last executing test programs: 2m36.222041777s ago: executing program 2 (id=729): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)='\"', 0x1) 2m36.193369652s ago: executing program 2 (id=730): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) 2m36.131522313s ago: executing program 2 (id=733): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6}, 0x1c, 0x0}, 0x10) 2m36.13083928s ago: executing program 2 (id=736): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m36.062332061s ago: executing program 2 (id=737): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000036c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x1, @local, 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x2, @private1, 0xfffffff8}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000001c0)='Q', 0x1}], 0x1}}], 0x2, 0x4040044) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa2ea}}, [0x0, 0x2, 0x100000001, 0xfffffffffffffff7, 0x3, 0x8, 0x0, 0x6, 0x7ff, 0x8, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xfffffffffffff001, 0x1000]}, &(0x7f0000000180)=0x100) 2m35.061746201s ago: executing program 2 (id=744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, 0x0) 2m35.025396884s ago: executing program 32 (id=744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, 0x0) 2.428685477s ago: executing program 3 (id=3229): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x4008031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f0000001200)={0x400, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.153865454s ago: executing program 3 (id=3242): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) 2.079613306s ago: executing program 3 (id=3243): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r0, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40002}, 0x4000000) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0) 1.225920102s ago: executing program 3 (id=3251): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 1.076849091s ago: executing program 3 (id=3255): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x82cb000}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 804.228498ms ago: executing program 1 (id=3258): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x5, 0x4, 0x5, {0xa, 0x4e23, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}}}, 0x80, 0x0, 0x39, 0x0, 0xffffffffffffffd7}, 0x24003760) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @remote}) 803.923574ms ago: executing program 1 (id=3259): creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], 0x0, 0x0, 0x2, 0x1}}, 0x3c) 710.269218ms ago: executing program 1 (id=3261): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x7f4a, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x5) write$sndseq(r1, 0x0, 0x0) 709.47284ms ago: executing program 0 (id=3262): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x1000) io_uring_enter(r1, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) landlock_restrict_self(r0, 0xd) 709.146447ms ago: executing program 1 (id=3263): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 650.025746ms ago: executing program 1 (id=3265): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x2e}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) 599.330533ms ago: executing program 1 (id=3267): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0xff51) 598.979991ms ago: executing program 4 (id=3268): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x992}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1ff}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4041}, 0x10) 520.385171ms ago: executing program 0 (id=3269): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x438, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 519.20341ms ago: executing program 4 (id=3270): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 459.956601ms ago: executing program 0 (id=3271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 459.768719ms ago: executing program 4 (id=3272): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 399.927296ms ago: executing program 4 (id=3273): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000440)='5', 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x2, r1, 0x0}]) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 327.615133ms ago: executing program 0 (id=3274): unshare(0x2c020400) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r1, r0}, 0xc) 325.060475ms ago: executing program 0 (id=3275): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) 218.083045ms ago: executing program 4 (id=3276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x183503, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97O\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x761}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) 189.138624ms ago: executing program 3 (id=3277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r0, 0x1) 167.240411ms ago: executing program 0 (id=3278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x98, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@supported_rates]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x20000014) 0s ago: executing program 4 (id=3279): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x14c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0x0) kernel console output (not intermixed with test programs): log [ 115.870378][ T55] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 116.020349][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 116.023627][ T55] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 116.026444][ T55] usb 8-1: config 179 has no interface number 0 [ 116.028423][ T55] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 116.031699][ T55] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 116.035126][ T55] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.038851][ T55] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 116.042861][ T55] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 116.047135][ T55] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 116.050055][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.054574][ T8440] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.163063][ T860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.234128][ T2317] kernel write not supported for file /ppp (pid: 2317 comm: kworker/0:2) [ 116.234495][ T8469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.244546][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.280449][ T55] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input10 [ 116.479086][ T55] usb 8-1: USB disconnect, device number 4 [ 116.481063][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 116.481086][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 116.724869][ T846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.880955][ T860] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 117.031714][ T860] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 204, changing to 11 [ 117.031738][ T8494] loop9: detected capacity change from 0 to 255852544 [ 117.035273][ T860] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 117.041590][ T55] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.041612][ T860] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 117.052677][ T860] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.056378][ T860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 117.059718][ T860] usb 6-1: SerialNumber: syz [ 117.071434][ T8480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.190608][ T55] usb 5-1: Using ep0 maxpacket: 32 [ 117.195169][ T55] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 117.197839][ T55] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 117.202378][ T55] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 117.205930][ T55] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 117.210105][ T55] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.214891][ T55] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 117.217861][ T55] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 117.222052][ T55] usb 5-1: Product: syz [ 117.223459][ T55] usb 5-1: Manufacturer: syz [ 117.224995][ T55] usb 5-1: SerialNumber: syz [ 117.228339][ T55] usb 5-1: config 0 descriptor?? [ 117.234070][ T55] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 117.241014][ T55] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 117.442513][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.634246][ T55] usb 5-1: USB disconnect, device number 4 [ 117.647500][ T55] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 117.687881][ T8480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.761537][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.828718][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 117.832233][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 117.898741][ T860] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 117.905024][ T860] usb 6-1: USB disconnect, device number 4 [ 118.060894][ T5849] kernel read not supported for file /rfkill (pid: 5849 comm: kworker/2:3) [ 118.109629][ T8548] ptrace attach of "/syz-executor exec"[5743] was attempted by "/syz-executor exec"[8548] [ 118.240588][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.800742][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.191838][ T8602] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1163'. [ 119.195471][ T8602] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1163'. [ 119.361063][ T2317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.742632][ T8606] veth1_macvtap: left promiscuous mode [ 119.745086][ T8606] macsec0: entered allmulticast mode [ 119.754447][ T8606] veth1_macvtap: entered promiscuous mode [ 119.756861][ T8606] veth1_macvtap: entered allmulticast mode [ 119.759446][ T8606] macsec0: left allmulticast mode [ 119.762819][ T8606] veth1_macvtap: left allmulticast mode [ 119.794549][ T2317] kernel read not supported for file /dsp1 (pid: 2317 comm: kworker/0:2) [ 119.841993][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.002800][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.160423][ T5746] Bluetooth: hci2: command tx timeout [ 120.641848][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.793188][ T8684] loop5: detected capacity change from 0 to 6 [ 120.796500][ T8684] Dev loop5: unable to read RDB block 6 [ 120.798949][ T8684] loop5: unable to read partition table [ 120.803765][ T8684] loop5: partition table beyond EOD, truncated [ 120.805936][ T8684] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.892382][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.410333][ T5889] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 121.565270][ T5889] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 121.569219][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 121.574215][ T5889] usb 6-1: Product: syz [ 121.576063][ T5889] usb 6-1: Manufacturer: syz [ 121.578012][ T5889] usb 6-1: SerialNumber: syz [ 121.590060][ T5889] usb 6-1: config 0 descriptor?? [ 121.780716][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 121.784545][ T8720] netlink: 'syz.3.1218': attribute type 2 has an invalid length. [ 121.802680][ T5889] usb 6-1: USB disconnect, device number 5 [ 121.832040][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 121.834905][ T8721] netlink: 'syz.3.1218': attribute type 2 has an invalid length. [ 121.920838][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.210437][ T40] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.363005][ T40] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 204, changing to 11 [ 122.366731][ T40] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 122.374311][ T40] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 122.382973][ T40] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.390443][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 122.395581][ T40] usb 5-1: SerialNumber: syz [ 122.400203][ T8723] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.519672][ T5889] kernel read not supported for file /video9 (pid: 5889 comm: kworker/0:5) [ 122.971458][ T846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.014359][ T8723] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.223460][ T40] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 123.235773][ T40] usb 5-1: USB disconnect, device number 5 [ 123.510397][ T8775] syz.1.1238 (8775) used greatest stack depth: 17992 bytes left [ 123.681164][ T2317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.728207][ T8794] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 123.863231][ T8805] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1252'. [ 123.869489][ T8805] bridge0: port 3(syz_tun) entered disabled state [ 123.871928][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.874463][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.891635][ T8805] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1252'. [ 124.011821][ T846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.020423][ T40] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 124.071559][ T55] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 124.172248][ T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.175882][ T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.180215][ T40] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.184642][ T40] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.187542][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.193957][ T40] usb 6-1: config 0 descriptor?? [ 124.230794][ T55] usb 9-1: Using ep0 maxpacket: 32 [ 124.234300][ T55] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 124.237734][ T55] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 124.241688][ T55] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.245166][ T55] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 124.251506][ T55] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 124.255380][ T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.265775][ T55] usb 9-1: Product: syz [ 124.267114][ T55] usb 9-1: Manufacturer: syz [ 124.270933][ T55] usb 9-1: SerialNumber: syz [ 124.282590][ T8822] loop5: detected capacity change from 0 to 7 [ 124.283362][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 124.285672][ T8822] Dev loop5: unable to read RDB block 7 [ 124.288758][ T8822] loop5: AHDI p4 [ 124.290031][ T8822] loop5: partition table partially beyond EOD, truncated [ 124.294120][ T55] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input11 [ 124.521448][ T55] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 124.524608][ T55] (id 0x00) [ 124.580464][ T55] rc_core: IR keymap rc-imon-pad not found [ 124.582926][ T55] Registered IR keymap rc-empty [ 124.584635][ T55] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 124.588011][ T55] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 124.611802][ T40] hid_parser_main: 22 callbacks suppressed [ 124.611819][ T40] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.616387][ T40] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.619407][ T40] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.622249][ T40] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.624501][ T40] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.626772][ T40] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.629035][ T40] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.631356][ T40] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.633639][ T40] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.635931][ T40] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.656832][ T40] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 124.721919][ T55] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 124.726158][ T55] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input12 [ 124.736892][ T55] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:5> initialized [ 124.743700][ T8837] netlink: 'syz.0.1266': attribute type 10 has an invalid length. [ 124.752999][ T8837] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 124.770946][ T12] bond0: (slave veth0_to_bond): interface is now down [ 124.790591][ T12] bond0: (slave veth0_to_bond): interface is now down [ 124.794007][ T12] bond0: now running without any active interface! [ 124.831661][ T8839] overlayfs: invalid origin (00000079007a6b616c6c657231000000000000328c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 124.878627][ T56] usb 6-1: USB disconnect, device number 6 [ 124.897677][ T55] usb 9-1: USB disconnect, device number 5 [ 125.041416][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.090812][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.436991][ T8877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.462314][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.720822][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.780903][ T860] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 126.942269][ T860] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 126.952005][ T860] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.960915][ T860] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.965798][ T860] usb 9-1: config 0 interface 0 has no altsetting 0 [ 126.976483][ T860] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.981708][ T860] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.986272][ T860] usb 9-1: config 0 interface 0 has no altsetting 0 [ 126.989872][ T860] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.994309][ T860] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.998810][ T860] usb 9-1: config 0 interface 0 has no altsetting 0 [ 127.003289][ T860] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.007020][ T860] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.011579][ T860] usb 9-1: config 0 interface 0 has no altsetting 0 [ 127.015607][ T860] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.018521][ T860] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.022239][ T860] usb 9-1: config 0 interface 0 has no altsetting 0 [ 127.025242][ T860] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.029048][ T860] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.031966][ T8905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1296'. [ 127.033520][ T860] usb 9-1: config 0 interface 0 has no altsetting 0 [ 127.041074][ T860] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.044925][ T860] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.049469][ T860] usb 9-1: config 0 interface 0 has no altsetting 0 [ 127.053524][ T860] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.057208][ T860] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.064230][ T860] usb 9-1: config 0 interface 0 has no altsetting 0 [ 127.067963][ T860] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 127.070960][ T860] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 127.073535][ T860] usb 9-1: Product: syz [ 127.074898][ T860] usb 9-1: Manufacturer: syz [ 127.076359][ T860] usb 9-1: SerialNumber: syz [ 127.080591][ T860] usb 9-1: config 0 descriptor?? [ 127.091745][ T860] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 127.344392][ C2] usb 9-1: yurex_control_callback - control failed: -71 [ 127.347430][ T5825] usb 9-1: USB disconnect, device number 6 [ 127.357575][ T5825] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 127.500420][ T55] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 127.660417][ T55] usb 6-1: Using ep0 maxpacket: 8 [ 127.663667][ T55] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.667098][ T55] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.670525][ T55] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.674156][ T55] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.678321][ T55] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.681531][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.891671][ T55] usb 6-1: GET_CAPABILITIES returned 0 [ 127.893528][ T55] usbtmc 6-1:16.0: can't read capabilities [ 128.099117][ T2317] usb 6-1: USB disconnect, device number 7 [ 129.234593][ T8962] hugetlbfs: syz.4.1321 (8962): Using mlock ulimits for SHM_HUGETLB is obsolete [ 129.334778][ T8968] netlink: 'syz.4.1324': attribute type 10 has an invalid length. [ 129.346338][ T8968] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 129.356366][ T8967] bridge0: port 3(syz_tun) entered blocking state [ 129.358533][ T8967] bridge0: port 3(syz_tun) entered listening state [ 129.360929][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.363265][ T8967] bridge0: port 2(bridge_slave_1) entered listening state [ 129.365641][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.367836][ T8967] bridge0: port 1(bridge_slave_0) entered listening state [ 129.801707][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 129.815336][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 130.645649][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'. [ 130.649127][ T9018] netlink: 'syz.4.1341': attribute type 2 has an invalid length. [ 130.697226][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'. [ 130.698210][ T9020] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1342'. [ 130.701623][ T9021] netlink: 'syz.4.1341': attribute type 2 has an invalid length. [ 131.100338][ T5849] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 131.251891][ T5849] usb 9-1: Using ep0 maxpacket: 8 [ 131.256288][ T5849] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.259551][ T5849] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.263823][ T5849] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.268049][ T5849] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.273886][ T5849] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.277478][ T5849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.497302][ T5849] usb 9-1: GET_CAPABILITIES returned 0 [ 131.499074][ T5849] usbtmc 9-1:16.0: can't read capabilities [ 131.535907][ T9065] netlink: 636 bytes leftover after parsing attributes in process `syz.3.1362'. [ 131.714109][ T5889] usb 9-1: USB disconnect, device number 7 [ 131.771087][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 132.355423][ T9114] netlink: 'syz.3.1385': attribute type 12 has an invalid length. [ 132.358279][ T9114] netlink: 'syz.3.1385': attribute type 29 has an invalid length. [ 132.361951][ T9114] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1385'. [ 133.569932][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.846819][ T9201] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1422'. [ 133.851162][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1422'. [ 134.122110][ T860] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 134.270513][ T860] usb 6-1: Using ep0 maxpacket: 32 [ 134.274413][ T860] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 134.278776][ T860] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 134.283207][ T860] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.286928][ T860] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 134.294356][ T860] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 134.297381][ T860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.299878][ T860] usb 6-1: Product: syz [ 134.301282][ T860] usb 6-1: Manufacturer: syz [ 134.302783][ T860] usb 6-1: SerialNumber: syz [ 134.311526][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 134.317696][ T860] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input14 [ 134.530367][ T860] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 134.533152][ T860] (id 0x00) [ 134.580534][ T860] rc_core: IR keymap rc-imon-pad not found [ 134.583084][ T860] Registered IR keymap rc-empty [ 134.585259][ T860] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 134.589846][ T860] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 134.732488][ T860] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 134.736789][ T860] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input15 [ 134.744504][ T860] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:8> initialized [ 134.921958][ T9203] imon:vfd_write: invalid payload size [ 134.926010][ T10] usb 6-1: USB disconnect, device number 8 [ 135.953013][ T9278] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.016223][ T9278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.026582][ T9278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.124812][ T5818] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.128207][ T5818] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.133179][ T5818] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.139266][ T5818] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.316804][ T5849] e1000 0000:00:06.0 eth0: Reset adapter [ 136.370895][ T9297] kvm: apic: phys broadcast and lowest prio [ 136.420973][ T5849] e1000 0000:00:06.0 eth0: Reset adapter [ 136.530712][ T5849] e1000 0000:00:06.0 eth0: Reset adapter [ 137.931722][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.003246][ T5745] Bluetooth: hci4: command 0x1003 tx timeout [ 138.003335][ T5746] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 138.721806][ T846] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 144.962742][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 144.966334][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 144.968767][ C1] bridge0: port 3(syz_tun) entered learning state [ 147.695760][ T9418] sit0 speed is unknown, defaulting to 1000 [ 147.707843][ T9418] sit0 speed is unknown, defaulting to 1000 [ 147.717870][ T9418] sit0 speed is unknown, defaulting to 1000 [ 147.923539][ T5889] sit0 speed is unknown, defaulting to 1000 [ 147.926692][ T9418] infiniband syz1: set active [ 147.928899][ T9418] infiniband syz1: added sit0 [ 147.951931][ T9418] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 147.959237][ T9418] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 147.965437][ T9418] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 147.992553][ T9418] RDS/IB: syz1: added [ 148.002212][ T9418] smc: adding ib device syz1 with port count 1 [ 148.004519][ T9418] smc: ib device syz1 port 1 has no pnetid [ 148.010967][ T55] sit0 speed is unknown, defaulting to 1000 [ 148.019702][ T9418] sit0 speed is unknown, defaulting to 1000 [ 148.203928][ T9418] sit0 speed is unknown, defaulting to 1000 [ 148.349893][ T9418] sit0 speed is unknown, defaulting to 1000 [ 148.513249][ T9418] sit0 speed is unknown, defaulting to 1000 [ 148.733448][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'. [ 148.882750][ T9459] input: syz0 as /devices/virtual/input/input16 [ 149.300716][ T5849] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 149.453521][ T5849] usb 9-1: Using ep0 maxpacket: 8 [ 149.458618][ T5849] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 149.462389][ T9493] overlayfs: failed to decode file handle (len=8, type=0, flags=0, err=-22) [ 149.464494][ T5849] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 149.471276][ T5849] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.475186][ T5849] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.479883][ T5849] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.495396][ T5849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.720940][ T5849] usb 9-1: GET_CAPABILITIES returned 0 [ 149.723080][ T5849] usbtmc 9-1:16.0: can't read capabilities [ 149.928858][ T40] usb 9-1: USB disconnect, device number 8 [ 150.021276][ T9517] sit0 speed is unknown, defaulting to 1000 [ 150.266759][ T9533] serio: Serial port ptm0 [ 151.120465][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 151.301814][ T10] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 151.304814][ T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 151.309482][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.313951][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 151.317004][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 151.319636][ T10] usb 5-1: Product: syz [ 151.322609][ T10] usb 5-1: Manufacturer: syz [ 151.324136][ T10] usb 5-1: SerialNumber: syz [ 151.337700][ T10] usb 5-1: config 0 descriptor?? [ 151.341132][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 151.343065][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 151.347509][ T10] usb 5-1: selecting invalid altsetting 0 [ 151.601089][ T40] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 151.762720][ T40] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 151.766651][ T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.770063][ T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.773511][ T40] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 151.781018][ T40] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 151.785065][ T40] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 151.787851][ T40] usb 6-1: Manufacturer: syz [ 151.792526][ T40] usb 6-1: config 0 descriptor?? [ 151.900406][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 151.904795][ T9608] input: syz1 as /devices/virtual/input/input17 [ 151.933302][ T9578] udevd[9578]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 151.974171][ T9558] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 152.054148][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.058580][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.063480][ T10] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.072861][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 152.080355][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 152.090399][ T10] usb 9-1: Product: syz [ 152.092190][ T10] usb 9-1: Manufacturer: syz [ 152.094158][ T10] usb 9-1: SerialNumber: syz [ 152.121830][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1584'. [ 152.173622][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1584'. [ 152.212776][ T40] hid_parser_main: 28 callbacks suppressed [ 152.212800][ T40] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 152.231210][ T40] appleir 0003:05AC:8243.0006: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 152.314193][ T10] usblp 9-1:1.0: usblp1: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 152.462357][ T10] usb 6-1: USB disconnect, device number 9 [ 152.515704][ T29] usb 9-1: USB disconnect, device number 9 [ 152.519211][ T29] usblp1: removed [ 152.575264][ T846] usb 5-1: USB disconnect, device number 6 [ 153.062807][ T9624] geneve2: entered promiscuous mode [ 153.143307][ T9633] input: syz1 as /devices/virtual/input/input18 [ 153.263322][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1593'. [ 153.600628][ T5849] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 153.752100][ T5849] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.755532][ T5849] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.758720][ T5849] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.766097][ T5849] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 153.769207][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 153.772628][ T5849] usb 6-1: Product: syz [ 153.774111][ T5849] usb 6-1: Manufacturer: syz [ 153.775687][ T5849] usb 6-1: SerialNumber: syz [ 153.974511][ T9676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.991081][ T5849] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 154.105744][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1613'. [ 154.201109][ T10] usb 6-1: USB disconnect, device number 10 [ 154.208958][ T10] usblp0: removed [ 154.318271][ T9700] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1622'. [ 154.321561][ T9701] dummy0: entered allmulticast mode [ 154.978178][ T9733] loop5: detected capacity change from 0 to 4095 [ 155.028119][ T9733] Buffer I/O error on dev loop5, logical block 511, async page read [ 155.033574][ T9513] Buffer I/O error on dev loop5, logical block 511, async page read [ 156.277805][ T29] Process accounting resumed [ 156.294023][ T9788] Process accounting resumed [ 156.333453][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1665'. [ 156.444713][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1666'. [ 156.448663][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1666'. [ 156.450414][ T5849] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 156.625441][ T5849] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 156.631597][ T5849] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 156.636195][ T5849] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.642018][ T5849] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 156.652053][ T5849] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 156.657953][ T5849] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 156.662042][ T5849] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 156.666540][ T5849] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.671632][ T5849] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 156.676454][ T5849] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 156.681448][ T9807] sctp: [Deprecated]: syz.4.1669 (pid 9807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.681448][ T9807] Use struct sctp_sack_info instead [ 156.682184][ T5849] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 156.689617][ T9807] sctp: [Deprecated]: syz.4.1669 (pid 9807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.689617][ T9807] Use struct sctp_sack_info instead [ 156.692998][ T5849] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 156.703540][ T5849] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.708373][ T5849] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 156.713062][ T5849] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 156.725526][ T5849] usb 5-1: string descriptor 0 read error: -22 [ 156.730560][ T5849] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 156.738470][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.762665][ T5849] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 156.801368][ T9811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1671'. [ 156.805922][ T9811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1671'. [ 156.982147][ T9820] netlink: 762 bytes leftover after parsing attributes in process `syz.4.1675'. [ 157.143589][ T9830] netlink: 'syz.4.1680': attribute type 5 has an invalid length. [ 157.197885][ T9831] netlink: 'syz.4.1680': attribute type 5 has an invalid length. [ 157.340428][ T29] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 157.439573][ T9835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1682'. [ 157.491662][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.495455][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.499418][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.503949][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.508122][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.512488][ T29] usb 6-1: config 0 descriptor?? [ 157.925990][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 157.931533][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 157.934016][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 157.936323][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 157.938690][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 157.941311][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 157.943749][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 157.946114][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 157.948417][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 157.950852][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 157.963891][ T29] plantronics 0003:047F:FFFF.0007: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 158.031859][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1689'. [ 158.034716][ T9852] netlink: 'syz.4.1689': attribute type 10 has an invalid length. [ 158.133162][ T5849] usb 6-1: USB disconnect, device number 11 [ 158.685059][ T9862] evm: overlay not supported [ 158.923779][ T9868] input: syz1 as /devices/virtual/input/input19 [ 158.964200][ T40] usb 5-1: USB disconnect, device number 7 [ 159.248494][ T9882] rdma_rxe: rxe_newlink: failed to add sit0 [ 159.355361][ T9888] sit0 speed is unknown, defaulting to 1000 [ 159.420424][ T5889] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 159.501920][ T9891] sit0 speed is unknown, defaulting to 1000 [ 159.570495][ T40] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 159.572687][ T5889] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.577204][ T5889] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.581235][ T5889] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.587863][ T5889] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 159.592165][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 159.595338][ T5889] usb 6-1: Product: syz [ 159.596987][ T5889] usb 6-1: Manufacturer: syz [ 159.598807][ T5889] usb 6-1: SerialNumber: syz [ 159.720404][ T40] usb 9-1: Using ep0 maxpacket: 8 [ 159.736924][ T5746] Bluetooth: hci2: Malformed LE Event: 0x0d [ 159.737570][ T40] usb 9-1: unable to get BOS descriptor or descriptor too short [ 159.744207][ T40] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 159.749603][ T40] usb 9-1: can't read configurations, error -71 [ 159.820392][ T5889] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 160.021681][ T5825] usb 6-1: USB disconnect, device number 12 [ 160.027520][ T5825] usblp0: removed [ 160.321852][ C2] bridge0: port 3(syz_tun) entered forwarding state [ 160.324747][ C2] bridge0: topology change detected, propagating [ 160.335909][ C2] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.338793][ C2] bridge0: topology change detected, propagating [ 160.341444][ C2] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.344447][ C2] bridge0: topology change detected, propagating [ 160.525662][ T9915] loop5: detected capacity change from 0 to 4095 [ 160.567599][ T9915] Buffer I/O error on dev loop5, logical block 511, async page read [ 160.571160][ T9513] Buffer I/O error on dev loop5, logical block 511, async page read [ 160.673783][ T9927] 9p: Unknown uid 00000000004294967295 [ 161.630485][ T5889] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 161.800543][ T5889] usb 9-1: Using ep0 maxpacket: 8 [ 161.807002][ T5889] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.816906][ T5889] usb 9-1: config 0 has no interface number 0 [ 161.821602][ T5889] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.825989][ T5889] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 161.829632][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.837129][ T5889] usb 9-1: config 0 descriptor?? [ 161.843158][ T5889] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 162.120411][ T5889] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 162.272154][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.276893][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.281091][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.286376][ T5889] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.290096][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.296558][ T5889] usb 6-1: config 0 descriptor?? [ 163.126320][ T860] usb 9-1: USB disconnect, device number 12 [ 163.136242][ T5889] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 163.145041][ T5889] usb 6-1: USB disconnect, device number 13 [ 163.194247][ T9993] fido_id[9993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 163.494953][T10001] __nla_validate_parse: 1 callbacks suppressed [ 163.494967][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1749'. [ 163.690427][ T40] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 163.795601][T10014] binder: 10013:10014 ioctl c00c620f 0 returned -14 [ 163.850432][ T40] usb 5-1: Using ep0 maxpacket: 8 [ 163.853467][ T40] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.857020][ T40] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.864173][ T40] usb 5-1: config 0 interface 0 has no altsetting 0 [ 163.868782][ T40] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 163.874194][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.885581][ T40] usb 5-1: config 0 descriptor?? [ 164.313860][ T40] hid_parser_main: 5 callbacks suppressed [ 164.313879][ T40] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 164.318911][ T40] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 164.321327][ T40] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 164.323495][ T40] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 164.325735][ T40] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 164.328356][ T40] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 164.524469][ T40] usb 5-1: USB disconnect, device number 8 [ 164.873844][T10048] lo: entered promiscuous mode [ 164.875985][T10048] lo: entered allmulticast mode [ 164.879542][T10048] tunl0: entered promiscuous mode [ 164.887278][T10048] tunl0: entered allmulticast mode [ 164.893373][T10048] gre0: entered promiscuous mode [ 164.895454][T10048] gre0: entered allmulticast mode [ 164.897891][T10048] gretap0: entered promiscuous mode [ 164.900147][T10048] gretap0: entered allmulticast mode [ 164.903094][T10048] erspan0: entered promiscuous mode [ 164.904842][T10048] erspan0: entered allmulticast mode [ 164.907150][T10048] ip_vti0: entered promiscuous mode [ 164.908820][T10048] ip_vti0: entered allmulticast mode [ 164.912928][T10048] ip6_vti0: entered promiscuous mode [ 164.914751][T10048] ip6_vti0: entered allmulticast mode [ 164.917151][T10048] sit0: entered promiscuous mode [ 164.918780][T10048] sit0: entered allmulticast mode [ 164.922853][T10048] ip6tnl0: entered promiscuous mode [ 164.924632][T10048] ip6tnl0: entered allmulticast mode [ 164.926920][T10048] ip6gre0: entered promiscuous mode [ 164.928594][T10048] ip6gre0: entered allmulticast mode [ 164.931203][T10048] syz_tun: entered promiscuous mode [ 164.932946][T10048] syz_tun: entered allmulticast mode [ 164.935409][T10048] ip6gretap0: entered promiscuous mode [ 164.937143][T10048] ip6gretap0: entered allmulticast mode [ 164.942664][T10054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1774'. [ 164.943060][T10048] bridge0: entered promiscuous mode [ 164.947714][T10048] bridge0: entered allmulticast mode [ 165.358308][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'. [ 165.456627][T10103] sit0 speed is unknown, defaulting to 1000 [ 165.824963][T10131] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1808'. [ 165.861808][ T42] audit: type=1326 audit(1783004833.439:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10127 comm="syz.3.1809" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5fec code=0x0 [ 166.610005][ T42] audit: type=1326 audit(1783004834.179:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.0.1828" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd6fec code=0x0 [ 167.282747][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1845'. [ 167.462307][T10217] ubi16: attaching mtd0 [ 167.464501][T10217] ubi16 error: ubi_attach_mtd_dev: bad VID header (14) or data offsets (78) [ 167.597438][T10229] netlink: 'syz.0.1855': attribute type 11 has an invalid length. [ 167.675656][T10233] input: syz0 as /devices/virtual/input/input20 [ 167.930500][ T846] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 168.080479][ T846] usb 9-1: Using ep0 maxpacket: 8 [ 168.083540][ T846] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.087119][ T846] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.090396][ T846] usb 9-1: config 0 interface 0 has no altsetting 0 [ 168.092488][ T846] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 168.095342][ T846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.099262][ T846] usb 9-1: config 0 descriptor?? [ 168.138360][T10245] 9pnet: p9_errstr2errno: server reported unknown error [ 168.186858][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'. [ 168.190368][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 168.193745][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'. [ 168.236952][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1864'. [ 168.517376][ T846] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 168.519673][ T846] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 168.522370][ T846] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 168.524507][ T846] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 168.526748][ T846] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 168.529282][ T846] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 168.717900][ T40] usb 9-1: USB disconnect, device number 13 [ 168.740837][ T5825] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 168.900460][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 168.904599][ T5825] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.908563][ T5825] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.912876][ T5825] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 168.917802][ T5825] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 168.921567][ T5825] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 168.924744][ T5825] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.928815][ T5825] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.933821][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.148508][ T5825] usb 5-1: GET_CAPABILITIES returned 0 [ 169.150353][ T5825] usbtmc 5-1:16.0: can't read capabilities [ 169.221437][T10285] netlink: 'syz.1.1880': attribute type 1 has an invalid length. [ 169.223950][T10285] netlink: 'syz.1.1880': attribute type 2 has an invalid length. [ 169.294153][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 169.297210][T10291] netlink: 'syz.4.1890': attribute type 10 has an invalid length. [ 169.299458][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1890'. [ 169.350759][ T5849] usb 5-1: USB disconnect, device number 9 [ 169.490416][ T5825] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 169.650393][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 169.653466][ T5825] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 169.656137][ T5825] usb 6-1: config 0 has no interface number 0 [ 169.658054][ T5825] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.661620][ T5825] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 169.665188][ T5825] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.668835][ T5825] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.673335][ T5825] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 169.676214][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.680547][ T5825] usb 6-1: config 0 descriptor?? [ 169.688104][ T5825] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 170.130997][ T5849] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 170.280364][ T5849] usb 9-1: Using ep0 maxpacket: 32 [ 170.283511][ T5849] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 170.299318][ T5849] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 170.302387][ T5849] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 170.304912][ T5849] usb 9-1: Product: syz [ 170.306225][ T5849] usb 9-1: Manufacturer: syz [ 170.307681][ T5849] usb 9-1: SerialNumber: syz [ 170.310716][ T5849] usb 9-1: config 0 descriptor?? [ 170.313195][T10301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.316472][ T5849] hub 9-1:0.0: bad descriptor, ignoring hub [ 170.318452][ T5849] hub 9-1:0.0: probe with driver hub failed with error -5 [ 170.460403][ T5889] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.620579][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 170.626660][ T5889] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 170.630106][ T5889] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 170.634257][ T5889] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 170.637733][ T5889] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 170.641860][ T5889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.646606][ T5889] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 170.652063][ T5889] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 170.655458][ T5889] usb 5-1: Product: syz [ 170.657230][ T5889] usb 5-1: Manufacturer: syz [ 170.659198][ T5889] usb 5-1: SerialNumber: syz [ 170.663420][ T5889] usb 5-1: config 0 descriptor?? [ 170.668128][ T5889] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 170.680859][ T5842] usb 9-1: USB disconnect, device number 14 [ 171.888448][T10337] hsr0: entered promiscuous mode [ 171.929198][ T10] usb 6-1: USB disconnect, device number 14 [ 171.932325][ T5889] ldusb 5-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 171.936300][T10309] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -19 [ 171.947227][ T5889] usb 5-1: USB disconnect, device number 10 [ 171.964743][ T10] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 171.973073][ T5889] ldusb 5-1:0.0: LD USB Device #2 now disconnected [ 172.501383][T10348] sit0 speed is unknown, defaulting to 1000 [ 173.130072][T10397] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 173.136724][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1928'. [ 173.434382][T10413] syzkaller1: entered promiscuous mode [ 173.437015][T10413] syzkaller1: entered allmulticast mode [ 173.910440][ T5889] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 174.072164][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.076904][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.081219][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.086616][ T5889] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.090745][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.096503][ T5889] usb 5-1: config 0 descriptor?? [ 174.526426][ T5889] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 174.529602][ T5889] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 174.534380][ T5889] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 174.537644][ T5889] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 174.541085][ T5889] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 174.544593][ T5889] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 174.548127][ T5889] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 174.551307][ T5889] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 174.554588][ T5889] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 174.557110][ T5889] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 174.566459][ T5889] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 174.772399][ T860] usb 5-1: USB disconnect, device number 11 [ 174.785400][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1963'. [ 174.788337][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1963'. [ 174.884187][T10478] syzkaller1: entered promiscuous mode [ 174.886083][T10478] syzkaller1: entered allmulticast mode [ 175.011158][T10484] bridge1: entered promiscuous mode [ 175.012846][T10484] bridge1: entered allmulticast mode [ 175.021614][T10484] team0: Port device bridge1 added [ 175.034267][T10484] bridge0: port 3(team0) entered blocking state [ 175.037395][T10484] bridge0: port 3(team0) entered disabled state [ 175.039854][T10484] team0: entered allmulticast mode [ 175.042694][T10484] team_slave_0: entered allmulticast mode [ 175.044828][T10484] team_slave_1: entered allmulticast mode [ 175.053585][T10484] team0: entered promiscuous mode [ 175.055350][T10484] team_slave_0: entered promiscuous mode [ 175.057506][T10484] team_slave_1: entered promiscuous mode [ 175.060517][T10484] bridge0: port 3(team0) entered blocking state [ 175.062965][T10484] bridge0: port 3(team0) entered forwarding state [ 175.156347][T10490] syzkaller1: entered promiscuous mode [ 175.158626][T10490] syzkaller1: entered allmulticast mode [ 175.627373][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1975'. [ 175.719459][T10510] Bluetooth: MGMT ver 1.23 [ 175.877277][T10520] random: crng reseeded on system resumption [ 175.897318][T10520] Restarting kernel threads ... [ 175.913872][T10520] Done restarting kernel threads. [ 176.041466][T10537] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 176.077316][T10537] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 176.317155][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2005'. [ 176.403601][T10574] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2008'. [ 176.447350][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2009'. [ 176.590447][ T860] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 176.752226][ T860] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.755677][ T860] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 176.759270][ T860] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.762919][ T860] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 176.767064][ T860] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 176.772623][ T860] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.776023][ T860] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.778997][ T860] usb 9-1: Product: syz [ 176.780712][ T860] usb 9-1: Manufacturer: syz [ 176.786698][ T860] cdc_wdm 9-1:1.0: skipping garbage [ 176.788815][ T860] cdc_wdm 9-1:1.0: skipping garbage [ 176.792399][ T860] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 176.794813][ T860] cdc_wdm 9-1:1.0: Unknown control protocol [ 177.018552][ T5528] usb 9-1: USB disconnect, device number 15 [ 178.111542][ T5889] kernel read not supported for file /dsp1 (pid: 5889 comm: kworker/0:5) [ 178.373316][T10626] sit0: entered promiscuous mode [ 178.375091][T10626] netlink: 'syz.4.2031': attribute type 1 has an invalid length. [ 178.377832][T10626] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2031'. [ 178.435405][T10632] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2033'. [ 178.507299][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2038'. [ 178.872141][T10659] loop3: detected capacity change from 0 to 9 [ 179.660449][ T29] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 179.680621][ T5889] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 179.823215][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.827868][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.832158][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.837417][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.841411][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.844106][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.846973][ T29] usb 5-1: config 0 descriptor?? [ 179.850825][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.855522][ T5889] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.861188][ T5889] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.864108][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.868506][ T5889] usb 9-1: config 0 descriptor?? [ 180.272521][ T29] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 180.282703][ T5889] hid_parser_main: 5 callbacks suppressed [ 180.282723][ T5889] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 180.294821][ T5889] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 180.298299][ T5889] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 180.299481][ T29] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 180.306703][ T5889] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 180.313004][ T5889] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 180.319463][ T5889] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 180.325463][ T5889] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 180.329352][ T5889] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 180.332955][ T5889] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 180.335322][ T5889] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 180.348689][ T5889] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 180.537548][ T29] usb 9-1: USB disconnect, device number 16 [ 180.544556][ T40] usb 5-1: USB disconnect, device number 12 [ 180.960501][ T5745] Bluetooth: hci1: command 0x0406 tx timeout [ 181.061765][T10680] comedi comedi1: reset error (fatal) [ 181.141048][T10690] kvm: user requested TSC rate below hardware speed [ 182.912239][ T5889] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 183.061985][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.066357][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.070367][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.074953][ T5889] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.078537][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.087520][ T5889] usb 6-1: config 0 descriptor?? [ 183.514669][ T5889] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 183.763132][ T5889] usb 6-1: USB disconnect, device number 15 [ 183.983116][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2106'. [ 186.241997][ T5746] Bluetooth: hci1: command 0x0406 tx timeout [ 186.242119][T10807] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 187.099519][T10807] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 187.116901][T10807] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.119489][T10807] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 187.124874][T10807] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 187.134611][T10807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.136789][T10807] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 187.142428][T10807] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 187.192236][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2129'. [ 187.196630][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2129'. [ 187.421405][ T5528] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 187.511269][ T846] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 187.580374][ T5528] usb 5-1: Using ep0 maxpacket: 8 [ 187.584500][ T5528] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.587868][ T5528] usb 5-1: config 0 has no interface number 0 [ 187.590943][ T5528] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.595347][ T5528] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.599071][ T5528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.609364][ T5528] usb 5-1: config 0 descriptor?? [ 187.618585][ T5528] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 187.660487][ T846] usb 9-1: Using ep0 maxpacket: 8 [ 187.665584][ T846] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.668210][ T846] usb 9-1: config 0 has no interface number 0 [ 187.670555][ T846] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.674654][ T846] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.678453][ T846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.685740][ T846] usb 9-1: config 0 descriptor?? [ 187.694634][ T846] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 187.773999][T10893] loop2: detected capacity change from 0 to 7 [ 187.783106][T10893] Dev loop2: unable to read RDB block 7 [ 187.785450][T10893] loop2: AHDI p1 p2 p3 [ 187.787448][T10893] loop2: partition table partially beyond EOD, truncated [ 187.791524][T10893] loop2: p1 start 1601398130 is beyond EOD, truncated [ 187.794486][T10893] loop2: p2 start 1702059890 is beyond EOD, truncated [ 188.321685][ T5746] Bluetooth: hci1: command 0x0406 tx timeout [ 188.730377][ T29] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 188.882198][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 188.887282][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.891935][ T5528] usb 9-1: USB disconnect, device number 17 [ 188.893340][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.905412][ T5825] usb 5-1: USB disconnect, device number 13 [ 188.912634][ T29] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 188.923239][ T29] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 188.927279][ T29] usb 6-1: Manufacturer: syz [ 188.938593][ T29] usb 6-1: config 0 descriptor?? [ 189.121554][ T5746] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.201459][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.234913][T10927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2156'. [ 189.238710][T10927] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2156'. [ 189.242545][T10927] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 189.245632][T10927] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 189.248928][T10927] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 189.253763][T10927] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 189.257122][T10927] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 189.260432][T10927] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2156'. [ 189.371263][ T29] input: syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:041E:3100.000F/input/input22 [ 189.467918][ T29] creative-sb0540 0003:041E:3100.000F: input,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 189.529547][T10940] input: syz0 as /devices/virtual/input/input23 [ 189.570239][ T29] usb 6-1: USB disconnect, device number 16 [ 189.598081][T10946] could not open pipe file descriptor [ 189.708402][T10950] fido_id[10950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/6-1/report_descriptor': No such file or directory [ 189.889319][T10965] syzkaller1: entered promiscuous mode [ 189.891583][T10965] syzkaller1: entered allmulticast mode [ 190.028175][T10977] lapbether: lapb_data_request error - 4 [ 190.068450][T10979] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 190.251781][ T42] audit: type=1326 audit(1783004857.819:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.2189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 190.269999][ T42] audit: type=1326 audit(1783004857.819:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.2189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 190.289512][ T42] audit: type=1326 audit(1783004857.839:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.2189" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 190.289562][ T42] audit: type=1326 audit(1783004857.839:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.2189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 190.289599][ T42] audit: type=1326 audit(1783004857.839:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.2189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 190.289633][ T42] audit: type=1326 audit(1783004857.839:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.2189" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 190.289678][ T42] audit: type=1326 audit(1783004857.839:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.2189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 190.289716][ T42] audit: type=1326 audit(1783004857.839:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.2189" exe="/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 190.289753][ T42] audit: type=1326 audit(1783004857.839:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.2189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 190.289790][ T42] audit: type=1326 audit(1783004857.839:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.2189" exe="/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 190.339475][T11003] 9p: Bad value for 'rfdno' [ 190.354907][T11004] Trying to write to read-only block-device nullb0 [ 190.490457][ T846] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 190.643335][ T846] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 190.647620][ T846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.654837][ T846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.658675][ T846] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 190.664926][ T846] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 190.667821][ T846] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 190.673823][ T846] usb 5-1: Manufacturer: syz [ 190.674667][T11029] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2197'. [ 190.681263][ T846] usb 5-1: config 0 descriptor?? [ 190.831358][ T5746] Bluetooth: hci3: Invalid handle: 0xffc9 > 0x0eff [ 190.901056][T11050] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2212'. [ 191.091189][ T846] hid_parser_main: 5 callbacks suppressed [ 191.091212][ T846] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 191.112069][ T846] appleir 0003:05AC:8243.0010: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 191.201528][ T5746] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.280418][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.352017][ T56] usb 5-1: USB disconnect, device number 14 [ 191.680397][ T5889] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 191.832151][ T5889] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.837116][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.842221][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.846281][ T5889] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.850730][ T5889] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.853734][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.857654][ T5889] usb 9-1: config 0 descriptor?? [ 191.937146][T11084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2226'. [ 191.940127][T11084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2226'. [ 191.994389][T11086] sit0 speed is unknown, defaulting to 1000 [ 192.278749][ T5889] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 192.282256][ T5889] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 192.284712][ T5889] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 192.287345][ T5889] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 192.292412][ T5889] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 192.294733][ T5889] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 192.301916][ T5889] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 192.304331][ T5889] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 192.318687][ T5889] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 192.332328][ T5889] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 192.542323][ T5825] usb 9-1: USB disconnect, device number 18 [ 192.760476][ T29] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 192.910796][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 192.914469][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.918589][ T29] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.922109][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.927104][ T29] usb 6-1: config 0 descriptor?? [ 193.108392][T11151] loop8: detected capacity change from 0 to 8 [ 193.113099][T11151] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 193.115648][T11151] loop8: p1 start 645956396 is beyond EOD, truncated [ 193.117835][T11151] loop8: p2 start 906413296 is beyond EOD, truncated [ 193.119966][T11151] loop8: p3 start 2873014846 is beyond EOD, truncated [ 193.122200][T11151] loop8: p4 start 1134901460 is beyond EOD, truncated [ 193.124391][T11151] loop8: p5 start 209366909 is beyond EOD, truncated [ 193.126648][T11151] loop8: p6 start 1461000868 is beyond EOD, truncated [ 193.129057][T11151] loop8: p7 start 506136368 is beyond EOD, truncated [ 193.136233][T11151] loop8: p8 start 1158604876 is beyond EOD, truncated [ 193.139133][T11151] loop8: p9 start 2694267809 is beyond EOD, truncated [ 193.141285][ T29] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 193.145344][T11151] loop8: p10 start 4118967809 is beyond EOD, truncated [ 193.148213][T11151] loop8: p11 start 309916368 is beyond EOD, truncated [ 193.152683][T11151] loop8: p12 start 3621990746 is beyond EOD, truncated [ 193.292415][ T5746] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.360475][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.510364][ T846] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 193.595012][ T56] usb 6-1: USB disconnect, device number 17 [ 193.683796][ T846] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 193.688213][ T846] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.696613][ T846] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.702589][ T846] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.710382][ T846] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.720312][ T846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.724828][ T846] usb 9-1: config 0 descriptor?? [ 194.151238][ T846] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 194.273618][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2263'. [ 194.403496][ T29] usb 9-1: USB disconnect, device number 19 [ 194.502823][T11189] sit0 speed is unknown, defaulting to 1000 [ 195.228865][T11239] input: syz1 as /devices/virtual/input/input24 [ 195.319715][T11247] batman_adv: batadv0: Adding interface: dummy0 [ 195.322569][T11247] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.333700][T11247] batman_adv: batadv0: Interface activated: dummy0 [ 195.583432][T11271] 9p: Bad value for 'rfdno' [ 195.653489][T11277] sit0 speed is unknown, defaulting to 1000 [ 196.190420][ T5528] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 196.334740][T11315] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2325'. [ 196.340808][ T5528] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 196.345411][ T5528] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.348747][ T5528] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.353634][ T5528] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.357910][ T5528] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.361862][ T5528] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.365687][ T5528] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.369093][ T5528] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.373654][ T5528] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.378991][ T5528] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.382986][ T5528] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.386381][ T5528] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.389861][ T5528] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.393190][ T5528] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.397086][ T5528] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.402527][ T5528] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.406660][ T5528] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.410582][ T5528] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.414595][ T5528] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.419125][ T5528] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.423990][ T5528] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.428310][ T5528] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.432535][ T5528] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.436365][ T5528] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.441233][ T5528] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.446039][ T5528] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 196.449844][ T5528] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 196.453854][ T5528] usb 6-1: Product: syz [ 196.455610][ T5528] usb 6-1: Manufacturer: syz [ 196.457550][ T5528] usb 6-1: SerialNumber: syz [ 196.463154][ T5528] usb 6-1: config 0 descriptor?? [ 196.475126][ T5528] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 196.728275][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 196.735051][ T5528] usb 6-1: USB disconnect, device number 18 [ 196.742070][ T5528] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 197.107617][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2342'. [ 197.111883][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2342'. [ 197.114835][T11352] netlink: 'syz.0.2342': attribute type 15 has an invalid length. [ 197.187729][T11360] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 197.470335][ T29] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 197.632137][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.637107][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.641180][ T29] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 197.644848][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.650995][ T29] usb 9-1: config 0 descriptor?? [ 197.838486][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2371'. [ 197.849478][T11416] netlink: 'syz.1.2371': attribute type 10 has an invalid length. [ 197.852161][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2371'. [ 197.864481][T11416] geneve2: entered promiscuous mode [ 197.866401][T11416] geneve2: entered allmulticast mode [ 198.021501][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2373'. [ 198.075080][ T29] hid_parser_main: 21 callbacks suppressed [ 198.075096][ T29] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 198.084975][ T29] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 198.098436][ T29] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.0013/input/input25 [ 198.123089][ T29] cm6533_jd 0003:0D8C:0022.0013: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 198.281778][ T56] usb 9-1: USB disconnect, device number 20 [ 198.345815][T11452] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 198.437416][T11462] netlink: 83 bytes leftover after parsing attributes in process `syz.0.2389'. [ 198.800013][T11487] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 198.995626][T11503] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2407'. [ 199.038497][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2410'. [ 199.362455][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.442199][T11481] orangefs_mount: mount request failed with -4 [ 200.022661][T11574] netlink: 'syz.0.2440': attribute type 1 has an invalid length. [ 200.029332][T11574] netlink: 'syz.0.2440': attribute type 2 has an invalid length. [ 200.032961][T11574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2440'. [ 200.275319][T11596] overlayfs: failed to clone lowerpath [ 200.281314][T11596] overlayfs: failed to clone lowerpath [ 200.313885][T11601] overlayfs: failed to clone upperpath [ 200.329643][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2453'. [ 200.761152][T11625] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 200.950070][T11642] loop5: detected capacity change from 0 to 7 [ 200.955187][T11642] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 200.959773][T11642] loop5: partition table partially beyond EOD, truncated [ 200.967488][T11642] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 200.977522][T11642] loop5: p2 start 832840281 is beyond EOD, truncated [ 201.006204][ T9513] udevd[9513]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 201.019398][T11652] overlayfs: failed lookup in lower (newroot/415, name='file0', err=-40): overlapping layers [ 201.190957][ T56] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 201.250411][ T5528] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 201.301444][ T5842] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 201.360604][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 201.367303][ T56] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.369900][ T56] usb 5-1: config 0 has no interface number 0 [ 201.372389][ T56] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.375948][ T56] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.378821][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.388862][ T56] usb 5-1: config 0 descriptor?? [ 201.401948][ T5528] usb 6-1: Using ep0 maxpacket: 8 [ 201.404726][ T56] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 201.410648][ T5528] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 201.418192][ T5528] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 201.422714][ T5528] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.426187][ T5528] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.430746][ T5528] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.433561][ T5528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.460362][ T5842] usb 9-1: Using ep0 maxpacket: 8 [ 201.464387][ T5842] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 201.467906][ T5842] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 201.471605][ T5842] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 201.474718][ T5842] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 201.478166][ T5842] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 201.481773][ T5842] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.486355][ T5842] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.489319][ T5842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.607973][ T10] usb 5-1: USB disconnect, device number 15 [ 201.646480][ T5528] usb 6-1: GET_CAPABILITIES returned 0 [ 201.648175][ T5528] usbtmc 6-1:16.0: can't read capabilities [ 201.715048][ T5842] usb 9-1: GET_CAPABILITIES returned 0 [ 201.716770][ T5842] usbtmc 9-1:16.0: can't read capabilities [ 201.850715][ T10] usb 6-1: USB disconnect, device number 19 [ 201.924164][ T56] usb 9-1: USB disconnect, device number 21 [ 202.433012][T11708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2498'. [ 202.521723][T11718] netlink: 'syz.3.2503': attribute type 2 has an invalid length. [ 202.720213][T11733] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2510'. [ 202.783151][T11739] sctp: [Deprecated]: syz.3.2512 (pid 11739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.783151][T11739] Use struct sctp_sack_info instead [ 202.817072][T11743] all (unregistering): Released all slaves [ 202.852618][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 202.852633][ T42] audit: type=1804 audit(1783004870.429:1985): pid=11748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2516" name="cgroup.controllers" dev="tmpfs" ino=3372 res=1 errno=0 [ 202.862638][ T42] audit: type=1800 audit(1783004870.429:1986): pid=11748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2516" name="cgroup.controllers" dev="tmpfs" ino=3372 res=0 errno=0 [ 203.025462][ T5842] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 203.037355][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2521'. [ 203.173408][ T5842] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.178661][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.184281][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 203.187256][ T5842] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.191520][ T5842] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.194414][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.198373][ T5842] usb 6-1: config 0 descriptor?? [ 203.616728][ T5842] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 203.619154][ T5842] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 203.621926][ T5842] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 203.624313][ T5842] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 203.626730][ T5842] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 203.629102][ T5842] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 203.631924][ T5842] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 203.634285][ T5842] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 203.636556][ T5842] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 203.639022][ T5842] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 203.646613][ T5842] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 203.877696][ T10] usb 6-1: USB disconnect, device number 20 [ 204.080282][T11816] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2540'. [ 204.308372][ T42] audit: type=1326 audit(1783004871.879:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11822 comm="syz.0.2543" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x0 [ 204.426888][T11828] sit0 speed is unknown, defaulting to 1000 [ 204.468924][T11831] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2544'. [ 204.473024][T11831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.040384][ T5849] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 205.222347][ T5849] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.234382][ T5849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 205.238944][ T5849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 205.246578][ T5849] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.259230][ T5849] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.265732][ T5849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.303360][ T5849] usb 9-1: config 0 descriptor?? [ 205.307718][T11840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.388666][T11857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2564'. [ 205.559340][T11869] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 205.562781][T11869] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 205.624182][T11877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2567'. [ 205.730214][ T5849] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd [ 205.739121][ T5849] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 205.992302][ T5849] usb 9-1: USB disconnect, device number 22 [ 206.678019][T11898] serio: Serial port ptm0 [ 207.030378][T11926] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 207.390550][ T5849] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 207.393924][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2599'. [ 207.409615][T11939] netlink: 65011 bytes leftover after parsing attributes in process `syz.3.2599'. [ 207.551230][ T5849] usb 5-1: Using ep0 maxpacket: 8 [ 207.554747][ T5849] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 207.557557][ T5849] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 207.561388][ T5849] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 207.564621][ T5849] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 207.568129][ T5849] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 207.571612][ T5849] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.575735][ T5849] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.578899][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.799761][ T5849] usb 5-1: GET_CAPABILITIES returned 0 [ 207.801689][ T5849] usbtmc 5-1:16.0: can't read capabilities [ 208.002453][ C2] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 208.009250][T11932] usbtmc 5-1:16.0: Unable to send data, error -71 [ 208.025484][ T5849] usb 5-1: USB disconnect, device number 16 [ 208.296176][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2603'. [ 208.579837][T11987] overlayfs: failed to clone upperpath [ 208.633322][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2613'. [ 208.981263][ T860] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 208.997511][T12018] syzkaller1: entered promiscuous mode [ 208.999289][T12018] syzkaller1: entered allmulticast mode [ 209.130951][ T860] usb 6-1: Using ep0 maxpacket: 8 [ 209.134969][ T860] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 209.137879][ T860] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 209.143015][ T860] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 209.147004][ T860] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 209.151087][ T860] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 209.155266][ T860] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.159845][ T860] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.163758][ T860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.382786][ T860] usb 6-1: GET_CAPABILITIES returned 0 [ 209.385192][ T860] usbtmc 6-1:16.0: can't read capabilities [ 209.590939][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 209.600502][T12005] usbtmc 6-1:16.0: Unable to send data, error -71 [ 209.605035][ T5528] usb 6-1: USB disconnect, device number 21 [ 209.752613][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'. [ 209.842196][T12051] loop3: detected capacity change from 0 to 7 [ 209.845329][T12051] Dev loop3: unable to read RDB block 7 [ 209.847222][T12051] loop3: unable to read partition table [ 209.849155][T12051] loop3: partition table beyond EOD, truncated [ 209.853020][T12051] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.324802][T12078] syzkaller1: entered promiscuous mode [ 210.326695][T12078] syzkaller1: entered allmulticast mode [ 211.062567][T12107] syzkaller1: entered promiscuous mode [ 211.065274][T12107] syzkaller1: entered allmulticast mode [ 212.551935][T12113] syzkaller1: entered promiscuous mode [ 212.553819][T12113] syzkaller1: entered allmulticast mode [ 212.723893][ T5528] IPVS: starting estimator thread 0... [ 212.733509][T12131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2676'. [ 212.831317][T12130] IPVS: using max 43 ests per chain, 103200 per kthread [ 212.939313][T12159] 9p: Bad value for 'rfdno' [ 213.331125][ T5528] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 213.365479][T12192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.410195][T12195] fuse: fd is not a fuse device [ 213.410420][ T860] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 213.480415][ T5528] usb 6-1: Using ep0 maxpacket: 32 [ 213.484262][ T5528] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 213.489214][ T5528] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 213.492326][ T5528] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 213.495291][ T5528] usb 6-1: Product: syz [ 213.496725][ T5528] usb 6-1: Manufacturer: syz [ 213.498280][ T5528] usb 6-1: SerialNumber: syz [ 213.507492][ T5528] usb 6-1: config 0 descriptor?? [ 213.510188][T12171] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 213.513857][ T5528] hub 6-1:0.0: bad descriptor, ignoring hub [ 213.515711][ T5528] hub 6-1:0.0: probe with driver hub failed with error -5 [ 213.573949][ T860] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 213.577460][ T860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.581061][ T860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.584455][ T860] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.593112][ T860] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.596207][ T860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.604403][ T860] usb 5-1: config 0 descriptor?? [ 213.660420][ T5849] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 213.812324][ T5849] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 213.817355][ T5849] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.821202][ T5849] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.825707][ T5849] usb 9-1: config 0 interface 0 has no altsetting 0 [ 213.829615][ T5849] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.832582][ T5849] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.835937][ T5849] usb 9-1: config 0 interface 0 has no altsetting 0 [ 213.838948][ T5849] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.842354][ T5849] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.845741][ T5849] usb 9-1: config 0 interface 0 has no altsetting 0 [ 213.848662][ T5849] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.851599][ T5849] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.855085][ T5849] usb 9-1: config 0 interface 0 has no altsetting 0 [ 213.858107][ T5849] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.860957][ T5849] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.864338][ T5849] usb 9-1: config 0 interface 0 has no altsetting 0 [ 213.867390][ T5849] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.870356][ T5849] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.873751][ T5849] usb 9-1: config 0 interface 0 has no altsetting 0 [ 213.876647][ T5849] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.879502][ T5849] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.883036][ T5849] usb 9-1: config 0 interface 0 has no altsetting 0 [ 213.886166][ T5849] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.889030][ T5849] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.892436][ T5849] usb 9-1: config 0 interface 0 has no altsetting 0 [ 213.896332][ T5849] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 213.899249][ T5849] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 213.901931][ T5849] usb 9-1: Product: syz [ 213.903295][ T5849] usb 9-1: Manufacturer: syz [ 213.904809][ T5849] usb 9-1: SerialNumber: syz [ 213.908770][ T5849] usb 9-1: config 0 descriptor?? [ 213.918533][ T5849] yurex 9-1:0.0: USB YUREX device now attached to Yurex #1 [ 214.025569][ T860] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 214.035431][ T860] plantronics 0003:047F:FFFF.0016: hiddev2,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 214.137979][T12171] usb 6-1: reset high-speed USB device number 22 using dummy_hcd [ 214.196338][ T860] usb 9-1: USB disconnect, device number 23 [ 214.226573][ T5825] usb 5-1: USB disconnect, device number 17 [ 214.295929][T12171] usb 6-1: device firmware changed [ 214.303801][ T860] yurex 9-1:0.0: USB YUREX #1 now disconnected [ 214.304214][ T29] usb 6-1: USB disconnect, device number 22 [ 214.450380][ T29] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 214.600349][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 214.603282][ T29] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 214.608405][ T29] usb 6-1: string descriptor 0 read error: -22 [ 214.610349][ T29] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 214.612998][ T29] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 214.616749][ T29] usb 6-1: config 0 descriptor?? [ 214.619440][T12197] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.622652][ T29] hub 6-1:0.0: bad descriptor, ignoring hub [ 214.624457][ T29] hub 6-1:0.0: probe with driver hub failed with error -5 [ 214.940593][ T5528] usb 6-1: USB disconnect, device number 23 [ 215.499498][T12226] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2714'. [ 215.799231][T12256] overlayfs: failed to clone upperpath [ 217.890423][ T5528] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 217.909480][T12364] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 218.040394][ T5528] usb 5-1: Using ep0 maxpacket: 8 [ 218.044564][ T5528] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 218.050452][ T5528] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.055327][ T5528] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.059345][ T5528] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.063612][ T5528] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.068369][ T5528] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 218.071573][ T5528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.144894][T12381] sit0 speed is unknown, defaulting to 1000 [ 218.178516][T12382] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2771'. [ 218.186821][T12382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.286313][ T5528] usb 5-1: usb_control_msg returned -32 [ 218.288216][ T5528] usbtmc 5-1:16.0: can't read capabilities [ 218.428766][T12387] lo: entered allmulticast mode [ 218.438742][T12387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.644388][T12392] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 218.845399][ T860] usb 5-1: USB disconnect, device number 18 [ 219.135003][T12421] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 219.350615][ T29] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 219.502775][ T29] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 219.507501][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.512263][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.516687][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 219.523354][ T29] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 219.526351][ T29] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 219.529032][ T29] usb 9-1: Manufacturer: syz [ 219.533384][ T29] usb 9-1: config 0 descriptor?? [ 219.954889][ T29] hid_parser_main: 5 callbacks suppressed [ 219.954956][ T29] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 219.967304][ T29] appleir 0003:05AC:8243.0017: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 220.216397][ T860] usb 9-1: USB disconnect, device number 24 [ 222.010429][ T860] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 222.163527][ T860] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 222.167217][ T860] usb 5-1: config 0 has no interface number 0 [ 222.170433][ T860] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 222.175102][ T860] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 222.179617][ T860] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 222.185728][ T860] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 222.189848][ T860] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 222.193236][ T860] usb 5-1: Product: syz [ 222.195086][ T860] usb 5-1: SerialNumber: syz [ 222.201753][ T860] usb 5-1: config 0 descriptor?? [ 222.208149][ T860] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 222.214607][ T860] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input28 [ 222.411496][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 222.435684][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2822'. [ 222.439279][T12510] netlink: 'syz.1.2822': attribute type 1 has an invalid length. [ 222.446155][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2822'. [ 222.545552][T12519] netlink: 'syz.1.2826': attribute type 30 has an invalid length. [ 222.548535][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2826'. [ 222.704971][ T40] usb 5-1: USB disconnect, device number 19 [ 222.707244][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 222.710085][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 222.721388][ T40] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 222.828716][ T42] audit: type=1800 audit(1783005146.408:1988): pid=12546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2839" name="nullb0" dev="tmpfs" ino=3865 res=0 errno=0 [ 222.905906][T12552] gtp0: entered promiscuous mode [ 222.907991][T12552] gtp0: entered allmulticast mode [ 223.007937][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2846'. [ 223.010898][T12561] netlink: 'syz.3.2846': attribute type 20 has an invalid length. [ 223.013477][T12561] netlink: 'syz.3.2846': attribute type 21 has an invalid length. [ 223.115870][T12566] sit0 speed is unknown, defaulting to 1000 [ 223.149718][T12567] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2848'. [ 223.153675][T12567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.488792][T12579] netlink: 'syz.3.2853': attribute type 8 has an invalid length. [ 223.491472][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2853'. [ 223.495506][T12579] netlink: 'syz.3.2853': attribute type 8 has an invalid length. [ 223.498385][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2853'. [ 223.849965][T12589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2858'. [ 224.078751][ T42] audit: type=1326 audit(1783005147.658:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.0.2849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7fc00000 [ 224.528379][T12633] syzkaller1: entered promiscuous mode [ 224.530196][T12633] syzkaller1: entered allmulticast mode [ 224.746253][T12652] sit0 speed is unknown, defaulting to 1000 [ 224.832277][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2891'. [ 224.835308][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2891'. [ 225.731989][T12656] syz.1.2889 (12656): drop_caches: 3 [ 225.786984][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2901'. [ 225.996187][T12704] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2909'. [ 226.136843][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2915'. [ 226.150747][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'. [ 226.223740][T12729] syzkaller1: entered promiscuous mode [ 226.225574][T12729] syzkaller1: entered allmulticast mode [ 226.247128][T12732] sctp: [Deprecated]: syz.3.2920 (pid 12732) Use of int in max_burst socket option. [ 226.247128][T12732] Use struct sctp_assoc_value instead [ 226.462389][T12750] sit0 speed is unknown, defaulting to 1000 [ 226.550476][ T29] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 226.743844][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.749104][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.754033][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.761711][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.771992][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.777701][ T29] usb 5-1: config 0 descriptor?? [ 227.201224][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 227.207713][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 227.214056][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 227.220420][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 227.226692][ T29] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 227.239357][ T29] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 227.614523][T12771] syzkaller1: entered promiscuous mode [ 227.616943][T12771] syzkaller1: entered allmulticast mode [ 227.678865][T12777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2936'. [ 227.770768][ T65] block nbd0: Receive control failed (result -107) [ 227.861904][T12785] input: syz1 as /devices/virtual/input/input29 [ 228.108398][T12810] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 228.420080][ T5528] usb 5-1: USB disconnect, device number 20 [ 228.500976][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2961'. [ 228.695811][T12849] binder: 12848:12849 ioctl 4018620d 0 returned -22 [ 228.850449][ T860] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 229.020461][ T860] usb 9-1: Using ep0 maxpacket: 16 [ 229.024894][ T860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.029133][ T860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.032664][ T860] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 229.038080][ T860] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 229.041100][ T860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.045033][ T860] usb 9-1: config 0 descriptor?? [ 229.468944][ T860] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.0019/input/input30 [ 229.566210][ T860] microsoft 0003:045E:07DA.0019: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 229.666025][ T29] usb 9-1: USB disconnect, device number 25 [ 229.726207][T12867] fuse: fd is not a fuse device [ 229.824665][ T42] audit: type=1326 audit(1783005153.408:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.3.2974" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5fec code=0x0 [ 230.258431][ T5528] IPVS: starting estimator thread 0... [ 230.284861][T12892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2984'. [ 230.360388][T12890] IPVS: using max 43 ests per chain, 103200 per kthread [ 230.689219][T12921] syzkaller1: entered promiscuous mode [ 230.692256][T12921] syzkaller1: entered allmulticast mode [ 230.898023][T12942] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 231.035820][T12958] netlink: 'syz.1.3016': attribute type 13 has an invalid length. [ 231.360430][ T40] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 231.379623][T12980] 9p: Invalid uid '0x00000000ffffffff' [ 231.438385][T12988] hsr0: entered promiscuous mode [ 231.441332][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3029'. [ 231.510339][ T40] usb 5-1: Using ep0 maxpacket: 8 [ 231.514767][ T40] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.528043][ T40] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.528056][T12988] hsr_slave_0: left promiscuous mode [ 231.534756][ T40] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.537569][ T40] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 231.540892][T12988] hsr_slave_1: left promiscuous mode [ 231.544137][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.549836][T12988] hsr0 (unregistering): left promiscuous mode [ 231.554767][ T40] usb 5-1: config 0 descriptor?? [ 231.969810][ T40] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 231.975813][ T40] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 231.980321][ T40] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 231.982603][ T40] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 231.986484][ T40] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 231.990187][ T40] mcp2221 0003:04D8:00DD.001A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 232.010451][ T5746] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 232.169353][ T10] usb 5-1: USB disconnect, device number 21 [ 233.058044][ T42] audit: type=1326 audit(1783005156.638:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13059 comm="syz.1.3060" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0 [ 233.392711][ T5528] libceph: connect (1)[c::]:6789 error -101 [ 233.398788][ T5528] libceph: mon0 (1)[c::]:6789 connect error [ 233.411242][ T5528] libceph: connect (1)[c::]:6789 error -101 [ 233.413773][ T5528] libceph: mon0 (1)[c::]:6789 connect error [ 233.424667][T13078] ceph: No mds server is up or the cluster is laggy [ 233.702705][T13111] trusted_key: syz.3.3081 sent an empty control message without MSG_MORE. [ 233.920747][ T5528] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 234.072094][ T5528] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.075579][ T5528] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 234.080645][ T5528] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.088129][ T5528] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 234.093043][ T5528] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 234.096467][ T5528] usb 5-1: Product: syz [ 234.098213][ T5528] usb 5-1: Manufacturer: syz [ 234.100143][ T5528] usb 5-1: SerialNumber: syz [ 234.132392][T13109] syz.4.3074 (13109): drop_caches: 3 [ 234.230958][T13121] fuse: fd is not a fuse device [ 234.294989][T13126] process '/newroot/820/file0' started with executable stack [ 234.317552][ T5528] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 234.353164][T13134] overlayfs: failed to clone lowerpath [ 234.515527][ T846] usb 5-1: USB disconnect, device number 22 [ 234.528972][ T846] usblp0: removed [ 234.570584][ T860] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 234.740317][ T860] usb 6-1: Using ep0 maxpacket: 8 [ 234.743412][ T860] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.746884][ T860] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.749902][ T860] usb 6-1: config 0 interface 0 has no altsetting 0 [ 234.752088][ T860] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 234.754873][ T860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.759301][ T860] usb 6-1: config 0 descriptor?? [ 235.157935][T13150] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3098'. [ 235.176548][ T860] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 235.179265][ T860] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 235.184141][ T860] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 235.192655][ T860] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 235.199668][ T860] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 235.203310][ T860] mcp2221 0003:04D8:00DD.001B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 235.378546][ T846] usb 6-1: USB disconnect, device number 24 [ 235.494108][T13145] syz.0.3095 (13145): drop_caches: 3 [ 235.925494][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3104'. [ 237.011002][T13235] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3137'. [ 237.084465][T13240] sit0 speed is unknown, defaulting to 1000 [ 237.132423][T13246] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 237.201940][ T42] audit: type=1326 audit(1783005160.788:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.0.3144" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x0 [ 237.441251][ T5746] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 237.866261][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 237.869099][T13282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3157'. [ 238.539985][T13314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3171'. [ 238.669714][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3174'. [ 238.725046][T13329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3178'. [ 239.954434][T13385] syzkaller1: entered promiscuous mode [ 239.959389][T13385] syzkaller1: entered allmulticast mode [ 240.163128][T13396] netlink: 'syz.0.3207': attribute type 23 has an invalid length. [ 241.127452][T13432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3222'. [ 241.135196][T13432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3222'. [ 241.294100][T13439] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 241.510589][T13457] input: syz1 as /devices/virtual/input/input31 [ 241.602516][T13465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3236'. [ 241.624929][T13467] netlink: 766 bytes leftover after parsing attributes in process `syz.4.3237'. [ 241.940464][ T29] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 241.981200][T13482] veth0_macvtap: Caught tx_queue_len zero misconfig [ 242.087683][T13485] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 242.091353][T13485] CPU: 2 UID: 0 PID: 13485 Comm: syz.1.3245 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.091388][T13485] Tainted: [L]=SOFTLOCKUP [ 242.091396][T13485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.091444][T13485] Call Trace: [ 242.091480][T13485] [ 242.091489][T13485] dump_stack_lvl+0x100/0x190 [ 242.091582][T13485] sysfs_warn_dup.cold+0x1c/0x28 [ 242.091635][T13485] sysfs_create_dir_ns+0x24b/0x2b0 [ 242.091699][T13485] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 242.091728][T13485] ? find_held_lock+0x2b/0x80 [ 242.091776][T13485] ? kobject_add_internal+0x25f/0x930 [ 242.091952][T13485] ? kobject_add_internal+0x25f/0x930 [ 242.091979][T13485] ? class_dir_child_ns_type+0xd/0x60 [ 242.092069][T13485] kobject_add_internal+0x2c8/0x930 [ 242.092099][T13485] kobject_add+0x16a/0x1e0 [ 242.092120][T13485] ? __pfx_kobject_add+0x10/0x10 [ 242.092143][T13485] ? get_device_parent+0x1b3/0x4c0 [ 242.092168][T13485] ? kobject_put+0xb9/0x640 [ 242.092195][T13485] device_add+0x294/0x1970 [ 242.092222][T13485] ? lockdep_init_map_type+0x5c/0x250 [ 242.092252][T13485] ? __pfx_device_add+0x10/0x10 [ 242.092277][T13485] ? lockdep_init_map_type+0x5c/0x250 [ 242.092307][T13485] ? __init_waitqueue_head+0xca/0x150 [ 242.092351][T13485] tty_register_device_attr+0x388/0x7f0 [ 242.092400][T13485] ? lockdep_init_map_type+0x5c/0x250 [ 242.092433][T13485] ? __pfx_tty_register_device_attr+0x10/0x10 [ 242.092467][T13485] ? tty_port_init+0x156/0x1c0 [ 242.092498][T13485] gsm_activate_mux+0x155/0x2a0 [ 242.092526][T13485] gsmld_ioctl+0xbbc/0x15c0 [ 242.092561][T13485] ? __pfx_gsmld_ioctl+0x10/0x10 [ 242.092608][T13485] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 242.092660][T13485] ? __pfx_gsmld_ioctl+0x10/0x10 [ 242.092688][T13485] tty_compat_ioctl+0x396/0x420 [ 242.092714][T13485] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 242.092739][T13485] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 242.092793][T13485] __do_fast_syscall_32+0xe7/0x970 [ 242.092829][T13485] do_fast_syscall_32+0x32/0x70 [ 242.092862][T13485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.092886][T13485] RIP: 0023:0xf702efec [ 242.092913][T13485] Code: Unable to access opcode bytes at 0xf702efc2. [ 242.092969][T13485] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 242.092992][T13485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000404c4701 [ 242.093005][T13485] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.093018][T13485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.093031][T13485] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 242.093044][T13485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.093072][T13485] [ 242.093295][T13485] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 242.103224][ T29] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.191974][ T29] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 242.195002][ T29] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.197833][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.208819][T13476] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.215960][ T29] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.430335][ T29] usb 9-1: USB disconnect, device number 26 [ 242.475238][T13491] input: syz0 as /devices/virtual/input/input32 [ 243.126439][T13543] sg_write: process 1736 (syz.1.3261) changed security contexts after opening file descriptor, this is not allowed. [ 243.193286][T13551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3264'. [ 243.644817][T13587] block device autoloading is deprecated and will be removed. [ 243.935346][ C2] ------------[ cut here ]------------ [ 243.937590][ C2] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 243.941745][ C2] WARNING: net/mac80211/rate.c:399 at __rate_control_send_low+0x61a/0x780, CPU#2: swapper/2/0 [ 243.945853][ C2] Modules linked in: [ 243.948381][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.952854][ C2] Tainted: [L]=SOFTLOCKUP [ 243.954670][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.958788][ C2] RIP: 0010:__rate_control_send_low+0x62b/0x780 [ 243.961196][ C2] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 5d 57 de f6 48 8d 3d e6 0d 09 06 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 25 fd ff ff 48 8b 7c 24 28 e8 01 d0 4d f7 e9 2e [ 243.967324][ C2] RSP: 0000:ffffc900005388e8 EFLAGS: 00010246 [ 243.969135][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 243.971528][ C2] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9133e2d0 [ 243.974333][ C2] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 243.977250][ C2] R10: 000000000000000c R11: 0000000000000000 R12: ffff888013f60668 [ 243.979698][ C2] R13: ffff88806d733248 R14: 0000000000000000 R15: dffffc0000000000 [ 243.982177][ C2] FS: 0000000000000000(0000) GS:ffff888096df8000(0000) knlGS:0000000000000000 [ 243.985511][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.988016][ C2] CR2: 00000000f72be817 CR3: 00000000675f9000 CR4: 0000000000352ef0 [ 243.991180][ C2] Call Trace: [ 243.992572][ C2] [ 243.993712][ C2] rate_control_send_low+0x2a8/0x7e0 [ 243.995786][ C2] rate_control_get_rate+0x1be/0x5c0 [ 243.997909][ C2] ieee80211_beacon_get_finish+0x45a/0x690 [ 244.000302][ C2] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 244.002971][ C2] ? __ieee80211_beacon_get_ap+0x7bb/0x10d0 [ 244.005455][ C2] ? __ieee80211_beacon_get_ap+0x7bb/0x10d0 [ 244.007915][ C2] ? rcu_is_watching+0x12/0xc0 [ 244.009902][ C2] __ieee80211_beacon_get_ap+0x76e/0x10d0 [ 244.012264][ C2] __ieee80211_beacon_get+0x14fa/0x1ee0 [ 244.014471][ C2] ? __lock_acquire+0x49f/0x1a40 [ 244.016218][ C2] ieee80211_beacon_get_tim+0xa6/0x280 [ 244.017952][ C2] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 244.019965][ C2] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 244.022272][ C2] __iterate_interfaces+0x2e6/0x650 [ 244.023943][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 244.025804][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 244.027809][ C2] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 244.030133][ C2] mac80211_hwsim_beacon+0xe5/0x2a0 [ 244.031861][ C2] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 244.033745][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 244.035432][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 244.037024][ C2] handle_softirqs+0x1ea/0x9b0 [ 244.038882][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 244.040726][ C2] ? _raw_spin_unlock+0x28/0x50 [ 244.042243][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 244.044032][ C2] __irq_exit_rcu+0x162/0x210 [ 244.045563][ C2] irq_exit_rcu+0x9/0x30 [ 244.046905][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 244.048672][ C2] [ 244.049591][ C2] [ 244.050570][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.052426][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 244.054236][ C2] Code: 16 91 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 07 16 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 244.060450][ C2] RSP: 0000:ffffc9000047fe00 EFLAGS: 00000202 [ 244.062292][ C2] RAX: 0000000000223dc1 RBX: ffff88801cbf4a80 RCX: ffffffff8bb592d5 [ 244.064740][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a446c RDI: ffffffff8c3fff80 [ 244.067158][ C2] RBP: ffffed100397e950 R08: 0000000000000001 R09: ffffed100568678d [ 244.069717][ C2] R10: ffff88802b433c6b R11: 0000000000000000 R12: 0000000000000000 [ 244.072258][ C2] R13: 0000000000000000 R14: 1ffff9200008ffc4 R15: dffffc0000000000 [ 244.074627][ C2] ? ct_kernel_exit+0x125/0x180 [ 244.076480][ C2] default_idle+0x9/0x10 [ 244.077855][ C2] default_idle_call+0x6c/0xb0 [ 244.079501][ C2] do_idle+0x3a7/0x5b0 [ 244.081035][ C2] ? __pfx_do_idle+0x10/0x10 [ 244.082523][ C2] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 244.084455][ C2] cpu_startup_entry+0x4f/0x60 [ 244.085973][ C2] start_secondary+0x21d/0x2d0 [ 244.087564][ C2] ? __pfx_start_secondary+0x10/0x10 [ 244.089335][ C2] common_startup_64+0x13e/0x158 [ 244.091491][ C2] [ 244.092472][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 244.094748][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.097935][ C2] Tainted: [L]=SOFTLOCKUP [ 244.099302][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.102407][ C2] Call Trace: [ 244.103510][ C2] [ 244.104422][ C2] dump_stack_lvl+0x100/0x190 [ 244.105898][ C2] vpanic+0x552/0x970 [ 244.107190][ C2] ? __pfx_vpanic+0x10/0x10 [ 244.108917][ C2] panic+0xd1/0xe0 [ 244.110123][ C2] ? __pfx_panic+0x10/0x10 [ 244.111571][ C2] ? check_panic_on_warn+0x1f/0x90 [ 244.113192][ C2] check_panic_on_warn.cold+0x19/0x34 [ 244.114852][ C2] ? __rate_control_send_low+0x61a/0x780 [ 244.116607][ C2] __warn.cold+0x191/0x318 [ 244.118057][ C2] __report_bug+0x30f/0x440 [ 244.119509][ C2] ? __rate_control_send_low+0x61a/0x780 [ 244.121213][ C2] ? __pfx___report_bug+0x10/0x10 [ 244.122786][ C2] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 244.124728][ C2] report_bug_entry+0xe1/0x290 [ 244.126216][ C2] ? __rate_control_send_low+0x62b/0x780 [ 244.128040][ C2] handle_bug+0x1cd/0x2a0 [ 244.129360][ C2] exc_invalid_op+0x17/0x50 [ 244.130775][ C2] asm_exc_invalid_op+0x1a/0x20 [ 244.132249][ C2] RIP: 0010:__rate_control_send_low+0x62b/0x780 [ 244.134209][ C2] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 5d 57 de f6 48 8d 3d e6 0d 09 06 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 25 fd ff ff 48 8b 7c 24 28 e8 01 d0 4d f7 e9 2e [ 244.140332][ C2] RSP: 0000:ffffc900005388e8 EFLAGS: 00010246 [ 244.142221][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 244.144687][ C2] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9133e2d0 [ 244.147149][ C2] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 244.150044][ C2] R10: 000000000000000c R11: 0000000000000000 R12: ffff888013f60668 [ 244.152491][ C2] R13: ffff88806d733248 R14: 0000000000000000 R15: dffffc0000000000 [ 244.154959][ C2] ? __rate_control_send_low+0x613/0x780 [ 244.156719][ C2] rate_control_send_low+0x2a8/0x7e0 [ 244.158541][ C2] rate_control_get_rate+0x1be/0x5c0 [ 244.160237][ C2] ieee80211_beacon_get_finish+0x45a/0x690 [ 244.162076][ C2] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 244.164067][ C2] ? __ieee80211_beacon_get_ap+0x7bb/0x10d0 [ 244.165901][ C2] ? __ieee80211_beacon_get_ap+0x7bb/0x10d0 [ 244.167922][ C2] ? rcu_is_watching+0x12/0xc0 [ 244.169449][ C2] __ieee80211_beacon_get_ap+0x76e/0x10d0 [ 244.171250][ C2] __ieee80211_beacon_get+0x14fa/0x1ee0 [ 244.172999][ C2] ? __lock_acquire+0x49f/0x1a40 [ 244.174561][ C2] ieee80211_beacon_get_tim+0xa6/0x280 [ 244.176300][ C2] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 244.178447][ C2] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 244.180219][ C2] __iterate_interfaces+0x2e6/0x650 [ 244.181998][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 244.184022][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 244.185847][ C2] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 244.188057][ C2] mac80211_hwsim_beacon+0xe5/0x2a0 [ 244.189681][ C2] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 244.191462][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 244.193084][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 244.194715][ C2] handle_softirqs+0x1ea/0x9b0 [ 244.196204][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 244.197919][ C2] ? _raw_spin_unlock+0x28/0x50 [ 244.199468][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 244.201255][ C2] __irq_exit_rcu+0x162/0x210 [ 244.202727][ C2] irq_exit_rcu+0x9/0x30 [ 244.204083][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 244.205826][ C2] [ 244.206763][ C2] [ 244.207812][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.209689][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 244.211443][ C2] Code: 16 91 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 07 16 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 244.217380][ C2] RSP: 0000:ffffc9000047fe00 EFLAGS: 00000202 [ 244.219272][ C2] RAX: 0000000000223dc1 RBX: ffff88801cbf4a80 RCX: ffffffff8bb592d5 [ 244.221711][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a446c RDI: ffffffff8c3fff80 [ 244.224145][ C2] RBP: ffffed100397e950 R08: 0000000000000001 R09: ffffed100568678d [ 244.226586][ C2] R10: ffff88802b433c6b R11: 0000000000000000 R12: 0000000000000000 [ 244.229227][ C2] R13: 0000000000000000 R14: 1ffff9200008ffc4 R15: dffffc0000000000 [ 244.231720][ C2] ? ct_kernel_exit+0x125/0x180 [ 244.233698][ C2] default_idle+0x9/0x10 [ 244.235087][ C2] default_idle_call+0x6c/0xb0 [ 244.236616][ C2] do_idle+0x3a7/0x5b0 [ 244.237897][ C2] ? __pfx_do_idle+0x10/0x10 [ 244.239361][ C2] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 244.241506][ C2] cpu_startup_entry+0x4f/0x60 [ 244.243362][ C2] start_secondary+0x21d/0x2d0 [ 244.245370][ C2] ? __pfx_start_secondary+0x10/0x10 [ 244.247605][ C2] common_startup_64+0x13e/0x158 [ 244.249709][ C2] [ 244.251771][ C2] Kernel Offset: disabled [ 244.253643][ C2] Rebooting in 86400 seconds..