last executing test programs: 2m39.202401257s ago: executing program 2 (id=724): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(r0, &(0x7f0000001840)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x29, 0x43}], 0x18}], 0x1, 0x0) 2m38.448135535s ago: executing program 2 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df974c2", 0x7}], 0x2) 2m1.268812388s ago: executing program 2 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df974c2", 0x7}], 0x2) 1m21.921406061s ago: executing program 2 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df974c2", 0x7}], 0x2) 47.664049063s ago: executing program 2 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df974c2", 0x7}], 0x2) 13.113356056s ago: executing program 1 (id=1062): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x100, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 12.97312858s ago: executing program 2 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df974c2", 0x7}], 0x2) 9.31317084s ago: executing program 1 (id=1064): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f00000007c0)="$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") r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001180)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="8000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x9c}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0xdc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0xd, 0xa, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x700}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x0, 0x1, 0x2, 0xa, 0x3, 0x80}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xf2, &(0x7f00000004c0)=""/242, 0x100, 0x24, '\x00', r4, @sock_ops, r2, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x0, 0x5, 0x5}, 0x10, r7, r1, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x8, @void, @value}, 0x90) write$binfmt_script(r2, &(0x7f0000000d80), 0x208e24b) fdatasync(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, 0x0, &(0x7f0000000200)=""/166}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)=ANY=[], &(0x7f0000000400), 0x1000) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4}, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 9.259270391s ago: executing program 4 (id=1066): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x24}}, 0x0) 8.58086139s ago: executing program 3 (id=1067): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000001240)=[0x0], 0x1}) 7.443211841s ago: executing program 3 (id=1069): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, 0x0, 0x49) 7.203517016s ago: executing program 4 (id=1070): r0 = io_uring_setup(0xfc2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.527339182s ago: executing program 1 (id=1071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000018c0)={@val={0x0, 0x800}, @val={0x1}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x3, 0x35372285efa70451, 0x0, 0x0, 0x1, 0x4972, {0x5, 0x4, 0x2, 0x1b, 0x7, 0x65, 0x57, 0x78, 0x84, 0x8, @broadcast, @remote}}}}, 0x3e) 6.410928826s ago: executing program 4 (id=1072): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x5, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x541b, 0x0) 5.669047184s ago: executing program 4 (id=1073): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x65}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='SYNTH\nVOLUME \'Synth '], 0xb9) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 5.637151058s ago: executing program 3 (id=1074): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$unix(0x1, 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x891d, &(0x7f0000000000)="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") ioctl$TUNSETNOCSUM(r0, 0x8921, 0x20000000) 4.951297198s ago: executing program 0 (id=1075): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) ioctl$EVIOCSREP(r2, 0x40084502, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x5, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_x_sec_ctx={0x1}]}, 0x70}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 4.722240345s ago: executing program 4 (id=1076): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x101, &(0x7f0000000240)=0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000140), 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x8008550e, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000280)=""/239, 0xef) write$char_usb(r4, &(0x7f0000000240), 0x0) read$char_usb(r4, 0x0, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') 4.705779111s ago: executing program 1 (id=1077): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 4.082711538s ago: executing program 3 (id=1078): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x2, 0x0, {0x42, 0x10000001}}, 0x10, 0x0}, 0x0) close(r0) 3.980487297s ago: executing program 0 (id=1079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)={0x90, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x67, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @from_mac, {}, @value}, 0x0, @random, 0x0, @void, @val, @void, @val={0x4, 0x6}, @void, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x0, 0x0, 0x0]}]}, 0x90}}, 0x0) 3.461036798s ago: executing program 3 (id=1080): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x30, r3, 0x20b, 0x0, 0x0, {{0x9}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x30}}, 0x0) 3.13138157s ago: executing program 0 (id=1081): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0xee01, 0x0) 2.539213794s ago: executing program 3 (id=1082): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000001380)=[{r1}], 0x1, &(0x7f00000013c0)={0x0, 0x989680}, 0x0, 0x0) 2.254481607s ago: executing program 0 (id=1083): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='ext4_request_blocks\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r3, r2, 0x7, 0x0, @void}, 0x10) 2.227821179s ago: executing program 1 (id=1084): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r2, 0x80000001, 0x0, 0xb, 0x1fd, 0x1}) 1.519210733s ago: executing program 0 (id=1085): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.330920702s ago: executing program 1 (id=1086): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x101, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(0x0, 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023031000070060"]) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x8008550e, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b40000000000000063111400fc00a9009500050000001f1af19b85099d230000a87afa9bbbc8fe6b113e3711999a01a3c67720dd2f496eb161ab4848e2e6"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffffff, 0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000280)=""/239, 0xef) write$char_usb(r4, &(0x7f0000000240)="96", 0x1) read$char_usb(r4, 0x0, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') 1.327396327s ago: executing program 4 (id=1087): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x101, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000140), 0x4) open(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x8008550e, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffffff, 0x0, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000280)=""/239, 0xef) write$char_usb(r4, &(0x7f0000000240)="96", 0x1) read$char_usb(r4, 0x0, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) chdir(&(0x7f00000000c0)='./bus\x00') 0s ago: executing program 0 (id=1088): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0x6, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000780)="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", 0x54e676f5, 0xc000, 0x0, 0xffffffffffffff59) kernel console output (not intermixed with test programs): 8 has an invalid descriptor of length 255, skipping remainder of the config [ 449.362842][ T1588] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 449.374631][ T1588] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.447183][ T1588] usb 2-1: string descriptor 0 read error: -22 [ 449.454197][ T1588] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 449.463691][ T1588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.521313][ T1588] adutux 2-1:168.0: interrupt endpoints not found [ 449.772013][ T1588] usb 2-1: USB disconnect, device number 3 [ 450.047114][ T7258] overlayfs: failed to resolve './file1': -2 [ 450.145928][ T7271] loop0: detected capacity change from 0 to 2048 [ 450.254819][ T7276] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 450.255084][ T7271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.429020][ T7271] netlink: 68 bytes leftover after parsing attributes in process `syz.0.720'. [ 450.552520][ T7284] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 450.612942][ T7284] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 100 with error 28 [ 450.626045][ T7284] EXT4-fs (loop0): This should not happen!! Data will be lost [ 450.626045][ T7284] [ 450.638985][ T7284] EXT4-fs (loop0): Total free blocks count 0 [ 450.645474][ T7284] EXT4-fs (loop0): Free/Dirty block details [ 450.651601][ T7284] EXT4-fs (loop0): free_blocks=66060288 [ 450.657641][ T7284] EXT4-fs (loop0): dirty_blocks=112 [ 450.663101][ T7284] EXT4-fs (loop0): Block reservation details [ 450.678746][ T7284] EXT4-fs (loop0): i_reserved_data_blocks=7 [ 451.329736][ T3337] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.552112][ T3337] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.707584][ T4549] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 451.783151][ T3337] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.918318][ T3337] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.981398][ T7294] netlink: 'syz.3.728': attribute type 1 has an invalid length. [ 452.190101][ T7297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.220161][ T7297] bond0: (slave bond2): Enslaving as an active interface with an up link [ 452.448898][ T7294] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.458116][ T7294] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 452.468957][ T7294] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 452.698820][ T3337] bridge_slave_1: left allmulticast mode [ 452.704756][ T3337] bridge_slave_1: left promiscuous mode [ 452.711654][ T3337] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.881718][ T3337] bridge_slave_0: left allmulticast mode [ 452.891074][ T3337] bridge_slave_0: left promiscuous mode [ 452.898011][ T3337] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.562977][ T3337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.583915][ T3337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.616935][ T3337] bond0 (unregistering): Released all slaves [ 453.946948][ T7305] Driver unsupported XDP return value 0 on prog (id 164) dev N/A, expect packet loss! [ 454.002375][ T7307] overlay: filesystem on ./file0 is read-only [ 454.196004][ T5252] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 454.471913][ T5252] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 454.484076][ T5252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 454.495652][ T5252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 454.505806][ T5252] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 454.519180][ T5252] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 454.528637][ T5252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.613947][ T5252] usb 5-1: config 0 descriptor?? [ 454.691297][ T7311] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 454.980575][ T5196] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 454.997059][ T5196] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 455.010029][ T5196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 455.026701][ T3337] hsr_slave_0: left promiscuous mode [ 455.040470][ T5196] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 455.058769][ T5196] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 455.083683][ T5196] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 455.102936][ T3337] hsr_slave_1: left promiscuous mode [ 455.200721][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.208957][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.229522][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.237754][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.260730][ T5252] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 455.296686][ T3337] veth1_macvtap: left promiscuous mode [ 455.302596][ T3337] veth0_macvtap: left promiscuous mode [ 455.308914][ T3337] veth1_vlan: left promiscuous mode [ 455.317881][ T3337] veth0_vlan: left promiscuous mode [ 455.364469][ T5252] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 455.661775][ T5275] usb 5-1: USB disconnect, device number 8 [ 456.434655][ T3337] team0 (unregistering): Port device team_slave_1 removed [ 456.530600][ T3337] team0 (unregistering): Port device team_slave_0 removed [ 456.981441][ T7327] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 457.014511][ T3071] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 457.281010][ T5196] Bluetooth: hci3: command tx timeout [ 457.379692][ T5252] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 457.398901][ T3071] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 457.596128][ T5252] usb 5-1: Using ep0 maxpacket: 8 [ 457.624609][ T5252] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 457.636810][ T5252] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 457.650097][ T5252] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.747546][ T5252] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 457.756494][ T5252] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 457.769008][ T5252] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.796668][ T3337] IPVS: stop unused estimator thread 0... [ 457.834575][ T5252] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 457.846015][ T5252] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 457.859054][ T5252] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.005680][ T5252] usb 5-1: string descriptor 0 read error: -22 [ 458.013608][ T5252] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 458.023422][ T5252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.084056][ T5252] adutux 5-1:168.0: interrupt endpoints not found [ 458.387602][ T5252] usb 5-1: USB disconnect, device number 9 [ 458.637739][ T7328] overlayfs: failed to resolve './file1': -2 [ 458.956508][ T7313] chnl_net:caif_netlink_parms(): no params data found [ 459.003138][ T7342] loop1: detected capacity change from 0 to 2048 [ 459.208312][ T7342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.365863][ T5196] Bluetooth: hci3: command tx timeout [ 459.486333][ T7342] netlink: 68 bytes leftover after parsing attributes in process `syz.1.740'. [ 459.592523][ T7352] netlink: 'syz.0.741': attribute type 1 has an invalid length. [ 459.841885][ T7358] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 459.912337][ T7359] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.928203][ T7359] bond0: (slave bond3): Enslaving as an active interface with an up link [ 459.951403][ T7358] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 382 with error 28 [ 459.964682][ T7358] EXT4-fs (loop1): This should not happen!! Data will be lost [ 459.964682][ T7358] [ 459.974879][ T7358] EXT4-fs (loop1): Total free blocks count 0 [ 459.984307][ T7358] EXT4-fs (loop1): Free/Dirty block details [ 459.993780][ T7358] EXT4-fs (loop1): free_blocks=66060288 [ 460.000670][ T7358] EXT4-fs (loop1): dirty_blocks=512 [ 460.009170][ T7358] EXT4-fs (loop1): Block reservation details [ 460.015683][ T7358] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 460.148660][ T7361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.160688][ T7361] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 460.171952][ T7361] bond3: (slave xfrm1): Error -95 calling set_mac_address [ 460.600421][ T7368] netlink: 'syz.3.744': attribute type 10 has an invalid length. [ 460.675716][ T7368] syz_tun: entered promiscuous mode [ 460.710014][ T7368] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 461.107072][ T3071] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 461.455751][ T5196] Bluetooth: hci3: command tx timeout [ 461.763655][ T7313] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.774804][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.785853][ T7313] bridge_slave_0: entered allmulticast mode [ 461.795584][ T7313] bridge_slave_0: entered promiscuous mode [ 461.906968][ T7313] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.914798][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.923488][ T7313] bridge_slave_1: entered allmulticast mode [ 461.940165][ T7313] bridge_slave_1: entered promiscuous mode [ 462.561975][ T7313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.638260][ T7385] loop1: detected capacity change from 0 to 64 [ 462.682653][ T7313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.831350][ T7385] process 'syz.1.746' launched './file1' with NULL argv: empty string added [ 462.996596][ T7313] team0: Port device team_slave_0 added [ 463.104315][ T7313] team0: Port device team_slave_1 added [ 463.188595][ T5253] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 463.413635][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.422611][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.452306][ T7313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.456427][ T5253] usb 4-1: Using ep0 maxpacket: 8 [ 463.600729][ T5196] Bluetooth: hci3: command tx timeout [ 463.631154][ T5253] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 463.638964][ T5253] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 463.650716][ T5253] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 463.662804][ T5253] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 463.677868][ T5253] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 463.814509][ T5253] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 463.822569][ T5253] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 463.836425][ T5253] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 463.848798][ T5253] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 463.860260][ T5253] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 463.887624][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.894784][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.921312][ T7313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.976405][ T5253] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 463.987381][ T5253] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 463.999943][ T5253] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.012190][ T5253] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 464.023781][ T5253] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 464.109520][ T5253] usb 4-1: string descriptor 0 read error: -22 [ 464.116686][ T5253] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 464.126319][ T5253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.327202][ T5253] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 464.512796][ T44] usb 4-1: USB disconnect, device number 7 [ 464.527313][ T7313] hsr_slave_0: entered promiscuous mode [ 464.590823][ T7313] hsr_slave_1: entered promiscuous mode [ 464.738721][ T7313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.746792][ T7313] Cannot create hsr debugfs directory [ 464.773967][ T7399] tipc: Enabling of bearer rejected, failed to enable media [ 466.352055][ T7400] loop0: detected capacity change from 0 to 4096 [ 466.400383][ T7400] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 466.835610][ T7400] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 467.551129][ T7313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 467.717457][ T7313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 467.880651][ T7313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 468.057276][ T7313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 469.598339][ T5275] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 469.845609][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 469.914787][ T5275] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 469.925511][ T5275] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 469.944383][ T5275] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 469.957274][ T5275] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 469.964878][ T7313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.971725][ T5275] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 469.992324][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 469.999309][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.066147][ T5275] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 470.073910][ T5275] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 470.091494][ T5275] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 470.104067][ T5275] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 470.112181][ T7435] loop1: detected capacity change from 0 to 4096 [ 470.118719][ T5275] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 470.215993][ T5275] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 470.223753][ T5275] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 470.241229][ T5275] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 470.254325][ T5275] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 470.268933][ T5275] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 470.300240][ T7313] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.361775][ T5275] usb 1-1: string descriptor 0 read error: -22 [ 470.369113][ T5275] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 470.378975][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.437794][ T3071] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.445698][ T3071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.583720][ T5275] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 470.610413][ T3071] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.618325][ T3071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.925961][ T44] usb 1-1: USB disconnect, device number 8 [ 471.127305][ T29] audit: type=1800 audit(1726331522.792:12): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.764" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 472.565847][ T5253] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 472.850860][ T5253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.862418][ T5253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.872769][ T5253] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 472.882375][ T5253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.978139][ T5253] usb 4-1: config 0 descriptor?? [ 473.008689][ T5247] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 473.325943][ T5247] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.340417][ T5247] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.499514][ T5247] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.509759][ T5253] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 473.524770][ T5247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.533423][ T5247] usb 2-1: Product: syz [ 473.537990][ T5247] usb 2-1: Manufacturer: syz [ 473.542834][ T5247] usb 2-1: SerialNumber: syz [ 473.563318][ T5253] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input12 [ 473.886479][ T7477] loop0: detected capacity change from 0 to 512 [ 473.958567][ T5253] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 474.006874][ T7313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.095053][ T5253] usb 4-1: USB disconnect, device number 8 [ 474.258259][ T7477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 474.271625][ T7477] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.909263][ T5247] cdc_ncm 2-1:1.0: bind() failure [ 474.969424][ T7313] veth0_vlan: entered promiscuous mode [ 475.037038][ T5247] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 475.157294][ T5247] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 475.170245][ T7313] veth1_vlan: entered promiscuous mode [ 475.208361][ T5247] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 475.336147][ T5247] usb 2-1: USB disconnect, device number 4 [ 475.494829][ T5191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 475.730040][ T7313] veth0_macvtap: entered promiscuous mode [ 475.802228][ T7313] veth1_macvtap: entered promiscuous mode [ 476.231538][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.242436][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.252645][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.263557][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.283479][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.297634][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.307803][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.318552][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.333736][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.737019][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.748155][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.758325][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.769060][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.779293][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.794331][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.805688][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.816534][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.831985][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.119129][ T7313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.128448][ T7313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.138412][ T7313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.147568][ T7313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.346019][ T1588] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 477.565451][ T1588] usb 5-1: Using ep0 maxpacket: 8 [ 477.646210][ T1588] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 477.653981][ T1588] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 477.666890][ T1588] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.679065][ T1588] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.692798][ T1588] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 477.796911][ T1588] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 477.808352][ T1588] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 477.820910][ T1588] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.833058][ T1588] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.844613][ T1588] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 477.918344][ T1588] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 477.926383][ T1588] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 477.938057][ T1588] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.950129][ T1588] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.961695][ T1588] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 478.061585][ T1588] usb 5-1: string descriptor 0 read error: -22 [ 478.069202][ T1588] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 478.078701][ T1588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.232694][ T1588] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 478.436429][ T5247] usb 5-1: USB disconnect, device number 10 [ 480.328882][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 481.135012][ T7556] TCP: TCP_TX_DELAY enabled [ 481.451817][ T7558] netlink: 'syz.3.798': attribute type 1 has an invalid length. [ 483.513584][ T7565] loop1: detected capacity change from 0 to 4096 [ 483.580393][ T7565] ntfs3: Unknown parameter '18446744073709551615' [ 485.945799][ T5253] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 486.175689][ T5253] usb 1-1: Using ep0 maxpacket: 8 [ 486.194313][ T5253] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 486.204976][ T5253] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 486.216851][ T5253] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.229089][ T5253] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 486.240580][ T5253] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 486.252265][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801bdbe000: rx timeout, send abort [ 486.263469][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801bdbe000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 486.347396][ T5253] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 486.357509][ T5253] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 486.369210][ T5253] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.381351][ T5253] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 486.393021][ T5253] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 486.447864][ T3101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.456169][ T3101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.555526][ T5253] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 486.570145][ T5253] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 486.581951][ T5253] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.594084][ T5253] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 486.605673][ T5253] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 486.709317][ T5253] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 486.720635][ T5253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.729905][ T5253] usb 1-1: Product: syz [ 486.734349][ T5253] usb 1-1: Manufacturer: syz [ 486.739358][ T5253] usb 1-1: SerialNumber: syz [ 486.838902][ T3101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.850254][ T3101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.179171][ T5253] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 487.286592][ T5253] usb 1-1: USB disconnect, device number 9 [ 487.387797][ T7611] overlayfs: failed to resolve './file1': -2 [ 488.330969][ T3101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.634647][ T3101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.882897][ T3101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.084914][ T3101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.477552][ T3101] bridge_slave_1: left allmulticast mode [ 489.487270][ T3101] bridge_slave_1: left promiscuous mode [ 489.493975][ T3101] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.607321][ T3101] bridge_slave_0: left allmulticast mode [ 489.613252][ T3101] bridge_slave_0: left promiscuous mode [ 489.620858][ T3101] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.256985][ T3101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.284056][ T3101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.326075][ T3101] bond0 (unregistering): Released all slaves [ 491.325809][ T3101] hsr_slave_0: left promiscuous mode [ 491.354881][ T3101] hsr_slave_1: left promiscuous mode [ 491.400733][ T3101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.409109][ T3101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.470207][ T3101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.478186][ T3101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.586701][ T3101] veth1_macvtap: left promiscuous mode [ 491.592675][ T3101] veth0_macvtap: left promiscuous mode [ 491.598872][ T3101] veth1_vlan: left promiscuous mode [ 491.610376][ T3101] veth0_vlan: left promiscuous mode [ 492.033281][ T5204] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 492.044716][ T5204] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 492.069913][ T5204] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 492.098956][ T5204] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 492.164735][ T5204] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 492.196659][ T5204] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 492.661425][ T7664] slcan: can't register candev [ 493.038408][ T3101] team0 (unregistering): Port device team_slave_1 removed [ 493.104259][ T3101] team0 (unregistering): Port device team_slave_0 removed [ 493.359545][ T7677] netlink: 'syz.1.828': attribute type 1 has an invalid length. [ 494.499901][ T5204] Bluetooth: hci3: command tx timeout [ 494.639069][ T7693] netlink: 'syz.0.832': attribute type 29 has an invalid length. [ 494.711039][ T7695] netlink: 'syz.0.832': attribute type 29 has an invalid length. [ 494.786473][ T7693] netlink: 'syz.0.832': attribute type 29 has an invalid length. [ 494.877021][ T7693] netlink: 'syz.0.832': attribute type 29 has an invalid length. [ 495.276476][ T44] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 495.344161][ T7665] chnl_net:caif_netlink_parms(): no params data found [ 495.515671][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 495.581818][ T44] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 495.591617][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 495.606753][ T44] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 495.619024][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 495.631894][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 495.704989][ T44] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 495.716451][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 495.729633][ T44] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 495.745120][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 495.756807][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 495.815632][ T44] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 495.823451][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 495.839514][ T44] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 495.852043][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 495.863784][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 495.926179][ T44] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 495.940154][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.949193][ T44] usb 5-1: Product: syz [ 495.953624][ T44] usb 5-1: Manufacturer: syz [ 495.958737][ T44] usb 5-1: SerialNumber: syz [ 496.246443][ T7709] lo: entered promiscuous mode [ 496.377372][ T7709] tunl0: entered promiscuous mode [ 496.455668][ T7709] gre0: entered promiscuous mode [ 496.578378][ T44] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 496.582884][ T5204] Bluetooth: hci3: command tx timeout [ 496.605641][ T7709] gretap0: entered promiscuous mode [ 496.689672][ T44] usb 5-1: USB disconnect, device number 11 [ 496.826100][ T7709] erspan0: entered promiscuous mode [ 496.879667][ T7709] ip_vti0: entered promiscuous mode [ 496.917609][ T7698] overlayfs: failed to resolve './file1': -2 [ 496.946439][ T29] audit: type=1326 audit(1726331548.632:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 496.972608][ T29] audit: type=1326 audit(1726331548.682:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 496.995609][ T29] audit: type=1326 audit(1726331548.682:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 497.018054][ T29] audit: type=1326 audit(1726331548.722:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 497.113565][ T7709] ip6_vti0: entered promiscuous mode [ 497.217409][ T7709] sit0: entered promiscuous mode [ 497.268079][ T7709] ip6tnl0: entered promiscuous mode [ 497.372262][ T7709] ip6gre0: entered promiscuous mode [ 497.452480][ T7709] syz_tun: entered promiscuous mode [ 497.510316][ T7709] ip6gretap0: entered promiscuous mode [ 497.554220][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.564637][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.582050][ T7709] bridge0: entered promiscuous mode [ 497.612471][ T7709] vcan0: entered promiscuous mode [ 497.623898][ T7709] bond0: entered promiscuous mode [ 497.630227][ T7709] bond_slave_0: entered promiscuous mode [ 497.640635][ T7709] bond_slave_1: entered promiscuous mode [ 497.647882][ T7709] bond1: entered promiscuous mode [ 497.653924][ T7709] bond2: entered promiscuous mode [ 497.660110][ T7709] bond3: entered promiscuous mode [ 497.710590][ T7709] team0: entered promiscuous mode [ 497.717880][ T7709] team_slave_0: entered promiscuous mode [ 497.729702][ T7709] team_slave_1: entered promiscuous mode [ 497.753887][ T7709] dummy0: entered promiscuous mode [ 497.776904][ T7709] nlmon0: entered promiscuous mode [ 497.796789][ T7709] caif0: entered promiscuous mode [ 497.814558][ T7709] batadv0: entered promiscuous mode [ 497.834703][ T7709] vxcan0: entered promiscuous mode [ 497.884229][ T7709] vxcan1: entered promiscuous mode [ 497.893865][ T7709] veth0: entered promiscuous mode [ 497.947845][ T7709] veth1: entered promiscuous mode [ 497.979730][ T7709] veth0_to_bridge: entered promiscuous mode [ 498.043255][ T7709] veth1_to_bridge: entered promiscuous mode [ 498.124653][ T7709] veth0_to_bond: entered promiscuous mode [ 498.210626][ T7709] veth1_to_bond: entered promiscuous mode [ 498.298794][ T7709] veth0_to_team: entered promiscuous mode [ 498.311367][ T7738] netlink: 'syz.1.840': attribute type 1 has an invalid length. [ 498.407243][ T7709] veth1_to_team: entered promiscuous mode [ 498.536287][ T7709] veth0_to_batadv: entered promiscuous mode [ 498.552656][ T7709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.616453][ T7709] batadv_slave_0: entered promiscuous mode [ 498.647187][ T5204] Bluetooth: hci3: command tx timeout [ 498.685918][ T7709] veth1_to_batadv: entered promiscuous mode [ 498.704676][ T7709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.748726][ T7709] batadv_slave_1: entered promiscuous mode [ 498.803001][ T7709] xfrm0: entered promiscuous mode [ 498.861278][ T7709] veth0_to_hsr: entered promiscuous mode [ 499.004611][ T7709] veth1_to_hsr: entered promiscuous mode [ 499.120169][ T7709] hsr0: entered promiscuous mode [ 499.145395][ T7709] veth1_virt_wifi: entered promiscuous mode [ 499.205785][ T7709] veth0_virt_wifi: entered promiscuous mode [ 499.223569][ T7709] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 499.410399][ T7709] vlan0: entered promiscuous mode [ 499.421960][ T7709] vlan1: entered promiscuous mode [ 499.462509][ T7709] macvlan0: entered promiscuous mode [ 499.546254][ T7709] macvlan1: entered promiscuous mode [ 499.563455][ T7709] ipvlan0: entered promiscuous mode [ 499.570122][ T7709] ipvlan1: entered promiscuous mode [ 499.644948][ T7709] macvtap0: entered promiscuous mode [ 499.665953][ T29] audit: type=1326 audit(1726331551.452:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.1.845" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x0 [ 499.673603][ T7709] macsec0: entered promiscuous mode [ 499.730426][ T7709] geneve0: entered promiscuous mode [ 499.760580][ T7709] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.771120][ T7709] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.780602][ T7709] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.790217][ T7709] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.807022][ T7709] geneve1: entered promiscuous mode [ 499.841616][ T7709] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 499.881811][ T7709] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 499.901676][ T7709] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 499.935568][ T7709] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 499.972550][ T7709] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 500.008312][ T7709] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 500.041103][ T7709] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 500.051249][ T7709] vlan2: entered promiscuous mode [ 500.056796][ T7709] vlan2: left allmulticast mode [ 500.734423][ T5204] Bluetooth: hci3: command tx timeout [ 501.501785][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.511017][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.519091][ T7665] bridge_slave_0: entered allmulticast mode [ 501.531816][ T7665] bridge_slave_0: entered promiscuous mode [ 501.630230][ T7760] loop1: detected capacity change from 0 to 2048 [ 501.718891][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.727785][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.735897][ T7665] bridge_slave_1: entered allmulticast mode [ 501.745500][ T7665] bridge_slave_1: entered promiscuous mode [ 501.881159][ T7760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.981285][ T7760] EXT4-fs (loop1): shut down requested (0) [ 502.259716][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.429354][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.468216][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.636183][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 502.780240][ T7665] team0: Port device team_slave_0 added [ 502.879461][ T7665] team0: Port device team_slave_1 added [ 502.925590][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 502.959647][ T7782] netlink: 224 bytes leftover after parsing attributes in process `syz.0.852'. [ 502.981017][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 502.988839][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 503.001868][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 503.014005][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 503.025535][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 503.129925][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 503.138381][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 503.150129][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 503.162396][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 503.174234][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 503.258373][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 503.268126][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 503.279929][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 503.292165][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 503.304893][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 503.381252][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 503.392286][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.400755][ T10] usb 4-1: Product: syz [ 503.406384][ T10] usb 4-1: Manufacturer: syz [ 503.411236][ T10] usb 4-1: SerialNumber: syz [ 503.480417][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.487791][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.515437][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.664966][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.672654][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.700145][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.911450][ T10] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 503.976669][ T10] usb 4-1: USB disconnect, device number 9 [ 504.030048][ T7792] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 504.131793][ T7777] overlayfs: failed to resolve './file1': -2 [ 504.259669][ T7665] hsr_slave_0: entered promiscuous mode [ 504.330176][ T7665] hsr_slave_1: entered promiscuous mode [ 504.357854][ T7665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.365823][ T7665] Cannot create hsr debugfs directory [ 504.966878][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 505.305784][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 505.425582][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 505.433454][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 505.445438][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 505.458757][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 505.470303][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 505.575635][ T7803] loop4: detected capacity change from 0 to 2048 [ 505.667714][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 505.676495][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 505.689352][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 505.701652][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 505.713121][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 505.802967][ T7803] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 505.860570][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 505.869424][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 505.881330][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 505.893456][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 505.905006][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 506.002392][ T10] usb 2-1: string descriptor 0 read error: -22 [ 506.009488][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 506.019128][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.199278][ T10] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 506.790098][ T7814] tc_dump_action: action bad kind [ 507.142236][ T7665] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 507.306201][ T7665] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 507.336558][ T7665] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 507.510949][ T7665] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 507.944970][ T10] usb 2-1: USB disconnect, device number 5 [ 509.411538][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.794324][ T7665] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.891520][ T3101] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.899391][ T3101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.010786][ T3101] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.018679][ T3101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.159010][ T7733] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 510.448715][ T7733] usb 4-1: Using ep0 maxpacket: 8 [ 510.498647][ T7733] usb 4-1: config 0 has no interfaces? [ 510.504579][ T7733] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 510.517477][ T7733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.588401][ T7733] usb 4-1: config 0 descriptor?? [ 510.904757][ T7717] usb 4-1: USB disconnect, device number 10 [ 511.116336][ T7838] loop1: detected capacity change from 0 to 4096 [ 511.316339][ T7838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.896502][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.051737][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.813969][ T7665] veth0_vlan: entered promiscuous mode [ 512.974374][ T7665] veth1_vlan: entered promiscuous mode [ 513.400688][ T7665] veth0_macvtap: entered promiscuous mode [ 513.511919][ T7665] veth1_macvtap: entered promiscuous mode [ 513.845729][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.859012][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.869239][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.880131][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.891705][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.902483][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.918316][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.988439][ T7873] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 514.164182][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.175827][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.188818][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.199613][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.210214][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.223985][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.239685][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.387255][ T7886] loop4: detected capacity change from 0 to 64 [ 514.470626][ T7665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.480851][ T7665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.493126][ T7665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.502509][ T7665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.608643][ T7733] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 514.835731][ T7733] usb 2-1: Using ep0 maxpacket: 8 [ 514.911356][ T7733] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 514.919439][ T7733] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 514.931330][ T7733] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 514.947026][ T7733] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 514.958610][ T7733] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 515.303756][ T7733] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 515.314877][ T7733] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 515.327706][ T7733] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 515.343363][ T7733] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 515.355042][ T7733] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 515.431950][ T7733] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 515.439987][ T7733] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 515.453122][ T7733] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 515.468290][ T7733] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 515.479980][ T7733] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 515.562146][ T7733] usb 2-1: string descriptor 0 read error: -22 [ 515.569323][ T7733] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 515.579081][ T7733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.714198][ T7733] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 516.897195][ T7892] loop3: detected capacity change from 0 to 4096 [ 516.955984][ T7892] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 517.840785][ T7716] usb 2-1: USB disconnect, device number 6 [ 518.493701][ T5189] bond0: (slave syz_tun): Releasing backup interface [ 518.705036][ T29] audit: type=1326 audit(1726331570.472:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 518.723609][ T3101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.728982][ T29] audit: type=1326 audit(1726331570.472:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 518.761544][ T29] audit: type=1326 audit(1726331570.472:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=225 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 518.789177][ T29] audit: type=1326 audit(1726331570.472:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 518.811758][ T29] audit: type=1326 audit(1726331570.472:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 519.097607][ T3101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.301115][ T3101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.544841][ T3101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.066262][ T3101] bridge_slave_1: left allmulticast mode [ 520.072223][ T3101] bridge_slave_1: left promiscuous mode [ 520.079351][ T3101] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.176438][ T3101] bridge_slave_0: left allmulticast mode [ 520.182357][ T3101] bridge_slave_0: left promiscuous mode [ 520.189280][ T3101] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.005700][ T3101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.078608][ T3101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.146759][ T3101] bond0 (unregistering): (slave bond1): Releasing backup interface [ 521.160258][ T3101] bond0 (unregistering): (slave bond2): Releasing backup interface [ 521.201199][ T3101] bond0 (unregistering): Released all slaves [ 521.224571][ T3101] bond1 (unregistering): Released all slaves [ 521.249831][ T3101] bond2 (unregistering): Released all slaves [ 522.447868][ T3101] hsr_slave_0: left promiscuous mode [ 522.489510][ T3101] hsr_slave_1: left promiscuous mode [ 522.504268][ T5196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 522.514815][ T5196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 522.530660][ T3101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.539329][ T3101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.551073][ T5196] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 522.573091][ T5196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 522.593828][ T5196] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 522.604338][ T5196] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 522.627162][ T3101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.635002][ T3101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.766620][ T3101] veth1_macvtap: left promiscuous mode [ 522.772394][ T3101] veth0_macvtap: left promiscuous mode [ 522.778931][ T3101] veth1_vlan: left promiscuous mode [ 522.784554][ T3101] veth0_vlan: left promiscuous mode [ 523.485660][ T7966] loop1: detected capacity change from 0 to 2048 [ 523.649525][ T7967] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 523.702216][ T7966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.716894][ T7966] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.093165][ T3101] team0 (unregistering): Port device team_slave_1 removed [ 524.118423][ T7733] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 524.154968][ T3101] team0 (unregistering): Port device team_slave_0 removed [ 524.449369][ T7733] usb 1-1: Using ep0 maxpacket: 8 [ 524.609260][ T7733] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 524.617205][ T7733] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 524.632498][ T7733] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 524.644698][ T7733] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 524.659165][ T7733] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 524.759280][ T5196] Bluetooth: hci0: command tx timeout [ 524.822025][ T7733] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 524.830092][ T7733] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 524.845945][ T7733] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 524.858762][ T7733] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 524.858966][ T7733] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 524.919663][ T7733] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 524.919843][ T7733] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 524.920034][ T7733] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 524.920212][ T7733] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 524.920411][ T7733] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 524.983363][ T7733] usb 1-1: string descriptor 0 read error: -22 [ 524.983949][ T7733] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 524.984122][ T7733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.193001][ T7733] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 525.633655][ T7733] usb 1-1: USB disconnect, device number 10 [ 525.665971][ T7967] usb 1-1: Couldn't submit interrupt_out_urb -19 [ 525.707437][ T7979] adutux: No device or device unplugged -19 [ 525.716329][ T7980] adutux: No device or device unplugged -19 [ 525.902608][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.959207][ T7963] overlayfs: failed to resolve './file1': -2 [ 526.267433][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.276110][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.577120][ T3101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.585749][ T3101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.602321][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 526.805589][ T5196] Bluetooth: hci0: command tx timeout [ 527.024825][ T7957] chnl_net:caif_netlink_parms(): no params data found [ 527.195725][ T7716] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 527.486223][ T7716] usb 5-1: Using ep0 maxpacket: 8 [ 527.518018][ T7716] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 527.526012][ T7716] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 527.538031][ T7716] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 527.550160][ T7716] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 527.561906][ T7716] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 527.662439][ T7716] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 527.670682][ T7716] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 527.685596][ T7716] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 527.698481][ T7716] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 527.710082][ T7716] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 527.849781][ T7716] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 527.858126][ T7716] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 527.869939][ T7716] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 527.884961][ T7716] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 527.897468][ T7716] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 527.932752][ T3071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.011215][ T7716] usb 5-1: string descriptor 0 read error: -22 [ 528.019419][ T7716] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 528.029843][ T7716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.091110][ T3071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.171234][ T7716] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 528.263925][ T3071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.443668][ T3071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.755061][ T7733] usb 5-1: USB disconnect, device number 12 [ 528.808697][ T8003] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 528.866309][ T8004] adutux: No device or device unplugged -19 [ 528.907390][ T8006] adutux: No device or device unplugged -19 [ 528.916355][ T5196] Bluetooth: hci0: command tx timeout [ 529.014685][ T7994] overlayfs: failed to resolve './file1': -2 [ 529.019303][ T3071] bridge_slave_1: left allmulticast mode [ 529.026932][ T3071] bridge_slave_1: left promiscuous mode [ 529.033662][ T3071] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.158811][ T3071] bridge_slave_0: left allmulticast mode [ 529.164753][ T3071] bridge_slave_0: left promiscuous mode [ 529.171787][ T3071] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.829912][ T3071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.938477][ T3071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.017018][ T3071] bond0 (unregistering): Released all slaves [ 530.604905][ T8023] Bluetooth: MGMT ver 1.23 [ 530.649245][ T8021] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 530.702878][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.713960][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.722347][ T7957] bridge_slave_0: entered allmulticast mode [ 530.731952][ T7957] bridge_slave_0: entered promiscuous mode [ 530.966303][ T5204] Bluetooth: hci0: command tx timeout [ 530.988050][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.996033][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.003869][ T7957] bridge_slave_1: entered allmulticast mode [ 531.017068][ T7957] bridge_slave_1: entered promiscuous mode [ 531.397412][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.406402][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.469210][ T5193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 531.483876][ T3071] hsr_slave_0: left promiscuous mode [ 531.488182][ T5193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 531.500023][ T5193] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 531.514403][ T5193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 531.526509][ T5193] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 531.536613][ T5193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 531.587781][ T3071] hsr_slave_1: left promiscuous mode [ 531.645124][ T3071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.653236][ T3071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.717663][ T3071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.725633][ T3071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.792395][ T3071] veth1_macvtap: left promiscuous mode [ 531.798600][ T3071] veth0_macvtap: left promiscuous mode [ 531.804563][ T3071] veth1_vlan: left promiscuous mode [ 531.811427][ T3071] veth0_vlan: left promiscuous mode [ 532.736053][ T5196] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 532.842227][ T8042] loop4: detected capacity change from 0 to 2048 [ 532.846493][ T3071] team0 (unregistering): Port device team_slave_1 removed [ 532.934760][ T8042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.947973][ T8042] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.973341][ T3071] team0 (unregistering): Port device team_slave_0 removed [ 533.046034][ T5196] Bluetooth: hci0: command 0x0401 tx timeout [ 533.464142][ T7957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.502799][ T7957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.610459][ T5196] Bluetooth: hci3: command tx timeout [ 533.657476][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.913'. [ 533.833726][ T7957] team0: Port device team_slave_0 added [ 533.876410][ T7957] team0: Port device team_slave_1 added [ 534.091083][ T5197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.207985][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.215493][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.243258][ T7957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.349288][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.356909][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.387452][ T7957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.074952][ T7957] hsr_slave_0: entered promiscuous mode [ 535.126580][ T5196] Bluetooth: hci0: command 0x0401 tx timeout [ 535.182637][ T7957] hsr_slave_1: entered promiscuous mode [ 535.235786][ T7957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.243639][ T7957] Cannot create hsr debugfs directory [ 535.244763][ T8060] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 535.695550][ T5196] Bluetooth: hci3: command tx timeout [ 536.194526][ T8030] chnl_net:caif_netlink_parms(): no params data found [ 536.277419][ T5275] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 536.605449][ T5275] usb 5-1: Using ep0 maxpacket: 8 [ 536.891475][ T8077] loop1: detected capacity change from 0 to 512 [ 537.106292][ T5275] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 537.114231][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 537.129010][ T5275] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.141494][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 537.153255][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 537.174013][ T8077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.187245][ T8077] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 537.266574][ T5275] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 537.274281][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 537.289160][ T5275] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.302026][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 537.313587][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 537.351251][ T5275] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 537.361976][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 537.373865][ T5275] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.389096][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 537.400780][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 537.492517][ T5275] usb 5-1: string descriptor 0 read error: -22 [ 537.499689][ T5275] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 537.513420][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.667904][ T5275] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 537.765915][ T5196] Bluetooth: hci3: command tx timeout [ 537.800606][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.438916][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.446891][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.454731][ T8030] bridge_slave_0: entered allmulticast mode [ 538.464546][ T8030] bridge_slave_0: entered promiscuous mode [ 538.605420][ T7957] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 538.686680][ T7957] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 538.755830][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.763645][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.771696][ T8030] bridge_slave_1: entered allmulticast mode [ 538.781378][ T8030] bridge_slave_1: entered promiscuous mode [ 538.845848][ T7957] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 539.128808][ T7957] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 539.198173][ T8030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.278635][ T8030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.344406][ T7712] usb 5-1: USB disconnect, device number 13 [ 539.580576][ T8101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'. [ 539.703420][ T8030] team0: Port device team_slave_0 added [ 539.775497][ T8030] team0: Port device team_slave_1 added [ 539.910792][ T5193] Bluetooth: hci3: command tx timeout [ 540.084011][ T8101] loop0: detected capacity change from 0 to 2048 [ 540.146103][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.153343][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.181067][ T8030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.339405][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.341386][ T8101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.347333][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.347487][ T8030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.360031][ T8101] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.104445][ T8030] hsr_slave_0: entered promiscuous mode [ 541.162334][ T8030] hsr_slave_1: entered promiscuous mode [ 541.204653][ T8030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.212897][ T8030] Cannot create hsr debugfs directory [ 541.271654][ T5191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.521485][ T7957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.821335][ T7957] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.828891][ T8114] loop1: detected capacity change from 0 to 2048 [ 541.960081][ T8114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.159252][ T29] audit: type=1800 audit(1726331593.912:23): pid=8114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.930" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 542.252487][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.260446][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.387837][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.395677][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.522940][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.095712][ T7713] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 543.494195][ T8030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 543.515410][ T7713] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 543.525022][ T7713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.534008][ T7713] usb 1-1: Product: syz [ 543.538624][ T7713] usb 1-1: Manufacturer: syz [ 543.543519][ T7713] usb 1-1: SerialNumber: syz [ 543.568546][ T7713] usb 1-1: config 0 descriptor?? [ 543.710844][ T8030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 543.789646][ T8030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 543.880037][ T8030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 544.302060][ T5275] usb 1-1: USB disconnect, device number 11 [ 544.359038][ T8140] loop1: detected capacity change from 0 to 8 [ 544.408613][ T8140] squashfs: Unknown parameter '˙˙˙0xffffffffffffffff˙' [ 545.796907][ T8030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.830870][ T7957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.050139][ T8030] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.163310][ T4483] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.171239][ T4483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.213014][ T8153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.940'. [ 546.331034][ T4483] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.338899][ T4483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.696138][ T7957] veth0_vlan: entered promiscuous mode [ 546.896783][ T7957] veth1_vlan: entered promiscuous mode [ 547.060879][ T8153] loop1: detected capacity change from 0 to 2048 [ 547.338910][ T8153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.352241][ T8153] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.488395][ T7957] veth0_macvtap: entered promiscuous mode [ 547.723165][ T7957] veth1_macvtap: entered promiscuous mode [ 548.001622][ T7957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.014148][ T7957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.024840][ T7957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.035690][ T7957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.052284][ T7957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.312174][ T7957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.323733][ T7957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.334709][ T7957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.346067][ T7957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.362606][ T7957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.651872][ T7957] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.661865][ T7957] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.672642][ T7957] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.681958][ T7957] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.735799][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.253773][ T8030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.841256][ T8181] loop1: detected capacity change from 0 to 2048 [ 549.854606][ T8030] veth0_vlan: entered promiscuous mode [ 549.971460][ T8030] veth1_vlan: entered promiscuous mode [ 550.041051][ T8181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.140994][ T8181] netlink: 68 bytes leftover after parsing attributes in process `syz.1.945'. [ 550.293020][ T8030] veth0_macvtap: entered promiscuous mode [ 550.357104][ T8030] veth1_macvtap: entered promiscuous mode [ 550.411128][ T8192] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 550.478038][ T8192] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 254 with error 28 [ 550.493116][ T8192] EXT4-fs (loop1): This should not happen!! Data will be lost [ 550.493116][ T8192] [ 550.504112][ T8192] EXT4-fs (loop1): Total free blocks count 0 [ 550.511696][ T8192] EXT4-fs (loop1): Free/Dirty block details [ 550.517992][ T8192] EXT4-fs (loop1): free_blocks=66060288 [ 550.523807][ T8192] EXT4-fs (loop1): dirty_blocks=256 [ 550.531996][ T8192] EXT4-fs (loop1): Block reservation details [ 550.534977][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.538409][ T8192] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 550.559062][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.569299][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.580480][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.593455][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.604262][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.623282][ T8030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.840312][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.851414][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.866196][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.877140][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.890570][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.901562][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.920693][ T8030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.111897][ T8030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.121353][ T8030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.134413][ T8030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.145448][ T8030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.282008][ T4549] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 552.875593][ T7713] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 553.108325][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.950'. [ 553.137193][ T7713] usb 5-1: Using ep0 maxpacket: 8 [ 553.166697][ T7713] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 553.175615][ T7713] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 553.188634][ T7713] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.200865][ T7713] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 553.212536][ T7713] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 553.286137][ T7713] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 553.293958][ T7713] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 553.306431][ T7713] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.319247][ T7713] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 553.330772][ T7713] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 553.380290][ T7713] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 553.388216][ T7713] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 553.399906][ T7713] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.412170][ T7713] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 553.423631][ T7713] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 553.480450][ T7713] usb 5-1: string descriptor 0 read error: -22 [ 553.488778][ T7713] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 553.498547][ T7713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.647607][ T7713] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 553.870568][ T7713] usb 5-1: USB disconnect, device number 14 [ 554.120380][ T8219] overlayfs: failed to resolve './file1': -2 [ 554.555925][ T8240] netlink: 'syz.1.952': attribute type 1 has an invalid length. [ 554.810921][ T8240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 554.826937][ T8240] bond2: entered promiscuous mode [ 554.833109][ T8240] bond2: entered allmulticast mode [ 554.841992][ T8240] bond0: (slave bond2): Enslaving as an active interface with an up link [ 554.978890][ T8247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 554.988114][ T8247] bond2: (slave xfrm2): The slave device specified does not support setting the MAC address [ 555.001745][ T8247] bond2: (slave xfrm2): Error -95 calling set_mac_address [ 555.583892][ T8255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.954'. [ 556.240302][ T8255] loop4: detected capacity change from 0 to 2048 [ 556.461822][ T8255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.475917][ T8255] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.307870][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.316162][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.440010][ T5197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.641900][ T4483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.650151][ T4483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.695991][ T8305] netlink: 'syz.4.964': attribute type 1 has an invalid length. [ 560.039082][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.047440][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.172028][ T8305] 8021q: adding VLAN 0 to HW filter on device bond4 [ 560.190285][ T8305] bond0: (slave bond4): Enslaving as an active interface with an up link [ 560.384885][ T8305] 8021q: adding VLAN 0 to HW filter on device bond4 [ 560.394561][ T8305] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 560.405677][ T8305] bond4: (slave xfrm1): Error -95 calling set_mac_address [ 560.639069][ T4435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.649213][ T4435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.721605][ T8313] netlink: 'syz.3.966': attribute type 1 has an invalid length. [ 561.986858][ T4549] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.275048][ T4549] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.563053][ T4549] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.716874][ T4549] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.008896][ T4549] bridge_slave_1: left allmulticast mode [ 563.014853][ T4549] bridge_slave_1: left promiscuous mode [ 563.022060][ T4549] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.063208][ T4549] bridge_slave_0: left allmulticast mode [ 563.069734][ T4549] bridge_slave_0: left promiscuous mode [ 563.076786][ T4549] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.693298][ T4549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.745498][ T4549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.760836][ T4549] bond0 (unregistering): Released all slaves [ 564.438055][ T4549] hsr_slave_0: left promiscuous mode [ 564.476494][ T4549] hsr_slave_1: left promiscuous mode [ 564.513984][ T4549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.525024][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.574660][ T4549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.585847][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.679508][ T4549] veth1_macvtap: left promiscuous mode [ 564.685592][ T4549] veth0_macvtap: left promiscuous mode [ 564.691552][ T4549] veth1_vlan: left promiscuous mode [ 564.697419][ T4549] veth0_vlan: left promiscuous mode [ 565.311114][ T5196] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 565.321331][ T5196] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 565.331676][ T5196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 565.480512][ T8356] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 565.500237][ T5196] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 565.519498][ T5196] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 565.531191][ T5196] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 565.988702][ T7712] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 566.223087][ T4549] team0 (unregistering): Port device team_slave_1 removed [ 566.311732][ T4549] team0 (unregistering): Port device team_slave_0 removed [ 566.355617][ T7712] usb 5-1: Using ep0 maxpacket: 8 [ 566.679343][ T7712] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 566.687152][ T7712] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 566.703468][ T7712] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 566.715641][ T7712] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 566.727290][ T7712] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 566.806359][ T8351] tun0: tun_chr_ioctl cmd 1074025675 [ 566.811942][ T8351] tun0: persist enabled [ 566.840954][ T8352] tun0: tun_chr_ioctl cmd 1074025675 [ 566.847054][ T8352] tun0: persist enabled [ 566.899133][ T7712] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 566.907061][ T7712] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 566.918818][ T7712] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 566.930850][ T7712] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 566.942368][ T7712] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 567.018382][ T7712] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 567.026470][ T7712] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 567.040061][ T7712] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 567.052472][ T7712] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 567.063944][ T7712] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 567.132938][ T7712] usb 5-1: string descriptor 0 read error: -22 [ 567.142163][ T7712] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 567.152055][ T7712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.368397][ T7712] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 567.607217][ T5196] Bluetooth: hci3: command tx timeout [ 568.690425][ T8378] netlink: 'syz.0.982': attribute type 1 has an invalid length. [ 568.889689][ T8384] 8021q: adding VLAN 0 to HW filter on device bond4 [ 568.901962][ T8384] bond4: entered promiscuous mode [ 568.913015][ T8384] bond0: (slave bond4): Enslaving as an active interface with an up link [ 568.953739][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 568.954897][ T7712] usb 5-1: USB disconnect, device number 15 [ 569.395574][ T8378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 569.404543][ T8378] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 569.415657][ T8378] bond4: (slave xfrm1): Error -95 calling set_mac_address [ 569.588591][ T8353] chnl_net:caif_netlink_parms(): no params data found [ 569.685715][ T5196] Bluetooth: hci3: command tx timeout [ 570.387929][ T8390] loop4: detected capacity change from 0 to 2048 [ 570.789145][ T8390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.806262][ T8390] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.971527][ T8390] fs-verity: sha256 using implementation "sha256-generic" [ 571.346638][ T5197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.525598][ T8353] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.533456][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.541627][ T8353] bridge_slave_0: entered allmulticast mode [ 571.554030][ T8353] bridge_slave_0: entered promiscuous mode [ 571.765845][ T5196] Bluetooth: hci3: command tx timeout [ 571.770829][ T8353] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.779313][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.790236][ T8353] bridge_slave_1: entered allmulticast mode [ 571.800164][ T8353] bridge_slave_1: entered promiscuous mode [ 572.341030][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.502044][ T8353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.868252][ T8353] team0: Port device team_slave_0 added [ 572.958473][ T8353] team0: Port device team_slave_1 added [ 573.326591][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.333850][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.364449][ T8353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.523986][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.531944][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.561992][ T8353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.845639][ T5196] Bluetooth: hci3: command tx timeout [ 574.030946][ T8439] loop1: detected capacity change from 0 to 512 [ 574.117913][ T8439] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 574.267118][ T8439] EXT4-fs (loop1): 1 orphan inode deleted [ 574.273257][ T8439] EXT4-fs (loop1): 1 truncate cleaned up [ 574.283998][ T8439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.391262][ T8353] hsr_slave_0: entered promiscuous mode [ 574.434143][ T8353] hsr_slave_1: entered promiscuous mode [ 574.451013][ T8353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.459390][ T8353] Cannot create hsr debugfs directory [ 575.035802][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.193527][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1001'. [ 575.928683][ T8453] loop4: detected capacity change from 0 to 2048 [ 576.150490][ T8453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.171359][ T8453] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.855527][ T5275] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 577.108809][ T5275] usb 2-1: config 0 has no interfaces? [ 577.113165][ T8475] hsr0: entered allmulticast mode [ 577.114666][ T5275] usb 2-1: New USB device found, idVendor=046d, idProduct=20ee, bcdDevice= 0.00 [ 577.120368][ T8475] hsr_slave_0: entered allmulticast mode [ 577.120481][ T8475] hsr_slave_1: entered allmulticast mode [ 577.144801][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.240934][ T5275] usb 2-1: config 0 descriptor?? [ 577.259411][ T8353] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 577.417237][ T8353] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 577.554318][ T7712] usb 2-1: USB disconnect, device number 7 [ 577.619102][ T8353] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 577.734043][ T8353] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 577.767524][ T5197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.458075][ T8353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.779173][ T8353] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.807104][ T8500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1016'. [ 579.874256][ T4483] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.882087][ T4483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.049123][ T4483] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.056956][ T4483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.869520][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1019'. [ 580.881756][ T8510] bridge0: left promiscuous mode [ 581.138673][ T8512] hsr0: entered allmulticast mode [ 581.144024][ T8512] hsr_slave_0: entered allmulticast mode [ 581.150253][ T8512] hsr_slave_1: entered allmulticast mode [ 581.598982][ T8510] loop0: detected capacity change from 0 to 2048 [ 581.794913][ T8522] sit0: entered promiscuous mode [ 581.822064][ T8522] netlink: 'syz.3.1022': attribute type 1 has an invalid length. [ 581.830248][ T8522] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1022'. [ 581.939118][ T8510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.952623][ T8510] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.058431][ T8525] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 288: padding at end of block bitmap is not set [ 583.053869][ T8536] loop4: detected capacity change from 0 to 1024 [ 583.119846][ T8353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.129656][ T8536] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 583.151232][ T8537] loop3: detected capacity change from 0 to 1024 [ 583.190358][ T8537] EXT4-fs: Ignoring removed orlov option [ 583.241092][ T8536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.268571][ T8537] EXT4-fs (loop3): Test dummy encryption mode enabled [ 583.395841][ T8537] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 583.505649][ T5191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.648542][ T8537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.697986][ T8353] veth0_vlan: entered promiscuous mode [ 583.900147][ T8353] veth1_vlan: entered promiscuous mode [ 584.078417][ T5197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.433457][ T8353] veth0_macvtap: entered promiscuous mode [ 584.532354][ T8353] veth1_macvtap: entered promiscuous mode [ 584.799103][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.810088][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.824303][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.835234][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.848273][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.859074][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.874485][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.989650][ T8537] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 585.135826][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.146704][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.156909][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.167793][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.177984][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.188734][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.204574][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.398897][ T8353] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.409433][ T8353] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.421459][ T8353] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.431519][ T8353] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.668194][ T7957] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.738904][ T7732] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 586.999393][ T7732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.014510][ T7732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.024850][ T7732] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 587.041218][ T7732] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 587.052176][ T7732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.139482][ T7732] usb 1-1: config 0 descriptor?? [ 587.613415][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 587.669522][ T7732] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 587.707902][ T8583] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.718345][ T8583] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.728919][ T7732] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 587.795685][ T29] audit: type=1326 audit(1726331639.562:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.1.1039" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744d579 code=0x0 [ 587.864990][ T7732] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 588.583345][ T8587] loop3: detected capacity change from 0 to 2048 [ 588.720680][ T8587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.734323][ T8587] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.692652][ T7732] usb 1-1: USB disconnect, device number 12 [ 589.726227][ T5247] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 589.840467][ T7957] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.988363][ T8606] netlink: 'syz.1.1042': attribute type 1 has an invalid length. [ 590.000389][ T5247] usb 5-1: Using ep0 maxpacket: 8 [ 590.056600][ T5247] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 590.064513][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 590.079080][ T5247] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 590.091547][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 590.103207][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 590.215676][ T5247] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 590.223839][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 590.238661][ T5247] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 590.249969][ T8614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.252231][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 590.264235][ T8614] bond3: entered promiscuous mode [ 590.271479][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 590.274518][ T8614] bond3: entered allmulticast mode [ 590.294456][ T8614] bond0: (slave bond3): Enslaving as an active interface with an up link [ 590.336244][ T5247] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 590.344916][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 590.360975][ T5247] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 590.373348][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 590.384887][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 590.514391][ T5247] usb 5-1: string descriptor 0 read error: -22 [ 590.521675][ T5247] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 590.531250][ T5247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.741020][ T5247] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 590.787752][ T8614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.797060][ T8614] bond3: (slave xfrm2): The slave device specified does not support setting the MAC address [ 590.811427][ T8614] bond3: (slave xfrm2): Error -95 calling set_mac_address [ 591.402277][ T7712] usb 5-1: USB disconnect, device number 16 [ 591.810073][ T8634] kernel read not supported for file /!selinuxselinux (pid: 8634 comm: syz.3.1046) [ 591.882043][ T29] audit: type=1800 audit(1726331643.632:25): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1046" name="!selinuxselinux" dev="mqueue" ino=20982 res=0 errno=0 [ 592.855050][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.862029][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.087430][ T8647] kernel read not supported for file /eth0 (pid: 8647 comm: syz.1.1048) [ 593.177202][ T29] audit: type=1800 audit(1726331644.912:26): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1048" name="eth0" dev="mqueue" ino=21003 res=0 errno=0 [ 594.382615][ T8662] loop4: detected capacity change from 0 to 1024 [ 594.445038][ T8662] EXT4-fs: Ignoring removed oldalloc option [ 594.494418][ T8662] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 594.679009][ T8662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.170942][ T3071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.179142][ T3071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.544969][ T3101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.553313][ T3101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.757258][ T5197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.663772][ T3101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.756240][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 596.909775][ T3101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.007292][ T7733] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 597.149826][ T3101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.228572][ T7733] usb 5-1: Using ep0 maxpacket: 8 [ 597.265745][ T7733] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 597.273670][ T7733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 597.289198][ T7733] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 597.301926][ T7733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 597.314014][ T7733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 597.398348][ T7733] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 597.406699][ T7733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 597.421847][ T7733] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 597.434117][ T7733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 597.448668][ T7733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 597.481275][ T3101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.552890][ T7733] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 597.560807][ T7733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 597.575682][ T7733] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 597.587954][ T7733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 597.599486][ T7733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 597.684803][ T7733] usb 5-1: string descriptor 0 read error: -22 [ 597.692081][ T7733] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 597.701740][ T7733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.897352][ T7733] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 598.110089][ T7733] usb 5-1: USB disconnect, device number 17 [ 598.234347][ T3101] bridge_slave_1: left allmulticast mode [ 598.240458][ T3101] bridge_slave_1: left promiscuous mode [ 598.250326][ T3101] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.294673][ T3101] bridge_slave_0: left allmulticast mode [ 598.301792][ T3101] bridge_slave_0: left promiscuous mode [ 598.308774][ T3101] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.961683][ T3101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.028436][ T3101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.082750][ T3101] bond0 (unregistering): Released all slaves [ 599.730914][ T3101] hsr_slave_0: left promiscuous mode [ 599.741156][ T3101] hsr_slave_1: left promiscuous mode [ 599.758322][ T3101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.767565][ T3101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.788402][ T3101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.796276][ T3101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.818959][ T3101] veth1_macvtap: left promiscuous mode [ 599.824820][ T3101] veth0_macvtap: left promiscuous mode [ 599.831519][ T3101] veth1_vlan: left promiscuous mode [ 599.839971][ T3101] veth0_vlan: left promiscuous mode [ 601.039336][ T5193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 601.049400][ T5193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 601.096755][ T5193] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 601.117003][ T5193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 601.142891][ T8722] loop1: detected capacity change from 0 to 2048 [ 601.174803][ T5193] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 601.179490][ T3101] team0 (unregistering): Port device team_slave_1 removed [ 601.222230][ T5193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 601.298399][ T3101] team0 (unregistering): Port device team_slave_0 removed [ 601.327235][ T8722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.435940][ T8722] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1064'. [ 601.776732][ T7712] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 601.863834][ T8736] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 601.978781][ T8736] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 104 with error 28 [ 601.992203][ T8736] EXT4-fs (loop1): This should not happen!! Data will be lost [ 601.992203][ T8736] [ 602.002814][ T8736] EXT4-fs (loop1): Total free blocks count 0 [ 602.012077][ T8736] EXT4-fs (loop1): Free/Dirty block details [ 602.019007][ T8736] EXT4-fs (loop1): free_blocks=66060288 [ 602.024812][ T8736] EXT4-fs (loop1): dirty_blocks=112 [ 602.030440][ T8736] EXT4-fs (loop1): Block reservation details [ 602.039713][ T8736] EXT4-fs (loop1): i_reserved_data_blocks=7 [ 602.285890][ T7712] usb 1-1: Using ep0 maxpacket: 8 [ 602.334326][ T7712] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 602.342290][ T7712] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 602.354130][ T7712] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 602.487272][ T7712] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 602.497073][ T7712] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 602.509145][ T7712] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 602.663627][ T7712] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 602.671805][ T7712] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 602.683601][ T7712] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 602.873184][ T4549] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 602.910091][ T7712] usb 1-1: string descriptor 0 read error: -22 [ 602.917385][ T7712] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 602.926893][ T7712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.973152][ T7712] adutux 1-1:168.0: interrupt endpoints not found [ 603.257073][ T7712] usb 1-1: USB disconnect, device number 13 [ 603.366959][ T5196] Bluetooth: hci3: command tx timeout [ 603.890178][ T8725] chnl_net:caif_netlink_parms(): no params data found [ 603.976715][ T8752] syzkaller1: entered promiscuous mode [ 603.982520][ T8752] syzkaller1: entered allmulticast mode [ 604.170554][ T8754] ALSA: mixer_oss: invalid OSS volume '1:' [ 604.177319][ T8754] ALSA: mixer_oss: invalid OSS volume 'invalid' [ 604.183911][ T8754] ALSA: mixer_oss: invalid OSS volume 'verification' [ 604.190930][ T8754] ALSA: mixer_oss: invalid OSS volume 'stack' [ 604.197288][ T8754] ALSA: mixer_oss: invalid OSS volume 'proc' [ 605.445882][ T5196] Bluetooth: hci3: command tx timeout [ 605.648410][ T5247] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 605.948923][ T5247] usb 5-1: Using ep0 maxpacket: 8 [ 605.962980][ T5247] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 605.970880][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 605.987056][ T5247] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 605.999341][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 606.011975][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 606.090919][ T5247] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 606.099210][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 606.110958][ T5247] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.126702][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 606.138597][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 606.202118][ T5247] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 606.210344][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 606.225689][ T5247] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.238001][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 606.252379][ T5247] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 606.403841][ T8725] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.415683][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.424273][ T8725] bridge_slave_0: entered allmulticast mode [ 606.433983][ T8725] bridge_slave_0: entered promiscuous mode [ 606.468577][ T5247] usb 5-1: string descriptor 0 read error: -22 [ 606.475940][ T5247] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 606.485437][ T5247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.515649][ T8725] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.524347][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.535346][ T8725] bridge_slave_1: entered allmulticast mode [ 606.545284][ T8725] bridge_slave_1: entered promiscuous mode [ 606.651583][ T5247] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 606.770223][ T7717] usb 5-1: USB disconnect, device number 18 [ 607.003742][ T8725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.111385][ T8725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.490059][ T8725] team0: Port device team_slave_0 added [ 607.521684][ T7733] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 607.538625][ T5196] Bluetooth: hci3: command tx timeout [ 607.564881][ T8725] team0: Port device team_slave_1 added [ 607.799926][ T7733] usb 4-1: Using ep0 maxpacket: 8 [ 607.873343][ T8725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.878075][ T7733] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 607.880857][ T8725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.892039][ T7733] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 607.915022][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.915315][ T8725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.948226][ T7733] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 607.958954][ T7733] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 607.969308][ T7733] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.985716][ T7733] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 607.995307][ T7733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.196864][ T8725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.204056][ T8725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.230330][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.236919][ T8725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.426333][ T7733] usb 4-1: usb_control_msg returned -32 [ 608.432410][ T7733] usbtmc 4-1:16.0: can't read capabilities [ 608.905972][ T5247] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 608.914663][ T7735] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 608.991542][ T8725] hsr_slave_0: entered promiscuous mode [ 609.039370][ T8725] hsr_slave_1: entered promiscuous mode [ 609.096713][ T8725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.104560][ T8725] Cannot create hsr debugfs directory [ 609.138881][ T5247] usb 2-1: Using ep0 maxpacket: 8 [ 609.155601][ T7735] usb 5-1: Using ep0 maxpacket: 8 [ 609.199568][ T7735] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 609.207920][ T7735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 609.219716][ T7735] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 609.234974][ T5247] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 609.243166][ T5247] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 609.259508][ T5247] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 609.272109][ T5247] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 609.283800][ T5247] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 609.359472][ T5247] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 609.367563][ T5247] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 609.379793][ T5247] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 609.395517][ T5247] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 609.407127][ T5247] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 609.434414][ T7735] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 609.442509][ T7735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 609.459932][ T7735] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 609.518957][ T5247] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 609.527417][ T5247] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 609.539241][ T5247] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 609.554442][ T5247] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 609.566027][ T5247] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 609.608423][ T5196] Bluetooth: hci3: command tx timeout [ 609.627862][ T7735] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 609.638691][ T7735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 609.650519][ T7735] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 609.684808][ T5247] usb 2-1: string descriptor 0 read error: -22 [ 609.692086][ T5247] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 609.705053][ T5247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.743987][ T7735] usb 5-1: string descriptor 0 read error: -22 [ 609.751204][ T7735] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 609.763953][ T7735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.860394][ T5247] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 609.957758][ T7735] adutux 5-1:168.0: interrupt endpoints not found [ 610.047321][ T8799] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 610.062369][ T8799] ===================================================== [ 610.069930][ T8799] BUG: KMSAN: kernel-usb-infoleak in usb_submit_urb+0x597/0x2350 [ 610.078136][ T8799] usb_submit_urb+0x597/0x2350 [ 610.083131][ T8799] usbtmc_write+0xc32/0x1220 [ 610.091546][ T8799] vfs_write+0x493/0x1550 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 610.096265][ T8799] ksys_write+0x20f/0x4c0 [ 610.100861][ T8799] __ia32_sys_write+0x91/0xe0 [ 610.106824][ T8799] ia32_sys_call+0x2e34/0x40d0 [ 610.111831][ T8799] __do_fast_syscall_32+0xb0/0x110 [ 610.120409][ T8799] do_fast_syscall_32+0x38/0x80 [ 610.125959][ T8799] do_SYSENTER_32+0x1f/0x30 [ 610.130822][ T8799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 610.137700][ T8799] [ 610.140138][ T8799] Uninit was created at: [ 610.144653][ T8799] __kmalloc_cache_noprof+0x4f0/0xb00 [ 610.153234][ T8799] usbtmc_write+0x3d3/0x1220 [ 610.158225][ T8799] vfs_write+0x493/0x1550 [ 610.162816][ T8799] ksys_write+0x20f/0x4c0 [ 610.167663][ T8799] __ia32_sys_write+0x91/0xe0 [ 610.172609][ T8799] ia32_sys_call+0x2e34/0x40d0 [ 610.181721][ T8799] __do_fast_syscall_32+0xb0/0x110 [ 610.187309][ T8799] do_fast_syscall_32+0x38/0x80 [ 610.192407][ T8799] do_SYSENTER_32+0x1f/0x30 [ 610.197345][ T8799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 610.203988][ T8799] [ 610.209876][ T8799] Bytes 13-15 of 16 are uninitialized [ 610.216104][ T8799] Memory access of size 16 starts at ffff88801b3c4000 [ 610.223026][ T8799] [ 610.225691][ T8799] CPU: 1 UID: 0 PID: 8799 Comm: syz.1.1086 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 610.239701][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 610.250136][ T8799] ===================================================== [ 610.257397][ T8799] Disabling lock debugging due to kernel taint [ 610.263703][ T8799] Kernel panic - not syncing: kmsan.panic set ... [ 610.270299][ T8799] CPU: 1 UID: 0 PID: 8799 Comm: syz.1.1086 Tainted: G B 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 610.282728][ T8799] Tainted: [B]=BAD_PAGE [ 610.287010][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 610.297237][ T8799] Call Trace: [ 610.300637][ T8799] [ 610.303681][ T8799] dump_stack_lvl+0x216/0x2d0 [ 610.308586][ T8799] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 610.314661][ T8799] dump_stack+0x1e/0x30 [ 610.319045][ T8799] panic+0x4e2/0xcd0 [ 610.323182][ T8799] ? kmsan_get_metadata+0x81/0x1c0 [ 610.328629][ T8799] kmsan_report+0x2c7/0x2d0 [ 610.333390][ T8799] ? kmsan_get_metadata+0x13e/0x1c0 [ 610.338870][ T8799] ? kmsan_get_metadata+0x13e/0x1c0 [ 610.344309][ T8799] ? kmsan_internal_check_memory+0x48c/0x560 [ 610.350533][ T8799] ? kmsan_handle_urb+0x2c/0x40 [ 610.355614][ T8799] ? usb_submit_urb+0x597/0x2350 [ 610.360770][ T8799] ? usbtmc_write+0xc32/0x1220 [ 610.365801][ T8799] ? vfs_write+0x493/0x1550 [ 610.370552][ T8799] ? ksys_write+0x20f/0x4c0 [ 610.375302][ T8799] ? __ia32_sys_write+0x91/0xe0 [ 610.380418][ T8799] ? ia32_sys_call+0x2e34/0x40d0 [ 610.385608][ T8799] ? __do_fast_syscall_32+0xb0/0x110 [ 610.391141][ T8799] ? do_fast_syscall_32+0x38/0x80 [ 610.396427][ T8799] ? do_SYSENTER_32+0x1f/0x30 [ 610.401351][ T8799] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 610.408180][ T8799] ? kmsan_get_metadata+0x13e/0x1c0 [ 610.413687][ T8799] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 610.420273][ T8799] ? kmsan_internal_poison_memory+0x7d/0x90 [ 610.426409][ T8799] ? ia32_sys_call+0x2e34/0x40d0 [ 610.431610][ T8799] ? kmsan_internal_poison_memory+0x49/0x90 [ 610.437728][ T8799] ? kmsan_slab_alloc+0xdf/0x160 [ 610.442903][ T8799] ? __kmalloc_cache_noprof+0x4f0/0xb00 [ 610.448684][ T8799] ? usbtmc_write+0x3d3/0x1220 [ 610.453687][ T8799] ? vfs_write+0x493/0x1550 [ 610.458433][ T8799] ? ksys_write+0x20f/0x4c0 [ 610.463170][ T8799] ? __ia32_sys_write+0x91/0xe0 [ 610.468300][ T8799] ? ia32_sys_call+0x2e34/0x40d0 [ 610.473519][ T8799] ? __do_fast_syscall_32+0xb0/0x110 [ 610.479139][ T8799] ? kmsan_get_metadata+0x13e/0x1c0 [ 610.484630][ T8799] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 610.491207][ T8799] ? kmsan_get_metadata+0x13e/0x1c0 [ 610.496687][ T8799] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 610.502753][ T8799] kmsan_internal_check_memory+0x48c/0x560 [ 610.508822][ T8799] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 610.514900][ T8799] kmsan_handle_urb+0x2c/0x40 [ 610.519813][ T8799] usb_submit_urb+0x597/0x2350 [ 610.524828][ T8799] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 610.530931][ T8799] usbtmc_write+0xc32/0x1220 [ 610.535794][ T8799] ? __pfx_usbtmc_write+0x10/0x10 [ 610.541055][ T8799] vfs_write+0x493/0x1550 [ 610.545677][ T8799] ? kmsan_get_metadata+0x13e/0x1c0 [ 610.551121][ T8799] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 610.557700][ T8799] ? kmsan_get_metadata+0x13e/0x1c0 [ 610.563179][ T8799] ksys_write+0x20f/0x4c0 [ 610.567808][ T8799] __ia32_sys_write+0x91/0xe0 [ 610.572768][ T8799] ia32_sys_call+0x2e34/0x40d0 [ 610.577814][ T8799] __do_fast_syscall_32+0xb0/0x110 [ 610.583193][ T8799] ? irqentry_exit+0x16/0x60 [ 610.588039][ T8799] do_fast_syscall_32+0x38/0x80 [ 610.593157][ T8799] do_SYSENTER_32+0x1f/0x30 [ 610.597922][ T8799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 610.604538][ T8799] RIP: 0023:0xf744d579 [ 610.608777][ T8799] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 610.628722][ T8799] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 610.637371][ T8799] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000240 [ 610.645539][ T8799] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 610.653684][ T8799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 610.661836][ T8799] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 610.669993][ T8799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 610.678154][ T8799] [ 610.681608][ T8799] Kernel Offset: disabled [ 610.686015][ T8799] Rebooting in 86400 seconds..