last executing test programs: 4m26.527310715s ago: executing program 2 (id=357): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) close(r2) 4m26.40528602s ago: executing program 2 (id=358): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000100)=[{0x8, 0x9, 0x1, 0x0, @time={0x5, 0x3}, {0x89, 0xb8}, {0x4, 0x6}, @connect={{0x6, 0xff}, {0x1, 0x6}}}], 0xfe5d) read$hiddev(r1, 0x0, 0x0) 4m26.355681683s ago: executing program 2 (id=359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000022c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 4m26.354099201s ago: executing program 2 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 4m26.312516723s ago: executing program 2 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000321, 0xe, 0x0, &(0x7f00000007c0)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m25.989841905s ago: executing program 2 (id=367): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m25.947705249s ago: executing program 32 (id=367): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m51.948795981s ago: executing program 1 (id=2903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x3e, 0x70, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x26, 0x0, [{0x7, 0xc, "468511964ecd3a9e87c3"}, {0x0, 0x9, "0ceece2208ac33"}, {0x7, 0x6, "1542d9f5"}, {0x2, 0x5, "6bea26"}]}, @ssrr={0x89, 0x17, 0xae, [@broadcast, @multicast2, @rand_addr=0x64010100, @local, @rand_addr=0x64010101]}]}}}}}, 0x7e) 1m51.838045328s ago: executing program 1 (id=2905): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0xda}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xffe8}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) 1m51.772265827s ago: executing program 1 (id=2907): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) 1m51.654521493s ago: executing program 1 (id=2910): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 1m51.580266574s ago: executing program 1 (id=2912): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000040000000c001a8008000580040003"], 0x2c}}, 0x800) 1m51.253302235s ago: executing program 1 (id=2919): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) mkdir(&(0x7f0000000180)='./file0\x00', 0xb2) 1m51.189879219s ago: executing program 33 (id=2919): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) mkdir(&(0x7f0000000180)='./file0\x00', 0xb2) 1m8.222115437s ago: executing program 5 (id=3697): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) setuid(0xee00) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000012002df8001c00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) 1m8.221752838s ago: executing program 5 (id=3698): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0xfe19) write$vhost_msg_v2(r0, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000400)=""/205, 0xcd, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000ac0)={0x2, 0x0, {&(0x7f0000000940)=""/81, 0x51, 0x0, 0x3, 0x3}}, 0x48) 1m8.139046068s ago: executing program 5 (id=3700): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x0) 1m8.052010801s ago: executing program 5 (id=3704): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m8.05145966s ago: executing program 5 (id=3706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 1m7.88292871s ago: executing program 5 (id=3709): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028"], 0x80}}, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001480)=""/4096, 0x1000, 0x5, 0xb, 0x9, 0x1, 0xb9a0}}, 0x120) syz_usb_disconnect(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000002480)={0x8, {"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", 0x1000}}, 0x1006) 1m7.84131242s ago: executing program 34 (id=3709): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028"], 0x80}}, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001480)=""/4096, 0x1000, 0x5, 0xb, 0x9, 0x1, 0xb9a0}}, 0x120) syz_usb_disconnect(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000002480)={0x8, {"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", 0x1000}}, 0x1006) 35.852464394s ago: executing program 3 (id=4193): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socket$rxrpc(0x21, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0xe0e4f3ee43f6dc44, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 35.806263999s ago: executing program 3 (id=4194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000012300)={0x0, 0x12c, @ioapic={0x70000, 0xc8f, 0xfffff5ab, 0x7fffffff, 0x0, [{0x8, 0x81, 0xfd, '\x00', 0x7}, {0x0, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0xa, '\x00', 0x2}, {0xd, 0x1, 0xe9, '\x00', 0x3}, {0xff, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x1, '\x00', 0x6f}, {0x45, 0x51, 0x3}, {0x10, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x9a, '\x00', 0x4b}, {0x5, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x7}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0x3, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x6}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0x87, 0x21, 0x7, '\x00', 0x7}, {0x1, 0x9, 0x0, '\x00', 0x6}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 35.655564333s ago: executing program 3 (id=4201): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 35.579572487s ago: executing program 3 (id=4203): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 35.542010961s ago: executing program 3 (id=4204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x406, 0x80801) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) 35.272100737s ago: executing program 3 (id=4208): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000002640)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 35.226113304s ago: executing program 35 (id=4208): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000002640)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 3.925907442s ago: executing program 7 (id=4710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x4000) recvmsg(r1, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x2000) 3.791675315s ago: executing program 7 (id=4713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x4008000) 3.65112302s ago: executing program 7 (id=4715): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 3.311824562s ago: executing program 4 (id=4720): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$inet(r0, &(0x7f0000007a80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x2, 0x4c000) 3.151170536s ago: executing program 4 (id=4721): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) 3.072282215s ago: executing program 4 (id=4722): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 2.953835294s ago: executing program 4 (id=4723): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r1) 2.045040843s ago: executing program 6 (id=4743): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x12, 0x0, 0x0, {{0x9}, {0x4}, {0xfffffffffffffcd4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB='\b'], 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.979665145s ago: executing program 6 (id=4745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x5) 1.894378093s ago: executing program 6 (id=4749): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.821841627s ago: executing program 0 (id=4751): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa888451104001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00['], 0x4c}}, 0x8000) 1.821581793s ago: executing program 6 (id=4752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.760608031s ago: executing program 6 (id=4753): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) 1.748748947s ago: executing program 0 (id=4754): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x5, 0x4) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)}, 0xd3b}], 0x1, 0x10022, 0x0) 1.691557058s ago: executing program 0 (id=4755): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x6}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000100)={0x3, 0x6, 0x7fffffff, 0x7}) 1.561980146s ago: executing program 6 (id=4756): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 623.360731ms ago: executing program 7 (id=4757): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0xe, 0x4, 0x4, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 615.971518ms ago: executing program 7 (id=4758): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close(r0) 546.537128ms ago: executing program 7 (id=4759): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 479.092427ms ago: executing program 4 (id=4760): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="56c78e3c733d76696e65459beb1fb664f6ce6c0c7274696f7874656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000000c0)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 437.972869ms ago: executing program 4 (id=4761): r0 = epoll_create(0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0xb0000001}) read(r1, &(0x7f0000000540)=""/4096, 0x1000) write$cgroup_int(r2, &(0x7f0000000080)=0x4, 0xfffffe7d) 43.666437ms ago: executing program 0 (id=4762): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f00009ef000/0x4000)=nil, 0x13000, 0x9) 42.960846ms ago: executing program 0 (id=4763): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '.', [{0x20, '\x9f\x01\xe9\xc9A3vP\x8al\x86A\x01\x81w\xf3\xd0\xb5N\x134\x161N\xbd\xd7UY\xb3\x87I\xa6E}\x98Iv\xf4.]1\x03\x1d_\xa4\xc2\xe3I\x01\xa3E\xf2\xd5\x8f\xf0\xe4,W\xf6_sq\xb4\xa4\"\xfd\x02@T=y\xab\xd1\x11\x9f\\\xf6TF\x1f\\M\xdf\x11\x15\xc9\xdb\x9d\xa5^\x90\xf5\a\xea\x9d\xb3\xf7\xf60\xf2\xa9h\x94$i\xa0H\x06!\x04{^\x82$\x1e\'`\xb4\xef\xad\xc4\x95\xa8p\r\x99\x06\xf3s\xf9\xdeV\f\xa8\xe6\x17\xacS\xee\x06\x8c\xae\xe3N--\xa1\a\xde\xe5\xc3\x96\xfc\x8e\xff\f\x97\xc0\xd6Z@O\xa7\x98W\xde\xf2r)\x9f\x1fP\xe7\xfe\xbd{\xe2\xda\"E\xf2l\xed!\x8a\xc3S\x86\a\xd9\xba\x00'/203}, {0x20, '+:+)\\)'}, {0x20, ':!'}, {0x20, '\\\xde'}, {0x20, 'cgroup.stat\x00'}], 0xa, "b524be350e7611b133a163b4ab1b0400000000000000000000000000200080ca925f71fcca768a3799bc574e8cbab6290e38d3da0ed66c23ef689b28aaa419845ae174abd9ee5c370a4b62d3ce006b3dee871ce123f03ce3766c9dae569070c09d917831c224a271b5302b90b4c8d778bb488276c5cfa6206142f094e942b2628e98d6a654154afc95031426a054"}, 0x179) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 0s ago: executing program 0 (id=4764): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x4}}}]}, 0x3c}}, 0x4004000) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 0 port 6081 - 0 [ 283.274630][ T71] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.321472][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.324566][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.361039][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.363571][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.815377][T12873] syzkaller1: entered promiscuous mode [ 283.817285][T12873] syzkaller1: entered allmulticast mode [ 283.976560][ T5609] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 284.086089][ T5844] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 284.238302][ T5844] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.242050][ T5844] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.245493][ T5844] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.250869][ T5844] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.253861][ T5844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.261671][ T5844] usb 9-1: config 0 descriptor?? [ 284.676436][ T5844] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 284.685409][ T5844] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 284.716158][ T5101] Bluetooth: hci2: command tx timeout [ 284.939334][ T918] usb 9-1: USB disconnect, device number 18 [ 285.467852][T12902] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2995'. [ 285.557445][T12905] block nbd2: server does not support multiple connections per device. [ 285.560739][T12905] block nbd2: shutting down sockets [ 285.768119][T12926] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input38 [ 286.059470][T12939] block nbd2: server does not support multiple connections per device. [ 286.066307][T12939] block nbd2: shutting down sockets [ 286.152831][T12950] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3010'. [ 286.567104][T12969] block nbd2: server does not support multiple connections per device. [ 286.575503][T12969] block nbd2: shutting down sockets [ 286.639004][T12984] binder: 12982:12984 ioctl 4018620d 0 returned -22 [ 286.806123][ T5101] Bluetooth: hci2: command tx timeout [ 286.992666][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3035'. [ 287.363179][T13028] netlink: 'syz.5.3045': attribute type 39 has an invalid length. [ 287.563955][T13039] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input39 [ 287.840316][T13060] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 288.416119][ T70] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 288.578257][ T70] usb 10-1: Using ep0 maxpacket: 16 [ 288.586322][ T70] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 288.590106][ T70] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.594986][ T70] usb 10-1: Product: syz [ 288.596921][ T70] usb 10-1: Manufacturer: syz [ 288.599003][ T70] usb 10-1: SerialNumber: syz [ 288.603012][ T70] usb 10-1: config 0 descriptor?? [ 288.986600][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 289.020586][ T70] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 289.028605][ T70] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 289.032762][ T70] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 289.035513][ T70] usb 10-1: media controller created [ 289.043879][ T70] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.608472][ T70] zl10353_read_register: readreg error (reg=127, ret==0) [ 289.608534][T13086] dtv5100: wlen = 0, aborting. [ 289.610801][ T70] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 289.615674][ T70] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 289.619730][ T70] usb 10-1: USB disconnect, device number 2 [ 289.640904][ T70] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 290.000814][T13127] overlayfs: statfs failed on './file0' [ 290.009131][ T5101] Bluetooth: hci2: command 0x2016 tx timeout [ 290.240767][T13139] syzkaller1: entered promiscuous mode [ 290.242792][T13139] syzkaller1: entered allmulticast mode [ 291.116449][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 292.076190][ T5101] Bluetooth: hci2: command 0x2016 tx timeout [ 292.200074][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3108'. [ 292.276800][T13182] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3112'. [ 292.374503][ T60] Bluetooth: hci4: Frame reassembly failed (-84) [ 292.563008][T13189] IPVS: You probably need to specify IP address on multicast interface. [ 292.567725][T13189] IPVS: Error connecting to the multicast addr [ 292.750485][T13218] serio: Serial port ttyprintk [ 293.369427][T13246] vlan1: entered allmulticast mode [ 293.371110][T13246] gretap0: entered allmulticast mode [ 293.449749][T13248] ./file0: Can't open blockdev [ 293.476100][ T918] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 293.488425][T13248] ./file0: Can't open blockdev [ 293.626154][ T918] usb 9-1: Using ep0 maxpacket: 8 [ 293.629291][ T918] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.632863][ T918] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.636071][ T918] usb 9-1: config 0 interface 0 has no altsetting 0 [ 293.638197][ T918] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 293.641012][ T918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.644683][ T918] usb 9-1: config 0 descriptor?? [ 293.660602][T13264] syzkaller1: entered promiscuous mode [ 293.662486][T13264] syzkaller1: entered allmulticast mode [ 293.723344][T13268] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input40 [ 294.067573][ T918] hid_parser_main: 10 callbacks suppressed [ 294.067587][ T918] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 294.076121][ T918] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 294.085454][ T918] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 294.088474][ T918] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 294.091180][ T918] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 294.094221][ T918] mcp2221 0003:04D8:00DD.0010: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 294.261709][ T10] usb 9-1: USB disconnect, device number 19 [ 294.397382][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 294.706144][ T39] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 294.856042][ T39] usb 10-1: Using ep0 maxpacket: 8 [ 294.859673][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.868973][ T39] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 294.873050][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.878318][ T39] usb 10-1: config 0 descriptor?? [ 294.904039][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 294.906354][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 295.090422][ T39] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 295.293552][ T2323] usb 10-1: USB disconnect, device number 3 [ 295.976041][T13357] Process accounting resumed [ 296.422063][T13388] input: syz0 as /devices/virtual/input/input41 [ 296.428174][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3192'. [ 296.434720][T13390] netlink: 'syz.5.3192': attribute type 20 has an invalid length. [ 296.438039][T13390] netlink: 'syz.5.3192': attribute type 21 has an invalid length. [ 296.952759][T13409] aD: renamed from lo (while UP) [ 296.957905][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 297.002429][T13411] input: syz0 as /devices/virtual/input/input42 [ 297.022956][T13413] syzkaller1: entered promiscuous mode [ 297.024660][T13413] syzkaller1: entered allmulticast mode [ 297.097029][T13417] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3206'. [ 297.360192][ T62] Bluetooth: hci2: unexpected event for opcode 0x203d [ 297.443241][T13443] netlink: 'syz.5.3219': attribute type 12 has an invalid length. [ 297.445576][T13443] netlink: 'syz.5.3219': attribute type 29 has an invalid length. [ 297.448461][T13443] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3219'. [ 297.451324][T13443] netlink: 'syz.5.3219': attribute type 1 has an invalid length. [ 297.454172][T13443] netlink: 'syz.5.3219': attribute type 2 has an invalid length. [ 297.456631][T13443] netlink: 15 bytes leftover after parsing attributes in process `syz.5.3219'. [ 297.674852][ T40] audit: type=1326 audit(1778147650.250:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.5.3224" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f03fcc code=0x0 [ 298.648005][ T40] audit: type=1326 audit(1778147651.230:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13483 comm="syz.4.3235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 298.654712][ T40] audit: type=1326 audit(1778147651.230:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13483 comm="syz.4.3235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 298.662649][ T40] audit: type=1326 audit(1778147651.230:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13483 comm="syz.4.3235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 298.670999][ T40] audit: type=1326 audit(1778147651.230:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13483 comm="syz.4.3235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 298.678086][ T40] audit: type=1326 audit(1778147651.230:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13483 comm="syz.4.3235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 298.684784][ T40] audit: type=1326 audit(1778147651.230:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13483 comm="syz.4.3235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 298.691825][ T40] audit: type=1326 audit(1778147651.230:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13483 comm="syz.4.3235" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 298.698714][ T40] audit: type=1326 audit(1778147651.230:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13483 comm="syz.4.3235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 298.708422][ T40] audit: type=1326 audit(1778147651.230:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13483 comm="syz.4.3235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 298.754923][T13490] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 298.760292][T13490] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 298.768215][T13490] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 298.773655][T13490] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 298.784259][T13490] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 298.830217][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3241'. [ 298.833272][T13494] bond0: ARP target 8.4.0.0 is already present [ 298.835233][T13494] bond0: option arp_ip_target: invalid value (1032) [ 298.841702][ T99] smbdirect: ib_dev[syz2] removed [ 299.533023][T13522] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3254'. [ 299.716118][ T5831] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 299.887329][ T5831] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.890532][ T5831] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.895014][ T5831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.900929][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.118156][ T5831] usb 5-1: usb_control_msg returned -32 [ 300.120717][ T5831] usbtmc 5-1:16.0: can't read capabilities [ 300.276952][T13543] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3263'. [ 300.321235][ T2323] usb 5-1: USB disconnect, device number 18 [ 300.677194][ T5609] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 300.858651][ T5609] usb 10-1: Using ep0 maxpacket: 8 [ 300.863452][ T5609] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 300.868169][ T5609] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.876173][ T5609] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 300.879296][ T5609] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 300.882574][ T5609] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.887921][ T5609] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 300.890811][ T5609] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.923663][T13572] input: syz1 as /devices/virtual/input/input43 [ 301.078032][T13576] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 301.083244][T13576] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 301.091379][T13576] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 301.108059][ T5609] usb 10-1: usb_control_msg returned -32 [ 301.118298][ T5609] usbtmc 10-1:16.0: can't read capabilities [ 301.136066][ T5831] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 301.286105][ T5831] usb 9-1: Using ep0 maxpacket: 8 [ 301.290147][ T5831] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.295037][ T5831] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.299098][ T5831] usb 9-1: config 0 interface 0 has no altsetting 0 [ 301.301872][ T5831] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 301.305594][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.312227][ T5831] usb 9-1: config 0 descriptor?? [ 301.369106][ T62] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 301.373045][ T62] Bluetooth: hci2: Injecting HCI hardware error event [ 301.380760][ T5101] Bluetooth: hci2: hardware error 0x00 [ 301.470403][T13583] usbtmc 10-1:16.0: INITIATE_ABORT_BULK_OUT returned c2 [ 301.564246][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 301.568825][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 301.672256][ T39] usb 10-1: USB disconnect, device number 4 [ 301.730492][ T5831] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 301.733329][ T5831] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 301.735633][ T5831] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 301.738828][ T5831] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 301.741064][ T5831] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 301.743699][ T5831] mcp2221 0003:04D8:00DD.0011: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 301.930177][ T5836] usb 9-1: USB disconnect, device number 20 [ 301.946915][T13599] tap0: tun_chr_ioctl cmd 1074025675 [ 301.948619][T13599] tap0: persist enabled [ 301.950238][T13599] tap0: tun_chr_ioctl cmd 1074025675 [ 301.951896][T13599] tap0: persist enabled [ 302.208895][T13614] syzkaller1: entered promiscuous mode [ 302.210774][T13614] syzkaller1: entered allmulticast mode [ 302.217277][T13614] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 22 [ 302.679225][ T39] kernel read not supported for file /admmidi2 (pid: 39 comm: kworker/2:1) [ 302.815066][T13673] tipc: Started in network mode [ 302.818138][T13673] tipc: Node identity 4, cluster identity 4711 [ 302.820830][T13673] tipc: Node number set to 4 [ 303.106172][ T5836] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 303.166089][ T70] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 303.228412][T13690] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.3331'. [ 303.256050][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 303.259486][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 303.264351][ T5836] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 303.267544][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.270128][ T5836] usb 5-1: Product: syz [ 303.271421][ T5836] usb 5-1: Manufacturer: syz [ 303.272848][ T5836] usb 5-1: SerialNumber: syz [ 303.275491][ T5836] usb 5-1: config 0 descriptor?? [ 303.279816][ T5836] hub 5-1:0.0: bad descriptor, ignoring hub [ 303.281728][ T5836] hub 5-1:0.0: probe with driver hub failed with error -5 [ 303.284947][ T5836] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.297873][T13694] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3333'. [ 303.302342][T13694] gretap0: entered promiscuous mode [ 303.309934][T13694] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3333'. [ 303.314290][T13694] 0{X: renamed from gretap0 [ 303.318758][T13694] 0{X: left promiscuous mode [ 303.320341][T13694] 0{X: entered allmulticast mode [ 303.323326][T13694] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 303.329507][ T70] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 303.334165][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.338693][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.346170][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.351320][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 303.354249][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.357485][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.360893][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.363935][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 303.367385][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.370154][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.373465][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.376654][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 303.379630][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.382623][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.383197][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 303.383207][ T40] audit: type=1326 audit(1778147655.960:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.3.3334" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4fcc code=0x0 [ 303.386086][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.386101][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 303.386845][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.402598][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.406013][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.409144][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 303.412001][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.414952][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.419230][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.422202][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 303.425000][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.428042][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.431405][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.434396][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 303.438152][ T5101] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 303.441825][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.444613][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.448072][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.451082][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 303.454769][ T70] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 303.457844][ T70] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 303.461229][ T70] usb 10-1: Product: syz [ 303.462977][ T70] usb 10-1: Manufacturer: syz [ 303.464928][ T70] usb 10-1: SerialNumber: syz [ 303.469237][ T70] usb 10-1: config 0 descriptor?? [ 303.472760][ T70] yurex 10-1:0.0: Could not submitting URB [ 303.474856][ T70] yurex 10-1:0.0: probe with driver yurex failed with error -5 [ 303.580680][ T5836] usb 5-1: USB disconnect, device number 19 [ 303.683929][T13683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.689605][T13683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.694173][ T70] usb 10-1: USB disconnect, device number 5 [ 304.117653][T13709] syzkaller1: entered promiscuous mode [ 304.120046][T13709] syzkaller1: entered allmulticast mode [ 304.166137][ T70] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 304.326487][ T70] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 304.330450][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.333616][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 304.337452][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 304.340728][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 304.343714][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.347041][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 304.350670][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 304.353787][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 304.356804][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.359891][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 304.363661][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 304.366901][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 304.370339][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.373696][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 304.378058][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 304.381231][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 304.384401][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.387373][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 304.391803][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 304.395849][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 304.399692][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.403588][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 304.408343][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 304.411597][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 304.414586][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.417566][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 304.421820][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 304.425043][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 304.430850][ T70] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.434597][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 304.438755][ T70] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 304.442307][ T70] usb 10-1: config 0 interface 0 has no altsetting 0 [ 304.449830][ T70] usb 10-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=49.8e [ 304.452744][ T70] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 304.455450][ T70] usb 10-1: Product: syz [ 304.457102][ T70] usb 10-1: Manufacturer: syz [ 304.458618][ T70] usb 10-1: SerialNumber: syz [ 304.462873][ T70] usb 10-1: config 0 descriptor?? [ 304.467943][ T70] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input44 [ 305.235784][ T70] usb 10-1: USB disconnect, device number 6 [ 305.259206][T13726] bond0: left promiscuous mode [ 305.261193][T13726] bond_slave_0: left promiscuous mode [ 305.263315][T13726] bond_slave_1: left promiscuous mode [ 305.683345][T13761] UHID_CREATE from different security context by process 1665 (syz.4.3362), this is not allowed. [ 305.686717][ T5831] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 305.694862][ T5831] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 305.698814][ T5831] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 305.701439][ T5831] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 305.703878][ T5831] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 305.709065][ T5831] hid-generic 0000:0000:0004.0012: hidraw1: HID v0.03 Device [syz1] on syz0 [ 305.750570][T13762] fido_id[13762]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 305.757777][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 305.762173][ C1] bridge0: port 3(syz_tun) entered learning state [ 306.306972][T13813] Invalid logical block size (8) [ 306.470633][T13839] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 306.739549][T13855] loop5: detected capacity change from 0 to 7 [ 306.742090][T13855] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 306.743814][T13855] loop5: partition table partially beyond EOD, truncated [ 306.747363][T13855] loop5: p1 size 487441168 extends beyond EOD, truncated [ 306.814310][T11290] udevd[11290]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 306.908118][T13869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3409'. [ 306.955417][T13875] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3419'. [ 306.959219][T13875] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.962064][T13875] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.976718][T13875] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3419'. [ 308.060127][T13913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.070883][T13913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.204499][ T99] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.210305][ T99] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.214013][ T99] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.217567][ T99] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.364949][T13959] team0: entered allmulticast mode [ 311.368113][T13959] team_slave_1: entered allmulticast mode [ 311.419708][T13964] overlayfs: failed lookup in lower (newroot/775, name='bus', err=-40): overlapping layers [ 311.536404][T13976] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 312.017852][T14022] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.021378][T14022] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.081946][T14022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.099094][T14022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.130065][T14022] macvlan0: left promiscuous mode [ 312.159555][T14022] batman_adv: batadv0: Interface deactivated: gretap1 [ 312.168110][T14022] macsec2: left promiscuous mode [ 312.172724][ T99] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.183951][ T99] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.186793][ T99] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.189547][ T99] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.192539][ T99] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.200451][ T99] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.207824][ T99] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.210623][ T99] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.482441][T14052] tap0: tun_chr_ioctl cmd 1074025675 [ 312.484171][T14052] tap0: persist enabled [ 312.486237][T14052] tap0: tun_chr_ioctl cmd 1074025675 [ 312.488199][T14052] tap0: persist enabled [ 313.013283][T14073] netlink: 'syz.3.3498': attribute type 12 has an invalid length. [ 313.015857][T14073] netlink: 'syz.3.3498': attribute type 29 has an invalid length. [ 313.019734][T14073] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3498'. [ 313.022621][T14073] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 313.025047][T14073] netlink: 'syz.3.3498': attribute type 2 has an invalid length. [ 313.028332][T14073] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3498'. [ 313.112983][T14084] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 313.126878][T14084] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 313.132230][T14084] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 313.145755][T14084] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 313.332979][ T12] smbdirect: ib_dev[syz2] removed [ 313.476662][T14091] tap0: tun_chr_ioctl cmd 1074025675 [ 313.478709][T14091] tap0: persist enabled [ 313.486654][T14091] tap0: tun_chr_ioctl cmd 1074025675 [ 313.488554][T14091] tap0: persist enabled [ 313.570415][T14095] bridge0: port 3(syz_tun) entered disabled state [ 313.606791][T14095] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.734205][T14095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.852588][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.859531][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.863271][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.866668][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.872329][T14110] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3513'. [ 313.966085][ T5815] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 314.126112][ T5815] usb 10-1: Using ep0 maxpacket: 8 [ 314.132159][ T5815] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.136887][ T5815] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.141420][ T5815] usb 10-1: config 0 interface 0 has no altsetting 0 [ 314.144173][ T5815] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 314.150942][ T5815] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.160006][ T5815] usb 10-1: config 0 descriptor?? [ 314.571580][ T5815] hid_parser_main: 96 callbacks suppressed [ 314.571593][ T5815] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 314.575724][ T5815] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 314.578007][ T5815] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 314.580202][ T5815] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 314.582418][ T5815] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 314.584983][ T5815] mcp2221 0003:04D8:00DD.0013: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 314.678237][T14125] syzkaller1: entered promiscuous mode [ 314.680049][T14125] syzkaller1: entered allmulticast mode [ 314.774086][ T5836] usb 10-1: USB disconnect, device number 7 [ 315.084054][T14130] syzkaller1: entered promiscuous mode [ 315.086047][T14130] syzkaller1: entered allmulticast mode [ 315.302672][T14136] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3525'. [ 315.501605][T14157] netlink: 'syz.4.3543': attribute type 21 has an invalid length. [ 315.505163][T14157] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3543'. [ 315.605046][T14169] binder: 14167:14169 ioctl c0306201 80000540 returned -14 [ 316.263245][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3559'. [ 317.254602][T14286] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3597'. [ 317.356946][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3600'. [ 317.866037][ T5836] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 318.016069][ T5836] usb 10-1: Using ep0 maxpacket: 8 [ 318.019587][ T5836] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.023503][ T5836] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.027006][ T5836] usb 10-1: config 0 interface 0 has no altsetting 0 [ 318.029406][ T5836] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 318.032626][ T5836] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.037042][ T5836] usb 10-1: config 0 descriptor?? [ 318.454546][ T5836] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 318.457163][ T5836] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 318.459371][ T5836] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 318.463777][ T5836] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 318.466135][ T5836] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 318.468769][ T5836] mcp2221 0003:04D8:00DD.0014: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 318.659166][ T70] usb 10-1: USB disconnect, device number 8 [ 319.974473][T14343] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3623'. [ 320.166349][T14351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3627'. [ 321.370999][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3650'. [ 321.374322][T14406] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3650'. [ 321.415192][ T1200] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.418852][ T1200] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.422492][ T1200] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.426706][ T1200] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.484725][T14415] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 88 [ 321.512758][ T40] audit: type=1326 audit(1778147674.090:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.3653" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa3fcc code=0x0 [ 321.759782][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.352327][T14444] syzkaller1: entered promiscuous mode [ 322.354715][T14444] syzkaller1: entered allmulticast mode [ 323.026340][T14489] kvm: user requested TSC rate below hardware speed [ 323.467884][T14525] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3702'. [ 323.679178][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.784549][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.827007][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.832174][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.835522][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.839113][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.842014][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.890550][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.970280][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.150853][ T12] bridge_slave_1: left allmulticast mode [ 324.153514][ T12] bridge_slave_1: left promiscuous mode [ 324.155930][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.160807][ T12] bridge_slave_0: left allmulticast mode [ 324.163092][ T12] bridge_slave_0: left promiscuous mode [ 324.165530][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.362177][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.368658][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.371965][ T12] bond0 (unregistering): Released all slaves [ 324.376754][ T12] bond1 (unregistering): Released all slaves [ 324.687589][T14539] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.689993][T14539] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.692956][T14539] bridge_slave_0: entered allmulticast mode [ 324.698550][T14539] bridge_slave_0: entered promiscuous mode [ 324.701894][T14539] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.704372][T14539] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.707216][T14539] bridge_slave_1: entered allmulticast mode [ 324.710255][T14539] bridge_slave_1: entered promiscuous mode [ 324.718381][ T5452] 8021q: adding VLAN 0 to HW filter on device eth10 [ 324.743142][T14539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.749226][T14539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.780050][T14539] team0: Port device team_slave_0 added [ 324.784730][T14539] team0: Port device team_slave_1 added [ 324.803660][T14539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.806756][T14539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.817476][T14539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.823483][T14539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.826584][T14539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.836277][T14539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.866996][T14539] hsr_slave_0: entered promiscuous mode [ 324.869330][T14539] hsr_slave_1: entered promiscuous mode [ 324.871920][T14539] debugfs: 'hsr0' already exists in 'hsr' [ 324.874323][T14539] Cannot create hsr debugfs directory [ 324.977817][ T5452] 8021q: adding VLAN 0 to HW filter on device eth11 [ 325.008709][T14539] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 325.141245][T14539] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.144654][T14539] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 325.149207][T14539] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.191392][T14539] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 325.202659][T14539] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.205284][T14539] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 325.214938][T14539] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 325.223320][ T12] hsr_slave_0: left promiscuous mode [ 325.232275][ T12] hsr_slave_1: left promiscuous mode [ 325.242117][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.248575][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.389333][ T12] team0 (unregistering): Port device team_slave_1 removed [ 325.401619][ T12] team0 (unregistering): Port device team_slave_0 removed [ 325.469454][ T5452] 8021q: adding VLAN 0 to HW filter on device eth12 [ 325.529281][T14539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.539184][T14539] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.545081][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.548171][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.561407][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.564547][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.677009][ T5452] 8021q: adding VLAN 0 to HW filter on device eth13 [ 325.917363][ T5101] Bluetooth: hci2: command tx timeout [ 325.939951][T14539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.101708][T14539] veth0_vlan: entered promiscuous mode [ 326.107312][T14539] veth1_vlan: entered promiscuous mode [ 326.131404][T14539] veth0_macvtap: entered promiscuous mode [ 326.136977][T14539] veth1_macvtap: entered promiscuous mode [ 326.147525][T14539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.170723][T14539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.181090][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.186488][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.205563][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.212996][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.217088][T14661] sctp: [Deprecated]: syz.3.3734 (pid 14661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.217088][T14661] Use struct sctp_sack_info instead [ 326.227709][T14661] sctp: [Deprecated]: syz.3.3734 (pid 14661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.227709][T14661] Use struct sctp_sack_info instead [ 326.255043][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.262693][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.294211][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.298233][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.726109][ T5889] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 326.888046][ T5889] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.893104][ T5889] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.897323][ T5889] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 326.907368][ T5889] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.911283][ T5889] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.922464][ T5889] usb 11-1: config 0 descriptor?? [ 327.336579][ T5889] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd [ 327.352048][ T5889] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 327.587328][ T5831] usb 11-1: USB disconnect, device number 2 [ 327.696159][ T39] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 327.871070][ T39] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 327.875889][ T39] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 327.879567][ T39] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.885515][ T39] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 327.885532][ T39] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 327.893357][ T39] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 327.895714][ T39] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 327.899355][ T39] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.903051][ T39] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 327.906661][ T39] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 327.910550][ T39] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 327.913034][ T39] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 327.919453][ T39] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.924583][ T39] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 327.928352][ T39] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 327.935318][ T39] usb 9-1: string descriptor 0 read error: -22 [ 327.937511][ T39] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 327.940446][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.958665][ T39] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 327.996333][ T5101] Bluetooth: hci2: command tx timeout [ 328.132936][T14732] Invalid source name [ 328.215256][ T5831] usb 9-1: USB disconnect, device number 21 [ 328.516162][ T5889] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 328.668780][ T5889] usb 11-1: config 0 has an invalid interface number: 8 but max is 0 [ 328.672347][ T5889] usb 11-1: config 0 has no interface number 0 [ 328.675039][ T5889] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.679776][ T5889] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 328.685227][ T5889] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 328.690363][ T5889] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 328.693875][ T5889] usb 11-1: Product: syz [ 328.695690][ T5889] usb 11-1: SerialNumber: syz [ 328.700566][ T5889] usb 11-1: config 0 descriptor?? [ 328.705651][ T5889] cm109 11-1:0.8: invalid payload size 0, expected 4 [ 328.710560][ T5889] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input46 [ 328.911002][ C0] cm109 11-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 329.178531][ C3] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 329.178692][ T39] usb 11-1: USB disconnect, device number 3 [ 329.181455][ C3] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 329.190609][ T39] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 329.436478][T14753] input: syz1 as /devices/virtual/input/input47 [ 329.771560][T14762] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3773'. [ 330.076184][ T5101] Bluetooth: hci2: command tx timeout [ 330.226131][ T918] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 330.400297][ T918] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.404419][ T918] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.409425][ T918] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.414592][ T918] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.418828][ T918] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.423733][ T918] usb 11-1: config 0 descriptor?? [ 330.612238][T14803] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.3792'. [ 330.781111][T14819] netlink: 'syz.0.3800': attribute type 4 has an invalid length. [ 330.848840][ T918] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 331.276635][ T918] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 331.283952][T14858] input: syz0 as /devices/virtual/input/input48 [ 331.398593][ T40] audit: type=1326 audit(1778147683.980:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14863 comm="syz.0.3821" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fcc code=0x0 [ 331.436148][ T918] usb 9-1: Using ep0 maxpacket: 32 [ 331.439427][ T918] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 331.445192][ T918] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 331.448675][ T918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.452244][ T918] usb 9-1: Product: syz [ 331.454280][ T918] usb 9-1: Manufacturer: syz [ 331.456462][ T918] usb 9-1: SerialNumber: syz [ 331.461250][ T918] usb 9-1: config 0 descriptor?? [ 331.463510][T14847] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 331.467659][ T918] hub 9-1:0.0: bad descriptor, ignoring hub [ 331.469995][ T918] hub 9-1:0.0: probe with driver hub failed with error -5 [ 331.474890][ T918] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input49 [ 331.676979][ T5815] usb 9-1: USB disconnect, device number 22 [ 331.677076][ C1] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 331.961026][ C3] ata1: illegal qc_active transition (00000000->00400000) [ 331.968546][T14870] netlink: 'syz.3.3822': attribute type 12 has an invalid length. [ 332.156159][ T5101] Bluetooth: hci2: command tx timeout [ 332.299308][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 332.307283][ T1127] ata1.00: configured for UDMA/100 [ 332.672776][T14904] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.3837'. [ 332.932205][ T39] usb 11-1: USB disconnect, device number 4 [ 333.018176][T14929] Invalid argument reading file caps for ./file0 [ 333.654354][T14955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3858'. [ 333.780585][T14960] ip6erspan0: entered allmulticast mode [ 333.856282][T14966] input: syz0 as /devices/virtual/input/input50 [ 334.196073][ T918] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 334.348779][ T918] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.356953][ T918] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.366058][ T918] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 334.369049][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.589070][ T918] usb 5-1: usb_control_msg returned -32 [ 334.593132][ T918] usbtmc 5-1:16.0: can't read capabilities [ 335.549580][ T39] hid-generic 0080:0008:0000.0017: unknown main item tag 0x0 [ 335.552600][ T39] hid-generic 0080:0008:0000.0017: unknown main item tag 0x0 [ 335.558433][ T39] hid-generic 0080:0008:0000.0017: unknown main item tag 0x0 [ 335.562355][ T39] hid-generic 0080:0008:0000.0017: unknown main item tag 0x0 [ 335.565534][ T39] hid-generic 0080:0008:0000.0017: unknown main item tag 0x0 [ 335.569649][ T39] hid-generic 0080:0008:0000.0017: unknown main item tag 0x0 [ 335.572699][ T39] hid-generic 0080:0008:0000.0017: unknown main item tag 0x0 [ 335.575142][ T39] hid-generic 0080:0008:0000.0017: unknown main item tag 0x0 [ 335.579147][ T39] hid-generic 0080:0008:0000.0017: unknown main item tag 0x0 [ 335.581884][ T39] hid-generic 0080:0008:0000.0017: unknown main item tag 0x0 [ 335.587243][ T39] hid-generic 0080:0008:0000.0017: hidraw1: HID v0.00 Device [syz0] on syz0 [ 335.620657][T15039] fido_id[15039]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 335.685458][T15045] netlink: 'syz.6.3898': attribute type 12 has an invalid length. [ 335.689463][T15045] netlink: 'syz.6.3898': attribute type 12 has an invalid length. [ 336.980248][ T5844] usb 5-1: USB disconnect, device number 20 [ 337.009408][T15113] support for cryptoloop has been removed. Use dm-crypt instead. [ 337.120096][T15124] bridge0: entered promiscuous mode [ 337.122654][T15124] dummy0: entered promiscuous mode [ 337.147153][T15124] bridge0: left promiscuous mode [ 337.152390][T15124] dummy0: left promiscuous mode [ 337.553735][T15154] syzkaller1: entered promiscuous mode [ 337.555672][T15154] syzkaller1: entered allmulticast mode [ 337.748396][T15162] netlink: 'syz.6.3935': attribute type 11 has an invalid length. [ 337.826058][ T5844] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 337.863236][ T2323] hid-generic 0000:0000:0000.0018: hidraw1: HID v0.00 Device [syz1] on syz0 [ 337.976051][ T5844] usb 9-1: Using ep0 maxpacket: 8 [ 337.981681][ T5844] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 337.985088][ T5844] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.988903][ T5844] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 337.992569][ T5844] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 337.996715][ T5844] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.001966][ T5844] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.005643][ T5844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.181312][T15182] input: syz1 as /devices/virtual/input/input51 [ 338.218157][ T5844] usb 9-1: GET_CAPABILITIES returned 0 [ 338.220497][ T5844] usbtmc 9-1:16.0: can't read capabilities [ 338.988785][ T24] usb 9-1: USB disconnect, device number 23 [ 339.286161][ T5888] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 339.365419][T15215] overlayfs: upper fs does not support tmpfile. [ 339.376214][ T24] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 339.436173][ T5888] usb 11-1: Using ep0 maxpacket: 8 [ 339.440884][ T5888] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 339.445091][ T5888] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.450850][ T5888] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 339.454599][ T5888] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 339.458983][ T5888] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.464790][ T5888] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 339.468774][ T5888] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.536466][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 339.539390][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 339.545037][ T24] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 339.548660][ T24] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 339.551771][ T24] usb 9-1: Product: syz [ 339.553492][ T24] usb 9-1: Manufacturer: syz [ 339.555422][ T24] usb 9-1: SerialNumber: syz [ 339.559542][ T24] usb 9-1: config 0 descriptor?? [ 339.562379][T15206] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 339.566938][ T24] hub 9-1:0.0: bad descriptor, ignoring hub [ 339.569075][ T24] hub 9-1:0.0: probe with driver hub failed with error -5 [ 339.675938][ T5888] usb 11-1: usb_control_msg returned -32 [ 339.678459][ T5888] usbtmc 11-1:16.0: can't read capabilities [ 339.966065][ T39] usb 11-1: USB disconnect, device number 5 [ 339.976102][ T5831] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 339.982757][ T5888] usb 9-1: USB disconnect, device number 24 [ 340.126805][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 340.130027][ T5831] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 340.133529][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 340.137719][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 340.141528][ T5831] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.145799][ T5831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 340.148841][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.358819][ T5831] usb 5-1: GET_CAPABILITIES returned 0 [ 340.361121][ T5831] usbtmc 5-1:16.0: can't read capabilities [ 340.498177][T15238] kvm: user requested TSC rate below hardware speed [ 340.561477][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 340.565703][ T5831] usb 5-1: USB disconnect, device number 21 [ 340.910922][T15255] netlink: 'syz.6.3972': attribute type 30 has an invalid length. [ 340.913685][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3972'. [ 340.944688][T15258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3971'. [ 341.135217][T15272] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 341.138350][T15272] binder: 15271:15272 ioctl 4018620d 80000100 returned -1 [ 341.259772][ T13] tipc: Subscription rejected, illegal request [ 341.929136][T15286] syzkaller1: entered promiscuous mode [ 341.931736][T15286] syzkaller1: entered allmulticast mode [ 342.181263][T15301] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input52 [ 342.225525][T15305] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 342.467285][T15317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3996'. [ 342.786116][ T40] audit: type=1326 audit(1778147695.360:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15323 comm="syz.4.3999" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x0 [ 343.416063][ T5831] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 343.566031][ T5831] usb 9-1: Using ep0 maxpacket: 8 [ 343.569049][ T5831] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.572549][ T5831] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.575724][ T5831] usb 9-1: config 0 interface 0 has no altsetting 0 [ 343.578174][ T5831] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 343.580998][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.587270][ T5831] usb 9-1: config 0 descriptor?? [ 344.004052][ T5831] hid_parser_main: 34 callbacks suppressed [ 344.004065][ T5831] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 344.008221][ T5831] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 344.010455][ T5831] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 344.012841][ T5831] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 344.015066][ T5831] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 344.017931][ T5831] mcp2221 0003:04D8:00DD.0019: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 344.204238][ T24] usb 9-1: USB disconnect, device number 25 [ 344.886130][ T5101] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 344.886162][ T62] Bluetooth: hci4: command 0x1003 tx timeout [ 345.306156][ T5831] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 345.467593][ T5831] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 345.470974][ T5831] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 345.474660][ T5831] usb 5-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 345.479669][ T5831] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.482639][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 345.485181][ T5831] usb 5-1: SerialNumber: syz [ 345.697775][ T5831] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -22 [ 345.702768][ T5831] usb 5-1: USB disconnect, device number 22 [ 347.095927][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4054'. [ 347.100340][T15451] netlink: 65011 bytes leftover after parsing attributes in process `syz.6.4054'. [ 347.237917][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4059'. [ 347.297318][ T2323] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 347.447905][ T2323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.452743][ T2323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.458954][ T2323] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.464163][ T2323] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.468422][ T2323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.474376][ T2323] usb 5-1: config 0 descriptor?? [ 347.772684][T15482] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 347.892276][ T2323] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 347.977476][T15489] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 348.526029][ T5831] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 348.676143][ T5831] usb 9-1: Using ep0 maxpacket: 8 [ 348.680029][ T5831] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 348.683645][ T5831] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 348.687244][ T5831] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 348.690919][ T5831] usb 9-1: config 250 has no interface number 0 [ 348.693641][ T5831] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 348.698590][ T5831] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 348.703115][ T5831] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 348.707588][ T5831] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 348.711862][ T5831] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 348.717429][ T5831] usb 9-1: config 250 interface 228 has no altsetting 0 [ 348.721862][ T5831] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 348.725736][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 348.729352][ T5831] usb 9-1: Product: syz [ 348.731169][ T5831] usb 9-1: SerialNumber: syz [ 348.737828][ T5831] hub 9-1:250.228: bad descriptor, ignoring hub [ 348.739862][ T5831] hub 9-1:250.228: probe with driver hub failed with error -5 [ 348.940979][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4078'. [ 348.944003][ T5831] usblp 9-1:250.228: usblp1: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 348.952089][T15512] netlink: 65011 bytes leftover after parsing attributes in process `syz.3.4078'. [ 349.306320][ T5831] usb 9-1: USB disconnect, device number 26 [ 349.311774][ T5831] usblp1: removed [ 349.646039][ T918] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 349.808914][ T918] usb 9-1: config 4 has an invalid interface number: 56 but max is 0 [ 349.812236][ T918] usb 9-1: config 4 has no interface number 0 [ 349.814803][ T918] usb 9-1: config 4 interface 56 has no altsetting 0 [ 349.820912][ T918] usb 9-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice=25.aa [ 349.824698][ T918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.831125][ T918] usb 9-1: Product: syz [ 349.832957][ T918] usb 9-1: Manufacturer: syz [ 349.840219][ T918] usb 9-1: SerialNumber: syz [ 349.996166][ T5845] usb 5-1: USB disconnect, device number 23 [ 350.063925][ T918] usb-storage 9-1:4.56: USB Mass Storage device detected [ 350.077197][ T918] usb-storage 9-1:4.56: Quirks match for vid 152d pid 0539: 4000000 [ 350.090829][T15564] binder: 15563:15564 ioctl c0306201 80000480 returned -14 [ 350.115009][ T918] usb 9-1: USB disconnect, device number 27 [ 350.142726][T15566] loop9: detected capacity change from 0 to 7 [ 350.901344][T15605] loop5: detected capacity change from 0 to 7 [ 350.907586][T15605] Dev loop5: unable to read RDB block 7 [ 350.909398][T15605] loop5: AHDI p1 [ 350.911067][T15605] loop5: partition table partially beyond EOD, truncated [ 350.945804][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4118'. [ 350.953523][T15609] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4118'. [ 351.199563][ T918] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 351.357836][ T918] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 351.360329][ T918] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 351.367464][ T918] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.376011][ T918] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 351.382092][ T918] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 351.388282][ T918] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 351.392148][ T918] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 351.395419][ T918] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.399447][ T918] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 351.403229][ T918] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 351.407922][ T918] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 351.416019][ T918] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 351.419418][ T918] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.423145][ T918] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 351.427926][ T918] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 351.433647][ T918] usb 11-1: string descriptor 0 read error: -22 [ 351.435691][ T918] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 351.438771][ T918] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.448174][ T918] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 351.684049][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4131'. [ 351.695624][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.698786][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.710463][ T1200] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.710732][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4131'. [ 351.712922][ T24] usb 11-1: USB disconnect, device number 6 [ 351.713058][ T1200] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.900451][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4137'. [ 353.122093][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4149'. [ 353.126658][T15682] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4149'. [ 353.825017][T15718] input: syz0 as /devices/virtual/input/input54 [ 353.881313][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4167'. [ 355.022733][T15750] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 355.759820][T15778] sit0: entered promiscuous mode [ 355.763171][ T5844] kernel write not supported for file bpf-prog (pid: 5844 comm: kworker/3:4) [ 355.763800][T15778] netlink: 'syz.6.4189': attribute type 1 has an invalid length. [ 355.769807][T15778] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4189'. [ 355.856122][ T5831] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 356.001228][T15802] bridge0: port 3(syz_tun) entered blocking state [ 356.003497][T15802] bridge0: port 3(syz_tun) entered listening state [ 356.006052][ T5831] usb 9-1: Using ep0 maxpacket: 8 [ 356.008348][T15802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.008879][ T5831] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 356.011965][T15802] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.013398][ T5831] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 356.020826][ T5831] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 356.021441][T15802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.023823][ T5831] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 356.029191][ T5831] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.033254][ T5831] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 356.041235][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.082559][T15802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.089552][T15802] veth1_vlan: left promiscuous mode [ 356.092010][T15802] veth0_vlan: left promiscuous mode [ 356.094189][T15802] veth0_vlan: entered promiscuous mode [ 356.097729][T15802] veth1_vlan: entered promiscuous mode [ 356.111183][T15802] veth1_macvtap: left promiscuous mode [ 356.114343][T15802] veth0_macvtap: left promiscuous mode [ 356.116983][T15802] veth0_macvtap: entered promiscuous mode [ 356.123167][T15802] veth1_macvtap: entered promiscuous mode [ 356.129394][T15802] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 356.139377][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.141826][ T12] bridge0: port 1(bridge_slave_0) entered listening state [ 356.145306][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.147690][ T12] bridge0: port 2(bridge_slave_1) entered listening state [ 356.180945][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.200286][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.210197][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.213274][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.254860][ T5831] usb 9-1: usb_control_msg returned -32 [ 356.256924][ T5831] usbtmc 9-1:16.0: can't read capabilities [ 356.397228][T15814] Bluetooth: MGMT ver 1.23 [ 356.427744][ T5888] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 356.432863][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.438093][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.442336][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.446137][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.448814][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.467079][ T39] usb 9-1: USB disconnect, device number 28 [ 356.608094][ T5888] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.611683][ T5888] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.614731][ T5888] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.621230][ T5888] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.624181][ T5888] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.629982][ T5888] usb 11-1: config 0 descriptor?? [ 356.766149][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 356.856208][T15815] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.859184][T15815] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.862121][T15815] bridge_slave_0: entered allmulticast mode [ 356.864797][T15815] bridge_slave_0: entered promiscuous mode [ 356.868216][T15815] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.870350][T15815] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.872441][T15815] bridge_slave_1: entered allmulticast mode [ 356.875086][T15815] bridge_slave_1: entered promiscuous mode [ 356.892211][T15815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.896684][T15815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.916106][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 356.917498][T15815] team0: Port device team_slave_0 added [ 356.919980][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 356.922613][T15815] team0: Port device team_slave_1 added [ 356.926972][ T24] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 356.930765][ T24] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 356.934177][ T24] usb 5-1: Product: syz [ 356.935938][ T24] usb 5-1: Manufacturer: syz [ 356.937784][T15815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.938359][ T24] usb 5-1: SerialNumber: syz [ 356.940479][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.940495][T15815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.944339][ T24] usb 5-1: config 0 descriptor?? [ 356.951601][T15815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.955491][T15823] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 356.956664][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.968738][T15815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.990886][T15815] hsr_slave_0: entered promiscuous mode [ 356.993120][T15815] hsr_slave_1: entered promiscuous mode [ 356.995181][T15815] debugfs: 'hsr0' already exists in 'hsr' [ 356.997377][T15815] Cannot create hsr debugfs directory [ 357.043394][ T5888] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 357.047453][ T5888] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 357.049856][ T5888] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 357.052199][ T5888] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 357.054627][ T5888] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 357.058395][ T5888] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 357.060988][ T5888] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 357.063361][ T5888] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 357.065688][ T5888] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 357.068544][ T5888] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 357.075751][ T5888] plantronics 0003:047F:FFFF.001B: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 357.133425][T15815] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 357.139572][T15815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 357.142938][T15815] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 357.148902][T15815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.161524][T15815] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 357.168640][T15815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.171863][T15815] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 357.178630][T15815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.203429][T15815] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.205844][T15815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.208432][T15815] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.210814][T15815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.222681][ T5845] usb 5-1: USB disconnect, device number 24 [ 357.247279][ T5889] usb 11-1: USB disconnect, device number 7 [ 357.267971][T15815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.281313][ T1200] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.283949][ T1200] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.292296][T15815] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.299804][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.303458][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.311681][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.314768][ T1200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.571468][T15815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.707006][T15815] veth0_vlan: entered promiscuous mode [ 357.712275][T15815] veth1_vlan: entered promiscuous mode [ 357.730064][T15815] veth0_macvtap: entered promiscuous mode [ 357.734277][T15815] veth1_macvtap: entered promiscuous mode [ 357.744726][T15815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.751347][T15815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.759102][ T60] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.772343][ T60] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.780593][ T60] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.784120][ T60] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.897280][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.904637][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.928836][ T215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.934295][ T215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.058895][T15897] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4226'. [ 358.356171][ T29] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 358.476246][ T5101] Bluetooth: hci0: command tx timeout [ 358.526231][ T29] usb 12-1: Using ep0 maxpacket: 8 [ 358.529476][ T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 358.533702][ T29] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 358.537400][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.541946][ T29] usb 12-1: config 0 descriptor?? [ 358.681626][T15920] input: syz0 as /devices/virtual/input/input55 [ 358.750645][ T29] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 358.952849][ T29] usb 12-1: USB disconnect, device number 2 [ 358.954837][ C1] iowarrior 12-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 359.686261][T15950] 9pnet_fd: p9_fd_create_tcp (15950): problem connecting socket to 127.0.0.1 [ 359.719746][T15954] Bluetooth: MGMT ver 1.23 [ 359.790295][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4256'. [ 360.146088][ T5836] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 360.306154][ T5836] usb 12-1: Using ep0 maxpacket: 8 [ 360.311226][ T5836] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 360.315714][ T5836] usb 12-1: config 0 has no interface number 0 [ 360.318377][ T5836] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 360.322265][ T5836] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 360.326528][ T5836] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.330236][ T5836] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 360.334552][ T5836] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 360.337472][ T5836] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.341493][ T5836] usb 12-1: config 0 descriptor?? [ 360.350239][ T5836] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 360.556344][ T5101] Bluetooth: hci0: command tx timeout [ 361.386245][ T39] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 361.556755][ T39] usb 11-1: Using ep0 maxpacket: 16 [ 361.561867][ T39] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 361.566177][ T39] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.569707][ T39] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.573028][ T39] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 361.578153][ T39] usb 11-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 361.581614][ T39] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.587508][ T39] usb 11-1: config 0 descriptor?? [ 362.029175][ T39] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5013.001C/input/input56 [ 362.121507][ T39] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5013.001C/input/input57 [ 362.191998][ T39] kye 0003:0458:5013.001C: input,hiddev1,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.6-1/input0 [ 362.208577][ T918] usb 11-1: USB disconnect, device number 8 [ 362.222460][T16024] fido_id[16024]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb11/11-1/report_descriptor': No such file or directory [ 362.228149][ T29] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 362.376033][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 362.379051][ T29] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 362.379068][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.387995][ T29] pvrusb2: Hardware description: Terratec Grabster AV400 [ 362.388008][ T29] pvrusb2: ********** [ 362.388012][ T29] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 362.388020][ T29] pvrusb2: Important functionality might not be entirely working. [ 362.388026][ T29] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 362.388031][ T29] pvrusb2: ********** [ 362.561310][ T39] usb 12-1: USB disconnect, device number 3 [ 362.568440][ T39] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 362.588789][ T2511] pvrusb2: Invalid write control endpoint [ 362.636088][ T5101] Bluetooth: hci0: command tx timeout [ 362.638909][ T2511] pvrusb2: Invalid write control endpoint [ 362.642798][ T2511] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 362.642821][ T2511] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 362.642825][ T2511] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 362.642831][ T2511] pvrusb2: Device being rendered inoperable [ 362.646943][ T2511] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 362.661777][ T2511] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 362.665928][ T2511] pvrusb2: Attached sub-driver cx25840 [ 362.666052][ T2511] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 362.666059][ T2511] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 362.788983][T16019] pvrusb2: Attempted to execute control transfer when device not ok [ 362.797108][ T5831] usb 5-1: USB disconnect, device number 25 [ 362.998485][T16035] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4288'. [ 363.366094][ T918] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 363.516064][ T918] usb 12-1: Using ep0 maxpacket: 16 [ 363.519233][ T918] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 363.522902][ T918] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.527676][ T918] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.531760][ T918] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 363.537558][ T918] usb 12-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 363.541210][ T918] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.545536][ T918] usb 12-1: config 0 descriptor?? [ 363.987201][ T918] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0458:5013.001D/input/input58 [ 364.082035][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4302'. [ 364.149109][ T918] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0458:5013.001D/input/input59 [ 364.179854][T16075] loop5: detected capacity change from 0 to 7 [ 364.184696][T16075] Dev loop5: unable to read RDB block 7 [ 364.187247][T16075] loop5: unable to read partition table [ 364.189912][T16075] loop5: partition table beyond EOD, truncated [ 364.192444][T16075] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 364.252913][ T918] kye 0003:0458:5013.001D: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.7-1/input0 [ 364.264880][ T918] usb 12-1: USB disconnect, device number 4 [ 364.275303][T16084] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4309'. [ 364.278818][T16084] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4309'. [ 364.294561][T16081] fido_id[16081]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb12/12-1/report_descriptor': No such file or directory [ 364.312978][T16086] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4311'. [ 364.315823][T16086] netlink: 'syz.4.4311': attribute type 2 has an invalid length. [ 364.726069][ T5101] Bluetooth: hci0: command tx timeout [ 364.757458][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 364.937528][ T24] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 364.940288][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.944374][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.948862][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.953788][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.957334][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.961262][ T24] usb 5-1: config 0 descriptor?? [ 364.979287][T16115] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4324'. [ 364.984679][T16115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.378222][ T24] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xd [ 365.383935][ T24] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 365.638767][ T24] usb 5-1: USB disconnect, device number 26 [ 365.751688][ T5101] block nbd4: Receive control failed (result -32) [ 365.762579][T16121] block nbd4: shutting down sockets [ 366.866181][ T918] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 366.927081][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4357'. [ 366.932354][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4357'. [ 367.016048][ T918] usb 11-1: Using ep0 maxpacket: 8 [ 367.019660][ T918] usb 11-1: config index 0 descriptor too short (expected 5924, got 36) [ 367.024608][ T918] usb 11-1: config 250 has an invalid interface number: 228 but max is -1 [ 367.029783][ T918] usb 11-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 367.037025][ T918] usb 11-1: config 250 has no interface number 0 [ 367.040459][ T918] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 367.050123][ T918] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 367.059338][ T918] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 367.065646][ T918] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 367.072694][ T918] usb 11-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 367.083302][ T918] usb 11-1: config 250 interface 228 has no altsetting 0 [ 367.087097][ T918] usb 11-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 367.090259][ T918] usb 11-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 367.092968][ T918] usb 11-1: Product: syz [ 367.094429][ T918] usb 11-1: SerialNumber: syz [ 367.101010][ T918] hub 11-1:250.228: bad descriptor, ignoring hub [ 367.104579][ T918] hub 11-1:250.228: probe with driver hub failed with error -5 [ 367.270736][T16258] loop5: detected capacity change from 0 to 8 [ 367.273461][T16258] buffer_io_error: 12 callbacks suppressed [ 367.273474][T16258] Buffer I/O error on dev loop5, logical block 0, async page read [ 367.286827][T16258] Buffer I/O error on dev loop5, logical block 0, async page read [ 367.290013][T16258] Buffer I/O error on dev loop5, logical block 0, async page read [ 367.293128][T16258] Buffer I/O error on dev loop5, logical block 0, async page read [ 367.297211][T16258] Buffer I/O error on dev loop5, logical block 0, async page read [ 367.304343][T16258] Buffer I/O error on dev loop5, logical block 0, async page read [ 367.306879][ T918] usblp 11-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 367.309902][T16258] Buffer I/O error on dev loop5, logical block 0, async page read [ 367.314341][T16258] Buffer I/O error on dev loop5, logical block 0, async page read [ 367.319809][T16261] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 367.323275][T16258] Dev loop5: unable to read RDB block 8 [ 367.325485][T16258] loop5: unable to read partition table [ 367.328742][T16258] loop5: partition table beyond EOD, truncated [ 367.331342][T16258] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 367.349342][ T5150] Buffer I/O error on dev loop5, logical block 0, async page read [ 367.353267][ T5150] ldm_validate_partition_table(): Disk read failed. [ 367.356542][ T5150] Dev loop5: unable to read RDB block 0 [ 367.359055][ T5150] loop5: unable to read partition table [ 367.361162][ T5150] loop5: partition table beyond EOD, truncated [ 367.656085][ T918] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 367.817756][ T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.822174][ T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.826375][ T918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.831595][ T918] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.835240][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.842762][ T918] usb 5-1: config 0 descriptor?? [ 367.951720][ T39] usb 11-1: USB disconnect, device number 9 [ 367.958140][ T39] usblp0: removed [ 368.096146][ T39] usb 11-1: new full-speed USB device number 10 using dummy_hcd [ 368.247411][ T39] usb 11-1: config 4 has an invalid interface number: 56 but max is 0 [ 368.250131][ T39] usb 11-1: config 4 has no interface number 0 [ 368.252138][ T39] usb 11-1: config 4 interface 56 has no altsetting 0 [ 368.256247][ T39] usb 11-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice=25.aa [ 368.259346][ T39] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.262494][ T39] usb 11-1: Product: syz [ 368.264186][ T39] usb 11-1: Manufacturer: syz [ 368.264978][ T918] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 368.266608][ T39] usb 11-1: SerialNumber: syz [ 368.484526][ T39] usb-storage 11-1:4.56: USB Mass Storage device detected [ 368.490588][ T39] usb-storage 11-1:4.56: Quirks match for vid 152d pid 0539: 4000000 [ 368.553358][ T39] usb 11-1: USB disconnect, device number 10 [ 368.651728][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4380'. [ 369.559830][ T5889] usb 5-1: USB disconnect, device number 27 [ 369.817415][T16344] netlink: 'syz.4.4398': attribute type 1 has an invalid length. [ 369.820005][T16344] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4398'. [ 369.823270][T16344] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4398'. [ 369.826937][T16344] netlink: 'syz.4.4398': attribute type 1 has an invalid length. [ 369.829492][T16344] netlink: 634 bytes leftover after parsing attributes in process `syz.4.4398'. [ 371.262760][T16417] ubi31: attaching mtd0 [ 371.264674][T16417] ubi31 error: ubi_attach_mtd_dev: bad VID header (142606336) or data offsets (142606400) [ 371.272142][T16419] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4431'. [ 371.688235][ T62] Bluetooth: hci0: command 0x1407 tx timeout [ 371.692244][ T5101] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 372.147863][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4452'. [ 372.154462][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4452'. [ 372.161290][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4452'. [ 372.191195][T16468] syzkaller1: entered promiscuous mode [ 372.193014][T16468] syzkaller1: entered allmulticast mode [ 372.526089][ T918] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 372.678868][ T918] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 372.682469][ T918] usb 5-1: config 0 has no interface number 0 [ 372.685131][ T918] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 372.690068][ T918] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 372.693597][ T918] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 372.698130][ T918] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 372.701749][ T918] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 372.704446][ T918] usb 5-1: Product: syz [ 372.705859][ T918] usb 5-1: SerialNumber: syz [ 372.709074][ T918] usb 5-1: config 0 descriptor?? [ 372.714874][ T918] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 372.718859][ T918] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input61 [ 372.876096][ T2323] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 372.918643][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 373.036326][ T2323] usb 12-1: Using ep0 maxpacket: 8 [ 373.039824][ T2323] usb 12-1: config index 0 descriptor too short (expected 5924, got 36) [ 373.042818][ T2323] usb 12-1: config 250 has an invalid interface number: 228 but max is -1 [ 373.045411][ T2323] usb 12-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 373.048562][ T2323] usb 12-1: config 250 has no interface number 0 [ 373.050780][ T2323] usb 12-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 373.054423][ T2323] usb 12-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 373.057915][ T2323] usb 12-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 373.061320][ T2323] usb 12-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 373.064619][ T2323] usb 12-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 373.069471][ T2323] usb 12-1: config 250 interface 228 has no altsetting 0 [ 373.073240][ T2323] usb 12-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 373.076231][ T2323] usb 12-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 373.078952][ T2323] usb 12-1: Product: syz [ 373.080334][ T2323] usb 12-1: SerialNumber: syz [ 373.085250][ T2323] hub 12-1:250.228: bad descriptor, ignoring hub [ 373.087394][ T2323] hub 12-1:250.228: probe with driver hub failed with error -5 [ 373.178494][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 373.178774][ T5889] usb 5-1: USB disconnect, device number 28 [ 373.181171][ C3] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 373.188534][ T5889] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 373.294657][ T2323] usblp 12-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 373.819319][T16509] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 374.218139][ T39] usb 12-1: USB disconnect, device number 5 [ 374.224610][ T39] usblp0: removed [ 374.367172][ T39] usb 12-1: new full-speed USB device number 6 using dummy_hcd [ 374.527727][ T39] usb 12-1: config 4 has an invalid interface number: 56 but max is 0 [ 374.531167][ T39] usb 12-1: config 4 has no interface number 0 [ 374.533817][ T39] usb 12-1: config 4 interface 56 has no altsetting 0 [ 374.538261][ T39] usb 12-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice=25.aa [ 374.542001][ T39] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.545314][ T39] usb 12-1: Product: syz [ 374.546838][ T39] usb 12-1: Manufacturer: syz [ 374.548715][ T39] usb 12-1: SerialNumber: syz [ 374.697675][T16526] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 374.761476][ T39] usb-storage 12-1:4.56: USB Mass Storage device detected [ 374.769185][ T39] usb-storage 12-1:4.56: Quirks match for vid 152d pid 0539: 4000000 [ 374.839849][ T39] usb 12-1: USB disconnect, device number 6 [ 374.996139][ T918] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 375.146068][ T918] usb 5-1: Using ep0 maxpacket: 8 [ 375.149720][ T918] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.154011][ T918] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.157142][ T918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 375.159238][ T918] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 375.162079][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.166614][ T918] usb 5-1: config 0 descriptor?? [ 375.447569][T16551] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4487'. [ 375.546028][ T2323] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 375.600155][ T918] hid_parser_main: 5 callbacks suppressed [ 375.600174][ T918] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 375.605729][ T918] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 375.609569][ T918] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 375.612377][ T918] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 375.615064][ T918] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 375.619613][ T918] mcp2221 0003:04D8:00DD.0020: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 375.731285][ T2323] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.736882][ T2323] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.744365][ T2323] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 375.753602][ T2323] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.761177][ T2323] usb 11-1: config 0 descriptor?? [ 375.783545][ T5888] usb 5-1: USB disconnect, device number 29 [ 375.971337][T16575] syz.7.4498 (16575): drop_caches: 2 [ 376.185793][ T2323] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 376.191804][ T2323] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0926:3333.0021/input/input62 [ 376.323632][ T2323] keytouch 0003:0926:3333.0021: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 376.385115][ T5844] usb 11-1: USB disconnect, device number 11 [ 376.408535][T16602] fido_id[16602]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb11/11-1/report_descriptor': No such file or directory [ 377.636675][ T39] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 377.676098][ T5844] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 377.807625][ T39] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 377.810940][ T39] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 377.814750][ T39] usb 5-1: config 0 interface 0 has no altsetting 0 [ 377.820204][ T39] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 377.823899][ T39] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 377.827045][ T39] usb 5-1: Product: syz [ 377.828644][ T39] usb 5-1: Manufacturer: syz [ 377.830452][ T39] usb 5-1: SerialNumber: syz [ 377.837004][ T39] usb 5-1: config 0 descriptor?? [ 377.841985][ T39] hub 5-1:0.0: bad descriptor, ignoring hub [ 377.844828][ T39] hub 5-1:0.0: probe with driver hub failed with error -5 [ 377.846536][ T5844] usb 11-1: Using ep0 maxpacket: 8 [ 377.850312][ T39] usb 5-1: selecting invalid altsetting 0 [ 377.850702][ T5844] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.856734][ T5844] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.860671][ T5844] usb 11-1: config 0 interface 0 has no altsetting 0 [ 377.862838][ T5844] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 377.865698][ T5844] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.870753][ T5844] usb 11-1: config 0 descriptor?? [ 378.287144][ T5844] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 378.289587][ T5844] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 378.291984][ T5844] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 378.294349][ T5844] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 378.297144][ T5844] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 378.300993][ T5844] mcp2221 0003:04D8:00DD.0022: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 378.466106][T16644] usb 5-1: reset high-speed USB device number 30 using dummy_hcd [ 378.488515][ T5844] usb 11-1: USB disconnect, device number 12 [ 378.596297][ T5831] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 378.777471][ T5831] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 378.780311][ T5831] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 378.783533][ T5831] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 378.786667][ T5831] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 378.790666][ T5831] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 378.795851][ T5831] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 378.799074][ T5831] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 378.801739][ T5831] usb 9-1: Product: syz [ 378.803206][ T5831] usb 9-1: Manufacturer: syz [ 378.808059][ T5831] cdc_wdm 9-1:1.0: skipping garbage [ 378.809835][ T5831] cdc_wdm 9-1:1.0: skipping garbage [ 378.816547][ T5831] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 378.819009][ T5831] cdc_wdm 9-1:1.0: Unknown control protocol [ 378.838983][T16644] usb 5-1: failed to restore interface 0 altsetting 251 (error=-71) [ 378.842955][ T918] usb 5-1: USB disconnect, device number 30 [ 378.844545][T16668] sock: sock_set_timeout: `syz.7.4537' (pid 16668) tries to set negative timeout [ 379.032118][T16677] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.489228][ T39] usb 9-1: USB disconnect, device number 29 [ 379.578636][T16689] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.4544'. [ 379.617678][T16693] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4546'. [ 379.853022][T16709] input: syz1 as /devices/virtual/input/input63 [ 379.950511][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4558'. [ 380.145441][T16722] syz.4.4560 (16722): drop_caches: 2 [ 380.166729][T16731] netlink: 'syz.0.4564': attribute type 21 has an invalid length. [ 380.171580][T16731] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4564'. [ 380.236150][ T34] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 380.376499][T16743] loop3: detected capacity change from 0 to 7 [ 380.390240][T16743] Dev loop3: unable to read RDB block 7 [ 380.393392][T16743] loop3: AHDI p3 p4 [ 380.394695][T16743] loop3: partition table partially beyond EOD, truncated [ 380.399184][T16743] loop3: p3 start 1702000233 is beyond EOD, truncated [ 380.400476][ T34] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 380.407216][ T34] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 380.410840][ T34] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 380.414508][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.425620][T16719] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 380.437718][ T34] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.466188][ T5831] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 380.640347][ T34] usb 11-1: USB disconnect, device number 13 [ 380.642485][ T5831] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 380.646973][ T5831] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 380.658363][ T5831] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 380.666479][ T5831] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 380.675330][ T5831] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 380.690312][ T5831] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 380.697397][ T5831] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 380.705334][ T5831] usb 12-1: Product: syz [ 380.707135][ T5831] usb 12-1: Manufacturer: syz [ 380.719247][ T5831] cdc_wdm 12-1:1.0: skipping garbage [ 380.725366][ T5831] cdc_wdm 12-1:1.0: skipping garbage [ 380.735180][ T5831] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 380.737304][ T5831] cdc_wdm 12-1:1.0: Unknown control protocol [ 380.972511][T16785] 9p: Unknown uid 00000000004294967295 [ 381.346040][ T5888] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 381.386120][ T918] usb 12-1: USB disconnect, device number 7 [ 381.506047][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 381.509328][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.512815][ T5888] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 381.515694][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.519742][ T5888] usb 5-1: config 0 descriptor?? [ 381.651234][T16799] Invalid argument reading file caps for ./file0 [ 381.738714][ T5888] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 381.925346][T16815] loop9: detected capacity change from 0 to 7 [ 381.934557][ C0] blk_print_req_error: 11 callbacks suppressed [ 381.934569][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 381.942340][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.945285][ C2] buffer_io_error: 14 callbacks suppressed [ 381.945295][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 381.951800][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.955605][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 381.959137][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.962087][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 381.964822][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.968599][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 381.972311][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.976152][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 381.979893][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.983782][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 381.987147][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.990101][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 381.993015][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.995986][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 381.998645][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.001592][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 382.004826][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 382.011656][T16815] ldm_validate_partition_table(): Disk read failed. [ 382.017006][T16815] Dev loop9: unable to read RDB block 0 [ 382.020329][T16815] loop9: unable to read partition table [ 382.022984][T16815] loop9: partition table beyond EOD, truncated [ 382.025865][T16815] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 382.194672][ T2323] usb 5-1: USB disconnect, device number 31 [ 382.767827][T16854] erspan0: entered promiscuous mode [ 382.771954][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4616'. [ 383.178782][ T39] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 383.201466][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.338106][ T39] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 383.340865][ T39] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 383.344061][ T39] usb 11-1: config 0 interface 0 has no altsetting 0 [ 383.348232][ T39] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 383.351417][ T39] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 383.354132][ T39] usb 11-1: Product: syz [ 383.355515][ T39] usb 11-1: Manufacturer: syz [ 383.358711][ T39] usb 11-1: SerialNumber: syz [ 383.362103][ T39] usb 11-1: config 0 descriptor?? [ 383.372895][ T39] hub 11-1:0.0: bad descriptor, ignoring hub [ 383.374920][ T39] hub 11-1:0.0: probe with driver hub failed with error -5 [ 383.380679][ T39] usb 11-1: selecting invalid altsetting 0 [ 383.986084][ T5888] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 383.986091][T16861] usb 11-1: reset high-speed USB device number 14 using dummy_hcd [ 384.157371][ T5888] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 384.162449][ T5888] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 384.167332][ T5888] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 384.170180][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.174440][T16898] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 384.178730][ T5888] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 384.262510][T16932] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 384.363526][T16861] usb 11-1: failed to restore interface 0 altsetting 251 (error=-71) [ 384.368125][ T2323] usb 11-1: USB disconnect, device number 14 [ 384.387481][ T5888] usb 9-1: USB disconnect, device number 30 [ 385.849837][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4673'. [ 385.906061][ T5815] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 386.067942][ T5815] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.071192][ T5815] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.076181][ T5815] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 386.080298][ T5815] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.298552][ T5815] usb 9-1: usb_control_msg returned -32 [ 386.300458][ T5815] usbtmc 9-1:16.0: can't read capabilities [ 386.326276][ T5831] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 386.396635][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 386.399486][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 386.401882][ C1] bridge0: port 3(syz_tun) entered learning state [ 386.478101][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.482433][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.486317][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 386.491388][ T5831] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 386.494952][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.501698][ T5831] usb 5-1: config 0 descriptor?? [ 386.862972][ T918] usb 9-1: USB disconnect, device number 31 [ 386.878723][T17011] netlink: 27 bytes leftover after parsing attributes in process `syz.6.4686'. [ 386.918740][ T5831] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 387.208879][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4693'. [ 387.697701][T17068] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4710'. [ 387.722687][T17066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.725577][T17066] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.731479][T17066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.772388][T17066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.780602][T17066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 387.783950][T17066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.791771][T17066] veth1_vlan: left promiscuous mode [ 387.794640][T17066] veth0_vlan: left promiscuous mode [ 387.797881][T17066] veth0_vlan: entered promiscuous mode [ 387.801849][T17066] veth1_vlan: entered promiscuous mode [ 387.806715][T17066] veth1_macvtap: left promiscuous mode [ 387.809928][T17066] veth0_macvtap: left promiscuous mode [ 387.812390][T17066] veth0_macvtap: entered promiscuous mode [ 387.815631][T17066] veth1_macvtap: entered promiscuous mode [ 387.821814][T17066] batman_adv: batadv0: Interface activated: gretap1 [ 387.824198][T17066] hsr1: Slave B (veth0_to_bridge) is not up; please bring it up to get a fully working HSR network [ 387.829786][T17066] 8021q: adding VLAN 0 to HW filter on device eth0 [ 387.832886][T17066] 8021q: adding VLAN 0 to HW filter on device eth1 [ 387.835732][T17066] 8021q: adding VLAN 0 to HW filter on device eth2 [ 387.839086][T17066] 8021q: adding VLAN 0 to HW filter on device eth3 [ 387.846127][T17066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.851748][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.853973][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.857581][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.859778][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.874043][ T60] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.877111][ T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.879861][ T60] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.882455][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.920834][ T60] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.924212][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.927890][ T60] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.930541][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.176064][ T10] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 388.356087][ T10] usb 12-1: Using ep0 maxpacket: 8 [ 388.359504][ T10] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 388.362193][ T10] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.366239][ T10] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.370149][ T10] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.373582][ T10] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.379173][ T10] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 388.382497][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.590480][ T10] usb 12-1: usb_control_msg returned -32 [ 388.592345][ T10] usbtmc 12-1:16.0: can't read capabilities [ 388.906341][ T70] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 388.916679][ T918] usb 5-1: USB disconnect, device number 32 [ 389.067317][ T70] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 389.070016][ T70] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 389.073210][ T70] usb 9-1: config 0 interface 0 has no altsetting 0 [ 389.078058][ T70] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 389.081964][ T70] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 389.085447][ T70] usb 9-1: Product: syz [ 389.088276][ T70] usb 9-1: Manufacturer: syz [ 389.089916][ T70] usb 9-1: SerialNumber: syz [ 389.093167][ T70] usb 9-1: config 0 descriptor?? [ 389.097624][ T70] hub 9-1:0.0: bad descriptor, ignoring hub [ 389.099964][ T70] hub 9-1:0.0: probe with driver hub failed with error -5 [ 389.104376][ T70] usb 9-1: selecting invalid altsetting 0 [ 389.114014][T17117] pim6reg1: entered promiscuous mode [ 389.118775][T17117] pim6reg1: entered allmulticast mode [ 389.191108][T17121] input: syz0 as /devices/virtual/input/input64 [ 389.419355][T17135] input: syz0 as /devices/virtual/input/input65 [ 389.525513][T17142] netlink: 'syz.6.4743': attribute type 12 has an invalid length. [ 389.529295][T17142] netlink: 'syz.6.4743': attribute type 29 has an invalid length. [ 389.531818][T17142] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4743'. [ 389.534742][T17142] netlink: 'syz.6.4743': attribute type 1 has an invalid length. [ 389.537212][T17142] netlink: 'syz.6.4743': attribute type 2 has an invalid length. [ 389.539692][T17142] netlink: 15 bytes leftover after parsing attributes in process `syz.6.4743'. [ 389.675670][T17152] Invalid argument reading file caps for ./file0 [ 389.743008][T17158] dummy0: entered promiscuous mode [ 389.745792][T17158] macvlan2: entered promiscuous mode [ 389.750489][T17158] dummy0: left promiscuous mode [ 390.016383][T17097] usb 9-1: reset high-speed USB device number 32 using dummy_hcd [ 390.126183][ T34] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 390.288027][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.292110][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.295248][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.299356][ T34] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.302238][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.306074][ T34] usb 5-1: config 0 descriptor?? [ 390.374487][T17097] usb 9-1: failed to restore interface 0 altsetting 251 (error=-71) [ 390.379425][ T70] usb 9-1: USB disconnect, device number 32 [ 390.723517][ T34] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 390.927672][ T918] usb 12-1: USB disconnect, device number 8 [ 390.981384][ T24] usb 5-1: USB disconnect, device number 33 [ 391.551536][T17186] loop8: detected capacity change from 0 to 8 [ 391.555446][T17186] Dev loop8: unable to read RDB block 8 [ 391.558433][T17186] loop8: unable to read partition table [ 391.561163][T17186] loop8: partition table beyond EOD, truncated [ 391.563889][T17186] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 391.596090][ T5888] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 391.596253][ T5101] Bluetooth: hci2: command 0x0c1a tx timeout [ 391.598030][ T5888] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 391.680459][ T5888] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 391.684253][ T5888] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 391.686942][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.690835][ T5888] Tainted: [L]=SOFTLOCKUP [ 391.692421][ T5888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 391.695779][ T5888] Workqueue: events rfkill_op_handler [ 391.697576][ T5888] RIP: 0010:klist_put+0x4d/0x1d0 [ 391.699203][ T5888] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 3c 09 0d [ 391.704901][ T5888] RSP: 0018:ffffc90004ec7860 EFLAGS: 00010202 [ 391.706811][ T5888] RAX: dffffc0000000000 RBX: ffff888000d76060 RCX: 0000000000000000 [ 391.709303][ T5888] RDX: 000000000000000b RSI: ffffffff8b7d52d5 RDI: 0000000000000058 [ 391.711745][ T5888] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2175610 [ 391.714178][ T5888] R10: ffffffff90bab083 R11: 000000000000754b R12: 0000000000000000 [ 391.716696][ T5888] R13: 0000000000000001 R14: ffffffff90bab040 R15: dffffc0000000000 [ 391.719195][ T5888] FS: 0000000000000000(0000) GS:ffff88809717d000(0000) knlGS:0000000000000000 [ 391.722014][ T5888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.724065][ T5888] CR2: 000055e5e2ef1750 CR3: 000000006e92c000 CR4: 0000000000352ef0 [ 391.726658][ T5888] Call Trace: [ 391.727688][ T5888] [ 391.728648][ T5888] klist_remove+0x14c/0x2e0 [ 391.730111][ T5888] ? __pfx_klist_remove+0x10/0x10 [ 391.731694][ T5888] ? kobject_put+0xb9/0x640 [ 391.733140][ T5888] device_move+0x12d/0x1140 [ 391.734597][ T5888] hci_conn_del_sysfs+0x86/0x1a0 [ 391.736179][ T5888] hci_conn_del+0x506/0x1180 [ 391.737853][ T5888] hci_conn_hash_flush+0x186/0x280 [ 391.739484][ T5888] hci_dev_close_sync+0x5a7/0x1240 [ 391.741127][ T5888] ? __pfx_bt_err+0x10/0x10 [ 391.742594][ T5888] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 391.744374][ T5888] ? do_raw_spin_lock+0x128/0x260 [ 391.745962][ T5888] hci_dev_do_close+0x2e/0xb0 [ 391.747465][ T5888] hci_rfkill_set_block+0x225/0x3a0 [ 391.749128][ T5888] ? lockdep_hardirqs_on+0x78/0x100 [ 391.750813][ T5888] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 391.752624][ T5888] rfkill_set_block+0x205/0x510 [ 391.754177][ T5888] rfkill_epo+0x93/0x1e0 [ 391.755532][ T5888] rfkill_op_handler+0x230/0x260 [ 391.757119][ T5888] process_one_work+0xa0e/0x1980 [ 391.758697][ T5888] ? __pfx_process_one_work+0x10/0x10 [ 391.760408][ T5888] ? __pfx_rfkill_op_handler+0x10/0x10 [ 391.762140][ T5888] worker_thread+0x5ef/0xe50 [ 391.763611][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 391.765240][ T5888] ? kthread+0x13a/0x450 [ 391.766569][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 391.768196][ T5888] kthread+0x370/0x450 [ 391.769500][ T5888] ? __pfx_kthread+0x10/0x10 [ 391.770973][ T5888] ret_from_fork+0x72b/0xd50 [ 391.772468][ T5888] ? __pfx_ret_from_fork+0x10/0x10 [ 391.774092][ T5888] ? __switch_to+0x800/0x1100 [ 391.775595][ T5888] ? __pfx_kthread+0x10/0x10 [ 391.777043][ T5888] ret_from_fork_asm+0x1a/0x30 [ 391.778532][ T5888] [ 391.779507][ T5888] Modules linked in: [ 391.780924][ T5888] ---[ end trace 0000000000000000 ]--- [ 391.782701][ T5888] RIP: 0010:klist_put+0x4d/0x1d0 [ 391.784339][ T5888] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 3c 09 0d [ 391.790764][ T5888] RSP: 0018:ffffc90004ec7860 EFLAGS: 00010202 [ 391.792714][ T5888] RAX: dffffc0000000000 RBX: ffff888000d76060 RCX: 0000000000000000 [ 391.795392][ T5888] RDX: 000000000000000b RSI: ffffffff8b7d52d5 RDI: 0000000000000058 [ 391.798570][ T5888] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2175610 [ 391.801435][ T5888] R10: ffffffff90bab083 R11: 000000000000754b R12: 0000000000000000 [ 391.803871][ T5888] R13: 0000000000000001 R14: ffffffff90bab040 R15: dffffc0000000000 [ 391.807317][ T5888] FS: 0000000000000000(0000) GS:ffff88809717d000(0000) knlGS:0000000000000000 [ 391.810183][ T5888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.812270][ T5888] CR2: 000055e5e2ef1750 CR3: 000000006e92c000 CR4: 0000000000352ef0 [ 391.814746][ T5888] Kernel panic - not syncing: Fatal exception [ 391.817331][ T5888] Kernel Offset: disabled [ 391.818692][ T5888] Rebooting in 86400 seconds..