last executing test programs: 21.20259404s ago: executing program 3 (id=4763): modify_ldt$write(0x1, &(0x7f0000000300)={0x9, 0x20000000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xa8}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0xb0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x701, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) 20.204953115s ago: executing program 3 (id=4766): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000300)={0x30, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x100, 0x0}) 19.91404771s ago: executing program 3 (id=4768): unshare(0x4020400) r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) 6.600443037s ago: executing program 2 (id=4810): openat$kvm(0x0, &(0x7f0000000300), 0x82140, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00'}) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000240)='\x00', 0x1, 0x800, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c6a7be57822013db999a640d02d2245ee4ad7539144477ce6c2555bfb1d0c5e8cac020a36d828f16af7ac616b1dac9883c0e391c377644bf95e9a229ad045843a8f44d14ea1af5a89cfef4c23b54cdff7de01cf", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090089000000"], 0x3c}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x80}, 0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 5.827169749s ago: executing program 2 (id=4812): write$binfmt_register(0xffffffffffffffff, &(0x7f0000027b40)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xffffffffffffffff, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyN', 0x3a, './file0'}, 0x1f5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 5.555521924s ago: executing program 1 (id=4814): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 5.365870816s ago: executing program 1 (id=4816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write$binfmt_misc(r3, &(0x7f00000000c0), 0xfdef) 5.197728699s ago: executing program 1 (id=4817): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 5.050155331s ago: executing program 1 (id=4819): openat$kvm(0x0, &(0x7f0000000300), 0x82140, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00'}) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000240)='\x00', 0x1, 0x800, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c6a7be57822013db999a640d02d2245ee4ad7539144477ce6c2555bfb1d0c5e8cac020a36d828f16af7ac616b1dac9883c0e391c377644bf95e9a229ad045843a8f44d14ea1af5a89cfef4c23b54cdff7de01cf", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090089000000"], 0x3c}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x80}, 0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 4.679939377s ago: executing program 1 (id=4820): syz_usb_connect(0x0, 0x36, &(0x7f0000004240)=ANY=[@ANYBLOB], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) 3.910477639s ago: executing program 2 (id=4823): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 3.602691164s ago: executing program 2 (id=4825): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.130121921s ago: executing program 0 (id=4827): openat$kvm(0x0, &(0x7f0000000300), 0x82140, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00'}) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000240)='\x00', 0x1, 0x800, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c6a7be57822013db999a640d02d2245ee4ad7539144477ce6c2555bfb1d0c5e8cac020a36d828f16af7ac616b1dac9883c0e391c377644bf95e9a229ad045843a8f44d14ea1af5a89cfef4c23b54cdff7de01cf", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090089000000"], 0x3c}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x80}, 0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2.997643663s ago: executing program 3 (id=4770): open(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0x12, 0x4, "6ac142dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) epoll_create1(0x80000) pipe2(0x0, 0x4000) 2.691726228s ago: executing program 0 (id=4828): ioperm(0x6, 0x88, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, 0x0, &(0x7f0000000540), 0x6c}, 0x38) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x918) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001"], 0x122}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r10, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)={0x14, 0xd, 0x6, 0x3}, 0x14}}, 0x80) 1.540917786s ago: executing program 0 (id=4829): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_notify(r1, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) 1.482171357s ago: executing program 1 (id=4830): write$binfmt_register(0xffffffffffffffff, &(0x7f0000027b40)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xffffffffffffffff, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyN', 0x3a, './file0'}, 0x1f5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 552.336201ms ago: executing program 2 (id=4831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x3, 0xfff3}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x200400d4) 404.361304ms ago: executing program 3 (id=4833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) write$binfmt_misc(r2, &(0x7f00000000c0), 0xfdef) 306.280695ms ago: executing program 0 (id=4834): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write(r0, &(0x7f0000000240)="b6b0a58ec9c4fde9", 0x8) socket(0x2, 0x80805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 223.830697ms ago: executing program 0 (id=4835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000883ec000000000001000000000000040004800500030001000000090001"], 0x34}}, 0x0) 201.649267ms ago: executing program 3 (id=4836): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 52.308279ms ago: executing program 0 (id=4837): openat$kvm(0x0, &(0x7f0000000300), 0x82140, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00'}) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000240)='\x00', 0x1, 0x800, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c6a7be57822013db999a640d02d2245ee4ad7539144477ce6c2555bfb1d0c5e8cac020a36d828f16af7ac616b1dac9883c0e391c377644bf95e9a229ad045843a8f44d14ea1af5a89cfef4c23b54cdff7de01cf", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090089000000"], 0x3c}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x80}, 0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 0s ago: executing program 2 (id=4838): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 1: config 0 has no interface number 0 [ 1574.085168][ T5250] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1574.095519][ T5250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.263830][ T5250] usb 3-1: Product: syz [ 1574.456738][T20286] vxfs: WRONG superblock magic 00000000 at 1 [ 1574.462936][T20286] vxfs: WRONG superblock magic 00000000 at 8 [ 1574.468918][T20286] vxfs: can't find superblock. [ 1574.475143][ T5250] usb 3-1: Manufacturer: syz [ 1574.480076][ T5250] usb 3-1: SerialNumber: syz [ 1574.490515][ T5250] usb 3-1: config 0 descriptor?? [ 1574.502379][ T5250] hub 3-1:0.145: bad descriptor, ignoring hub [ 1574.509116][ T5250] hub: probe of 3-1:0.145 failed with error -5 [ 1574.522418][ T5250] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input46 [ 1575.233290][T20303] vxfs: WRONG superblock magic 00000000 at 1 [ 1575.239542][T20303] vxfs: WRONG superblock magic 00000000 at 8 [ 1575.245642][T20303] vxfs: can't find superblock. [ 1575.369495][ T8] usb 1-1: USB disconnect, device number 33 [ 1575.586747][ T9] usb 3-1: USB disconnect, device number 49 [ 1576.323003][T20316] 9pnet_fd: Insufficient options for proto=fd [ 1576.825247][T20327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3579'. [ 1577.545342][T20340] loop2: detected capacity change from 0 to 7 [ 1577.656642][T20341] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1577.779863][T20340] Dev loop2: unable to read RDB block 7 [ 1577.785674][T20340] loop2: AHDI p1 p2 p3 [ 1577.790151][T20340] loop2: partition table partially beyond EOD, truncated [ 1577.798191][T20340] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1577.805174][T20340] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1578.540981][T20349] 9pnet_fd: Insufficient options for proto=fd [ 1579.300177][T20351] vxfs: WRONG superblock magic 00000000 at 1 [ 1579.306353][T20351] vxfs: WRONG superblock magic 00000000 at 8 [ 1579.312566][T20351] vxfs: can't find superblock. [ 1579.877070][T20332] block nbd2: shutting down sockets [ 1581.968375][T20390] vxfs: WRONG superblock magic 00000000 at 1 [ 1581.975811][T20390] vxfs: WRONG superblock magic 00000000 at 8 [ 1581.981943][T20390] vxfs: can't find superblock. [ 1582.059871][T20384] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1582.178563][T20392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3595'. [ 1582.284927][T20394] 9pnet_fd: Insufficient options for proto=fd [ 1583.041194][T20409] vxfs: WRONG superblock magic 00000000 at 1 [ 1583.048349][T20409] vxfs: WRONG superblock magic 00000000 at 8 [ 1583.054510][T20409] vxfs: can't find superblock. [ 1583.445940][T20407] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1584.390753][T14252] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1584.589753][T14252] usb 3-1: Using ep0 maxpacket: 8 [ 1584.603019][T14252] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1584.611061][T20412] block nbd1: shutting down sockets [ 1584.616227][T14252] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1584.632474][T14252] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1584.653943][T14252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.692299][T14252] usb 3-1: config 0 descriptor?? [ 1584.705440][T14252] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1585.172668][T20435] vxfs: WRONG superblock magic 00000000 at 1 [ 1585.183231][T20435] vxfs: WRONG superblock magic 00000000 at 8 [ 1585.189321][T20435] vxfs: can't find superblock. [ 1585.675075][T20448] vxfs: WRONG superblock magic 00000000 at 1 [ 1585.682379][T20448] vxfs: WRONG superblock magic 00000000 at 8 [ 1585.688422][T20448] vxfs: can't find superblock. [ 1585.752007][T20446] ceph: No mds server is up or the cluster is laggy [ 1585.759907][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 1585.890876][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 1587.127880][T14252] usb 3-1: USB disconnect, device number 50 [ 1587.796210][T20467] block nbd1: shutting down sockets [ 1588.256531][T20478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3617'. [ 1589.259396][T14252] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1589.432808][T20501] vxfs: WRONG superblock magic 00000000 at 1 [ 1589.439323][T20501] vxfs: WRONG superblock magic 00000000 at 8 [ 1589.445349][T20501] vxfs: can't find superblock. [ 1589.457493][T20491] ceph: No mds server is up or the cluster is laggy [ 1589.464929][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 1589.473233][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 1589.779263][T14252] usb 3-1: Using ep0 maxpacket: 8 [ 1589.796914][T14252] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1589.812765][T14252] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1589.827052][T14252] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1589.854051][T14252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.886036][T14252] usb 3-1: config 0 descriptor?? [ 1589.906265][T14252] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1590.000043][T20498] vxfs: WRONG superblock magic 00000000 at 1 [ 1590.006327][T20498] vxfs: WRONG superblock magic 00000000 at 8 [ 1590.012762][T20498] vxfs: can't find superblock. [ 1590.541898][T20509] block nbd3: shutting down sockets [ 1592.167068][T14252] usb 3-1: USB disconnect, device number 51 [ 1592.730369][T20542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3634'. [ 1593.515194][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 1593.554479][T20544] ceph: No mds server is up or the cluster is laggy [ 1593.609027][T20547] vxfs: WRONG superblock magic 00000000 at 1 [ 1593.616267][T20547] vxfs: WRONG superblock magic 00000000 at 8 [ 1593.622342][T20547] vxfs: can't find superblock. [ 1593.826580][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 1595.718855][T14252] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1595.968934][T14252] usb 3-1: Using ep0 maxpacket: 8 [ 1596.421600][T14252] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1596.509539][T14252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1596.539206][T14252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1596.648894][T14252] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1596.660072][T14252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.683815][T14252] usb 3-1: config 0 descriptor?? [ 1596.715595][T14252] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1598.679582][T20605] vxfs: WRONG superblock magic 00000000 at 1 [ 1598.679712][T20605] vxfs: WRONG superblock magic 00000000 at 8 [ 1598.679720][T20605] vxfs: can't find superblock. [ 1598.810143][T20601] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1598.959097][ T9] usb 3-1: USB disconnect, device number 52 [ 1598.988700][T14252] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1600.099147][T14252] usb 2-1: Using ep0 maxpacket: 16 [ 1601.518638][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1601.801810][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1601.827450][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1601.838655][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1601.850426][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1601.862105][ T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1602.608870][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1602.622216][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1602.633519][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1602.643330][ T9] usb 4-1: Product: syz [ 1602.647749][ T9] usb 4-1: Manufacturer: syz [ 1602.660906][ T9] usb 4-1: SerialNumber: syz [ 1602.689606][ T9] usb 4-1: config 0 descriptor?? [ 1602.736865][ T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1602.803940][ T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1602.812978][T14252] usb 2-1: device descriptor read/all, error -71 [ 1602.824320][T20645] input: syz1 as /devices/virtual/input/input47 [ 1603.198480][T14252] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1603.388448][T14252] usb 2-1: Using ep0 maxpacket: 8 [ 1603.408113][T14252] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1603.428216][T14252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1603.439289][T14252] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1603.452724][T14252] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1603.462497][T14252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.484932][T14252] usb 2-1: config 0 descriptor?? [ 1603.517673][T14252] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1604.918714][T20661] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1605.166599][T14252] usb 4-1: USB disconnect, device number 35 [ 1605.216302][T14252] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1606.752696][ T787] usb 2-1: USB disconnect, device number 37 [ 1607.698700][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.705059][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.947871][T20694] vxfs: WRONG superblock magic 00000000 at 1 [ 1608.948173][T20694] vxfs: WRONG superblock magic 00000000 at 8 [ 1608.948187][T20694] vxfs: can't find superblock. [ 1609.010848][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 1609.027729][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 1609.055634][T20699] ceph: No mds server is up or the cluster is laggy [ 1611.618422][T20736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3684'. [ 1612.059416][T20733] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1612.328092][ T787] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1612.517943][T20388] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1612.748022][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 1612.755667][ T787] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1612.777624][ T787] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1612.800137][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.820046][T20388] usb 3-1: Using ep0 maxpacket: 8 [ 1612.823111][ T787] usb 1-1: Product: syz [ 1612.841471][ T787] usb 1-1: Manufacturer: syz [ 1612.846261][ T787] usb 1-1: SerialNumber: syz [ 1612.847032][T20388] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1612.869933][ T787] usb 1-1: config 0 descriptor?? [ 1612.893051][T20388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1612.917924][T20388] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1612.957861][T20388] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1612.977268][T20388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.030234][T20388] usb 3-1: config 0 descriptor?? [ 1613.058862][T20388] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1613.091195][T14252] usb 1-1: USB disconnect, device number 34 [ 1613.237869][ T787] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1613.477869][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 1613.513882][ T787] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1613.563590][ T787] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1613.579243][ T787] usb 2-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1613.595720][ T787] usb 2-1: Product: syz [ 1613.603347][ T787] usb 2-1: Manufacturer: syz [ 1613.616467][ T787] usb 2-1: SerialNumber: syz [ 1613.628311][ T787] usb 2-1: config 0 descriptor?? [ 1614.161964][ T787] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1614.227898][ T787] gspca_sunplus: reg_w_riv err -71 [ 1614.247887][ T787] sunplus: probe of 2-1:0.0 failed with error -71 [ 1614.256551][ T787] usb 2-1: USB disconnect, device number 38 [ 1614.947638][T20771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3693'. [ 1615.974777][T14252] usb 3-1: USB disconnect, device number 53 [ 1616.250932][T20790] loop2: detected capacity change from 0 to 7 [ 1616.312702][T20791] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1616.921296][T20790] Dev loop2: unable to read RDB block 7 [ 1616.926909][T20790] loop2: AHDI p1 p2 p3 [ 1616.931192][T20790] loop2: partition table partially beyond EOD, truncated [ 1616.938431][T20790] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1616.945196][T20790] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1619.517880][T20822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3704'. [ 1620.248945][T20824] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1620.523313][T20826] vxfs: WRONG superblock magic 00000000 at 1 [ 1620.539831][T20826] vxfs: WRONG superblock magic 00000000 at 8 [ 1620.545913][T20826] vxfs: can't find superblock. [ 1621.237816][ T9365] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1621.315480][T20836] loop2: detected capacity change from 0 to 7 [ 1621.322650][T20836] Dev loop2: unable to read RDB block 7 [ 1621.328384][T20836] loop2: AHDI p1 p2 p3 [ 1621.332566][T20836] loop2: partition table partially beyond EOD, truncated [ 1621.339934][T20836] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1621.346721][T20836] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1621.358562][T20836] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1622.008107][ T9365] usb 2-1: Using ep0 maxpacket: 16 [ 1622.071618][ T9365] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1622.110593][ T9365] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1622.130518][ T9365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.152940][ T9365] usb 2-1: config 0 descriptor?? [ 1622.850183][ T9365] usbhid 2-1:0.0: can't add hid device: -71 [ 1622.856251][ T9365] usbhid: probe of 2-1:0.0 failed with error -71 [ 1622.894492][ T9365] usb 2-1: USB disconnect, device number 39 [ 1625.643961][T20858] ceph: No mds server is up or the cluster is laggy [ 1625.647302][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 1625.647450][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 1625.696240][T20868] vxfs: WRONG superblock magic 00000000 at 1 [ 1625.702612][T20868] vxfs: WRONG superblock magic 00000000 at 8 [ 1625.708959][T20868] vxfs: can't find superblock. [ 1626.043313][T20870] vxfs: WRONG superblock magic 00000000 at 1 [ 1626.049729][T20870] vxfs: WRONG superblock magic 00000000 at 8 [ 1626.055782][T20870] vxfs: can't find superblock. [ 1627.985972][T20902] block nbd2: shutting down sockets [ 1628.407257][T14252] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1628.848934][T14252] usb 4-1: Using ep0 maxpacket: 16 [ 1628.863722][T14252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.899803][T14252] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1628.909377][T14252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.929489][T14252] usb 4-1: config 0 descriptor?? [ 1629.877559][T14252] usbhid 4-1:0.0: can't add hid device: -71 [ 1629.884471][T14252] usbhid: probe of 4-1:0.0 failed with error -71 [ 1629.921287][T14252] usb 4-1: USB disconnect, device number 36 [ 1629.993942][ T9931] libceph: connect (1)[c::]:6789 error -101 [ 1630.000646][ T9931] libceph: mon0 (1)[c::]:6789 connect error [ 1630.103950][T20932] ceph: No mds server is up or the cluster is laggy [ 1630.152318][T20932] vxfs: WRONG superblock magic 00000000 at 1 [ 1630.159973][T20932] vxfs: WRONG superblock magic 00000000 at 8 [ 1630.165988][T20932] vxfs: can't find superblock. [ 1631.406876][T20388] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1632.197364][T20388] usb 4-1: device descriptor read/64, error -71 [ 1632.476860][T20388] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1632.646840][T20388] usb 4-1: device descriptor read/64, error -71 [ 1633.456962][T20388] usb usb4-port1: attempt power cycle [ 1633.572301][T20965] block nbd2: shutting down sockets [ 1634.133880][T20989] loop2: detected capacity change from 0 to 7 [ 1634.235116][T20990] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1634.716713][T20388] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1634.729606][T20989] Dev loop2: unable to read RDB block 7 [ 1634.735333][T20989] loop2: AHDI p1 p2 p3 [ 1634.739672][T20989] loop2: partition table partially beyond EOD, truncated [ 1634.747021][T20989] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1634.753811][T20989] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1635.053501][T20388] usb 4-1: device descriptor read/8, error -71 [ 1636.402788][T20693] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1636.586588][T20693] usb 2-1: Using ep0 maxpacket: 8 [ 1636.620051][T20693] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1636.666599][T20693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1636.806366][T20693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1636.837860][T20693] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1636.978038][T20693] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1637.098647][T20693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.473963][T20693] usb 2-1: config 0 descriptor?? [ 1638.002361][T21023] loop2: detected capacity change from 0 to 7 [ 1638.087817][T21024] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1638.107160][ T9931] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1638.144633][T21023] Dev loop2: unable to read RDB block 7 [ 1638.150534][T21023] loop2: AHDI p1 p2 p3 [ 1638.154874][T21023] loop2: partition table partially beyond EOD, truncated [ 1638.162825][T21023] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1638.169828][T21023] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1638.448158][ T9931] usb 1-1: device descriptor read/64, error -71 [ 1638.687863][T20693] usbhid 2-1:0.0: can't add hid device: -71 [ 1638.706488][T20693] usbhid: probe of 2-1:0.0 failed with error -71 [ 1638.720039][T20693] usb 2-1: USB disconnect, device number 40 [ 1639.005247][ T9931] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1639.286039][T20388] libceph: connect (1)[c::]:6789 error -101 [ 1639.304732][T20388] libceph: mon0 (1)[c::]:6789 connect error [ 1639.326691][T21029] ceph: No mds server is up or the cluster is laggy [ 1639.365634][ T9931] usb 1-1: device descriptor read/64, error -71 [ 1639.391964][T21029] vxfs: WRONG superblock magic 00000000 at 1 [ 1639.399519][T21029] vxfs: WRONG superblock magic 00000000 at 8 [ 1639.405551][T21029] vxfs: can't find superblock. [ 1639.582386][ T9931] usb usb1-port1: attempt power cycle [ 1642.210102][T21037] block nbd3: shutting down sockets [ 1642.988124][ T5863] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1643.216391][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 1643.230596][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.286229][ T5863] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1643.299413][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.315515][ T5863] usb 3-1: config 0 descriptor?? [ 1643.396507][ T787] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1643.616182][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 1643.634244][ T787] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1643.656733][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.668917][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1643.685899][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1643.721786][ T787] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1643.739053][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.758435][ T787] usb 2-1: config 0 descriptor?? [ 1643.943807][ T5863] usbhid 3-1:0.0: can't add hid device: -71 [ 1643.955890][ T5863] usbhid: probe of 3-1:0.0 failed with error -71 [ 1643.970950][ T5863] usb 3-1: USB disconnect, device number 54 [ 1644.066182][ T9365] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1644.185238][ T787] usbhid 2-1:0.0: can't add hid device: -71 [ 1644.195343][ T787] usbhid: probe of 2-1:0.0 failed with error -71 [ 1644.214421][ T787] usb 2-1: USB disconnect, device number 41 [ 1644.236361][ T9365] usb 4-1: device descriptor read/64, error -71 [ 1644.509668][ T9365] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1644.686248][ T9365] usb 4-1: device descriptor read/64, error -71 [ 1644.844912][T21084] vxfs: WRONG superblock magic 00000000 at 1 [ 1644.851307][T21084] vxfs: WRONG superblock magic 00000000 at 8 [ 1644.857371][T21084] vxfs: can't find superblock. [ 1644.979048][T21088] vxfs: WRONG superblock magic 00000000 at 1 [ 1644.986397][T21088] vxfs: WRONG superblock magic 00000000 at 8 [ 1644.992449][T21088] vxfs: can't find superblock. [ 1645.094318][T21086] ceph: No mds server is up or the cluster is laggy [ 1645.109908][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 1645.203070][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 1645.323451][ T9365] usb usb4-port1: attempt power cycle [ 1645.977825][T21098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3777'. [ 1646.488752][ T9365] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1646.576148][ T9365] usb 4-1: device descriptor read/8, error -71 [ 1646.956277][ T9365] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1647.638395][ T9365] usb 4-1: device descriptor read/8, error -71 [ 1647.756318][ T9365] usb usb4-port1: unable to enumerate USB device [ 1647.917672][T21100] block nbd2: shutting down sockets [ 1648.172985][T21123] vxfs: WRONG superblock magic 00000000 at 1 [ 1648.179496][T21123] vxfs: WRONG superblock magic 00000000 at 8 [ 1648.185549][T21123] vxfs: can't find superblock. [ 1648.286246][ T9365] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1649.275913][ T9365] usb 4-1: Using ep0 maxpacket: 16 [ 1649.348957][ T9365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.363042][ T9365] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1649.373192][ T9365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.396567][ T9365] usb 4-1: config 0 descriptor?? [ 1650.108397][T21136] ceph: No mds server is up or the cluster is laggy [ 1650.194868][T21145] vxfs: WRONG superblock magic 00000000 at 1 [ 1650.201236][T21145] vxfs: WRONG superblock magic 00000000 at 8 [ 1650.207292][T21145] vxfs: can't find superblock. [ 1650.644669][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 1650.650821][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 1650.684868][ T9365] usbhid 4-1:0.0: can't add hid device: -71 [ 1650.723238][ T9365] usbhid: probe of 4-1:0.0 failed with error -71 [ 1650.756851][ T9365] usb 4-1: USB disconnect, device number 45 [ 1651.079114][T21153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3789'. [ 1653.935461][ T5863] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1654.141917][ T5863] usb 1-1: device descriptor read/64, error -71 [ 1654.495687][ T5863] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1655.311229][T21172] block nbd2: shutting down sockets [ 1656.825519][ T5863] usb 1-1: device descriptor read/64, error -71 [ 1656.956476][ T5863] usb usb1-port1: attempt power cycle [ 1657.585432][ T5863] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1658.377296][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 1658.397300][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.415488][ T5863] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1658.424671][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.446065][ T5863] usb 1-1: config 0 descriptor?? [ 1659.684952][ T5863] usbhid 1-1:0.0: can't add hid device: -71 [ 1659.691045][ T5863] usbhid: probe of 1-1:0.0 failed with error -71 [ 1659.700066][ T5863] usb 1-1: USB disconnect, device number 40 [ 1660.406202][ T9365] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1660.639344][ T9365] usb 1-1: Using ep0 maxpacket: 8 [ 1660.691861][ T9365] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.772322][ T9365] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1660.867097][ T9365] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1660.953009][ T9365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.678449][ T5824] usb 1-1: USB disconnect, device number 41 [ 1662.254809][T21238] vxfs: WRONG superblock magic 00000000 at 1 [ 1662.261030][T21238] vxfs: WRONG superblock magic 00000000 at 8 [ 1662.267069][T21238] vxfs: can't find superblock. [ 1663.669338][T21236] block nbd1: shutting down sockets [ 1664.525008][ T9365] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1664.735041][ T9365] usb 1-1: Using ep0 maxpacket: 16 [ 1664.765318][ T9365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1664.827599][ T9365] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1664.838390][ T9365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.871935][ T9365] usb 1-1: config 0 descriptor?? [ 1665.355315][ T787] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1665.543402][ T9365] usbhid 1-1:0.0: can't add hid device: -71 [ 1665.605333][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 1665.632345][ T9365] usbhid: probe of 1-1:0.0 failed with error -71 [ 1665.701949][ T787] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.805666][ T9365] usb 1-1: USB disconnect, device number 42 [ 1665.848499][ T787] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1665.874954][ T787] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1665.894637][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.156347][ T9365] usb 4-1: USB disconnect, device number 46 [ 1668.312497][T21285] block nbd1: shutting down sockets [ 1668.848338][T21309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3835'. [ 1669.085756][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.092215][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.994929][ T9365] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1671.044806][ T9365] usb 3-1: Using ep0 maxpacket: 16 [ 1671.080879][ T9365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1671.155110][ T9365] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1671.192124][T14252] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1671.233352][ T9365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.350300][ T9365] usb 3-1: config 0 descriptor?? [ 1671.459441][T14252] usb 1-1: Using ep0 maxpacket: 8 [ 1671.556519][T14252] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.711896][T14252] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1671.791898][T14252] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1671.822346][T14252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.071547][ T787] usb 1-1: USB disconnect, device number 43 [ 1672.254811][ T9365] usbhid 3-1:0.0: can't add hid device: -71 [ 1672.260792][ T9365] usbhid: probe of 3-1:0.0 failed with error -71 [ 1672.297601][ T9365] usb 3-1: USB disconnect, device number 55 [ 1672.517425][T21342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3847'. [ 1674.112563][T21337] block nbd1: shutting down sockets [ 1677.833288][T21374] loop2: detected capacity change from 0 to 7 [ 1677.848913][T21371] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1677.910347][T21374] Dev loop2: unable to read RDB block 7 [ 1677.916074][T21374] loop2: AHDI p1 p2 p3 [ 1677.920279][T21374] loop2: partition table partially beyond EOD, truncated [ 1677.927581][T21374] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1677.934438][T21374] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1678.063590][T21377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3858'. [ 1678.584555][ T9365] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1678.604298][T14252] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1679.474205][ T9365] usb 3-1: Using ep0 maxpacket: 8 [ 1679.485054][ T9365] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1679.495652][ T9365] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.507727][ T9365] usb 3-1: config 179 has no interface number 0 [ 1679.514608][ T9365] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1679.526397][ T9365] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1679.541948][ T9365] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1679.564347][ T9365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.634274][T14252] usb 1-1: Using ep0 maxpacket: 16 [ 1679.851600][T14252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1680.700369][T14252] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1680.715370][T14252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.733214][T14252] usb 1-1: config 0 descriptor?? [ 1680.786143][ T28] usb 3-1: USB disconnect, device number 56 [ 1681.629178][T14252] usbhid 1-1:0.0: can't add hid device: -71 [ 1681.635543][T14252] usbhid: probe of 1-1:0.0 failed with error -71 [ 1681.645646][T14252] usb 1-1: USB disconnect, device number 44 [ 1683.007183][T21416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3871'. [ 1683.411066][T21417] loop2: detected capacity change from 0 to 7 [ 1683.426164][T21412] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1683.474765][T21417] Dev loop2: unable to read RDB block 7 [ 1683.480421][T21417] loop2: AHDI p1 p2 p3 [ 1683.484743][T21417] loop2: partition table partially beyond EOD, truncated [ 1683.491991][T21417] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1683.498870][T21417] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1684.758128][T21430] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1686.243787][ T5824] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1686.677771][ T5824] usb 2-1: Using ep0 maxpacket: 8 [ 1686.753596][T21461] loop2: detected capacity change from 0 to 7 [ 1687.042577][T21462] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1687.549119][T21461] Dev loop2: unable to read RDB block 7 [ 1687.554915][T21461] loop2: AHDI p1 p2 p3 [ 1687.559299][T21461] loop2: partition table partially beyond EOD, truncated [ 1687.567803][T21461] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1687.574721][T21461] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1688.027370][T21463] ceph: No mds server is up or the cluster is laggy [ 1688.028980][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 1688.029089][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 1688.034791][ T5824] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1688.034809][ T5824] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.034819][ T5824] usb 2-1: config 179 has no interface number 0 [ 1688.034841][ T5824] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1688.034853][ T5824] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1688.034875][ T5824] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1688.034887][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.060243][T21466] vxfs: WRONG superblock magic 00000000 at 1 [ 1688.128785][T21466] vxfs: WRONG superblock magic 00000000 at 8 [ 1688.134797][T21466] vxfs: can't find superblock. [ 1688.379349][ T9365] usb 2-1: USB disconnect, device number 42 [ 1688.463684][ T5863] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1689.203813][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 1689.222081][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.667702][ T5863] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1689.683623][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.704458][ T5863] usb 3-1: config 0 descriptor?? [ 1689.877780][T21443] block nbd3: shutting down sockets [ 1690.318725][ T5863] usbhid 3-1:0.0: can't add hid device: -71 [ 1690.766835][ T5863] usbhid: probe of 3-1:0.0 failed with error -71 [ 1690.778901][ T5863] usb 3-1: USB disconnect, device number 57 [ 1692.815111][T21512] loop2: detected capacity change from 0 to 7 [ 1692.881458][T21513] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1693.155324][T21512] Dev loop2: unable to read RDB block 7 [ 1693.165774][T21512] loop2: AHDI p1 p2 p3 [ 1693.227750][T21512] loop2: partition table partially beyond EOD, truncated [ 1693.373429][T21512] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1693.403740][T21512] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1693.913489][T21518] vxfs: WRONG superblock magic 00000000 at 1 [ 1693.920716][T21518] vxfs: WRONG superblock magic 00000000 at 8 [ 1693.926859][T21518] vxfs: can't find superblock. [ 1694.027598][T21516] ceph: No mds server is up or the cluster is laggy [ 1694.100869][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 1694.107344][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 1694.500736][T21524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3896'. [ 1695.089556][T21499] syz.1.3892: attempt to access beyond end of device [ 1695.089556][T21499] loop1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1695.102998][T21499] gfs2: error 10 reading superblock [ 1696.473239][T14252] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1696.508707][T21525] block nbd3: shutting down sockets [ 1696.673275][ T28] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1696.863297][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 1697.072080][ T28] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1697.125813][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1697.133189][T14252] usb 1-1: Using ep0 maxpacket: 8 [ 1697.140653][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1697.152025][ T28] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1697.164410][T14252] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1697.166077][ T28] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1697.183121][T14252] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.187679][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.274083][ T28] usb 3-1: config 0 descriptor?? [ 1697.284027][T14252] usb 1-1: config 179 has no interface number 0 [ 1697.313212][T14252] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1697.342830][T14252] usb 1-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1697.373925][T14252] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1697.522243][T14252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.638957][T21549] loop2: detected capacity change from 0 to 7 [ 1697.725720][T21550] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1698.104677][T21549] Dev loop2: unable to read RDB block 7 [ 1698.110407][T21549] loop2: AHDI p1 p2 p3 [ 1698.114829][T21549] loop2: partition table partially beyond EOD, truncated [ 1698.122817][T21549] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1698.129784][T21549] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1698.332240][ T28] usbhid 3-1:0.0: can't add hid device: -71 [ 1698.340478][ T28] usbhid: probe of 3-1:0.0 failed with error -71 [ 1698.353318][ T28] usb 3-1: USB disconnect, device number 58 [ 1698.366357][ T787] usb 1-1: USB disconnect, device number 45 [ 1701.925688][T21576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3913'. [ 1702.132464][T21586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3908'. [ 1702.353113][T14252] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1702.410571][T21579] loop2: detected capacity change from 0 to 7 [ 1702.451318][T21579] Dev loop2: unable to read RDB block 7 [ 1702.513159][T21590] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1702.619776][T21579] loop2: AHDI p1 p2 p3 [ 1702.642923][T14252] usb 1-1: Using ep0 maxpacket: 8 [ 1702.672687][T14252] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1702.727600][T21579] loop2: partition table partially beyond EOD, truncated [ 1702.822974][T14252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1702.843129][T21579] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1702.855376][T21579] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1702.873452][T14252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1702.899836][T14252] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1702.922878][ T28] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1702.964439][T14252] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1703.003921][T14252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.058257][T14252] usb 1-1: config 0 descriptor?? [ 1703.132932][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 1703.163787][ T28] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1703.188892][ T28] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.209248][ T28] usb 4-1: config 179 has no interface number 0 [ 1703.219380][ T28] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1703.242796][ T28] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1703.280191][ T28] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1703.317066][ T28] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1703.338514][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.378079][T21588] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1703.473394][T14252] redragon 0003:0C45:760B.0040: unknown main item tag 0x6 [ 1703.494953][T14252] redragon 0003:0C45:760B.0040: item fetching failed at offset 7/133 [ 1703.521608][T14252] redragon: probe of 0003:0C45:760B.0040 failed with error -22 [ 1703.615070][T14252] usb 4-1: USB disconnect, device number 47 [ 1703.676613][ T787] usb 1-1: USB disconnect, device number 46 [ 1703.910514][T21591] block nbd1: shutting down sockets [ 1704.204921][ T28] libceph: connect (1)[c::]:6789 error -101 [ 1704.210989][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 1704.237495][T21603] ceph: No mds server is up or the cluster is laggy [ 1704.316981][T21603] vxfs: WRONG superblock magic 00000000 at 1 [ 1704.323597][T21603] vxfs: WRONG superblock magic 00000000 at 8 [ 1704.329604][T21603] vxfs: can't find superblock. [ 1705.422764][ T28] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1705.616004][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 1705.629120][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.660512][ T28] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1705.676676][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.699248][ T28] usb 4-1: config 0 descriptor?? [ 1706.071841][T21627] vxfs: WRONG superblock magic 00000000 at 1 [ 1706.078094][T21627] vxfs: WRONG superblock magic 00000000 at 8 [ 1706.084172][T21627] vxfs: can't find superblock. [ 1706.457020][ T28] usbhid 4-1:0.0: can't add hid device: -71 [ 1706.466199][ T28] usbhid: probe of 4-1:0.0 failed with error -71 [ 1706.485458][ T28] usb 4-1: USB disconnect, device number 48 [ 1707.225858][T21639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3927'. [ 1708.132574][ T787] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1709.382644][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 1709.389614][ T787] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1709.398220][ T787] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.415527][ T787] usb 4-1: config 179 has no interface number 0 [ 1709.422854][ T787] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1709.451230][ T787] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1709.467161][ T787] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1709.481542][ T787] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1709.493632][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.628481][T21644] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1709.771268][T21646] block nbd0: shutting down sockets [ 1709.798136][T20388] libceph: connect (1)[c::]:6789 error -101 [ 1709.804386][T20388] libceph: mon0 (1)[c::]:6789 connect error [ 1709.852458][T21662] ceph: No mds server is up or the cluster is laggy [ 1709.935979][T21662] vxfs: WRONG superblock magic 00000000 at 1 [ 1709.956135][T20693] usb 4-1: USB disconnect, device number 49 [ 1709.963777][T21662] vxfs: WRONG superblock magic 00000000 at 8 [ 1709.972618][T21662] vxfs: can't find superblock. [ 1710.823191][T21674] vxfs: WRONG superblock magic 00000000 at 1 [ 1710.829349][T21674] vxfs: WRONG superblock magic 00000000 at 8 [ 1710.835426][T21674] vxfs: can't find superblock. [ 1710.971982][T21682] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1711.927767][T20693] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1712.886181][T20693] usb 1-1: Using ep0 maxpacket: 16 [ 1712.900331][T20693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1712.921448][T20693] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1713.946437][T20693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.355868][T20693] usb 1-1: config 0 descriptor?? [ 1714.602304][T20693] usbhid 1-1:0.0: can't add hid device: -71 [ 1714.632362][T20693] usbhid: probe of 1-1:0.0 failed with error -71 [ 1714.673130][T20693] usb 1-1: USB disconnect, device number 47 [ 1715.320094][T21700] block nbd1: shutting down sockets [ 1715.472751][T20388] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1715.798826][T20388] usb 4-1: Using ep0 maxpacket: 8 [ 1715.844458][T20388] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1716.131027][T20388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1716.142096][T20388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1716.151921][T20388] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1716.167020][T20388] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1716.177486][T20388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.794018][T20388] usb 4-1: config 0 descriptor?? [ 1717.064584][T21725] vxfs: WRONG superblock magic 00000000 at 1 [ 1717.070799][T21725] vxfs: WRONG superblock magic 00000000 at 8 [ 1717.076847][T21725] vxfs: can't find superblock. [ 1717.214829][T20388] redragon 0003:0C45:760B.0041: unknown main item tag 0x6 [ 1717.229571][T20388] redragon 0003:0C45:760B.0041: item fetching failed at offset 7/133 [ 1717.238571][T20388] redragon: probe of 0003:0C45:760B.0041 failed with error -22 [ 1717.435102][T20388] usb 4-1: USB disconnect, device number 50 [ 1720.031957][ T787] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1720.305300][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 1720.407476][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.585786][ T787] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1720.622131][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.659999][ T787] usb 1-1: config 0 descriptor?? [ 1721.379440][ T787] usbhid 1-1:0.0: can't add hid device: -71 [ 1721.612273][T21763] vxfs: WRONG superblock magic 00000000 at 1 [ 1721.618504][T21763] vxfs: WRONG superblock magic 00000000 at 8 [ 1721.624584][T21763] vxfs: can't find superblock. [ 1721.941838][ T787] usbhid: probe of 1-1:0.0 failed with error -71 [ 1721.972804][ T787] usb 1-1: USB disconnect, device number 48 [ 1722.542104][T21773] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1724.102762][T21750] block nbd1: shutting down sockets [ 1725.797467][T21786] netlink: 'syz.3.3965': attribute type 10 has an invalid length. [ 1726.237262][T21786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1726.247947][T21786] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1728.946000][T21804] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1729.690494][T21801] block nbd0: shutting down sockets [ 1730.501870][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.508213][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.611719][T21817] vxfs: WRONG superblock magic 00000000 at 1 [ 1730.617874][T21817] vxfs: WRONG superblock magic 00000000 at 8 [ 1730.623992][T21817] vxfs: can't find superblock. [ 1732.759859][T20388] libceph: connect (1)[c::]:6789 error -101 [ 1732.766220][T20388] libceph: mon0 (1)[c::]:6789 connect error [ 1732.772436][T21839] ceph: No mds server is up or the cluster is laggy [ 1732.816472][T21839] vxfs: WRONG superblock magic 00000000 at 1 [ 1732.822923][T21839] vxfs: WRONG superblock magic 00000000 at 8 [ 1732.828903][T21839] vxfs: can't find superblock. [ 1734.441291][ T787] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1734.558329][T21862] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1735.811007][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 1735.852108][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.910999][ T787] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1735.966851][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.135113][ T787] usb 3-1: config 0 descriptor?? [ 1737.166029][ T787] usbhid 3-1:0.0: can't add hid device: -71 [ 1737.181017][ T787] usbhid: probe of 3-1:0.0 failed with error -71 [ 1737.196914][ T787] usb 3-1: USB disconnect, device number 59 [ 1739.593329][T21880] block nbd1: shutting down sockets [ 1746.232514][T21945] block nbd1: shutting down sockets [ 1747.250559][ T9931] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1747.590357][ T9931] usb 4-1: Using ep0 maxpacket: 8 [ 1747.598454][ T9931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1747.610480][ T9931] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 1747.618877][ T9931] usb 4-1: config 7 has no interface number 0 [ 1748.384126][ T9931] usb 4-1: language id specifier not provided by device, defaulting to English [ 1748.412206][ T9931] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1748.425566][ T9931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.440933][ T9931] usb 4-1: Product: syz [ 1748.445359][ T9931] usb 4-1: Manufacturer: syz [ 1748.463189][ T9931] usb 4-1: SerialNumber: syz [ 1748.710313][ T9365] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1748.718142][ T9931] usbhid 4-1:7.67: couldn't find an input interrupt endpoint [ 1748.747753][ T9931] usb 4-1: USB disconnect, device number 51 [ 1748.900944][ T9365] usb 2-1: Using ep0 maxpacket: 8 [ 1748.933003][ T9365] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1748.957848][ T9365] usb 2-1: config 179 has no interface number 0 [ 1748.964914][ T9365] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1748.981253][ T9365] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1748.996365][ T9365] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1749.007928][ T9365] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1749.025767][ T9365] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1749.045189][ T9365] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1749.055933][ T9365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.072210][T21974] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1749.099051][ T9365] xpad: probe of 2-1:179.65 failed with error -5 [ 1749.872460][T21984] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1749.976000][ T9365] usb 2-1: USB disconnect, device number 43 [ 1752.910126][T22000] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1753.002302][T21998] block nbd3: shutting down sockets [ 1753.520073][T19763] Bluetooth: hci1: command 0x0406 tx timeout [ 1754.804340][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 1754.810967][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 1754.838007][T22023] ceph: No mds server is up or the cluster is laggy [ 1754.883052][T22023] vxfs: WRONG superblock magic 00000000 at 1 [ 1754.889292][T22023] vxfs: WRONG superblock magic 00000000 at 8 [ 1754.895413][T22023] vxfs: can't find superblock. [ 1756.219900][T14252] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1756.226892][T22042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4029'. [ 1756.432907][T14252] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1756.450395][T14252] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1756.460701][ T5824] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1756.466769][T14252] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1756.481012][T14252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.740987][T14252] usb 2-1: usb_control_msg returned -32 [ 1756.817266][T22050] loop2: detected capacity change from 0 to 7 [ 1756.927007][T22052] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1757.437628][T22050] Dev loop2: unable to read RDB block 7 [ 1757.443318][T22050] loop2: AHDI p1 p2 p3 [ 1757.447642][T22050] loop2: partition table partially beyond EOD, truncated [ 1757.454985][T22050] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1757.462095][T22050] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1757.602600][T14252] usbtmc 2-1:16.0: can't read capabilities [ 1757.959763][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 1757.976577][ T5824] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1757.987643][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1758.000166][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1758.010024][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1758.023096][ T5824] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1758.036668][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.062123][ T5824] usb 3-1: config 0 descriptor?? [ 1758.380501][ T28] libceph: connect (1)[c::]:6789 error -101 [ 1758.394141][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 1758.425122][T22062] ceph: No mds server is up or the cluster is laggy [ 1758.472383][T22062] vxfs: WRONG superblock magic 00000000 at 1 [ 1758.478770][T22062] vxfs: WRONG superblock magic 00000000 at 8 [ 1758.485147][T22062] vxfs: can't find superblock. [ 1758.502817][ T5824] redragon 0003:0C45:760B.0042: unknown main item tag 0x6 [ 1758.512390][ T5824] redragon 0003:0C45:760B.0042: item fetching failed at offset 7/133 [ 1758.521348][ T5824] redragon: probe of 0003:0C45:760B.0042 failed with error -22 [ 1758.686803][T20693] usb 3-1: USB disconnect, device number 60 [ 1758.688714][ T5824] usb 2-1: USB disconnect, device number 44 [ 1759.959653][T22067] block nbd0: shutting down sockets [ 1760.399688][ T5824] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1760.779828][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 1760.792037][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1761.124941][ T5824] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1761.142182][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.336303][ T5824] usb 3-1: config 0 descriptor?? [ 1761.462990][T22095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1762.067158][ T5824] usbhid 3-1:0.0: can't add hid device: -71 [ 1762.074364][ T5824] usbhid: probe of 3-1:0.0 failed with error -71 [ 1762.113810][ T5824] usb 3-1: USB disconnect, device number 61 [ 1763.195254][ T9931] libceph: connect (1)[c::]:6789 error -101 [ 1763.202482][ T9931] libceph: mon0 (1)[c::]:6789 connect error [ 1763.224521][T22104] ceph: No mds server is up or the cluster is laggy [ 1763.252613][ T5824] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1763.257456][T22116] misc userio: Invalid payload size [ 1763.285587][T22104] vxfs: WRONG superblock magic 00000000 at 1 [ 1763.291910][T22104] vxfs: WRONG superblock magic 00000000 at 8 [ 1763.297944][T22104] vxfs: can't find superblock. [ 1763.453049][ T5824] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1763.459852][T20693] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1763.468730][T19763] Bluetooth: hci1: command 0x0406 tx timeout [ 1763.483142][ T5824] usb 3-1: config 0 has no interface number 0 [ 1763.490105][ T5824] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1763.501486][ T5824] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1763.537036][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.546706][ T5824] usb 3-1: Product: syz [ 1763.557478][ T5824] usb 3-1: Manufacturer: syz [ 1763.562408][ T5824] usb 3-1: SerialNumber: syz [ 1763.574095][ T5824] usb 3-1: config 0 descriptor?? [ 1763.660232][T20693] usb 2-1: Using ep0 maxpacket: 8 [ 1763.668372][T20693] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1763.705555][T20693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1763.735075][T20693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1763.781050][T20693] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1763.809726][T20693] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1763.824446][T20693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.860750][T20693] usb 2-1: config 0 descriptor?? [ 1765.005134][ T5824] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1765.039915][T20693] redragon 0003:0C45:760B.0043: unknown main item tag 0x6 [ 1765.069581][T20693] redragon 0003:0C45:760B.0043: item fetching failed at offset 7/133 [ 1765.102942][T20693] redragon: probe of 0003:0C45:760B.0043 failed with error -22 [ 1765.178462][T20693] usb 2-1: USB disconnect, device number 45 [ 1765.307070][T22131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4052'. [ 1765.477907][T22138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4055'. [ 1766.255376][ T5824] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1766.345787][ T5824] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1766.515176][ T5824] CoreChips: probe of 3-1:0.41 failed with error -71 [ 1766.588689][ T5824] usb 3-1: USB disconnect, device number 62 [ 1766.877959][T22153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4061'. [ 1769.281244][T22164] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20001 [ 1771.639512][T14252] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1771.970393][T14252] usb 2-1: Using ep0 maxpacket: 8 [ 1771.986131][T14252] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1771.995635][T14252] usb 2-1: config 179 has no interface number 0 [ 1772.024173][T14252] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1772.941809][T14252] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1773.111890][T14252] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1773.209147][T22217] block nbd2: shutting down sockets [ 1773.290374][T14252] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1773.374690][T14252] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1773.449629][T14252] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1773.474800][T14252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.526771][T22207] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1773.797073][T14252] usb 2-1: USB disconnect, device number 46 [ 1773.797132][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1773.811397][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1775.924951][T22277] loop2: detected capacity change from 0 to 7 [ 1775.932149][T22277] Dev loop2: unable to read RDB block 7 [ 1775.937739][T22277] loop2: AHDI p1 p2 p3 [ 1775.942124][T22277] loop2: partition table partially beyond EOD, truncated [ 1775.949401][T22277] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1775.956183][T22277] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1775.968076][T22277] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1778.219708][T22280] block nbd3: shutting down sockets [ 1779.603380][T22309] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1781.723309][ T787] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1781.990324][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 1782.009372][T22338] netlink: 'syz.1.4111': attribute type 1 has an invalid length. [ 1782.032048][T22338] netlink: 'syz.1.4111': attribute type 4 has an invalid length. [ 1782.052760][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1782.065860][T22338] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4111'. [ 1782.085474][ T787] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1782.108617][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.130713][ T787] usb 3-1: config 0 descriptor?? [ 1783.452659][ T787] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1783.767624][ T28] usb 3-1: USB disconnect, device number 63 [ 1784.048465][ T9931] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1784.238531][ T9931] usb 1-1: Using ep0 maxpacket: 8 [ 1784.250466][ T9931] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1784.267386][ T9931] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1784.278542][ T9931] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1784.289426][ T9931] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1784.314723][ T9931] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1784.324954][ T9931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.553585][ T9931] usb 1-1: GET_CAPABILITIES returned 0 [ 1784.565668][ T9931] usbtmc 1-1:16.0: can't read capabilities [ 1784.586227][T19763] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 1784.683469][T22362] block nbd3: shutting down sockets [ 1784.862127][ T787] usb 1-1: USB disconnect, device number 49 [ 1786.664696][T22410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4131'. [ 1786.798385][ T9931] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1787.069642][ T9931] usb 1-1: Using ep0 maxpacket: 8 [ 1787.163391][ T9931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1787.174653][ T9931] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1787.185034][ T9931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.209984][ T9931] usb 1-1: config 0 descriptor?? [ 1787.557049][ T9931] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1789.060189][T22422] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1789.080576][T22436] vxfs: WRONG superblock magic 00000000 at 1 [ 1789.096983][T22436] vxfs: WRONG superblock magic 00000000 at 8 [ 1789.103104][T22436] vxfs: can't find superblock. [ 1789.310042][T22430] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1790.453151][T22444] overlayfs: failed to resolve './file1': -2 [ 1790.568084][T22425] block nbd2: shutting down sockets [ 1790.720914][ T9365] usb 1-1: USB disconnect, device number 50 [ 1791.800063][T20388] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1791.863075][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.869715][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.121971][T20388] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 1792.750999][T20388] usb 4-1: config 0 has no interface number 0 [ 1792.759884][T20388] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1792.780677][T20388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.892862][T20388] usb 4-1: config 0 descriptor?? [ 1792.994662][T20388] hub 4-1:0.3: bad descriptor, ignoring hub [ 1793.561912][T20388] hub: probe of 4-1:0.3 failed with error -5 [ 1793.569142][T20388] sierra 4-1:0.3: Sierra USB modem converter detected [ 1793.633329][T20388] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 1793.715867][T20388] usb 4-1: USB disconnect, device number 52 [ 1793.745634][T20388] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1793.774468][T20388] sierra 4-1:0.3: device disconnected [ 1795.181700][T22490] block nbd0: shutting down sockets [ 1795.568274][T22511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4156'. [ 1797.848538][T22527] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4157'. [ 1798.471081][T22543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4166'. [ 1800.416126][T22584] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1800.882382][T22597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4183'. [ 1801.795212][T22612] ubi31: attaching mtd0 [ 1802.459681][T22612] ubi31: scanning is finished [ 1802.464517][T22612] ubi31: empty MTD device detected [ 1802.527630][T22612] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1802.535480][T22612] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1802.542817][T22612] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1802.549979][T22612] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1802.557541][T22612] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1802.564433][T22612] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1802.572554][T22612] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 162122499 [ 1802.582660][T22612] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1802.596406][T22614] ubi31: background thread "ubi_bgt31d" started, PID 22614 [ 1803.058453][ T9931] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1803.327467][ T9931] usb 4-1: Using ep0 maxpacket: 8 [ 1803.388530][ T9931] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1803.457253][ T9931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1803.539711][ T9931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1803.654226][ T9931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1803.765867][ T9931] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1803.969395][ T9931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.996276][ T9931] usb 4-1: config 0 descriptor?? [ 1804.982137][T22639] overlayfs: failed to resolve './file0': -2 [ 1805.034175][ T9931] redragon 0003:0C45:760B.0044: unknown main item tag 0x6 [ 1805.041648][ T9931] redragon 0003:0C45:760B.0044: item fetching failed at offset 7/133 [ 1805.051622][ T9931] redragon: probe of 0003:0C45:760B.0044 failed with error -22 [ 1805.241572][ T9365] usb 4-1: USB disconnect, device number 53 [ 1805.380175][T22648] (null): rxe_set_mtu: Set mtu to 4096 [ 1805.391277][T22648] lo speed is unknown, defaulting to 1000 [ 1805.669167][T22648] lo speed is unknown, defaulting to 1000 [ 1805.694986][T22648] lo speed is unknown, defaulting to 1000 [ 1806.012052][T22648] infiniband syz2: set active [ 1806.016783][T22648] infiniband syz2: added lo [ 1806.022763][T22648] syz2: rxe_create_cq: returned err = -12 [ 1806.028703][T22648] infiniband syz2: Couldn't create ib_mad CQ [ 1806.034928][T22648] infiniband syz2: Couldn't open port 1 [ 1806.056778][ T787] lo speed is unknown, defaulting to 1000 [ 1806.074885][T22648] RDS/IB: syz2: added [ 1806.079067][T22648] smc: adding ib device syz2 with port count 1 [ 1806.085249][T22648] smc: ib device syz2 port 1 has pnetid [ 1806.112772][T22648] lo speed is unknown, defaulting to 1000 [ 1806.230796][T22648] lo speed is unknown, defaulting to 1000 [ 1806.372056][T22648] lo speed is unknown, defaulting to 1000 [ 1806.588216][T22648] lo speed is unknown, defaulting to 1000 [ 1806.882248][ T787] lo speed is unknown, defaulting to 1000 [ 1807.984988][T22679] overlayfs: failed to resolve './file0': -2 [ 1809.103797][T22689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4207'. [ 1809.986140][T22695] netlink: 'syz.2.4210': attribute type 1 has an invalid length. [ 1810.155279][T22696] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1810.198837][T22695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1810.209859][T10502] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1810.624448][T22696] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1810.647239][T22696] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1810.671650][T22696] bond1 (unregistering): Released all slaves [ 1810.968570][T22715] overlayfs: failed to resolve './file0': -2 [ 1811.213572][T22720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4218'. [ 1812.708851][T22734] loop2: detected capacity change from 0 to 7 [ 1812.720893][T22734] Dev loop2: unable to read RDB block 7 [ 1812.726537][T22734] loop2: AHDI p1 p2 p3 [ 1812.730764][T22734] loop2: partition table partially beyond EOD, truncated [ 1812.738086][T22734] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1812.744869][T22734] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1812.756896][T22734] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1812.884168][ T5143] Dev loop2: unable to read RDB block 7 [ 1812.890012][ T5143] loop2: AHDI p1 p2 p3 [ 1812.899432][ T5143] loop2: partition table partially beyond EOD, truncated [ 1812.915373][ T5143] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1813.019739][ T5143] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1813.313195][T22746] overlayfs: failed to resolve './file0': -2 [ 1813.662738][T22758] tipc: Started in network mode [ 1813.680859][T22758] tipc: Node identity e2c784240e27, cluster identity 4711 [ 1813.741813][T22758] tipc: Enabled bearer , priority 0 [ 1813.843321][T22760] tipc: Disabling bearer [ 1813.879452][ T9931] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1814.140539][ T9931] usb 2-1: Using ep0 maxpacket: 32 [ 1814.242472][ T9931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1814.328120][ T9931] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1814.425596][ T9931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.580054][ T9931] usb 2-1: config 0 descriptor?? [ 1814.817823][T22770] block nbd2: NBD_DISCONNECT [ 1814.823891][T22770] block nbd2: Send disconnect failed -22 [ 1814.839246][T22769] block nbd2: Disconnected due to user request. [ 1814.855762][T22769] block nbd2: shutting down sockets [ 1815.544581][ T9931] ryos 0003:1E7D:31CE.0045: hidraw0: USB HID v0.07 Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0 [ 1815.553333][T22778] overlayfs: failed to resolve './file1': -2 [ 1815.638053][ T9931] usb 2-1: USB disconnect, device number 47 [ 1815.751410][T22779] fido_id[22779]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1816.028680][T22789] loop2: detected capacity change from 0 to 7 [ 1816.059122][T22789] Dev loop2: unable to read RDB block 7 [ 1816.064716][T22789] loop2: AHDI p1 p2 p3 [ 1816.069177][T22789] loop2: partition table partially beyond EOD, truncated [ 1816.076307][T22789] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1816.083243][T22789] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1816.087767][T22791] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1817.164982][T22804] overlayfs: failed to resolve './file1': -2 [ 1817.316644][ T787] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1817.689022][T22817] loop2: detected capacity change from 0 to 7 [ 1817.744315][T22819] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1818.202243][T22817] Dev loop2: unable to read RDB block 7 [ 1818.207979][T22817] loop2: AHDI p1 p2 p3 [ 1818.212172][T22817] loop2: partition table partially beyond EOD, truncated [ 1818.219500][T22817] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1818.226439][T22817] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1818.599436][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 1818.962309][T22832] Can't find a SQUASHFS superblock on nullb0 [ 1820.736583][ T787] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1820.744201][ T787] usb 2-1: can't read configurations, error -71 [ 1820.772965][T22835] lo speed is unknown, defaulting to 1000 [ 1820.778926][T22835] lo speed is unknown, defaulting to 1000 [ 1820.787014][T22835] lo speed is unknown, defaulting to 1000 [ 1820.804835][T22835] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1820.859099][T22835] lo speed is unknown, defaulting to 1000 [ 1820.866458][T22835] lo speed is unknown, defaulting to 1000 [ 1820.873593][T22835] lo speed is unknown, defaulting to 1000 [ 1820.882738][T22835] lo speed is unknown, defaulting to 1000 [ 1820.934224][T22841] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4255'. [ 1821.081913][T22845] overlayfs: failed to resolve './file1': -2 [ 1823.243892][T22871] (null): rxe_set_mtu: Set mtu to 4096 [ 1823.252391][T22871] rdma_rxe: rxe_newlink: failed to add lo [ 1825.791406][T22893] loop2: detected capacity change from 0 to 7 [ 1825.852836][T22894] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1826.030333][T22893] Dev loop2: unable to read RDB block 7 [ 1826.036063][T22893] loop2: AHDI p1 p2 p3 [ 1826.040285][T22893] loop2: partition table partially beyond EOD, truncated [ 1826.047547][T22893] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1826.054365][T22893] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1827.538349][T19986] Bluetooth: hci1: command 0x0406 tx timeout [ 1831.266537][T22960] tipc: Enabled bearer , priority 0 [ 1831.344834][T22962] tipc: Disabling bearer [ 1832.076128][T22975] netlink: 'syz.0.4294': attribute type 10 has an invalid length. [ 1832.094030][T22975] team0: Device ipvlan1 failed to register rx_handler [ 1833.438868][T22999] loop2: detected capacity change from 0 to 7 [ 1833.447458][T22999] Dev loop2: unable to read RDB block 7 [ 1833.453495][T22999] loop2: AHDI p1 p2 p3 [ 1833.457792][T22999] loop2: partition table partially beyond EOD, truncated [ 1833.465043][T22999] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1833.472323][T22999] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1833.484632][T22999] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1833.615762][ T5824] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1833.897198][ T5824] usb 4-1: config 0 has no interfaces? [ 1833.933812][ T5824] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1833.958055][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.977415][ T5824] usb 4-1: Product: syz [ 1833.981681][ T5824] usb 4-1: Manufacturer: syz [ 1833.987109][ T5824] usb 4-1: SerialNumber: syz [ 1833.994788][ T5824] usb 4-1: config 0 descriptor?? [ 1834.631329][ T5824] usb 4-1: USB disconnect, device number 54 [ 1837.194402][T23068] ubi: mtd0 is already attached to ubi31 [ 1838.415818][T23075] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1841.189756][T23109] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1841.189756][T23109] program syz.2.4328 not setting count and/or reply_len properly [ 1841.888672][ T27] audit: type=1326 audit(2000001672.943:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23096 comm="syz.2.4328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff54bd8e929 code=0x0 [ 1842.085898][T23123] o2cb: This node has not been configured. [ 1842.092350][T23123] o2cb: Cluster check failed. Fix errors before retrying. [ 1842.099865][T23123] (syz.1.4333,23123,0):user_dlm_register:674 ERROR: status = -22 [ 1842.108032][T23123] (syz.1.4333,23123,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1842.521264][T23100] block nbd3: shutting down sockets [ 1842.962383][T23130] CUSE: unknown device info "ÿ" [ 1842.999101][T23130] CUSE: zero length info key specified [ 1843.591861][T23139] loop2: detected capacity change from 0 to 7 [ 1843.599137][T23139] Dev loop2: unable to read RDB block 7 [ 1843.604774][T23139] loop2: AHDI p1 p2 p3 [ 1843.609156][T23139] loop2: partition table partially beyond EOD, truncated [ 1843.616572][T23139] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1843.623391][T23139] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1843.635969][T23139] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1847.388159][T23155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4344'. [ 1848.178939][T23168] netlink: 'syz.3.4347': attribute type 10 has an invalid length. [ 1848.555125][T23168] team0: Device ipvlan1 failed to register rx_handler [ 1848.770312][T23171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4349'. [ 1849.295280][T19986] Bluetooth: hci1: command 0x0406 tx timeout [ 1850.484012][T23191] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1850.484012][T23191] program syz.0.4353 not setting count and/or reply_len properly [ 1851.397967][ T27] audit: type=1326 audit(2000001682.424:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23185 comm="syz.0.4353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2eb98e929 code=0x0 [ 1851.572010][T23197] loop2: detected capacity change from 0 to 7 [ 1851.627066][T23198] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1851.770352][T23197] Dev loop2: unable to read RDB block 7 [ 1851.776057][T23197] loop2: AHDI p1 p2 p3 [ 1851.780515][T23197] loop2: partition table partially beyond EOD, truncated [ 1851.787753][T23197] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1851.794601][T23197] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1853.166182][T23211] vxfs: WRONG superblock magic 00000000 at 1 [ 1853.166305][T23211] vxfs: WRONG superblock magic 00000000 at 8 [ 1853.166313][T23211] vxfs: can't find superblock. [ 1853.272374][T23209] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1853.327378][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.452272][T23216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4357'. [ 1853.461724][T23216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4357'. [ 1853.775994][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.965078][T14252] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1856.466296][T14252] usb 2-1: Using ep0 maxpacket: 8 [ 1856.593564][T14252] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1856.636226][T14252] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1856.676351][T14252] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1856.716502][T14252] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1856.742144][T14252] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1856.769657][T14252] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1856.787132][T14252] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1856.797968][T14252] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1856.813367][T14252] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1856.837475][T14252] usb 2-1: string descriptor 0 read error: -22 [ 1856.843786][T14252] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1856.870764][T14252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.898693][T14252] adutux 2-1:168.0: interrupt endpoints not found [ 1857.120238][T14252] usb 2-1: USB disconnect, device number 50 [ 1857.494754][T23250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4365'. [ 1858.595253][T23262] vxfs: WRONG superblock magic 00000000 at 1 [ 1858.601651][T23262] vxfs: WRONG superblock magic 00000000 at 8 [ 1858.607822][T23262] vxfs: can't find superblock. [ 1858.907546][T23260] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1860.114443][T23252] block nbd1: shutting down sockets [ 1863.901849][ T787] libceph: connect (1)[c::]:6789 error -101 [ 1863.913964][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 1863.955633][T23308] ceph: No mds server is up or the cluster is laggy [ 1863.991147][T23308] vxfs: WRONG superblock magic 00000000 at 1 [ 1863.999379][T23308] vxfs: WRONG superblock magic 00000000 at 8 [ 1864.005472][T23308] vxfs: can't find superblock. [ 1864.529953][T23320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4382'. [ 1864.542099][T23320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4382'. [ 1864.598153][T23322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4384'. [ 1865.404887][T23337] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1865.404887][T23337] program syz.0.4388 not setting count and/or reply_len properly [ 1866.124685][T23330] block nbd3: shutting down sockets [ 1867.147910][T23351] vivid-000: kernel_thread() failed [ 1867.528334][T23361] overlayfs: missing 'lowerdir' [ 1869.075569][T23387] vxfs: WRONG superblock magic 00000000 at 1 [ 1869.081648][T23387] vxfs: WRONG superblock magic 00000000 at 8 [ 1869.087803][T23387] vxfs: can't find superblock. [ 1869.150207][T23385] ceph: No mds server is up or the cluster is laggy [ 1869.179313][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 1869.323807][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 1869.834585][T23397] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1869.844340][T23397] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1870.309759][T23402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4407'. [ 1870.397926][T23405] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4407'. [ 1871.852238][T23429] vxfs: WRONG superblock magic 00000000 at 1 [ 1871.858465][T23429] vxfs: WRONG superblock magic 00000000 at 8 [ 1871.864510][T23429] vxfs: can't find superblock. [ 1872.445275][T23427] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1872.533057][T23435] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1872.554160][T23435] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1872.569781][T23409] block nbd2: shutting down sockets [ 1876.779172][T23471] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1876.795253][T23471] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1879.238026][T23496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4434'. [ 1879.499309][T23499] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4434'. [ 1880.188337][T23508] overlayfs: missing 'lowerdir' [ 1882.421477][T23518] block nbd1: shutting down sockets [ 1883.092096][T23541] overlayfs: missing 'lowerdir' [ 1884.578712][T19986] Bluetooth: hci1: command 0x0406 tx timeout [ 1884.723803][T23556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4448'. [ 1884.794313][T23557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4448'. [ 1884.930330][T23545] block nbd1: shutting down sockets [ 1885.965916][T23566] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1886.037384][T23565] lo speed is unknown, defaulting to 1000 [ 1886.122894][T23565] lo speed is unknown, defaulting to 1000 [ 1887.954268][T23584] ceph: No mds server is up or the cluster is laggy [ 1887.969444][ T9931] libceph: connect (1)[c::]:6789 error -101 [ 1887.969567][ T9931] libceph: mon0 (1)[c::]:6789 connect error [ 1888.428506][T23596] loop2: detected capacity change from 0 to 7 [ 1888.442715][T23596] Dev loop2: unable to read RDB block 7 [ 1888.448424][T23596] loop2: AHDI p1 p2 p3 [ 1888.452948][T23596] loop2: partition table partially beyond EOD, truncated [ 1888.461021][T23596] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1888.468039][T23596] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1888.500549][T23596] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1890.102252][T19986] Bluetooth: hci1: command 0x0406 tx timeout [ 1893.365562][T23648] lo speed is unknown, defaulting to 1000 [ 1893.723551][T23648] lo speed is unknown, defaulting to 1000 [ 1894.095366][T23645] loop2: detected capacity change from 0 to 7 [ 1894.118750][T23622] block nbd2: shutting down sockets [ 1894.412357][T23657] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1894.423818][T23645] Dev loop2: unable to read RDB block 7 [ 1894.429435][T23645] loop2: AHDI p1 p2 p3 [ 1894.485075][T23645] loop2: partition table partially beyond EOD, truncated [ 1894.581363][T23645] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1894.733845][T23645] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1894.792405][T23667] trusted_key: encrypted_key: insufficient parameters specified [ 1899.081213][T23702] lo speed is unknown, defaulting to 1000 [ 1899.421534][T23702] lo speed is unknown, defaulting to 1000 [ 1902.772266][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 1902.779458][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 1902.839025][T23745] ceph: No mds server is up or the cluster is laggy [ 1903.516002][T23754] PKCS7: Unknown OID: [5] (bad) [ 1903.521457][T23754] PKCS7: Only support pkcs7_signedData type [ 1904.304873][T23749] loop2: detected capacity change from 0 to 7 [ 1904.312208][T23749] Dev loop2: unable to read RDB block 7 [ 1904.317825][T23749] loop2: AHDI p1 p2 p3 [ 1904.322085][T23749] loop2: partition table partially beyond EOD, truncated [ 1904.329219][T23749] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1904.336173][T23749] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1904.479611][T23749] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1905.760356][T23763] lo speed is unknown, defaulting to 1000 [ 1906.123381][T23763] lo speed is unknown, defaulting to 1000 [ 1907.189719][T23778] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4494'. [ 1907.828698][T23774] block nbd3: shutting down sockets [ 1908.978517][T20693] libceph: connect (1)[c::]:6789 error -101 [ 1909.012185][T20693] libceph: mon0 (1)[c::]:6789 connect error [ 1909.024911][T23798] ceph: No mds server is up or the cluster is laggy [ 1910.879208][T23816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4505'. [ 1911.728320][T23822] PKCS7: Unknown OID: [5] (bad) [ 1911.739772][T23822] PKCS7: Only support pkcs7_signedData type [ 1912.117208][T23814] lo speed is unknown, defaulting to 1000 [ 1912.248710][T23814] lo speed is unknown, defaulting to 1000 [ 1912.621640][T23826] block nbd1: shutting down sockets [ 1914.735079][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.741625][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.785950][T23864] Malformed UNC in devname [ 1914.785950][T23864] [ 1914.831320][T23864] CIFS: VFS: Malformed UNC in devname [ 1915.003709][T23869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4516'. [ 1915.291126][T19986] Bluetooth: hci1: command 0x0406 tx timeout [ 1916.371673][T23891] lo speed is unknown, defaulting to 1000 [ 1916.614651][T23891] lo speed is unknown, defaulting to 1000 [ 1916.955665][T23893] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1918.249819][T23917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4527'. [ 1918.292331][T23917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4527'. [ 1918.396563][T23904] block nbd2: shutting down sockets [ 1918.674212][T23924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4528'. [ 1919.511560][T20693] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1919.722219][T20693] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1919.730713][T20693] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1919.740890][T20693] usb 4-1: config 1 has no interface number 1 [ 1919.747073][T20693] usb 4-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1919.760246][T20693] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1919.773264][T20693] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1919.789352][T20693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.798643][T20693] usb 4-1: Product: syz [ 1919.803971][T20693] usb 4-1: Manufacturer: syz [ 1919.808824][T20693] usb 4-1: SerialNumber: syz [ 1920.059744][T20693] aqc111: probe of 4-1:1.105 failed with error -22 [ 1920.840403][T20693] usb 4-1: USB disconnect, device number 55 [ 1921.667513][T23944] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1921.667513][T23944] program syz.3.4535 not setting count and/or reply_len properly [ 1922.012663][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.292168][T23856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1922.302640][T23856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1922.312171][T23856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1922.321392][T23949] Malformed UNC in devname [ 1922.321392][T23949] [ 1922.334197][T23856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1922.341298][T23949] CIFS: VFS: Malformed UNC in devname [ 1922.663751][T23960] fuse: Bad value for 'fd' [ 1922.694276][T23856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1922.786074][T23856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1923.032824][T23955] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1923.078291][T23953] lo speed is unknown, defaulting to 1000 [ 1923.286726][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.331876][T23953] lo speed is unknown, defaulting to 1000 [ 1923.417756][T23948] lo speed is unknown, defaulting to 1000 [ 1923.578046][T23967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4538'. [ 1923.811065][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1924.212703][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1924.328305][T23948] lo speed is unknown, defaulting to 1000 [ 1924.885427][T23970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4540'. [ 1924.914432][T23969] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4540'. [ 1924.970751][T19986] Bluetooth: hci2: command tx timeout [ 1925.148225][T23972] loop2: detected capacity change from 0 to 7 [ 1925.149050][T23973] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1925.181869][T23972] Dev loop2: unable to read RDB block 7 [ 1925.187517][T23972] loop2: AHDI p1 p2 p3 [ 1925.191882][T23972] loop2: partition table partially beyond EOD, truncated [ 1925.199047][T23972] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1925.205851][T23972] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1925.595996][ T12] tipc: Left network mode [ 1926.143254][T23983] syz2: rxe_newlink: already configured on lo [ 1927.134838][T19986] Bluetooth: hci2: command tx timeout [ 1927.661785][T24008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4547'. [ 1928.281878][T24004] block nbd1: shutting down sockets [ 1928.344539][T23948] chnl_net:caif_netlink_parms(): no params data found [ 1928.623819][T24021] block nbd3: NBD_DISCONNECT [ 1929.210227][T19986] Bluetooth: hci2: command tx timeout [ 1929.830437][T23948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1929.837687][T23948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1929.860468][T23948] bridge_slave_0: entered allmulticast mode [ 1929.879509][T23948] bridge_slave_0: entered promiscuous mode [ 1929.899940][T23948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1929.935393][T23948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.944504][T23948] bridge_slave_1: entered allmulticast mode [ 1929.982875][T23948] bridge_slave_1: entered promiscuous mode [ 1930.266919][T24034] loop2: detected capacity change from 0 to 7 [ 1930.288583][T24034] Dev loop2: unable to read RDB block 7 [ 1930.294296][T24034] loop2: AHDI p1 p2 p3 [ 1930.298494][T24034] loop2: partition table partially beyond EOD, truncated [ 1930.305851][T24034] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1930.312667][T24034] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1930.467614][T24031] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1931.000296][T24037] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1931.259487][T23948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1931.293725][T19986] Bluetooth: hci2: command tx timeout [ 1931.367399][T24036] lo speed is unknown, defaulting to 1000 [ 1931.506968][T24036] lo speed is unknown, defaulting to 1000 [ 1931.954966][T23948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1932.534522][T23948] team0: Port device team_slave_0 added [ 1932.566378][T23948] team0: Port device team_slave_1 added [ 1932.752662][T24061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4555'. [ 1933.370589][T23948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1933.377575][T23948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1933.434311][T23948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1933.466441][T23948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1933.476183][T23948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1933.519927][T23948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1935.115757][ T12] hsr_slave_0: left promiscuous mode [ 1935.138902][ T12] hsr_slave_1: left promiscuous mode [ 1935.157667][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1935.270622][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1935.348726][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1935.377940][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1935.386292][ T12] bridge_slave_1: left allmulticast mode [ 1935.394475][ T12] bridge_slave_1: left promiscuous mode [ 1935.400590][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.413280][ T12] bridge_slave_0: left allmulticast mode [ 1935.432883][ T12] bridge_slave_0: left promiscuous mode [ 1935.441236][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.492929][ T12] veth1_macvtap: left promiscuous mode [ 1935.498734][ T12] veth0_macvtap: left promiscuous mode [ 1935.504875][ T12] veth1_vlan: left promiscuous mode [ 1935.510846][ T12] veth0_vlan: left promiscuous mode [ 1935.560513][T24069] block nbd2: shutting down sockets [ 1936.493016][ T9365] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1936.863557][ T9365] usb 3-1: Using ep0 maxpacket: 16 [ 1936.871788][ T9365] usb 3-1: config 0 has no interfaces? [ 1936.909333][ T9365] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1936.918505][ T9365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.939379][ T9365] usb 3-1: Product: syz [ 1936.945212][ T9365] usb 3-1: Manufacturer: syz [ 1936.951836][ T9365] usb 3-1: SerialNumber: syz [ 1937.013735][T24091] (null): rxe_set_mtu: Set mtu to 4096 [ 1937.020798][T24091] rdma_rxe: rxe_newlink: failed to add lo [ 1937.230334][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1937.565892][ T9365] usb 3-1: config 0 descriptor?? [ 1937.579198][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1937.688258][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1937.754759][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1937.867191][ T9931] usb 3-1: USB disconnect, device number 64 [ 1939.089328][T24102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4563'. [ 1939.722813][ T12] bond0 (unregistering): Released all slaves [ 1939.893827][T23948] hsr_slave_0: entered promiscuous mode [ 1939.914221][T23948] hsr_slave_1: entered promiscuous mode [ 1939.940688][T23948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1939.950336][T23948] Cannot create hsr debugfs directory [ 1940.179300][T24110] input: syz1 as /devices/virtual/input/input50 [ 1941.496124][T24111] block nbd2: shutting down sockets [ 1942.132123][T23948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1942.142513][T23948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1942.154713][T23948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1942.174855][T23948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1943.249830][T23948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1943.295051][T23948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1943.345103][ T3413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1943.352289][ T3413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1943.411031][ T3413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1943.418255][ T3413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1943.549506][T20693] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1943.766200][T20693] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1943.808319][T20693] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1943.848176][T20693] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1943.901737][T20693] usb 4-1: config 1 interface 0 has no altsetting 1 [ 1943.936196][T20693] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1943.951958][T20693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.969424][T20693] usb 4-1: Product: syz [ 1943.978746][T20693] usb 4-1: Manufacturer: syz [ 1943.992892][T23948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1943.994596][T20693] usb 4-1: SerialNumber: syz [ 1944.043771][T20693] smsusb:smsusb_probe: board id=8, interface number 0 [ 1944.772343][T20693] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 1944.779981][T20693] smsusb: probe of 4-1:1.0 failed with error -71 [ 1944.807930][T20693] usb 4-1: USB disconnect, device number 56 [ 1944.922789][T23948] veth0_vlan: entered promiscuous mode [ 1944.965656][T23948] veth1_vlan: entered promiscuous mode [ 1945.088533][T23948] veth0_macvtap: entered promiscuous mode [ 1945.112083][T23948] veth1_macvtap: entered promiscuous mode [ 1945.177404][T23948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1945.207032][T23948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1945.232276][T23948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1945.243364][T23948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1945.264509][T23948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1945.303447][T23948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1945.324215][T23948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1945.335643][T23948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1945.347139][T23948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1945.357453][T23948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1945.425990][T24190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4572'. [ 1945.495020][T23948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1945.670803][T23948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1945.835038][T23948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1945.970485][T23948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1945.998006][T23948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.021659][T23948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.063257][T23948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.107559][T23948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.301781][T24197] netlink: 'syz.1.4575': attribute type 13 has an invalid length. [ 1946.890123][T24204] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1947.259181][T24203] lo speed is unknown, defaulting to 1000 [ 1947.454434][T24203] lo speed is unknown, defaulting to 1000 [ 1948.086308][T18816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1948.094853][T18816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1948.182191][T18816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1948.191691][T18816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1948.603530][T24228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4578'. [ 1949.648529][T24224] block nbd0: shutting down sockets [ 1949.873421][T24245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4582'. [ 1952.854591][T24297] lo speed is unknown, defaulting to 1000 [ 1953.233229][T24297] lo speed is unknown, defaulting to 1000 [ 1953.524572][T24298] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1954.434823][T24321] loop2: detected capacity change from 0 to 7 [ 1954.604706][T24172] Dev loop2: unable to read RDB block 7 [ 1954.610683][T24172] loop2: AHDI p1 p2 p3 [ 1954.624023][T24172] loop2: partition table partially beyond EOD, truncated [ 1954.632036][T24172] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1954.645352][T24172] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1954.670330][T24325] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1954.677390][T24321] Dev loop2: unable to read RDB block 7 [ 1954.717326][T24321] loop2: AHDI p1 p2 p3 [ 1954.747446][T24321] loop2: partition table partially beyond EOD, truncated [ 1955.025604][T24321] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1955.282656][T24321] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1955.668861][ T8] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1955.928791][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1956.012758][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1956.105706][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1956.291984][T24346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4601'. [ 1956.350373][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.480623][ T8] usb 2-1: Product: syz [ 1956.552476][ T8] usb 2-1: Manufacturer: syz [ 1956.611632][ T8] usb 2-1: SerialNumber: syz [ 1956.697418][ T8] usb 2-1: config 0 descriptor?? [ 1956.713225][ T8] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1956.724278][T24337] block nbd0: shutting down sockets [ 1956.729941][ T8] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1956.999478][ T8] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1957.087875][ T8] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1957.115970][ T8] em28xx 2-1:0.0: board has no eeprom [ 1957.139724][T24332] em28xx 2-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 1957.219196][ T8] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1957.240692][ T8] em28xx 2-1:0.0: dvb set to bulk mode. [ 1957.268468][T14252] em28xx 2-1:0.0: Binding DVB extension [ 1957.302890][ T8] usb 2-1: USB disconnect, device number 51 [ 1957.333976][ T8] em28xx 2-1:0.0: Disconnecting em28xx [ 1957.905494][T14252] em28xx 2-1:0.0: Registering input extension [ 1957.921996][ T8] em28xx 2-1:0.0: Closing input extension [ 1957.945513][ T8] em28xx 2-1:0.0: Freeing device [ 1959.982117][T24396] loop2: detected capacity change from 0 to 7 [ 1960.151651][T24396] Dev loop2: unable to read RDB block 7 [ 1960.424778][T24396] loop2: AHDI p1 p2 p3 [ 1960.464491][T24396] loop2: partition table partially beyond EOD, truncated [ 1960.504227][T24396] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1960.521987][T24390] block nbd0: shutting down sockets [ 1960.553407][T24396] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1960.564916][T24398] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1964.090569][T24455] netlink: 33912 bytes leftover after parsing attributes in process `syz.0.4632'. [ 1965.068280][T24461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4634'. [ 1965.135284][T24461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4634'. [ 1966.378240][T20693] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1966.585301][T20693] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1966.666429][T24508] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4650'. [ 1967.305730][T20693] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1967.322392][T20693] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1967.347885][T20693] usb 2-1: config 1 interface 0 has no altsetting 1 [ 1967.504410][T20693] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1967.606491][T24514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4651'. [ 1967.633935][T24514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4651'. [ 1968.018514][T20693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.123063][T20693] usb 2-1: Product: syz [ 1968.160676][T20693] usb 2-1: Manufacturer: syz [ 1968.188030][T20693] usb 2-1: SerialNumber: syz [ 1968.222792][T20693] smsusb:smsusb_probe: board id=8, interface number 0 [ 1968.523418][T20693] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 1968.561779][T20693] smsusb: probe of 2-1:1.0 failed with error -71 [ 1968.591446][T20693] usb 2-1: USB disconnect, device number 52 [ 1969.871060][T24545] ubi: mtd0 is already attached to ubi31 [ 1970.892415][T24556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4662'. [ 1970.930354][T24556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4662'. [ 1972.322468][T24579] loop2: detected capacity change from 0 to 7 [ 1972.332098][T24172] Dev loop2: unable to read RDB block 7 [ 1972.339888][T24172] loop2: AHDI p1 p2 p3 [ 1972.344096][T24172] loop2: partition table partially beyond EOD, truncated [ 1972.354788][T24172] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1972.365895][T24172] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1972.381402][T24579] Dev loop2: unable to read RDB block 7 [ 1972.402059][T24579] loop2: AHDI p1 p2 p3 [ 1972.419342][T24580] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1972.426300][T24579] loop2: partition table partially beyond EOD, truncated [ 1972.438549][T24579] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1972.453210][T24579] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1975.491526][T24596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4675'. [ 1975.508302][T24596] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4675'. [ 1976.172098][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.178722][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.448020][ T8] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1976.562774][T24635] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1976.562774][T24635] program syz.0.4686 not setting count and/or reply_len properly [ 1976.714380][ T8] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1976.830601][T24637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4687'. [ 1976.856081][T24637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4687'. [ 1976.921231][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.938615][ T8] usb 2-1: Product: syz [ 1976.942908][ T8] usb 2-1: Manufacturer: syz [ 1976.948148][ T8] usb 2-1: SerialNumber: syz [ 1976.974018][ T8] usb 2-1: config 0 descriptor?? [ 1977.522693][ T8] airspy 2-1:0.0: Board ID: 00 [ 1977.537659][ T8] airspy 2-1:0.0: Firmware version: [ 1977.722726][ T8] airspy 2-1:0.0: usb_control_msg() failed -71 request 11 [ 1977.753796][ T8] airspy 2-1:0.0: Registered as swradio24 [ 1977.763126][ T8] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1977.808946][ T8] usb 2-1: USB disconnect, device number 53 [ 1978.183554][T24653] loop2: detected capacity change from 0 to 7 [ 1978.240449][T24653] Dev loop2: unable to read RDB block 7 [ 1978.262432][T24653] loop2: AHDI p1 p2 p3 [ 1978.267675][T24653] loop2: partition table partially beyond EOD, [ 1978.279208][T24656] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1978.306889][T24653] truncated [ 1978.321755][T24653] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1978.356363][T24653] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1979.271942][T24676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4698'. [ 1979.324943][T24676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4698'. [ 1982.059602][T24717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4710'. [ 1983.172966][T24711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4711'. [ 1983.642704][T24711] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4711'. [ 1990.848432][T24809] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1990.848432][T24809] program syz.3.4737 not setting count and/or reply_len properly [ 1991.026918][ T5863] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1991.196734][ T5863] usb 2-1: device descriptor read/64, error -71 [ 1991.467301][ T5863] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1991.628092][ T5863] usb 2-1: device descriptor read/64, error -71 [ 1991.811818][ T5863] usb usb2-port1: attempt power cycle [ 1992.298575][ T5863] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1992.343667][ T5863] usb 2-1: device descriptor read/8, error -71 [ 1992.466995][T24824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4743'. [ 1992.524874][T24825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4743'. [ 1992.666766][ T5863] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1992.710734][ T5863] usb 2-1: device descriptor read/8, error -71 [ 1992.849870][ T5863] usb usb2-port1: unable to enumerate USB device [ 1995.218970][T14252] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1995.472409][T24863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4754'. [ 1995.633247][T24863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4754'. [ 1995.876583][T14252] usb 1-1: Using ep0 maxpacket: 32 [ 1995.923356][T14252] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1995.932634][T14252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.959381][T14252] usb 1-1: Product: syz [ 1996.004529][T14252] usb 1-1: Manufacturer: syz [ 1996.032869][T14252] usb 1-1: SerialNumber: syz [ 1996.055089][T14252] usb 1-1: config 0 descriptor?? [ 1996.296532][T14252] peak_usb 1-1:0.0: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1996.493835][T14252] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1996.501123][T14252] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1996.508452][T14252] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1996.607282][T14252] peak_usb: probe of 1-1:0.0 failed with error -22 [ 1996.756103][T24877] loop2: detected capacity change from 0 to 7 [ 1996.771632][T24877] Dev loop2: unable to read RDB block 7 [ 1996.777887][T24877] loop2: AHDI p1 p2 p3 [ 1996.782071][T24877] loop2: partition table partially beyond EOD, truncated [ 1996.789421][T24877] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1996.796224][T24877] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1996.807887][T24877] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1996.905684][ T5863] usb 1-1: USB disconnect, device number 51 [ 1997.225570][ T5143] Dev loop2: unable to read RDB block 7 [ 1997.235979][ T5143] loop2: AHDI p1 p2 p3 [ 1997.243418][ T5143] loop2: partition table partially beyond EOD, truncated [ 1997.264584][ T5143] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1997.274364][ T5143] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1999.130262][T24905] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1999.130262][T24905] program syz.2.4764 not setting count and/or reply_len properly [ 2000.239518][T24918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4773'. [ 2000.266218][T24918] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4773'. [ 2001.253422][T23856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2001.265346][T23856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2001.286787][T23856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2001.303642][T23856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2001.312389][T23856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2001.320374][T23856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2001.336905][T18825] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2001.504264][T18825] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2001.541833][T24924] lo speed is unknown, defaulting to 1000 [ 2001.896905][T18825] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2002.301020][T24938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4777'. [ 2002.347380][T24945] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2002.347380][T24945] program syz.1.4780 not setting count and/or reply_len properly [ 2002.770354][T18825] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2003.078634][T24937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4777'. [ 2003.367064][T23856] Bluetooth: hci3: command tx timeout [ 2003.395363][T24924] lo speed is unknown, defaulting to 1000 [ 2005.348990][T24924] chnl_net:caif_netlink_parms(): no params data found [ 2005.446393][T23856] Bluetooth: hci3: command tx timeout [ 2006.234224][T25011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4794'. [ 2006.268507][T24924] bridge0: port 1(bridge_slave_0) entered blocking state [ 2006.296209][T24924] bridge0: port 1(bridge_slave_0) entered disabled state [ 2006.330286][T24924] bridge_slave_0: entered allmulticast mode [ 2006.426023][T24924] bridge_slave_0: entered promiscuous mode [ 2006.462610][T24924] bridge0: port 2(bridge_slave_1) entered blocking state [ 2006.474868][T24924] bridge0: port 2(bridge_slave_1) entered disabled state [ 2006.529430][T24924] bridge_slave_1: entered allmulticast mode [ 2006.536820][T24924] bridge_slave_1: entered promiscuous mode [ 2006.765029][T24924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2006.842912][T24924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2007.079435][T24924] team0: Port device team_slave_0 added [ 2007.099647][T24924] team0: Port device team_slave_1 added [ 2007.467681][T24924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2007.485245][T24924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2007.527428][T23856] Bluetooth: hci3: command tx timeout [ 2007.583242][T24924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2008.311160][T25045] lo speed is unknown, defaulting to 1000 [ 2008.343972][T24924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2008.445444][T24924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2008.679314][T24924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2008.735064][T25045] lo speed is unknown, defaulting to 1000 [ 2009.020649][T18825] hsr_slave_0: left promiscuous mode [ 2009.039128][T18825] hsr_slave_1: left promiscuous mode [ 2009.069088][T18825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2009.097114][T18825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2009.131850][T18825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2009.149653][T18825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2009.249838][T18825] veth1_macvtap: left promiscuous mode [ 2009.256015][T18825] veth0_macvtap: left promiscuous mode [ 2009.261734][T18825] veth1_vlan: left promiscuous mode [ 2009.285843][T18825] veth0_vlan: left promiscuous mode [ 2009.606645][T23856] Bluetooth: hci3: command tx timeout [ 2010.200659][T25061] block nbd2: shutting down sockets [ 2010.487305][ T5863] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2010.672300][ T5863] usb 1-1: device descriptor read/64, error -71 [ 2010.739180][T18825] team0 (unregistering): Port device team_slave_1 removed [ 2010.827488][T18825] team0 (unregistering): Port device team_slave_0 removed [ 2010.936056][T18825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2010.945633][ T5863] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2011.045728][T18825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2011.107111][ T5863] usb 1-1: device descriptor read/64, error -71 [ 2011.228525][ T5863] usb usb1-port1: attempt power cycle [ 2011.292176][T18825] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2011.691336][ T5863] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2011.700709][T18825] bond0 (unregistering): Released all slaves [ 2011.741480][ T5863] usb 1-1: device descriptor read/8, error -71 [ 2011.750660][T24924] hsr_slave_0: entered promiscuous mode [ 2011.761334][T24924] hsr_slave_1: entered promiscuous mode [ 2011.776056][T24924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2011.783677][T24924] Cannot create hsr debugfs directory [ 2011.812954][ T5250] lo speed is unknown, defaulting to 1000 [ 2012.039133][ T5863] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2012.076181][ T5863] usb 1-1: device descriptor read/8, error -71 [ 2012.211323][ T5863] usb usb1-port1: unable to enumerate USB device [ 2012.287801][T18825] IPVS: stop unused estimator thread 0... [ 2013.423309][T24924] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2013.451460][T24924] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2013.469096][T24924] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2013.492776][T24924] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2013.810312][T24924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2014.020588][T24924] 8021q: adding VLAN 0 to HW filter on device team0 [ 2014.050374][T22485] bridge0: port 1(bridge_slave_0) entered blocking state [ 2014.057588][T22485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2014.111750][T22485] bridge0: port 2(bridge_slave_1) entered blocking state [ 2014.118993][T22485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2014.956813][T24924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2014.975628][ T9931] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2015.112031][T24924] veth0_vlan: entered promiscuous mode [ 2015.135759][ T9931] usb 2-1: device descriptor read/64, error -71 [ 2015.145996][T24924] veth1_vlan: entered promiscuous mode [ 2015.257611][T24924] veth0_macvtap: entered promiscuous mode [ 2015.283647][T24924] veth1_macvtap: entered promiscuous mode [ 2015.338204][T24924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2015.349012][T24924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.365932][T24924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2015.382833][T24924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.397072][T24924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2015.414493][T24924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.425440][ T9931] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2015.428245][T24924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2015.477559][T24924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2015.495563][T24924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.513793][T24924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2015.526188][T24924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.536583][T24924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2015.555469][T24924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.596939][T24924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2015.607883][ T9931] usb 2-1: device descriptor read/64, error -71 [ 2015.658367][T24924] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.675975][T24924] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.694324][T24924] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.703497][T24924] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.727772][ T9931] usb usb2-port1: attempt power cycle [ 2015.912554][T25193] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2015.938304][T10502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2015.971076][T10502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2016.030523][ T3413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2016.050193][ T3413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2016.185417][ T9931] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2016.232677][ T9931] usb 2-1: device descriptor read/8, error -71 [ 2016.535456][ T9931] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2016.545273][ T5250] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2016.601042][ T9931] usb 2-1: device descriptor read/8, error -71 [ 2016.754320][ T9931] usb usb2-port1: unable to enumerate USB device [ 2016.775450][ T5250] usb 4-1: Using ep0 maxpacket: 32 [ 2016.794786][ T5250] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2016.842124][ T5250] usb 4-1: config 0 has no interface number 0 [ 2016.871951][ T5250] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2016.882364][ T5250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.906553][ T5250] usb 4-1: Product: syz [ 2016.910837][ T5250] usb 4-1: Manufacturer: syz [ 2016.935373][ T5250] usb 4-1: SerialNumber: syz [ 2016.949771][ T5250] usb 4-1: config 0 descriptor?? [ 2016.970445][ T5250] smsc95xx v2.0.0 [ 2017.039356][T25218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4828'. [ 2017.060129][T25209] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4828'. [ 2017.521956][ T5250] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2017.593485][ T5250] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2018.100115][ T5250] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2018.144345][ T5250] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 2018.166913][ T5250] usb 4-1: USB disconnect, device number 57 [ 2019.014115][T25254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4835'. [ 2019.298436][T25262] ------------[ cut here ]------------ [ 2019.304546][T25262] WARNING: CPU: 0 PID: 25262 at fs/inode.c:389 inc_nlink+0x121/0x130 [ 2019.312884][T25262] Modules linked in: [ 2019.316941][T25262] CPU: 0 PID: 25262 Comm: syz.2.4838 Not tainted 6.6.95-syzkaller #0 [ 2019.325125][T25262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2019.335257][T25262] RIP: 0010:inc_nlink+0x121/0x130 [ 2019.340317][T25262] Code: 43 ea ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 39 43 ea ff e9 3f ff ff ff e8 6f 94 91 ff <0f> 0b eb 82 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 41 57 41 [ 2019.360151][T25262] RSP: 0018:ffffc9000451fc28 EFLAGS: 00010287 [ 2019.367127][T25262] RAX: ffffffff81f401f1 RBX: ffff888057caa338 RCX: 0000000000080000 [ 2019.375230][T25262] RDX: ffffc9000f3f4000 RSI: 00000000000061e3 RDI: 00000000000061e4 [ 2019.383236][T25262] RBP: 0000000000000000 R08: ffff888057caaf1b R09: 1ffff1100af955e3 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2019.391621][T25262] R10: dffffc0000000000 R11: ffffed100af955e4 R12: dffffc0000000000 [ 2019.400297][T25262] R13: 1ffff1100af95467 R14: ffff888057caa2e0 R15: 0000000000000000 [ 2019.408483][T25262] FS: 00007ff54cba06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2019.418568][T25262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2019.425260][T25262] CR2: 000000110c3d60c5 CR3: 000000006c1b1000 CR4: 00000000003506f0 [ 2019.433264][T25262] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2019.441371][T25262] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2019.450110][T25262] Call Trace: [ 2019.453612][T25262] [ 2019.456651][T25262] v9fs_vfs_mkdir_dotl+0x624/0x780 [ 2019.461993][T25262] ? v9fs_vfs_symlink_dotl+0x640/0x640 [ 2019.467584][T25262] ? capable_wrt_inode_uidgid+0x1e6/0x280 [ 2019.473351][T25262] ? inode_permission+0xf3/0x480 [ 2019.478427][T25262] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 2019.483485][T25262] ? security_inode_mkdir+0xb7/0x100 [ 2019.488864][T25262] vfs_mkdir+0x296/0x440 [ 2019.493150][T25262] do_mkdirat+0x1d4/0x440 [ 2019.497692][T25262] ? vfs_mkdir+0x440/0x440 [ 2019.502728][T25262] ? getname_flags+0x20a/0x500 [ 2019.507750][T25262] __x64_sys_mkdir+0x6e/0x80 [ 2019.512464][T25262] do_syscall_64+0x55/0xb0 [ 2019.516977][T25262] ? clear_bhb_loop+0x40/0x90 [ 2019.521689][T25262] ? clear_bhb_loop+0x40/0x90 [ 2019.526782][T25262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2019.532719][T25262] RIP: 0033:0x7ff54bd8e929 [ 2019.537558][T25262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2019.557324][T25262] RSP: 002b:00007ff54cba0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2019.565826][T25262] RAX: ffffffffffffffda RBX: 00007ff54bfb5fa0 RCX: 00007ff54bd8e929 [ 2019.573827][T25262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 2019.581939][T25262] RBP: 00007ff54be10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2019.590369][T25262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2019.598530][T25262] R13: 0000000000000000 R14: 00007ff54bfb5fa0 R15: 00007ffe9ad96e48 [ 2019.608832][T25262] [ 2019.611884][T25262] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2019.619194][T25262] CPU: 0 PID: 25262 Comm: syz.2.4838 Not tainted 6.6.95-syzkaller #0 [ 2019.627285][T25262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2019.637362][T25262] Call Trace: [ 2019.640658][T25262] [ 2019.643597][T25262] dump_stack_lvl+0x16c/0x230 [ 2019.648306][T25262] ? show_regs_print_info+0x20/0x20 [ 2019.653627][T25262] ? load_image+0x3b0/0x3b0 [ 2019.658198][T25262] panic+0x2c0/0x710 [ 2019.662126][T25262] ? bpf_jit_dump+0xd0/0xd0 [ 2019.666678][T25262] __warn+0x2e0/0x470 [ 2019.670704][T25262] ? inc_nlink+0x121/0x130 [ 2019.675152][T25262] ? inc_nlink+0x121/0x130 [ 2019.679620][T25262] report_bug+0x2be/0x4f0 [ 2019.683988][T25262] ? inc_nlink+0x121/0x130 [ 2019.688429][T25262] ? inc_nlink+0x121/0x130 [ 2019.692884][T25262] ? inc_nlink+0x123/0x130 [ 2019.697332][T25262] handle_bug+0xcf/0x120 [ 2019.701608][T25262] exc_invalid_op+0x1a/0x50 [ 2019.706136][T25262] asm_exc_invalid_op+0x1a/0x20 [ 2019.711102][T25262] RIP: 0010:inc_nlink+0x121/0x130 [ 2019.716152][T25262] Code: 43 ea ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 39 43 ea ff e9 3f ff ff ff e8 6f 94 91 ff <0f> 0b eb 82 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 41 57 41 [ 2019.735762][T25262] RSP: 0018:ffffc9000451fc28 EFLAGS: 00010287 [ 2019.741825][T25262] RAX: ffffffff81f401f1 RBX: ffff888057caa338 RCX: 0000000000080000 [ 2019.749794][T25262] RDX: ffffc9000f3f4000 RSI: 00000000000061e3 RDI: 00000000000061e4 [ 2019.757761][T25262] RBP: 0000000000000000 R08: ffff888057caaf1b R09: 1ffff1100af955e3 [ 2019.765726][T25262] R10: dffffc0000000000 R11: ffffed100af955e4 R12: dffffc0000000000 [ 2019.773698][T25262] R13: 1ffff1100af95467 R14: ffff888057caa2e0 R15: 0000000000000000 [ 2019.781669][T25262] ? inc_nlink+0x121/0x130 [ 2019.786100][T25262] ? inc_nlink+0x121/0x130 [ 2019.790526][T25262] v9fs_vfs_mkdir_dotl+0x624/0x780 [ 2019.795655][T25262] ? v9fs_vfs_symlink_dotl+0x640/0x640 [ 2019.801126][T25262] ? capable_wrt_inode_uidgid+0x1e6/0x280 [ 2019.806866][T25262] ? inode_permission+0xf3/0x480 [ 2019.811798][T25262] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 2019.816820][T25262] ? security_inode_mkdir+0xb7/0x100 [ 2019.822108][T25262] vfs_mkdir+0x296/0x440 [ 2019.826352][T25262] do_mkdirat+0x1d4/0x440 [ 2019.830680][T25262] ? vfs_mkdir+0x440/0x440 [ 2019.835086][T25262] ? getname_flags+0x20a/0x500 [ 2019.839843][T25262] __x64_sys_mkdir+0x6e/0x80 [ 2019.844428][T25262] do_syscall_64+0x55/0xb0 [ 2019.848863][T25262] ? clear_bhb_loop+0x40/0x90 [ 2019.853552][T25262] ? clear_bhb_loop+0x40/0x90 [ 2019.858321][T25262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2019.864228][T25262] RIP: 0033:0x7ff54bd8e929 [ 2019.868655][T25262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2019.888269][T25262] RSP: 002b:00007ff54cba0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2019.896678][T25262] RAX: ffffffffffffffda RBX: 00007ff54bfb5fa0 RCX: 00007ff54bd8e929 [ 2019.904638][T25262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 2019.912599][T25262] RBP: 00007ff54be10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2019.920562][T25262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2019.928524][T25262] R13: 0000000000000000 R14: 00007ff54bfb5fa0 R15: 00007ffe9ad96e48 [ 2019.936515][T25262] [ 2019.939779][T25262] Kernel Offset: disabled [ 2019.944180][T25262] Rebooting in 86400 seconds..