last executing test programs: 2m56.297963405s ago: executing program 2 (id=122): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_gettime(r0, &(0x7f00000191c0)) 2m56.297572209s ago: executing program 2 (id=123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x7}]}) 2m56.099123794s ago: executing program 2 (id=124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000680)={0x1, 0x0, [{0x40000070, 0x0, 0x1}]}) 2m55.987842676s ago: executing program 2 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 2m55.898653169s ago: executing program 2 (id=126): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)={r2}) 2m55.687839233s ago: executing program 2 (id=127): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) 2m55.666208377s ago: executing program 32 (id=127): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) 2m53.582264921s ago: executing program 1 (id=176): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb77b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 2m53.531815603s ago: executing program 1 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x80, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './bus'}}]}) 2m53.499604376s ago: executing program 1 (id=179): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000540)={{r0, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0}) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 2m53.433653114s ago: executing program 1 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 2m53.341058588s ago: executing program 1 (id=182): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m53.119238205s ago: executing program 1 (id=185): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r3, 0x0, 0x80000003, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) 2m53.078119743s ago: executing program 33 (id=185): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r3, 0x0, 0x80000003, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) 3.056545238s ago: executing program 3 (id=3015): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.506691811s ago: executing program 4 (id=3027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x7, 0x1a, 0xc, '\x00', 0xfb}, {0x0, 0x84, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x1, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x1, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x13, 0x26}, {0xcf, 0x3, 0xb, '\x00', 0x5}, {0xf, 0xee, 0xa, '\x00', 0xf}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x7d}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0x9, '\x00', 0x8}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 2.385565382s ago: executing program 4 (id=3030): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xa0c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x6, 0x563c4354, 0x0, 0x1, 0x4, 0x7fffffffff800000, 0x3, 0xa, 0x7f, 0x80000003, 0x80, 0x4, 0x100004, 0x1, 0x200000000000000], 0xeeee0000, 0x300}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.293087691s ago: executing program 4 (id=3032): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0xa, 0x8, 0xd, 0x0, 0x1000, 0xe, 0x7, 0xf3, 0x9, 0x9, 0x6, 0x0, 0x0, 0x8, 0x10, 0xa, 0x9, 0x7f, 0x9f, '\x00', 0x6b, 0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000002c0)=@arm64) 2.145212273s ago: executing program 4 (id=3033): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2.144833124s ago: executing program 4 (id=3034): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.096166246s ago: executing program 4 (id=3035): r0 = socket$inet6(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x8a881, 0xbb) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='B', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.02530958s ago: executing program 3 (id=3036): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0x6, 0xffffffff, 0x5, 0xffffff89, 0x1000000, 0x6, 0x3}, {0x1, 0x4000004, 0x0, 0x8, 0x4aed, 0x1, 0x6}, {0x0, 0x3, 0x1, 0x80000000, 0x7ffffdff, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x6, 0x8, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2ab, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0xc0000000, 0x100, 0x4, 0x7, 0x400003, 0x40000005, 0xe0000}, {0x80000000, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.025083389s ago: executing program 3 (id=3037): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x200) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2}) 1.975898849s ago: executing program 3 (id=3038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4a24, @rand_addr=0x64010101}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 1.904878372s ago: executing program 3 (id=3039): r0 = getpgid(0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) landlock_restrict_self(r1, 0x0) r2 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) 1.84634912s ago: executing program 3 (id=3040): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 386.081938ms ago: executing program 5 (id=3054): ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0x5f, [0x5, 0x0, 0x1, 0x1, 0xa, 0x7, 0x9, 0xff6, 0x8, 0x7, 0x6, 0x1, 0x0, 0x7, 0xf7, 0x2342, 0x2, 0x5, 0x1005, 0x7ff, 0x48, 0x23fd, 0x269b, 0x6, 0x4, 0x5, 0x9, 0x4b7, 0x1, 0xfff6, 0xff, 0x0, 0x5, 0x2, 0x224, 0x4, 0x3399, 0x80, 0x0, 0x6, 0xfffa, 0x4, 0x7ffb, 0x7, 0xc, 0x8000, 0x9, 0x1a2f], 0x7}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xce, 0xfffffffc, 0x4}, 0x9c) 304.238614ms ago: executing program 0 (id=3055): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20"], 0x290}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) 303.885614ms ago: executing program 5 (id=3056): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x1) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x3) 254.81268ms ago: executing program 0 (id=3057): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7879ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb", 0x4d}], 0x3}], 0x1, 0x20040801) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000019580)=""/88, 0x58}], 0x2}, 0x0) 254.290739ms ago: executing program 5 (id=3058): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x2004}) close(0x3) 179.343855ms ago: executing program 0 (id=3059): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r1, 0x402, 0x80000023) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000008) close_range(r0, r1, 0x0) 179.034099ms ago: executing program 0 (id=3060): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone3(&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 173.82967ms ago: executing program 5 (id=3061): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r0, r2, 0x2f, 0x18, 0x4, @void, @value=r0}, 0x20) 80.40484ms ago: executing program 5 (id=3062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 76.333555ms ago: executing program 0 (id=3063): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES64=r1], 0x24}}, 0x0) 1.587284ms ago: executing program 5 (id=3064): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 0s ago: executing program 0 (id=3065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x7122c}, [@IFLA_MTU={0x8, 0x4, 0xfa1}]}, 0x28}}, 0x4004090) kernel console output (not intermixed with test programs): ummy_hcd.0-1/input0 [ 124.645650][ T10] usb 5-1: USB disconnect, device number 9 [ 125.353198][ T9060] syzkaller1: entered promiscuous mode [ 125.356198][ T9060] syzkaller1: entered allmulticast mode [ 125.903358][ T5847] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 126.055789][ T5847] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.060453][ T5847] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.064662][ T5847] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.069390][ T5847] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.072885][ T5847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.078586][ T5847] usb 8-1: config 0 descriptor?? [ 126.412536][ T9087] Bluetooth: MGMT ver 1.23 [ 126.495321][ T5847] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 126.503007][ T5847] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 126.755093][ T10] usb 8-1: USB disconnect, device number 11 [ 127.307564][ T9116] netlink: 'syz.3.1216': attribute type 4 has an invalid length. [ 127.418105][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1220'. [ 127.623472][ T8239] Bluetooth: hci4: command 0xfc11 tx timeout [ 127.628947][ T8244] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 128.026925][ T9143] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1229'. [ 128.060877][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1230'. [ 128.178092][ T9149] loop2: detected capacity change from 0 to 1 [ 128.185447][ T9149] Dev loop2: unable to read RDB block 1 [ 128.188003][ T9149] loop2: unable to read partition table [ 128.190590][ T9149] loop2: partition table beyond EOD, truncated [ 128.195535][ T9149] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 128.433140][ T9161] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1238'. [ 128.512286][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 128.551983][ T9169] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1241'. [ 128.661472][ T9177] loop3: detected capacity change from 0 to 7 [ 128.672732][ T9177] Dev loop3: unable to read RDB block 7 [ 128.676308][ T9177] loop3: AHDI p3 p4 [ 128.677668][ T9177] loop3: partition table partially beyond EOD, truncated [ 128.680012][ T9177] loop3: p3 start 1702000233 is beyond EOD, truncated [ 128.887222][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 129.203235][ T40] audit: type=1800 audit(1778881495.112:509): pid=9228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1267" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 129.228358][ T9226] serio: Serial port ptm0 [ 129.233238][ T9230] input: syz1 as /devices/virtual/input/input24 [ 129.240979][ T9232] netlink: 'syz.0.1269': attribute type 1 has an invalid length. [ 129.364267][ T9245] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1274'. [ 129.608843][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1286'. [ 129.618872][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1286'. [ 130.142781][ T9294] overlay: Unknown parameter '/' [ 130.180657][ T9297] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 130.246893][ T9301] netlink: 'syz.0.1300': attribute type 3 has an invalid length. [ 130.597199][ T9343] Invalid ELF header magic: != ELF [ 130.963421][ T5889] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 131.126873][ T5889] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 131.129676][ T5889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.132482][ T5889] usb 8-1: Product: syz [ 131.135762][ T5889] usb 8-1: Manufacturer: syz [ 131.138120][ T5889] usb 8-1: SerialNumber: syz [ 131.144283][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.144849][ T5889] usb 8-1: config 0 descriptor?? [ 131.277317][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.355349][ T5847] usb 8-1: USB disconnect, device number 12 [ 131.368924][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.404367][ T9372] syz_tun: entered allmulticast mode [ 131.407291][ T9371] syz_tun: left allmulticast mode [ 131.441613][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.446314][ T5846] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.447989][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.453838][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.603461][ T5846] usb 5-1: Using ep0 maxpacket: 32 [ 131.610491][ T5846] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 131.617905][ T5846] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 131.621834][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 131.625460][ T5846] usb 5-1: Product: syz [ 131.627212][ T5846] usb 5-1: Manufacturer: syz [ 131.629090][ T5846] usb 5-1: SerialNumber: syz [ 131.634017][ T3263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.639897][ T5846] usb 5-1: config 0 descriptor?? [ 131.642229][ T9366] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.646071][ T5846] hub 5-1:0.0: bad descriptor, ignoring hub [ 131.647945][ T5846] hub 5-1:0.0: probe with driver hub failed with error -5 [ 132.188166][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.266392][ T9366] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 132.436878][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.447983][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.449308][ T9366] usb 5-1: device firmware changed [ 132.461629][ T5889] usb 5-1: USB disconnect, device number 10 [ 132.476613][ T9410] __nla_validate_parse: 2 callbacks suppressed [ 132.476625][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 132.613346][ T5889] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 132.783399][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 132.787287][ T5889] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 132.793403][ T5847] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 132.794409][ T5889] usb 5-1: string descriptor 0 read error: -22 [ 132.799366][ T5889] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 132.803604][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 132.810331][ T5889] usb 5-1: config 0 descriptor?? [ 132.813571][ T9383] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.816968][ T5889] hub 5-1:0.0: bad descriptor, ignoring hub [ 132.819011][ T5889] hub 5-1:0.0: probe with driver hub failed with error -5 [ 132.943390][ T5847] usb 10-1: Using ep0 maxpacket: 16 [ 132.946694][ T5847] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.950979][ T5847] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.956637][ T5847] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.960245][ T5847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.965714][ T5847] usb 10-1: config 0 descriptor?? [ 133.074730][ T9424] sctp: [Deprecated]: syz.3.1355 (pid 9424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.074730][ T9424] Use struct sctp_sack_info instead [ 133.082271][ T9424] sctp: [Deprecated]: syz.3.1355 (pid 9424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.082271][ T9424] Use struct sctp_sack_info instead [ 133.153750][ T1037] usb 5-1: USB disconnect, device number 11 [ 133.538874][ T5847] usbhid 10-1:0.0: can't add hid device: -71 [ 133.547547][ T5847] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 133.563888][ T5847] usb 10-1: USB disconnect, device number 8 [ 134.263461][ T5846] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 134.294097][ T9472] sit0: entered promiscuous mode [ 134.295892][ T9472] netlink: 'syz.4.1377': attribute type 1 has an invalid length. [ 134.298941][ T9472] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1377'. [ 134.313370][ T5847] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 134.445380][ T5846] usb 5-1: Using ep0 maxpacket: 8 [ 134.449199][ T5846] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.454129][ T5846] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.458335][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.461166][ T5846] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 134.461190][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.466092][ T5846] usb 5-1: config 0 descriptor?? [ 134.470050][ T5847] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 134.476565][ T5847] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 134.481217][ T5847] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.485871][ T5847] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 134.491160][ T5847] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.496508][ T5847] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 134.499443][ T5847] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 134.503727][ T5847] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.508273][ T5847] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 134.512582][ T5847] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.517899][ T5847] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 134.521010][ T5847] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 134.525762][ T5847] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.530143][ T9482] syzkaller1: entered promiscuous mode [ 134.530525][ T5847] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 134.532172][ T9482] syzkaller1: entered allmulticast mode [ 134.536738][ T5847] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.539898][ T5847] usb 10-1: string descriptor 0 read error: -22 [ 134.547243][ T5847] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 134.551039][ T5847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.564175][ T5847] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 134.820805][ T5889] usb 10-1: USB disconnect, device number 9 [ 134.890563][ T5846] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 134.894098][ T5846] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 134.897084][ T5846] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 134.899981][ T5846] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 134.902827][ T5846] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 134.906452][ T5846] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 135.087860][ T5818] usb 5-1: USB disconnect, device number 12 [ 135.113387][ T24] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 135.173521][ T5847] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 135.274840][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.278677][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.283414][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.286206][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.335030][ T5847] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.338571][ T5847] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.341626][ T5847] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.345777][ T5847] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.348678][ T5847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.352545][ T5847] usb 8-1: config 0 descriptor?? [ 135.528885][ T24] usb 9-1: usb_control_msg returned -32 [ 135.530703][ T24] usbtmc 9-1:16.0: can't read capabilities [ 135.703444][ T9503] Invalid logical block size (8) [ 135.775507][ T5847] plantronics 0003:047F:FFFF.000E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 135.881502][ T9512] usbtmc 9-1:16.0: INDICATOR_PULSE returned 0 [ 135.970761][ T5847] usb 8-1: USB disconnect, device number 13 [ 136.084208][ T5846] usb 9-1: USB disconnect, device number 7 [ 136.353634][ T50] net_ratelimit: 9 callbacks suppressed [ 136.353653][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.834284][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.906436][ T40] audit: type=1326 audit(1778881502.822:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.0.1410" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x0 [ 137.054239][ T9566] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 137.239688][ T40] audit: type=1326 audit(1778881503.152:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.4.1423" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03fcc code=0x0 [ 137.370718][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.384264][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.466250][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.471237][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.479987][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.583570][ T5826] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 137.733360][ T5826] usb 9-1: Using ep0 maxpacket: 8 [ 137.736795][ T5826] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 137.739737][ T5826] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.742828][ T5826] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.746068][ T5826] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.749638][ T5826] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.753797][ T5847] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 137.756933][ T5826] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.760771][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.875834][ T9598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1434'. [ 137.879685][ T9598] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 137.923323][ T5847] usb 8-1: Using ep0 maxpacket: 8 [ 137.926598][ T5847] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.929924][ T5847] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.933124][ T5847] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.936305][ T5847] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.940454][ T5847] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.943821][ T5847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.974735][ T5826] usb 9-1: usb_control_msg returned -32 [ 137.976489][ T5826] usbtmc 9-1:16.0: can't read capabilities [ 138.084604][ T9604] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.087231][ T9604] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.105495][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.107778][ T9604] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.116449][ T3263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.125156][ T3263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.154692][ T5847] usb 8-1: GET_CAPABILITIES returned 0 [ 138.156480][ T5847] usbtmc 8-1:16.0: can't read capabilities [ 138.176639][ T5847] usb 9-1: USB disconnect, device number 8 [ 138.363389][ T5847] usb 8-1: USB disconnect, device number 14 [ 138.425540][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.434200][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.535528][ T9621] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1445'. [ 138.785967][ T9633] gre0: entered promiscuous mode [ 138.787571][ T9633] gre0: entered allmulticast mode [ 138.847412][ T9636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.904890][ T5826] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 139.075522][ T5826] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 139.079865][ T5826] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.082870][ T5826] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 139.089150][ T5826] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 139.092103][ T5826] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.095249][ T5826] usb 10-1: Product: syz [ 139.096659][ T5826] usb 10-1: Manufacturer: syz [ 139.098274][ T5826] usb 10-1: SerialNumber: syz [ 139.101867][ T5826] usb 10-1: config 0 descriptor?? [ 139.163520][ T50] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 139.313348][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 139.313776][ T5826] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 139.316295][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.321132][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.324280][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.328396][ T50] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 139.331285][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.337743][ T50] usb 5-1: config 0 descriptor?? [ 139.517611][ T10] usb 10-1: USB disconnect, device number 10 [ 139.591020][ T5850] kernel read not supported for file /dsp (pid: 5850 comm: kworker/3:4) [ 139.750491][ T50] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 139.752933][ T50] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 139.755517][ T50] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 139.757980][ T50] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 139.760457][ T50] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 139.766971][ T50] HID 045e:07da: Invalid code 65791 type 1 [ 139.772639][ T50] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.000F/input/input26 [ 139.782161][ T50] microsoft 0003:045E:07DA.000F: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 139.955395][ T29] usb 5-1: USB disconnect, device number 13 [ 140.103417][ T8239] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.313541][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 140.463932][ T24] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 140.468593][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.471902][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.475502][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 140.479920][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.487771][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.492411][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 140.496651][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.500441][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.507394][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 140.513206][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.517261][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.521895][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 140.529099][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.534756][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.539310][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 140.548029][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.551804][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.556783][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 140.560650][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.566051][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.570565][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 140.575055][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.578947][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.582780][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 140.587083][ T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 140.590667][ T24] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 140.594561][ T24] usb 8-1: Product: syz [ 140.596215][ T24] usb 8-1: Manufacturer: syz [ 140.598211][ T24] usb 8-1: SerialNumber: syz [ 140.602577][ T24] usb 8-1: config 0 descriptor?? [ 140.608512][ T24] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 140.710281][ T9676] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 140.716927][ T9676] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 140.723189][ T9676] block nbd0: shutting down sockets [ 140.820140][ T9680] netlink: 'syz.0.1469': attribute type 30 has an invalid length. [ 140.821799][ T24] usb 8-1: USB disconnect, device number 15 [ 140.822759][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'. [ 140.829133][ T24] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 141.553658][ T5850] net_ratelimit: 6 callbacks suppressed [ 141.553677][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.783764][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.047878][ T9704] overlayfs: statfs failed on './file0' [ 142.183444][ T5103] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.273815][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1480'. [ 142.277652][ T9712] netlink: 'syz.5.1480': attribute type 20 has an invalid length. [ 142.281961][ T9712] netlink: 'syz.5.1480': attribute type 21 has an invalid length. [ 142.339705][ T9714] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1485'. [ 142.398750][ T9716] loop9: detected capacity change from 0 to 7 [ 142.404970][ C0] blk_print_req_error: 32 callbacks suppressed [ 142.404985][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.410487][ C0] buffer_io_error: 32 callbacks suppressed [ 142.410499][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.415466][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.418333][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.420965][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.423988][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.429985][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.433892][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.437584][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.441385][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.444912][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.448500][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.452571][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.456324][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.459662][ T9716] ldm_validate_partition_table(): Disk read failed. [ 142.462200][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.466111][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.469700][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.473613][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.477109][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.480975][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.484650][ T9716] Dev loop9: unable to read RDB block 0 [ 142.487841][ T9716] loop9: unable to read partition table [ 142.490523][ T9716] loop9: partition table beyond EOD, truncated [ 142.493255][ T9716] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 142.593592][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.653422][ T50] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 142.824648][ T50] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 142.827345][ T50] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 142.830428][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.834485][ T50] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 142.837472][ T50] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 142.840147][ T50] usb 5-1: Product: syz [ 142.841526][ T50] usb 5-1: Manufacturer: syz [ 142.843025][ T50] usb 5-1: SerialNumber: syz [ 142.846251][ T50] usb 5-1: config 0 descriptor?? [ 142.853000][ T50] hub 5-1:0.0: bad descriptor, ignoring hub [ 142.855438][ T50] hub 5-1:0.0: probe with driver hub failed with error -5 [ 142.859745][ T50] usb 5-1: selecting invalid altsetting 0 [ 142.873444][ T5826] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 143.033648][ T5826] usb 10-1: Using ep0 maxpacket: 32 [ 143.037731][ T5826] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 143.044765][ T5826] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 143.048562][ T5826] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 143.051845][ T5826] usb 10-1: Product: syz [ 143.053750][ T5826] usb 10-1: Manufacturer: syz [ 143.055699][ T5826] usb 10-1: SerialNumber: syz [ 143.060694][ T5826] usb 10-1: config 0 descriptor?? [ 143.064251][ T9725] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 143.068515][ T5826] hub 10-1:0.0: bad descriptor, ignoring hub [ 143.071662][ T5826] hub 10-1:0.0: probe with driver hub failed with error -5 [ 143.333409][ T50] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 143.456902][ T9718] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 143.497811][ T50] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 143.500951][ T50] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 143.504153][ T50] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.506873][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 143.510254][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 143.514857][ T50] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.518183][ T50] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.521424][ T50] usb 8-1: Product: syz [ 143.523167][ T50] usb 8-1: Manufacturer: syz [ 143.532128][ T50] cdc_wdm 8-1:1.0: skipping garbage [ 143.534572][ T50] cdc_wdm 8-1:1.0: skipping garbage [ 143.538319][ T50] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 143.540556][ T50] cdc_wdm 8-1:1.0: Unknown control protocol [ 143.633646][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.833483][ T5889] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 143.851057][ T9718] usb 5-1: failed to restore interface 0 altsetting 251 (error=-71) [ 143.856025][ T5846] usb 5-1: USB disconnect, device number 14 [ 143.874055][ T547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.878006][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.884026][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.983464][ T5889] usb 9-1: Using ep0 maxpacket: 16 [ 143.983510][ T9725] usb 10-1: reset high-speed USB device number 11 using dummy_hcd [ 143.986783][ T5889] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.991849][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.995421][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.998445][ T5889] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 144.001522][ T5889] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.006742][ T5889] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 144.009645][ T5889] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 144.012242][ T5889] usb 9-1: Manufacturer: syz [ 144.022938][ T5889] usb 9-1: config 0 descriptor?? [ 144.135085][ T9725] usb 10-1: device firmware changed [ 144.137430][ T3263] usb 10-1: USB disconnect, device number 11 [ 144.273494][ T5889] rc_core: IR keymap rc-hauppauge not found [ 144.273505][ T5103] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.273547][ T3263] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 144.275350][ T5889] Registered IR keymap rc-empty [ 144.281388][ T5889] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 144.303515][ T5889] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 144.324694][ T5889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 144.329717][ T5889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input27 [ 144.337250][ T5889] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 144.353661][ T5889] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 144.373457][ T5889] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 144.393449][ T5889] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 144.413597][ T5889] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 144.423793][ T3263] usb 10-1: Using ep0 maxpacket: 32 [ 144.427833][ T3263] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 144.433684][ T5889] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 144.435103][ T3263] usb 10-1: string descriptor 0 read error: -22 [ 144.439606][ T3263] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 144.443414][ T3263] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 144.449361][ T3263] usb 10-1: config 0 descriptor?? [ 144.452521][ T9729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 144.456747][ T5889] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 144.457096][ T3263] hub 10-1:0.0: bad descriptor, ignoring hub [ 144.462043][ T3263] hub 10-1:0.0: probe with driver hub failed with error -5 [ 144.473504][ T5889] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 144.493824][ T5889] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 144.513469][ T5889] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 144.535507][ T5889] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 144.539238][ T5889] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 144.546754][ T5889] usb 9-1: USB disconnect, device number 9 [ 144.773976][ T5826] usb 10-1: USB disconnect, device number 12 [ 144.833598][ T3263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.903654][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.397674][ T9781] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 145.783897][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.104372][ T843] usb 8-1: USB disconnect, device number 16 [ 146.147735][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.150296][ T9826] bridge0: port 2(bridge_slave_1) entered listening state [ 146.152795][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.155021][ T9826] bridge0: port 1(bridge_slave_0) entered listening state [ 146.177162][ T9826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.183480][ T78] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.187053][ T78] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.190726][ T78] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.195149][ T78] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.423699][ T5889] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 146.584445][ T5889] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 146.588762][ T5889] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.591959][ T5889] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.596145][ T5889] usb 10-1: config 0 interface 0 has no altsetting 0 [ 146.600877][ T5889] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.608501][ T5889] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.617548][ T5889] usb 10-1: config 0 interface 0 has no altsetting 0 [ 146.620566][ T5889] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.623669][ T5889] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.627445][ T5889] usb 10-1: config 0 interface 0 has no altsetting 0 [ 146.631079][ T5889] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.636718][ T5889] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.640286][ T5889] usb 10-1: config 0 interface 0 has no altsetting 0 [ 146.644508][ T5889] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.647778][ T5889] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.651902][ T5889] usb 10-1: config 0 interface 0 has no altsetting 0 [ 146.655365][ T5889] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.658319][ T5889] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.661729][ T5889] usb 10-1: config 0 interface 0 has no altsetting 0 [ 146.665106][ T5889] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.667997][ T5889] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.671450][ T5889] usb 10-1: config 0 interface 0 has no altsetting 0 [ 146.676019][ T5889] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.679177][ T5889] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.682870][ T5889] usb 10-1: config 0 interface 0 has no altsetting 0 [ 146.686832][ T5889] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 146.689826][ T5889] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 146.692469][ T5889] usb 10-1: Product: syz [ 146.694670][ T5889] usb 10-1: Manufacturer: syz [ 146.696478][ T5889] usb 10-1: SerialNumber: syz [ 146.699763][ T5889] usb 10-1: config 0 descriptor?? [ 146.715559][ T5889] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 146.933214][ T843] usb 10-1: USB disconnect, device number 13 [ 146.940288][ T843] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 146.985945][ T5850] net_ratelimit: 2 callbacks suppressed [ 146.985964][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.013474][ T50] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 147.058501][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1534'. [ 147.164811][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 147.168461][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 147.172066][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 147.178501][ T50] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 147.181407][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.184145][ T50] usb 9-1: Product: syz [ 147.185479][ T50] usb 9-1: Manufacturer: syz [ 147.186985][ T50] usb 9-1: SerialNumber: syz [ 147.190641][ T50] usb 9-1: config 0 descriptor?? [ 147.403182][ T50] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 147.605035][ T50] usb 9-1: USB disconnect, device number 10 [ 147.671860][ T9846] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1538'. [ 147.676960][ T9846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.706108][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.793499][ T843] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 147.873848][ T3263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.941549][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.945056][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.965620][ T843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.970527][ T843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.974730][ T843] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.980326][ T843] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.984486][ T843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.994593][ T843] usb 8-1: config 0 descriptor?? [ 148.030375][ T1467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.036646][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.042692][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.165370][ T78] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.169362][ T78] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.178989][ T78] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.182779][ T78] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.188136][ T78] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.191756][ T78] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.196509][ T78] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.200179][ T78] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.313751][ T3263] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 148.416665][ T843] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 148.474237][ T3263] usb 10-1: Using ep0 maxpacket: 8 [ 148.480270][ T3263] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 148.485236][ T3263] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.488653][ T3263] usb 10-1: Product: syz [ 148.492798][ T3263] usb 10-1: Manufacturer: syz [ 148.497725][ T3263] usb 10-1: SerialNumber: syz [ 148.499894][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 148.510263][ T3263] usb 10-1: config 0 descriptor?? [ 148.517429][ T3263] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 148.523418][ T3263] dvb-usb: bulk message failed: -22 (2/0) [ 148.528247][ T3263] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.532652][ T3263] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 148.536906][ T3263] usb 10-1: media controller created [ 148.550625][ T3263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.663524][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 148.665168][ T843] usb 8-1: USB disconnect, device number 17 [ 148.670826][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.674378][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.677217][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.681752][ T10] usb 5-1: config 0 descriptor?? [ 148.725270][ T3263] dvb-usb: bulk message failed: -22 (1/0) [ 148.745500][ T3263] DVB: Unable to find symbol mt352_attach() [ 148.747998][ T3263] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 148.813611][ T3263] rc_core: IR keymap rc-dvico-portable not found [ 148.816267][ T3263] Registered IR keymap rc-empty [ 148.818995][ T3263] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 148.828197][ T3263] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input28 [ 148.833934][ T3263] dvb-usb: schedule remote query interval to 100 msecs. [ 148.836222][ T3263] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 148.901563][ T10] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 148.922940][ T9858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.927661][ T9858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.938355][ T843] usb 10-1: USB disconnect, device number 14 [ 148.973426][ T843] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 149.063759][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.103758][ T5826] usb 5-1: USB disconnect, device number 15 [ 149.644451][ T5826] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 149.803405][ T5826] usb 8-1: Using ep0 maxpacket: 16 [ 149.807325][ T5826] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.812608][ T5826] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.816762][ T5826] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.822185][ T5826] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 149.825580][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.835770][ T5826] usb 8-1: config 0 descriptor?? [ 150.104082][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.233565][ T29] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 150.252786][ T5826] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:045E:07DA.0011/input/input29 [ 150.335640][ T5826] microsoft 0003:045E:07DA.0011: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 150.393378][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 150.402942][ T29] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 150.413533][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.428544][ T29] pvrusb2: Hardware description: Terratec Grabster AV400 [ 150.430838][ T29] pvrusb2: ********** [ 150.432099][ T29] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 150.436419][ T29] pvrusb2: Important functionality might not be entirely working. [ 150.439431][ T29] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 150.443470][ T29] pvrusb2: ********** [ 150.472992][ T10] usb 8-1: USB disconnect, device number 18 [ 150.632988][ T2510] pvrusb2: Invalid write control endpoint [ 150.685510][ T2510] pvrusb2: Invalid write control endpoint [ 150.688963][ T2510] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 150.695681][ T2510] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 150.698574][ T2510] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 150.702463][ T2510] pvrusb2: Device being rendered inoperable [ 150.711060][ T2510] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 150.715421][ T2510] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 150.724430][ T2510] pvrusb2: Attached sub-driver cx25840 [ 150.727950][ T2510] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 150.732198][ T2510] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 150.837743][ T9923] pvrusb2: Attempted to execute control transfer when device not ok [ 150.845257][ T10] usb 10-1: USB disconnect, device number 15 [ 150.905743][ T3263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.063541][ T5748] Bluetooth: hci4: command 0x1003 tx timeout [ 151.064518][ T5103] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 151.130068][ T9953] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1582'. [ 151.148938][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.176303][ T9951] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.179039][ T9951] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.223362][ T9951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.231541][ T9951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.344274][ T58] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.348099][ T58] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.351924][ T58] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.356982][ T58] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.360830][ T58] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.364464][ T58] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.377026][ T58] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.380729][ T58] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.561708][ T9968] input: syz1 as /devices/virtual/input/input30 [ 151.564970][ T9968] input: failed to attach handler leds to device input30, error: -6 [ 151.633375][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 151.683443][ T5850] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 151.786400][ T10] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 151.789930][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.792481][ T10] usb 9-1: Product: syz [ 151.793959][ T10] usb 9-1: Manufacturer: syz [ 151.795480][ T10] usb 9-1: SerialNumber: syz [ 151.844852][ T5850] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.848975][ T5850] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.852770][ T5850] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.857920][ T5850] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.861860][ T5850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.867491][ T5850] usb 8-1: config 0 descriptor?? [ 152.145055][ T10] rtl8150 9-1:1.0: couldn't reset the device [ 152.147352][ T10] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 152.183985][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.184815][ T10] usb 9-1: USB disconnect, device number 11 [ 152.282034][ T5850] hid_parser_main: 5 callbacks suppressed [ 152.282050][ T5850] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 152.292073][ T5850] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 152.294614][ T5850] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 152.296897][ T5850] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 152.299086][ T5850] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 152.301479][ T5850] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 152.306132][ T5850] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 152.308965][ T5850] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 152.311875][ T5850] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 152.314922][ T5850] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 152.320850][ T5850] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 152.545681][ T29] usb 8-1: USB disconnect, device number 19 [ 152.805902][T10012] input: syz0 as /devices/virtual/input/input31 [ 153.224132][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.575493][T10049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.581085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.813464][ T29] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 153.945570][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.955251][T10064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.959932][T10064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.962608][T10064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.968067][T10064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.970793][T10064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.987422][ T29] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.995591][ T29] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.003656][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 154.013324][ T29] usb 9-1: SerialNumber: syz [ 154.263420][ T5889] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 154.333195][T10088] overlayfs: failed lookup in lower (newroot/414, name='bus', err=-40): overlapping layers [ 154.423637][ T5889] usb 8-1: Using ep0 maxpacket: 8 [ 154.429507][ T5889] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 154.441404][ T5889] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.445863][ T5889] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.453124][ T5889] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.463830][ T5889] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.469175][ T5889] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.472838][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.675222][ T29] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 154.692205][ T5889] usb 8-1: usb_control_msg returned -32 [ 154.694261][ T5889] usbtmc 8-1:16.0: can't read capabilities [ 155.049828][T10116] usb 8-1: usbtmc_ioctl_clear_in_halt returned -32 [ 155.067827][ T29] usb 9-1: USB disconnect, device number 12 [ 155.074438][ T29] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 156.802617][ T78] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.805727][ T78] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.808711][ T78] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.811635][ T78] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.833409][ T10] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 156.987149][ T10] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 156.990144][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.992903][ T10] usb 10-1: Product: syz [ 156.994333][ T10] usb 10-1: Manufacturer: syz [ 156.996181][ T10] usb 10-1: SerialNumber: syz [ 157.045588][ T5818] usb 8-1: USB disconnect, device number 20 [ 157.236196][ T10] rtl8150 10-1:1.0: couldn't reset the device [ 157.238340][ T10] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 157.246747][ T10] usb 10-1: USB disconnect, device number 16 [ 157.273721][ T5846] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 157.315294][ T6962] net_ratelimit: 8 callbacks suppressed [ 157.315311][ T6962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.384153][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.423405][ T5846] usb 9-1: Using ep0 maxpacket: 32 [ 157.426726][ T5846] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 157.432326][ T5846] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 157.435321][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 157.438036][ T5846] usb 9-1: Product: syz [ 157.439345][ T5846] usb 9-1: Manufacturer: syz [ 157.440797][ T5846] usb 9-1: SerialNumber: syz [ 157.443881][ T5846] usb 9-1: config 0 descriptor?? [ 157.446197][T10176] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 157.453537][ T5818] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 157.525739][T10182] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 157.543547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.546819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.549423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.551951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.555860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.558367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.561164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.563684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.615601][ T5818] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 157.618456][ T5818] usb 8-1: config 0 has no interface number 0 [ 157.620451][ T5818] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 157.624176][ T5818] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 157.627755][ T5818] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 157.631941][ T5818] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 157.635231][ T5818] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 157.638118][ T5818] usb 8-1: Product: syz [ 157.639351][ T5818] usb 8-1: SerialNumber: syz [ 157.642715][ T5818] usb 8-1: config 0 descriptor?? [ 157.646442][ T5818] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 157.649502][ T5818] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input32 [ 157.707255][ T6962] usb 9-1: USB disconnect, device number 13 [ 157.855868][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 158.167429][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 158.167589][ T5818] usb 8-1: USB disconnect, device number 21 [ 158.170088][ C2] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 158.180721][ T5818] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 158.280903][T10204] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 158.284948][T10204] overlayfs: failed to set xattr on upper [ 158.288956][T10204] overlayfs: ...falling back to redirect_dir=nofollow. [ 158.291591][T10204] overlayfs: ...falling back to index=off. [ 158.295488][T10204] overlayfs: ...falling back to uuid=null. [ 158.871621][T10223] mmap: syz.5.1677 (10223) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 158.968366][T10239] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 158.976622][T10239] batman_adv: batadv0: Adding interface: ip6gretap1 [ 158.978891][T10239] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.989347][T10239] batman_adv: batadv0: Interface activated: ip6gretap1 [ 159.168982][ T5850] libceph: connect (1)[c::]:6789 error -101 [ 159.175827][ T5850] libceph: mon0 (1)[c::]:6789 connect error [ 159.188510][ T5850] libceph: connect (1)[c::]:6789 error -101 [ 159.193053][ T5850] libceph: mon0 (1)[c::]:6789 connect error [ 159.218986][ T29] libceph: connect (1)[b::]:6789 error -101 [ 159.223085][ T29] libceph: mon0 (1)[b::]:6789 connect error [ 159.287660][ T6962] IPVS: starting estimator thread 0... [ 159.383516][T10260] IPVS: using max 43 ests per chain, 103200 per kthread [ 159.465427][ T5850] libceph: connect (1)[c::]:6789 error -101 [ 159.468301][ T5850] libceph: mon0 (1)[c::]:6789 connect error [ 159.493590][ T29] libceph: connect (1)[b::]:6789 error -101 [ 159.496351][ T29] libceph: mon0 (1)[b::]:6789 connect error [ 159.974226][ T5850] libceph: connect (1)[c::]:6789 error -101 [ 159.976358][ T5850] libceph: mon0 (1)[c::]:6789 connect error [ 159.988277][T10252] ceph: No mds server is up or the cluster is laggy [ 159.993400][T10255] ceph: No mds server is up or the cluster is laggy [ 160.017459][ T29] libceph: connect (1)[b::]:6789 error -101 [ 160.019789][ T29] libceph: mon0 (1)[b::]:6789 connect error [ 160.158086][T10294] vlan2: entered allmulticast mode [ 160.160379][T10294] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 160.507034][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1708'. [ 160.783435][ T5847] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 160.824712][T10317] syzkaller1: entered promiscuous mode [ 160.826898][T10317] syzkaller1: entered allmulticast mode [ 160.935246][ T5847] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 160.938579][ T5847] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 160.941588][ T5847] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.947556][ T5847] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 160.950744][ T5847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 160.953468][ T5847] usb 8-1: Product: syz [ 160.954793][ T5847] usb 8-1: Manufacturer: syz [ 160.956314][ T5847] usb 8-1: SerialNumber: syz [ 161.178883][ T5847] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 161.427020][T10354] Invalid argument reading file caps for ./file0 [ 161.430253][ T10] usb 8-1: USB disconnect, device number 22 [ 161.445035][T10305] usblp0: removed [ 161.464774][T10357] input: syz0 as /devices/virtual/input/input33 [ 161.784140][ T5847] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 161.947842][ T5847] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.951552][ T5847] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.956007][ T5847] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.959554][ T5847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 161.963941][ T5847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 161.969334][ T5847] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.973158][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.976374][ T5847] usb 5-1: Product: syz [ 161.978084][ T5847] usb 5-1: Manufacturer: syz [ 161.982496][ T5847] cdc_wdm 5-1:1.0: skipping garbage [ 161.984397][ T5847] cdc_wdm 5-1:1.0: skipping garbage [ 161.988225][ T5847] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 161.990099][ T5847] cdc_wdm 5-1:1.0: Unknown control protocol [ 162.583578][ T5818] net_ratelimit: 163 callbacks suppressed [ 162.583593][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.643121][T10381] ceph: No mds server is up or the cluster is laggy [ 162.643129][T10377] ceph: No mds server is up or the cluster is laggy [ 162.814533][T10396] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.817504][T10396] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.885677][T10400] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1748'. [ 162.970903][ T10] usb 5-1: USB disconnect, device number 16 [ 163.015323][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.019004][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.022691][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.027105][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.444401][T10422] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1756'. [ 163.900618][ T40] audit: type=1326 audit(1778881785.816:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.0.1770" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 165.029583][T10503] fuse: Bad value for 'fd' [ 165.031316][ T40] audit: type=1326 audit(1778881786.946:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.5.1791" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efcc code=0x0 [ 166.723487][ T5818] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 166.885509][ T5818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.889157][ T5818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.892260][ T5818] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.896475][ T5818] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.899385][ T5818] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.903981][ T5818] usb 9-1: config 0 descriptor?? [ 167.014183][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'. [ 167.335471][ T5818] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 167.837155][T10621] netlink: 'syz.5.1839': attribute type 1 has an invalid length. [ 167.854641][T10621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.341045][T10631] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 168.349611][T10631] bond1: (slave lo): Enslaving as an active interface with an up link [ 168.352455][T10631] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 169.013389][ T3263] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 169.185700][ T3263] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 169.188486][ T3263] usb 5-1: config 1 has no interface number 0 [ 169.190500][ T3263] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 169.194675][ T3263] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1023 [ 169.197880][ T3263] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.201215][T10660] macvlan2: entered promiscuous mode [ 169.204102][ T3263] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 169.204123][ T3263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.204137][ T3263] usb 5-1: Product: syz [ 169.204148][ T3263] usb 5-1: Manufacturer: syz [ 169.204158][ T3263] usb 5-1: SerialNumber: syz [ 169.209750][T10643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.214217][T10660] dummy0: entered promiscuous mode [ 169.226577][T10660] macvlan2: entered allmulticast mode [ 169.229076][T10660] dummy0: entered allmulticast mode [ 169.406050][ T5846] usb 9-1: USB disconnect, device number 14 [ 169.783554][ T3263] usb 5-1: Error in usbnet_get_endpoints (-71) [ 169.789298][ T3263] usb 5-1: USB disconnect, device number 17 [ 169.893409][ T5846] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 170.058410][ T5846] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.061998][ T5846] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 170.066234][ T5846] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.074942][ T5846] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 170.076751][T10701] netlink: 'syz.0.1874': attribute type 1 has an invalid length. [ 170.079084][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 170.085947][ T5846] usb 9-1: Product: syz [ 170.087914][ T5846] usb 9-1: Manufacturer: syz [ 170.090146][ T5846] usb 9-1: SerialNumber: syz [ 170.112009][T10701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.166334][T10701] bond1: (slave geneve2): making interface the new active one [ 170.173165][T10701] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 170.176754][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.183147][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.187646][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.190457][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.330877][ T5846] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 170.593026][ T6962] usb 9-1: USB disconnect, device number 15 [ 170.612417][T10680] usblp0: removed [ 171.357617][T10795] ip6tnl1: entered allmulticast mode [ 172.476487][T10841] netlink: 'syz.4.1932': attribute type 1 has an invalid length. [ 172.479058][T10841] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1932'. [ 172.813750][ T50] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 172.973661][ T50] usb 9-1: Using ep0 maxpacket: 16 [ 172.978958][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.986379][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.992600][ T50] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 172.997601][ T50] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 173.000500][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.007807][ T50] usb 9-1: config 0 descriptor?? [ 173.055968][ T40] audit: type=1800 audit(1778881794.966:514): pid=10877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1949" name="nullb0" dev="tmpfs" ino=1721 res=0 errno=0 [ 173.188874][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 173.190905][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 173.270353][T10901] fuse: Bad value for 'fd' [ 173.285085][T10889] ceph: No mds server is up or the cluster is laggy [ 173.421261][ T50] hid_parser_main: 5 callbacks suppressed [ 173.421282][ T50] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 173.426528][ T50] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 173.429375][ T50] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 173.431511][ T50] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 173.434311][ T50] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 173.439089][ T50] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 173.462151][ T50] shield 0003:0955:7214.0014: Registered Thunderstrike controller [ 173.465613][ T50] shield 0003:0955:7214.0014: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 173.573540][ T5818] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 173.625705][T10847] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1934'. [ 173.632751][ T5846] usb 9-1: USB disconnect, device number 16 [ 173.635286][ T1467] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 173.639900][ T1467] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 173.643137][ T1467] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 173.647694][ T1467] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 173.735016][ T5818] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 173.737944][ T5818] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 173.740831][ T5818] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.746369][ T5818] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 173.749029][ T5818] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 173.751437][ T5818] usb 10-1: Product: syz [ 173.752729][ T5818] usb 10-1: Manufacturer: syz [ 173.754466][ T5818] usb 10-1: SerialNumber: syz [ 173.968428][ T5818] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 174.222978][ T5826] usb 10-1: USB disconnect, device number 17 [ 174.230158][T10906] usblp0: removed [ 174.272758][T10934] netlink: 'syz.4.1972': attribute type 1 has an invalid length. [ 174.275347][T10934] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1972'. [ 174.486183][T10951] netlink: 'syz.3.1980': attribute type 30 has an invalid length. [ 174.540320][T10952] netlink: 'syz.3.1980': attribute type 30 has an invalid length. [ 174.673490][ T5826] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 174.835708][ T5826] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.843009][ T5826] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.849597][ T5826] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.853700][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.035385][T10974] syzkaller1: entered promiscuous mode [ 175.037183][T10974] syzkaller1: entered allmulticast mode [ 175.073022][ T5826] usb 9-1: usb_control_msg returned -32 [ 175.074959][ T5826] usbtmc 9-1:16.0: can't read capabilities [ 175.322649][T10991] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1998'. [ 176.016027][ T40] audit: type=1326 audit(1778881797.936:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.5.2003" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efcc code=0x0 [ 176.538458][ T40] audit: type=1326 audit(1778881798.456:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.3.2016" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efcc code=0x0 [ 177.444866][ T5846] usb 9-1: USB disconnect, device number 17 [ 177.764607][T11089] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.774626][T11089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.792127][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2039'. [ 177.857492][T11089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.861331][T11089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.872751][T11089] veth1_vlan: left promiscuous mode [ 177.883932][T11089] veth0_vlan: left promiscuous mode [ 177.886797][T11089] veth0_vlan: entered promiscuous mode [ 177.890701][T11089] veth1_vlan: entered promiscuous mode [ 177.896775][T11089] veth1_macvtap: left promiscuous mode [ 177.900095][T11089] veth0_macvtap: left promiscuous mode [ 177.903848][T11089] veth0_macvtap: entered promiscuous mode [ 177.907787][T11089] veth1_macvtap: entered promiscuous mode [ 177.916373][T11089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.921282][T11089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.926190][T11089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.930170][T11089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.938276][T11089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.012566][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.025610][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.029080][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.035990][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.079182][ T1467] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 178.823867][ T843] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 178.825628][ T46] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 178.904016][ T1467] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 178.973377][ T843] usb 9-1: Using ep0 maxpacket: 8 [ 178.979818][ T843] usb 9-1: config 0 has an invalid interface number: 32 but max is 0 [ 178.982948][ T843] usb 9-1: config 0 has no interface number 0 [ 178.985565][ T843] usb 9-1: too many endpoints for config 0 interface 32 altsetting 115: 62, using maximum allowed: 30 [ 178.989174][ T843] usb 9-1: config 0 interface 32 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 62 [ 178.995751][ T843] usb 9-1: config 0 interface 32 has no altsetting 0 [ 179.001034][ T843] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 179.003960][ T843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.006450][ T843] usb 9-1: Product: syz [ 179.007787][ T843] usb 9-1: Manufacturer: syz [ 179.009269][ T843] usb 9-1: SerialNumber: syz [ 179.013428][ T843] usb 9-1: config 0 descriptor?? [ 179.154745][T11138] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2058'. [ 179.233611][ T843] usb 9-1: USB disconnect, device number 18 [ 179.299319][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2062'. [ 179.321570][T11151] vxlan1: entered promiscuous mode [ 179.332561][ T46] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.338290][ T46] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.341302][ T46] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.344336][ T46] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.441151][T11157] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 179.478407][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2067'. [ 179.482769][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2067'. [ 179.534066][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 179.545274][T11162] : entered promiscuous mode [ 179.864431][ T46] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 179.870952][ T46] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 180.251626][T11202] overlayfs: failed to clone upperpath [ 180.309573][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 180.323968][T11205] : entered promiscuous mode [ 180.583570][ T5530] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 180.840000][T11235] input: syz1 as /devices/virtual/input/input36 [ 181.018540][T11243] batadv_slave_0: entered promiscuous mode [ 181.030074][T11242] batadv_slave_0: left promiscuous mode [ 181.559030][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2109'. [ 181.734859][T11270] netlink: 'syz.3.2113': attribute type 11 has an invalid length. [ 181.878118][ T1467] libceph: connect (1)[c::]:6789 error -101 [ 181.880948][ T1467] libceph: mon0 (1)[c::]:6789 connect error [ 181.975262][T11278] ceph: No mds server is up or the cluster is laggy [ 182.406847][T11307] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2127'. [ 182.522469][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2132'. [ 183.119595][ T40] audit: type=1800 audit(1778881805.036:517): pid=11335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2138" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 183.540084][T11364] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 183.643250][T11375] __nla_validate_parse: 1 callbacks suppressed [ 183.646756][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 183.703518][ T5530] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 183.855205][ T5530] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 183.859911][ T5530] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.868059][ T5530] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.872954][ T5530] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 183.879949][ T5530] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 183.883241][ T5530] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 183.886737][ T5530] usb 9-1: Manufacturer: syz [ 183.890592][ T5530] usb 9-1: config 0 descriptor?? [ 184.103486][ C2] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 184.304309][ T5530] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 184.313438][ T5530] appleir 0003:05AC:8243.0015: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 184.333459][ T1467] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 184.493365][ T1467] usb 10-1: Using ep0 maxpacket: 8 [ 184.497490][ T1467] usb 10-1: config 0 has an invalid interface number: 32 but max is 0 [ 184.500932][ T1467] usb 10-1: config 0 has no interface number 0 [ 184.503733][ T1467] usb 10-1: too many endpoints for config 0 interface 32 altsetting 115: 62, using maximum allowed: 30 [ 184.508297][ T1467] usb 10-1: config 0 interface 32 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 62 [ 184.513919][ T1467] usb 10-1: config 0 interface 32 has no altsetting 0 [ 184.518289][ T1467] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 184.522083][ T1467] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.525396][ T1467] usb 10-1: Product: syz [ 184.527185][ T1467] usb 10-1: Manufacturer: syz [ 184.529200][ T1467] usb 10-1: SerialNumber: syz [ 184.534470][ T1467] usb 10-1: config 0 descriptor?? [ 184.744677][ C3] raw-gadget.1 gadget.5: ignoring, device is not running [ 184.757721][ T1467] usb 10-1: USB disconnect, device number 18 [ 184.809418][ T5818] usb 9-1: USB disconnect, device number 19 [ 185.411104][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2179'. [ 185.420181][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2179'. [ 185.428173][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2179'. [ 185.516846][T11436] kvm: user requested TSC rate below hardware speed [ 185.528346][T11436] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4180564684 (8361129368 ns) > initial count (6590827116 ns). Using initial count to start timer. [ 185.536334][T11440] netlink: 'syz.0.2185': attribute type 3 has an invalid length. [ 185.593434][ T5826] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 185.708444][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2189'. [ 185.715256][T11452] vxlan0: entered promiscuous mode [ 185.719450][ T46] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.723216][ T46] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.727217][ T46] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.730869][ T46] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.773545][ T5826] usb 10-1: Using ep0 maxpacket: 8 [ 185.777359][ T5826] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 185.780902][ T5826] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.784403][ T5826] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.788398][ T5826] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.792506][ T5826] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.798264][ T5826] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.802009][ T5826] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.015783][ T5826] usb 10-1: usb_control_msg returned -32 [ 186.017584][ T5826] usbtmc 10-1:16.0: can't read capabilities [ 186.784149][T11469] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 186.986925][ T5818] usb 10-1: USB disconnect, device number 19 [ 187.580087][T11477] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 187.873535][ T5846] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 187.956548][T11514] bridge1: entered promiscuous mode [ 187.958327][T11514] bridge1: entered allmulticast mode [ 188.023884][ T5846] usb 9-1: Using ep0 maxpacket: 8 [ 188.027686][ T5846] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 188.030794][ T5846] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.035077][ T5846] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.038993][ T5846] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.042894][ T5846] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.048151][ T5846] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 188.051862][ T5846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.266472][ T5846] usb 9-1: usb_control_msg returned -32 [ 188.268280][ T5846] usbtmc 9-1:16.0: can't read capabilities [ 188.824981][ T5530] usb 9-1: USB disconnect, device number 20 [ 189.012352][T11547] overlayfs: failed to clone upperpath [ 189.656622][ T40] audit: type=1326 audit(1778881811.576:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11628 comm="syz.4.2238" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f03fcc code=0x0 [ 190.051325][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 190.054192][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 190.099826][ T843] libceph: connect (1)[c::]:6789 error -101 [ 190.101864][ T843] libceph: mon0 (1)[c::]:6789 connect error [ 190.325361][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 190.327340][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 190.363627][ T843] libceph: connect (1)[c::]:6789 error -101 [ 190.365654][ T843] libceph: mon0 (1)[c::]:6789 connect error [ 190.833617][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 190.836864][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 190.873902][ T843] libceph: connect (1)[c::]:6789 error -101 [ 190.876688][T11648] ceph: No mds server is up or the cluster is laggy [ 190.878426][ T843] libceph: mon0 (1)[c::]:6789 connect error [ 190.879210][T11651] ceph: No mds server is up or the cluster is laggy [ 191.003759][T11699] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2265'. [ 191.215213][T11715] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2274'. [ 191.226092][ T40] audit: type=1326 audit(1778881813.146:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.3.2275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 191.236074][ T40] audit: type=1326 audit(1778881813.146:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.3.2275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 191.238095][ T5846] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 191.245760][ T40] audit: type=1326 audit(1778881813.146:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.3.2275" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 191.258024][ T40] audit: type=1326 audit(1778881813.146:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.3.2275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 191.267131][ T40] audit: type=1326 audit(1778881813.146:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.3.2275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 191.275337][ T40] audit: type=1326 audit(1778881813.146:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.3.2275" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 191.284364][ T40] audit: type=1326 audit(1778881813.146:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.3.2275" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705efe8 code=0x7ffc0000 [ 191.293116][ T40] audit: type=1326 audit(1778881813.146:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.3.2275" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705efe8 code=0x7ffc0000 [ 191.303887][ T40] audit: type=1326 audit(1778881813.146:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.3.2275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 191.337790][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 191.340604][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 191.394517][ T3263] libceph: connect (1)[c::]:6789 error -101 [ 191.397124][ T3263] libceph: mon0 (1)[c::]:6789 connect error [ 191.405845][ T5846] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.410027][ T5846] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.415277][ T5846] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 191.418919][ T5846] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.603686][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 191.606282][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 191.630895][ T5846] usb 10-1: usb_control_msg returned -32 [ 191.632734][ T5846] usbtmc 10-1:16.0: can't read capabilities [ 191.653600][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 191.656108][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 192.113787][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 192.116696][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 192.161806][T11726] ceph: No mds server is up or the cluster is laggy [ 192.161834][T11721] ceph: No mds server is up or the cluster is laggy [ 192.166544][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 192.168654][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 192.265115][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 192.267243][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 192.311073][T11751] ceph: No mds server is up or the cluster is laggy [ 192.503438][ C2] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 192.549036][T11766] overlayfs: failed to clone upperpath [ 193.393359][ T5846] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 193.545841][ T5846] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 193.550159][ T5846] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.554582][ T5846] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.558430][ T5846] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 193.564671][ T5846] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 193.568071][ T5846] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 193.571063][ T5846] usb 9-1: Manufacturer: syz [ 193.576885][ T5846] usb 9-1: config 0 descriptor?? [ 193.952425][T11813] netlink: 'syz.0.2313': attribute type 2 has an invalid length. [ 193.984148][ T5530] usb 10-1: USB disconnect, device number 20 [ 194.003168][ T5846] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 194.016867][ T5846] appleir 0003:05AC:8243.0016: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 194.038104][T11819] netlink: 'syz.0.2316': attribute type 1 has an invalid length. [ 194.040754][T11819] netlink: 'syz.0.2316': attribute type 4 has an invalid length. [ 194.045776][T11819] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2316'. [ 194.335356][T11843] tipc: Started in network mode [ 194.337233][T11843] tipc: Node identity 2007ff, cluster identity 4711 [ 194.339586][T11843] tipc: Node number set to 2099199 [ 194.445491][T11845] fuse: Bad value for 'fd' [ 194.468086][T11847] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2327'. [ 194.471609][T11847] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2327'. [ 194.504819][ T5818] usb 9-1: USB disconnect, device number 21 [ 194.516389][T11851] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2329'. [ 194.911301][T11881] fuse: Bad value for 'fd' [ 195.476008][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2358'. [ 195.644923][T11927] fuse: Bad value for 'fd' [ 195.740839][T11937] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2369'. [ 195.772670][T11941] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.2371'. [ 195.777264][T11943] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2372'. [ 195.780322][T11943] netlink: Unknown conntrack attr (0) [ 195.913379][ T5818] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 196.073434][ T5818] usb 10-1: Using ep0 maxpacket: 8 [ 196.078999][ T5818] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 196.082470][ T5818] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.086712][ T5818] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.090114][ T5818] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.095908][ T5818] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.100598][ T5818] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.105862][ T5818] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.234384][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2388'. [ 196.318270][ T5818] usb 10-1: usb_control_msg returned -32 [ 196.320493][ T5818] usbtmc 10-1:16.0: can't read capabilities [ 197.025871][T11995] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 197.227408][ T5530] usb 10-1: USB disconnect, device number 21 [ 197.853107][T12009] tipc: Started in network mode [ 197.855371][T12009] tipc: Node identity 2007ff, cluster identity 4711 [ 197.858206][T12009] tipc: Node number set to 2099199 [ 198.223380][ T3263] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 198.373514][ T3263] usb 10-1: Using ep0 maxpacket: 8 [ 198.377373][ T3263] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 198.381046][ T3263] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.385284][ T3263] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.389608][ T3263] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 198.394705][ T3263] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 198.398947][ T3263] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.404347][ T3263] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.407873][ T3263] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.623186][ T3263] usb 10-1: usb_control_msg returned -32 [ 198.625734][ T3263] usbtmc 10-1:16.0: can't read capabilities [ 198.666569][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2408'. [ 198.788627][T12040] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2415'. [ 198.906561][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.909163][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.079340][T12064] bridge0: entered promiscuous mode [ 199.081155][T12064] bridge0: entered allmulticast mode [ 199.328536][T12075] usbtmc 10-1:16.0: usb_control_msg returned -71 [ 199.530080][ T843] usb 10-1: USB disconnect, device number 22 [ 199.800601][T12088] 9pnet: p9_errstr2errno: server reported unknown error card# [ 200.642859][T12120] bridge0: entered promiscuous mode [ 200.644854][T12120] bridge0: entered allmulticast mode [ 201.038363][T12144] ip6gre1: entered promiscuous mode [ 201.040183][T12144] ip6gre1: entered allmulticast mode [ 201.046405][T12145] bridge0: entered promiscuous mode [ 201.048145][T12145] bridge0: entered allmulticast mode [ 201.694124][ T5846] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 202.113523][ T5846] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 202.322814][T12199] overlayfs: failed to clone upperpath [ 202.432573][T12207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2484'. [ 202.443131][T12207] ip6gre1: entered promiscuous mode [ 202.445400][T12207] ip6gre1: entered allmulticast mode [ 203.792885][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2508'. [ 203.834310][T12267] overlayfs: failed to clone upperpath [ 203.926386][T12273] overlayfs: failed to clone upperpath [ 204.161851][T12293] netlink: 'syz.5.2523': attribute type 8 has an invalid length. [ 204.165013][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2523'. [ 204.173058][T12293] bond0: entered promiscuous mode [ 204.177676][T12293] gretap0: entered promiscuous mode [ 204.180816][T12293] team0: entered promiscuous mode [ 204.182620][T12293] team_slave_0: entered promiscuous mode [ 204.185270][T12293] team_slave_1: entered promiscuous mode [ 204.188911][T12293] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 204.192207][T12293] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 204.195522][T12293] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 204.201264][T12293] hsr1: entered promiscuous mode [ 204.524973][ T1467] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 204.683815][ T1467] usb 10-1: Using ep0 maxpacket: 32 [ 204.691915][ T1467] usb 10-1: too many configurations: 10, using maximum allowed: 8 [ 204.697410][ T1467] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.701590][ T1467] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.707695][ T1467] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.711748][ T1467] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.720028][ T1467] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.724250][ T1467] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.729631][ T1467] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.734131][ T1467] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.738917][ T1467] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.743019][ T1467] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.747398][ T1467] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.751519][ T1467] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.755957][ T1467] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.760112][ T1467] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.764817][ T1467] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.768729][ T1467] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.774266][ T1467] usb 10-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 204.778407][ T1467] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=51 [ 204.781701][ T1467] usb 10-1: Product: syz [ 204.783892][ T1467] usb 10-1: Manufacturer: syz [ 204.785770][ T1467] usb 10-1: SerialNumber: syz [ 205.004226][ T1467] usb 10-1: USB disconnect, device number 23 [ 205.310224][T12354] overlayfs: failed to clone upperpath [ 206.346918][T12404] netlink: 'syz.4.2568': attribute type 10 has an invalid length. [ 207.400181][T12442] overlayfs: failed to clone upperpath [ 208.131459][T12479] batadv_slave_1: entered promiscuous mode [ 208.143233][T12478] batadv_slave_1: left promiscuous mode [ 208.338309][T12490] macvtap1: entered promiscuous mode [ 208.340306][T12490] macvtap1: entered allmulticast mode [ 208.342137][T12490] veth1_vlan: entered allmulticast mode [ 208.362760][T12490] macvtap2: entered promiscuous mode [ 208.364857][T12490] macvtap2: entered allmulticast mode [ 208.813397][ T1037] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 208.973382][ T1037] usb 10-1: Using ep0 maxpacket: 16 [ 208.976439][ T1037] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.979082][ T1037] usb 10-1: config 0 has no interface number 0 [ 208.982583][ T1037] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 208.985931][ T1037] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.988575][ T1037] usb 10-1: Product: syz [ 208.989949][ T1037] usb 10-1: Manufacturer: syz [ 208.996770][ T1037] usb 10-1: SerialNumber: syz [ 209.001772][ T1037] usb 10-1: config 0 descriptor?? [ 209.007714][ T1037] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 209.291167][ T1037] gspca_spca1528: reg_w err -71 [ 209.323459][ T1037] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 209.327800][ T1037] usb 10-1: USB disconnect, device number 24 [ 209.783529][ C2] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 209.828484][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2637'. [ 209.832421][T12564] netlink: 'syz.0.2637': attribute type 6 has an invalid length. [ 210.726553][T12592] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2647'. [ 210.941212][T12606] netlink: 'syz.5.2655': attribute type 4 has an invalid length. [ 210.951660][T12606] netlink: 'syz.5.2655': attribute type 4 has an invalid length. [ 211.426367][T12621] fuse: Bad value for 'fd' [ 211.903809][ T1467] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 211.922932][T12664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2680'. [ 211.930374][T12664] netlink: 'syz.0.2680': attribute type 7 has an invalid length. [ 211.933815][T12664] netlink: 'syz.0.2680': attribute type 8 has an invalid length. [ 211.936994][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'. [ 212.053373][ T1467] usb 9-1: Using ep0 maxpacket: 8 [ 212.059307][ T1467] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.068318][ T1467] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.074754][ T1467] usb 9-1: config 0 interface 0 has no altsetting 0 [ 212.077536][ T1467] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 212.081354][ T1467] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.087904][ T1467] usb 9-1: config 0 descriptor?? [ 212.302203][T12681] netlink: 'syz.0.2688': attribute type 1 has an invalid length. [ 212.319072][T12681] bond2: entered promiscuous mode [ 212.320822][T12681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.505731][ T1467] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 212.511126][ T1467] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 212.513923][ T1467] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 212.516692][ T1467] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 212.519814][ T1467] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 212.522987][ T1467] mcp2221 0003:04D8:00DD.0017: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 212.705964][ T1467] usb 9-1: USB disconnect, device number 22 [ 213.087981][T12719] binder: 12718:12719 ioctl c0306201 800001c0 returned -22 [ 213.415288][T12733] 9p: Bad value for 'rfdno' [ 214.063398][ T1037] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 214.111689][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2723'. [ 214.114742][T12765] bridge: RTM_NEWNEIGH with invalid ether address [ 214.118802][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2723'. [ 214.121843][T12765] bridge: RTM_NEWNEIGH with invalid ether address [ 214.223419][ T1037] usb 9-1: Using ep0 maxpacket: 32 [ 214.227282][ T1037] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 214.230008][ T1037] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 214.232898][ T1037] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 214.235854][ T1037] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 214.238806][ T1037] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 214.241837][ T1037] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 214.246567][ T1037] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 214.249489][ T1037] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.260077][ T1037] usb 9-1: config 0 descriptor?? [ 214.473124][ T1037] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 214.680587][ T843] usb 9-1: USB disconnect, device number 23 [ 214.693091][ T843] usblp0: removed [ 214.947503][T12800] netlink: 'syz.3.2738': attribute type 1 has an invalid length. [ 214.969534][T12800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.003037][T12800] bond2: (slave geneve2): making interface the new active one [ 215.008365][T12800] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 215.011898][T11579] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.016911][T11579] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.021202][T11579] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.024305][T11579] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.110680][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2740'. [ 215.113787][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2740'. [ 215.152866][T12807] netlink: 'syz.3.2741': attribute type 1 has an invalid length. [ 215.171038][T12807] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.501116][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 215.501130][ T40] audit: type=1326 audit(1778881837.416:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.3.2749" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efcc code=0x0 [ 215.588214][T12837] input: syz0 as /devices/virtual/input/input37 [ 216.543347][T12870] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 216.550295][T12870] netlink: 'syz.3.2768': attribute type 10 has an invalid length. [ 216.554122][T12870] syz_tun: entered promiscuous mode [ 216.655049][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2770'. [ 216.807422][ T40] audit: type=1326 audit(1778881838.726:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12879 comm="syz.3.2773" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efcc code=0x0 [ 217.056111][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.063428][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.073436][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.096404][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.099475][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.101997][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.105129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.136945][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.140286][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.143004][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.428427][T12926] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ [ 217.685551][T12945] overlayfs: failed to clone upperpath [ 217.769008][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2804'. [ 217.774104][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2804'. [ 217.778041][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2804'. [ 218.209592][T12988] overlayfs: failed to clone upperpath [ 218.286217][ T40] audit: type=1326 audit(1778881840.196:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.4.2820" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f03fcc code=0x0 [ 218.357653][T13000] loop2: detected capacity change from 0 to 7 [ 218.366014][T13000] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 218.370969][T13000] loop2: partition table partially beyond EOD, truncated [ 218.374117][T13000] loop2: p1 size 1898597519 extends beyond EOD, truncated [ 218.408441][ T9986] udevd[9986]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 219.389771][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2840'. [ 219.526268][T13051] overlayfs: failed to clone upperpath [ 219.737756][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2854'. [ 219.954956][T13087] netlink: 'syz.5.2861': attribute type 8 has an invalid length. [ 219.957929][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2861'. [ 219.964050][T13087] veth1_to_team: entered promiscuous mode [ 219.967842][T13087] veth1_to_team: left promiscuous mode [ 220.070121][T13091] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 220.508919][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.519553][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.527798][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.532396][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.537415][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.090817][T13102] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.093395][T13102] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.096348][T13102] bridge_slave_0: entered allmulticast mode [ 221.100794][T13102] bridge_slave_0: entered promiscuous mode [ 221.121403][T13102] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.123851][T13102] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.126361][T13102] bridge_slave_1: entered allmulticast mode [ 221.129725][T13102] bridge_slave_1: entered promiscuous mode [ 221.161918][T13102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.167334][T13102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.199596][T13102] team0: Port device team_slave_0 added [ 221.205453][T13102] team0: Port device team_slave_1 added [ 221.219706][T13102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.222021][T13102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.231042][T13102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.236381][T13102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.238956][T13102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.248644][T13102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.350367][T13102] hsr_slave_0: entered promiscuous mode [ 221.354990][T13102] hsr_slave_1: entered promiscuous mode [ 221.373104][T13102] debugfs: 'hsr0' already exists in 'hsr' [ 221.375433][T13102] Cannot create hsr debugfs directory [ 221.429485][ T40] audit: type=1326 audit(1778881843.346:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.4.2875" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f03fcc code=0x0 [ 222.366379][T13102] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 222.372386][T13102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.376257][T13102] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 222.380802][T13102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.383717][T13102] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 222.389629][T13102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.394375][T13102] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 222.400002][T13102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.479927][T13102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.507443][T13102] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.520667][ T547] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.523144][ T547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.539858][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.542091][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.584109][ T5748] Bluetooth: hci3: command tx timeout [ 222.926107][T13102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.127741][T13102] veth0_vlan: entered promiscuous mode [ 223.134296][T13102] veth1_vlan: entered promiscuous mode [ 223.151388][T13102] veth0_macvtap: entered promiscuous mode [ 223.156747][T13102] veth1_macvtap: entered promiscuous mode [ 223.168828][T13102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.173482][T13102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.188040][T11579] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.192134][T11579] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.198924][T11579] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.207544][T11579] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.313962][T11560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.323662][T11560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.347132][T11579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.349785][T11579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.832685][T13233] bond0: entered promiscuous mode [ 223.835274][T13233] bond_slave_0: entered promiscuous mode [ 223.837852][T13233] bond_slave_1: entered promiscuous mode [ 223.846982][T13233] bond0: left promiscuous mode [ 223.853475][T13233] bond_slave_0: left promiscuous mode [ 223.856768][T13233] bond_slave_1: left promiscuous mode [ 224.254003][ T40] audit: type=1326 audit(1778881846.176:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.3.2917" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x0 [ 224.341992][T13274] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 224.346213][T13273] IPVS: stopping master sync thread 13274 ... [ 224.663430][ T5748] Bluetooth: hci3: command tx timeout [ 225.311397][T13306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2932'. [ 225.478495][T13317] fuse: Bad value for 'fd' [ 225.600158][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'. [ 225.642243][T13327] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input38 [ 225.697706][T13332] fuse: Bad value for 'fd' [ 225.761771][T13337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2945'. [ 225.896262][T13284] net_ratelimit: 70 callbacks suppressed [ 225.896277][T13284] Set syz1 is full, maxelem 65536 reached [ 225.941872][T13347] IPv4: Oversized IP packet from 127.202.26.0 [ 226.189027][T13378] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2964'. [ 226.226316][T13383] bridge0: left allmulticast mode [ 226.309462][T13389] netlink: 876 bytes leftover after parsing attributes in process `syz.3.2969'. [ 226.312606][T13389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2969'. [ 226.344552][T13393] ALSA: seq fatal error: cannot create timer (-16) [ 226.380205][T13397] input: syz0 as /devices/virtual/input/input39 [ 226.743452][ T5748] Bluetooth: hci3: command tx timeout [ 226.843442][ T10] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 226.993379][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 226.997662][ T10] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.002202][ T10] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.005928][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 227.009089][ T10] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 227.012809][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.018293][ T10] usb 10-1: config 0 descriptor?? [ 227.292736][T13421] trusted_key: syz.0.2982 sent an empty control message without MSG_MORE. [ 227.449850][ T10] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 227.452496][ T10] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 227.456028][ T10] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 227.461506][ T10] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 227.468799][ T10] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 227.471960][ T10] mcp2221 0003:04D8:00DD.0018: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 227.635851][ T10] usb 10-1: USB disconnect, device number 25 [ 228.084636][T13441] kernel read not supported for file /cpuacct.usage_percpu (pid: 13441 comm: syz.0.2988) [ 228.089550][ T40] audit: type=1800 audit(1778881850.006:626): pid=13441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2988" name="cpuacct.usage_percpu" dev="mqueue" ino=47121 res=0 errno=0 [ 228.136394][ T40] audit: type=1326 audit(1778881850.056:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13442 comm="syz.0.2997" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 228.370102][T13459] kernel read not supported for file /file0 (pid: 13459 comm: syz.4.2996) [ 228.373117][ T40] audit: type=1800 audit(1778881850.286:628): pid=13459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2996" name="file0" dev="mqueue" ino=47130 res=0 errno=0 [ 228.481177][ T5103] Bluetooth: hci4: sending frame failed (-49) [ 228.490112][ T5748] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 228.823867][ T5748] Bluetooth: hci3: command tx timeout [ 229.002244][T13469] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3002'. [ 229.015686][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3002'. [ 229.287904][T13484] fuse: Bad value for 'fd' [ 229.956683][T13521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3026'. [ 230.683397][ T1467] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 230.684447][T13559] input: syz1 as /devices/virtual/input/input40 [ 230.833833][ T1467] usb 9-1: Using ep0 maxpacket: 8 [ 230.840411][ T1467] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 230.846121][ T1467] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 230.858676][ T1467] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 230.870073][ T1467] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.878980][ T1467] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.888561][ T1467] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.898639][ T1467] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 230.909532][ T1467] usb 9-1: config 168 interface 0 has no altsetting 0 [ 230.916902][ T1467] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 230.921450][ T1467] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 230.932099][ T1467] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 230.938996][ T1467] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.943174][ T1467] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.946746][ T1467] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.951027][ T1467] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 230.956241][ T1467] usb 9-1: config 168 interface 0 has no altsetting 0 [ 230.959299][ T1467] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 230.961900][ T1467] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 230.965958][ T1467] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 230.969503][ T1467] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.974686][ T1467] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.978250][ T1467] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.982873][ T1467] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 230.987860][ T1467] usb 9-1: config 168 interface 0 has no altsetting 0 [ 230.992667][ T1467] usb 9-1: string descriptor 0 read error: -22 [ 230.995088][ T1467] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 230.998126][ T1467] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.006485][ T1467] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 231.411745][T13569] netlink: 'syz.0.3044': attribute type 2 has an invalid length. [ 231.414457][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3044'. [ 231.447004][T13571] overlayfs: failed to clone upperpath [ 231.485207][T13573] netlink: 'syz.0.3046': attribute type 10 has an invalid length. [ 231.488172][T13573] syz_tun: entered promiscuous mode [ 232.504988][T13612] nbd: nbd5 already in use [ 232.507753][T13612] block nbd5: NBD_DISCONNECT [ 232.522590][ T7502] block nbd5: Wrong magic (0x25609513) [ 232.528576][ T7422] block nbd5: Wrong magic (0x25609513) [ 232.533133][ T7504] block nbd5: Wrong magic (0x0) [ 232.535016][T13612] block nbd5: Send disconnect failed -32 [ 232.535052][ T7502] block nbd5: Disconnected due to user request. [ 232.543020][T13612] block nbd5: Send disconnect failed -32 [ 232.550443][T13612] [ 232.551263][T13612] ====================================================== [ 232.553916][T13612] WARNING: possible circular locking dependency detected [ 232.556778][T13612] syzkaller #0 Tainted: G L [ 232.559415][T13612] ------------------------------------------------------ [ 232.561709][T13612] syz.5.3064/13612 is trying to acquire lock: [ 232.563550][T13612] ffff888027b3d940 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x9c/0x1c0 [ 232.566711][T13612] [ 232.566711][T13612] but task is already holding lock: [ 232.569119][T13612] ffff888027aa6260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x26/0x1c0 [ 232.572725][T13612] [ 232.572725][T13612] which lock already depends on the new lock. [ 232.572725][T13612] [ 232.576262][T13612] [ 232.576262][T13612] the existing dependency chain (in reverse order) is: [ 232.579204][T13612] [ 232.579204][T13612] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 232.581629][T13612] __mutex_lock+0x1a4/0x1b10 [ 232.583281][T13612] refcount_dec_and_mutex_lock+0x51/0x100 [ 232.585251][T13612] nbd_config_put+0x31/0x750 [ 232.586886][T13612] recv_work+0x63a/0x8c0 [ 232.588424][T13612] process_one_work+0xa0e/0x1980 [ 232.590173][T13612] worker_thread+0x5ef/0xe50 [ 232.591830][T13612] kthread+0x370/0x450 [ 232.593296][T13612] ret_from_fork+0x72b/0xd50 [ 232.594908][T13612] ret_from_fork_asm+0x1a/0x30 [ 232.596687][T13612] [ 232.596687][T13612] -> #1 ((work_completion)(&args->work)){+.+.}-{0:0}: [ 232.599518][T13612] process_one_work+0x979/0x1980 [ 232.601241][T13612] worker_thread+0x5ef/0xe50 [ 232.602880][T13612] kthread+0x370/0x450 [ 232.604374][T13612] ret_from_fork+0x72b/0xd50 [ 232.606035][T13612] ret_from_fork_asm+0x1a/0x30 [ 232.607749][T13612] [ 232.607749][T13612] -> #0 ((wq_completion)nbd5-recv){+.+.}-{0:0}: [ 232.610362][T13612] __lock_acquire+0x14b8/0x2630 [ 232.612062][T13612] lock_acquire+0x1b1/0x370 [ 232.613663][T13612] touch_wq_lockdep_map+0xad/0x1c0 [ 232.615487][T13612] __flush_workqueue+0x131/0x1200 [ 232.617242][T13612] nbd_disconnect_and_put+0x9b/0x1c0 [ 232.619127][T13612] nbd_genl_disconnect+0x34b/0x4e0 [ 232.620929][T13612] genl_family_rcv_msg_doit+0x214/0x300 [ 232.622849][T13612] genl_rcv_msg+0x560/0x800 [ 232.624471][T13612] netlink_rcv_skb+0x159/0x420 [ 232.626217][T13612] genl_rcv+0x28/0x40 [ 232.627745][T13612] netlink_unicast+0x585/0x850 [ 232.629427][T13612] netlink_sendmsg+0x8b0/0xda0 [ 232.631106][T13612] ____sys_sendmsg+0x9e1/0xb70 [ 232.632775][T13612] ___sys_sendmsg+0x190/0x1e0 [ 232.634414][T13612] __sys_sendmsg+0x170/0x220 [ 232.636104][T13612] __do_fast_syscall_32+0xe7/0x950 [ 232.637909][T13612] do_fast_syscall_32+0x32/0x70 [ 232.639598][T13612] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.641740][T13612] [ 232.641740][T13612] other info that might help us debug this: [ 232.641740][T13612] [ 232.644897][T13612] Chain exists of: [ 232.644897][T13612] (wq_completion)nbd5-recv --> (work_completion)(&args->work) --> &nbd->config_lock [ 232.644897][T13612] [ 232.649623][T13612] Possible unsafe locking scenario: [ 232.649623][T13612] [ 232.651969][T13612] CPU0 CPU1 [ 232.653665][T13612] ---- ---- [ 232.655371][T13612] lock(&nbd->config_lock); [ 232.656845][T13612] lock((work_completion)(&args->work)); [ 232.659516][T13612] lock(&nbd->config_lock); [ 232.661869][T13612] lock((wq_completion)nbd5-recv); [ 232.663543][T13612] [ 232.663543][T13612] *** DEADLOCK *** [ 232.663543][T13612] [ 232.666148][T13612] 3 locks held by syz.5.3064/13612: [ 232.667895][T13612] #0: ffffffff906bde48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 232.670562][T13612] #1: ffffffff906bdf00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 232.673399][T13612] #2: ffff888027aa6260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x26/0x1c0 [ 232.676588][T13612] [ 232.676588][T13612] stack backtrace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 232.678481][T13612] CPU: 1 UID: 0 PID: 13612 Comm: syz.5.3064 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.678498][T13612] Tainted: [L]=SOFTLOCKUP [ 232.678502][T13612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.678509][T13612] Call Trace: [ 232.678538][T13612] [ 232.678544][T13612] dump_stack_lvl+0x100/0x190 [ 232.678559][T13612] print_circular_bug.cold+0x178/0x1c7 [ 232.678583][T13612] check_noncircular+0x146/0x160 [ 232.678603][T13612] __lock_acquire+0x14b8/0x2630 [ 232.678616][T13612] lock_acquire+0x1b1/0x370 [ 232.678626][T13612] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 232.678645][T13612] ? lockdep_init_map_type+0x5c/0x250 [ 232.678660][T13612] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 232.678680][T13612] touch_wq_lockdep_map+0xad/0x1c0 [ 232.678700][T13612] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 232.678720][T13612] __flush_workqueue+0x131/0x1200 [ 232.678733][T13612] ? __lock_acquire+0xd73/0x2630 [ 232.678744][T13612] ? nbd_genl_disconnect+0x257/0x4e0 [ 232.678758][T13612] ? __pfx___flush_workqueue+0x10/0x10 [ 232.678769][T13612] ? do_raw_spin_lock+0x128/0x260 [ 232.678782][T13612] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 232.678800][T13612] ? lockdep_hardirqs_on+0x78/0x100 [ 232.678818][T13612] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 232.678834][T13612] nbd_disconnect_and_put+0x9b/0x1c0 [ 232.678848][T13612] nbd_genl_disconnect+0x34b/0x4e0 [ 232.678862][T13612] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 232.678876][T13612] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 232.678896][T13612] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 232.678916][T13612] genl_family_rcv_msg_doit+0x214/0x300 [ 232.678965][T13612] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 232.678984][T13612] ? genl_get_cmd+0x3e7/0x760 [ 232.679004][T13612] ? __alloc_skb+0x185/0x710 [ 232.679016][T13612] ? netlink_alloc_large_skb+0x69/0x150 [ 232.679032][T13612] ? __radix_tree_lookup+0x217/0x2b0 [ 232.679048][T13612] genl_rcv_msg+0x560/0x800 [ 232.679060][T13612] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.679074][T13612] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 232.679101][T13612] ? __lock_acquire+0x4a5/0x2630 [ 232.679119][T13612] netlink_rcv_skb+0x159/0x420 [ 232.679142][T13612] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.679158][T13612] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.679184][T13612] ? netlink_deliver_tap+0x1ae/0xcc0 [ 232.679200][T13612] genl_rcv+0x28/0x40 [ 232.679214][T13612] netlink_unicast+0x585/0x850 [ 232.679230][T13612] ? __pfx_netlink_unicast+0x10/0x10 [ 232.679247][T13612] netlink_sendmsg+0x8b0/0xda0 [ 232.679262][T13612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.679278][T13612] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 232.679296][T13612] ____sys_sendmsg+0x9e1/0xb70 [ 232.679311][T13612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.679326][T13612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.679341][T13612] ? try_to_wake_up+0x5f6/0x1900 [ 232.679356][T13612] ___sys_sendmsg+0x190/0x1e0 [ 232.679373][T13612] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.679389][T13612] ? futex_private_hash_put+0x107/0x1c0 [ 232.679402][T13612] ? find_held_lock+0x2b/0x80 [ 232.679420][T13612] __sys_sendmsg+0x170/0x220 [ 232.679432][T13612] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.679446][T13612] ? rcu_is_watching+0x12/0xc0 [ 232.679459][T13612] __do_fast_syscall_32+0xe7/0x950 [ 232.679477][T13612] ? lockdep_hardirqs_on+0x78/0x100 [ 232.679493][T13612] do_fast_syscall_32+0x32/0x70 [ 232.679502][T13612] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.679516][T13612] RIP: 0023:0xf7fc7fcc [ 232.679525][T13612] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 232.679536][T13612] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 232.679547][T13612] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 232.679553][T13612] RDX: 0000000004000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.679559][T13612] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.679565][T13612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.679572][T13612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.679583][T13612] [ 233.233756][ T5850] usb 9-1: USB disconnect, device number 24 [ 235.151952][T11560] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.217121][T11560] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.266703][T11560] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.330104][T11560] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.426500][T11560] bridge_slave_1: left allmulticast mode [ 235.428273][T11560] bridge_slave_1: left promiscuous mode [ 235.430059][T11560] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.432976][T11560] bridge_slave_0: left allmulticast mode [ 235.435129][T11560] bridge_slave_0: left promiscuous mode [ 235.436941][T11560] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.536620][T11560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.540772][T11560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.544654][T11560] bond0 (unregistering): Released all slaves [ 235.657176][ T5453] 8021q: adding VLAN 0 to HW filter on device eth10 [ 235.767044][ T5453] 8021q: adding VLAN 0 to HW filter on device eth11 [ 235.828800][T11560] hsr_slave_0: left promiscuous mode [ 235.830700][T11560] hsr_slave_1: left promiscuous mode [ 235.832486][T11560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.834733][T11560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.837238][T11560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.839422][T11560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.843172][T11560] veth1_macvtap: left promiscuous mode [ 235.844853][T11560] veth0_macvtap: left promiscuous mode [ 235.846584][T11560] veth1_vlan: left promiscuous mode [ 235.848196][T11560] veth0_vlan: left promiscuous mode [ 235.901520][T11560] team0 (unregistering): Port device team_slave_1 removed [ 235.911211][T11560] team0 (unregistering): Port device team_slave_0 removed [ 235.957460][ T5453] 8021q: adding VLAN 0 to HW filter on device eth12 [ 236.099039][ T5453] 8021q: adding VLAN 0 to HW filter on device eth13