last executing test programs: 4.48041495s ago: executing program 2 (id=3878): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r0, &(0x7f0000001800)='disconnect', 0xa) 4.429067491s ago: executing program 0 (id=3879): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5d0, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x138, 0x180, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x8) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78) 4.329172024s ago: executing program 2 (id=3881): r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x8001, 0x0) cachestat(r0, 0x0, 0x0, 0x0) unshare(0x26020480) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000)={[{@i_version}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) readahead(r1, 0x3, 0x1) 4.003254852s ago: executing program 2 (id=3882): syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) unshare(0x26020480) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='tmpfs\x00', 0x8c9b, 0x0) 4.000248932s ago: executing program 0 (id=3883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c00030008000100"], 0xcd0}}, 0x0) 3.853871995s ago: executing program 0 (id=3884): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) 3.740163688s ago: executing program 0 (id=3885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2804d}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4894) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008881}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x76, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) 3.66447064s ago: executing program 0 (id=3886): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x59) write$tcp_mem(r0, &(0x7f0000000100)={0xd0, 0x20, 0x3, 0x20, 0x1000000000}, 0x48) fallocate(r0, 0x0, 0x9, 0x10001) truncate(&(0x7f0000000400)='./file1\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x159) 3.098269794s ago: executing program 2 (id=3889): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r0, &(0x7f0000001800)='disconnect', 0xa) 3.026294175s ago: executing program 0 (id=3890): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="a1117e7c21d7", 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.025063755s ago: executing program 2 (id=3891): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000000)='\x00', 0x1, 0xc891, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x1, 0x4) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.063670079s ago: executing program 2 (id=3901): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa0009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="6012d7000000ef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000300)={0x14, &(0x7f0000000140)={0x0, 0x21, 0xaf, {0xaf, 0xf, "5818f2e7554413f29592a540e025910a15ec5e3794a3d98b0bb90dbb044ee6cab1853e85826b477845605a6a59a0a076516ea4beaff8fafc777bab07e23ad097e67fc44e4fabe53dc9f9f1bc33cb48bc75cb2e648df0ba0ba6f5dd37ee953c7dd061992552b5b447f305bf3c65bbfdd175ed67d75ce93f0a715e5504491af994b04f77fdbd1cf92ce3bd33d9fe7c3ad5e1eb629a1deb81b01544fbd908982fce4cf035fe573cff8182fb27272d"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, &(0x7f0000000700)={0x44, &(0x7f00000003c0)={0x0, 0x17, 0xfd, "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"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x81, 0x1, 'D'}, &(0x7f0000000600)={0x20, 0x82, 0x3, "d28090"}, &(0x7f0000000640)={0x20, 0x83, 0x1, '-'}, &(0x7f0000000680)={0x20, 0x84, 0x2, "ad87"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "a69ec2"}}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.888514194s ago: executing program 1 (id=3903): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008018, &(0x7f0000000100)={[{@nombcache}, {@errors_continue}]}, 0xfa, 0x49d, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fstatfs(r0, &(0x7f0000000240)=""/2) 1.698129888s ago: executing program 1 (id=3904): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) 1.495094323s ago: executing program 1 (id=3907): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) 476.416328ms ago: executing program 3 (id=3912): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x29, 0x0, 0x7fff0000}]}) migrate_pages(0x0, 0xfc, 0x0, 0x0) 415.11658ms ago: executing program 3 (id=3913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}, 0x1, 0x0, 0x0, 0x40480d4}, 0x24000000) 369.813291ms ago: executing program 1 (id=3914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 248.283564ms ago: executing program 3 (id=3915): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) 222.185334ms ago: executing program 1 (id=3916): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='\\x01000000 -', 0xc) 202.413695ms ago: executing program 3 (id=3917): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xfe, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 123.054157ms ago: executing program 3 (id=3918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a30000000000500040000000000140007"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) 285.4µs ago: executing program 3 (id=3919): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xa0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}]}}]}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 1 (id=3920): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r3) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r8, &(0x7f0000001100)='md0\x00', 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r9, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000") ioctl(r9, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r9, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000") ioctl(r9, 0x40140921, &(0x7f0000001600)="0200000007000000020000000200000006000000") ioctl(r9, 0x400c0930, 0x0) ioctl(r9, 0x40140921, &(0x7f0000001700)="030000000700000003000000ffffffff020004") kernel console output (not intermixed with test programs): w USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 747.995136][T10603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.003793][T10603] usb 2-1: Product: syz [ 748.015299][T10603] usb 2-1: Manufacturer: syz [ 748.021237][T10603] usb 2-1: SerialNumber: syz [ 748.029639][T10603] usb 2-1: config 0 descriptor?? [ 748.498143][T15217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2868'. [ 750.896143][T15213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2868'. [ 750.978031][T10603] usb 2-1: USB disconnect, device number 85 [ 751.176112][T15221] syzkaller0: entered promiscuous mode [ 751.188967][T15221] syzkaller0: entered allmulticast mode [ 751.209200][T15219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2869'. [ 751.325785][T15219] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2869'. [ 751.352578][T15219] syzkaller0: entered promiscuous mode [ 751.369944][T15219] syzkaller0: entered allmulticast mode [ 751.392117][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.404201][T15219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.604314][T15238] syzkaller0: entered promiscuous mode [ 751.610917][T15238] syzkaller0: entered allmulticast mode [ 752.043076][T15247] syzkaller0: entered promiscuous mode [ 752.052666][T15247] syzkaller0: entered allmulticast mode [ 753.035879][T15268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2879'. [ 755.512010][T15253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2879'. [ 755.721340][T15289] syzkaller0: entered promiscuous mode [ 755.731526][T15289] syzkaller0: entered allmulticast mode [ 756.005174][T15298] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2890'. [ 756.027962][T15298] bridge_slave_0: left allmulticast mode [ 756.033709][T15298] bridge_slave_0: left promiscuous mode [ 756.045356][T15298] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.070080][T15298] bridge_slave_1: left allmulticast mode [ 756.075781][T15298] bridge_slave_1: left promiscuous mode [ 756.081929][T15298] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.105421][T15298] bond0: (slave bond_slave_0): Releasing backup interface [ 756.115254][T10606] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 756.139473][T15298] bond0: (slave bond_slave_1): Releasing backup interface [ 756.225483][T15298] team0: Port device team_slave_0 removed [ 756.294379][T15298] team0: Port device team_slave_1 removed [ 756.301517][T15298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 756.312641][T15298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.329452][T10606] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 756.339867][T15298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 756.354971][T15298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.385567][T15300] netlink: 'syz.2.2890': attribute type 10 has an invalid length. [ 756.447615][T10606] usb 4-1: config 0 interface 0 has no altsetting 0 [ 756.464701][T10606] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 756.479595][T10606] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 756.493140][T10606] usb 4-1: Product: syz [ 756.497625][T10606] usb 4-1: Manufacturer: syz [ 756.525404][T15300] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 756.537049][T10606] usb 4-1: SerialNumber: syz [ 756.574199][T10606] usb 4-1: config 0 descriptor?? [ 756.605650][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2890'. [ 756.633673][T10606] usb 4-1: selecting invalid altsetting 0 [ 756.744912][T15301] bond0: (slave bridge0): Releasing backup interface [ 757.145247][ T27] usb 4-1: USB disconnect, device number 53 [ 757.151400][ C1] usb 4-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 757.160794][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 757.323214][T15313] syzkaller0: entered promiscuous mode [ 757.336982][T15313] syzkaller0: entered allmulticast mode [ 758.338103][T15335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2896'. [ 761.717554][T15320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2896'. [ 762.349508][T15367] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2905'. [ 762.671617][T15371] syzkaller0: entered promiscuous mode [ 762.710678][T15371] syzkaller0: entered allmulticast mode [ 763.639311][T15395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2911'. [ 766.052093][T15381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2911'. [ 766.822657][T15417] syzkaller0: entered promiscuous mode [ 766.829806][T15417] syzkaller0: entered allmulticast mode [ 768.006112][T15442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2926'. [ 770.046098][T13427] Bluetooth: hci0: command 0x0406 tx timeout [ 770.233566][T15430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2926'. [ 770.505077][T15456] autofs4:pid:15456:autofs_fill_super: called with bogus options [ 771.128812][T15475] syzkaller0: entered promiscuous mode [ 771.144160][T15475] syzkaller0: entered allmulticast mode [ 771.927478][T15495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2944'. [ 774.201878][T15482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2944'. [ 774.569543][T15508] syzkaller0: entered promiscuous mode [ 774.579959][T15508] syzkaller0: entered allmulticast mode [ 775.503395][T15529] syzkaller0: entered promiscuous mode [ 775.521527][T15529] syzkaller0: entered allmulticast mode [ 775.991961][T15547] loop0: detected capacity change from 0 to 736 [ 776.898212][T15562] configfs-gadget.g1 gadget.32: FS Playback: Req. wMaxPacketSize 1544 at bInterval 1 > max ISOC 1023, may drop data! [ 778.866637][T10602] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 779.067339][T10602] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 779.088988][T10602] usb 1-1: config 0 interface 0 has no altsetting 0 [ 779.117696][T10602] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 779.136133][T10602] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 779.153496][T10602] usb 1-1: Product: syz [ 779.158040][T10602] usb 1-1: Manufacturer: syz [ 779.162712][T10602] usb 1-1: SerialNumber: syz [ 779.180241][T10602] usb 1-1: config 0 descriptor?? [ 779.207119][T10602] usb 1-1: selecting invalid altsetting 0 [ 779.516066][T10602] usb 1-1: USB disconnect, device number 51 [ 780.135156][T15594] syzkaller0: entered promiscuous mode [ 780.140837][T15594] syzkaller0: entered allmulticast mode [ 785.673708][T15652] syzkaller0: entered promiscuous mode [ 785.686947][T15652] syzkaller0: entered allmulticast mode [ 789.369340][T15700] syzkaller0: entered promiscuous mode [ 789.386871][T15700] syzkaller0: entered allmulticast mode [ 793.022043][T15747] syzkaller0: entered promiscuous mode [ 793.044014][T15747] syzkaller0: entered allmulticast mode [ 793.358584][T15754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3028'. [ 793.479906][T15758] loop3: detected capacity change from 0 to 128 [ 793.671433][T15758] syz.3.3030: attempt to access beyond end of device [ 793.671433][T15758] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 793.705993][T15768] syz.3.3030: attempt to access beyond end of device [ 793.705993][T15768] loop3: rw=1, sector=138, nr_sectors = 2 limit=128 [ 793.719756][T15768] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 795.631994][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 796.432239][T15788] capability: warning: `syz.1.3035' uses 32-bit capabilities (legacy support in use) [ 796.499818][T15792] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3037'. [ 796.516386][T15792] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3037'. [ 796.518799][T15788] program syz.1.3035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 796.537161][T15792] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3037'. [ 796.554157][T15793] loop0: detected capacity change from 0 to 512 [ 796.588639][T15793] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 796.707179][T15793] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.3036: invalid indirect mapped block 4294967295 (level 0) [ 796.805171][T15800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3039'. [ 796.836362][T15802] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3040'. [ 796.851993][T15793] EXT4-fs (loop0): Remounting filesystem read-only [ 796.878036][T15793] EXT4-fs (loop0): 1 orphan inode deleted [ 796.878273][T15802] netlink: 'syz.3.3040': attribute type 10 has an invalid length. [ 796.884019][T15793] EXT4-fs (loop0): 1 truncate cleaned up [ 796.900305][T15793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.947100][T15802] bridge0: left promiscuous mode [ 796.983043][T15802] bridge0: entered promiscuous mode [ 797.016023][T15802] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 797.043493][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3040'. [ 797.084411][T13680] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.327247][T15803] bond0: (slave bridge0): Releasing backup interface [ 797.357833][T15803] bridge0 (unregistering): left promiscuous mode [ 797.711640][T15825] loop2: detected capacity change from 0 to 1024 [ 797.727611][T15825] ======================================================= [ 797.727611][T15825] WARNING: The mand mount option has been deprecated and [ 797.727611][T15825] and is ignored by this kernel. Remove the mand [ 797.727611][T15825] option from the mount to silence this warning. [ 797.727611][T15825] ======================================================= [ 797.782452][T15806] syzkaller0: entered promiscuous mode [ 797.809113][T15806] syzkaller0: entered allmulticast mode [ 797.849798][T15825] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a015c01c, mo2=0002] [ 797.886760][T15825] System zones: 0-1, 3-36 [ 797.897899][T15825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.998713][T14247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.066634][T10606] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 801.136109][T15858] tipc: Started in network mode [ 801.141704][T15858] tipc: Node identity da9ab1cc6db3, cluster identity 4711 [ 801.150574][T15858] tipc: Enabled bearer , priority 0 [ 801.159787][T15858] syzkaller0: entered promiscuous mode [ 801.165320][T15858] syzkaller0: entered allmulticast mode [ 801.176565][T10598] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 801.290509][T10606] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 801.302607][T10606] usb 1-1: config 0 interface 0 has no altsetting 0 [ 801.321804][T10606] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 801.335521][T10606] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 801.344757][T10606] usb 1-1: Product: syz [ 801.353644][T10606] usb 1-1: Manufacturer: syz [ 801.359560][T10606] usb 1-1: SerialNumber: syz [ 801.370784][T10606] usb 1-1: config 0 descriptor?? [ 801.378910][T10598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.394678][T10606] usb 1-1: selecting invalid altsetting 0 [ 801.426193][T10598] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 801.435566][T10598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.456734][ T27] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 801.473740][T10598] usb 3-1: config 0 descriptor?? [ 801.646770][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 801.682233][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.712888][T10598] usbhid 3-1:0.0: can't add hid device: -71 [ 801.725034][ T27] usb 2-1: config 0 has no interfaces? [ 801.735347][T10598] usbhid: probe of 3-1:0.0 failed with error -71 [ 801.749856][T10602] usb 1-1: USB disconnect, device number 52 [ 801.759061][ T27] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 801.777185][T10598] usb 3-1: USB disconnect, device number 77 [ 801.786275][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.801643][ T27] usb 2-1: Product: syz [ 801.813019][ T27] usb 2-1: Manufacturer: syz [ 801.824373][ T27] usb 2-1: SerialNumber: syz [ 801.850237][ T27] usb 2-1: config 0 descriptor?? [ 801.897313][T15864] syzkaller0: entered promiscuous mode [ 801.902873][T15864] syzkaller0: entered allmulticast mode [ 802.080262][T15858] tipc: Resetting bearer [ 802.102907][T10606] usb 2-1: USB disconnect, device number 86 [ 802.113243][T15857] tipc: Resetting bearer [ 802.145498][T15857] tipc: Disabling bearer [ 802.246769][T10602] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 802.416773][T10602] usb 1-1: device descriptor read/64, error -71 [ 802.706703][T10602] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 802.906654][T10602] usb 1-1: device descriptor read/64, error -71 [ 803.046934][T10602] usb usb1-port1: attempt power cycle [ 803.086615][ T27] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 803.276781][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 803.291015][ T27] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 803.314082][ T27] usb 2-1: config 0 has no interface number 0 [ 803.351441][ T27] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 803.371666][ T27] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 803.392879][ T27] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 803.405639][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.428342][ T27] usb 2-1: Product: syz [ 803.434590][ T27] usb 2-1: Manufacturer: syz [ 803.449368][ T27] usb 2-1: SerialNumber: syz [ 803.470525][ T27] usb 2-1: config 0 descriptor?? [ 803.496745][T10602] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 803.513562][T15880] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 803.517272][T15887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.553963][T15880] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 803.567515][T10602] usb 1-1: device descriptor read/8, error -71 [ 803.793640][T15880] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 803.801884][T15880] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 804.017285][ T27] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 804.829323][T15903] tipc: Enabled bearer , priority 0 [ 804.838127][T15903] syzkaller0: entered promiscuous mode [ 804.844486][T15903] syzkaller0: entered allmulticast mode [ 805.036535][T10602] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 805.128367][T10600] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 805.228804][T10602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.240124][T10602] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 805.256727][T10602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.268100][T10602] usb 1-1: config 0 descriptor?? [ 805.331244][T10600] usb 3-1: Using ep0 maxpacket: 8 [ 805.340043][T10600] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.355422][T10600] usb 3-1: config 0 has no interfaces? [ 805.365408][T10600] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 805.377090][T10600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.385247][T10600] usb 3-1: Product: syz [ 805.389900][T10600] usb 3-1: Manufacturer: syz [ 805.394562][T10600] usb 3-1: SerialNumber: syz [ 805.410607][T10600] usb 3-1: config 0 descriptor?? [ 805.493316][T15898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.515536][T15898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.642897][T15903] tipc: Resetting bearer [ 805.661372][T10606] usb 3-1: USB disconnect, device number 78 [ 805.685349][T15902] tipc: Resetting bearer [ 805.719132][T15902] tipc: Disabling bearer [ 805.964126][T10598] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 806.089143][ T27] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 806.106810][ T27] asix: probe of 2-1:0.34 failed with error -71 [ 806.128351][ T27] usb 2-1: USB disconnect, device number 87 [ 806.154544][T10598] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 806.173985][T10598] usb 4-1: config 0 interface 0 has no altsetting 0 [ 806.187612][T10598] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 806.203231][T10598] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 806.212128][T10598] usb 4-1: Product: syz [ 806.216365][T10598] usb 4-1: Manufacturer: syz [ 806.229004][T10598] usb 4-1: SerialNumber: syz [ 806.241089][T10598] usb 4-1: config 0 descriptor?? [ 806.257962][T10598] usb 4-1: selecting invalid altsetting 0 [ 806.576807][T10598] usb 4-1: USB disconnect, device number 54 [ 806.986523][T10598] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 807.156541][T10598] usb 4-1: device descriptor read/64, error -71 [ 807.426577][T10598] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 807.559925][T10602] usbhid 1-1:0.0: can't add hid device: -71 [ 807.590211][T10602] usbhid: probe of 1-1:0.0 failed with error -71 [ 807.606595][T10598] usb 4-1: device descriptor read/64, error -71 [ 807.630683][T15929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.660032][T10602] usb 1-1: USB disconnect, device number 57 [ 807.726910][T10598] usb usb4-port1: attempt power cycle [ 808.166743][T10598] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 808.214947][T10598] usb 4-1: device descriptor read/8, error -71 [ 808.556755][T10598] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 808.597498][T10598] usb 4-1: device descriptor read/8, error -71 [ 808.652350][T15937] tipc: Started in network mode [ 808.670404][T15937] tipc: Node identity fa8b8f357c6c, cluster identity 4711 [ 808.709277][T15937] tipc: Enabled bearer , priority 0 [ 808.727800][T15938] syzkaller0: entered promiscuous mode [ 808.733975][T15938] syzkaller0: entered allmulticast mode [ 808.746872][T10598] usb usb4-port1: unable to enumerate USB device [ 808.915766][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.922438][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.077297][T10606] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 809.296784][T10606] usb 1-1: Using ep0 maxpacket: 8 [ 809.308156][T10606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.336490][T10606] usb 1-1: config 0 has no interfaces? [ 809.351306][T10606] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 809.370891][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.386878][T10606] usb 1-1: Product: syz [ 809.401395][T10606] usb 1-1: Manufacturer: syz [ 809.406073][T10606] usb 1-1: SerialNumber: syz [ 809.434729][T10606] usb 1-1: config 0 descriptor?? [ 809.496508][T10604] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 809.671750][T15937] tipc: Resetting bearer [ 809.706728][T10606] usb 1-1: USB disconnect, device number 58 [ 809.713051][T15936] tipc: Resetting bearer [ 809.736531][T10604] usb 4-1: Using ep0 maxpacket: 16 [ 809.784791][T10604] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 809.803620][T10604] usb 4-1: config 0 has no interface number 0 [ 809.826889][T10604] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 809.856539][T10604] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 809.879355][T10604] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 809.890687][T15936] tipc: Disabling bearer [ 809.896763][T10604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.905075][T10604] usb 4-1: Product: syz [ 809.909449][T10604] usb 4-1: Manufacturer: syz [ 809.914088][T10604] usb 4-1: SerialNumber: syz [ 809.921740][T10604] usb 4-1: config 0 descriptor?? [ 809.930639][T15944] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 809.940577][T15944] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 809.986748][T10602] tipc: Node number set to 2263322421 [ 810.163405][T15944] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 810.171740][T15944] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 810.210518][T15957] netlink: 'syz.1.3093': attribute type 10 has an invalid length. [ 810.218571][T15957] team0: left promiscuous mode [ 810.226996][T15957] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.236658][T15957] team0: entered promiscuous mode [ 810.243152][T15957] bond0: (slave team0): Enslaving as an active interface with an up link [ 810.381512][T10604] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 810.616648][ T27] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 810.755490][T15963] syzkaller0: entered promiscuous mode [ 810.766492][T15963] syzkaller0: entered allmulticast mode [ 810.785345][T10604] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 810.804247][T10604] asix: probe of 4-1:0.34 failed with error -32 [ 810.843576][ T27] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 810.872326][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 810.893829][ T27] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 810.907081][ T27] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 810.915373][ T27] usb 2-1: Product: syz [ 810.936496][ T27] usb 2-1: Manufacturer: syz [ 810.941175][ T27] usb 2-1: SerialNumber: syz [ 810.961816][ T27] usb 2-1: config 0 descriptor?? [ 810.989325][ T27] usb 2-1: selecting invalid altsetting 0 [ 811.334928][ T27] usb 2-1: USB disconnect, device number 88 [ 811.482448][T15980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 811.746595][ T27] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 811.959391][ T27] usb 2-1: config 0 has an invalid descriptor of length 57, skipping remainder of the config [ 811.994595][ T27] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 812.024836][ T27] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 812.053118][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.081197][ T27] usb 2-1: Product: syz [ 812.095573][ T27] usb 2-1: Manufacturer: syz [ 812.100350][ T27] usb 2-1: SerialNumber: syz [ 812.110956][ T27] usb 2-1: config 0 descriptor?? [ 812.304038][ T27] usb 4-1: USB disconnect, device number 59 [ 812.473487][T15984] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3100'. [ 812.495274][T15984] netlink: 'syz.3.3100': attribute type 10 has an invalid length. [ 812.520609][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3100'. [ 813.603298][T10600] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 813.645887][ T27] usb 2-1: USB disconnect, device number 89 [ 813.828033][T16005] syzkaller0: entered promiscuous mode [ 813.833667][T16005] syzkaller0: entered allmulticast mode [ 813.841686][T10600] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 813.858634][T10600] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.879460][T10600] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 813.899558][T10600] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.929473][T10600] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 813.943474][T10600] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 813.952546][T10600] usb 3-1: Product: syz [ 813.957197][T10600] usb 3-1: Manufacturer: syz [ 813.968949][T10600] cdc_wdm 3-1:1.0: skipping garbage [ 813.974563][T10600] cdc_wdm 3-1:1.0: skipping garbage [ 813.998779][T10600] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 814.004768][T10600] cdc_wdm 3-1:1.0: Unknown control protocol [ 814.155002][T16009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3111'. [ 814.164963][ T27] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 814.175979][T16009] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3111'. [ 814.193395][T16009] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3111'. [ 814.366822][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 814.387607][ T27] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 814.395920][ T27] usb 2-1: config 0 has no interface number 0 [ 814.402544][ T27] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 814.413227][ T27] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 814.426922][ T27] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 814.446888][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.466576][ T27] usb 2-1: Product: syz [ 814.472035][ T27] usb 2-1: Manufacturer: syz [ 814.482795][ T27] usb 2-1: SerialNumber: syz [ 814.491899][ T27] usb 2-1: config 0 descriptor?? [ 814.500505][T16003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 814.508551][T16003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 814.740757][T16003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 814.749863][T16003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 814.970606][ T27] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 815.021782][T16021] syzkaller0: entered promiscuous mode [ 815.032399][T16021] syzkaller0: entered allmulticast mode [ 815.372396][ T27] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 815.396991][ T27] asix: probe of 2-1:0.34 failed with error -32 [ 815.616681][T10604] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 815.811915][T10604] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 815.831420][T10604] usb 1-1: config 0 interface 0 has no altsetting 0 [ 815.845383][T10604] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 815.863724][T10604] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 815.874993][T10604] usb 1-1: Product: syz [ 815.885646][T10604] usb 1-1: Manufacturer: syz [ 815.894018][T10604] usb 1-1: SerialNumber: syz [ 815.914941][T10604] usb 1-1: config 0 descriptor?? [ 815.952315][T10604] usb 1-1: selecting invalid altsetting 0 [ 816.283500][T10604] usb 1-1: USB disconnect, device number 59 [ 816.408802][T10603] usb 3-1: USB disconnect, device number 79 [ 816.558550][T16032] tipc: Enabled bearer , priority 0 [ 816.567995][T16032] syzkaller0: entered promiscuous mode [ 816.573528][T16032] syzkaller0: entered allmulticast mode [ 816.720908][T10604] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 816.768076][T10602] usb 2-1: USB disconnect, device number 90 [ 816.849398][T16034] syzkaller0: entered promiscuous mode [ 816.855135][T16034] syzkaller0: entered allmulticast mode [ 816.909574][T10604] usb 1-1: config 0 has an invalid descriptor of length 57, skipping remainder of the config [ 816.936470][T10604] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 816.960242][T10604] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 816.970371][T10603] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 816.978258][T10604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.986784][T10604] usb 1-1: Product: syz [ 817.015257][T10604] usb 1-1: Manufacturer: syz [ 817.038405][T10604] usb 1-1: SerialNumber: syz [ 817.061470][T10604] usb 1-1: config 0 descriptor?? [ 817.186645][T10603] usb 3-1: Using ep0 maxpacket: 8 [ 817.198605][T10603] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.212158][T10603] usb 3-1: config 0 has no interfaces? [ 817.221630][T10603] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 817.262326][T10603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.271560][T10603] usb 3-1: Product: syz [ 817.275824][T10603] usb 3-1: Manufacturer: syz [ 817.280599][T10603] usb 3-1: SerialNumber: syz [ 817.307065][T10603] usb 3-1: config 0 descriptor?? [ 817.530351][T16032] tipc: Resetting bearer [ 817.548846][T10603] usb 3-1: USB disconnect, device number 80 [ 817.555359][T16047] syzkaller0: entered promiscuous mode [ 817.568414][T16047] syzkaller0: entered allmulticast mode [ 817.577737][T16031] tipc: Resetting bearer [ 817.655337][T16031] tipc: Disabling bearer [ 817.989999][T16060] syzkaller0: entered promiscuous mode [ 817.995799][T16060] syzkaller0: entered allmulticast mode [ 818.438242][T10598] usb 1-1: USB disconnect, device number 60 [ 818.770498][T16086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3135'. [ 818.809084][T16086] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3135'. [ 818.994482][T16086] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3135'. [ 819.036933][T16091] netlink: 'syz.0.3136': attribute type 10 has an invalid length. [ 819.053868][T16091] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.061758][T16091] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.103570][T16091] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.110879][T16091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.118551][T16091] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.125813][T16091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.275755][T16091] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 819.360494][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3136'. [ 819.394066][T16094] bridge_slave_1: left allmulticast mode [ 819.436908][T16094] bridge_slave_1: left promiscuous mode [ 819.463155][T16094] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.515179][T16094] bridge_slave_0: left allmulticast mode [ 819.532788][T16094] bridge_slave_0: left promiscuous mode [ 819.555078][T16094] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.687684][T16094] bond0: (slave bridge0): Releasing backup interface [ 819.885914][T16117] syzkaller0: entered promiscuous mode [ 819.891966][T16117] syzkaller0: entered allmulticast mode [ 820.446498][T10603] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 820.679881][T10603] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 820.731094][T10603] usb 2-1: config 0 interface 0 has no altsetting 0 [ 820.741518][T10603] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 820.760202][T10603] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 820.769374][T10603] usb 2-1: Product: syz [ 820.773626][T10603] usb 2-1: Manufacturer: syz [ 820.786219][T10603] usb 2-1: SerialNumber: syz [ 820.804103][T10603] usb 2-1: config 0 descriptor?? [ 820.826597][T10603] usb 2-1: selecting invalid altsetting 0 [ 821.174563][T10602] usb 2-1: USB disconnect, device number 91 [ 821.231813][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 821.586683][T10602] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 821.788845][T10602] usb 2-1: config 0 has an invalid descriptor of length 57, skipping remainder of the config [ 821.799641][T10602] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 821.813099][T10602] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 821.823006][T10602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.831437][T10602] usb 2-1: Product: syz [ 821.835841][T10602] usb 2-1: Manufacturer: syz [ 821.842086][T10602] usb 2-1: SerialNumber: syz [ 821.858560][T10602] usb 2-1: config 0 descriptor?? [ 823.175694][ T790] usb 2-1: USB disconnect, device number 92 [ 823.704985][T16163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.743018][T16167] netlink: 'syz.0.3150': attribute type 10 has an invalid length. [ 823.796358][T16167] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.834665][T16167] bond0: (slave team0): Enslaving as an active interface with an up link [ 823.976066][T16171] syzkaller0: entered promiscuous mode [ 824.023254][T16171] syzkaller0: entered allmulticast mode [ 825.748779][T16200] can0: slcan on ttyS3. [ 825.867225][T16200] can0 (unregistered): slcan off ttyS3. [ 825.896681][T10603] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 826.118930][T16213] syzkaller0: entered promiscuous mode [ 826.132126][T16213] syzkaller0: entered allmulticast mode [ 826.158819][T10603] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 826.200691][T10603] usb 4-1: config 0 interface 0 has no altsetting 0 [ 826.294071][T10603] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 826.303549][T10603] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 826.320776][T10603] usb 4-1: Product: syz [ 826.325042][T10603] usb 4-1: Manufacturer: syz [ 826.354220][T10603] usb 4-1: SerialNumber: syz [ 826.377670][T10603] usb 4-1: config 0 descriptor?? [ 826.391127][T10603] usb 4-1: selecting invalid altsetting 0 [ 826.774582][ T790] usb 4-1: USB disconnect, device number 60 [ 827.256667][ T790] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 827.287767][T16236] netlink: 'syz.1.3161': attribute type 10 has an invalid length. [ 827.305963][T16236] bridge0: left promiscuous mode [ 827.328830][T16236] bridge0: entered promiscuous mode [ 827.338993][T16236] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 827.360319][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3161'. [ 827.370450][T16237] bridge_slave_1: left allmulticast mode [ 827.376486][T16237] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.389016][T16237] bridge_slave_0: left allmulticast mode [ 827.395216][T16237] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.508735][ T790] usb 4-1: config 0 has an invalid descriptor of length 26, skipping remainder of the config [ 827.523376][T16237] bond0: (slave bridge0): Releasing backup interface [ 827.532978][ T790] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 827.568884][T16237] bridge0 (unregistering): left promiscuous mode [ 827.578590][ T790] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 827.590910][ T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.599590][ T790] usb 4-1: Product: syz [ 827.603891][ T790] usb 4-1: Manufacturer: syz [ 827.608725][ T790] usb 4-1: SerialNumber: syz [ 827.616522][ T790] usb 4-1: config 0 descriptor?? [ 827.625688][ T790] dm9601: probe of 4-1:0.0 failed with error -22 [ 828.356608][ T790] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 828.557903][ T790] usb 3-1: no configurations [ 828.565354][ T790] usb 3-1: can't read configurations, error -22 [ 828.727361][ T790] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 828.927098][T10603] usb 4-1: USB disconnect, device number 61 [ 828.980174][ T790] usb 3-1: no configurations [ 828.989012][ T790] usb 3-1: can't read configurations, error -22 [ 829.022811][ T790] usb usb3-port1: attempt power cycle [ 829.070320][T16268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 829.186170][T16271] syzkaller0: entered promiscuous mode [ 829.208692][T16271] syzkaller0: entered allmulticast mode [ 829.451372][ T790] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 829.553063][ T790] usb 3-1: no configurations [ 829.562108][ T790] usb 3-1: can't read configurations, error -22 [ 829.766657][ T790] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 830.019432][ T790] usb 3-1: no configurations [ 830.024117][ T790] usb 3-1: can't read configurations, error -22 [ 830.090730][ T790] usb usb3-port1: unable to enumerate USB device [ 832.206577][T10604] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 832.396597][T16314] syzkaller0: entered promiscuous mode [ 832.402314][T16314] syzkaller0: entered allmulticast mode [ 832.420143][T10604] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 832.442235][T10604] usb 3-1: config 0 interface 0 has no altsetting 0 [ 832.479968][T10604] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 832.499543][T10604] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 832.516543][T10604] usb 3-1: Product: syz [ 832.540564][T10604] usb 3-1: Manufacturer: syz [ 832.545261][T10604] usb 3-1: SerialNumber: syz [ 832.580627][T10604] usb 3-1: config 0 descriptor?? [ 832.599659][T10604] usb 3-1: selecting invalid altsetting 0 [ 832.836639][T10602] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 832.949750][T10603] usb 3-1: USB disconnect, device number 85 [ 833.049040][T10602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.103316][T10602] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 833.125389][T10602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.155118][T10602] usb 2-1: config 0 descriptor?? [ 833.389610][T10602] usbhid 2-1:0.0: can't add hid device: -71 [ 833.399417][T10602] usbhid: probe of 2-1:0.0 failed with error -71 [ 833.426637][T10602] usb 2-1: USB disconnect, device number 93 [ 833.442937][T10603] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 833.624008][T16345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.639052][T10603] usb 3-1: config 0 has an invalid descriptor of length 26, skipping remainder of the config [ 833.684348][T10603] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 833.719032][T10603] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 833.730672][T10603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.747941][T10603] usb 3-1: Product: syz [ 833.757300][T10603] usb 3-1: Manufacturer: syz [ 833.768857][T10603] usb 3-1: SerialNumber: syz [ 833.793030][T10603] usb 3-1: config 0 descriptor?? [ 833.808602][T10603] dm9601: probe of 3-1:0.0 failed with error -22 [ 833.903641][T16206] Set syz1 is full, maxelem 65536 reached [ 833.956534][T10602] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 834.168705][T10602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.190128][T10602] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 834.209929][T10602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.227631][T10602] usb 2-1: config 0 descriptor?? [ 834.848273][T16357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3181'. [ 835.078544][ T27] usb 3-1: USB disconnect, device number 86 [ 835.087601][T10602] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 835.237963][T10602] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 835.738079][T10602] usb 2-1: USB disconnect, device number 94 [ 835.738170][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 835.954001][T16366] syzkaller0: entered promiscuous mode [ 835.960966][T16366] syzkaller0: entered allmulticast mode [ 836.034791][T16368] syzkaller0: entered promiscuous mode [ 836.051134][T16368] syzkaller0: entered allmulticast mode [ 836.232666][T16371] can0: slcan on ttyS3. [ 836.308590][T16374] can0 (unregistered): slcan off ttyS3. [ 836.724466][T10603] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 836.833886][T16393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.939598][T10603] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 836.966660][T10603] usb 2-1: config 0 interface 0 has no altsetting 0 [ 836.993804][T10603] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 837.016301][T10603] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 837.065699][T10603] usb 2-1: Product: syz [ 837.118340][T10603] usb 2-1: Manufacturer: syz [ 837.139070][T10603] usb 2-1: SerialNumber: syz [ 837.158019][T10603] usb 2-1: config 0 descriptor?? [ 837.173624][T10603] usb 2-1: selecting invalid altsetting 0 [ 837.498255][T10598] usb 2-1: USB disconnect, device number 95 [ 837.976648][T10598] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 838.218346][T10598] usb 2-1: config 0 has an invalid descriptor of length 26, skipping remainder of the config [ 838.229029][T10598] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 838.259984][T10598] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 838.295395][T10598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.327052][T10598] usb 2-1: Product: syz [ 838.339884][T10598] usb 2-1: Manufacturer: syz [ 838.349105][T10598] usb 2-1: SerialNumber: syz [ 838.368825][T10598] usb 2-1: config 0 descriptor?? [ 838.389321][T10598] dm9601: probe of 2-1:0.0 failed with error -22 [ 838.606963][T16405] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3194'. [ 838.642649][T16405] i2c i2c-0: Invalid block write size 59 [ 838.689274][T16405] lo: entered promiscuous mode [ 838.794449][T16405] tunl0: entered promiscuous mode [ 838.853396][T16405] gre0: entered promiscuous mode [ 839.109667][T16405] gretap0: entered promiscuous mode [ 839.177840][T16405] erspan0: entered promiscuous mode [ 839.548485][T16405] ip_vti0: entered promiscuous mode [ 839.609290][T16405] ip6_vti0: entered promiscuous mode [ 839.672945][T16405] sit0: entered promiscuous mode [ 839.675598][T10598] usb 2-1: USB disconnect, device number 96 [ 839.829934][T16405] ip6tnl0: entered promiscuous mode [ 839.898533][T16405] ip6gre0: entered promiscuous mode [ 839.943862][T16405] syz_tun: entered promiscuous mode [ 839.991187][T16405] ip6gretap0: entered promiscuous mode [ 840.088543][T16405] vcan0: entered promiscuous mode [ 840.134915][T16405] bond0: entered promiscuous mode [ 840.147170][T16405] bond_slave_0: entered promiscuous mode [ 840.155629][T16405] bond_slave_1: entered promiscuous mode [ 840.164051][T16405] team0: entered promiscuous mode [ 840.189288][T16405] team_slave_0: entered promiscuous mode [ 840.205586][T16405] team_slave_1: entered promiscuous mode [ 840.319051][T16405] dummy0: entered promiscuous mode [ 840.378167][T16405] nlmon0: entered promiscuous mode [ 840.393825][T16405] caif0: entered promiscuous mode [ 840.432346][T16405] batadv0: entered promiscuous mode [ 840.511123][T16405] vxcan0: entered promiscuous mode [ 840.527831][T16405] vxcan1: entered promiscuous mode [ 840.543496][T16405] veth0: entered promiscuous mode [ 840.582856][T16405] veth1: entered promiscuous mode [ 840.617938][T16405] wg0: entered promiscuous mode [ 840.644565][T16405] wg1: entered promiscuous mode [ 840.763757][T16405] wg2: entered promiscuous mode [ 840.806002][T16405] veth0_to_bridge: entered promiscuous mode [ 840.881482][T16405] bridge_slave_0: entered promiscuous mode [ 840.948135][T16405] veth1_to_bridge: entered promiscuous mode [ 841.016016][T16405] bridge_slave_1: entered promiscuous mode [ 841.052681][T16405] veth0_to_bond: entered promiscuous mode [ 841.152541][T16405] veth1_to_bond: entered promiscuous mode [ 841.223930][T16405] veth0_to_team: entered promiscuous mode [ 841.324222][T16405] veth1_to_team: entered promiscuous mode [ 841.402014][T16405] veth0_to_batadv: entered promiscuous mode [ 841.434952][T16405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.488630][T16405] batadv_slave_0: entered promiscuous mode [ 841.531737][T16405] veth1_to_batadv: entered promiscuous mode [ 841.567768][T16405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.595839][T16405] batadv_slave_1: entered promiscuous mode [ 841.633411][T16405] xfrm0: entered promiscuous mode [ 841.670594][T16405] veth0_to_hsr: entered promiscuous mode [ 841.732435][T16405] veth1_to_hsr: entered promiscuous mode [ 841.825153][T16405] hsr0: entered promiscuous mode [ 841.882734][T16405] veth1_virt_wifi: entered promiscuous mode [ 841.944349][T16405] veth0_virt_wifi: entered promiscuous mode [ 841.959564][T16405] virt_wifi0: entered promiscuous mode [ 842.072212][T16371] Set syz1 is full, maxelem 65536 reached [ 842.085134][T16405] vlan0: entered promiscuous mode [ 842.107787][T16405] vlan1: entered promiscuous mode [ 842.148090][T16405] macvlan0: entered promiscuous mode [ 842.210622][T16405] macvlan1: entered promiscuous mode [ 842.243859][T16405] ipvlan0: entered promiscuous mode [ 842.268383][T16405] ipvlan1: entered promiscuous mode [ 842.335121][T16405] macvtap0: entered promiscuous mode [ 842.365205][T16405] macsec0: entered promiscuous mode [ 842.395711][T16405] geneve0: entered promiscuous mode [ 842.426122][T16405] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.442154][T16405] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.451869][T16405] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.481666][T16405] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.492134][T16405] geneve1: entered promiscuous mode [ 842.530269][T16405] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 842.567222][T16405] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 842.594712][T16405] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 842.620055][T16405] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 842.652494][T16405] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 842.688896][T16405] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 842.868339][T16416] syzkaller0: entered promiscuous mode [ 842.873906][T16416] syzkaller0: entered allmulticast mode [ 843.296868][T10598] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 843.514764][T10598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.537353][T10598] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 843.546655][T10598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.557412][T10598] usb 3-1: config 0 descriptor?? [ 843.783299][T10598] usbhid 3-1:0.0: can't add hid device: -71 [ 843.801083][T10598] usbhid: probe of 3-1:0.0 failed with error -71 [ 843.821137][T10598] usb 3-1: USB disconnect, device number 87 [ 844.394609][T10598] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 844.612026][T10598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.623252][T10598] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 844.632523][T10598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.644315][T10598] usb 3-1: config 0 descriptor?? [ 845.497685][T10598] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 845.509906][T10598] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 845.884823][T10598] usb 3-1: USB disconnect, device number 88 [ 845.884904][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 846.051075][T16431] syzkaller0: entered promiscuous mode [ 846.057279][T16431] syzkaller0: entered allmulticast mode [ 846.679453][T16466] can0: slcan on ttyS3. [ 846.719321][T16467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.808567][T16466] can0 (unregistered): slcan off ttyS3. [ 846.850710][T16466] Set syz1 is full, maxelem 65536 reached [ 846.916583][ T27] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 847.124497][ T27] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 847.155983][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 847.185954][ T27] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 847.216547][ T27] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 847.248727][T16479] tipc: Started in network mode [ 847.258359][ T27] usb 3-1: Product: syz [ 847.262657][ T27] usb 3-1: Manufacturer: syz [ 847.275634][T16479] tipc: Node identity 02095f1b48d7, cluster identity 4711 [ 847.336660][ T27] usb 3-1: SerialNumber: syz [ 847.358235][T16479] tipc: Enabled bearer , priority 0 [ 847.387786][ T27] usb 3-1: config 0 descriptor?? [ 847.400695][T16482] syzkaller0: entered promiscuous mode [ 847.410497][ T27] usb 3-1: selecting invalid altsetting 0 [ 847.431559][T16482] syzkaller0: entered allmulticast mode [ 847.706642][T10598] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 847.769513][T10600] usb 3-1: USB disconnect, device number 89 [ 847.906613][T10598] usb 4-1: Using ep0 maxpacket: 8 [ 847.983119][T10598] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.995134][T10598] usb 4-1: config 0 has no interfaces? [ 848.007698][T10598] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 848.017171][T10598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.025319][T10598] usb 4-1: Product: syz [ 848.030463][T10598] usb 4-1: Manufacturer: syz [ 848.035130][T10598] usb 4-1: SerialNumber: syz [ 848.075665][T10598] usb 4-1: config 0 descriptor?? [ 848.277593][T16499] syzkaller0: entered promiscuous mode [ 848.283151][T16499] syzkaller0: entered allmulticast mode [ 848.329814][T16479] tipc: Resetting bearer [ 848.358941][T10600] usb 4-1: USB disconnect, device number 62 [ 848.410001][T16478] tipc: Resetting bearer [ 848.489692][T16478] tipc: Disabling bearer [ 848.926036][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3209'. [ 848.963035][T16514] syzkaller0: entered promiscuous mode [ 848.969417][T16514] syzkaller0: entered allmulticast mode [ 849.555268][T16533] syzkaller0: entered promiscuous mode [ 849.561329][T16533] syzkaller0: entered allmulticast mode [ 849.715954][T16537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.766828][T10600] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 849.977176][T10600] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 849.989676][T10600] usb 1-1: config 0 interface 0 has no altsetting 0 [ 850.009084][T10600] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 850.029776][T10600] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 850.045038][T10600] usb 1-1: Product: syz [ 850.055592][T10600] usb 1-1: Manufacturer: syz [ 850.067472][T10600] usb 1-1: SerialNumber: syz [ 850.079855][T10600] usb 1-1: config 0 descriptor?? [ 850.096214][T10600] usb 1-1: selecting invalid altsetting 0 [ 850.447884][ T9] usb 1-1: USB disconnect, device number 61 [ 850.661662][T16548] tipc: Enabled bearer , priority 0 [ 850.672626][T16548] syzkaller0: entered promiscuous mode [ 850.680206][T16548] syzkaller0: entered allmulticast mode [ 850.859557][T16550] syzkaller0: entered promiscuous mode [ 850.865417][T16550] syzkaller0: entered allmulticast mode [ 850.999542][T10606] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 851.011165][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 851.206912][T10606] usb 4-1: Using ep0 maxpacket: 8 [ 851.216165][ T9] usb 1-1: config 0 has an invalid descriptor of length 26, skipping remainder of the config [ 851.238905][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 851.249639][T10606] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.265753][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 851.280890][T10606] usb 4-1: config 0 has no interfaces? [ 851.290342][T10606] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 851.307293][T10606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.315595][ T9] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 851.325440][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.333917][T10606] usb 4-1: Product: syz [ 851.358579][T10606] usb 4-1: Manufacturer: syz [ 851.363366][ T9] usb 1-1: Product: syz [ 851.376502][T10606] usb 4-1: SerialNumber: syz [ 851.381403][ T9] usb 1-1: Manufacturer: syz [ 851.398236][ T9] usb 1-1: SerialNumber: syz [ 851.408631][T10606] usb 4-1: config 0 descriptor?? [ 851.429921][ T9] usb 1-1: config 0 descriptor?? [ 851.435974][T16530] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 851.465834][ T9] dm9601: probe of 1-1:0.0 failed with error -22 [ 851.613740][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'. [ 851.631305][T16548] tipc: Resetting bearer [ 851.658000][ T9] usb 4-1: USB disconnect, device number 63 [ 851.678555][T16547] tipc: Resetting bearer [ 851.757445][T16547] tipc: Disabling bearer [ 852.460922][T16581] syzkaller0: entered promiscuous mode [ 852.466979][T16581] syzkaller0: entered allmulticast mode [ 852.758704][T16585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.769056][ T27] usb 1-1: USB disconnect, device number 62 [ 853.775030][T16608] syzkaller0: entered promiscuous mode [ 853.780849][T16608] syzkaller0: entered allmulticast mode [ 853.909156][T16609] tipc: Enabled bearer , priority 0 [ 853.927096][T16609] syzkaller0: entered promiscuous mode [ 853.940838][T16609] syzkaller0: entered allmulticast mode [ 854.356532][ T27] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 854.366614][ T9] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 854.567294][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 854.575530][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.582828][ T9] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 854.589156][ T27] usb 1-1: config 0 has no interfaces? [ 854.614877][ T27] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 854.624441][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 854.627550][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.639778][ T27] usb 1-1: Product: syz [ 854.644171][ T27] usb 1-1: Manufacturer: syz [ 854.650669][ T27] usb 1-1: SerialNumber: syz [ 854.668273][ T27] usb 1-1: config 0 descriptor?? [ 854.678425][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 854.699708][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 854.714300][ T9] usb 2-1: Product: syz [ 854.719024][ T9] usb 2-1: Manufacturer: syz [ 854.723721][ T9] usb 2-1: SerialNumber: syz [ 854.736902][ T9] usb 2-1: config 0 descriptor?? [ 854.748385][ T9] usb 2-1: selecting invalid altsetting 0 [ 854.883837][T16609] tipc: Resetting bearer [ 854.911324][T10600] usb 1-1: USB disconnect, device number 63 [ 854.941874][T16606] tipc: Resetting bearer [ 855.015304][T16606] tipc: Disabling bearer [ 855.114005][ T9] usb 2-1: USB disconnect, device number 97 [ 855.506681][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 855.672348][T16644] syzkaller0: entered promiscuous mode [ 855.678141][T16644] syzkaller0: entered allmulticast mode [ 855.735754][ T9] usb 2-1: config 0 has an invalid descriptor of length 26, skipping remainder of the config [ 855.754252][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 855.764724][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 855.815535][ T9] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 855.827507][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.842303][ T9] usb 2-1: Product: syz [ 855.848177][ T9] usb 2-1: Manufacturer: syz [ 855.857108][ T9] usb 2-1: SerialNumber: syz [ 855.884418][ T9] usb 2-1: config 0 descriptor?? [ 855.904986][T16613] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 855.921918][ T9] dm9601: probe of 2-1:0.0 failed with error -22 [ 856.104996][T16652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.463925][T16659] syzkaller0: entered promiscuous mode [ 856.474784][T16659] syzkaller0: entered allmulticast mode [ 857.085054][T16665] tipc: Enabled bearer , priority 0 [ 857.093457][T16665] syzkaller0: entered promiscuous mode [ 857.099606][T16665] syzkaller0: entered allmulticast mode [ 857.214318][ T9] usb 2-1: USB disconnect, device number 98 [ 857.406852][T10606] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 857.529043][T16672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3263'. [ 857.616562][T10606] usb 4-1: Using ep0 maxpacket: 8 [ 857.686925][T10606] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.707815][T10606] usb 4-1: config 0 has no interfaces? [ 857.720339][T10606] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 857.739718][T10606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.758383][T10606] usb 4-1: Product: syz [ 857.764790][T10606] usb 4-1: Manufacturer: syz [ 857.783287][T10606] usb 4-1: SerialNumber: syz [ 857.795821][T10606] usb 4-1: config 0 descriptor?? [ 857.852380][T16676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3265'. [ 857.862939][T16676] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3265'. [ 857.886970][T16676] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3265'. [ 857.903916][T16676] syzkaller0: entered promiscuous mode [ 857.909826][T16676] syzkaller0: entered allmulticast mode [ 858.037141][T16665] tipc: Resetting bearer [ 858.049022][T10606] usb 4-1: USB disconnect, device number 64 [ 858.065686][T16664] tipc: Resetting bearer [ 858.131384][T16664] tipc: Disabling bearer [ 858.158553][T16680] can0: slcan on ttyS3. [ 858.218530][T16680] can0 (unregistered): slcan off ttyS3. [ 858.291157][T10602] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 858.481639][T10602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.513090][T10602] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 858.534796][T10602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.556116][T10602] usb 2-1: config 0 descriptor?? [ 858.801925][T10602] usbhid 2-1:0.0: can't add hid device: -71 [ 858.823082][T10602] usbhid: probe of 2-1:0.0 failed with error -71 [ 858.897183][T10602] usb 2-1: USB disconnect, device number 99 [ 859.346810][T10600] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 859.426594][T10602] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 859.533884][T16695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3272'. [ 859.562915][T10600] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 859.594725][T10600] usb 4-1: config 0 interface 0 has no altsetting 0 [ 859.611170][T10600] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 859.629202][T10600] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 859.646513][T10600] usb 4-1: Product: syz [ 859.652861][T10602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.659816][T10600] usb 4-1: Manufacturer: syz [ 859.676496][T10600] usb 4-1: SerialNumber: syz [ 859.684135][T10602] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 859.703043][T10600] usb 4-1: config 0 descriptor?? [ 859.718060][T10602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.735241][T10602] usb 2-1: config 0 descriptor?? [ 859.741198][T10600] usb 4-1: selecting invalid altsetting 0 [ 859.917825][T16699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.088240][T10600] usb 4-1: USB disconnect, device number 65 [ 860.546600][T10600] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 860.614097][T10602] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 860.671603][T10602] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 860.768042][T10600] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 860.786862][T10600] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 860.837963][T10600] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 860.881521][T10600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.918082][T10600] usb 4-1: Product: syz [ 860.945682][T10600] usb 4-1: Manufacturer: syz [ 860.972245][T10600] usb 4-1: SerialNumber: syz [ 861.014260][T10600] usb 4-1: config 0 descriptor?? [ 861.037425][T16691] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 861.052205][T10600] dm9601: probe of 4-1:0.0 failed with error -22 [ 861.173985][T10600] usb 2-1: USB disconnect, device number 100 [ 861.173984][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 862.391314][T10598] usb 4-1: USB disconnect, device number 66 [ 862.586733][T16711] syzkaller0: entered promiscuous mode [ 862.592294][T16711] syzkaller0: entered allmulticast mode [ 863.259398][T16722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3281'. [ 863.453080][T16724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3282'. [ 863.495649][T16724] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3282'. [ 863.536030][T16724] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3282'. [ 863.570776][T16724] syzkaller0: entered promiscuous mode [ 863.581663][T16724] syzkaller0: entered allmulticast mode [ 863.719919][T16728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.583228][T10602] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 864.709041][T16735] syzkaller0: entered promiscuous mode [ 864.764072][T16735] syzkaller0: entered allmulticast mode [ 864.850004][T10602] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 864.953514][T10602] usb 2-1: config 0 interface 0 has no altsetting 0 [ 864.974570][T10602] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 864.986455][T10602] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 865.014447][T10602] usb 2-1: Product: syz [ 865.024539][T10602] usb 2-1: Manufacturer: syz [ 865.029961][T10602] usb 2-1: SerialNumber: syz [ 865.046063][T10602] usb 2-1: config 0 descriptor?? [ 865.071071][T10602] usb 2-1: selecting invalid altsetting 0 [ 865.485589][T10598] usb 2-1: USB disconnect, device number 101 [ 865.789067][T16680] Set syz1 is full, maxelem 65536 reached [ 865.824287][T16748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3291'. [ 865.906620][T10598] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 866.051126][T16753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3293'. [ 866.061889][T16753] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3293'. [ 866.073022][T16753] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3293'. [ 866.091839][T16753] syzkaller0: entered promiscuous mode [ 866.098056][T16753] syzkaller0: entered allmulticast mode [ 866.108282][T10598] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 866.123391][T10598] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 866.164002][T10598] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 866.175317][T10598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.184248][T10598] usb 2-1: Product: syz [ 866.193341][T10598] usb 2-1: Manufacturer: syz [ 866.203023][T10598] usb 2-1: SerialNumber: syz [ 866.212379][T10598] usb 2-1: config 0 descriptor?? [ 866.224364][T16733] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 866.235963][T10598] dm9601: probe of 2-1:0.0 failed with error -22 [ 866.813827][T16763] syzkaller0: entered promiscuous mode [ 866.825555][T16763] syzkaller0: entered allmulticast mode [ 867.109789][T16771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.385093][T16777] can0: slcan on ttyS3. [ 867.435427][T16780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3302'. [ 867.506066][T16780] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3302'. [ 867.530521][T16781] Set syz1 is full, maxelem 65536 reached [ 867.543159][T16778] can0 (unregistered): slcan off ttyS3. [ 867.573617][T16780] syzkaller0: entered promiscuous mode [ 867.593467][ T27] usb 2-1: USB disconnect, device number 102 [ 867.600920][T16780] syzkaller0: entered allmulticast mode [ 868.516775][T16800] syzkaller0: entered promiscuous mode [ 868.522407][T16800] syzkaller0: entered allmulticast mode [ 869.017058][T16806] __nla_validate_parse: 1 callbacks suppressed [ 869.017077][T16806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3312'. [ 869.064426][T16806] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3312'. [ 869.112343][T16806] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3312'. [ 869.147045][T16806] syzkaller0: entered promiscuous mode [ 869.173435][T16806] syzkaller0: entered allmulticast mode [ 869.276731][T10602] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 869.450541][T16819] can0: slcan on ttyS3. [ 869.487694][T10602] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 869.500636][T10602] usb 2-1: config 0 interface 0 has no altsetting 0 [ 869.512144][T10602] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 869.535999][T10602] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 869.553039][T10602] usb 2-1: Product: syz [ 869.557839][T10602] usb 2-1: Manufacturer: syz [ 869.562598][T10602] usb 2-1: SerialNumber: syz [ 869.569580][T16819] can0 (unregistered): slcan off ttyS3. [ 869.592535][T10602] usb 2-1: config 0 descriptor?? [ 869.603063][T16819] Set syz1 is full, maxelem 65536 reached [ 869.618210][T10602] usb 2-1: selecting invalid altsetting 0 [ 869.933645][ T27] usb 2-1: USB disconnect, device number 103 [ 870.352236][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.359092][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.456751][ T27] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 870.658849][T16851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.686630][ T27] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 870.726777][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 870.825355][ T27] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 870.866667][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.948380][ T27] usb 2-1: Product: syz [ 871.030691][ T27] usb 2-1: Manufacturer: syz [ 871.050764][ T27] usb 2-1: SerialNumber: syz [ 871.071850][ T27] usb 2-1: config 0 descriptor?? [ 871.090595][T16805] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 871.109804][ T27] dm9601: probe of 2-1:0.0 failed with error -22 [ 871.140486][T16861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3325'. [ 871.185155][T16864] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3325'. [ 871.205702][T16861] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3325'. [ 871.234780][T16861] syzkaller0: entered promiscuous mode [ 871.249110][T16861] syzkaller0: entered allmulticast mode [ 872.424629][T10602] usb 2-1: USB disconnect, device number 104 [ 872.699922][T16890] can0: slcan on ttyS3. [ 872.805189][T16890] can0 (unregistered): slcan off ttyS3. [ 873.476020][T16905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3334'. [ 873.510450][T16905] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3334'. [ 873.541074][T16905] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3334'. [ 873.574196][T16905] syzkaller0: entered promiscuous mode [ 873.596566][T16905] syzkaller0: entered allmulticast mode [ 873.956710][ T27] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 874.107049][T10598] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 874.169223][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.186630][ T27] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 874.219890][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.263729][ T27] usb 4-1: config 0 descriptor?? [ 874.319065][T10598] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 874.349975][T10598] usb 3-1: config 0 interface 0 has no altsetting 0 [ 874.379350][T10598] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 874.389044][T10598] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 874.407691][T10598] usb 3-1: Product: syz [ 874.436628][T10598] usb 3-1: Manufacturer: syz [ 874.441422][T10598] usb 3-1: SerialNumber: syz [ 874.498151][T10598] usb 3-1: config 0 descriptor?? [ 874.516616][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 874.532948][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 874.541158][T10598] usb 3-1: selecting invalid altsetting 0 [ 874.559293][ T27] usb 4-1: USB disconnect, device number 67 [ 874.842708][T10602] usb 3-1: USB disconnect, device number 90 [ 875.096518][ T27] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 875.200417][T16935] fuse: Bad value for 'fd' [ 875.213145][T16935] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3339'. [ 875.237313][T16935] i2c i2c-0: Invalid block write size 59 [ 875.344398][T10602] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 875.360146][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.384468][ T27] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 875.401484][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.482999][ T27] usb 4-1: config 0 descriptor?? [ 875.568701][T10602] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 875.587088][T10602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 15073, setting to 64 [ 875.622615][T10602] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 875.651466][T10602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.659716][T10602] usb 3-1: Product: syz [ 875.663989][T10602] usb 3-1: Manufacturer: syz [ 875.675872][T10602] usb 3-1: SerialNumber: syz [ 875.684045][T10602] usb 3-1: config 0 descriptor?? [ 875.701671][T16914] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 875.714760][T10602] dm9601: probe of 3-1:0.0 failed with error -22 [ 876.382770][ T27] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 876.400965][ T27] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 876.678922][T16952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 876.828128][ T790] usb 4-1: USB disconnect, device number 68 [ 876.834127][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 876.977629][T10602] usb 3-1: USB disconnect, device number 91 [ 878.525815][T16971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3346'. [ 878.607200][T16973] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3346'. [ 878.646824][T16971] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3346'. [ 878.675245][T16971] syzkaller0: entered promiscuous mode [ 878.689411][T16971] syzkaller0: entered allmulticast mode [ 878.931653][T16979] syzkaller0: entered promiscuous mode [ 878.937441][T16979] syzkaller0: entered allmulticast mode [ 879.709754][T17003] loop2: detected capacity change from 0 to 512 [ 879.716819][ T790] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 879.775659][T17003] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.3351: corrupted in-inode xattr: invalid ea_ino [ 879.839400][T17003] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.3351: couldn't read orphan inode 15 (err -117) [ 879.909460][T17003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 879.921975][ T790] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 879.922014][ T790] usb 1-1: config 0 interface 0 has no altsetting 0 [ 879.937071][ T790] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 879.954233][ T790] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 879.976824][ T790] usb 1-1: Product: syz [ 879.981088][ T790] usb 1-1: Manufacturer: syz [ 879.995979][ T790] usb 1-1: SerialNumber: syz [ 880.020670][ T790] usb 1-1: config 0 descriptor?? [ 880.032436][ T790] usb 1-1: selecting invalid altsetting 0 [ 880.185720][T14247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.371104][ T790] usb 1-1: USB disconnect, device number 64 [ 880.797069][ T790] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 880.851810][T16890] Set syz1 is full, maxelem 65536 reached [ 881.003686][ T790] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 881.014151][T17033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.057857][ T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 15073, setting to 64 [ 881.087880][ T790] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 881.145814][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.181984][ T790] usb 1-1: Product: syz [ 881.191359][T17037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3357'. [ 881.201553][ T790] usb 1-1: Manufacturer: syz [ 881.206316][ T790] usb 1-1: SerialNumber: syz [ 881.218980][T17037] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3357'. [ 881.233213][ T790] usb 1-1: config 0 descriptor?? [ 881.247466][T16995] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 881.261556][T17037] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3357'. [ 881.285216][ T790] dm9601: probe of 1-1:0.0 failed with error -22 [ 881.372083][T17037] syzkaller0: entered promiscuous mode [ 881.431290][T17037] syzkaller0: entered allmulticast mode [ 881.512684][T17047] syzkaller0: entered promiscuous mode [ 881.522400][T17047] syzkaller0: entered allmulticast mode [ 881.795762][T17052] 0: reclassify loop, rule prio 0, protocol 03 [ 882.394960][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3361'. [ 882.613504][T10602] usb 1-1: USB disconnect, device number 65 [ 882.739091][T17071] loop1: detected capacity change from 0 to 512 [ 882.762423][T17071] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.3362: corrupted in-inode xattr: invalid ea_ino [ 882.777354][T17071] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3362: couldn't read orphan inode 15 (err -117) [ 882.864067][T17071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.108163][T17078] can0: slcan on ttyS3. [ 883.143517][T14581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.229492][T17079] can0 (unregistered): slcan off ttyS3. [ 883.270462][T17078] Set syz1 is full, maxelem 65536 reached [ 883.347312][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3366'. [ 883.631585][T17090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3366'. [ 884.254258][T17094] 0: reclassify loop, rule prio 0, protocol 03 [ 884.757227][ T27] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 884.959347][ T27] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 884.970845][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 884.982179][ T27] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 884.992269][ T27] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 885.001927][ T27] usb 2-1: Product: syz [ 885.009538][ T27] usb 2-1: Manufacturer: syz [ 885.026086][ T27] usb 2-1: SerialNumber: syz [ 885.050501][ T27] usb 2-1: config 0 descriptor?? [ 885.084869][ T27] usb 2-1: selecting invalid altsetting 0 [ 885.094459][T17115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.407183][T10606] usb 2-1: USB disconnect, device number 105 [ 885.574941][T17119] netlink: 'syz.0.3378': attribute type 10 has an invalid length. [ 885.697497][T17121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3379'. [ 885.986157][T17123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3379'. [ 886.714752][T10606] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 886.856877][T17125] can0: slcan on ttyS3. [ 886.918430][T10606] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 886.946521][T17125] can0 (unregistered): slcan off ttyS3. [ 886.993034][T10606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 15073, setting to 64 [ 887.047203][T17127] Set syz1 is full, maxelem 65536 reached [ 887.055931][T10606] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 887.092026][T10606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.120752][T10606] usb 2-1: Product: syz [ 887.165942][T10606] usb 2-1: Manufacturer: syz [ 887.195881][T10606] usb 2-1: SerialNumber: syz [ 887.247414][T10606] usb 2-1: config 0 descriptor?? [ 887.287476][T17098] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 887.335877][T10606] dm9601: probe of 2-1:0.0 failed with error -22 [ 887.455568][T17136] 0: reclassify loop, rule prio 0, protocol 03 [ 887.596754][ T790] usb 2-1: USB disconnect, device number 106 [ 888.247269][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3387'. [ 888.317892][T17155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3388'. [ 888.663657][T17161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3388'. [ 889.569677][T17172] can0: slcan on ttyS3. [ 889.697760][T17172] can0 (unregistered): slcan off ttyS3. [ 889.727056][T17172] Set syz1 is full, maxelem 65536 reached [ 890.295425][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3399'. [ 890.306752][T17198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.317144][T17201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3398'. [ 890.607479][T17204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3398'. [ 892.607954][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3409'. [ 892.831587][T17239] can0: slcan on ttyS3. [ 892.882739][T17243] netlink: 'syz.0.3413': attribute type 10 has an invalid length. [ 892.917408][T17239] can0 (unregistered): slcan off ttyS3. [ 892.965888][T17239] Set syz1 is full, maxelem 65536 reached [ 893.418430][T17263] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3418'. [ 893.547076][T17265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 893.948175][T17273] netlink: 'syz.2.3423': attribute type 10 has an invalid length. [ 893.968657][T17273] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.986036][T17273] bond0: (slave team0): Enslaving as an active interface with an up link [ 894.158488][T17277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3426'. [ 894.589642][T17283] syzkaller0: entered promiscuous mode [ 894.595180][T17283] syzkaller0: entered allmulticast mode [ 895.055923][T17291] can0: slcan on ttyS3. [ 895.147835][T17291] can0 (unregistered): slcan off ttyS3. [ 895.207358][T17291] Set syz1 is full, maxelem 65536 reached [ 895.492240][T17300] syzkaller0: entered promiscuous mode [ 895.505664][T17300] syzkaller0: entered allmulticast mode [ 895.693328][T17307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3437'. [ 898.687107][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3441'. [ 898.779951][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3444'. [ 898.913000][T17341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 898.989521][T17345] can0: slcan on ttyS3. [ 899.038633][T17345] can0 (unregistered): slcan off ttyS3. [ 899.061276][T17345] Set syz1 is full, maxelem 65536 reached [ 899.373542][T17353] syzkaller0: entered promiscuous mode [ 899.380137][T17353] syzkaller0: entered allmulticast mode [ 900.975220][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3454'. [ 902.785585][T17403] Set syz1 is full, maxelem 65536 reached [ 903.314181][T17400] can0: slcan on ttyS3. [ 903.363733][T17401] can0 (unregistered): slcan off ttyS3. [ 903.724080][T17416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.149129][T17430] syzkaller0: entered promiscuous mode [ 904.154961][T17430] syzkaller0: entered allmulticast mode [ 904.737940][T17442] can0: slcan on ttyS3. [ 904.936310][T17446] Set syz1 is full, maxelem 65536 reached [ 904.957387][T17442] can0 (unregistered): slcan off ttyS3. [ 905.550194][T17456] syzkaller0: entered promiscuous mode [ 905.555752][T17456] syzkaller0: entered allmulticast mode [ 906.261731][ T42] tipc: Left network mode [ 906.427018][T17486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.669729][T17496] Set syz1 is full, maxelem 65536 reached [ 906.697865][T17488] can0: slcan on ttyS3. [ 906.847061][T17491] can0 (unregistered): slcan off ttyS3. [ 907.007504][T17489] syzkaller0: entered promiscuous mode [ 907.026914][T17489] syzkaller0: entered allmulticast mode [ 908.361303][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'. [ 909.778074][T17541] Set syz1 is full, maxelem 65536 reached [ 910.626063][T17535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3501'. [ 910.657286][T17538] can0: slcan on ttyS3. [ 910.716870][T17539] can0 (unregistered): slcan off ttyS3. [ 910.910685][T17550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3505'. [ 910.921279][T17550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3505'. [ 911.124204][T17554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.276194][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3507'. [ 911.754023][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.778451][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.797564][ T42] bridge_slave_1: left allmulticast mode [ 911.803688][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.829593][ T42] bridge_slave_0: left allmulticast mode [ 911.869032][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.313445][ T42] team0 (unregistering): Port device team_slave_1 removed [ 913.413802][ T42] team0 (unregistering): Port device team_slave_0 removed [ 913.483733][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.545689][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.661155][T17596] Set syz1 is full, maxelem 65536 reached [ 914.002214][ T42] bond0 (unregistering): Released all slaves [ 914.132766][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3515'. [ 914.142613][T17588] syzkaller0: entered promiscuous mode [ 914.148384][T17588] syzkaller0: entered allmulticast mode [ 914.171057][T17593] can0: slcan on ttyS3. [ 914.347835][T17594] can0 (unregistered): slcan off ttyS3. [ 914.502156][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3518'. [ 914.865434][T17613] autofs4:pid:17613:autofs_fill_super: called with bogus options [ 914.896766][T10600] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 915.098020][T17617] syzkaller0: entered promiscuous mode [ 915.106596][T10600] usb 3-1: Using ep0 maxpacket: 16 [ 915.113766][T17617] syzkaller0: entered allmulticast mode [ 915.137996][T10600] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.176446][T10600] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 915.203162][T10600] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 915.217934][T10600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.226319][T10600] usb 3-1: Product: syz [ 915.235528][T10600] usb 3-1: Manufacturer: syz [ 915.241139][T17619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.254754][T10600] usb 3-1: SerialNumber: syz [ 915.297372][T10600] usb 3-1: config 0 descriptor?? [ 915.405529][T17621] syzkaller0: entered promiscuous mode [ 915.441145][T17621] syzkaller0: entered allmulticast mode [ 915.924373][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3530'. [ 917.330439][T17644] can0: slcan on ttyS3. [ 917.427204][T17644] can0 (unregistered): slcan off ttyS3. [ 917.468420][T17644] Set syz1 is full, maxelem 65536 reached [ 917.719699][T10604] usb 3-1: USB disconnect, device number 92 [ 917.976082][T17657] syzkaller0: entered promiscuous mode [ 917.988016][T17657] syzkaller0: entered allmulticast mode [ 918.391362][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3542'. [ 918.556637][T10604] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 918.745517][T17677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 918.768876][T10604] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.779441][T10606] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 918.788533][T10604] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 918.803451][T10604] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 918.813607][T10604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.827474][T10604] usb 2-1: config 0 descriptor?? [ 918.983311][T10606] usb 1-1: Using ep0 maxpacket: 16 [ 919.001824][T10606] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 919.014391][T10606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.034510][T10606] usb 1-1: config 0 has no interface number 0 [ 919.048479][T10604] usb 2-1: USB disconnect, device number 107 [ 919.054849][T10606] usb 1-1: config 0 interface 34 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 919.072314][T10606] usb 1-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.101034][T10606] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 919.117267][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.125557][T10606] usb 1-1: Product: syz [ 919.130502][T10606] usb 1-1: Manufacturer: syz [ 919.141167][T10606] usb 1-1: SerialNumber: syz [ 919.151026][T10606] usb 1-1: config 0 descriptor?? [ 919.164171][T10606] asix: probe of 1-1:0.34 failed with error -22 [ 919.426035][T17683] can0: slcan on ttyS3. [ 919.486930][T17683] can0 (unregistered): slcan off ttyS3. [ 919.499731][T17683] Set syz1 is full, maxelem 65536 reached [ 919.616706][T10604] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 919.818527][T10604] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.837797][T10604] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 919.848636][T10604] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 919.858197][T10604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.870323][T10604] usb 2-1: config 0 descriptor?? [ 920.206260][T17691] syzkaller0: entered promiscuous mode [ 920.212466][T17691] syzkaller0: entered allmulticast mode [ 920.513049][T17703] netlink: 'syz.3.3554': attribute type 10 has an invalid length. [ 921.015660][T17713] can0: slcan on ttyS3. [ 921.077973][T17713] can0 (unregistered): slcan off ttyS3. [ 921.095547][T17713] Set syz1 is full, maxelem 65536 reached [ 921.244014][T17723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.555187][ T790] usb 1-1: USB disconnect, device number 66 [ 923.131217][T10604] usb 2-1: USB disconnect, device number 108 [ 923.343947][T17747] netlink: 'syz.0.3566': attribute type 10 has an invalid length. [ 923.678751][T17751] can0: slcan on ttyS3. [ 923.686835][ T790] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 923.748693][T17751] can0 (unregistered): slcan off ttyS3. [ 923.758457][T17751] Set syz1 is full, maxelem 65536 reached [ 923.876721][ T790] usb 3-1: Using ep0 maxpacket: 16 [ 923.884128][ T790] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 923.906462][ T790] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.920693][ T790] usb 3-1: config 0 has no interface number 0 [ 923.927026][ T790] usb 3-1: config 0 interface 34 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 923.937845][ T790] usb 3-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 923.958495][ T790] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 923.986843][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.994925][ T790] usb 3-1: Product: syz [ 924.003395][ T790] usb 3-1: Manufacturer: syz [ 924.008262][ T790] usb 3-1: SerialNumber: syz [ 924.017351][ T790] usb 3-1: config 0 descriptor?? [ 924.033187][ T790] asix: probe of 3-1:0.34 failed with error -22 [ 924.543956][T17771] loop3: detected capacity change from 0 to 128 [ 924.587257][T17775] netlink: 'syz.0.3579': attribute type 10 has an invalid length. [ 924.605114][T17771] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 924.631156][T17771] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.753004][T11516] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 925.044040][T17792] can0: slcan on ttyS3. [ 925.128002][T17792] can0 (unregistered): slcan off ttyS3. [ 925.157401][T17792] Set syz1 is full, maxelem 65536 reached [ 925.797573][T17820] netlink: 'syz.0.3597': attribute type 10 has an invalid length. [ 925.920440][T17823] loop3: detected capacity change from 0 to 512 [ 925.941886][T17823] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.3598: bad orphan inode 15 [ 925.954904][T17823] ext4_test_bit(bit=14, block=5) = 0 [ 925.962202][T17823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.048227][T11516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.515142][ T27] usb 3-1: USB disconnect, device number 93 [ 926.721836][T17846] can0: slcan on ttyS3. [ 926.808226][T17846] can0 (unregistered): slcan off ttyS3. [ 926.827353][T17850] Set syz1 is full, maxelem 65536 reached [ 926.990333][T17859] netlink: 'syz.1.3612': attribute type 10 has an invalid length. [ 927.376591][T10604] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 927.422070][T17865] syzkaller0: entered promiscuous mode [ 927.427696][T17865] syzkaller0: entered allmulticast mode [ 927.594284][T10604] usb 4-1: Using ep0 maxpacket: 16 [ 927.625597][T10604] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 927.636409][T10604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.678396][T10604] usb 4-1: config 0 has no interface number 0 [ 927.690399][T10604] usb 4-1: config 0 interface 34 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 927.704236][T10604] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 927.727941][T10604] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 927.742903][T10604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.751452][T10604] usb 4-1: Product: syz [ 927.755678][T10604] usb 4-1: Manufacturer: syz [ 927.767505][T10604] usb 4-1: SerialNumber: syz [ 927.775537][T10604] usb 4-1: config 0 descriptor?? [ 927.793144][T10604] asix: probe of 4-1:0.34 failed with error -22 [ 927.927485][T17880] fuse: Bad value for 'user_id' [ 927.949309][T17880] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3622'. [ 927.978578][T17880] i2c i2c-0: Invalid block write size 59 [ 928.009000][T17880] lo: entered promiscuous mode [ 928.089581][T17880] tunl0: entered promiscuous mode [ 928.121097][T17880] gre0: entered promiscuous mode [ 928.233483][T17880] gretap0: entered promiscuous mode [ 928.274986][T17880] erspan0: entered promiscuous mode [ 928.303256][T17880] ip_vti0: entered promiscuous mode [ 928.325961][T17880] ip6_vti0: entered promiscuous mode [ 928.353877][T17880] sit0: entered promiscuous mode [ 928.410588][T17880] ip6tnl0: entered promiscuous mode [ 928.417228][T17891] Set syz1 is full, maxelem 65536 reached [ 928.443836][T17880] ip6gre0: entered promiscuous mode [ 928.478651][T17880] syz_tun: entered promiscuous mode [ 928.508582][T17880] ip6gretap0: entered promiscuous mode [ 928.538912][T17880] vcan0: entered promiscuous mode [ 928.552671][T17880] bond0: entered promiscuous mode [ 928.557975][T17880] team0: entered promiscuous mode [ 928.594661][T17880] dummy0: entered promiscuous mode [ 928.623359][T17880] nlmon0: entered promiscuous mode [ 928.637740][T17880] caif0: entered promiscuous mode [ 928.651336][T17880] batadv0: entered promiscuous mode [ 928.680692][T17880] vxcan0: entered promiscuous mode [ 928.695295][T17880] vxcan1: entered promiscuous mode [ 928.709799][T17880] veth0: entered promiscuous mode [ 928.738638][T17880] veth1: entered promiscuous mode [ 928.772186][T17880] wg0: entered promiscuous mode [ 928.793855][T17880] wg1: entered promiscuous mode [ 928.816074][T17880] wg2: entered promiscuous mode [ 928.838098][T17880] veth0_to_bridge: entered promiscuous mode [ 928.867390][T17880] bridge_slave_0: entered promiscuous mode [ 928.889247][T17880] veth1_to_bridge: entered promiscuous mode [ 928.922415][T17880] bridge_slave_1: entered promiscuous mode [ 928.942411][T17880] veth0_to_bond: entered promiscuous mode [ 928.958424][T17880] bond_slave_0: entered promiscuous mode [ 928.978637][T17880] veth1_to_bond: entered promiscuous mode [ 928.994576][T17880] bond_slave_1: entered promiscuous mode [ 929.014162][T17880] veth0_to_team: entered promiscuous mode [ 929.029624][T17880] team_slave_0: entered promiscuous mode [ 929.048694][T17880] veth1_to_team: entered promiscuous mode [ 929.063402][T17880] team_slave_1: entered promiscuous mode [ 929.084224][T17880] veth0_to_batadv: entered promiscuous mode [ 929.120122][T17880] batadv_slave_0: entered promiscuous mode [ 929.149217][T17880] veth1_to_batadv: entered promiscuous mode [ 929.178494][T17880] batadv_slave_1: entered promiscuous mode [ 929.198885][T17880] xfrm0: entered promiscuous mode [ 929.211861][T17880] veth0_to_hsr: entered promiscuous mode [ 929.279519][T17880] veth1_to_hsr: entered promiscuous mode [ 929.327717][T17880] hsr0: entered promiscuous mode [ 929.356863][T17880] veth1_virt_wifi: entered promiscuous mode [ 929.385407][T17880] veth0_virt_wifi: entered promiscuous mode [ 929.407252][T17880] virt_wifi0: entered promiscuous mode [ 929.475566][T17880] vlan0: entered promiscuous mode [ 929.496730][T17880] vlan1: entered promiscuous mode [ 929.527549][T17880] macvlan0: entered promiscuous mode [ 929.555529][T17880] macvlan1: entered promiscuous mode [ 929.569048][T17880] ipvlan0: entered promiscuous mode [ 929.574520][T17880] ipvlan1: entered promiscuous mode [ 929.647860][T17880] macvtap0: entered promiscuous mode [ 929.685204][T17880] macsec0: entered promiscuous mode [ 929.714287][T17880] geneve0: entered promiscuous mode [ 929.744147][T17880] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.754023][T17880] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.763114][T17880] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.772771][T17880] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.782370][T17880] geneve1: entered promiscuous mode [ 929.811145][T17880] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 929.837037][T17880] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 929.860333][T17880] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 929.891344][T17880] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 929.918310][T17880] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 929.945214][T17880] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 929.975164][T17888] can0: slcan on ttyS3. [ 930.059176][T17889] can0 (unregistered): slcan off ttyS3. [ 930.203514][T10606] usb 4-1: USB disconnect, device number 69 [ 930.320666][T17907] netlink: 'syz.3.3628': attribute type 10 has an invalid length. [ 930.329205][T17907] team0: left promiscuous mode [ 930.337139][T17907] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.348110][T17907] team0: entered promiscuous mode [ 930.353832][T17907] bond0: (slave team0): Enslaving as an active interface with an up link [ 930.626458][T10600] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 930.836521][T10600] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.880732][T10600] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 930.917531][T10600] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 930.952689][T10600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.983653][T10600] usb 2-1: config 0 descriptor?? [ 931.157470][T17930] netlink: 'syz.2.3636': attribute type 1 has an invalid length. [ 931.215763][T10604] usb 2-1: USB disconnect, device number 109 [ 931.249034][T17930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 931.279628][T17932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3636'. [ 931.364653][T17932] veth3: entered allmulticast mode [ 931.374011][T17932] bond1: (slave veth3): Enslaving as an active interface with a down link [ 931.456833][T17930] veth0_to_bond: left promiscuous mode [ 931.466294][T17930] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 931.495502][T17930] macvlan2: entered promiscuous mode [ 931.501284][T17930] macvlan2: entered allmulticast mode [ 931.508231][T17930] bond1: entered promiscuous mode [ 931.514192][T17930] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 931.522806][T17930] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 931.541824][T17930] bond1: left promiscuous mode [ 931.790661][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.797407][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.836481][T10604] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 931.975118][T17944] can0: slcan on ttyS3. [ 932.058879][T10604] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.094848][T10604] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 932.104276][T17944] can0 (unregistered): slcan off ttyS3. [ 932.123977][T17951] fuse: Bad value for 'fd' [ 932.131213][T10604] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 932.152795][T17944] Set syz1 is full, maxelem 65536 reached [ 932.173044][T17951] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3643'. [ 932.186677][T10604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.207723][T10604] usb 2-1: config 0 descriptor?? [ 932.219238][T17951] i2c i2c-0: Invalid block write size 59 [ 932.347374][T17951] ipip0: entered promiscuous mode [ 932.460410][T17963] netlink: 'syz.0.3645': attribute type 10 has an invalid length. [ 933.440628][T17994] fuse: Bad value for 'fd' [ 933.498170][T17994] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3654'. [ 933.529906][T17994] i2c i2c-0: Invalid block write size 59 [ 933.907009][T18008] can0: slcan on ttyS3. [ 933.986459][T18010] can0 (unregistered): slcan off ttyS3. [ 934.014143][T18008] Set syz1 is full, maxelem 65536 reached [ 934.125565][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'. [ 934.677789][T10604] usb 2-1: USB disconnect, device number 110 [ 935.089878][T18039] fuse: Bad value for 'fd' [ 935.160972][T18039] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3666'. [ 935.208967][T18039] i2c i2c-0: Invalid block write size 59 [ 935.506854][T10598] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 935.612805][T18053] can0: slcan on ttyS3. [ 935.707027][T10598] usb 4-1: Using ep0 maxpacket: 16 [ 935.716562][T18053] can0 (unregistered): slcan off ttyS3. [ 935.737984][T10598] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 935.756621][T10598] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.767977][T18053] Set syz1 is full, maxelem 65536 reached [ 935.779737][T10598] usb 4-1: config 0 has no interface number 0 [ 935.786058][T10598] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 935.827343][T10598] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.860203][T10598] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 935.894175][T10598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.921732][T10598] usb 4-1: Product: syz [ 935.936762][T10598] usb 4-1: Manufacturer: syz [ 935.941446][T10598] usb 4-1: SerialNumber: syz [ 935.988379][T10598] usb 4-1: config 0 descriptor?? [ 935.995791][T18041] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 936.008989][T10598] asix: probe of 4-1:0.34 failed with error -22 [ 936.185989][T18065] loop0: detected capacity change from 0 to 512 [ 936.243283][T18065] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.3677: bad orphan inode 15 [ 936.279743][T18065] ext4_test_bit(bit=14, block=5) = 0 [ 936.307214][T18065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.503194][T13680] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.678228][T18077] fuse: Bad value for 'fd' [ 936.709579][T18077] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3679'. [ 936.738467][T18077] i2c i2c-0: Invalid block write size 59 [ 936.754606][T18077] netdevsim netdevsim10 eth0: entered promiscuous mode [ 937.081167][T18089] can0: slcan on ttyS3. [ 937.104382][T18091] netlink: 'syz.0.3687': attribute type 10 has an invalid length. [ 937.137014][T18089] can0 (unregistered): slcan off ttyS3. [ 937.148197][T18089] Set syz1 is full, maxelem 65536 reached [ 937.166744][T18094] loop2: detected capacity change from 0 to 512 [ 937.196322][T18094] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.3688: bad orphan inode 15 [ 937.211239][T18094] ext4_test_bit(bit=14, block=5) = 0 [ 937.239488][T18094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.339225][T14247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.763763][T18119] fuse: Bad value for 'fd' [ 937.777749][T18119] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3692'. [ 937.827830][T18119] i2c i2c-0: Invalid block write size 59 [ 937.906983][T18123] loop2: detected capacity change from 0 to 512 [ 937.994103][T18123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.037439][T18123] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 938.138949][T14247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.361080][T18134] xt_hashlimit: size too large, truncated to 1048576 [ 938.370007][T10600] usb 4-1: USB disconnect, device number 70 [ 938.425910][T18138] sg_write: data in/out 200860/136 bytes for SCSI command 0x0-- guessing data in; [ 938.425910][T18138] program syz.2.3696 not setting count and/or reply_len properly [ 938.670963][T18148] netlink: 'syz.1.3700': attribute type 10 has an invalid length. [ 938.885562][T18153] can0: slcan on ttyS3. [ 938.967489][T18153] can0 (unregistered): slcan off ttyS3. [ 938.985705][T18153] Set syz1 is full, maxelem 65536 reached [ 940.476467][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 940.697112][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 940.724374][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 940.747509][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.779749][ T9] usb 3-1: config 0 has no interface number 0 [ 940.785956][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 940.800074][ T9] usb 3-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 940.822310][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 940.834056][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.848918][ T9] usb 3-1: Product: syz [ 940.853443][ T9] usb 3-1: Manufacturer: syz [ 940.862178][ T9] usb 3-1: SerialNumber: syz [ 940.888483][ T9] usb 3-1: config 0 descriptor?? [ 940.899517][T18176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 940.927827][ T9] asix: probe of 3-1:0.34 failed with error -22 [ 941.002059][T18186] netlink: 'syz.3.3711': attribute type 10 has an invalid length. [ 941.613083][T18195] can0: slcan on ttyS3. [ 941.710525][T18195] can0 (unregistered): slcan off ttyS3. [ 941.732050][T18195] Set syz1 is full, maxelem 65536 reached [ 942.998152][T18213] syzkaller0: entered promiscuous mode [ 943.003708][T18213] syzkaller0: entered allmulticast mode [ 943.095324][T18215] netlink: 'syz.0.3721': attribute type 10 has an invalid length. [ 943.327528][T10598] usb 3-1: USB disconnect, device number 94 [ 943.336281][T18223] syzkaller0: entered promiscuous mode [ 943.344739][T18223] syzkaller0: entered allmulticast mode [ 943.584948][T18228] syzkaller0: entered promiscuous mode [ 943.603942][T18228] syzkaller0: entered allmulticast mode [ 943.751000][T18238] netlink: 'syz.3.3730': attribute type 10 has an invalid length. [ 943.995702][T18247] syzkaller0: entered promiscuous mode [ 944.011974][T18247] syzkaller0: entered allmulticast mode [ 944.370278][T10602] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 944.464930][T18266] netlink: 'syz.0.3740': attribute type 10 has an invalid length. [ 944.597063][T10602] usb 2-1: Using ep0 maxpacket: 16 [ 944.630863][T10602] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 944.653616][T18272] syzkaller0: entered promiscuous mode [ 944.661540][T10602] usb 2-1: config 0 has no interface number 0 [ 944.677428][T18272] syzkaller0: entered allmulticast mode [ 944.686536][T10602] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 944.726781][T10602] usb 2-1: config 0 interface 34 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 944.759488][T10602] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 944.780969][T10602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.799439][T10602] usb 2-1: Product: syz [ 944.807740][T10602] usb 2-1: Manufacturer: syz [ 944.812777][T10602] usb 2-1: SerialNumber: syz [ 944.827467][T10602] usb 2-1: config 0 descriptor?? [ 944.833492][T18251] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 944.861533][T10602] asix: probe of 2-1:0.34 failed with error -22 [ 945.188559][T18290] syzkaller0: entered promiscuous mode [ 945.211189][T18290] syzkaller0: entered allmulticast mode [ 945.609949][T18302] netlink: 'syz.2.3750': attribute type 10 has an invalid length. [ 946.025043][T18316] loop3: detected capacity change from 0 to 1024 [ 946.091322][T15573] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 946.195360][T18320] syzkaller0: entered promiscuous mode [ 946.213139][T18320] syzkaller0: entered allmulticast mode [ 946.482923][T18329] syzkaller0: entered promiscuous mode [ 946.489555][T18329] syzkaller0: entered allmulticast mode [ 946.613967][T18333] netlink: 'syz.2.3759': attribute type 10 has an invalid length. [ 946.796561][T18340] ieee802154 phy0 wpan0: encryption failed: -22 [ 947.040976][T18351] syzkaller0: entered promiscuous mode [ 947.055379][T18351] syzkaller0: entered allmulticast mode [ 947.156136][ T9] usb 2-1: USB disconnect, device number 111 [ 947.670777][T18366] syzkaller0: entered promiscuous mode [ 947.691195][T18366] syzkaller0: entered allmulticast mode [ 948.147735][T18384] syzkaller0: entered promiscuous mode [ 948.161986][T18384] syzkaller0: entered allmulticast mode [ 948.336845][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 948.557818][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 948.574191][ T9] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 948.593014][ T9] usb 1-1: config 0 has no interface number 0 [ 948.609728][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 948.649470][ T9] usb 1-1: config 0 interface 34 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 948.709080][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 948.728901][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.745575][ T9] usb 1-1: Product: syz [ 948.755704][ T9] usb 1-1: Manufacturer: syz [ 948.764839][ T9] usb 1-1: SerialNumber: syz [ 948.807519][ T9] usb 1-1: config 0 descriptor?? [ 948.815798][T18403] loop1: detected capacity change from 0 to 764 [ 948.841209][T18382] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 948.860756][ T9] asix: probe of 1-1:0.34 failed with error -22 [ 949.164936][T18415] syzkaller0: entered promiscuous mode [ 949.173368][T18415] syzkaller0: entered allmulticast mode [ 949.397937][T18423] tun0: tun_chr_ioctl cmd 21731 [ 949.825452][T18440] loop3: detected capacity change from 0 to 512 [ 949.849742][T18440] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.3796: bad orphan inode 15 [ 949.870164][T18440] ext4_test_bit(bit=14, block=5) = 0 [ 949.878291][T18440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.976719][T11516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.267441][T18455] tipc: Enabled bearer , priority 10 [ 951.078563][ T9] usb 1-1: USB disconnect, device number 67 [ 951.386560][ T790] tipc: Node number set to 1256087323 [ 951.568298][T18497] loop0: detected capacity change from 0 to 512 [ 951.608557][T18497] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.3820: bad orphan inode 15 [ 951.655674][T18497] ext4_test_bit(bit=14, block=5) = 0 [ 951.674683][T18497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.808878][T13680] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.855573][T18502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3822'. [ 952.056997][T10602] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 952.286697][T10602] usb 3-1: Using ep0 maxpacket: 16 [ 952.295694][T10602] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 952.305586][T10602] usb 3-1: config 0 has no interface number 0 [ 952.312479][T10602] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 952.322974][T10602] usb 3-1: config 0 interface 34 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 952.337860][T10602] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 952.347169][T10602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.355242][T10602] usb 3-1: Product: syz [ 952.359817][T10602] usb 3-1: Manufacturer: syz [ 952.364921][T10602] usb 3-1: SerialNumber: syz [ 952.372480][T10602] usb 3-1: config 0 descriptor?? [ 952.383397][T18505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 952.393590][T10602] asix: probe of 3-1:0.34 failed with error -22 [ 952.833771][T18524] loop1: detected capacity change from 0 to 512 [ 952.851408][T18524] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.3832: bad orphan inode 15 [ 952.861967][T18524] ext4_test_bit(bit=14, block=5) = 0 [ 952.868847][T18524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.929397][T14581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.442414][T18545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3838'. [ 953.536229][T18549] loop3: detected capacity change from 0 to 512 [ 953.557387][T18549] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.3841: bad orphan inode 15 [ 953.583011][T18549] ext4_test_bit(bit=14, block=5) = 0 [ 953.590775][T18549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 953.646216][T11516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.716898][T18585] netlink: 'syz.3.3856': attribute type 1 has an invalid length. [ 954.788815][T18585] veth0_to_bond: left promiscuous mode [ 954.829408][T18585] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 954.939013][T10602] usb 3-1: USB disconnect, device number 95 [ 954.962589][T18585] macvlan2: entered promiscuous mode [ 954.970882][T18585] macvlan2: entered allmulticast mode [ 954.981401][T18585] bond1: entered promiscuous mode [ 954.991925][T18585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 955.013398][T18585] bond1: left promiscuous mode [ 955.195872][T18601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3860'. [ 955.347803][T18603] syzkaller0: entered promiscuous mode [ 955.360045][T18603] syzkaller0: entered allmulticast mode [ 955.859696][T18615] udc usbip-vudc.0: UDC had already stopped [ 956.936487][ T9] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 957.156559][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 957.189373][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 957.197750][T18635] syzkaller0: entered promiscuous mode [ 957.197777][T18635] syzkaller0: entered allmulticast mode [ 957.234050][ T9] usb 2-1: config 0 has no interface number 0 [ 957.246622][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 957.261796][ T9] usb 2-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 957.301341][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 957.320160][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 957.335598][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.344315][ T9] usb 2-1: Product: syz [ 957.354961][ T9] usb 2-1: Manufacturer: syz [ 957.365530][ T9] usb 2-1: SerialNumber: syz [ 957.398964][ T9] usb 2-1: config 0 descriptor?? [ 957.407210][T18617] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 957.438042][ T9] asix: probe of 2-1:0.34 failed with error -22 [ 957.480629][T18641] udc usbip-vudc.0: UDC had already stopped [ 957.646127][T18647] loop2: detected capacity change from 0 to 512 [ 957.667625][T18647] EXT4-fs: Ignoring removed i_version option [ 957.698034][T18647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 957.740133][T18648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3880'. [ 957.758303][T18647] EXT4-fs (loop2): 1 truncate cleaned up [ 957.768124][T18647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.832708][T18647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.271863][T18662] loop0: detected capacity change from 0 to 128 [ 958.315083][T18662] syz.0.3886: attempt to access beyond end of device [ 958.315083][T18662] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 958.353919][T18662] syz.0.3886: attempt to access beyond end of device [ 958.353919][T18662] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 958.368439][T18662] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 958.377419][T18662] syz.0.3886: attempt to access beyond end of device [ 958.377419][T18662] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 958.396139][T18662] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 958.405233][T18662] syz.0.3886: attempt to access beyond end of device [ 958.405233][T18662] loop0: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 958.420937][T18662] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 958.429963][T18662] syz.0.3886: attempt to access beyond end of device [ 958.429963][T18662] loop0: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 958.461873][T18664] syz.0.3886: attempt to access beyond end of device [ 958.461873][T18664] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 958.485381][T18661] syz.0.3886: attempt to access beyond end of device [ 958.485381][T18661] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 958.499385][T18661] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 958.643791][T18669] syzkaller0: entered promiscuous mode [ 958.650153][T18669] syzkaller0: entered allmulticast mode [ 958.835898][T18672] udc usbip-vudc.0: UDC had already stopped [ 958.906705][ T9] usb 2-1: USB disconnect, device number 112 [ 959.276700][T10602] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 959.287328][T18688] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3895'. [ 959.488860][T10602] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.507658][T10602] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 959.524197][T10602] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 959.533856][T10602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.547984][T10602] usb 1-1: config 0 descriptor?? [ 959.557478][T10602] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 959.701771][T18698] syzkaller0: entered promiscuous mode [ 959.708143][T18698] syzkaller0: entered allmulticast mode [ 959.771133][T10602] usb 1-1: USB disconnect, device number 68 [ 960.023020][T18704] loop1: detected capacity change from 0 to 512 [ 960.046105][T18704] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.3903: corrupted in-inode xattr: invalid ea_ino [ 960.065050][T18704] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3903: couldn't read orphan inode 15 (err -117) [ 960.082750][T18704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.177194][ T790] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 960.193321][T14581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.376734][T10602] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 960.377370][ T790] usb 3-1: Using ep0 maxpacket: 16 [ 960.407121][ T790] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 960.438640][ T790] usb 3-1: config 0 has no interface number 0 [ 960.444853][ T790] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 960.496184][ T790] usb 3-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.516811][ T790] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 960.540838][ T790] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 960.560391][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.576665][ T790] usb 3-1: Product: syz [ 960.593532][T10602] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.597784][ T790] usb 3-1: Manufacturer: syz [ 960.620137][T10602] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 960.631443][ T790] usb 3-1: SerialNumber: syz [ 960.668674][T10602] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 960.686182][ T790] usb 3-1: config 0 descriptor?? [ 960.695671][T10602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.707399][T18700] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 960.720224][ T790] asix: probe of 3-1:0.34 failed with error -22 [ 960.756575][T10602] usb 1-1: config 0 descriptor?? [ 960.774810][T10602] aiptek 1-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 960.812342][T10602] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 960.817938][T18718] syzkaller0: entered promiscuous mode [ 960.837359][T18718] syzkaller0: entered allmulticast mode [ 961.086931][T18720] syzkaller0: entered promiscuous mode [ 961.092602][T18720] syzkaller0: entered allmulticast mode [ 961.577589][T18730] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3914'. [ 961.926324][T18745] syzkaller0: entered promiscuous mode [ 961.932074][T18745] syzkaller0: entered allmulticast mode [ 961.971350][T18746] loop0: detected capacity change from 0 to 32768 [ 961.999799][T18746] loop1: detected capacity change from 0 to 32768 [ 962.024283][T18746] loop2: detected capacity change from 0 to 32768 [ 962.059844][T18746] loop3: detected capacity change from 0 to 32768 [ 962.163298][T18749] ------------[ cut here ]------------ [ 962.169520][T18749] kobject: '(null)' (ffff88807ba88060): is not initialized, yet kobject_get() is being called. [ 962.205949][T18749] WARNING: CPU: 1 PID: 18749 at lib/kobject.c:642 kobject_add_internal+0x115/0xc90 [ 962.215873][T18749] Modules linked in: [ 962.220072][T18749] CPU: 1 PID: 18749 Comm: syz.1.3920 Not tainted syzkaller #0 [ 962.227734][T18749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 962.238062][T18749] RIP: 0010:kobject_add_internal+0x115/0xc90 [ 962.244220][T18749] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5e 39 67 f7 49 8b 34 24 48 c7 c7 00 46 ea 8b 4c 89 e2 e8 1b 86 d8 f6 <0f> 0b e9 e5 00 00 00 e8 bf bb 0e f7 b8 fe ff ff ff e9 f0 06 00 00 [ 962.264307][T18749] RSP: 0018:ffffc9000e38f8c8 EFLAGS: 00010246 [ 962.270817][T18749] RAX: 2ca416fe29809f00 RBX: ffff88802eb82078 RCX: 0000000000080000 [ 962.279028][T18749] RDX: ffffc9000e480000 RSI: 000000000000b3b2 RDI: 000000000000b3b3 [ 962.287992][T18749] RBP: 0000000000000000 R08: ffffc9000e38f4c7 R09: 1ffff92001c71e98 [ 962.296218][T18749] R10: dffffc0000000000 R11: fffff52001c71e99 R12: ffff88807ba88060 [ 962.304641][T18749] R13: dffffc0000000000 R14: ffff88807ba8809c R15: dffffc0000000000 [ 962.312745][T18749] FS: 00007f51409f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 962.321831][T18749] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.328604][T18749] CR2: 00007f4072f42000 CR3: 0000000064dc6000 CR4: 00000000003506e0 [ 962.336735][T18749] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 962.344800][T18749] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 962.353002][T18749] Call Trace: [ 962.356520][T18749] [ 962.359625][T18749] ? kfree+0x31/0x1a0 [ 962.363761][T18749] kobject_add+0x164/0x240 [ 962.368338][T18749] ? kobject_init+0x1d0/0x1d0 [ 962.373117][T18749] ? mddev_create_serial_pool+0x210/0x470 [ 962.379084][T18749] bind_rdev_to_array+0xb4e/0x1260 [ 962.384296][T18749] ? bind_rdev_to_array+0x5fb/0x1260 [ 962.389771][T18749] ? md_import_device+0x7b0/0x7b0 [ 962.394896][T18749] md_add_new_disk+0xe2e/0x17a0 [ 962.399939][T18749] md_ioctl+0x214c/0x24d0 [ 962.404359][T18749] ? blkdev_common_ioctl+0x10ee/0x2580 [ 962.409978][T18749] ? md_release+0x1e0/0x1e0 [ 962.414555][T18749] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 962.420378][T18749] ? blkdev_bszset+0x1f0/0x1f0 [ 962.425211][T18749] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 962.430870][T18749] ? md_release+0x1e0/0x1e0 [ 962.435475][T18749] blkdev_ioctl+0x5b2/0x730 [ 962.440136][T18749] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 962.445680][T18749] ? bpf_lsm_file_ioctl+0x9/0x10 [ 962.450754][T18749] ? security_file_ioctl+0x80/0xa0 [ 962.455941][T18749] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 962.461548][T18749] __se_sys_ioctl+0xfd/0x170 [ 962.466222][T18749] do_syscall_64+0x55/0xb0 [ 962.470818][T18749] ? clear_bhb_loop+0x40/0x90 [ 962.475673][T18749] ? clear_bhb_loop+0x40/0x90 [ 962.480698][T18749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.486724][T18749] RIP: 0033:0x7f513fb9de99 [ 962.491213][T18749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.511571][T18749] RSP: 002b:00007f51409f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.520186][T18749] RAX: ffffffffffffffda RBX: 00007f513fe26090 RCX: 00007f513fb9de99 [ 962.528305][T18749] RDX: 0000200000001400 RSI: 0000000040140921 RDI: 000000000000000c [ 962.536328][T18749] RBP: 00007f513fc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 962.544451][T18749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.552592][T18749] R13: 00007f513fe26128 R14: 00007f513fe26090 R15: 00007ffe963e3368 [ 962.560714][T18749] [ 962.563792][T18749] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 962.571108][T18749] CPU: 1 PID: 18749 Comm: syz.1.3920 Not tainted syzkaller #0 [ 962.578598][T18749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 962.588682][T18749] Call Trace: [ 962.591993][T18749] [ 962.594950][T18749] dump_stack_lvl+0x18c/0x250 [ 962.599673][T18749] ? show_regs_print_info+0x20/0x20 [ 962.604930][T18749] ? load_image+0x420/0x420 [ 962.609523][T18749] panic+0x2ca/0x720 [ 962.613467][T18749] ? bpf_jit_dump+0xd0/0xd0 [ 962.618053][T18749] __warn+0x2e0/0x470 [ 962.622077][T18749] ? kobject_add_internal+0x115/0xc90 [ 962.627488][T18749] ? kobject_add_internal+0x115/0xc90 [ 962.632896][T18749] report_bug+0x2be/0x4f0 [ 962.637257][T18749] ? kobject_add_internal+0x115/0xc90 [ 962.642666][T18749] ? kobject_add_internal+0x115/0xc90 [ 962.648074][T18749] ? kobject_add_internal+0x117/0xc90 [ 962.653480][T18749] handle_bug+0xcf/0x120 [ 962.657761][T18749] exc_invalid_op+0x1a/0x50 [ 962.662301][T18749] asm_exc_invalid_op+0x1a/0x20 [ 962.667189][T18749] RIP: 0010:kobject_add_internal+0x115/0xc90 [ 962.673208][T18749] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5e 39 67 f7 49 8b 34 24 48 c7 c7 00 46 ea 8b 4c 89 e2 e8 1b 86 d8 f6 <0f> 0b e9 e5 00 00 00 e8 bf bb 0e f7 b8 fe ff ff ff e9 f0 06 00 00 [ 962.692856][T18749] RSP: 0018:ffffc9000e38f8c8 EFLAGS: 00010246 [ 962.698958][T18749] RAX: 2ca416fe29809f00 RBX: ffff88802eb82078 RCX: 0000000000080000 [ 962.706961][T18749] RDX: ffffc9000e480000 RSI: 000000000000b3b2 RDI: 000000000000b3b3 [ 962.714969][T18749] RBP: 0000000000000000 R08: ffffc9000e38f4c7 R09: 1ffff92001c71e98 [ 962.722988][T18749] R10: dffffc0000000000 R11: fffff52001c71e99 R12: ffff88807ba88060 [ 962.731000][T18749] R13: dffffc0000000000 R14: ffff88807ba8809c R15: dffffc0000000000 [ 962.739039][T18749] ? kobject_add_internal+0x115/0xc90 [ 962.744475][T18749] ? kfree+0x31/0x1a0 [ 962.748517][T18749] kobject_add+0x164/0x240 [ 962.752994][T18749] ? kobject_init+0x1d0/0x1d0 [ 962.757757][T18749] ? mddev_create_serial_pool+0x210/0x470 [ 962.763530][T18749] bind_rdev_to_array+0xb4e/0x1260 [ 962.768684][T18749] ? bind_rdev_to_array+0x5fb/0x1260 [ 962.774040][T18749] ? md_import_device+0x7b0/0x7b0 [ 962.779135][T18749] md_add_new_disk+0xe2e/0x17a0 [ 962.784037][T18749] md_ioctl+0x214c/0x24d0 [ 962.788434][T18749] ? blkdev_common_ioctl+0x10ee/0x2580 [ 962.793946][T18749] ? md_release+0x1e0/0x1e0 [ 962.798488][T18749] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 962.804162][T18749] ? blkdev_bszset+0x1f0/0x1f0 [ 962.808988][T18749] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 962.814669][T18749] ? md_release+0x1e0/0x1e0 [ 962.819228][T18749] blkdev_ioctl+0x5b2/0x730 [ 962.823782][T18749] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 962.829309][T18749] ? bpf_lsm_file_ioctl+0x9/0x10 [ 962.834297][T18749] ? security_file_ioctl+0x80/0xa0 [ 962.839648][T18749] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 962.845180][T18749] __se_sys_ioctl+0xfd/0x170 [ 962.849845][T18749] do_syscall_64+0x55/0xb0 [ 962.854302][T18749] ? clear_bhb_loop+0x40/0x90 [ 962.859046][T18749] ? clear_bhb_loop+0x40/0x90 [ 962.863778][T18749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.869716][T18749] RIP: 0033:0x7f513fb9de99 [ 962.874363][T18749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.894115][T18749] RSP: 002b:00007f51409f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.902571][T18749] RAX: ffffffffffffffda RBX: 00007f513fe26090 RCX: 00007f513fb9de99 [ 962.910580][T18749] RDX: 0000200000001400 RSI: 0000000040140921 RDI: 000000000000000c [ 962.918580][T18749] RBP: 00007f513fc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 962.926598][T18749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.934631][T18749] R13: 00007f513fe26128 R14: 00007f513fe26090 R15: 00007ffe963e3368 [ 962.942656][T18749] [ 962.946286][T18749] Kernel Offset: disabled [ 962.950782][T18749] Rebooting in 86400 seconds..