last executing test programs: 18m41.449317861s ago: executing program 2 (id=741): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) 18m38.40611518s ago: executing program 2 (id=768): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14bb42, 0x8c) r1 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 18m38.404827657s ago: executing program 2 (id=769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xb2, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330021ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589", 0x0, 0xfb, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 18m38.263151132s ago: executing program 2 (id=771): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x7) 18m38.176088339s ago: executing program 2 (id=773): socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000640)={r2, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x1c, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc30900000058128b3ad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35afcff0e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6a0000c5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8cad5ba139c01802c4dae4162e43ac61b7ad33", [0x9, 0x1]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default usez 00000000000000004093\x00'], 0x2a, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x400, 0x200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r4, r5, 0x25, 0x4, @val=@tcx}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 18m38.014060642s ago: executing program 2 (id=776): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4176, &(0x7f0000000180)={0x0, 0xa415, 0x10000, 0xfffffffe, 0x2ce}, &(0x7f0000000100), &(0x7f0000001080), &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000500)=""/146, 0x92}], 0x1, 0x808, 0x0) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x17, r0, 0xc, {0x7fffffffffffffff, 0x9}, 0x9}, 0x1) 18m37.93696206s ago: executing program 32 (id=776): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4176, &(0x7f0000000180)={0x0, 0xa415, 0x10000, 0xfffffffe, 0x2ce}, &(0x7f0000000100), &(0x7f0000001080), &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000500)=""/146, 0x92}], 0x1, 0x808, 0x0) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x17, r0, 0xc, {0x7fffffffffffffff, 0x9}, 0x9}, 0x1) 1.222027378s ago: executing program 0 (id=6626): unshare(0x4a000200) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x403, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30501}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x40041}, 0x24004890) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) socket$netlink(0x10, 0x3, 0x9) 986.363497ms ago: executing program 0 (id=6628): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x8, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x18, 0x7, 0x8, 0x800}, 0x9, 0x0, 0x75541b46, 0x4, 0x8, 0x18, 0x12, 0x8, 0x1, 0x1, {0x4, 0x38e1, 0xfffffc00, 0xc, 0x7, 0x80000001}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xfe46) clock_nanosleep(0xa, 0x0, 0x0, 0x0) 905.407456ms ago: executing program 0 (id=6632): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff23, 0x0, &(0x7f0000000800)={@flat=@weak_handle={0x77682a85, 0x100a}, @flat=@weak_binder={0x77622a85, 0xa}}, 0x0}}], 0x0, 0x0, 0x0}) 852.925444ms ago: executing program 0 (id=6634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_MAP={0x24, 0xe, {0x2, 0xfffffffffffff801, 0x9, 0x93, 0x8, 0x7}}]}, 0x60}}, 0x0) 797.030268ms ago: executing program 0 (id=6637): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x10001, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}], 0x0) keyctl$setperm(0x5, r3, 0x12310127) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000000c0)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) capset(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, 0x1c, 0x0}}], 0x2, 0x0) 682.331451ms ago: executing program 4 (id=6640): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, r0, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x30) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x8, 0x81}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f00000001c0)) 682.131316ms ago: executing program 4 (id=6641): prlimit64(0x0, 0xe, &(0x7f0000000600)={0xc, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto(r4, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x10000000000000) madvise(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x65) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000, &(0x7f0000001dc0)={0x85, 0x72, 0xa0000}, 0x20) io_uring_setup(0x657d, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYRES32], 0x2d, 0xfffffffffffffff9) 592.639334ms ago: executing program 0 (id=6644): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000040)={0x49, "c93eb2de09000040c700890000000000fb2697ffffff17000000000000000400"}}) 462.675719ms ago: executing program 4 (id=6649): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r0, &(0x7f0000000040)=""/48, 0x30, 0x4abb) 413.021134ms ago: executing program 4 (id=6650): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="9d", 0x1}], 0x1, &(0x7f0000000580)=[@init={0x18, 0x84, 0x0, {0x7fff, 0x6, 0x0, 0x4}}], 0x18, 0x8d5}, 0x24000052) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000280)) 342.34913ms ago: executing program 1 (id=6651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff23, 0x0, &(0x7f0000000800)={@flat=@weak_handle={0x77682a85, 0x100a}, @flat=@weak_binder={0x77622a85, 0xa}}, 0x0}}], 0x0, 0x0, 0x0}) 341.808046ms ago: executing program 1 (id=6654): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 262.396621ms ago: executing program 3 (id=6655): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x8, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x18, 0x7, 0x8, 0x800}, 0x9, 0x0, 0x75541b46, 0x4, 0x8, 0x18, 0x12, 0x8, 0x1, 0x1, {0x4, 0x38e1, 0xfffffc00, 0xc, 0x7, 0x80000001}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xfe46) clock_nanosleep(0xa, 0x0, 0x0, 0x0) 262.074261ms ago: executing program 1 (id=6656): unshare(0x2c020400) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 261.961911ms ago: executing program 4 (id=6657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a11, 0x20a3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 261.341782ms ago: executing program 3 (id=6658): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000008c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000280)="ad0778d252", 0x5, 0x3}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x7, 0x280000000}) 192.786876ms ago: executing program 4 (id=6659): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a21"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xb, 0x2}, 0x10, 0x128b4, 0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) write(r3, &(0x7f00000000c0)="af0562", 0x3) 192.586042ms ago: executing program 3 (id=6660): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/4109) 192.440575ms ago: executing program 1 (id=6661): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) gettid() openat$vcsa(0xffffffffffffff9c, 0x0, 0x28100, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff28bd5d00f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000faff300012800b000100697036746e6c000020000280140002002001000000000000000000000000000205000d0004000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) 192.259672ms ago: executing program 3 (id=6662): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="de", 0x1}], 0x1}, 0x4) 152.785023ms ago: executing program 1 (id=6663): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff23, 0x0, &(0x7f0000000800)={@flat=@weak_handle={0x77682a85, 0x100a}, @flat=@weak_binder={0x77622a85, 0xa}}, 0x0}}], 0x0, 0x0, 0x0}) 82.670892ms ago: executing program 1 (id=6664): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x2440, 0x66) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0xc, 0x1ff]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 270.641µs ago: executing program 3 (id=6665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=6666): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000012c000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0x68) pread64(0xffffffffffffffff, 0x0, 0x0, 0xd5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x6c13, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): command tx timeout [ 1309.646337][T25223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.650134][T25223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1309.666278][T25223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.776516][T25223] hsr_slave_0: entered promiscuous mode [ 1309.794341][T25223] hsr_slave_1: entered promiscuous mode [ 1309.802410][T25223] debugfs: 'hsr0' already exists in 'hsr' [ 1309.811817][T25223] Cannot create hsr debugfs directory [ 1309.876938][T25292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4439'. [ 1310.185649][ T6229] libceph: connect (1)[c::]:6789 error -101 [ 1310.188533][ T6229] libceph: mon0 (1)[c::]:6789 connect error [ 1310.343871][T25301] ceph: No mds server is up or the cluster is laggy [ 1310.397939][ T102] bond0 (unregistering): Released all slaves [ 1310.410956][ T102] bond1 (unregistering): Released all slaves [ 1310.434552][ T102] bond2 (unregistering): Released all slaves [ 1310.445447][ T6229] libceph: connect (1)[c::]:6789 error -101 [ 1310.447483][ T102] bond3 (unregistering): Released all slaves [ 1310.461040][ T6229] libceph: mon0 (1)[c::]:6789 connect error [ 1310.538187][ T5524] wg2 speed is unknown, defaulting to 1000 [ 1310.540117][ T5524] syz2: Port: 1 Link DOWN [ 1310.550226][ T5524] wg2 speed is unknown, defaulting to 1000 [ 1310.683449][ T102] tipc: Left network mode [ 1310.752616][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 1310.755367][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 1310.901859][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1310.913906][T25316] ceph: No mds server is up or the cluster is laggy [ 1311.506924][T25341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4443'. [ 1311.507345][T25223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1311.523005][T25223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1311.546960][T25223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1311.552471][T25223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1311.567492][T25223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1311.572207][T25223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1311.575147][T25223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1311.579348][T25223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1311.673755][ T5095] Bluetooth: hci1: command tx timeout [ 1311.719221][T25223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.743026][T25223] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.752667][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.755800][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.778586][T10321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.781672][T10321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.913095][T25349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4444'. [ 1312.145230][T25223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1312.214528][T25223] veth0_vlan: entered promiscuous mode [ 1312.229840][T25223] veth1_vlan: entered promiscuous mode [ 1312.251143][T25223] veth0_macvtap: entered promiscuous mode [ 1312.265633][T25369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4445'. [ 1312.300757][T25223] veth1_macvtap: entered promiscuous mode [ 1312.465808][T25223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1312.490050][T25223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.496882][T10320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.500140][T10320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.516867][ T102] hsr_slave_0: left promiscuous mode [ 1312.537190][ T102] hsr_slave_1: left promiscuous mode [ 1312.548372][ T102] batman_adv: batadv0: Interface deactivated: macsec1 [ 1312.561216][ T102] batman_adv: batadv0: Removing interface: macsec1 [ 1312.609303][ T102] veth1_macvtap: left promiscuous mode [ 1312.611756][ T102] veth0_macvtap: left promiscuous mode [ 1312.613922][ T102] veth1_vlan: left promiscuous mode [ 1312.615668][ T102] veth0_vlan: left promiscuous mode [ 1313.141370][ T40] kauditd_printk_skb: 171 callbacks suppressed [ 1313.141381][ T40] audit: type=1326 audit(1777485733.858:29839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25372 comm="syz.1.4447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 1313.162406][ T40] audit: type=1326 audit(1777485733.868:29840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25372 comm="syz.1.4447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 1313.170146][ T40] audit: type=1326 audit(1777485733.868:29841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25372 comm="syz.1.4447" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 1313.177921][ T40] audit: type=1326 audit(1777485733.868:29842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25372 comm="syz.1.4447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 1313.185304][ T40] audit: type=1326 audit(1777485733.868:29843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25372 comm="syz.1.4447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 1313.192465][ T40] audit: type=1326 audit(1777485733.868:29844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25372 comm="syz.1.4447" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 1313.204019][ T40] audit: type=1326 audit(1777485733.868:29845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25372 comm="syz.1.4447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 1313.212882][ T40] audit: type=1326 audit(1777485733.868:29846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25372 comm="syz.1.4447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 1313.233051][ T40] audit: type=1326 audit(1777485733.868:29847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25372 comm="syz.1.4447" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 1313.254892][ T40] audit: type=1326 audit(1777485733.868:29848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25372 comm="syz.1.4447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 1313.301914][T25379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4447'. [ 1313.308577][ T167] smbdirect: ib_dev[syz0] removed [ 1313.388381][T25381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4448'. [ 1313.431106][T10321] smc: removing ib device syz2 [ 1313.496193][T10321] smbdirect: ib_dev[syz2] removed [ 1313.522794][T10320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.563343][T18730] infiniband syz0: ib_query_port failed (-19) [ 1313.753643][ T5095] Bluetooth: hci1: command tx timeout [ 1313.824458][T10320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.118551][T10322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.122277][T10322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.185262][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.190972][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.424986][ T6229] libceph: connect (1)[c::]:6789 error -101 [ 1314.427001][ T6229] libceph: mon0 (1)[c::]:6789 connect error [ 1314.429749][ T6229] libceph: connect (1)[c::]:6789 error -101 [ 1314.437557][ T6229] libceph: mon0 (1)[c::]:6789 connect error [ 1314.500219][ T102] IPVS: stop unused estimator thread 0... [ 1314.542728][T25391] ceph: No mds server is up or the cluster is laggy [ 1314.693893][ T6229] libceph: connect (1)[c::]:6789 error -101 [ 1314.696447][ T6229] libceph: mon0 (1)[c::]:6789 connect error [ 1314.892495][T25401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4428'. [ 1315.140929][T25422] netlink: 'syz.1.4460': attribute type 3 has an invalid length. [ 1315.453337][T25412] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1315.456797][T25412] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1315.459955][T25412] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1315.463028][T25412] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1315.465176][T25412] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1315.469565][T25412] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1315.472713][T25412] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1315.475444][T25412] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1315.479382][T25412] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1315.530277][T24970] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1315.538613][T24970] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1315.544178][T24970] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1315.548702][T24970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1315.557837][T24970] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1315.592176][T24970] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1315.810619][T25468] syzkaller0: entered promiscuous mode [ 1315.812425][T25468] syzkaller0: entered allmulticast mode [ 1316.018576][T25477] [ 1316.109758][ T5881] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1316.269601][ T5881] usb 9-1: Using ep0 maxpacket: 8 [ 1316.272652][ T5881] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1316.275798][ T5881] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1316.285806][ T5881] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1316.288919][ T5881] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1316.292912][ T5881] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1316.295744][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.515939][ T5881] usb 9-1: GET_CAPABILITIES returned 0 [ 1316.517894][ T5881] usbtmc 9-1:16.0: can't read capabilities [ 1316.693709][T25492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4486'. [ 1316.697364][T25492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4486'. [ 1316.741509][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1316.761875][T17337] usb 9-1: USB disconnect, device number 13 [ 1316.963771][T24970] Bluetooth: hci4: command 0x0c1a tx timeout [ 1317.370794][T24970] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1317.527282][T24970] Bluetooth: hci1: command 0x0c1a tx timeout [ 1317.533724][ T5095] Bluetooth: hci2: command 0x0c1a tx timeout [ 1317.594785][ T5095] Bluetooth: hci3: command tx timeout [ 1318.008037][ T1157] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.011556][ T1157] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.028924][T25498] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4488'. [ 1318.115691][ T1157] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.121717][ T1157] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.216414][ T1157] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.220605][ T1157] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.298823][ T5095] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 1318.331619][ T1157] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.335793][ T1157] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.467453][T25413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.467533][T25413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.467634][T25413] bridge_slave_0: entered allmulticast mode [ 1318.468445][T25413] bridge_slave_0: entered promiscuous mode [ 1318.469678][T25413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.469773][T25413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.469843][T25413] bridge_slave_1: entered allmulticast mode [ 1318.470532][T25413] bridge_slave_1: entered promiscuous mode [ 1318.530392][T25413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.546539][T25413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.632822][T25413] team0: Port device team_slave_0 added [ 1318.657749][T25413] team0: Port device team_slave_1 added [ 1318.675747][T25413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.677956][T25413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.685848][T25413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.718964][T25413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.721353][T25413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.729372][T25413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.909630][T25582] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1318.973895][T25582] kvm: pic: level sensitive irq not supported [ 1318.974539][T25582] kvm: pic: non byte read [ 1318.979580][T25582] kvm: pic: level sensitive irq not supported [ 1318.979817][T25582] kvm: pic: non byte read [ 1318.983848][T25582] kvm: pic: level sensitive irq not supported [ 1318.984137][T25582] kvm: pic: non byte read [ 1318.990456][T25582] kvm: pic: level sensitive irq not supported [ 1318.990983][T25582] kvm: pic: non byte read [ 1318.997256][T25582] kvm: pic: level sensitive irq not supported [ 1318.997863][T25582] kvm: pic: non byte read [ 1319.003259][T25582] kvm: pic: level sensitive irq not supported [ 1319.004998][T25582] kvm: pic: non byte read [ 1319.010633][T25582] kvm: pic: level sensitive irq not supported [ 1319.010975][T25582] kvm: pic: non byte read [ 1319.017487][T25582] kvm: pic: level sensitive irq not supported [ 1319.017792][T25582] kvm: pic: non byte read [ 1319.034011][ T5095] Bluetooth: hci4: command 0x0c1a tx timeout [ 1319.267408][ T1157] bond0 (unregistering): Released all slaves [ 1319.273400][ T1157] bond1 (unregistering): Released all slaves [ 1319.325157][T25413] hsr_slave_0: entered promiscuous mode [ 1319.328039][T25413] hsr_slave_1: entered promiscuous mode [ 1319.330810][T25413] debugfs: 'hsr0' already exists in 'hsr' [ 1319.332911][T25413] Cannot create hsr debugfs directory [ 1319.565453][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1319.594087][ T5095] Bluetooth: hci2: command 0x0c1a tx timeout [ 1319.599992][T24970] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 1319.684192][T24970] Bluetooth: hci3: command tx timeout [ 1319.810381][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1319.848793][T17337] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1319.993713][T17337] usb 6-1: Using ep0 maxpacket: 32 [ 1319.996966][T17337] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1320.004353][T17337] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1320.009423][T17337] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1320.012425][T17337] usb 6-1: Product: syz [ 1320.013916][T17337] usb 6-1: Manufacturer: syz [ 1320.015255][T17337] usb 6-1: SerialNumber: syz [ 1320.017926][T17337] usb 6-1: config 0 descriptor?? [ 1320.019997][T25624] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1320.023061][T17337] hub 6-1:0.0: bad descriptor, ignoring hub [ 1320.027694][T17337] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1320.242141][T25413] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1320.267560][T25413] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1320.278875][T25413] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1320.283338][T25413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1320.286457][T25413] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1320.290407][T25413] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1320.300396][T25413] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1320.307399][T25413] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1320.383716][ T1157] hsr_slave_0: left promiscuous mode [ 1320.385946][ T1157] hsr_slave_1: left promiscuous mode [ 1320.388099][ T1157] batman_adv: batadv0: Interface deactivated: macsec1 [ 1320.390359][ T1157] batman_adv: batadv0: Removing interface: macsec1 [ 1320.406616][ T1157] veth1_macvtap: left promiscuous mode [ 1320.408225][ T1157] veth0_macvtap: left promiscuous mode [ 1320.410647][ T1157] veth1_vlan: left promiscuous mode [ 1320.412404][ T1157] veth0_vlan: left promiscuous mode [ 1320.790131][ T1157] pim6reg (unregistering): left allmulticast mode [ 1320.957138][T25624] usb 6-1: reset high-speed USB device number 18 using dummy_hcd [ 1320.963766][T18730] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1321.113758][T24970] Bluetooth: hci4: command 0x0c1a tx timeout [ 1321.115770][T25689] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.118004][T18730] usb 5-1: config 0 has no interfaces? [ 1321.126012][T18730] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1321.128222][T25624] usb 6-1: device firmware changed [ 1321.129656][T18730] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1321.129678][T18730] usb 5-1: Product: syz [ 1321.129692][T18730] usb 5-1: Manufacturer: syz [ 1321.129705][T18730] usb 5-1: SerialNumber: syz [ 1321.133954][T18730] usb 5-1: config 0 descriptor?? [ 1321.163204][T25413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.166826][ T5881] usb 6-1: USB disconnect, device number 18 [ 1321.180413][T25413] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.188137][T10321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.190511][T10321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.199043][T10320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.201423][T10320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.260877][T25689] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.323716][ T5881] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1321.372087][T25689] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.453681][T24970] Bluetooth: hci2: unexpected event 0x03 length: 10 < 11 [ 1321.483756][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 1321.488886][ T5881] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1321.497102][ T5881] usb 6-1: string descriptor 0 read error: -22 [ 1321.499339][ T5881] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1321.502158][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1321.505526][T25689] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.508896][ T5881] usb 6-1: config 0 descriptor?? [ 1321.511973][T25670] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1321.519428][ T5881] hub 6-1:0.0: bad descriptor, ignoring hub [ 1321.521813][ T5881] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1321.584375][T25413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.636454][T25413] veth0_vlan: entered promiscuous mode [ 1321.645225][T25413] veth1_vlan: entered promiscuous mode [ 1321.674977][T24970] Bluetooth: hci2: command 0x0c1a tx timeout [ 1321.699861][ T167] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.708709][ T167] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.714545][T25413] veth0_macvtap: entered promiscuous mode [ 1321.732510][ T167] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.738187][T25413] veth1_macvtap: entered promiscuous mode [ 1321.747893][ T167] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.752245][ T1157] IPVS: stop unused estimator thread 0... [ 1321.763696][T24970] Bluetooth: hci3: command tx timeout [ 1321.765983][T25413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1321.769582][T25413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1321.777807][ T167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.781369][ T167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.792864][ T167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.796723][ T167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.800784][ T5826] usb 5-1: USB disconnect, device number 39 [ 1321.827860][T10322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.830564][T10322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.835565][T11554] usb 6-1: USB disconnect, device number 19 [ 1321.844552][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.851530][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.891686][T25722] syzkaller0: entered promiscuous mode [ 1321.893430][T25722] syzkaller0: entered allmulticast mode [ 1322.056349][T25728] netlink: 'syz.4.4564': attribute type 10 has an invalid length. [ 1322.070238][T25728] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1322.097489][T25728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1322.102843][T25728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4564'. [ 1322.117473][T25728] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1322.119997][T25728] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 1322.123222][T25728] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 1322.126927][T25728] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1322.129817][ T6229] bond_slave_0: entered promiscuous mode [ 1322.133305][ T6229] bond_slave_1: entered promiscuous mode [ 1322.135351][ T6229] syz_tun: entered promiscuous mode [ 1322.267217][T25741] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1322.272262][T25741] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1322.317411][T25741] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1322.320376][T25741] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1322.370865][T25741] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1322.370898][T25741] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1322.425415][T25741] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1322.427500][T25741] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1322.570195][T25763] binder_alloc: 25762: binder_alloc_buf size 4294967080 failed, no address space [ 1322.575769][T25763] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1322.657252][T25772] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4582'. [ 1322.660993][T25772] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4582'. [ 1323.215989][T25798] loop6: detected capacity change from 0 to 8 [ 1323.278773][T25798] loop6: detected capacity change from 8 to 7 [ 1323.325734][T25800] loop6: detected capacity change from 7 to 0 [ 1325.070207][T25937] program syz.3.4653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1325.573925][ T34] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1325.723783][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 1325.729828][ T34] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.737516][ T34] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.748200][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1325.754715][ T34] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1325.762596][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.776039][ T34] usb 9-1: config 0 descriptor?? [ 1325.934427][T25991] comedi comedi1: Minor 12 could not be opened [ 1326.188844][ T34] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1326.194199][ T34] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1326.196486][ T34] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1326.199944][ T34] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1326.202074][ T34] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1326.204746][ T34] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1326.299682][T26005] syzkaller0: entered promiscuous mode [ 1326.302055][T26005] syzkaller0: entered allmulticast mode [ 1326.386103][T18018] usb 9-1: USB disconnect, device number 14 [ 1326.420539][T26009] trusted_key: syz.3.4687 sent an empty control message without MSG_MORE. [ 1326.775298][T26026] syzkaller0: entered promiscuous mode [ 1326.777220][T26026] syzkaller0: entered allmulticast mode [ 1327.047221][T26053] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4708'. [ 1327.730993][T26129] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1328.487687][T26180] syzkaller0: entered promiscuous mode [ 1328.490963][T26180] syzkaller0: entered allmulticast mode [ 1328.578825][T26189] loop2: detected capacity change from 0 to 7 [ 1328.582013][T26189] Dev loop2: unable to read RDB block 7 [ 1328.584624][T26189] loop2: unable to read partition table [ 1328.586516][T26189] loop2: partition table beyond EOD, truncated [ 1328.588507][T26189] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1328.953712][T17337] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1329.103734][T17337] usb 6-1: Using ep0 maxpacket: 16 [ 1329.107131][T17337] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.110910][T17337] usb 6-1: config 0 has no interfaces? [ 1329.117831][T17337] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1329.121313][T17337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.124217][T17337] usb 6-1: Product: syz [ 1329.125921][T17337] usb 6-1: Manufacturer: syz [ 1329.127863][T17337] usb 6-1: SerialNumber: syz [ 1329.131113][T17337] usb 6-1: config 0 descriptor?? [ 1329.340920][T17337] usb 6-1: USB disconnect, device number 20 [ 1329.517481][T26216] infiniband sy1: set active [ 1329.520370][T26216] infiniband sy1: added bond0 [ 1329.530310][T26216] smbdirect: ib_dev[sy1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1329.535844][T26216] smbdirect: ib_dev[sy1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1329.542580][T26216] smbdirect: ib_dev[sy1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1329.559960][T26216] RDS/IB: sy1: added [ 1329.561695][T26216] smc: adding ib device sy1 with port count 1 [ 1329.564127][T26216] smc: ib device sy1 port 1 has no pnetid [ 1330.138815][T26269] netlink: 'syz.4.4801': attribute type 1 has an invalid length. [ 1330.141293][T26269] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4801'. [ 1330.180253][T26270] input: syz0 as /devices/virtual/input/input26 [ 1330.211604][T26274] netlink: 'syz.4.4803': attribute type 3 has an invalid length. [ 1330.214452][T26274] netlink: 'syz.4.4803': attribute type 2 has an invalid length. [ 1330.217565][T26274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4803'. [ 1330.296537][T10322] Bluetooth: hci0: Frame reassembly failed (-84) [ 1331.223918][T26337] syzkaller0: entered promiscuous mode [ 1331.225679][T26337] syzkaller0: entered allmulticast mode [ 1332.216404][T26378] input: syz0 as /devices/virtual/input/input27 [ 1332.315751][T24970] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1332.319803][ T5095] Bluetooth: hci0: command 0x1003 tx timeout [ 1332.724428][ T5881] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1332.804185][T26404] input: syz0 as /devices/virtual/input/input28 [ 1332.853725][T25386] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1332.873889][ T5881] usb 8-1: Using ep0 maxpacket: 32 [ 1332.880100][ T5881] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1332.885021][ T5881] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 1332.888566][ T5881] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.892727][ T5881] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1332.899049][ T5881] usb 8-1: config 128 has no interface number 0 [ 1332.901691][ T5881] usb 8-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1332.907383][ T5881] usb 8-1: config 128 interface 127 has no altsetting 0 [ 1332.912647][ T5881] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1332.916538][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.919892][ T5881] usb 8-1: Product: syz [ 1332.921681][ T5881] usb 8-1: Manufacturer: syz [ 1332.923722][ T5881] usb 8-1: SerialNumber: syz [ 1333.013872][T25386] usb 9-1: Using ep0 maxpacket: 8 [ 1333.019008][T25386] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.023865][T25386] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.028072][T25386] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1333.030954][T25386] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1333.035103][T25386] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.041062][T25386] usb 9-1: config 0 descriptor?? [ 1333.187006][ T5881] usb 8-1: USB disconnect, device number 27 [ 1333.214360][ T8660] udevd[8660]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1333.448966][T25386] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1333.454198][T25386] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1333.456464][T25386] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1333.458679][T25386] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1333.460884][T25386] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1333.463836][T25386] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1333.648254][T25386] usb 9-1: USB disconnect, device number 15 [ 1335.397550][T26528] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1335.424998][T26528] kvm: pic: level sensitive irq not supported [ 1335.425275][T26528] kvm: pic: non byte read [ 1335.429569][T26528] kvm: pic: level sensitive irq not supported [ 1335.429813][T26528] kvm: pic: non byte read [ 1335.434039][T26528] kvm: pic: level sensitive irq not supported [ 1335.434301][T26528] kvm: pic: non byte read [ 1335.444236][T26528] kvm: pic: level sensitive irq not supported [ 1335.444522][T26528] kvm: pic: non byte read [ 1335.448785][T26528] kvm: pic: level sensitive irq not supported [ 1335.449048][T26528] kvm: pic: non byte read [ 1335.453211][T26528] kvm: pic: level sensitive irq not supported [ 1335.453509][T26528] kvm: pic: non byte read [ 1335.458208][T26528] kvm: pic: level sensitive irq not supported [ 1335.458446][T26528] kvm: pic: non byte read [ 1335.462525][T26528] kvm: pic: level sensitive irq not supported [ 1335.462788][T26528] kvm: pic: non byte read [ 1335.777024][T26540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4912'. [ 1336.399512][T26568] blktrace: Concurrent blktraces are not allowed on sg0 [ 1336.456235][T26570] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1336.555317][T26574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.657297][T26574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.748635][T26574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.813776][ T34] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 1336.887285][T26574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.965189][ T34] usb 8-1: config 0 has no interfaces? [ 1336.968667][ T34] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1336.971544][ T34] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1336.974345][ T34] usb 8-1: Product: syz [ 1336.975685][ T34] usb 8-1: Manufacturer: syz [ 1336.977216][ T34] usb 8-1: SerialNumber: syz [ 1336.980325][ T34] usb 8-1: config 0 descriptor?? [ 1337.010428][T10322] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.020830][T10322] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.038498][T10322] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.043729][T10322] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.093470][T26591] blktrace: Concurrent blktraces are not allowed on sg0 [ 1337.150751][T26595] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1337.167556][T26595] kvm: pic: level sensitive irq not supported [ 1337.167855][T26595] kvm: pic: non byte read [ 1337.172428][T26595] kvm: pic: level sensitive irq not supported [ 1337.172754][T26595] kvm: pic: non byte read [ 1337.254401][T11554] usb 8-1: USB disconnect, device number 28 [ 1337.822181][T26619] blktrace: Concurrent blktraces are not allowed on sg0 [ 1338.083466][T26644] netlink: 'syz.3.4951': attribute type 10 has an invalid length. [ 1338.090575][T26644] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1338.136177][T26644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1338.155825][T26644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4951'. [ 1338.164338][T26644] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1338.166859][T26644] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 1338.169797][T26644] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1338.172678][ T5524] bond_slave_0: entered promiscuous mode [ 1338.174571][ T5524] bond_slave_1: entered promiscuous mode [ 1338.176831][ T5524] syz_tun: entered promiscuous mode [ 1338.253280][T26648] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1338.258294][T26648] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.308760][T26659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4956'. [ 1338.367401][T26648] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1338.370632][T26648] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.477306][T26648] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1338.480582][T26648] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.513664][T18730] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1338.541878][T26648] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1338.545316][T26648] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.633695][ T5524] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1338.657908][T10321] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1338.660801][T10321] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.671422][T18730] usb 6-1: config 0 has no interfaces? [ 1338.678231][ T1157] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1338.678895][T18730] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1338.681691][ T1157] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.685795][T18730] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1338.697797][ T1157] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1338.698341][T18730] usb 6-1: Product: syz [ 1338.701255][ T1157] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.710753][T10322] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1338.710872][T18730] usb 6-1: Manufacturer: syz [ 1338.713503][T10322] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.715011][T18730] usb 6-1: SerialNumber: syz [ 1338.716546][T18730] usb 6-1: config 0 descriptor?? [ 1338.784427][ T5524] usb 9-1: Using ep0 maxpacket: 8 [ 1338.788920][ T5524] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1338.793957][ T5524] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1338.797939][ T5524] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1338.800247][ T5524] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1338.804595][ T5524] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.810581][ T5524] usb 9-1: config 0 descriptor?? [ 1338.815108][T26675] netlink: 'syz.0.4963': attribute type 10 has an invalid length. [ 1338.824244][T26675] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1338.859385][T26675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1338.882869][T26675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4963'. [ 1338.894582][T26675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1338.897181][T26675] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 1338.899928][T10322] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:24ac:13ff:fed5:5716 error=-28 [ 1338.900143][T26675] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1338.906272][ T5826] bond_slave_0: entered promiscuous mode [ 1338.908089][ T5826] bond_slave_1: entered promiscuous mode [ 1338.910064][ T5826] syz_tun: entered promiscuous mode [ 1338.966751][ T5826] usb 6-1: USB disconnect, device number 21 [ 1338.982167][T26678] blktrace: Concurrent blktraces are not allowed on sg0 [ 1339.057402][T26682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4966'. [ 1339.099255][T26684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4967'. [ 1339.220772][ T5524] usbhid 9-1:0.0: can't add hid device: -71 [ 1339.222798][ T5524] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1339.226981][ T5524] usb 9-1: USB disconnect, device number 16 [ 1339.580925][T26706] blktrace: Concurrent blktraces are not allowed on sg0 [ 1339.930696][T26733] blktrace: Concurrent blktraces are not allowed on sg0 [ 1340.353642][ T6229] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1340.503834][ T6229] usb 9-1: Using ep0 maxpacket: 16 [ 1340.507130][ T6229] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.510719][ T6229] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1340.515539][ T6229] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1340.518791][ T6229] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.521353][ T6229] usb 9-1: Product: syz [ 1340.522750][ T6229] usb 9-1: Manufacturer: syz [ 1340.524460][ T6229] usb 9-1: SerialNumber: syz [ 1340.535208][ T6229] usb 9-1: 0:2 : does not exist [ 1340.648152][T26749] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1340.740502][ T6229] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1340.743059][T26704] Set syz1 is full, maxelem 65536 reached [ 1340.769985][ T6229] usb 9-1: USB disconnect, device number 17 [ 1340.806683][ T8660] udevd[8660]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1341.207425][T26783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5006'. [ 1341.241340][T26783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.244028][T26783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.434762][T26783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1341.440728][T26783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1341.494932][ T1157] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1341.503472][ T1157] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.508872][ T1157] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1341.514581][ T1157] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.517487][ T1157] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1341.520364][ T1157] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.524639][ T1157] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1341.527781][ T1157] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.553398][T26797] netlink: 'syz.3.5011': attribute type 1 has an invalid length. [ 1341.556325][T26797] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5011'. [ 1341.805925][ T5524] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1341.990148][T26820] netlink: 'syz.1.5020': attribute type 1 has an invalid length. [ 1341.992580][T26820] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5020'. [ 1342.010822][ T5524] usb 9-1: Using ep0 maxpacket: 16 [ 1342.029404][ T5524] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.043764][ T5524] usb 9-1: config 0 has no interfaces? [ 1342.048474][ T5524] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1342.051330][ T5524] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.053917][ T5524] usb 9-1: Product: syz [ 1342.055208][ T5524] usb 9-1: Manufacturer: syz [ 1342.056676][ T5524] usb 9-1: SerialNumber: syz [ 1342.059913][ T5524] usb 9-1: config 0 descriptor?? [ 1342.145864][T26832] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1342.211903][T26775] Set syz1 is full, maxelem 65536 reached [ 1342.269641][T17337] usb 9-1: USB disconnect, device number 18 [ 1342.322879][T26847] binder_alloc: 26846: binder_alloc_buf, no vma [ 1342.379705][T26854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5035'. [ 1342.671835][T26870] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1342.844307][T26879] binder: BINDER_SET_CONTEXT_MGR already set [ 1342.846331][T26879] binder: 26878:26879 ioctl 4018620d 80004a80 returned -16 [ 1342.879929][T26881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5045'. [ 1342.928748][T26888] binder: 26887:26888 ioctl c0306201 80000040 returned -22 [ 1343.039414][T26899] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1343.256232][T26917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5061'. [ 1343.323886][ T6229] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1343.404821][T26922] fuse: Bad value for 'fd' [ 1343.464165][T18018] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1343.483695][ T6229] usb 6-1: Using ep0 maxpacket: 16 [ 1343.487880][ T6229] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.492108][ T6229] usb 6-1: config 0 has no interfaces? [ 1343.496879][ T6229] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1343.499941][ T6229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.502597][ T6229] usb 6-1: Product: syz [ 1343.504046][ T6229] usb 6-1: Manufacturer: syz [ 1343.505769][ T6229] usb 6-1: SerialNumber: syz [ 1343.510164][ T6229] usb 6-1: config 0 descriptor?? [ 1343.615263][T26947] fuse: Bad value for 'fd' [ 1343.623941][T18018] usb 5-1: Using ep0 maxpacket: 8 [ 1343.629935][T18018] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.634030][T18018] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.637166][T18018] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1343.639479][T18018] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1343.642476][T18018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.647853][T18018] usb 5-1: config 0 descriptor?? [ 1343.702201][T26956] fuse: Bad value for 'fd' [ 1343.717266][T18730] usb 6-1: USB disconnect, device number 22 [ 1344.057481][T18018] usbhid 5-1:0.0: can't add hid device: -71 [ 1344.059448][T18018] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1344.064042][T18018] usb 5-1: USB disconnect, device number 40 [ 1344.295737][T26969] binder: BINDER_SET_CONTEXT_MGR already set [ 1344.298423][T26969] binder: 26968:26969 ioctl 4018620d 80004a80 returned -16 [ 1344.463306][T26983] syzkaller0: entered promiscuous mode [ 1344.465279][T26983] syzkaller0: entered allmulticast mode [ 1344.501117][T26990] binder: BINDER_SET_CONTEXT_MGR already set [ 1344.503335][T26990] binder: 26989:26990 ioctl 4018620d 80004a80 returned -16 [ 1344.548567][T26992] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1344.662669][T26994] pic_ioport_write: 64 callbacks suppressed [ 1344.662682][T26994] kvm: pic: level sensitive irq not supported [ 1344.668624][T26994] picdev_read: 64 callbacks suppressed [ 1344.668657][T26994] kvm: pic: non byte read [ 1344.675797][T26994] kvm: pic: level sensitive irq not supported [ 1344.676041][T26994] kvm: pic: non byte read [ 1344.680496][T26994] kvm: pic: non byte read [ 1344.682958][T26994] kvm: pic: non byte read [ 1344.689504][T26994] kvm: pic: single mode not supported [ 1344.690025][T26994] kvm: pic: non byte read [ 1344.694911][T26994] kvm: pic: non byte read [ 1344.697518][T26994] kvm: pic: level sensitive irq not supported [ 1344.697746][T26994] kvm: pic: non byte read [ 1344.702834][T26994] kvm: pic: non byte read [ 1344.705525][T26994] kvm: pic: non byte read [ 1344.757805][T27000] snd_dummy snd_dummy.0: control 1:9:195::53367 is already present [ 1345.018077][T27011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5099'. [ 1345.283077][T18018] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1345.288793][T18018] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1345.298318][T18018] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1345.302366][T18018] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1345.305892][T18018] rtc rtc0: __rtc_set_alarm: err=-22 [ 1346.718951][T27044] kvm: pic: level sensitive irq not supported [ 1346.719329][T27044] kvm: pic: non byte read [ 1346.724680][T27044] kvm: pic: level sensitive irq not supported [ 1346.728688][T27044] kvm: pic: single mode not supported [ 1346.729555][T27048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5114'. [ 1346.734193][T27044] kvm: pic: level sensitive irq not supported [ 1346.866985][T27058] rdma_rxe: rxe_newlink: failed to add bond0 [ 1346.904684][T27066] snd_dummy snd_dummy.0: control 1:9:195::53367 is already present [ 1347.078502][T27076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5127'. [ 1347.126166][T27079] blktrace: Concurrent blktraces are not allowed on sg0 [ 1347.472391][T27084] rdma_rxe: rxe_newlink: failed to add bond0 [ 1347.517491][T27085] kvm: pic: level sensitive irq not supported [ 1347.518753][T27085] kvm: pic: level sensitive irq not supported [ 1347.528643][T27085] kvm: pic: single mode not supported [ 1347.535094][T27085] kvm: pic: level sensitive irq not supported [ 1348.126421][T27124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1348.160246][T27126] snd_dummy snd_dummy.0: control 1:9:195::53367 is already present [ 1348.675589][T27148] snd_dummy snd_dummy.0: control 1:9:195::53367 is already present [ 1348.889499][T27160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5162'. [ 1348.994909][T27170] netlink: 'syz.0.5165': attribute type 1 has an invalid length. [ 1348.998078][T27170] netlink: 264 bytes leftover after parsing attributes in process `syz.0.5165'. [ 1349.004272][T27172] snd_dummy snd_dummy.0: control 1:9:195::53367 is already present [ 1349.157789][T27184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5171'. [ 1349.229004][T27198] netlink: 'syz.1.5176': attribute type 1 has an invalid length. [ 1349.231808][T27198] netlink: 264 bytes leftover after parsing attributes in process `syz.1.5176'. [ 1349.277382][T27202] snd_dummy snd_dummy.0: control 1:9:195::53367 is already present [ 1349.322295][T27206] blktrace: Concurrent blktraces are not allowed on sg0 [ 1349.431999][T27213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5184'. [ 1349.439277][T27227] rdma_rxe: rxe_newlink: failed to add bond0 [ 1349.446592][T27222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5186'. [ 1349.457223][T27223] snd_dummy snd_dummy.0: control 1:9:195::53367 is already present [ 1349.507871][T27234] blktrace: Concurrent blktraces are not allowed on sg0 [ 1349.605539][T27245] netlink: 'syz.1.5196': attribute type 1 has an invalid length. [ 1349.608155][T27245] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5196'. [ 1349.656473][T27247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5197'. [ 1349.702337][T27256] blktrace: Concurrent blktraces are not allowed on sg0 [ 1349.727692][T27257] snd_dummy snd_dummy.0: control 1:9:195::53367 is already present [ 1349.810568][T27275] netlink: 'syz.1.5207': attribute type 1 has an invalid length. [ 1349.955461][T27290] snd_dummy snd_dummy.0: control 1:9:195::53367 is already present [ 1350.066778][T27301] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1350.887651][T27346] blktrace: Concurrent blktraces are not allowed on sg0 [ 1351.073006][T27355] syzkaller0: entered promiscuous mode [ 1351.076270][T27355] syzkaller0: entered allmulticast mode [ 1351.098175][T27357] snd_dummy snd_dummy.0: control 1:9:195::53367 is already present [ 1351.200697][T27364] blktrace: Concurrent blktraces are not allowed on sg0 [ 1351.227832][T27367] netlink: 'syz.0.5240': attribute type 1 has an invalid length. [ 1351.671341][T27407] blktrace: Concurrent blktraces are not allowed on sg0 [ 1351.832465][T27424] __nla_validate_parse: 10 callbacks suppressed [ 1351.832483][T27424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5262'. [ 1351.916054][T27439] blktrace: Concurrent blktraces are not allowed on sg0 [ 1351.945869][T27443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5269'. [ 1352.106841][T27453] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5275'. [ 1352.307512][T27474] blktrace: Concurrent blktraces are not allowed on sg0 [ 1352.444951][T27488] netlink: 'syz.4.5287': attribute type 1 has an invalid length. [ 1352.447308][T27488] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5287'. [ 1352.512020][T27492] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5288'. [ 1352.547863][T27500] blktrace: Concurrent blktraces are not allowed on sg0 [ 1352.871640][T27534] netlink: 'syz.4.5298': attribute type 1 has an invalid length. [ 1352.874349][T27534] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5298'. [ 1352.877031][T27531] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1352.889070][T27531] picdev_read: 17 callbacks suppressed [ 1352.889115][T27531] kvm: pic: non byte read [ 1352.893376][T27531] kvm: pic: level sensitive irq not supported [ 1352.893611][T27531] kvm: pic: non byte read [ 1352.897515][T27531] kvm: pic: level sensitive irq not supported [ 1352.897756][T27531] kvm: pic: non byte read [ 1353.210921][T27568] netlink: 'syz.4.5311': attribute type 1 has an invalid length. [ 1353.213341][T27568] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5311'. [ 1353.539335][T27598] netlink: 'syz.0.5321': attribute type 1 has an invalid length. [ 1353.542517][T27598] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5321'. [ 1353.801581][T27613] blktrace: Concurrent blktraces are not allowed on sg0 [ 1353.847707][T27617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5329'. [ 1354.466866][T27647] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1354.489630][T27647] kvm: pic: non byte read [ 1354.492668][T27647] kvm: pic: level sensitive irq not supported [ 1354.493024][T27647] kvm: pic: non byte read [ 1354.497528][T27647] kvm: pic: level sensitive irq not supported [ 1354.497800][T27647] kvm: pic: non byte read [ 1354.535200][T27654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5341'. [ 1354.592645][T27659] blktrace: Concurrent blktraces are not allowed on sg0 [ 1354.980760][T27679] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1354.997542][T27684] blktrace: Concurrent blktraces are not allowed on sg0 [ 1355.002270][T27679] kvm: pic: non byte read [ 1355.004926][T27679] kvm: pic: level sensitive irq not supported [ 1355.005252][T27679] kvm: pic: non byte read [ 1355.011353][T27679] kvm: pic: level sensitive irq not supported [ 1355.012113][T27679] kvm: pic: non byte read [ 1355.138001][T27693] input: syz0 as /devices/virtual/input/input29 [ 1355.930489][T27757] netlink: 'syz.4.5384': attribute type 3 has an invalid length. [ 1355.947081][T27760] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1355.957370][T27760] kvm: pic: non byte read [ 1355.961011][T27760] kvm: pic: level sensitive irq not supported [ 1355.962366][T27760] kvm: pic: level sensitive irq not supported [ 1356.180616][T27774] tipc: Started in network mode [ 1356.185474][T27774] tipc: Node identity fffffff8, cluster identity 4711 [ 1356.188160][T27774] tipc: Node number set to 4294967288 [ 1356.393041][T27784] blktrace: Concurrent blktraces are not allowed on sg0 [ 1356.483694][T25386] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 1356.637663][T25386] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.641863][T25386] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1356.646767][T25386] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1356.651041][T25386] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1356.662066][T25386] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1356.673847][T25386] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.678533][T25386] usb 9-1: Product: syz [ 1356.679844][T25386] usb 9-1: Manufacturer: syz [ 1356.681456][T25386] usb 9-1: SerialNumber: syz [ 1356.759235][T27814] blktrace: Concurrent blktraces are not allowed on sg0 [ 1356.813692][ T5524] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1356.963984][ T5524] usb 5-1: device descriptor read/64, error -71 [ 1356.990751][T27826] No control pipe specified [ 1357.077034][T27834] blktrace: Concurrent blktraces are not allowed on sg0 [ 1357.213702][ T5524] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1357.294004][ T5881] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1357.353722][ T5524] usb 5-1: device descriptor read/64, error -71 [ 1357.463723][ T5881] usb 8-1: Using ep0 maxpacket: 16 [ 1357.465920][ T5881] usb 8-1: too many configurations: 103, using maximum allowed: 8 [ 1357.469675][ T5881] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1357.472001][ T5881] usb 8-1: can't read configurations, error -61 [ 1357.474095][ T5524] usb usb5-port1: attempt power cycle [ 1357.613709][ T5881] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1357.708017][T25386] cdc_ncm 9-1:1.0: bind() failure [ 1357.714545][T25386] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1357.717341][T25386] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1357.720359][T25386] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 1357.724392][T25386] usb 9-1: USB disconnect, device number 19 [ 1357.763714][ T5881] usb 8-1: Using ep0 maxpacket: 16 [ 1357.766549][ T5881] usb 8-1: too many configurations: 103, using maximum allowed: 8 [ 1357.770470][ T5881] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1357.772842][ T5881] usb 8-1: can't read configurations, error -61 [ 1357.777506][ T5881] usb usb8-port1: attempt power cycle [ 1357.843698][ T5524] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1357.864359][ T5524] usb 5-1: device descriptor read/8, error -71 [ 1358.103695][ T5524] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1358.123679][ T5881] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1358.124154][ T5524] usb 5-1: device descriptor read/8, error -71 [ 1358.144150][ T5881] usb 8-1: Using ep0 maxpacket: 16 [ 1358.146275][ T5881] usb 8-1: too many configurations: 103, using maximum allowed: 8 [ 1358.149977][ T5881] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1358.152350][ T5881] usb 8-1: can't read configurations, error -61 [ 1358.234049][ T5524] usb usb5-port1: unable to enumerate USB device [ 1358.283714][ T5881] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1358.316468][ T5881] usb 8-1: Using ep0 maxpacket: 16 [ 1358.318916][ T5881] usb 8-1: too many configurations: 103, using maximum allowed: 8 [ 1358.323028][ T5881] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1358.326105][ T5881] usb 8-1: can't read configurations, error -61 [ 1358.328723][ T5881] usb usb8-port1: unable to enumerate USB device [ 1358.699216][T27875] __nla_validate_parse: 5 callbacks suppressed [ 1358.699250][T27875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5433'. [ 1358.742934][T27875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.745646][T27875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.755909][T27875] bond_slave_0: left promiscuous mode [ 1358.760407][T27875] bond_slave_1: left promiscuous mode [ 1358.822743][T27875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.830195][T27875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1358.920425][ T167] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1358.923691][ T167] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.926936][ T167] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1358.929775][ T167] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.933017][ T167] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1358.936592][ T167] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.940092][ T167] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1358.943736][ T167] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.648931][T27889] tipc: Enabling of bearer rejected, failed to enable media [ 1359.749543][T27894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5441'. [ 1359.867754][T27898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5443'. [ 1359.901771][T27903] blktrace: Concurrent blktraces are not allowed on sg0 [ 1360.213914][T18730] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1360.225427][T27917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5451'. [ 1360.341383][T27920] syzkaller0: entered promiscuous mode [ 1360.344329][T27920] syzkaller0: entered allmulticast mode [ 1360.353731][T18730] usb 6-1: device descriptor read/64, error -71 [ 1360.480383][T27926] blktrace: Concurrent blktraces are not allowed on sg0 [ 1360.593741][T18730] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1360.733705][T18730] usb 6-1: device descriptor read/64, error -71 [ 1360.849134][T18730] usb usb6-port1: attempt power cycle [ 1361.193645][ T5881] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1361.193709][T18730] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1361.214136][T18730] usb 6-1: device descriptor read/8, error -71 [ 1361.353642][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 1361.378292][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.381641][ T5881] usb 5-1: config 0 has no interfaces? [ 1361.385437][ T5881] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1361.388564][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.391079][ T5881] usb 5-1: Product: syz [ 1361.392556][ T5881] usb 5-1: Manufacturer: syz [ 1361.394239][ T5881] usb 5-1: SerialNumber: syz [ 1361.399126][ T5881] usb 5-1: config 0 descriptor?? [ 1361.409953][T27936] No control pipe specified [ 1361.484314][T18730] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1361.514292][T18730] usb 6-1: device descriptor read/8, error -71 [ 1361.607497][T25386] usb 5-1: USB disconnect, device number 45 [ 1361.619407][T18730] usb usb6-port1: unable to enumerate USB device [ 1362.247946][T27943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5460'. [ 1362.424222][T27938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5459'. [ 1362.516927][T27951] blktrace: Concurrent blktraces are not allowed on sg0 [ 1362.563955][T27957] No control pipe specified [ 1362.596889][T27959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5468'. [ 1362.681387][T27965] netlink: 'syz.3.5471': attribute type 3 has an invalid length. [ 1362.681730][T27968] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5472'. [ 1362.684872][T27965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5471'. [ 1362.712029][T27970] blktrace: Concurrent blktraces are not allowed on sg0 [ 1362.770364][T27978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5477'. [ 1362.889818][T27985] netlink: 'syz.0.5480': attribute type 1 has an invalid length. [ 1362.989726][T27993] blktrace: Concurrent blktraces are not allowed on sg0 [ 1363.246678][T28012] netlink: 'syz.4.5493': attribute type 1 has an invalid length. [ 1363.323914][T28016] blktrace: Concurrent blktraces are not allowed on sg0 [ 1363.483756][ T5826] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1363.613774][ T5826] usb 5-1: device descriptor read/64, error -71 [ 1363.712326][T28033] netlink: 'syz.3.5503': attribute type 1 has an invalid length. [ 1363.714833][T28033] __nla_validate_parse: 7 callbacks suppressed [ 1363.714843][T28033] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5503'. [ 1363.757651][T28037] blktrace: Concurrent blktraces are not allowed on sg0 [ 1363.853689][ T5826] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1363.983739][ T5826] usb 5-1: device descriptor read/64, error -71 [ 1364.013780][ T34] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1364.093979][ T5826] usb usb5-port1: attempt power cycle [ 1364.165802][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.169138][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1364.172877][ T34] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1364.176116][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1364.178753][ T34] usb 6-1: SerialNumber: syz [ 1364.371764][T28058] blktrace: Concurrent blktraces are not allowed on sg0 [ 1364.387520][ T34] usb 6-1: 0:2 : does not exist [ 1364.407245][ T34] usb 6-1: USB disconnect, device number 27 [ 1364.431932][ T8660] udevd[8660]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1364.437332][ T5826] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1364.454161][ T5826] usb 5-1: device descriptor read/8, error -71 [ 1364.553743][T25385] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1364.683238][T28065] netlink: 'syz.3.5517': attribute type 1 has an invalid length. [ 1364.685757][T28065] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5517'. [ 1364.695173][ T5826] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1364.714994][T25385] usb 9-1: Using ep0 maxpacket: 16 [ 1364.715254][ T5826] usb 5-1: device descriptor read/8, error -71 [ 1364.718421][T25385] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.722162][T25385] usb 9-1: config 0 has no interfaces? [ 1364.726920][T25385] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1364.730974][T25385] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.734415][T25385] usb 9-1: Product: syz [ 1364.736317][T25385] usb 9-1: Manufacturer: syz [ 1364.738406][T25385] usb 9-1: SerialNumber: syz [ 1364.744545][T25385] usb 9-1: config 0 descriptor?? [ 1364.824032][ T5826] usb usb5-port1: unable to enumerate USB device [ 1364.952535][T25385] usb 9-1: USB disconnect, device number 20 [ 1364.996642][T28077] blktrace: Concurrent blktraces are not allowed on sg0 [ 1365.849325][T28111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5538'. [ 1366.301911][T28131] autofs: Unknown parameter '0x0000000000000000' [ 1366.331535][T28133] blktrace: Concurrent blktraces are not allowed on sg0 [ 1366.353868][ T5826] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1366.366639][T28135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5549'. [ 1366.396004][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.399429][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.441625][T28139] syzkaller0: entered promiscuous mode [ 1366.443368][T28139] syzkaller0: entered allmulticast mode [ 1366.513671][ T5826] usb 8-1: Using ep0 maxpacket: 8 [ 1366.518747][ T5826] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1366.523073][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.538610][ T5826] usb 8-1: config 0 descriptor?? [ 1366.747422][ T5826] usb 8-1: string descriptor 0 read error: -71 [ 1366.750395][ T5826] uvcvideo 8-1:0.0: Found Unit with invalid ID 0 [ 1366.753196][ T5826] uvcvideo 8-1:0.0: Found UVC 0.00 device (2833:0201) [ 1366.756707][ T5826] uvcvideo 8-1:0.0: No valid video chain found. [ 1366.761445][ T5826] usb 8-1: USB disconnect, device number 33 [ 1366.768309][T25386] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1366.898681][T25386] usb 6-1: device descriptor read/64, error -71 [ 1367.133746][T25386] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1367.153227][T28150] autofs: Unknown parameter '0x0000000000000000' [ 1367.265406][T25386] usb 6-1: device descriptor read/64, error -71 [ 1367.373867][T25386] usb usb6-port1: attempt power cycle [ 1367.723741][T25386] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1367.745257][T25386] usb 6-1: device descriptor read/8, error -71 [ 1367.983776][T25386] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1368.004178][T25386] usb 6-1: device descriptor read/8, error -71 [ 1368.118733][T25386] usb usb6-port1: unable to enumerate USB device [ 1368.172301][T28167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5560'. [ 1368.510959][T28177] netlink: 272 bytes leftover after parsing attributes in process `syz.3.5562'. [ 1368.548063][T28179] autofs: Unknown parameter '0x0000000000000000' [ 1368.686832][T28186] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1368.753766][ T5826] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1368.753978][ T5524] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1368.915881][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.920594][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.925031][ T5826] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1368.925365][ T5524] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1368.930436][ T5826] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1368.934547][ T5524] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1368.938397][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.941044][ T5524] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1368.948010][ T5826] usb 9-1: config 0 descriptor?? [ 1368.949348][ T5524] usb 5-1: New USB device found, idVendor=00d7, idProduct=0000, bcdDevice= 0.40 [ 1368.952962][ T5524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.956497][ T5524] usb 5-1: Product: syz [ 1368.957817][ T5524] usb 5-1: Manufacturer: syz [ 1368.959255][ T5524] usb 5-1: SerialNumber: syz [ 1368.978136][T28196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5572'. [ 1369.093535][T28199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5573'. [ 1369.182210][T28201] autofs: Unknown parameter '0x0000000000000000' [ 1369.259330][T28205] netlink: 272 bytes leftover after parsing attributes in process `syz.3.5576'. [ 1369.316020][T28207] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1369.361417][ T5826] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1369.363873][ T5826] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1369.366151][ T5826] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1369.368484][ T5826] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1369.369592][ T5524] cdc_ncm 5-1:1.0: bind() failure [ 1369.370832][ T5826] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1369.370855][ T5826] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1369.375135][ T5524] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1369.376994][ T5826] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1369.379905][ T5524] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1369.381791][ T5826] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1369.385176][ T5524] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1369.386654][ T5826] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1369.391510][ T5826] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1369.392254][ T5524] usb 5-1: USB disconnect, device number 50 [ 1369.401136][ T5826] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1369.603229][T28220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5582'. [ 1369.604616][T28222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5583'. [ 1369.701062][T28225] autofs: Unknown parameter '0x0000000000000000' [ 1370.053678][T18018] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1370.203883][T18018] usb 6-1: Using ep0 maxpacket: 16 [ 1370.207064][T18018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.210449][T18018] usb 6-1: config 0 has no interfaces? [ 1370.214595][T18018] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1370.217602][T18018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.220221][T18018] usb 6-1: Product: syz [ 1370.221591][T18018] usb 6-1: Manufacturer: syz [ 1370.223159][T18018] usb 6-1: SerialNumber: syz [ 1370.226327][T18018] usb 6-1: config 0 descriptor?? [ 1370.263710][ T5826] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1370.393732][ T5826] usb 5-1: device descriptor read/64, error -71 [ 1370.430916][T18018] usb 6-1: USB disconnect, device number 32 [ 1370.643788][ T5826] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1370.773347][T28244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5592'. [ 1370.773663][ T5826] usb 5-1: device descriptor read/64, error -71 [ 1370.883878][ T5826] usb usb5-port1: attempt power cycle [ 1370.961431][T28249] autofs: Unknown parameter '0x0000000000000000' [ 1371.234021][ T5826] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1371.254570][ T5826] usb 5-1: device descriptor read/8, error -71 [ 1371.419462][T17337] usb 9-1: USB disconnect, device number 21 [ 1371.506115][ T5826] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1371.525305][ T5826] usb 5-1: device descriptor read/8, error -71 [ 1371.634123][ T5826] usb usb5-port1: unable to enumerate USB device [ 1371.761735][T28271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5601'. [ 1371.878173][T28277] autofs: Unknown parameter 'fd0x0000000000000000' [ 1371.957761][T28281] blktrace: Concurrent blktraces are not allowed on sg0 [ 1372.024011][ T34] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1372.173897][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 1372.176913][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.180405][ T34] usb 8-1: config 0 has no interfaces? [ 1372.184765][ T34] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1372.188256][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.190776][ T34] usb 8-1: Product: syz [ 1372.192144][ T34] usb 8-1: Manufacturer: syz [ 1372.194115][ T34] usb 8-1: SerialNumber: syz [ 1372.199333][ T34] usb 8-1: config 0 descriptor?? [ 1372.207152][T28296] autofs: Unknown parameter 'fd0x0000000000000000' [ 1372.241984][T28298] sit0: entered promiscuous mode [ 1372.243506][T28298] netlink: 'syz.4.5614': attribute type 1 has an invalid length. [ 1372.245828][T28298] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5614'. [ 1372.281485][T28302] blktrace: Concurrent blktraces are not allowed on sg0 [ 1372.404092][ T34] usb 8-1: USB disconnect, device number 34 [ 1372.576310][T28316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5621'. [ 1372.617220][T28318] autofs: Unknown parameter 'fd0x0000000000000000' [ 1372.943261][T28328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5626'. [ 1373.027367][T28333] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1373.045521][T28333] kvm: pic: level sensitive irq not supported [ 1373.045969][T28333] picdev_read: 2 callbacks suppressed [ 1373.045981][T28333] kvm: pic: non byte read [ 1373.052772][T28333] kvm: pic: level sensitive irq not supported [ 1373.053004][T28333] kvm: pic: non byte read [ 1373.056830][T28333] kvm: pic: level sensitive irq not supported [ 1373.057060][T28333] kvm: pic: non byte read [ 1373.060790][T28333] kvm: pic: level sensitive irq not supported [ 1373.061116][T28333] kvm: pic: non byte read [ 1373.064896][T28333] kvm: pic: level sensitive irq not supported [ 1373.065125][T28333] kvm: pic: non byte read [ 1373.069507][T28333] kvm: pic: level sensitive irq not supported [ 1373.069739][T28333] kvm: pic: non byte read [ 1373.073415][T28333] kvm: pic: level sensitive irq not supported [ 1373.073651][T28333] kvm: pic: non byte read [ 1373.077389][T28333] kvm: pic: level sensitive irq not supported [ 1373.077625][T28333] kvm: pic: non byte read [ 1373.081327][T28333] kvm: pic: level sensitive irq not supported [ 1373.081555][T28333] kvm: pic: non byte read [ 1373.085249][T28333] kvm: pic: level sensitive irq not supported [ 1373.085476][T28333] kvm: pic: non byte read [ 1373.503945][ T5524] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1373.573789][T25385] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1373.663885][ T5524] usb 8-1: Using ep0 maxpacket: 16 [ 1373.667014][ T5524] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.670316][ T5524] usb 8-1: config 0 has no interfaces? [ 1373.674232][ T5524] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1373.677250][ T5524] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.679912][ T5524] usb 8-1: Product: syz [ 1373.681319][ T5524] usb 8-1: Manufacturer: syz [ 1373.682861][ T5524] usb 8-1: SerialNumber: syz [ 1373.686686][ T5524] usb 8-1: config 0 descriptor?? [ 1373.723848][T25385] usb 5-1: Using ep0 maxpacket: 8 [ 1373.726978][T25385] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.731206][T25385] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1373.735662][T25385] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1373.739677][T25385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.749199][T25385] usb 5-1: config 0 descriptor?? [ 1373.893145][ T5524] usb 8-1: USB disconnect, device number 35 [ 1374.447906][T28377] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1374.796418][T28406] netlink: 'syz.3.5654': attribute type 1 has an invalid length. [ 1374.818103][T28406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1374.835408][T28406] bond2: (slave veth0_to_bond): making interface the new active one [ 1374.838828][T28406] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1374.892951][T28410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5655'. [ 1374.913739][T28410] team0: Port device team_slave_0 removed [ 1375.605458][T28448] fuse: Bad value for 'fd' [ 1376.327686][T28467] fuse: Bad value for 'fd' [ 1376.354547][ T5826] usb 5-1: USB disconnect, device number 55 [ 1376.378750][T28469] netlink: 'syz.1.5680': attribute type 30 has an invalid length. [ 1376.472529][T28475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5683'. [ 1376.491575][T28475] macvlan2: entered promiscuous mode [ 1376.493409][T28475] macvlan2: entered allmulticast mode [ 1376.496440][T28475] bond1: entered promiscuous mode [ 1376.498640][T28475] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1376.505964][T28475] bond1: left promiscuous mode [ 1376.597120][T28483] blktrace: Concurrent blktraces are not allowed on sg0 [ 1376.696384][T28490] netlink: 'syz.1.5690': attribute type 4 has an invalid length. [ 1376.719341][T28492] fuse: Bad value for 'fd' [ 1376.736697][T28496] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5692'. [ 1376.786702][T28504] blktrace: Concurrent blktraces are not allowed on sg0 [ 1376.808401][T28503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5695'. [ 1376.880906][T28517] No control pipe specified [ 1376.928712][T28523] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5705'. [ 1376.972885][T28528] blktrace: Concurrent blktraces are not allowed on sg0 [ 1377.232863][T28548] No control pipe specified [ 1377.262699][T28550] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5715'. [ 1377.356171][T28560] blktrace: Concurrent blktraces are not allowed on sg0 [ 1377.878298][T28575] No control pipe specified [ 1377.917367][T28579] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5727'. [ 1378.173798][T25386] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1378.333867][T25386] usb 8-1: Using ep0 maxpacket: 8 [ 1378.339831][T25386] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.344641][T25386] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1378.348447][T25386] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1378.352208][T25386] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.357720][T25386] usb 8-1: config 0 descriptor?? [ 1378.373731][T25385] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1378.525822][T25385] usb 9-1: Using ep0 maxpacket: 16 [ 1378.534964][T25385] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.539098][T25385] usb 9-1: config 0 has no interfaces? [ 1378.543325][T25385] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1378.547498][T25385] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.550365][T25385] usb 9-1: Product: syz [ 1378.552039][T25385] usb 9-1: Manufacturer: syz [ 1378.555142][T25385] usb 9-1: SerialNumber: syz [ 1378.559035][T25385] usb 9-1: config 0 descriptor?? [ 1378.591507][T28609] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5739'. [ 1378.765613][T25386] usb 9-1: USB disconnect, device number 22 [ 1378.945772][T28630] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5748'. [ 1379.123287][T28643] sctp: [Deprecated]: syz.0.5753 (pid 28643) Use of int in maxseg socket option. [ 1379.123287][T28643] Use struct sctp_assoc_value instead [ 1379.426080][T28657] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5759'. [ 1380.013680][T11554] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1380.057653][T28681] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5768'. [ 1380.164900][T28687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5769'. [ 1380.173703][T11554] usb 5-1: Using ep0 maxpacket: 16 [ 1380.176748][T28684] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5777'. [ 1380.180351][T11554] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.186199][T11554] usb 5-1: config 0 has no interfaces? [ 1380.190417][T11554] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1380.194673][T11554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.195275][T28687] macvlan3: entered promiscuous mode [ 1380.198084][T11554] usb 5-1: Product: syz [ 1380.199727][T28687] macvlan3: entered allmulticast mode [ 1380.201457][T11554] usb 5-1: Manufacturer: syz [ 1380.203710][T28687] bond2: entered promiscuous mode [ 1380.205178][T11554] usb 5-1: SerialNumber: syz [ 1380.210195][T28687] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1380.210590][T11554] usb 5-1: config 0 descriptor?? [ 1380.218380][T28687] bond2: left promiscuous mode [ 1380.369052][T28700] netlink: 'syz.4.5775': attribute type 1 has an invalid length. [ 1380.393257][T28700] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1380.405131][T28700] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1380.421154][T18018] usb 5-1: USB disconnect, device number 56 [ 1380.455029][T28707] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5779'. [ 1380.663921][T28728] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5789'. [ 1380.702613][T28731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5790'. [ 1380.711777][T28731] team0: Port device team_slave_0 removed [ 1380.959832][T11554] usb 8-1: USB disconnect, device number 36 [ 1381.049405][T28753] blktrace: Concurrent blktraces are not allowed on sg0 [ 1381.049458][T28752] fuse: Bad value for 'fd' [ 1381.061359][T28748] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5798'. [ 1381.095537][T28757] syzkaller0: mtu greater than device maximum [ 1381.301310][T28771] blktrace: Concurrent blktraces are not allowed on sg0 [ 1381.354766][T28775] fuse: Bad value for 'fd' [ 1381.413881][T11554] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1381.417173][T28777] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5812'. [ 1381.507111][T28786] syzkaller0: entered promiscuous mode [ 1381.508950][T28786] syzkaller0: entered allmulticast mode [ 1381.563704][T11554] usb 8-1: Using ep0 maxpacket: 16 [ 1381.566784][T11554] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.579774][T11554] usb 8-1: config 0 has no interfaces? [ 1381.583205][T11554] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1381.586132][T11554] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.588730][T11554] usb 8-1: Product: syz [ 1381.590061][T11554] usb 8-1: Manufacturer: syz [ 1381.591535][T11554] usb 8-1: SerialNumber: syz [ 1381.599084][T11554] usb 8-1: config 0 descriptor?? [ 1381.810979][T25385] usb 8-1: USB disconnect, device number 37 [ 1383.449470][T28807] netlink: 'syz.3.5824': attribute type 1 has an invalid length. [ 1383.463785][T28807] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1383.487832][T28807] bond2: (slave veth0_to_bond): Releasing active interface [ 1383.496994][T28807] bond3: (slave veth0_to_bond): making interface the new active one [ 1383.500966][T28807] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1383.575521][T28825] netlink: 'syz.1.5832': attribute type 5 has an invalid length. [ 1383.578978][T28825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5832'. [ 1383.773820][T25386] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1383.827892][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 1383.827904][ T40] audit: type=1326 audit(1777486316.539:29888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28845 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 1383.838471][ T40] audit: type=1326 audit(1777486316.539:29889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28845 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 1383.845163][ T40] audit: type=1326 audit(1777486316.539:29891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28845 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 1383.851562][ T40] audit: type=1326 audit(1777486316.539:29890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28845 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 1383.857471][ T40] audit: type=1326 audit(1777486316.539:29893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28845 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 1383.863540][ T40] audit: type=1326 audit(1777486316.539:29892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28845 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 1383.870109][ T40] audit: type=1326 audit(1777486316.539:29894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28845 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 1383.876590][ T40] audit: type=1326 audit(1777486316.539:29895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28845 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 1383.882846][ T40] audit: type=1326 audit(1777486316.539:29896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28845 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 1383.890094][ T40] audit: type=1326 audit(1777486316.539:29897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28845 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 1383.934487][T28852] netlink: 'syz.1.5843': attribute type 5 has an invalid length. [ 1383.937044][T28852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5843'. [ 1383.943683][T25386] usb 5-1: Using ep0 maxpacket: 16 [ 1383.948714][T25386] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.953859][T25386] usb 5-1: config 0 has no interfaces? [ 1383.957449][T25386] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1383.960943][T25386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.963639][T25386] usb 5-1: Product: syz [ 1383.964978][T25386] usb 5-1: Manufacturer: syz [ 1383.966730][T25386] usb 5-1: SerialNumber: syz [ 1383.972331][T25386] usb 5-1: config 0 descriptor?? [ 1384.123538][T28867] netlink: 'syz.1.5848': attribute type 24 has an invalid length. [ 1384.179432][T25386] usb 5-1: USB disconnect, device number 57 [ 1384.731158][T28893] fuse: fd is not a fuse device [ 1384.841597][T28903] blktrace: Concurrent blktraces are not allowed on sg0 [ 1385.318877][T28931] blktrace: Concurrent blktraces are not allowed on sg0 [ 1386.190163][T28991] fuse: fd is not a fuse device [ 1387.855539][ T5524] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1387.913120][T25386] kernel read not supported for file /vcs (pid: 25386 comm: kworker/1:2) [ 1387.915991][T29101] fuse: Bad value for 'fd' [ 1387.918902][T25386] kernel read not supported for file /vcs (pid: 25386 comm: kworker/1:2) [ 1387.963555][T29105] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5933'. [ 1388.023802][ T5524] usb 8-1: Using ep0 maxpacket: 16 [ 1388.028063][ T5524] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.034535][ T5524] usb 8-1: config 0 has no interfaces? [ 1388.039098][ T5524] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1388.042628][ T5524] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.048516][ T5524] usb 8-1: Product: syz [ 1388.050320][ T5524] usb 8-1: Manufacturer: syz [ 1388.052396][ T5524] usb 8-1: SerialNumber: syz [ 1388.057282][ T5524] usb 8-1: config 0 descriptor?? [ 1388.198667][T29137] fuse: Bad value for 'fd' [ 1388.275448][ T5524] usb 8-1: USB disconnect, device number 38 [ 1388.392274][T29152] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5946'. [ 1388.439750][T29154] fuse: fd is not a fuse device [ 1388.794189][T29170] fuse: Bad value for 'fd' [ 1388.812824][T29172] blktrace: Concurrent blktraces are not allowed on sg0 [ 1388.856043][T29177] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5956'. [ 1389.087137][T29199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5961'. [ 1389.128146][T29207] blktrace: Concurrent blktraces are not allowed on sg0 [ 1389.250507][T29215] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5967'. [ 1389.333813][T25385] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1389.506968][T25385] usb 8-1: Using ep0 maxpacket: 16 [ 1389.515695][T25385] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.524776][T25385] usb 8-1: config 0 has no interfaces? [ 1389.531613][T25385] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1389.535984][T25385] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.539439][T25385] usb 8-1: Product: syz [ 1389.541225][T25385] usb 8-1: Manufacturer: syz [ 1389.543205][T25385] usb 8-1: SerialNumber: syz [ 1389.548676][T25385] usb 8-1: config 0 descriptor?? [ 1389.620137][T29249] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5978'. [ 1389.695567][T29253] fuse: fd is not a fuse device [ 1389.755572][T25385] usb 8-1: USB disconnect, device number 39 [ 1389.979824][T29271] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5987'. [ 1390.290064][T29298] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5997'. [ 1390.382573][T18018] kernel read not supported for file /883/net/tcp (pid: 18018 comm: kworker/2:0) [ 1390.468576][T29317] blktrace: Concurrent blktraces are not allowed on sg0 [ 1390.572479][T29329] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6008'. [ 1390.635763][T29333] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.641091][T29333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1390.655225][T29333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1390.658688][T29333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1390.663718][T29333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1390.666885][T29333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1390.671561][T29333] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1390.679801][T10322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.682029][T10322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1390.686081][T10322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.688425][T10322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.774019][T18018] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1390.833377][T29347] blktrace: Concurrent blktraces are not allowed on sg0 [ 1390.943783][T18018] usb 5-1: Using ep0 maxpacket: 16 [ 1390.949502][T18018] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.953799][T18018] usb 5-1: config 0 has no interfaces? [ 1390.958466][T18018] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1390.962358][T18018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.965703][T18018] usb 5-1: Product: syz [ 1390.967088][T18018] usb 5-1: Manufacturer: syz [ 1390.969118][T18018] usb 5-1: SerialNumber: syz [ 1390.975729][T18018] usb 5-1: config 0 descriptor?? [ 1391.044913][T29358] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6018'. [ 1391.187025][T29366] blktrace: Concurrent blktraces are not allowed on sg0 [ 1391.187590][T25386] usb 5-1: USB disconnect, device number 58 [ 1392.614701][T25386] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1392.773640][T25386] usb 9-1: Using ep0 maxpacket: 16 [ 1392.776666][T25386] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.779804][T25386] usb 9-1: config 0 has no interfaces? [ 1392.783468][T25386] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1392.786899][T25386] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.789399][T25386] usb 9-1: Product: syz [ 1392.790700][T25386] usb 9-1: Manufacturer: syz [ 1392.792289][T25386] usb 9-1: SerialNumber: syz [ 1392.795211][T25386] usb 9-1: config 0 descriptor?? [ 1392.920406][T29437] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1392.979039][T29445] __nla_validate_parse: 2 callbacks suppressed [ 1392.979050][T29445] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6049'. [ 1393.005284][T25385] usb 9-1: USB disconnect, device number 23 [ 1394.304195][T29499] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1394.443811][ T5524] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1394.593642][ T5524] usb 5-1: Using ep0 maxpacket: 16 [ 1394.596879][ T5524] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.600045][ T5524] usb 5-1: config 0 has no interfaces? [ 1394.604754][ T5524] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1394.608532][ T5524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.611817][ T5524] usb 5-1: Product: syz [ 1394.613705][ T5524] usb 5-1: Manufacturer: syz [ 1394.616015][ T5524] usb 5-1: SerialNumber: syz [ 1394.622223][ T5524] usb 5-1: config 0 descriptor?? [ 1394.829838][T25385] usb 5-1: USB disconnect, device number 59 [ 1395.143379][T29505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6077'. [ 1396.367596][T29553] netlink: 'syz.0.6094': attribute type 1 has an invalid length. [ 1396.370793][T29553] netlink: 'syz.0.6094': attribute type 1 has an invalid length. [ 1396.376145][T29553] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6094'. [ 1397.035608][T29573] fuse: fd is not a fuse device [ 1397.629407][T29607] 9p: Bad value for 'rfdno' [ 1397.683997][T25385] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1397.843816][T25385] usb 5-1: Using ep0 maxpacket: 16 [ 1397.848720][T25385] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.852775][T25385] usb 5-1: config 0 has no interfaces? [ 1397.858344][T25385] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1397.861643][T25385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.864299][T25385] usb 5-1: Product: syz [ 1397.865590][T25385] usb 5-1: Manufacturer: syz [ 1397.867219][T25385] usb 5-1: SerialNumber: syz [ 1397.870717][T25385] usb 5-1: config 0 descriptor?? [ 1397.901060][T29627] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1397.957676][T29632] syzkaller0: entered promiscuous mode [ 1397.959825][T29632] syzkaller0: entered allmulticast mode [ 1398.075773][T25385] usb 5-1: USB disconnect, device number 60 [ 1398.173130][T29648] syzkaller0: entered promiscuous mode [ 1398.180772][T29648] syzkaller0: entered allmulticast mode [ 1398.557939][T29659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6126'. [ 1398.874540][T29697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6139'. [ 1398.880893][T29697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6139'. [ 1398.885418][T29697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6139'. [ 1398.888683][T29697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6139'. [ 1398.891497][T29697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6139'. [ 1400.517855][T29793] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1401.583419][T29816] sch_fq: defrate 8 ignored. [ 1401.703735][ T5881] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1401.853668][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 1401.856887][ T5881] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1401.860691][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.866844][ T5881] usb 5-1: config 0 descriptor?? [ 1402.079753][ T5881] usb 5-1: string descriptor 0 read error: -71 [ 1402.082070][ T5881] uvcvideo 5-1:0.0: Found Unit with invalid ID 0 [ 1402.084986][ T5881] uvcvideo 5-1:0.0: Found UVC 0.00 device (2833:0201) [ 1402.087827][ T5881] uvcvideo 5-1:0.0: No valid video chain found. [ 1402.091521][ T5881] usb 5-1: USB disconnect, device number 61 [ 1402.560195][T29827] IPv6: sit1: Disabled Multicast RS [ 1402.643219][T29838] fuse: Bad value for 'group_id' [ 1402.645395][T29838] fuse: Bad value for 'group_id' [ 1403.591303][T29885] syzkaller0: entered promiscuous mode [ 1403.593377][T29885] syzkaller0: entered allmulticast mode [ 1403.822521][T29904] fuse: fd is not a fuse device [ 1404.243671][T25386] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1404.308119][T29938] fuse: fd is not a fuse device [ 1404.417330][T25386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1404.425803][T25386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1404.429759][T25386] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1404.435144][T25386] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1404.438646][T25386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.446045][T25386] usb 5-1: config 0 descriptor?? [ 1404.864876][T25386] hid_parser_main: 5 callbacks suppressed [ 1404.864889][T25386] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1404.869611][T25386] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1404.872274][T25386] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1404.874874][T25386] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1404.877464][T25386] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1404.880026][T25386] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1404.882557][T25386] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1404.885142][T25386] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1404.887656][T25386] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1404.890036][T25386] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1404.898071][T25386] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1405.569937][T29987] fuse: fd is not a fuse device [ 1405.601905][T29991] lo: Caught tx_queue_len zero misconfig [ 1405.612078][T29993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6240'. [ 1405.622787][T29993] ip6gre1: entered promiscuous mode [ 1405.625123][T29993] ip6gre1: entered allmulticast mode [ 1405.629213][ T1157] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1405.639820][T29993] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1405.641393][ T1157] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1405.653806][T17337] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1405.864135][T17337] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1406.153919][T17337] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1406.964741][T24747] usb 5-1: USB disconnect, device number 62 [ 1407.921992][T30076] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1408.090891][T30092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6275'. [ 1408.110370][T30092] bond4: entered promiscuous mode [ 1408.112991][T30092] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1408.167899][T30096] syzkaller0: entered promiscuous mode [ 1408.170605][T30096] syzkaller0: entered allmulticast mode [ 1408.253686][T25386] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1408.404654][T25386] usb 5-1: Using ep0 maxpacket: 16 [ 1408.407111][T25386] usb 5-1: too many configurations: 103, using maximum allowed: 8 [ 1408.412189][T25386] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1408.414849][T25386] usb 5-1: can't read configurations, error -61 [ 1408.543660][T25386] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1408.707322][T25386] usb 5-1: Using ep0 maxpacket: 16 [ 1408.715834][T25386] usb 5-1: too many configurations: 103, using maximum allowed: 8 [ 1408.745702][T25386] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1408.748260][T25386] usb 5-1: can't read configurations, error -61 [ 1408.758258][T25386] usb usb5-port1: attempt power cycle [ 1409.093842][T25386] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1409.115332][T25386] usb 5-1: Using ep0 maxpacket: 16 [ 1409.118249][T25386] usb 5-1: too many configurations: 103, using maximum allowed: 8 [ 1409.123284][T25386] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1409.126629][T25386] usb 5-1: can't read configurations, error -61 [ 1409.182933][T30149] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1409.253684][T25386] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1409.274419][T25386] usb 5-1: Using ep0 maxpacket: 16 [ 1409.277170][T25386] usb 5-1: too many configurations: 103, using maximum allowed: 8 [ 1409.281756][T25386] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1409.287094][T25386] usb 5-1: can't read configurations, error -61 [ 1409.291769][T25386] usb usb5-port1: unable to enumerate USB device [ 1409.913843][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1410.000329][T30153] netlink: 'syz.4.6302': attribute type 1 has an invalid length. [ 1410.014239][T30153] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1410.091873][T30153] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1410.095911][T30156] veth0_virt_wifi: entered promiscuous mode [ 1410.103860][T30156] bond5: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 1410.175234][T30153] bond5: (slave veth0_virt_wifi): Releasing active interface [ 1410.439235][T30168] veth9: entered allmulticast mode [ 1410.557218][T30173] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1410.615581][T30181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6313'. [ 1410.624856][T30181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6313'. [ 1410.990001][T30208] fuse: fd is not a fuse device [ 1411.839891][T30273] syzkaller0: entered promiscuous mode [ 1411.841784][T30273] syzkaller0: entered allmulticast mode [ 1411.899882][T30275] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1412.174057][T30293] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1412.259875][T30300] syzkaller0: entered promiscuous mode [ 1412.261677][T30300] syzkaller0: entered allmulticast mode [ 1412.818839][T30323] Invalid ELF header type: 3 != 1 [ 1412.919688][T30332] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1413.160224][ T40] kauditd_printk_skb: 151 callbacks suppressed [ 1413.160236][ T40] audit: type=1326 audit(1777486345.869:30049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30344 comm="syz.1.6378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7fc00000 [ 1413.170325][ T40] audit: type=1326 audit(1777486345.869:30050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30344 comm="syz.1.6378" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf709efcc code=0x7fc00000 [ 1414.316977][T30406] fuse: fd is not a fuse device [ 1414.842233][T30427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6412'. [ 1414.962108][T30430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6413'. [ 1415.337658][T30454] fuse: fd is not a fuse device [ 1415.398640][T30458] fuse: root generation should be zero [ 1415.575192][T30480] fuse: Unknown parameter 'group_i00000000000000000000' [ 1415.616581][T30486] syzkaller0: entered promiscuous mode [ 1415.618461][T30486] syzkaller0: entered allmulticast mode [ 1415.712186][T24970] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1415.721536][T24970] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1415.732187][T24970] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1415.740167][T24970] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1415.744837][T24970] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1415.754591][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1415.761460][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1415.764345][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1415.770695][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1415.775534][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1416.296033][T30490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.298439][T30490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.300784][T30490] bridge_slave_0: entered allmulticast mode [ 1416.303440][T30490] bridge_slave_0: entered promiscuous mode [ 1416.307703][T30490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.310110][T30490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.312510][T30490] bridge_slave_1: entered allmulticast mode [ 1416.331195][T30490] bridge_slave_1: entered promiscuous mode [ 1416.356702][T30490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.361245][T30490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.384318][T30490] team0: Port device team_slave_0 added [ 1416.388023][T30490] team0: Port device team_slave_1 added [ 1416.402036][T30490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.404456][T30490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.423794][T30490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.432200][T30490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.434795][T30490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.443400][T30490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.480116][T30490] hsr_slave_0: entered promiscuous mode [ 1416.482354][T30490] hsr_slave_1: entered promiscuous mode [ 1417.023935][T30563] syzkaller0: entered promiscuous mode [ 1417.025886][T30563] syzkaller0: entered allmulticast mode [ 1417.072949][T30490] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1417.077435][T30490] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1417.096364][T30490] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1417.100397][T30490] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1417.103255][T30490] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1417.110593][T30490] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1417.114220][T30490] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1417.118429][T30490] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1417.132502][T30490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.134928][T30490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.138230][T30490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.141259][T30490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.178206][T30490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.186890][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.189692][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.203011][T30490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.215500][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.218057][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.225634][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.228148][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.377365][T30596] syzkaller0: entered promiscuous mode [ 1417.379471][T30596] syzkaller0: entered allmulticast mode [ 1417.515319][T30490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1417.557224][T30490] veth0_vlan: entered promiscuous mode [ 1417.563982][T30490] veth1_vlan: entered promiscuous mode [ 1417.585439][T30490] veth0_macvtap: entered promiscuous mode [ 1417.589879][T30490] veth1_macvtap: entered promiscuous mode [ 1417.599837][T30490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1417.609011][T30490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.615299][ T167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.618681][ T167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.621934][ T167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.625648][ T167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.742160][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.751569][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.771037][T10321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.776148][T10321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.813077][T30616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.868465][T30624] syzkaller0: entered promiscuous mode [ 1417.871020][T30624] syzkaller0: entered allmulticast mode [ 1417.913809][ T5095] Bluetooth: hci0: command tx timeout [ 1418.014705][T30628] fuse: Unknown parameter 'group_i00000000000000000000' [ 1418.197876][ T40] audit: type=1326 audit(1777486350.909:30052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30639 comm="syz.1.6482" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5fe8 code=0x7ffc0000 [ 1418.206325][ T40] audit: type=1326 audit(1777486350.909:30051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30639 comm="syz.1.6482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 1418.214824][ T40] audit: type=1326 audit(1777486350.909:30054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30639 comm="syz.1.6482" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5fe8 code=0x7ffc0000 [ 1418.224292][ T40] audit: type=1326 audit(1777486350.909:30053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30639 comm="syz.1.6482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 1418.233065][ T40] audit: type=1326 audit(1777486350.909:30055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30639 comm="syz.1.6482" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5fe8 code=0x7ffc0000 [ 1418.242788][ T40] audit: type=1326 audit(1777486350.909:30056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30639 comm="syz.1.6482" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5fe8 code=0x7ffc0000 [ 1418.251513][ T40] audit: type=1326 audit(1777486350.909:30057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30639 comm="syz.1.6482" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5fe8 code=0x7ffc0000 [ 1418.259782][ T40] audit: type=1326 audit(1777486350.909:30059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30639 comm="syz.1.6482" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5fe8 code=0x7ffc0000 [ 1418.268279][ T40] audit: type=1326 audit(1777486350.909:30058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30639 comm="syz.1.6482" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5fe8 code=0x7ffc0000 [ 1418.276831][ T40] audit: type=1326 audit(1777486350.909:30060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30639 comm="syz.1.6482" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5fe8 code=0x7ffc0000 [ 1418.593982][ T6229] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1418.743898][ T6229] usb 6-1: Using ep0 maxpacket: 8 [ 1418.747315][ T6229] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.751091][ T6229] usb 6-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1418.756568][ T6229] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1418.759311][ T6229] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1418.763068][ T6229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.768694][ T6229] usb 6-1: config 0 descriptor?? [ 1418.778180][ T6229] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1418.873802][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1419.281204][T30667] fuse: Unknown parameter 'group_id00000000000000000000' [ 1419.993928][ T5095] Bluetooth: hci0: command tx timeout [ 1420.196031][T30705] syzkaller0: entered promiscuous mode [ 1420.198463][T30705] syzkaller0: entered allmulticast mode [ 1420.419406][T30721] fuse: fd is not a fuse device [ 1421.354437][T25060] usb 6-1: USB disconnect, device number 33 [ 1422.083926][ T5095] Bluetooth: hci0: command tx timeout [ 1422.492317][T30725] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1422.499027][T30725] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1422.505191][T30725] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1422.508492][T30725] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1422.512922][T30725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1422.521167][T30726] IPv6: sit2: Disabled Multicast RS [ 1422.523836][T30726] sit2: entered allmulticast mode [ 1422.535810][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.538971][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.555560][T11554] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1422.784137][T25060] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1422.813720][T24747] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1422.964196][T11554] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1422.973668][T24747] usb 5-1: Using ep0 maxpacket: 16 [ 1422.976049][T24747] usb 5-1: too many configurations: 103, using maximum allowed: 8 [ 1422.980352][T24747] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1422.983370][T24747] usb 5-1: can't read configurations, error -61 [ 1423.116615][T24747] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1423.143726][T11554] usb 6-1: Using ep0 maxpacket: 8 [ 1423.147303][T11554] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.150404][T11554] usb 6-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1423.154643][T11554] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1423.156964][T11554] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1423.159770][T11554] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.163392][T11554] usb 6-1: config 0 descriptor?? [ 1423.170385][T11554] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1423.264177][T24747] usb 5-1: Using ep0 maxpacket: 16 [ 1423.267266][T24747] usb 5-1: too many configurations: 103, using maximum allowed: 8 [ 1423.272237][T24747] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1423.275530][T24747] usb 5-1: can't read configurations, error -61 [ 1423.278434][T24747] usb usb5-port1: attempt power cycle [ 1423.614023][T24747] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1423.634219][T24747] usb 5-1: Using ep0 maxpacket: 16 [ 1423.636379][T24747] usb 5-1: too many configurations: 103, using maximum allowed: 8 [ 1423.640698][T24747] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1423.649200][T24747] usb 5-1: can't read configurations, error -61 [ 1423.783717][T24747] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1423.804464][T24747] usb 5-1: Using ep0 maxpacket: 16 [ 1423.807646][T24747] usb 5-1: too many configurations: 103, using maximum allowed: 8 [ 1423.812653][T24747] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1423.816213][T24747] usb 5-1: can't read configurations, error -61 [ 1423.819093][T24747] usb usb5-port1: unable to enumerate USB device [ 1424.153723][ T5095] Bluetooth: hci0: command tx timeout [ 1424.412923][T30812] syzkaller0: entered promiscuous mode [ 1424.415628][T30812] syzkaller0: entered allmulticast mode [ 1424.494159][T11554] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1424.525646][T30819] binder_alloc: 30818: binder_alloc_buf, no vma [ 1424.923817][T11554] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1425.592277][ T40] kauditd_printk_skb: 175 callbacks suppressed [ 1425.592289][ T40] audit: type=1326 audit(1777486358.299:30236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30871 comm="syz.0.6572" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x0 [ 1425.729803][T17337] usb 6-1: USB disconnect, device number 34 [ 1425.762316][T30883] binder: 30882:30883 ioctl 4018620d 0 returned -22 [ 1426.477164][T30916] binder: 30915:30916 ioctl 4018620d 0 returned -22 [ 1426.663707][T11554] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1426.823736][T11554] usb 6-1: Using ep0 maxpacket: 16 [ 1426.826280][T11554] usb 6-1: too many configurations: 103, using maximum allowed: 8 [ 1426.830076][T11554] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1426.833024][T11554] usb 6-1: can't read configurations, error -61 [ 1426.973780][T11554] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1427.143656][T11554] usb 6-1: Using ep0 maxpacket: 16 [ 1427.146372][T11554] usb 6-1: too many configurations: 103, using maximum allowed: 8 [ 1427.150244][T11554] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1427.152661][T11554] usb 6-1: can't read configurations, error -61 [ 1427.155360][T11554] usb usb6-port1: attempt power cycle [ 1427.503765][T11554] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1427.534518][T11554] usb 6-1: Using ep0 maxpacket: 16 [ 1427.537344][T11554] usb 6-1: too many configurations: 103, using maximum allowed: 8 [ 1427.542097][T11554] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1427.545902][T11554] usb 6-1: can't read configurations, error -61 [ 1427.684009][T11554] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1427.704195][T11554] usb 6-1: Using ep0 maxpacket: 16 [ 1427.706264][T11554] usb 6-1: too many configurations: 103, using maximum allowed: 8 [ 1427.709947][T11554] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1427.712413][T11554] usb 6-1: can't read configurations, error -61 [ 1427.714973][T11554] usb usb6-port1: unable to enumerate USB device [ 1427.728568][T30958] binder: BINDER_SET_CONTEXT_MGR already set [ 1427.730568][T30958] binder: 30957:30958 ioctl 4018620d 80000040 returned -16 [ 1427.834967][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.837553][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.852751][T30967] binder: BINDER_SET_CONTEXT_MGR already set [ 1427.854796][T30967] binder: 30966:30967 ioctl 4018620d 80004a80 returned -16 [ 1427.892006][T30969] syzkaller0: entered promiscuous mode [ 1427.894434][T30969] syzkaller0: entered allmulticast mode [ 1428.127377][T30979] binder: BINDER_SET_CONTEXT_MGR already set [ 1428.129813][T30979] binder: 30978:30979 ioctl 4018620d 80000040 returned -16 [ 1428.209759][T30985] binder: BINDER_SET_CONTEXT_MGR already set [ 1428.212243][T30985] binder: 30984:30985 ioctl 4018620d 80004a80 returned -16 [ 1428.251853][T30988] syzkaller0: entered promiscuous mode [ 1428.253894][T30988] syzkaller0: entered allmulticast mode [ 1428.548218][T31009] binder: 31008:31009 ioctl c0306201 0 returned -14 [ 1428.617868][T31013] syzkaller0: entered promiscuous mode [ 1428.619960][T31013] syzkaller0: entered allmulticast mode [ 1428.833544][T31022] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1428.922595][T31030] binder: 31029:31030 ioctl c0306201 0 returned -14 [ 1428.978232][T31036] syzkaller0: entered promiscuous mode [ 1428.983717][T31036] syzkaller0: entered allmulticast mode [ 1429.186750][T31054] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1429.318336][T31063] bond4: entered promiscuous mode [ 1429.453899][ T34] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1429.512651][T31083] binder: BINDER_SET_CONTEXT_MGR already set [ 1429.516828][T31083] binder: 31082:31083 ioctl 4018620d 80000040 returned -16 [ 1429.536232][T31085] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1429.613674][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 1429.616779][ T34] usb 5-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1429.623670][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1429.625797][ T34] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1429.633296][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.637615][ T34] usb 5-1: config 0 descriptor?? [ 1429.646304][ T34] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1429.729239][T31106] loop5: detected capacity change from 0 to 7 [ 1429.732409][ C1] blk_print_req_error: 5 callbacks suppressed [ 1429.732419][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1429.737907][ C1] buffer_io_error: 29 callbacks suppressed [ 1429.737916][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1429.743378][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1429.746855][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 1429.750394][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1429.753486][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 1429.756900][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1429.760547][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 1429.763204][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1429.766417][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 1429.771942][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1429.775273][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 1429.778350][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1429.782052][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 1429.785424][T31106] ldm_validate_partition_table(): Disk read failed. [ 1429.837262][T31108] [ 1429.838182][T31108] ====================================================== [ 1429.840331][T31108] WARNING: possible circular locking dependency detected [ 1429.842476][T31108] syzkaller #0 Not tainted [ 1429.843969][T31108] ------------------------------------------------------ [ 1429.846470][T31108] syz.1.6664/31108 is trying to acquire lock: [ 1429.848409][T31108] ffff88801ce9fa10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 1429.851485][T31108] [ 1429.851485][T31108] but task is already holding lock: [ 1429.853730][T31108] ffff8880267e9300 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1429.857221][T31108] [ 1429.857221][T31108] which lock already depends on the new lock. [ 1429.857221][T31108] [ 1429.860337][T31108] [ 1429.860337][T31108] the existing dependency chain (in reverse order) is: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1429.863053][T31108] [ 1429.863053][T31108] -> #2 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 1429.865895][T31108] blk_alloc_queue+0x610/0x790 [ 1429.867661][T31108] blk_mq_alloc_queue+0x174/0x290 [ 1429.869362][T31108] __blk_mq_alloc_disk+0x29/0x120 [ 1429.871061][T31108] loop_add+0x498/0xb60 [ 1429.872534][T31108] loop_init+0x1d3/0x200 [ 1429.873633][T25060] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1429.874141][T31108] do_one_initcall+0x121/0x750 [ 1429.878202][T31108] kernel_init_freeable+0x6ea/0x7b0 [ 1429.880719][T31108] kernel_init+0x1f/0x1e0 [ 1429.882923][T31108] ret_from_fork+0x72b/0xd50 [ 1429.885251][T31108] ret_from_fork_asm+0x1a/0x30 [ 1429.887458][T31108] [ 1429.887458][T31108] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1429.890395][T31108] fs_reclaim_acquire+0xc4/0x100 [ 1429.892586][T31108] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 1429.895019][T31108] __kernfs_iattrs+0x124/0x3e0 [ 1429.897390][T31108] __kernfs_setattr+0x4d/0x3c0 [ 1429.899625][T31108] kernfs_iop_setattr+0xda/0x130 [ 1429.901844][T31108] notify_change+0xb25/0x1330 [ 1429.903821][T31108] do_truncate+0x1df/0x240 [ 1429.905396][T31108] path_openat+0x2a55/0x31a0 [ 1429.906989][T31108] do_file_open+0x20e/0x430 [ 1429.908562][T31108] do_sys_openat2+0x10d/0x1e0 [ 1429.910153][T31108] __x64_sys_openat+0x12d/0x210 [ 1429.911830][T31108] do_syscall_64+0x10b/0xf80 [ 1429.913428][T31108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.916048][T31108] [ 1429.916048][T31108] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1429.919426][T31108] __lock_acquire+0x14b8/0x2630 [ 1429.921572][T31108] lock_acquire+0x1b1/0x370 [ 1429.923596][T31108] down_read+0x99/0x450 [ 1429.925534][T31108] kernfs_iop_getattr+0x9c/0xf0 [ 1429.927719][T31108] vfs_getattr_nosec+0x2d4/0x430 [ 1429.929861][T31108] vfs_getattr+0x4a/0x60 [ 1429.931823][T31108] loop_query_min_dio_size.isra.0+0x117/0x250 [ 1429.934450][T31108] lo_ioctl+0x13aa/0x1bc0 [ 1429.936485][T31108] lo_compat_ioctl+0xf3/0x160 [ 1429.938349][T31108] compat_blkdev_ioctl+0x682/0x7b0 [ 1429.940095][T31108] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1429.941963][T31108] __do_fast_syscall_32+0xe7/0x950 [ 1429.943781][T31108] do_fast_syscall_32+0x32/0x70 [ 1429.945934][T31108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1429.948367][T31108] [ 1429.948367][T31108] other info that might help us debug this: [ 1429.948367][T31108] [ 1429.951769][T31108] Chain exists of: [ 1429.951769][T31108] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 1429.951769][T31108] [ 1429.956814][T31108] Possible unsafe locking scenario: [ 1429.956814][T31108] [ 1429.959466][T31108] CPU0 CPU1 [ 1429.961325][T31108] ---- ---- [ 1429.963161][T31108] lock(&q->q_usage_counter(io)#22); [ 1429.965009][T31108] lock(fs_reclaim); [ 1429.967311][T31108] lock(&q->q_usage_counter(io)#22); [ 1429.969964][T31108] rlock(&root->kernfs_iattr_rwsem); [ 1429.971805][T31108] [ 1429.971805][T31108] *** DEADLOCK *** [ 1429.971805][T31108] [ 1429.974542][T31108] 3 locks held by syz.1.6664/31108: [ 1429.976361][T31108] #0: ffff8880269ba430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 1429.979898][T31108] #1: ffff8880267e9300 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1429.984013][T31108] #2: ffff8880267e9338 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1429.988044][T31108] [ 1429.988044][T31108] stack backtrace: [ 1429.990089][T31108] CPU: 1 UID: 0 PID: 31108 Comm: syz.1.6664 Not tainted syzkaller #0 PREEMPT(full) [ 1429.990109][T31108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1429.990118][T31108] Call Trace: [ 1429.990127][T31108] [ 1429.990134][T31108] dump_stack_lvl+0x100/0x190 [ 1429.990150][T31108] print_circular_bug.cold+0x178/0x1c7 [ 1429.990174][T31108] check_noncircular+0x146/0x160 [ 1429.990201][T31108] __lock_acquire+0x14b8/0x2630 [ 1429.990219][T31108] lock_acquire+0x1b1/0x370 [ 1429.990233][T31108] ? kernfs_iop_getattr+0x9c/0xf0 [ 1429.990249][T31108] ? __pfx___might_resched+0x10/0x10 [ 1429.990267][T31108] down_read+0x99/0x450 [ 1429.990286][T31108] ? kernfs_iop_getattr+0x9c/0xf0 [ 1429.990299][T31108] ? find_held_lock+0x2b/0x80 [ 1429.990316][T31108] ? __pfx_down_read+0x10/0x10 [ 1429.990334][T31108] ? kernfs_root+0xee/0x2a0 [ 1429.990348][T31108] kernfs_iop_getattr+0x9c/0xf0 [ 1429.990362][T31108] vfs_getattr_nosec+0x2d4/0x430 [ 1429.990381][T31108] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 1429.990395][T31108] vfs_getattr+0x4a/0x60 [ 1429.990413][T31108] loop_query_min_dio_size.isra.0+0x117/0x250 [ 1429.990436][T31108] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 1429.990464][T31108] lo_ioctl+0x13aa/0x1bc0 [ 1429.990485][T31108] ? __pfx_lo_ioctl+0x10/0x10 [ 1429.990507][T31108] ? blk_get_meta_cap+0xd4/0x6c0 [ 1429.990521][T31108] ? lockdep_hardirqs_on+0x78/0x100 [ 1429.990538][T31108] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1429.990552][T31108] ? tomoyo_path_number_perm+0x28f/0x580 [ 1429.990566][T31108] ? tomoyo_path_number_perm+0x28f/0x580 [ 1429.990580][T31108] ? blkdev_common_ioctl+0x515/0x2b80 [ 1429.990595][T31108] ? tomoyo_path_number_perm+0x188/0x580 [ 1429.990609][T31108] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1429.990626][T31108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1429.990647][T31108] ? do_vfs_ioctl+0x226/0x13e0 [ 1429.990659][T31108] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1429.990675][T31108] lo_compat_ioctl+0xf3/0x160 [ 1429.990695][T31108] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 1429.990737][T31108] compat_blkdev_ioctl+0x682/0x7b0 [ 1429.990756][T31108] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1429.990774][T31108] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1429.990791][T31108] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1429.990807][T31108] __do_fast_syscall_32+0xe7/0x950 [ 1429.990828][T31108] do_fast_syscall_32+0x32/0x70 [ 1429.990846][T31108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1429.990865][T31108] RIP: 0023:0xf7fc5fcc [ 1429.990876][T31108] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1429.990890][T31108] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1429.990903][T31108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c06 [ 1429.990912][T31108] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1429.990920][T31108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1429.990929][T31108] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1429.990937][T31108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1429.990950][T31108] [ 1430.098458][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1430.101793][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 1430.113750][T25060] usb 9-1: Using ep0 maxpacket: 16 [ 1430.123355][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1430.126528][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1430.133707][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1430.137559][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1430.141039][T31106] Dev loop5: unable to read RDB block 0 [ 1430.143932][T31106] loop5: unable to read partition table [ 1430.146292][T31106] loop5: partition table beyond EOD, truncated [ 1430.148761][T31106] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1430.184989][T31108] ldm_validate_partition_table(): Disk read failed. [ 1430.188355][T31108] Dev loop5: unable to read RDB block 0 [ 1430.191335][T31108] loop5: unable to read partition table [ 1430.193458][T31108] loop5: partition table beyond EOD, truncated [ 1430.195934][T31108] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1430.220055][T25413] bond0: (slave syz_tun): Releasing backup interface [ 1430.259911][T31056] bond0: (slave syz_tun): Releasing backup interface [ 1430.274751][T31093] bond0: (slave syz_tun): Releasing backup interface [ 1430.335945][ T34] usb 5-1: USB disconnect, device number 71 [ 1430.336136][T25060] usb 9-1: device descriptor read/all, error -71 [ 1430.748324][ T1157] bridge_slave_1: left allmulticast mode [ 1430.750259][ T1157] bridge_slave_1: left promiscuous mode [ 1430.752137][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.755159][ T1157] bridge_slave_0: left allmulticast mode [ 1430.757008][ T1157] bridge_slave_0: left promiscuous mode [ 1430.758872][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.985710][ T1157] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 1430.988631][ T1157] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1430.993961][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1430.997759][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1431.000904][ T1157] bond0 (unregistering): Released all slaves [ 1431.004215][ T1157] bond1 (unregistering): Released all slaves [ 1431.008629][ T1157] bond2 (unregistering): Released all slaves [ 1431.013026][ T1157] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1431.018035][ T1157] bond3 (unregistering): Released all slaves [ 1431.022176][ T1157] bond4 (unregistering): Released all slaves [ 1431.026764][ T1157] bond5 (unregistering): (slave veth7): Releasing active interface [ 1431.029955][ T1157] bond5 (unregistering): Released all slaves [ 1431.033991][ T1157] bond6 (unregistering): Released all slaves [ 1431.135567][ T1157] tipc: Left network mode [ 1431.148805][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1431.241012][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1431.339390][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1431.419613][ T1157] hsr_slave_0: left promiscuous mode [ 1431.421836][ T1157] hsr_slave_1: left promiscuous mode [ 1431.424941][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1431.427511][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1431.509461][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 1431.515347][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 1431.550016][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1431.966863][ T1157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.007161][ T1157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.047137][ T1157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.098114][ T1157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.178878][ T1157] bridge_slave_1: left allmulticast mode [ 1432.180769][ T1157] bridge_slave_1: left promiscuous mode [ 1432.182652][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.186751][ T1157] bridge_slave_0: left allmulticast mode [ 1432.188818][ T1157] bridge_slave_0: left promiscuous mode [ 1432.190776][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.296011][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.300052][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.303666][ T1157] bond0 (unregistering): Released all slaves [ 1432.413298][ T5447] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1432.542930][ T5447] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1432.597096][ T1157] hsr_slave_0: left promiscuous mode [ 1432.599163][ T1157] hsr_slave_1: left promiscuous mode [ 1432.601148][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1432.603490][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1432.608368][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1432.610758][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1432.616832][ T1157] veth1_macvtap: left promiscuous mode [ 1432.618619][ T1157] veth0_macvtap: left promiscuous mode [ 1432.620421][ T1157] veth1_vlan: left promiscuous mode [ 1432.622090][ T1157] veth0_vlan: left promiscuous mode [ 1432.684916][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 1432.691664][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 1432.719779][ T5447] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1432.832049][ T5447] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1433.196984][ T1157] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.239311][ T1157] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.308159][ T1157] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.348829][ T1157] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.431485][ T1157] bridge_slave_1: left promiscuous mode [ 1433.433390][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.436657][ T1157] bridge_slave_0: left allmulticast mode [ 1433.438537][ T1157] bridge_slave_0: left promiscuous mode [ 1433.440443][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.445673][ T1157] bond_slave_0: left promiscuous mode [ 1433.447527][ T1157] bond_slave_1: left promiscuous mode [ 1433.616633][ T1157] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 1433.619402][ T1157] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1433.624242][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1433.628241][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1433.631536][ T1157] bond0 (unregistering): Released all slaves [ 1433.636137][ T1157] bond1 (unregistering): Released all slaves [ 1433.641941][ T1157] bond2 (unregistering): Released all slaves [ 1433.649292][ T1157] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1433.653979][ T1157] bond3 (unregistering): Released all slaves [ 1433.660828][ T1157] bond4 (unregistering): Released all slaves [ 1433.776681][ T5447] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1433.880529][ T5447] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1433.942681][ T1157] hsr_slave_0: left promiscuous mode [ 1433.945188][ T1157] hsr_slave_1: left promiscuous mode [ 1433.948257][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1433.951296][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.959758][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1433.962769][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.973401][ T1157] veth1_macvtap: left promiscuous mode [ 1433.976245][ T1157] veth0_macvtap: left promiscuous mode [ 1433.978633][ T1157] veth1_vlan: left promiscuous mode [ 1433.980815][ T1157] veth0_vlan: left promiscuous mode [ 1434.065644][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 1434.117078][ T5447] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1434.228405][ T5447] 8021q: adding VLAN 0 to HW filter on device eth17