syzkaller0 entered promiscuous mode [ 142.740468][ T6100] netlink: 'syz.2.554': attribute type 29 has an invalid length. [ 142.768332][ T6099] device syzkaller0 entered promiscuous mode [ 142.794672][ T6094] tipc: Resetting bearer [ 142.808079][ T6103] device syzkaller0 entered promiscuous mode [ 142.821116][ T6103] tipc: Enabling of bearer rejected, failed to enable media [ 142.838760][ T6099] tipc: Enabling of bearer rejected, failed to enable media [ 142.938812][ T6093] tipc: Resetting bearer [ 142.968268][ T6093] tipc: Disabling bearer [ 143.145365][ T6115] device syzkaller0 entered promiscuous mode [ 143.223166][ T4229] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 143.257679][ T6120] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 143.359550][ T6122] __nla_validate_parse: 2 callbacks suppressed [ 143.359569][ T6122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.563'. [ 143.416280][ T6122] 8021q: adding VLAN 0 to HW filter on device bond7 [ 143.503232][ T4229] usb 3-1: Using ep0 maxpacket: 32 [ 143.573737][ T23] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 143.673677][ T4229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.692731][ T4229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.712825][ T4229] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.922851][ T4232] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 143.924460][ T4229] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 143.955043][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 143.964391][ T4229] usb 3-1: Product: syz [ 143.968589][ T4229] usb 3-1: Manufacturer: syz [ 143.973567][ T4229] usb 3-1: SerialNumber: syz [ 143.993084][ T23] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 144.003934][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.046673][ T4229] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 144.193501][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 144.208861][ T23] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 144.227715][ T23] usb 2-1: Product: syz [ 144.231960][ T23] usb 2-1: Manufacturer: syz [ 144.248072][ T23] usb 2-1: SerialNumber: syz [ 144.272656][ T23] usb 2-1: config 0 descriptor?? [ 144.288244][ T4174] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 144.303868][ T4229] usb 3-1: USB disconnect, device number 14 [ 144.316482][ T23] usb 2-1: selecting invalid altsetting 0 [ 144.333005][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.342315][ T6139] device syzkaller0 entered promiscuous mode [ 144.361593][ T4229] appletouch 3-1:1.0: input: appletouch disconnected [ 144.371971][ T6139] tipc: Enabling of bearer rejected, failed to enable media [ 144.427160][ T4232] usb 5-1: config 8 has an invalid interface number: 129 but max is 1 [ 144.459026][ T4232] usb 5-1: config 8 has an invalid interface number: 158 but max is 1 [ 144.495441][ T4232] usb 5-1: config 8 has no interface number 0 [ 144.512001][ T4232] usb 5-1: config 8 has no interface number 1 [ 144.522171][ T4232] usb 5-1: config 8 interface 158 has no altsetting 0 [ 144.544289][ T6125] usb 2-1: selecting invalid altsetting 0 [ 144.550300][ T6125] usb 2-1: 0:0: usb_set_interface failed (-22) [ 144.595825][ T6125] usb 2-1: selecting invalid altsetting 0 [ 144.601658][ T6125] usb 2-1: 0:0: usb_set_interface failed (-22) [ 144.612425][ T23] usb 2-1: USB disconnect, device number 23 [ 144.693147][ T4174] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.702810][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 144.715435][ T4232] usb 5-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 144.745487][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.756418][ T4232] usb 5-1: Product: syz [ 144.767477][ T6143] tipc: Enabled bearer , priority 0 [ 144.779985][ T4232] usb 5-1: Manufacturer: syz [ 144.785153][ T4232] usb 5-1: SerialNumber: syz [ 144.791548][ T6143] device syzkaller0 entered promiscuous mode [ 144.813604][ T6143] tipc: Resetting bearer [ 144.827614][ T6142] tipc: Resetting bearer [ 144.877295][ T6142] tipc: Disabling bearer [ 144.896813][ T6145] device syzkaller0 entered promiscuous mode [ 144.903439][ T4174] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 144.915346][ T6145] tipc: Enabling of bearer rejected, failed to enable media [ 144.927349][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 144.942185][ T4174] usb 1-1: Product: syz [ 144.946661][ T4174] usb 1-1: Manufacturer: syz [ 144.951411][ T4174] usb 1-1: SerialNumber: syz [ 145.124231][ T6151] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 145.156611][ T4232] cxacru 5-1:8.129: usbatm_usb_probe: bind failed: -19! [ 145.168754][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.576'. [ 145.206338][ T6153] 8021q: adding VLAN 0 to HW filter on device bond8 [ 145.215442][ T6150] device syzkaller0 entered promiscuous mode [ 145.257562][ T4174] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 145.305155][ T4232] cxacru 5-1:8.158: usbatm_usb_probe: bind failed: -19! [ 145.363268][ T4232] usb 5-1: USB disconnect, device number 17 [ 145.459863][ T4174] usb 1-1: USB disconnect, device number 13 [ 145.498469][ T4174] usblp0: removed [ 145.532820][ T5539] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 145.724881][ T6168] device syzkaller0 entered promiscuous mode [ 145.736970][ T6168] tipc: Enabling of bearer rejected, failed to enable media [ 145.755218][ T4189] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 145.922160][ T6173] MPTCP: addr_signal error, rm_addr=1 [ 145.953051][ T4189] usb 3-1: device descriptor read/64, error -71 [ 146.037956][ T6177] device syzkaller0 entered promiscuous mode [ 146.048635][ T6177] tipc: Enabling of bearer rejected, failed to enable media [ 146.063275][ T5539] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 146.082586][ T5539] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.102947][ T5539] usb 2-1: Product: syz [ 146.107184][ T5539] usb 2-1: Manufacturer: syz [ 146.111807][ T5539] usb 2-1: SerialNumber: syz [ 146.134661][ T5539] usb 2-1: config 0 descriptor?? [ 146.196557][ T6179] tipc: Enabled bearer , priority 0 [ 146.211175][ T6179] device syzkaller0 entered promiscuous mode [ 146.231647][ T6179] tipc: Resetting bearer [ 146.233524][ T4189] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 146.255792][ T23] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 146.267715][ T6178] tipc: Resetting bearer [ 146.284548][ T6178] tipc: Disabling bearer [ 146.380119][ T5539] usb 2-1: USB disconnect, device number 24 [ 146.448651][ T4189] usb 3-1: device descriptor read/64, error -71 [ 146.512664][ T6184] netlink: 'syz.4.588': attribute type 1 has an invalid length. [ 146.517175][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 146.557928][ T6184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.588'. [ 146.570288][ T6184] 8021q: adding VLAN 0 to HW filter on device bond8 [ 146.577327][ T4189] usb usb3-port1: attempt power cycle [ 146.663446][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.674708][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.684544][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.722165][ T6187] device syzkaller0 entered promiscuous mode [ 146.863198][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 146.882650][ T23] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 146.891420][ T23] usb 4-1: Product: syz [ 146.895960][ T23] usb 4-1: Manufacturer: syz [ 146.900591][ T23] usb 4-1: SerialNumber: syz [ 146.960719][ T23] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6 [ 146.993237][ T4189] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 147.003025][ T4233] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 147.039148][ T6194] device syzkaller0 entered promiscuous mode [ 147.074010][ T6194] tipc: Enabling of bearer rejected, failed to enable media [ 147.110326][ T4189] usb 3-1: device descriptor read/8, error -71 [ 147.168906][ T23] usb 4-1: USB disconnect, device number 19 [ 147.197808][ T23] appletouch 4-1:1.0: input: appletouch disconnected [ 147.382780][ T4189] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 147.412968][ T4233] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.483234][ T4189] usb 3-1: device descriptor read/8, error -71 [ 147.515589][ T4233] usb 1-1: config 8 has an invalid interface number: 129 but max is 1 [ 147.532736][ T4233] usb 1-1: config 8 has an invalid interface number: 158 but max is 1 [ 147.540992][ T4233] usb 1-1: config 8 has no interface number 0 [ 147.562735][ T4233] usb 1-1: config 8 has no interface number 1 [ 147.568943][ T4233] usb 1-1: config 8 interface 158 has no altsetting 0 [ 147.603045][ T4189] usb usb3-port1: unable to enumerate USB device [ 147.722976][ T5539] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 147.773523][ T4233] usb 1-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 147.782632][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.791094][ T6203] device syzkaller0 entered promiscuous mode [ 147.811251][ T6203] tipc: Enabling of bearer rejected, failed to enable media [ 147.817352][ T4233] usb 1-1: Product: syz [ 147.824974][ T4233] usb 1-1: Manufacturer: syz [ 147.829620][ T4233] usb 1-1: SerialNumber: syz [ 147.875844][ T6205] tipc: Enabled bearer , priority 0 [ 147.885298][ T6205] device syzkaller0 entered promiscuous mode [ 147.901884][ T6205] tipc: Resetting bearer [ 147.913085][ T6204] tipc: Resetting bearer [ 147.927848][ T6204] tipc: Disabling bearer [ 148.020233][ T6209] netlink: 'syz.3.599': attribute type 1 has an invalid length. [ 148.066992][ T6209] netlink: 48 bytes leftover after parsing attributes in process `syz.3.599'. [ 148.077778][ T6209] netlink: 48 bytes leftover after parsing attributes in process `syz.3.599'. [ 148.089527][ T6209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.599'. [ 148.102282][ T6209] 8021q: adding VLAN 0 to HW filter on device bond9 [ 148.110617][ T5539] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.178839][ T6215] device syzkaller0 entered promiscuous mode [ 148.253041][ T4233] cxacru 1-1:8.129: usbatm_usb_probe: bind failed: -19! [ 148.293092][ T5539] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 148.309507][ T5539] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 148.318957][ T5539] usb 2-1: Product: syz [ 148.329267][ T5539] usb 2-1: Manufacturer: syz [ 148.334257][ T5539] usb 2-1: SerialNumber: syz [ 148.373329][ T4233] cxacru 1-1:8.158: usbatm_usb_probe: bind failed: -19! [ 148.405548][ T4233] usb 1-1: USB disconnect, device number 14 [ 148.415239][ T6220] device syzkaller0 entered promiscuous mode [ 148.461084][ T6220] tipc: Enabling of bearer rejected, failed to enable media [ 148.577483][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.585630][ T5539] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 148.759262][ T6230] device syzkaller0 entered promiscuous mode [ 148.782274][ T6230] tipc: Enabling of bearer rejected, failed to enable media [ 148.814499][ T5539] usb 2-1: USB disconnect, device number 25 [ 148.865876][ T5539] usblp0: removed [ 148.992770][ T4174] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 149.167785][ T6246] netlink: 'syz.0.611': attribute type 1 has an invalid length. [ 149.219570][ T6251] netlink: 48 bytes leftover after parsing attributes in process `syz.0.611'. [ 149.273111][ T4174] usb 3-1: Using ep0 maxpacket: 32 [ 149.324286][ T6246] netlink: 48 bytes leftover after parsing attributes in process `syz.0.611'. [ 149.393953][ T4174] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.402324][ T6246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.611'. [ 149.422252][ T4174] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.437158][ T6246] 8021q: adding VLAN 0 to HW filter on device bond7 [ 149.639104][ T4174] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 149.654014][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 149.672962][ T4174] usb 3-1: Product: syz [ 149.683068][ T4174] usb 3-1: Manufacturer: syz [ 149.687830][ T4174] usb 3-1: SerialNumber: syz [ 149.757282][ T4174] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7 [ 149.848273][ T6268] device syzkaller0 entered promiscuous mode [ 149.965797][ T23] usb 3-1: USB disconnect, device number 19 [ 149.972746][ C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 150.020100][ T23] appletouch 3-1:1.0: input: appletouch disconnected [ 150.273013][ T4189] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 150.422876][ T21] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 150.433659][ T6074] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 150.482283][ T4189] usb 4-1: device descriptor read/64, error -71 [ 150.508844][ T6304] device syzkaller0 entered promiscuous mode [ 150.658717][ T6308] device syzkaller0 entered promiscuous mode [ 150.669457][ T6308] tipc: Enabling of bearer rejected, failed to enable media [ 150.723353][ T21] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 150.752824][ T4189] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 150.787225][ T6310] ip_tables: iptables: counters copy to user failed while replacing table [ 150.803153][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.813496][ T21] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.825106][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.843048][ T6074] usb 1-1: unable to get BOS descriptor or descriptor too short [ 150.913442][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.922550][ T21] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.923804][ T6074] usb 1-1: config 8 has an invalid interface number: 129 but max is 1 [ 150.934162][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.945054][ T4189] usb 4-1: device descriptor read/64, error -71 [ 150.961205][ T6074] usb 1-1: config 8 has an invalid interface number: 158 but max is 1 [ 150.969984][ T6074] usb 1-1: config 8 has no interface number 0 [ 150.982997][ T6074] usb 1-1: config 8 has no interface number 1 [ 150.989246][ T6074] usb 1-1: config 8 interface 158 has no altsetting 0 [ 151.045672][ T6312] netlink: 'syz.4.623': attribute type 1 has an invalid length. [ 151.054219][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.064153][ T21] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.075248][ T4174] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 151.082891][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.083618][ T4189] usb usb4-port1: attempt power cycle [ 151.105926][ T6314] netlink: 48 bytes leftover after parsing attributes in process `syz.4.623'. [ 151.120646][ T6312] netlink: 48 bytes leftover after parsing attributes in process `syz.4.623'. [ 151.132023][ T6312] netlink: 28 bytes leftover after parsing attributes in process `syz.4.623'. [ 151.143751][ T6312] 8021q: adding VLAN 0 to HW filter on device bond9 [ 151.152960][ T6074] usb 1-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 151.163403][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.172475][ T6074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.180964][ T21] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.183373][ T6074] usb 1-1: Product: syz [ 151.203348][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.212568][ T6074] usb 1-1: Manufacturer: syz [ 151.223879][ T6074] usb 1-1: SerialNumber: syz [ 151.303105][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.312066][ T21] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.331413][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.433375][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.443253][ T21] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.455046][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.473144][ T4174] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 151.488972][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.506178][ T4174] usb 3-1: config 0 descriptor?? [ 151.513590][ T4189] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 151.532968][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.546096][ T21] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.560074][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.593016][ T6074] cxacru 1-1:8.129: usbatm_usb_probe: bind failed: -19! [ 151.603718][ T4189] usb 4-1: device descriptor read/8, error -71 [ 151.643185][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.662391][ T21] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.679041][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.700640][ T6330] device syzkaller0 entered promiscuous mode [ 151.704369][ T6074] cxacru 1-1:8.158: usbatm_usb_probe: bind failed: -19! [ 151.729806][ T6074] usb 1-1: USB disconnect, device number 15 [ 151.812982][ T4174] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 151.826532][ T4174] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 151.863145][ T21] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 151.872245][ T21] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 151.873325][ T4189] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 151.880921][ T4174] [drm:udl_init] *ERROR* Selecting channel failed [ 151.902647][ T21] usb 2-1: Product: syz [ 151.911957][ T4174] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 151.919979][ T21] usb 2-1: Manufacturer: syz [ 151.925036][ T21] usb 2-1: SerialNumber: syz [ 151.930121][ T4174] [drm] Initialized udl on minor 2 [ 151.937481][ T21] usb 2-1: config 0 descriptor?? [ 151.973101][ T4174] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 151.985934][ T4174] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 152.000160][ T21] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 152.023048][ T4174] usb 3-1: USB disconnect, device number 20 [ 152.023218][ T4189] usb 4-1: device descriptor read/8, error -71 [ 152.049300][ T6336] device syzkaller0 entered promiscuous mode [ 152.061821][ T21] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 152.083810][ T21] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 152.102473][ T21] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 152.179511][ T4189] usb usb4-port1: unable to enumerate USB device [ 152.194261][ T6340] device syzkaller0 entered promiscuous mode [ 152.209801][ T21] usb 2-1: USB disconnect, device number 26 [ 152.229391][ T21] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 152.237749][ T6340] tipc: Enabling of bearer rejected, failed to enable media [ 152.330439][ T6344] netlink: 'syz.2.634': attribute type 4 has an invalid length. [ 152.370538][ T6344] netlink: 'syz.2.634': attribute type 4 has an invalid length. [ 152.741074][ T6363] device syzkaller0 entered promiscuous mode [ 153.080804][ T6376] device syzkaller0 entered promiscuous mode [ 153.220620][ T6380] device syzkaller0 entered promiscuous mode [ 153.246117][ T6380] tipc: Enabling of bearer rejected, failed to enable media [ 153.363102][ T4174] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 153.715412][ T6401] device syzkaller0 entered promiscuous mode [ 153.798634][ T4174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 153.813244][ T4174] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 153.835486][ T4174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 153.845879][ T4174] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 153.856453][ T4174] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 153.874606][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.899461][ T4174] usb 5-1: config 0 descriptor?? [ 154.053107][ T4230] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 154.173082][ T4174] hdpvr 5-1:0.0: firmware version 0x0 dated [ 154.180972][ T4174] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 154.262962][ T4230] usb 2-1: device descriptor read/64, error -71 [ 154.293296][ T6074] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 154.552975][ T4230] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 154.652946][ T6074] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.762915][ T4230] usb 2-1: device descriptor read/64, error -71 [ 154.789471][ T6415] device syzkaller0 entered promiscuous mode [ 154.832974][ T6074] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 154.842288][ T6074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 154.850580][ T6074] usb 3-1: Product: syz [ 154.855614][ T6074] usb 3-1: Manufacturer: syz [ 154.860254][ T6074] usb 3-1: SerialNumber: syz [ 154.897493][ T4230] usb usb2-port1: attempt power cycle [ 154.922457][ T6417] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 154.946370][ T6417] netlink: 48 bytes leftover after parsing attributes in process `syz.3.658'. [ 154.956106][ T6417] netlink: 48 bytes leftover after parsing attributes in process `syz.3.658'. [ 154.969704][ T6417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.658'. [ 154.981397][ T6417] 8021q: adding VLAN 0 to HW filter on device bond10 [ 154.988682][ T4174] hdpvr 5-1:0.0: Could not setup controls [ 154.997330][ T4174] hdpvr 5-1:0.0: registering videodev failed [ 155.011466][ T4174] hdpvr: probe of 5-1:0.0 failed with error -71 [ 155.040285][ T4174] usb 5-1: USB disconnect, device number 18 [ 155.057922][ T6420] device syzkaller0 entered promiscuous mode [ 155.078205][ T6420] tipc: Enabling of bearer rejected, failed to enable media [ 155.125621][ T6074] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 155.333024][ T4230] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 155.346760][ T4189] usb 3-1: USB disconnect, device number 21 [ 155.370442][ T4189] usblp0: removed [ 155.473155][ T4230] usb 2-1: device descriptor read/8, error -71 [ 155.560511][ T6433] device syzkaller0 entered promiscuous mode [ 155.753258][ T4230] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 155.863257][ T4230] usb 2-1: device descriptor read/8, error -71 [ 155.924046][ T6438] device syzkaller0 entered promiscuous mode [ 155.973059][ T4230] usb usb2-port1: unable to enumerate USB device [ 156.085052][ T6443] device syzkaller0 entered promiscuous mode [ 156.228017][ T4189] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 156.444576][ T6453] device syzkaller0 entered promiscuous mode [ 156.481103][ T6457] device syzkaller0 entered promiscuous mode [ 156.603149][ T4189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 30968, setting to 64 [ 156.718455][ T4233] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 156.783037][ T4189] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 156.792145][ T4189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.829363][ T4189] usb 3-1: Product: syz [ 156.841009][ T4189] usb 3-1: Manufacturer: syz [ 156.856259][ T4189] usb 3-1: SerialNumber: syz [ 156.879151][ T4189] usb 3-1: config 0 descriptor?? [ 156.903152][ T6441] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.923777][ T4189] hub 3-1:0.0: bad descriptor, ignoring hub [ 156.929762][ T4189] hub: probe of 3-1:0.0 failed with error -5 [ 156.942558][ T6467] device syzkaller0 entered promiscuous mode [ 156.954198][ T4189] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 157.132986][ T4233] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 157.202231][ T4233] usb 4-1: config 1 has no interface number 0 [ 157.232820][ T4174] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 157.261867][ T6474] device syzkaller0 entered promiscuous mode [ 157.403103][ T4233] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 157.422441][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.431604][ T4233] usb 4-1: Product: syz [ 157.465321][ T4233] usb 4-1: Manufacturer: syz [ 157.473089][ T4233] usb 4-1: SerialNumber: syz [ 157.717198][ T4174] usb 2-1: unable to get BOS descriptor or descriptor too short [ 157.813284][ T4174] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 157.822160][ T4174] usb 2-1: config 8 has no interface number 0 [ 157.838866][ T4174] usb 2-1: config 8 interface 158 has no altsetting 0 [ 157.853026][ T4233] usb 4-1: 3:1 : does not exist [ 157.858245][ T4233] usb 4-1: 3:2 : does not exist [ 157.872993][ T21] usb 3-1: USB disconnect, device number 22 [ 157.910800][ T4233] usb 4-1: USB disconnect, device number 24 [ 158.032882][ T4174] usb 2-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 158.052302][ T4174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.062048][ T4174] usb 2-1: Product: syz [ 158.074814][ T4174] usb 2-1: Manufacturer: syz [ 158.082260][ T4174] usb 2-1: SerialNumber: syz [ 158.173140][ T5070] udevd[5070]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.347590][ T6493] device syzkaller0 entered promiscuous mode [ 158.453064][ T4174] cxacru 2-1:8.158: cxacru_bind: interface has incorrect endpoints [ 158.466195][ T4174] cxacru 2-1:8.158: usbatm_usb_probe: bind failed: -19! [ 158.493711][ T4174] usb 2-1: USB disconnect, device number 31 [ 158.515217][ T6495] device syzkaller0 entered promiscuous mode [ 158.769889][ T6499] device syzkaller0 entered promiscuous mode [ 158.781350][ T6499] tipc: Enabled bearer , priority 0 [ 158.821259][ T6498] tipc: Resetting bearer [ 158.884306][ T6498] tipc: Disabling bearer [ 158.904229][ T4233] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 158.985839][ T6505] device syzkaller0 entered promiscuous mode [ 159.132894][ T4233] usb 3-1: device descriptor read/64, error -71 [ 159.161088][ T6509] device syzkaller0 entered promiscuous mode [ 159.347032][ T6515] program syz.3.695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.410686][ T6520] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 159.423296][ T4233] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 159.480715][ T6522] device syzkaller0 entered promiscuous mode [ 159.532895][ T4174] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 159.616111][ T6524] device syzkaller0 entered promiscuous mode [ 159.623273][ T4233] usb 3-1: device descriptor read/64, error -71 [ 159.743005][ T4233] usb usb3-port1: attempt power cycle [ 159.782996][ T4174] usb 2-1: Using ep0 maxpacket: 32 [ 159.932966][ T4174] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.949968][ T4174] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.032848][ T5539] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 160.133681][ T4174] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 160.152823][ T4174] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 160.168720][ T4174] usb 2-1: Product: syz [ 160.173129][ T4233] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 160.180864][ T4174] usb 2-1: Manufacturer: syz [ 160.191898][ T4174] usb 2-1: SerialNumber: syz [ 160.223155][ T6532] device syzkaller0 entered promiscuous mode [ 160.269683][ T4174] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9 [ 160.279681][ T4233] usb 3-1: device descriptor read/8, error -71 [ 160.312667][ T6532] tipc: Enabled bearer , priority 0 [ 160.344622][ T6531] tipc: Resetting bearer [ 160.394501][ T6531] tipc: Disabling bearer [ 160.433031][ T5539] usb 4-1: unable to get BOS descriptor or descriptor too short [ 160.465032][ T4174] usb 2-1: USB disconnect, device number 32 [ 160.490849][ T4174] appletouch 2-1:1.0: input: appletouch disconnected [ 160.514336][ T5539] usb 4-1: config 8 has an invalid interface number: 158 but max is 0 [ 160.531229][ T5539] usb 4-1: config 8 has no interface number 0 [ 160.554226][ T5539] usb 4-1: config 8 interface 158 has no altsetting 0 [ 160.564235][ T4233] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 160.653043][ T4233] usb 3-1: device descriptor read/8, error -71 [ 160.717456][ T5539] usb 4-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 160.731717][ T6539] device syzkaller0 entered promiscuous mode [ 160.749886][ T5539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.758424][ T5539] usb 4-1: Product: syz [ 160.762630][ T5539] usb 4-1: Manufacturer: syz [ 160.774003][ T5539] usb 4-1: SerialNumber: syz [ 160.781830][ T4233] usb usb3-port1: unable to enumerate USB device [ 161.036248][ T6546] device syzkaller0 entered promiscuous mode [ 161.142943][ T5539] cxacru 4-1:8.158: cxacru_bind: interface has incorrect endpoints [ 161.161401][ T5539] cxacru 4-1:8.158: usbatm_usb_probe: bind failed: -19! [ 161.202959][ T5539] usb 4-1: USB disconnect, device number 25 [ 161.257162][ T6555] device syzkaller0 entered promiscuous mode [ 161.366099][ T6557] device syzkaller0 entered promiscuous mode [ 161.438069][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 161.710150][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.839358][ T6567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.864899][ T4233] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 161.935408][ T6575] tipc: Enabled bearer , priority 0 [ 161.998445][ T6575] tipc: Disabling bearer [ 162.023760][ T6581] syz.2.717 uses obsolete (PF_INET,SOCK_PACKET) [ 162.289653][ T4233] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.291313][ T6583] device syzkaller0 entered promiscuous mode [ 162.302726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 162.480757][ T6590] device syzkaller0 entered promiscuous mode [ 162.543956][ T4233] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 162.562637][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 162.573030][ T23] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 162.599217][ T4233] usb 5-1: Product: syz [ 162.612271][ T4233] usb 5-1: Manufacturer: syz [ 162.622310][ T4233] usb 5-1: SerialNumber: syz [ 162.682272][ T6595] device syzkaller0 entered promiscuous mode [ 162.760956][ T6597] device syzkaller0 entered promiscuous mode [ 162.843164][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 162.887475][ T6600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 162.924807][ T4233] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 162.960479][ T6600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.975799][ T4233] usb 5-1: USB disconnect, device number 19 [ 163.000812][ T4233] usblp0: removed [ 163.005116][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.025958][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.248923][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 163.264593][ T23] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 163.289912][ T23] usb 2-1: Product: syz [ 163.303324][ T23] usb 2-1: Manufacturer: syz [ 163.313129][ T23] usb 2-1: SerialNumber: syz [ 163.366930][ T23] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input10 [ 163.472903][ T4233] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 163.595093][ T21] usb 2-1: USB disconnect, device number 33 [ 163.633255][ T6608] tipc: Enabled bearer , priority 0 [ 163.645903][ T21] appletouch 2-1:1.0: input: appletouch disconnected [ 163.659253][ T6608] device syzkaller0 entered promiscuous mode [ 163.732944][ T6608] tipc: Resetting bearer [ 163.753889][ T6607] tipc: Resetting bearer [ 163.788483][ T6607] tipc: Disabling bearer [ 163.912928][ T4233] usb 3-1: unable to get BOS descriptor or descriptor too short [ 163.982992][ T4233] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 163.990918][ T4233] usb 3-1: can't read configurations, error -71 [ 164.004519][ T6621] device syzkaller0 entered promiscuous mode [ 164.021289][ T6624] device syzkaller0 entered promiscuous mode [ 164.029881][ T6625] device syzkaller0 entered promiscuous mode [ 164.222966][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.737'. [ 164.250970][ T6630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.271462][ T6627] device syzkaller0 entered promiscuous mode [ 164.503144][ T6639] netlink: 'syz.1.741': attribute type 1 has an invalid length. [ 164.512858][ T4263] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 164.560262][ T6643] netlink: 48 bytes leftover after parsing attributes in process `syz.1.741'. [ 164.591622][ T6639] netlink: 48 bytes leftover after parsing attributes in process `syz.1.741'. [ 164.604447][ T6639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.741'. [ 164.614378][ T6639] 8021q: adding VLAN 0 to HW filter on device bond9 [ 164.697128][ T6651] tipc: Enabled bearer , priority 0 [ 164.707598][ T6651] device syzkaller0 entered promiscuous mode [ 164.722492][ T6651] tipc: Resetting bearer [ 164.739302][ T6648] tipc: Resetting bearer [ 164.758923][ T6648] tipc: Disabling bearer [ 164.873530][ T4263] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 164.881762][ T4263] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 164.892818][ T4233] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 164.918596][ T6659] device syzkaller0 entered promiscuous mode [ 164.927374][ T4263] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.950444][ T4263] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.970718][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.989286][ T4263] usb 5-1: config 0 descriptor?? [ 165.007563][ T6661] device syzkaller0 entered promiscuous mode [ 165.014059][ T6633] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 165.036291][ T4263] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 165.133027][ T4230] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 165.151124][ T6667] device syzkaller0 entered promiscuous mode [ 165.333173][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.362845][ T4263] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 165.392860][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 165.503524][ T4233] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 165.513070][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 165.521311][ T4233] usb 3-1: Product: syz [ 165.526478][ T4230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.537693][ T4233] usb 3-1: Manufacturer: syz [ 165.542310][ T4233] usb 3-1: SerialNumber: syz [ 165.547576][ T4230] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.723060][ T4263] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.773119][ T4230] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 165.782392][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 165.783327][ T4263] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 165.792310][ T4230] usb 2-1: Product: syz [ 165.814570][ T4263] usb 4-1: can't read configurations, error -71 [ 165.818104][ T4230] usb 2-1: Manufacturer: syz [ 165.829708][ T4233] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 165.842069][ T4230] usb 2-1: SerialNumber: syz [ 165.851160][ T4233] usb 3-1: USB disconnect, device number 28 [ 165.867237][ T4233] usblp0: removed [ 165.916469][ T4230] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input11 [ 166.124946][ T4233] usb 2-1: USB disconnect, device number 34 [ 166.146012][ T4233] appletouch 2-1:1.0: input: appletouch disconnected [ 166.276579][ T6676] netlink: 'syz.3.755': attribute type 1 has an invalid length. [ 166.299322][ T6676] netlink: 48 bytes leftover after parsing attributes in process `syz.3.755'. [ 166.309654][ T6676] netlink: 48 bytes leftover after parsing attributes in process `syz.3.755'. [ 166.321599][ T6676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 166.333238][ T6676] 8021q: adding VLAN 0 to HW filter on device bond11 [ 166.438341][ T6681] tipc: Enabled bearer , priority 0 [ 166.461348][ T6680] tipc: Disabling bearer [ 166.624808][ T6689] device syzkaller0 entered promiscuous mode [ 166.697430][ T6691] device syzkaller0 entered promiscuous mode [ 166.833083][ T6695] device syzkaller0 entered promiscuous mode [ 166.932981][ T4263] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 167.104660][ T6703] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 167.167174][ T6706] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 167.194240][ T6706] netlink: 48 bytes leftover after parsing attributes in process `syz.1.767'. [ 167.204227][ T6706] netlink: 48 bytes leftover after parsing attributes in process `syz.1.767'. [ 167.215771][ T6706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.767'. [ 167.225480][ T13] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 167.234160][ T6706] 8021q: adding VLAN 0 to HW filter on device bond10 [ 167.298625][ T4230] usb 5-1: USB disconnect, device number 20 [ 167.304027][ T4263] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 167.314420][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.365377][ T6712] tipc: Enabled bearer , priority 0 [ 167.420554][ T6711] tipc: Disabling bearer [ 167.599196][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.677331][ T13] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 167.691908][ T13] usb 3-1: can't read configurations, error -71 [ 167.823299][ T6721] udc-core: couldn't find an available UDC or it's busy [ 167.836168][ T6721] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 167.992784][ T4230] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 168.125015][ T6725] device syzkaller0 entered promiscuous mode [ 168.212519][ T6727] device syzkaller0 entered promiscuous mode [ 168.253233][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 168.348076][ T6731] device syzkaller0 entered promiscuous mode [ 168.393564][ T4230] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.405481][ T4230] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.569381][ T6738] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 168.583247][ T4230] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 168.593060][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 168.601545][ T4230] usb 5-1: Product: syz [ 168.606388][ T4230] usb 5-1: Manufacturer: syz [ 168.611396][ T4230] usb 5-1: SerialNumber: syz [ 168.644598][ T6741] bond11: (slave veth23): Enslaving as an active interface with a down link [ 168.661047][ T6738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.778'. [ 168.675105][ T4230] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input12 [ 168.684957][ T6738] 8021q: adding VLAN 0 to HW filter on device bond11 [ 168.791687][ T6745] tipc: Enabled bearer , priority 0 [ 168.812332][ T6744] tipc: Disabling bearer [ 168.823497][ T13] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 168.880422][ T23] usb 5-1: USB disconnect, device number 21 [ 168.916993][ T23] appletouch 5-1:1.0: input: appletouch disconnected [ 169.022897][ T13] usb 3-1: device descriptor read/64, error -71 [ 169.144036][ T13] usb usb3-port1: attempt power cycle [ 169.490176][ T6755] device syzkaller0 entered promiscuous mode [ 169.518615][ T6753] hub 9-0:1.0: USB hub found [ 169.535919][ T6753] hub 9-0:1.0: 1 port detected [ 169.553921][ T13] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 169.626435][ T5539] usb 4-1: USB disconnect, device number 27 [ 169.673985][ T13] usb 3-1: device descriptor read/8, error -71 [ 169.749934][ T6760] device syzkaller0 entered promiscuous mode [ 169.850926][ T6763] device syzkaller0 entered promiscuous mode [ 169.954285][ T13] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 169.957890][ T6767] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 170.013936][ T6769] bond12: (slave veth25): Enslaving as an active interface with a down link [ 170.042894][ T13] usb 3-1: device descriptor read/8, error -71 [ 170.080282][ T6767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.789'. [ 170.138751][ T6767] 8021q: adding VLAN 0 to HW filter on device bond12 [ 170.178255][ T13] usb usb3-port1: unable to enumerate USB device [ 170.432464][ T6780] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 170.529474][ T6786] device syzkaller0 entered promiscuous mode [ 170.602148][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 170.628054][ T6789] bond0: Unable to set up delay as MII monitoring is disabled [ 170.812226][ T6787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.988027][ T6800] device syzkaller0 entered promiscuous mode [ 171.364648][ T6812] netlink: 'syz.0.803': attribute type 1 has an invalid length. [ 171.445327][ T6816] bond8: (slave veth19): Enslaving as an active interface with a down link [ 171.468523][ T6812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.803'. [ 171.478756][ T6812] 8021q: adding VLAN 0 to HW filter on device bond8 [ 171.791973][ T6827] device syzkaller0 entered promiscuous mode [ 171.812494][ T6831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.811'. [ 171.882626][ T6831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.811'. [ 171.896422][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.814'. [ 171.958034][ T6837] ip_tables: iptables: counters copy to user failed while replacing table [ 172.111470][ T6849] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 172.166966][ T6846] user requested TSC rate below hardware speed [ 172.217097][ T6852] mmap: syz.0.818 (6852) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 172.239319][ T6849] bond10: (slave veth31): Enslaving as an active interface with a down link [ 172.269940][ T6854] bond10: (slave veth33): Enslaving as an active interface with a down link [ 172.279150][ T13] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 172.315503][ T6849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.817'. [ 172.333002][ T6074] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 172.479214][ T6859] netlink: 'syz.3.821': attribute type 10 has an invalid length. [ 172.504845][ T6859] netlink: 40 bytes leftover after parsing attributes in process `syz.3.821'. [ 172.516577][ T6859] device dummy0 entered promiscuous mode [ 172.522472][ T6859] bridge0: port 3(dummy0) entered blocking state [ 172.539305][ T6859] bridge0: port 3(dummy0) entered disabled state [ 172.547446][ T6865] process 'syz.3.821' launched '/dev/fd/-1' with NULL argv: empty string added [ 172.558522][ T6859] bridge0: port 3(dummy0) entered blocking state [ 172.565010][ T6859] bridge0: port 3(dummy0) entered forwarding state [ 172.572203][ T13] usb 3-1: no configurations [ 172.577190][ T13] usb 3-1: can't read configurations, error -22 [ 172.712903][ T6074] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.733206][ T6074] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.746391][ T13] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 172.755596][ T6074] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.764966][ T6074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.033008][ T6074] usb 2-1: usb_control_msg returned -32 [ 173.038803][ T13] usb 3-1: no configurations [ 173.047633][ T13] usb 3-1: can't read configurations, error -22 [ 173.054063][ T6074] usbtmc 2-1:16.0: can't read capabilities [ 173.082922][ T13] usb usb3-port1: attempt power cycle [ 173.148676][ T6880] device syzkaller0 entered promiscuous mode [ 173.394027][ T6840] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 173.446938][ T6885] netlink: 'syz.4.829': attribute type 1 has an invalid length. [ 173.512901][ T13] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 173.596516][ T6888] bond11: (slave veth35): Enslaving as an active interface with a down link [ 173.663141][ T13] usb 3-1: no configurations [ 173.672237][ T13] usb 3-1: can't read configurations, error -22 [ 173.691781][ T5539] usb 2-1: USB disconnect, device number 35 [ 173.745314][ T6885] bond11: (slave veth37): Enslaving as an active interface with a down link [ 173.754905][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.829'. [ 173.832939][ T13] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 173.983120][ T13] usb 3-1: no configurations [ 173.987838][ T13] usb 3-1: can't read configurations, error -22 [ 174.013074][ T13] usb usb3-port1: unable to enumerate USB device [ 174.571684][ T6911] device syzkaller0 entered promiscuous mode [ 174.600709][ T6915] device syzkaller0 entered promiscuous mode [ 174.722813][ T4263] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 174.785225][ T6920] netlink: 'syz.0.842': attribute type 1 has an invalid length. [ 174.860455][ T6926] bond9: (slave veth21): Enslaving as an active interface with a down link [ 174.900243][ T6920] bond9: (slave veth23): Enslaving as an active interface with a down link [ 174.915501][ T6920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.842'. [ 175.024714][ T6928] netlink: 'syz.4.844': attribute type 10 has an invalid length. [ 175.096882][ T4263] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.122910][ T4263] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.151269][ T4263] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.170605][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.227150][ T6928] team0: Device veth1_vlan failed to register rx_handler [ 175.502850][ T4263] usb 4-1: usb_control_msg returned -32 [ 175.508495][ T4263] usbtmc 4-1:16.0: can't read capabilities [ 175.872985][ T6953] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -32 [ 175.884834][ T4263] usb 4-1: USB disconnect, device number 28 [ 175.979985][ T6931] device syzkaller1 entered promiscuous mode [ 176.010825][ T6931] AppArmor: change_hat: Invalid input '' [ 176.187797][ T6960] device syzkaller0 entered promiscuous mode [ 176.282888][ T4174] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 176.581474][ T6968] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 176.743031][ T4174] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.755734][ T6975] bond13: (slave veth23): Enslaving as an active interface with a down link [ 176.852923][ T4174] usb 3-1: config 8 has an invalid interface number: 109 but max is 0 [ 176.861175][ T4174] usb 3-1: config 8 has no interface number 0 [ 176.870335][ T6968] bond13: (slave veth25): Enslaving as an active interface with a down link [ 176.879190][ T4174] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 176.890301][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.856'. [ 176.899356][ T4174] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 176.911333][ T4174] usb 3-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.113080][ T23] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 177.203133][ T4174] usb 3-1: string descriptor 0 read error: -22 [ 177.209460][ T4174] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 177.219059][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.258586][ T6931] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.274560][ T4174] metro_usb 3-1:8.109: Metrologic USB to Serial converter detected [ 177.301424][ T4174] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 177.364090][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 177.491062][ T6931] udc-core: couldn't find an available UDC or it's busy [ 177.503485][ T6931] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 177.511290][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 177.536680][ T4174] usb 3-1: USB disconnect, device number 37 [ 177.571654][ T4174] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 177.586035][ T4174] metro_usb 3-1:8.109: device disconnected [ 177.733161][ T23] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 177.746005][ T6995] device syzkaller0 entered promiscuous mode [ 177.759162][ T23] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 177.771479][ T6995] tipc: Enabled bearer , priority 0 [ 177.782723][ T23] usb 5-1: Product: syz [ 177.786950][ T23] usb 5-1: Manufacturer: syz [ 177.791580][ T23] usb 5-1: SerialNumber: syz [ 177.807044][ T6994] tipc: Resetting bearer [ 177.814768][ T23] usb 5-1: config 0 descriptor?? [ 177.834506][ T6978] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 177.859881][ T6994] tipc: Disabling bearer [ 178.046560][ T7003] device syzkaller0 entered promiscuous mode [ 178.059009][ T7003] tipc: Enabled bearer , priority 0 [ 178.082963][ T7000] tipc: Resetting bearer [ 178.129562][ T7000] tipc: Disabling bearer [ 178.136862][ T23] usb 5-1: USB disconnect, device number 22 [ 178.283620][ T7008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.870'. [ 178.311456][ T7008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.369243][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 178.461195][ T7012] device syzkaller0 entered promiscuous mode [ 179.015349][ T7021] input: syz1 as /devices/virtual/input/input13 [ 179.515429][ T7032] device syzkaller0 entered promiscuous mode [ 179.733240][ T7039] device syzkaller0 entered promiscuous mode [ 179.779932][ T7037] device syzkaller0 entered promiscuous mode [ 179.808783][ T7037] tipc: Enabled bearer , priority 0 [ 179.949025][ T7051] device syzkaller0 entered promiscuous mode [ 179.960775][ T7036] tipc: Resetting bearer [ 180.025585][ T7036] tipc: Disabling bearer [ 180.082533][ T7053] loop2: detected capacity change from 0 to 4096 [ 180.153036][ T7053] EXT4-fs (loop2): Test dummy encryption mode enabled [ 180.159912][ T7053] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 180.229053][ T7057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.887'. [ 180.259816][ T7053] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec19c, mo2=0003] [ 180.270882][ T26] audit: type=1326 audit(1788499122.951:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.0.883" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b07a1159 code=0x7ffc0000 [ 180.277657][ T7057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.323137][ T7053] System zones: 0-5 [ 180.327870][ T26] audit: type=1326 audit(1788499123.021:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.0.883" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b07a1159 code=0x7ffc0000 [ 180.378497][ T7053] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,bsdgroups,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,quota,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 180.445718][ T26] audit: type=1326 audit(1788499123.141:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.0.883" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b07a1159 code=0x7ffc0000 [ 180.510706][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'. [ 180.543338][ T26] audit: type=1326 audit(1788499123.161:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.0.883" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f71b07a0ec2 code=0x7ffc0000 [ 180.826200][ T26] audit: type=1326 audit(1788499123.181:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.0.883" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f71b07a0f57 code=0x7ffc0000 [ 181.032087][ T26] audit: type=1326 audit(1788499123.181:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.0.883" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f71b075de51 code=0x7ffc0000 [ 181.056255][ T26] audit: type=1326 audit(1788499123.181:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.0.883" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f71b07a1f49 code=0x7ffc0000 [ 181.172915][ T4231] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 181.271819][ T26] audit: type=1326 audit(1788499123.181:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.0.883" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f71b075debb code=0x7ffc0000 [ 181.442833][ T26] audit: type=1326 audit(1788499123.181:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.0.883" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f71b07a1159 code=0x7ffc0000 [ 181.464022][ T4231] usb 4-1: no configurations [ 181.478331][ T4231] usb 4-1: can't read configurations, error -22 [ 181.682898][ T4231] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 181.962208][ T7083] device syzkaller0 entered promiscuous mode [ 181.973201][ T4231] usb 4-1: no configurations [ 181.977896][ T4231] usb 4-1: can't read configurations, error -22 [ 182.002020][ T4231] usb usb4-port1: attempt power cycle [ 182.326308][ T7092] device syzkaller0 entered promiscuous mode [ 182.399313][ T7092] tipc: Enabled bearer , priority 0 [ 182.432819][ T4231] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 182.471145][ T7091] tipc: Resetting bearer [ 182.582619][ T7091] tipc: Disabling bearer [ 182.588644][ T4231] usb 4-1: no configurations [ 182.593571][ T4231] usb 4-1: can't read configurations, error -22 [ 182.752829][ T4231] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 182.771328][ T7108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.903'. [ 182.812871][ T7108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.856714][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 182.892986][ T4231] usb 4-1: no configurations [ 182.897763][ T4231] usb 4-1: can't read configurations, error -22 [ 182.920751][ T7105] loop0: detected capacity change from 0 to 4096 [ 182.958850][ T4231] usb usb4-port1: unable to enumerate USB device [ 183.036494][ T7104] kvm [7102]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 183.056924][ T7105] EXT4-fs (loop0): Test dummy encryption mode enabled [ 183.081072][ T7105] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 183.098956][ T7104] kvm [7102]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 183.157975][ T7105] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec19c, mo2=0003] [ 183.202922][ T7105] System zones: 0-5 [ 183.292205][ T7105] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,bsdgroups,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,quota,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 183.403258][ T4231] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 183.952864][ T4231] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.151214][ T7126] device syzkaller0 entered promiscuous mode [ 184.162960][ T4231] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 184.202336][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 184.231191][ T4231] usb 3-1: Product: syz [ 184.239406][ T4231] usb 3-1: Manufacturer: syz [ 184.243027][ T5539] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 184.252544][ T4231] usb 3-1: SerialNumber: syz [ 184.371999][ T7130] device syzkaller0 entered promiscuous mode [ 184.555156][ T4231] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 184.631491][ T26] audit: type=1326 audit(1788499127.321:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.3.909" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40219fe159 code=0x7ffc0000 [ 184.695419][ T5539] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.727934][ T5539] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 184.923850][ T7144] device syzkaller0 entered promiscuous mode [ 184.944604][ T5539] usb 2-1: New USB device found, idVendor=0644, idProduct=8052, bcdDevice= 1.00 [ 184.967397][ T5539] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.972162][ T7144] tipc: Enabled bearer , priority 0 [ 184.996898][ T5539] usb 2-1: Product: syz [ 185.012234][ T5539] usb 2-1: Manufacturer: syz [ 185.038195][ T5539] usb 2-1: SerialNumber: syz [ 185.064324][ T7143] tipc: Resetting bearer [ 185.137462][ T7143] tipc: Disabling bearer [ 185.307198][ T7149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.914'. [ 185.325644][ T5539] usb 2-1: USB disconnect, device number 36 [ 185.351417][ T7149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.372932][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 185.600753][ T7152] loop4: detected capacity change from 0 to 4096 [ 185.671063][ T7152] EXT4-fs (loop4): Test dummy encryption mode enabled [ 185.687328][ T7152] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 185.725277][ T7152] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec19c, mo2=0003] [ 185.743909][ T7152] System zones: 0-5 [ 185.759828][ T7152] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,bsdgroups,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,quota,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 186.093336][ T13] usb 3-1: USB disconnect, device number 38 [ 186.132904][ T13] usblp0: removed [ 186.607769][ T7168] device syzkaller0 entered promiscuous mode [ 187.583300][ T4174] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 187.642788][ T23] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 187.721511][ T7193] loop3: detected capacity change from 0 to 7 [ 187.737735][ T5070] Dev loop3: unable to read RDB block 7 [ 187.744314][ T5070] loop3: unable to read partition table [ 187.750208][ T5070] loop3: partition table beyond EOD, truncated [ 187.762920][ T7193] Dev loop3: unable to read RDB block 7 [ 187.769727][ T7193] loop3: unable to read partition table [ 187.776461][ T7193] loop3: partition table beyond EOD, truncated [ 187.793012][ T7193] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 187.953130][ T4174] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.964216][ T4174] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 188.012908][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.151388][ T4174] usb 5-1: New USB device found, idVendor=0644, idProduct=8052, bcdDevice= 1.00 [ 188.165398][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.183152][ T4174] usb 5-1: Product: syz [ 188.193079][ T4174] usb 5-1: Manufacturer: syz [ 188.202295][ T4174] usb 5-1: SerialNumber: syz [ 188.207605][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 188.221219][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 188.263938][ T23] usb 2-1: Product: syz [ 188.278688][ T23] usb 2-1: Manufacturer: syz [ 188.303105][ T23] usb 2-1: SerialNumber: syz [ 188.374186][ T7201] loop0: detected capacity change from 0 to 4096 [ 188.407712][ T7201] EXT4-fs (loop0): Test dummy encryption mode enabled [ 188.420880][ T7201] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 188.435813][ T7201] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec19c, mo2=0003] [ 188.444562][ T7201] System zones: 0-5 [ 188.452565][ T7201] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,bsdgroups,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,quota,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 188.560360][ T13] usb 5-1: USB disconnect, device number 23 [ 188.706220][ T23] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 189.202709][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 189.256193][ T7208] device syzkaller0 entered promiscuous mode [ 189.618799][ T7221] netlink: 'syz.0.940': attribute type 1 has an invalid length. [ 189.755840][ T7225] bond10: (slave veth25): Enslaving as an active interface with a down link [ 189.826297][ T7228] bond10: (slave veth27): Enslaving as an active interface with a down link [ 190.002811][ T4232] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 190.139037][ T7237] loop0: detected capacity change from 0 to 4096 [ 190.197741][ T7237] EXT4-fs (loop0): Test dummy encryption mode enabled [ 190.213011][ T7237] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 190.231732][ T7237] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec19c, mo2=0003] [ 190.251670][ T7237] System zones: 0-5 [ 190.265248][ T7237] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,bsdgroups,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,quota,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 190.331859][ T23] usb 2-1: USB disconnect, device number 37 [ 190.353215][ T13] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 190.369935][ T23] usblp0: removed [ 190.373699][ T4232] usb 3-1: config 0 has no interfaces? [ 190.535709][ T4232] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 190.570137][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.623373][ T4232] usb 3-1: Product: syz [ 190.627621][ T4232] usb 3-1: Manufacturer: syz [ 190.651618][ T4232] usb 3-1: SerialNumber: syz [ 190.660169][ T7245] device syzkaller0 entered promiscuous mode [ 190.688231][ T4232] usb 3-1: config 0 descriptor?? [ 190.713279][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.730702][ T13] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 190.847607][ T7251] netlink: 20 bytes leftover after parsing attributes in process `syz.4.950'. [ 190.866511][ T7251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.882595][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 190.893352][ T13] usb 4-1: New USB device found, idVendor=0644, idProduct=8052, bcdDevice= 1.00 [ 190.908613][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.941663][ T13] usb 4-1: Product: syz [ 190.972902][ T13] usb 4-1: Manufacturer: syz [ 190.982956][ T13] usb 4-1: SerialNumber: syz [ 191.062168][ T13] usb 3-1: USB disconnect, device number 39 [ 191.139796][ T7260] netlink: 'syz.4.953': attribute type 1 has an invalid length. [ 191.208474][ T7263] bond12: (slave veth39): Enslaving as an active interface with a down link [ 191.234162][ T7260] bond12: (slave veth41): Enslaving as an active interface with a down link [ 191.269403][ T4232] Bluetooth: hci3: command 0x0406 tx timeout [ 191.276295][ T4232] Bluetooth: hci1: command 0x0406 tx timeout [ 191.291560][ T4232] Bluetooth: hci0: command 0x0406 tx timeout [ 191.298733][ T4232] Bluetooth: hci4: command 0x0406 tx timeout [ 191.310237][ T4232] Bluetooth: hci2: command 0x0406 tx timeout [ 191.329580][ T4230] usb 4-1: USB disconnect, device number 33 [ 191.905350][ T7277] device syzkaller0 entered promiscuous mode [ 192.218899][ T7287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.962'. [ 192.239365][ T7287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.301377][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 192.460679][ T7294] netlink: 'syz.4.965': attribute type 1 has an invalid length. [ 192.521293][ T7292] loop1: detected capacity change from 0 to 4096 [ 192.542054][ T7294] bond13: (slave veth43): Enslaving as an active interface with a down link [ 192.566639][ T7294] bond13: (slave veth45): Enslaving as an active interface with a down link [ 192.653460][ T7292] EXT4-fs (loop1): Test dummy encryption mode enabled [ 192.663217][ T7292] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 192.725289][ T7292] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec19c, mo2=0003] [ 192.765258][ T7292] System zones: 0-5 [ 192.820339][ T7292] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,bsdgroups,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,quota,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 192.908591][ T7305] device syzkaller1 entered promiscuous mode [ 192.934295][ T7309] program syz.3.970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.209256][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 193.209273][ T26] audit: type=1326 audit(1788499135.901:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.4.971" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff44b6ad159 code=0x0 [ 193.479257][ T7319] device syzkaller0 entered promiscuous mode [ 193.616119][ T7321] device syzkaller0 entered promiscuous mode [ 193.816736][ T7326] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 193.853795][ T7328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.976'. [ 193.903235][ T7328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.936013][ T7326] bond13: (slave veth27): Enslaving as an active interface with a down link [ 193.970777][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 194.100310][ T7333] bond13: (slave veth29): Enslaving as an active interface with a down link [ 194.315590][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.322635][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.396700][ T7345] netlink: 'syz.1.991': attribute type 1 has an invalid length. [ 194.589361][ T7345] bond14: (slave veth31): Enslaving as an active interface with a down link [ 194.628569][ T7351] bond14: (slave veth33): Enslaving as an active interface with a down link [ 194.804231][ T7354] loop0: detected capacity change from 0 to 4096 [ 194.979471][ T7354] EXT4-fs (loop0): Test dummy encryption mode enabled [ 194.986764][ T7359] device syzkaller0 entered promiscuous mode [ 195.017578][ T7354] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 195.108500][ T7354] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec19c, mo2=0003] [ 195.153221][ T7354] System zones: 0-5 [ 195.173727][ T7366] device syzkaller0 entered promiscuous mode [ 195.195971][ T7354] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,bsdgroups,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,quota,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 195.581533][ T7340] ODEBUG: Out of memory. ODEBUG disabled [ 195.696538][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'. [ 195.725212][ T7376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.990'. [ 195.744971][ T7376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.003575][ T7388] netlink: 'syz.2.995': attribute type 1 has an invalid length. [ 196.102317][ T7388] bond4: (slave veth19): Enslaving as an active interface with a down link [ 196.154536][ T7391] bond4: (slave veth21): Enslaving as an active interface with a down link [ 196.312908][ T5539] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 196.398826][ T7393] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.497373][ T7399] device syzkaller0 entered promiscuous mode [ 196.594357][ T7402] device syzkaller0 entered promiscuous mode [ 196.693042][ T5539] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.809406][ T7411] netlink: 'syz.2.1003': attribute type 4 has an invalid length. [ 196.825139][ T7411] netlink: 'syz.2.1003': attribute type 4 has an invalid length. [ 196.903017][ T5539] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 196.918272][ T5539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 196.926807][ T5539] usb 4-1: Product: syz [ 196.931085][ T5539] usb 4-1: Manufacturer: syz [ 196.941938][ T5539] usb 4-1: SerialNumber: syz [ 197.012761][ T21] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 197.052864][ T4174] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 197.122785][ T4230] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 197.224562][ T5539] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 197.262847][ T7413] loop0: detected capacity change from 0 to 4096 [ 197.313292][ T4230] usb 3-1: device descriptor read/64, error -71 [ 197.316773][ T7413] EXT4-fs (loop0): Test dummy encryption mode enabled [ 197.330751][ T7413] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 197.333111][ T4174] usb 2-1: Using ep0 maxpacket: 16 [ 197.355248][ T7413] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec19c, mo2=0003] [ 197.364135][ T7413] System zones: 0-5 [ 197.373668][ T7413] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,bsdgroups,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,quota,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 197.538512][ T21] usb 5-1: config 0 has no interfaces? [ 197.613775][ T4229] usb 4-1: USB disconnect, device number 34 [ 197.632743][ C0] usblp0: nonzero write bulk status received: -108 [ 197.644765][ T4229] usblp0: removed [ 197.653605][ T4174] usb 2-1: unable to get BOS descriptor or descriptor too short [ 197.712961][ T4230] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 197.720752][ T21] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 197.730187][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.738337][ T21] usb 5-1: Product: syz [ 197.742821][ T21] usb 5-1: Manufacturer: syz [ 197.747533][ T21] usb 5-1: SerialNumber: syz [ 197.761581][ T21] usb 5-1: config 0 descriptor?? [ 197.783265][ T4174] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.793914][ T4174] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 197.942945][ T4230] usb 3-1: device descriptor read/64, error -71 [ 197.983319][ T4174] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 197.993309][ T4174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.001413][ T4174] usb 2-1: Product: syz [ 198.006199][ T4174] usb 2-1: Manufacturer: syz [ 198.011140][ T4174] usb 2-1: SerialNumber: syz [ 198.127187][ T4230] usb usb3-port1: attempt power cycle [ 198.172394][ T5539] usb 5-1: USB disconnect, device number 24 [ 198.325400][ T7424] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 198.435332][ T7430] bond14: (slave veth27): Enslaving as an active interface with a down link [ 198.463350][ T7424] bond14: (slave veth29): Enslaving as an active interface with a down link [ 198.486007][ T7409] udc-core: couldn't find an available UDC or it's busy [ 198.500089][ T7409] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 198.582823][ T4230] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 198.694803][ T26] audit: type=1326 audit(1788499141.391:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.1002" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe0122159 code=0x7ffc0000 [ 198.725647][ T4230] usb 3-1: device descriptor read/8, error -71 [ 198.833881][ T26] audit: type=1326 audit(1788499141.461:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.1002" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe0122159 code=0x7ffc0000 [ 198.885559][ T26] audit: type=1326 audit(1788499141.461:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.1002" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfe0122159 code=0x7ffc0000 [ 198.948499][ T26] audit: type=1326 audit(1788499141.461:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.1002" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe0122159 code=0x7ffc0000 [ 199.011868][ T26] audit: type=1326 audit(1788499141.461:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.1002" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe0122159 code=0x7ffc0000 [ 199.042770][ T4230] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 199.081264][ T26] audit: type=1326 audit(1788499141.461:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.1002" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfe0122159 code=0x7ffc0000 [ 199.139622][ T26] audit: type=1326 audit(1788499141.461:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.1002" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe0122159 code=0x7ffc0000 [ 199.193400][ T4230] usb 3-1: device descriptor read/8, error -71 [ 199.209839][ T26] audit: type=1326 audit(1788499141.461:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.1002" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe0122159 code=0x7ffc0000 [ 199.270265][ T7446] device syzkaller0 entered promiscuous mode [ 199.324811][ T4230] usb usb3-port1: unable to enumerate USB device [ 199.331444][ T4174] usb 2-1: USB disconnect, device number 38 [ 199.445609][ T7448] device syzkaller0 entered promiscuous mode [ 199.542106][ T7452] loop4: detected capacity change from 0 to 4096 [ 199.650968][ T7452] EXT4-fs (loop4): Test dummy encryption mode enabled [ 199.666037][ T7452] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 199.694463][ T7452] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec19c, mo2=0003] [ 199.712844][ T7452] System zones: 0-5 [ 199.739265][ T7452] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,bsdgroups,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,quota,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 200.309972][ T7464] netlink: 'syz.1.1018': attribute type 1 has an invalid length. [ 200.420220][ T4174] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 200.483238][ T7466] bond15: (slave veth35): Enslaving as an active interface with a down link [ 200.583258][ T7467] bond15: (slave veth37): Enslaving as an active interface with a down link [ 200.844358][ T4174] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.042837][ T4174] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 201.051965][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 201.092770][ T4174] usb 4-1: Product: syz [ 201.097030][ T4174] usb 4-1: Manufacturer: syz [ 201.101652][ T4174] usb 4-1: SerialNumber: syz [ 201.258984][ T7488] device syzkaller0 entered promiscuous mode [ 201.286154][ T7490] netlink: 'syz.4.1024': attribute type 29 has an invalid length. [ 201.320165][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 201.388804][ T4174] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 201.428733][ T7490] netlink: 'syz.4.1024': attribute type 29 has an invalid length. [ 201.446881][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 201.618060][ T7492] device syzkaller0 entered promiscuous mode [ 201.642785][ C0] usblp0: nonzero write bulk status received: -71 [ 201.649362][ T4229] usb 4-1: USB disconnect, device number 35 [ 201.704891][ T4229] usblp0: removed [ 201.858040][ T5539] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 202.223351][ T5539] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 202.243308][ T5539] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.403369][ T5539] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 202.418550][ T5539] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 202.427133][ T5539] usb 5-1: Product: syz [ 202.431487][ T5539] usb 5-1: Manufacturer: syz [ 202.441128][ T5539] usb 5-1: SerialNumber: syz [ 202.448332][ T5539] usb 5-1: config 0 descriptor?? [ 202.459875][ T7508] loop3: detected capacity change from 0 to 4096 [ 202.496270][ T5539] usb 5-1: selecting invalid altsetting 0 [ 202.511165][ T7508] EXT4-fs (loop3): Test dummy encryption mode enabled [ 202.526695][ T7508] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 202.611895][ T7508] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec19c, mo2=0003] [ 202.654676][ T7508] System zones: 0-5 [ 202.660596][ T7513] netlink: 'syz.2.1032': attribute type 1 has an invalid length. [ 202.674057][ T7508] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,bsdgroups,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,quota,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 202.715651][ T7494] usb 5-1: selecting invalid altsetting 0 [ 202.808827][ T7513] bond5: (slave veth23): Enslaving as an active interface with a down link [ 202.827561][ T7494] usb 5-1: 0:0: usb_set_interface failed (-22) [ 202.858698][ T7516] usb 5-1: selecting invalid altsetting 0 [ 202.888525][ T7516] usb 5-1: 0:0: usb_set_interface failed (-22) [ 202.902831][ T5539] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 202.921503][ T21] usb 5-1: USB disconnect, device number 25 [ 202.935243][ T7513] bond5: (slave veth25): Enslaving as an active interface with a down link [ 203.293055][ T5539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 30968, setting to 64 [ 203.467365][ T5539] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 203.489698][ T5539] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.509389][ T5539] usb 2-1: Product: syz [ 203.528844][ T5539] usb 2-1: Manufacturer: syz [ 203.533901][ T5539] usb 2-1: SerialNumber: syz [ 203.556954][ T5539] usb 2-1: config 0 descriptor?? [ 203.593046][ T7512] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 203.614175][ T5539] hub 2-1:0.0: bad descriptor, ignoring hub [ 203.620365][ T5539] hub: probe of 2-1:0.0 failed with error -5 [ 203.648657][ T5539] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 203.846600][ T7535] device syzkaller0 entered promiscuous mode [ 203.993211][ T4174] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 204.387655][ T4232] usb 2-1: USB disconnect, device number 39 [ 204.412928][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 204.457003][ T4174] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 204.476306][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 204.487338][ T4174] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 204.499537][ T4174] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 204.509509][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.539712][ T7554] device syzkaller0 entered promiscuous mode [ 204.550516][ T4174] usb 3-1: config 0 descriptor?? [ 204.720819][ T7562] netlink: 'syz.3.1049': attribute type 4 has an invalid length. [ 204.750237][ T7562] netlink: 'syz.3.1049': attribute type 4 has an invalid length. [ 204.822868][ T4174] hdpvr 3-1:0.0: firmware version 0x1e dated [ 204.952562][ T7567] device syzkaller0 entered promiscuous mode [ 205.652886][ T4174] hdpvr 3-1:0.0: Could not setup controls [ 205.659048][ T4174] hdpvr 3-1:0.0: registering videodev failed [ 205.724488][ T4174] hdpvr: probe of 3-1:0.0 failed with error -71 [ 205.781241][ T4174] usb 3-1: USB disconnect, device number 44 [ 205.869073][ T7601] device syzkaller0 entered promiscuous mode [ 206.336636][ T7623] netlink: 'syz.4.1071': attribute type 4 has an invalid length. [ 206.367494][ T7623] netlink: 'syz.4.1071': attribute type 4 has an invalid length. [ 206.446629][ C1] sd 0:0:1:0: tag#8226 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 206.446751][ C1] sd 0:0:1:0: tag#8226 CDB: Write(6) 0a 00 00 00 0b 00 00 00 7c 03 00 00 [ 206.621776][ T7628] netlink: 'syz.2.1073': attribute type 1 has an invalid length. [ 206.801425][ T7630] bond6: (slave veth27): Enslaving as an active interface with a down link [ 206.941579][ T7628] bond6: (slave veth29): Enslaving as an active interface with a down link [ 207.036174][ T7637] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 207.062760][ T7637] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 207.248429][ T7645] device syzkaller0 entered promiscuous mode [ 208.215630][ T7668] netlink: 'syz.2.1088': attribute type 1 has an invalid length. [ 208.272370][ T7668] bond7: (slave veth31): Enslaving as an active interface with a down link [ 208.324287][ T7668] bond7: (slave veth33): Enslaving as an active interface with a down link [ 208.341167][ T7671] netlink: 'syz.3.1089': attribute type 4 has an invalid length. [ 208.371199][ T7671] netlink: 'syz.3.1089': attribute type 4 has an invalid length. [ 208.397320][ T7668] syz.2.1088 (7668) used greatest stack depth: 19120 bytes left [ 208.512566][ T7678] xt_bpf: check failed: parse error [ 208.627276][ T7680] device syzkaller0 entered promiscuous mode [ 208.644478][ T7682] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 208.842424][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 208.859320][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1096'. [ 209.263913][ T7699] netlink: 'syz.2.1100': attribute type 1 has an invalid length. [ 209.411009][ T7699] bond8: (slave veth35): Enslaving as an active interface with a down link [ 209.501306][ T7704] bond8: (slave veth37): Enslaving as an active interface with a down link [ 209.537388][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1100'. [ 209.674670][ T4232] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 209.831527][ T7718] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 209.843117][ T7718] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 209.994187][ T7706] udc-core: couldn't find an available UDC or it's busy [ 210.012147][ T7706] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 210.022783][ T4263] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 210.232824][ T23] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 210.382940][ T4263] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.405116][ T4263] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 210.543532][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 210.583929][ T4263] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 210.612842][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.620946][ T4232] usb 4-1: no configurations [ 210.626818][ T4263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.650561][ T4232] usb 4-1: can't read configurations, error -22 [ 210.657311][ T4263] usb 3-1: Product: syz [ 210.670407][ T4263] usb 3-1: Manufacturer: syz [ 210.676786][ T4263] usb 3-1: SerialNumber: syz [ 210.683867][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.706374][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.735087][ T23] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 210.761336][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.808392][ T23] usb 5-1: config 0 descriptor?? [ 210.948098][ T7713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1105'. [ 211.057562][ T7733] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 211.073450][ T7741] netlink: 'syz.1.1116': attribute type 1 has an invalid length. [ 211.078601][ T7733] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 211.199920][ T7743] bond16: (slave veth39): Enslaving as an active interface with a down link [ 211.355075][ T23] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 211.551039][ T7741] bond16: (slave veth41): Enslaving as an active interface with a down link [ 211.562809][ T7743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1116'. [ 211.721312][ T4263] usb 3-1: USB disconnect, device number 45 [ 211.959155][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 212.162289][ T4263] usb 5-1: USB disconnect, device number 26 [ 212.907574][ T7788] capability: warning: `syz.0.1130' uses 32-bit capabilities (legacy support in use) [ 212.934917][ T7787] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 213.147980][ T7791] bond17: (slave veth43): Enslaving as an active interface with a down link [ 213.258783][ T7796] bond17: (slave veth45): Enslaving as an active interface with a down link [ 213.290541][ T7787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1131'. [ 213.762831][ T23] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 213.942749][ T5539] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 213.962906][ T4263] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 214.212891][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.232727][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 214.242423][ T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 214.272702][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.302743][ T23] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 214.302882][ T5539] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 214.302918][ T5539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.311951][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.342591][ T4263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 214.353042][ T4263] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 214.368462][ T4263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 214.378453][ T4263] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 214.395212][ T5539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.407381][ T4263] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 214.419933][ T5539] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 214.439161][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.462479][ T4263] usb 4-1: config 0 descriptor?? [ 214.522931][ T5539] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 214.542299][ T5539] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 214.551816][ T5539] usb 3-1: Manufacturer: syz [ 214.565739][ T5539] usb 3-1: config 0 descriptor?? [ 214.722866][ T4263] hdpvr 4-1:0.0: firmware version 0x1e dated [ 214.994306][ T21] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 215.042976][ T23] gud 5-1:1.0: Failed to get properties (error=-71) [ 215.048651][ T5539] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 215.052904][ T23] gud: probe of 5-1:1.0 failed with error -71 [ 215.063237][ T5539] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 215.076601][ T5539] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 215.087884][ T23] usb 5-1: USB disconnect, device number 27 [ 215.433002][ T21] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 215.463348][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.502708][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.506830][ T4263] hdpvr 4-1:0.0: Could not setup controls [ 215.512503][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 215.534060][ T4263] hdpvr 4-1:0.0: registering videodev failed [ 215.563810][ T4263] hdpvr: probe of 4-1:0.0 failed with error -71 [ 215.594251][ T4263] usb 4-1: USB disconnect, device number 38 [ 215.606551][ T7834] netlink: 'syz.0.1146': attribute type 1 has an invalid length. [ 215.622982][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 215.632157][ T21] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 215.662507][ T21] usb 2-1: Manufacturer: syz [ 215.692019][ T21] usb 2-1: config 0 descriptor?? [ 215.810758][ T7838] bond11: (slave veth29): Enslaving as an active interface with a down link [ 215.890533][ T7834] bond11: (slave veth31): Enslaving as an active interface with a down link [ 215.952992][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1146'. [ 216.148026][ T7848] netlink: 'syz.0.1149': attribute type 4 has an invalid length. [ 216.171582][ T7845] nvme nvme0: rdma_resolve_addr failed (-19). [ 216.194762][ T21] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 216.205798][ T21] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 216.259982][ T7849] netlink: 'syz.0.1149': attribute type 4 has an invalid length. [ 216.283655][ T21] appleir 0003:05AC:8243.0003: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 216.688190][ T5539] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 216.942934][ T5539] usb 5-1: Using ep0 maxpacket: 16 [ 217.062879][ T5539] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 217.076987][ T5539] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 217.087509][ T5539] usb 5-1: config 0 has no interface number 0 [ 217.093795][ T5539] usb 5-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 217.105136][ T5539] usb 5-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 217.119240][ T5539] usb 5-1: config 0 interface 48 has no altsetting 0 [ 217.196506][ T21] usb 3-1: USB disconnect, device number 46 [ 217.283170][ T5539] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 217.292904][ T5539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.301045][ T5539] usb 5-1: Product: syz [ 217.305373][ T5539] usb 5-1: Manufacturer: syz [ 217.310092][ T5539] usb 5-1: SerialNumber: syz [ 217.325271][ T5539] usb 5-1: config 0 descriptor?? [ 217.622863][ T21] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 217.667162][ T5539] usb 5-1: USB disconnect, device number 28 [ 217.743301][ T4263] usb 2-1: USB disconnect, device number 40 [ 217.872850][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 218.001676][ T7873] netlink: 'syz.3.1160': attribute type 1 has an invalid length. [ 218.012914][ T21] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.029868][ T21] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.083908][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 218.112714][ T21] usb 3-1: New USB device found, idVendor=045e, idProduct=0730, bcdDevice= 0.00 [ 218.121809][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.187868][ T21] usb 3-1: config 0 descriptor?? [ 218.224291][ T7875] bond15: (slave veth31): Enslaving as an active interface with a down link [ 218.266823][ T7877] bond15: (slave veth33): Enslaving as an active interface with a down link [ 218.275996][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1160'. [ 218.286327][ T7883] netlink: 'syz.4.1163': attribute type 4 has an invalid length. [ 218.323638][ T7883] netlink: 'syz.4.1163': attribute type 4 has an invalid length. [ 218.680043][ T7859] udc-core: couldn't find an available UDC or it's busy [ 218.705221][ T7859] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 218.804522][ T21] usbhid 3-1:0.0: can't add hid device: -71 [ 218.814137][ T21] usbhid: probe of 3-1:0.0 failed with error -71 [ 218.857334][ T21] usb 3-1: USB disconnect, device number 47 [ 219.211416][ T7895] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 219.492464][ T7901] input: syz0 as /devices/virtual/input/input15 [ 219.764618][ T7905] 0: reclassify loop, rule prio 0, protocol 03 [ 219.794139][ C1] sd 0:0:1:0: tag#8236 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 219.804147][ C1] sd 0:0:1:0: tag#8236 CDB: Write(6) 0a 00 00 00 0b 00 00 00 7c 03 00 00 [ 220.008716][ T7912] netlink: 'syz.2.1174': attribute type 1 has an invalid length. [ 220.160381][ T7913] bond9: (slave veth39): Enslaving as an active interface with a down link [ 220.271992][ T7893] syz.3.1167 (7893): drop_caches: 2 [ 220.298022][ T7914] bond9: (slave veth41): Enslaving as an active interface with a down link [ 220.862297][ T7938] device syzkaller0 entered promiscuous mode [ 221.414848][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'. [ 221.435966][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1189'. [ 221.459204][ T7957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.867488][ T7975] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 221.976776][ T7975] bond18: (slave veth47): Enslaving as an active interface with a down link [ 222.015349][ T7979] bond18: (slave veth49): Enslaving as an active interface with a down link [ 222.060643][ T7975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1196'. [ 222.095693][ T7975] 8021q: adding VLAN 0 to HW filter on device bond18 [ 222.111338][ T7977] device syzkaller0 entered promiscuous mode [ 222.170241][ T7980] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 222.455457][ T7994] device syzkaller0 entered promiscuous mode [ 222.639266][ T7997] device syzkaller0 entered promiscuous mode [ 222.937780][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 223.291484][ T8006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1206'. [ 223.312546][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.330269][ T8011] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 223.632334][ T8025] device syzkaller0 entered promiscuous mode [ 223.861695][ T8032] device syzkaller0 entered promiscuous mode [ 224.078885][ T8042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1220'. [ 224.116929][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.124264][ T8042] IPv6: NLM_F_CREATE should be set when creating new route [ 224.131602][ T8042] IPv6: NLM_F_CREATE should be set when creating new route [ 224.183658][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 224.334740][ T8055] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 224.694554][ T8059] bond10: (slave veth43): Enslaving as an active interface with a down link [ 224.848246][ T8055] bond10: (slave veth45): Enslaving as an active interface with a down link [ 224.889440][ T8070] device syzkaller0 entered promiscuous mode [ 225.375553][ T8090] device syzkaller0 entered promiscuous mode [ 225.635275][ T8095] device syzkaller0 entered promiscuous mode [ 225.763980][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 225.797095][ T8103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1239'. [ 225.811499][ T8103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.840940][ T8106] netlink: 'syz.3.1240': attribute type 1 has an invalid length. [ 226.251553][ T8109] bond16: (slave veth35): Enslaving as an active interface with a down link [ 226.354232][ T8112] bond16: (slave veth37): Enslaving as an active interface with a down link [ 226.396166][ T8122] device syzkaller0 entered promiscuous mode [ 226.651262][ T8132] device syzkaller0 entered promiscuous mode [ 227.202559][ T8149] netlink: 'syz.3.1256': attribute type 1 has an invalid length. [ 227.240641][ T8150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1257'. [ 227.254472][ T8150] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.267248][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 227.468514][ T8149] bond17: (slave veth39): Enslaving as an active interface with a down link [ 227.574795][ T8157] bond17: (slave veth41): Enslaving as an active interface with a down link [ 227.629401][ T8160] device syzkaller0 entered promiscuous mode [ 227.962422][ T8168] device syzkaller0 entered promiscuous mode [ 228.499853][ T8192] device syzkaller0 entered promiscuous mode [ 228.512385][ T8190] netlink: 'syz.4.1269': attribute type 1 has an invalid length. [ 228.599762][ T8190] bond14: (slave veth47): Enslaving as an active interface with a down link [ 228.642264][ T8194] bond14: (slave veth49): Enslaving as an active interface with a down link [ 228.874530][ T8202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1273'. [ 228.920941][ T8202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.977565][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 229.191917][ T8211] device syzkaller0 entered promiscuous mode [ 229.614595][ T8222] netlink: 'syz.1.1281': attribute type 1 has an invalid length. [ 229.836293][ T8225] bond19: (slave veth51): Enslaving as an active interface with a down link [ 229.963817][ T8222] bond19: (slave veth53): Enslaving as an active interface with a down link [ 230.050140][ T8235] netlink: 'syz.4.1284': attribute type 4 has an invalid length. [ 230.338966][ T8231] device syzkaller0 entered promiscuous mode [ 230.380132][ T8236] netlink: 'syz.4.1284': attribute type 4 has an invalid length. [ 230.561876][ T8256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1290'. [ 230.584811][ T8256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.592106][ T8256] IPv6: NLM_F_CREATE should be set when creating new route [ 230.599403][ T8256] IPv6: NLM_F_CREATE should be set when creating new route [ 230.661699][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'. [ 230.705833][ T8259] tipc: Enabling of bearer rejected, failed to enable media [ 230.723953][ T8259] device syzkaller0 entered promiscuous mode [ 231.446361][ T8278] netlink: 'syz.3.1296': attribute type 1 has an invalid length. [ 231.770984][ T8284] bond18: (slave veth43): Enslaving as an active interface with a down link [ 231.815799][ T8291] netlink: 'syz.0.1300': attribute type 4 has an invalid length. [ 231.921027][ T8286] bond18: (slave veth45): Enslaving as an active interface with a down link [ 231.986155][ T8293] netlink: 'syz.0.1300': attribute type 4 has an invalid length. [ 232.178702][ T8292] device syzkaller0 entered promiscuous mode [ 232.272823][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1304'. [ 232.282817][ T8306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.305708][ T8304] tipc: Enabling of bearer rejected, failed to enable media [ 232.344291][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 232.423672][ T8304] device syzkaller0 entered promiscuous mode [ 232.964242][ T8333] netlink: 'syz.4.1312': attribute type 1 has an invalid length. [ 233.037494][ T8333] bond15: (slave veth51): Enslaving as an active interface with a down link [ 233.074356][ T8333] bond15: (slave veth53): Enslaving as an active interface with a down link [ 233.668196][ T8353] loop1: detected capacity change from 0 to 4096 [ 233.686507][ T8355] netlink: 'syz.4.1320': attribute type 4 has an invalid length. [ 233.717052][ T8353] EXT4-fs (loop1): Test dummy encryption mode enabled [ 233.747098][ T8355] netlink: 'syz.4.1320': attribute type 4 has an invalid length. [ 233.763515][ T8353] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 233.844483][ T8353] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec19c, mo2=0003] [ 233.896404][ T8353] System zones: 0-5 [ 233.978183][ T8353] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,bsdgroups,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,quota,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 234.338690][ T5539] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 234.659243][ T8379] netlink: 'syz.4.1327': attribute type 1 has an invalid length. [ 234.728186][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1326'. [ 234.763036][ T5539] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.797848][ T8381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.844894][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'. [ 234.873918][ T8384] bond16: (slave veth55): Enslaving as an active interface with a down link [ 234.944853][ T8379] bond16: (slave veth57): Enslaving as an active interface with a down link [ 234.954465][ T8377] AppArmor: change_hat: Invalid input '' [ 234.972890][ T5539] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 235.012845][ T5539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 235.021015][ T5539] usb 4-1: Product: syz [ 235.037604][ T5539] usb 4-1: Manufacturer: syz [ 235.038082][ T8376] device syzkaller1 entered promiscuous mode [ 235.042260][ T5539] usb 4-1: SerialNumber: syz [ 235.223996][ T8394] tipc: Enabling of bearer rejected, failed to enable media [ 235.249554][ T8394] device syzkaller0 entered promiscuous mode [ 235.315353][ T5539] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 235.587614][ T21] usb 4-1: USB disconnect, device number 39 [ 235.593642][ C1] usblp0: nonzero write bulk status received: -71 [ 235.617482][ T21] usblp0: removed [ 235.945106][ T8418] loop1: detected capacity change from 0 to 4096 [ 235.987537][ T8418] EXT4-fs (loop1): Test dummy encryption mode enabled [ 236.005313][ T8418] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 236.067761][ T8418] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec19c, mo2=0003] [ 236.094254][ T8418] System zones: 0-5 [ 236.128891][ T8418] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,bsdgroups,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,quota,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 236.400812][ T8423] netlink: 'syz.3.1338': attribute type 1 has an invalid length. [ 236.691316][ T8427] bond19: (slave veth47): Enslaving as an active interface with a down link [ 236.841372][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 236.875248][ T8428] bond19: (slave veth49): Enslaving as an active interface with a down link [ 236.894232][ T8434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1342'. [ 236.952835][ T8434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.007055][ T8436] tipc: Enabling of bearer rejected, failed to enable media [ 237.058292][ T8442] device syzkaller0 entered promiscuous mode [ 237.331578][ T8446] device syzkaller0 entered promiscuous mode [ 237.935280][ T8477] netlink: 'syz.4.1354': attribute type 4 has an invalid length. [ 237.969621][ T8480] netlink: 'syz.1.1355': attribute type 1 has an invalid length. [ 238.068013][ T8477] netlink: 'syz.4.1354': attribute type 4 has an invalid length. [ 238.137886][ T8482] bond20: (slave veth55): Enslaving as an active interface with a down link [ 238.204272][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 238.279363][ T8488] bond20: (slave veth57): Enslaving as an active interface with a down link [ 238.317925][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1358'. [ 238.380448][ T8491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.413840][ T8480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1355'. [ 238.735216][ T8502] tipc: Enabling of bearer rejected, failed to enable media [ 238.801129][ T8505] device syzkaller0 entered promiscuous mode [ 238.880119][ T8504] device syzkaller0 entered promiscuous mode [ 239.498805][ T8526] netlink: 'syz.4.1370': attribute type 1 has an invalid length. [ 239.565745][ T8526] bond17: (slave veth59): Enslaving as an active interface with a down link [ 239.636035][ T8526] bond17: (slave veth61): Enslaving as an active interface with a down link [ 239.699488][ T8526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1370'. [ 240.063867][ T8539] netlink: 'syz.2.1374': attribute type 4 has an invalid length. [ 240.108294][ T8539] netlink: 'syz.2.1374': attribute type 4 has an invalid length. [ 240.655518][ T8553] tipc: Enabling of bearer rejected, failed to enable media [ 240.743235][ T8553] device syzkaller0 entered promiscuous mode [ 240.851576][ T8555] device syzkaller0 entered promiscuous mode [ 241.257953][ T8564] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 241.413806][ T8568] bond21: (slave veth59): Enslaving as an active interface with a down link [ 241.558134][ T8564] bond21: (slave veth61): Enslaving as an active interface with a down link [ 241.628159][ T8575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1383'. [ 241.659434][ T8583] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1389'. [ 241.709544][ T8582] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1389'. [ 241.870458][ T8593] netlink: 'syz.3.1392': attribute type 4 has an invalid length. [ 241.920584][ T8593] netlink: 'syz.3.1392': attribute type 4 has an invalid length. [ 242.123188][ T13] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 242.517394][ T13] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.616990][ T8598] tipc: Enabling of bearer rejected, failed to enable media [ 242.650698][ T8598] device syzkaller0 entered promiscuous mode [ 242.710071][ T8600] device syzkaller0 entered promiscuous mode [ 242.742968][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 242.769133][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 242.798141][ T13] usb 2-1: Product: syz [ 242.802367][ T13] usb 2-1: Manufacturer: syz [ 242.859439][ T13] usb 2-1: SerialNumber: syz [ 243.134589][ T13] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 243.392785][ C0] usblp0: nonzero write bulk status received: -71 [ 243.399756][ T6074] usb 2-1: USB disconnect, device number 41 [ 243.407632][ T8614] netlink: 'syz.4.1401': attribute type 1 has an invalid length. [ 243.416239][ T6074] usblp0: removed [ 243.711221][ T8617] bond18: (slave veth63): Enslaving as an active interface with a down link [ 243.798641][ T8623] bond18: (slave veth65): Enslaving as an active interface with a down link [ 243.807635][ T21] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 243.924379][ T8632] netlink: 'syz.4.1407': attribute type 4 has an invalid length. [ 243.956801][ T8632] netlink: 'syz.4.1407': attribute type 4 has an invalid length. [ 244.052739][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 244.203117][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 244.432989][ T21] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 244.459384][ T21] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 244.470497][ T21] usb 4-1: Product: syz [ 244.487006][ T21] usb 4-1: Manufacturer: syz [ 244.500208][ T21] usb 4-1: SerialNumber: syz [ 244.728361][ T8644] tipc: Enabling of bearer rejected, failed to enable media [ 244.772866][ T21] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 244.788173][ T21] usb 4-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 244.794420][ T8647] device syzkaller0 entered promiscuous mode [ 244.824213][ T21] usb 4-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 244.842844][ T21] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 244.976172][ T8622] ======================================================= [ 244.976172][ T8622] WARNING: The mand mount option has been deprecated and [ 244.976172][ T8622] and is ignored by this kernel. Remove the mand [ 244.976172][ T8622] option from the mount to silence this warning. [ 244.976172][ T8622] ======================================================= [ 245.043091][ T8651] device syzkaller0 entered promiscuous mode [ 245.088495][ T21] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 245.125022][ T21] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 245.154097][ T21] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 245.186224][ T21] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 245.225120][ T21] usb 4-1: USB disconnect, device number 40 [ 245.253708][ T21] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 245.278948][ T21] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 245.314171][ T21] visor 4-1:1.0: device disconnected [ 245.456161][ T8662] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 245.562467][ T8663] bond11: (slave veth47): Enslaving as an active interface with a down link [ 245.586416][ T8664] bond11: (slave veth49): Enslaving as an active interface with a down link [ 245.713268][ T8673] netlink: 'syz.4.1422': attribute type 4 has an invalid length. [ 245.772454][ T8673] netlink: 'syz.4.1422': attribute type 4 has an invalid length. [ 245.803002][ T13] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 245.881823][ T8685] tipc: Enabling of bearer rejected, failed to enable media [ 245.954133][ T8692] device syzkaller0 entered promiscuous mode [ 246.173101][ T13] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.363260][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 246.382613][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 246.439152][ T13] usb 2-1: Product: syz [ 246.457169][ T13] usb 2-1: Manufacturer: syz [ 246.477075][ T13] usb 2-1: SerialNumber: syz [ 246.533119][ T8704] netlink: 'syz.3.1432': attribute type 1 has an invalid length. [ 246.638224][ T8707] bond20: (slave veth51): Enslaving as an active interface with a down link [ 246.682996][ T21] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 246.695217][ T8704] bond20: (slave veth53): Enslaving as an active interface with a down link [ 246.707792][ T8707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1432'. [ 246.774810][ T13] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 246.821793][ T8706] device syzkaller0 entered promiscuous mode [ 247.032696][ C0] usblp0: nonzero write bulk status received: -71 [ 247.042257][ T4189] usb 2-1: USB disconnect, device number 42 [ 247.065578][ T4189] usblp0: removed [ 247.123082][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.135529][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.153451][ T21] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 247.170693][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.202178][ T21] usb 3-1: config 0 descriptor?? [ 247.228008][ T8723] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 247.295096][ T8730] device syzkaller0 entered promiscuous mode [ 247.470049][ T8702] udc-core: couldn't find an available UDC or it's busy [ 247.482166][ T8702] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 247.635089][ T8737] capability: warning: `syz.0.1441' uses deprecated v2 capabilities in a way that may be insecure [ 247.689507][ T8737] [ 247.691869][ T8737] ====================================================== [ 247.698890][ T8737] WARNING: possible circular locking dependency detected [ 247.706042][ T8737] syzkaller #0 Not tainted [ 247.710485][ T8737] ------------------------------------------------------ [ 247.717526][ T8737] syz.0.1441/8737 is trying to acquire lock: [ 247.723539][ T8737] ffff8880783a8f98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 247.734051][ T8737] [ 247.734051][ T8737] but task is already holding lock: [ 247.741442][ T8737] ffff8880783a93f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 247.750826][ T8737] [ 247.750826][ T8737] which lock already depends on the new lock. [ 247.750826][ T8737] [ 247.761272][ T8737] [ 247.761272][ T8737] the existing dependency chain (in reverse order) is: [ 247.770308][ T8737] [ 247.770308][ T8737] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 247.778020][ T8737] __mutex_lock_common+0x1e5/0x2400 [ 247.783789][ T8737] mutex_lock_nested+0x17/0x20 [ 247.789114][ T8737] hci_dev_do_close+0x5f/0x1020 [ 247.794536][ T8737] hci_rfkill_set_block+0x101/0x180 [ 247.800288][ T8737] rfkill_set_block+0x1c1/0x3c0 [ 247.805703][ T8737] rfkill_fop_write+0x453/0x560 [ 247.811114][ T8737] vfs_write+0x304/0xd70 [ 247.815908][ T8737] ksys_write+0x153/0x260 [ 247.820785][ T8737] do_syscall_64+0x4c/0xa0 [ 247.825751][ T8737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.832220][ T8737] [ 247.832220][ T8737] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 247.840254][ T8737] __mutex_lock_common+0x1e5/0x2400 [ 247.846036][ T8737] mutex_lock_nested+0x17/0x20 [ 247.851361][ T8737] rfkill_register+0x2f/0x970 [ 247.856612][ T8737] hci_register_dev+0x459/0x980 [ 247.862015][ T8737] vhci_create_device+0x32e/0x5c0 [ 247.867603][ T8737] vhci_write+0x389/0x440 [ 247.872500][ T8737] vfs_write+0x748/0xd70 [ 247.877300][ T8737] ksys_write+0x153/0x260 [ 247.882182][ T8737] do_syscall_64+0x4c/0xa0 [ 247.887155][ T8737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.893609][ T8737] [ 247.893609][ T8737] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 247.901462][ T8737] __mutex_lock_common+0x1e5/0x2400 [ 247.907306][ T8737] mutex_lock_nested+0x17/0x20 [ 247.912629][ T8737] vhci_send_frame+0x88/0x100 [ 247.917870][ T8737] hci_send_frame+0x1a9/0x2e0 [ 247.923098][ T8737] hci_tx_work+0x9b5/0x16d0 [ 247.928157][ T8737] process_one_work+0x867/0xff0 [ 247.933559][ T8737] worker_thread+0xad7/0x12a0 [ 247.938791][ T8737] kthread+0x42e/0x520 [ 247.943404][ T8737] ret_from_fork+0x1f/0x30 [ 247.948366][ T8737] [ 247.948366][ T8737] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 247.957612][ T8737] __lock_acquire+0x2c66/0x7b50 [ 247.963033][ T8737] lock_acquire+0x19e/0x400 [ 247.968095][ T8737] __flush_work+0x116/0x210 [ 247.973150][ T8737] hci_dev_do_close+0x201/0x1020 [ 247.978635][ T8737] hci_rfkill_set_block+0x101/0x180 [ 247.984402][ T8737] rfkill_set_block+0x1c1/0x3c0 [ 247.989805][ T8737] rfkill_fop_write+0x453/0x560 [ 247.995207][ T8737] vfs_write+0x304/0xd70 [ 248.000040][ T8737] ksys_write+0x153/0x260 [ 248.004937][ T8737] do_syscall_64+0x4c/0xa0 [ 248.009902][ T8737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.016352][ T8737] [ 248.016352][ T8737] other info that might help us debug this: [ 248.016352][ T8737] [ 248.026653][ T8737] Chain exists of: [ 248.026653][ T8737] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 248.026653][ T8737] [ 248.041635][ T8737] Possible unsafe locking scenario: [ 248.041635][ T8737] [ 248.049109][ T8737] CPU0 CPU1 [ 248.054538][ T8737] ---- ---- [ 248.059940][ T8737] lock(&hdev->req_lock); [ 248.064394][ T8737] lock(rfkill_global_mutex); [ 248.071703][ T8737] lock(&hdev->req_lock); [ 248.078696][ T8737] lock((work_completion)(&hdev->tx_work)); [ 248.084702][ T8737] [ 248.084702][ T8737] *** DEADLOCK *** [ 248.084702][ T8737] [ 248.092861][ T8737] 2 locks held by syz.0.1441/8737: [ 248.097993][ T8737] #0: ffffffff8d6d6128 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 248.108132][ T8737] #1: ffff8880783a93f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 248.117914][ T8737] [ 248.117914][ T8737] stack backtrace: [ 248.123838][ T8737] CPU: 0 PID: 8737 Comm: syz.0.1441 Not tainted syzkaller #0 [ 248.131249][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.141349][ T8737] Call Trace: [ 248.144655][ T8737] [ 248.147609][ T8737] dump_stack_lvl+0x188/0x250 [ 248.152427][ T8737] ? load_image+0x410/0x410 [ 248.156967][ T8737] ? show_regs_print_info+0x20/0x20 [ 248.162207][ T8737] ? print_circular_bug+0x12b/0x1a0 [ 248.167436][ T8737] check_noncircular+0x296/0x330 [ 248.172503][ T8737] ? look_up_lock_class+0x71/0x110 [ 248.177643][ T8737] ? add_chain_block+0x9b0/0x9b0 [ 248.182604][ T8737] ? lockdep_lock+0xf1/0x1f0 [ 248.187240][ T8737] ? mark_lock+0x94/0x320 [ 248.191602][ T8737] ? _find_first_zero_bit+0xd1/0xf0 [ 248.196840][ T8737] __lock_acquire+0x2c66/0x7b50 [ 248.201988][ T8737] ? add_chain_block+0x9b0/0x9b0 [ 248.206975][ T8737] ? lockdep_unlock+0x143/0x2e0 [ 248.211877][ T8737] ? verify_lock_unused+0x140/0x140 [ 248.217118][ T8737] ? mark_lock+0x94/0x320 [ 248.221488][ T8737] ? __lock_acquire+0x1305/0x7b50 [ 248.226560][ T8737] lock_acquire+0x19e/0x400 [ 248.231099][ T8737] ? __flush_work+0xfa/0x210 [ 248.235736][ T8737] ? verify_lock_unused+0x140/0x140 [ 248.240978][ T8737] ? read_lock_is_recursive+0x10/0x10 [ 248.246393][ T8737] __flush_work+0x116/0x210 [ 248.250947][ T8737] ? __flush_work+0xfa/0x210 [ 248.255571][ T8737] ? flush_work+0x20/0x20 [ 248.259934][ T8737] ? rcu_lock_release+0x5/0x20 [ 248.264769][ T8737] ? __lock_acquire+0x7b50/0x7b50 [ 248.269847][ T8737] hci_dev_do_close+0x201/0x1020 [ 248.274936][ T8737] hci_rfkill_set_block+0x101/0x180 [ 248.280175][ T8737] ? rcu_lock_release+0x20/0x20 [ 248.285071][ T8737] rfkill_set_block+0x1c1/0x3c0 [ 248.289962][ T8737] rfkill_fop_write+0x453/0x560 [ 248.294866][ T8737] ? rfkill_fop_read+0x560/0x560 [ 248.299838][ T8737] ? common_file_perm+0x110/0x1c0 [ 248.304897][ T8737] ? fsnotify_perm+0x5d/0x560 [ 248.309603][ T8737] ? security_file_permission+0x75/0xa0 [ 248.315180][ T8737] ? rfkill_fop_read+0x560/0x560 [ 248.320160][ T8737] vfs_write+0x304/0xd70 [ 248.324458][ T8737] ? file_end_write+0x250/0x250 [ 248.329339][ T8737] ? __fget_files+0x402/0x470 [ 248.334055][ T8737] ? __fdget_pos+0x1e2/0x370 [ 248.338667][ T8737] ? ksys_write+0x70/0x260 [ 248.343116][ T8737] ksys_write+0x153/0x260 [ 248.347481][ T8737] ? __ia32_sys_read+0x80/0x80 [ 248.352287][ T8737] ? lockdep_hardirqs_on+0x94/0x140 [ 248.357544][ T8737] do_syscall_64+0x4c/0xa0 [ 248.362020][ T8737] ? clear_bhb_loop+0x30/0x80 [ 248.366749][ T8737] ? clear_bhb_loop+0x30/0x80 [ 248.371473][ T8737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.377429][ T8737] RIP: 0033:0x7f71b07a1159 [ 248.381891][ T8737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.401549][ T8737] RSP: 002b:00007f71ae9d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.410042][ T8737] RAX: ffffffffffffffda RBX: 00007f71b0a29090 RCX: 00007f71b07a1159 [ 248.418083][ T8737] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000009 [ 248.426086][ T8737] RBP: 00007f71b0838024 R08: 0000000000000000 R09: 0000000000000000 [ 248.434103][ T8737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.442119][ T8737] R13: 00007f71b0a29128 R14: 00007f71b0a29090 R15: 00007ffc192fd928 [ 248.450128][ T8737] [ 248.578060][ T21] usbhid 3-1:0.0: can't add hid device: -71 [ 248.591221][ T21] usbhid: probe of 3-1:0.0 failed with error -71 [ 248.616212][ T21] usb 3-1: USB disconnect, device number 48 [ 255.744251][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.750612][ T1420] ieee802154 phy1 wpan1: encryption failed: -22