last executing test programs: 4.553627817s ago: executing program 3 (id=2683): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 4.551136823s ago: executing program 3 (id=2685): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xa, 0x7}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xfffe, 0x4000}, @mss={0x2, 0xff}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x13, r1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) 4.427385538s ago: executing program 3 (id=2686): socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e"], 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0x0, 0x7f, 0x104, 0x41}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0xc, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.301975403s ago: executing program 1 (id=2691): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xb7) 2.329644823s ago: executing program 3 (id=2692): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.328884986s ago: executing program 1 (id=2693): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010100}, 0x2, 0x83, 0x3, 0x2}}, 0x26) 2.324521393s ago: executing program 1 (id=2695): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 2.324255216s ago: executing program 1 (id=2696): r0 = socket$inet6(0xa, 0x2, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x80000) socket$key(0xf, 0x3, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, 0x0) dup(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000088e000/0x4000)=nil, 0x4000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f000029f000/0x3000)=nil, 0xf000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0xd, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x7, 0x2, 0x20000000}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x4}}]}}, 0x0, 0x4a}, 0x28) 2.3214088s ago: executing program 3 (id=2699): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000200)='0x1234\n', 0x7) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0x56', 0x4) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r4, 0x0, 0x0) close(r4) write(0xffffffffffffffff, &(0x7f0000000f00)='0\n', 0x2) close(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') 2.212837705s ago: executing program 3 (id=2701): r0 = syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x2, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000300)={0x40, 0x16, 0x8, "364c4583333fd306"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 1.805410729s ago: executing program 1 (id=2704): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="79a9"], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 1.651112352s ago: executing program 0 (id=2705): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.499148192s ago: executing program 0 (id=2706): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.440805559s ago: executing program 0 (id=2707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_POLICE={0x4}]}}]}, 0x34}}, 0x0) 1.330938697s ago: executing program 0 (id=2708): socket$alg(0x26, 0x5, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008ac0569020000000000010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/config\x00') pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x8000000004) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4) 759.348795ms ago: executing program 2 (id=2709): r0 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000500)=0x1) 758.975906ms ago: executing program 2 (id=2710): r0 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1b8a, 0x1, 0x3, 0x28c}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) 500.45579ms ago: executing program 1 (id=2711): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)='7', 0x1) syz_usb_control_io$uac3(r0, &(0x7f0000000280)={0x14, 0x0, 0x0}, 0x0) 410.960758ms ago: executing program 2 (id=2712): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 410.098608ms ago: executing program 2 (id=2713): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 225.178724ms ago: executing program 2 (id=2714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x9, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x67}]}}]}, 0x3c}}, 0x0) 130.597846ms ago: executing program 0 (id=2715): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, 0x0) dup2(r0, r0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='6', 0x1) 110.327769ms ago: executing program 2 (id=2716): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='md0\x00', 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x81ff, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='1:0\x00', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r3, &(0x7f0000000e00)='active\x00', 0x6) 0s ago: executing program 0 (id=2717): socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e"], 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0x0, 0x7f, 0x104, 0x41}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0xc, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): -1: USB disconnect, device number 25 [ 199.333708][T10712] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 199.336364][T10712] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1796'. [ 199.339286][T10712] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 200.191944][ T5981] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 200.422653][ T42] audit: type=1800 audit(1785981202.017:113): pid=10730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1805" name="nexus" dev="configfs" ino=30259 res=0 errno=0 [ 200.511584][ T5799] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 200.661425][ T5799] usb 7-1: Using ep0 maxpacket: 8 [ 200.665066][ T5799] usb 7-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.669167][ T5799] usb 7-1: config 1 interface 0 has no altsetting 0 [ 200.673273][ T5799] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 200.676320][ T5799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.678852][ T5799] usb 7-1: Product: syz [ 200.680174][ T5799] usb 7-1: Manufacturer: syz [ 200.681874][ T5799] usb 7-1: SerialNumber: syz [ 201.033401][ T5799] usbhid 7-1:1.0: can't add hid device: -71 [ 201.035711][ T5799] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 201.041469][ T5799] usb 7-1: USB disconnect, device number 40 [ 202.166187][T10754] hub 8-0:1.0: USB hub found [ 202.173467][T10754] hub 8-0:1.0: 1 port detected [ 202.531422][ T5840] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 202.685056][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 202.688873][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.694444][ T5840] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 202.698188][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.705593][ T5840] usb 5-1: config 0 descriptor?? [ 202.712161][ T5840] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 202.925268][T10766] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 202.962545][T10770] fuse: fd is not a fuse device [ 202.999460][ T42] audit: type=1800 audit(1785981204.587:114): pid=10773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1821" name="zoned" dev="configfs" ino=29227 res=0 errno=0 [ 203.007926][ T42] audit: type=1800 audit(1785981204.597:115): pid=10773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1821" name="memory_backed" dev="configfs" ino=29228 res=0 errno=0 [ 203.016678][ T42] audit: type=1800 audit(1785981204.597:116): pid=10773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1821" name="zone_nr_conv" dev="configfs" ino=29229 res=0 errno=0 [ 203.026416][ T42] audit: type=1800 audit(1785981204.597:117): pid=10773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1821" name="power" dev="configfs" ino=29230 res=0 errno=0 [ 203.173158][ T5833] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 203.321764][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 203.323338][T10801] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 203.325536][ T5833] usb 7-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.330499][ T5833] usb 7-1: config 1 interface 0 has no altsetting 0 [ 203.334362][ T5833] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 203.337983][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.340840][ T5833] usb 7-1: Product: syz [ 203.342963][ T5833] usb 7-1: Manufacturer: syz [ 203.344444][ T5833] usb 7-1: SerialNumber: syz [ 203.407698][T10806] fuse: fd is not a fuse device [ 203.620999][T10821] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1814'. [ 203.698238][ T5833] usbhid 7-1:1.0: can't add hid device: -71 [ 203.700766][ T5833] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 203.708463][ T5833] usb 7-1: USB disconnect, device number 41 [ 203.813601][T10828] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 203.853652][T10830] fuse: fd is not a fuse device [ 204.261749][ T42] audit: type=1800 audit(1785981205.857:118): pid=10838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1842" name="zoned" dev="configfs" ino=29256 res=0 errno=0 [ 204.269060][ T42] audit: type=1800 audit(1785981205.857:119): pid=10838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1842" name="memory_backed" dev="configfs" ino=29257 res=0 errno=0 [ 204.277596][ T42] audit: type=1800 audit(1785981205.857:120): pid=10838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1842" name="zone_nr_conv" dev="configfs" ino=29258 res=0 errno=0 [ 204.286065][ T42] audit: type=1800 audit(1785981205.857:121): pid=10838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1842" name="power" dev="configfs" ino=29259 res=0 errno=0 [ 205.111711][T10854] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 205.160594][T10856] fuse: fd is not a fuse device [ 205.287317][ T34] usb 5-1: USB disconnect, device number 26 [ 206.570262][ T42] audit: type=1800 audit(1785981208.157:122): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1862" name="zoned" dev="configfs" ino=28500 res=0 errno=0 [ 206.579475][ T42] audit: type=1800 audit(1785981208.167:123): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1862" name="memory_backed" dev="configfs" ino=28501 res=0 errno=0 [ 206.585611][ T42] audit: type=1800 audit(1785981208.177:124): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1862" name="zone_nr_conv" dev="configfs" ino=29361 res=0 errno=0 [ 206.592090][ T42] audit: type=1800 audit(1785981208.177:125): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1862" name="power" dev="configfs" ino=29362 res=0 errno=0 [ 206.724268][T10907] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1867'. [ 206.731120][T10907] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 206.935218][ T5981] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 207.101804][ T5981] usb 5-1: Using ep0 maxpacket: 16 [ 207.105764][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.109116][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 207.114367][ T5981] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 207.118939][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.125507][ T5981] usb 5-1: config 0 descriptor?? [ 207.136693][ T5981] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 207.263665][ T42] audit: type=1800 audit(1785981208.857:126): pid=10942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1881" name="nexus" dev="configfs" ino=30988 res=0 errno=0 [ 208.055021][T10955] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1865'. [ 208.403331][ T42] audit: type=1800 audit(1785981209.997:127): pid=10965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1890" name="nexus" dev="configfs" ino=30425 res=0 errno=0 [ 209.698379][ T5854] usb 5-1: USB disconnect, device number 27 [ 209.744253][T11020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1910'. [ 210.490934][T11048] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1917'. [ 210.495922][T11048] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 210.784381][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1928'. [ 210.809776][T11069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 210.909546][T11076] process 'syz.3.1924' launched './file0' with NULL argv: empty string added [ 211.060562][ T5106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.073378][ T5106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.078247][ T5106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.098219][ T5106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.109403][ T5106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.441054][ T42] audit: type=1800 audit(1785981213.027:128): pid=11083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1932" name="nexus" dev="configfs" ino=31170 res=0 errno=0 [ 211.594976][ T42] audit: type=1800 audit(1785981213.187:129): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1936" name="memory_backed" dev="configfs" ino=29463 res=0 errno=0 [ 211.608524][ T42] audit: type=1800 audit(1785981213.197:130): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1936" name="zone_nr_conv" dev="configfs" ino=29464 res=0 errno=0 [ 211.618623][ T42] audit: type=1800 audit(1785981213.197:131): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1936" name="power" dev="configfs" ino=29465 res=0 errno=0 [ 212.444203][ T42] audit: type=1800 audit(1785981214.027:132): pid=11119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1942" name="idProduct" dev="configfs" ino=29516 res=0 errno=0 [ 212.456340][ T42] audit: type=1800 audit(1785981214.027:133): pid=11119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1942" name="ep_name" dev="configfs" ino=29517 res=0 errno=0 [ 212.515676][ T5826] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.600538][T11126] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1945'. [ 212.639542][ T42] audit: type=1800 audit(1785981214.227:134): pid=11128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1946" name="memory_backed" dev="configfs" ino=29525 res=0 errno=0 [ 212.656689][ T42] audit: type=1800 audit(1785981214.227:135): pid=11128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1946" name="zone_nr_conv" dev="configfs" ino=29526 res=0 errno=0 [ 212.665466][ T42] audit: type=1800 audit(1785981214.227:136): pid=11128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1946" name="power" dev="configfs" ino=29527 res=0 errno=0 [ 212.699640][ T5826] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.245988][ T64] Bluetooth: hci4: command tx timeout [ 213.857959][ T42] audit: type=1800 audit(1785981215.457:137): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1952" name="idProduct" dev="configfs" ino=31228 res=0 errno=0 [ 214.207172][ T5826] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.225547][T11078] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.228636][T11078] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.231969][T11078] bridge_slave_0: entered allmulticast mode [ 214.237240][T11078] bridge_slave_0: entered promiscuous mode [ 214.244883][T11078] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.248839][T11078] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.253101][T11078] bridge_slave_1: entered allmulticast mode [ 214.258013][T11078] bridge_slave_1: entered promiscuous mode [ 214.297607][T11078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.323658][T11161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1956'. [ 214.329723][ T5826] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.346588][T11078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.358547][T11161] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 214.415630][T11078] team0: Port device team_slave_0 added [ 214.423031][T11078] team0: Port device team_slave_1 added [ 214.446934][T11078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.449407][T11078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.458346][T11078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.489487][T11078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.492297][T11078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.500922][T11078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.549787][T11078] hsr_slave_0: entered promiscuous mode [ 214.552539][T11078] hsr_slave_1: entered promiscuous mode [ 214.556310][T11078] debugfs: 'hsr0' already exists in 'hsr' [ 214.558283][T11078] Cannot create hsr debugfs directory [ 214.608947][ T5826] bridge_slave_1: left allmulticast mode [ 214.611013][ T5826] bridge_slave_1: left promiscuous mode [ 214.614176][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.635456][ T5826] bridge_slave_0: left allmulticast mode [ 214.638830][ T5826] bridge_slave_0: left promiscuous mode [ 214.642818][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.885749][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.898675][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.912554][ T36] smbdirect: ib_dev[syz1] removed [ 214.919528][ T5826] bond0 (unregistering): Released all slaves [ 215.006737][ T1042] infiniband syz1: ib_query_port failed (-19) [ 215.070086][ T34] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 215.221729][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 215.224946][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.228897][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 215.234125][ T34] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 215.237094][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.241711][ T34] usb 8-1: config 0 descriptor?? [ 215.251060][ T34] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 215.264025][ T5459] 8021q: adding VLAN 0 to HW filter on device eth2 [ 215.323952][ T64] Bluetooth: hci4: command tx timeout [ 215.352976][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1964'. [ 215.424814][T11196] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 215.639106][ T5826] hsr_slave_0: left promiscuous mode [ 215.649179][ T5826] hsr_slave_1: left promiscuous mode [ 215.671540][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.674882][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.720704][ T5826] veth1_macvtap: left promiscuous mode [ 215.723930][ T5826] veth0_macvtap: left promiscuous mode [ 215.729178][ T5826] veth1_vlan: left promiscuous mode [ 215.732456][ T5826] veth0_vlan: left promiscuous mode [ 216.157929][T11217] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1959'. [ 216.499316][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 216.507167][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1973'. [ 216.511565][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 216.657767][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 216.657785][ T42] audit: type=1800 audit(1785981218.247:156): pid=11226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1975" name="idProduct" dev="configfs" ino=32780 res=0 errno=0 [ 216.671985][ T42] audit: type=1800 audit(1785981218.247:157): pid=11226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1975" name="ep_name" dev="configfs" ino=31257 res=0 errno=0 [ 216.680825][ T42] audit: type=1800 audit(1785981218.247:158): pid=11226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1975" name="name" dev="configfs" ino=31258 res=0 errno=0 [ 216.735802][T11078] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.763902][T11078] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.767248][T11078] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.773886][ T42] audit: type=1800 audit(1785981218.367:159): pid=11232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1977" name="nexus" dev="configfs" ino=32032 res=0 errno=0 [ 216.789610][T11078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.794748][T11078] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.806309][T11078] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.811895][T11078] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.832341][T11078] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.925386][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 216.952950][T11078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.401678][ T64] Bluetooth: hci4: command tx timeout [ 217.814302][ T34] usb 8-1: USB disconnect, device number 26 [ 217.944190][ T42] audit: type=1800 audit(1785981219.537:160): pid=11263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1985" name="idProduct" dev="configfs" ino=31299 res=0 errno=0 [ 217.952255][ T42] audit: type=1800 audit(1785981219.537:161): pid=11263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1985" name="ep_name" dev="configfs" ino=32049 res=0 errno=0 [ 217.960126][ T42] audit: type=1800 audit(1785981219.537:162): pid=11263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1985" name="name" dev="configfs" ino=32050 res=0 errno=0 [ 218.471396][ T846] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 218.621403][ T846] usb 5-1: Using ep0 maxpacket: 8 [ 218.624784][T11078] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.629271][ T846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.631060][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.635146][ T846] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.637072][ T6607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.645371][ T846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.660274][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.661316][ T846] usb 5-1: config 0 descriptor?? [ 218.662776][ T6607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.717023][T11274] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 218.769241][ T42] audit: type=1800 audit(1785981220.357:163): pid=11278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1990" name="nexus" dev="configfs" ino=33934 res=0 errno=0 [ 218.814834][T11283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1992'. [ 218.871157][ T846] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 218.970350][ T42] audit: type=1800 audit(1785981220.557:164): pid=11294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1995" name="ep_name" dev="configfs" ino=31353 res=0 errno=0 [ 218.977630][ T42] audit: type=1800 audit(1785981220.567:165): pid=11294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1995" name="name" dev="configfs" ino=31354 res=0 errno=0 [ 219.047538][T11078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.082931][T11078] veth0_vlan: entered promiscuous mode [ 219.098567][T11078] veth1_vlan: entered promiscuous mode [ 219.130300][ T34] usb 5-1: USB disconnect, device number 28 [ 219.130436][ C1] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 219.149477][T11078] veth0_macvtap: entered promiscuous mode [ 219.162209][T11078] veth1_macvtap: entered promiscuous mode [ 219.179461][T11078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.194998][T11078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.241524][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.245277][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.288817][ T6583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.293368][ T6583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.319716][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.323441][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.331905][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.336184][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.426531][T11308] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 219.463228][T11311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2000'. [ 219.491437][ T64] Bluetooth: hci4: command tx timeout [ 219.783534][T11323] comedi comedi0: 8255: I/O base address not correctly aligned [ 219.798250][T11323] bridge1: entered promiscuous mode [ 219.800347][T11323] bridge1: entered allmulticast mode [ 219.891356][ T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 220.062036][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 220.065490][ T9] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.069166][ T9] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.072625][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 220.075932][ T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 220.080998][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.087061][ T9] usb 7-1: config 0 descriptor?? [ 220.123747][T11345] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 220.712848][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 220.714844][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 220.719297][ T9] usb 7-1: USB disconnect, device number 42 [ 221.149418][ T5981] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 221.322162][ T5981] usb 5-1: Using ep0 maxpacket: 16 [ 221.326950][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.333007][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.337191][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 221.342044][ T5981] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 221.345657][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.355769][ T5981] usb 5-1: config 0 descriptor?? [ 221.763844][T11379] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2031'. [ 221.771918][ T5981] usbhid 5-1:0.0: can't add hid device: -71 [ 221.775733][ T5981] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 221.783979][ T5981] usb 5-1: USB disconnect, device number 29 [ 222.131469][ T40] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 222.173716][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2047'. [ 222.281573][ T40] usb 6-1: Using ep0 maxpacket: 8 [ 222.289067][ T40] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.295522][ T40] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.299393][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 222.302292][ T40] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 222.305866][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.311894][ T40] usb 6-1: config 0 descriptor?? [ 222.930932][ T40] usbhid 6-1:0.0: can't add hid device: -71 [ 222.936712][ T40] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 222.944982][ T40] usb 6-1: USB disconnect, device number 28 [ 223.752654][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 223.913749][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 223.931795][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.936495][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.948502][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 223.954398][ T24] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 223.958543][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.964901][ T24] usb 6-1: config 0 descriptor?? [ 224.377501][T11453] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2057'. [ 224.384890][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 224.386848][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 224.402612][ T24] usb 6-1: USB disconnect, device number 29 [ 224.638873][ T64] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 225.181420][ T5897] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 225.331305][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 225.336967][ T5897] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.343998][ T5897] usb 6-1: config 1 interface 0 has no altsetting 0 [ 225.349261][ T5897] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 225.352968][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.356108][ T5897] usb 6-1: Product: syz [ 225.357751][ T5897] usb 6-1: Manufacturer: syz [ 225.359553][ T5897] usb 6-1: SerialNumber: syz [ 225.941310][ T9] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 226.111307][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 226.114825][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.119109][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.123178][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 226.128252][ T9] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 226.132125][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.137153][ T9] usb 7-1: config 0 descriptor?? [ 226.544815][T11499] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2076'. [ 226.550028][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 226.552031][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 226.555554][ T9] usb 7-1: USB disconnect, device number 43 [ 226.583156][T11515] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2083'. [ 228.085469][ T5897] usbhid 6-1:1.0: can't add hid device: -71 [ 228.087407][ T5897] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 228.093448][ T5897] usb 6-1: USB disconnect, device number 30 [ 228.327314][T11551] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2096'. [ 228.651441][ T1893] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 228.761495][ T5897] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 228.812409][ T1893] usb 6-1: Using ep0 maxpacket: 8 [ 228.816727][ T1893] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.821035][ T1893] usb 6-1: config 1 interface 0 has no altsetting 0 [ 228.825323][ T1893] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 228.828267][ T1893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.830793][ T1893] usb 6-1: Product: syz [ 228.832349][ T1893] usb 6-1: Manufacturer: syz [ 228.834092][ T1893] usb 6-1: SerialNumber: syz [ 228.911323][ T5897] usb 8-1: Using ep0 maxpacket: 16 [ 228.915324][ T5897] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 228.918790][ T5897] usb 8-1: config 0 has no interface number 0 [ 228.921806][ T5897] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 228.926166][ T5897] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 228.932237][ T5897] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 228.936145][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.938962][ T5897] usb 8-1: Product: syz [ 228.940656][ T5897] usb 8-1: Manufacturer: syz [ 228.942792][ T5897] usb 8-1: SerialNumber: syz [ 228.947476][ T5897] usb 8-1: config 0 descriptor?? [ 228.950434][T11571] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 228.953821][T11571] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 229.161659][T11571] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 229.164919][T11571] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 229.369991][ T5897] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 230.032454][ T5897] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 230.035759][ T5897] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 230.051523][ T5897] asix 8-1:0.34: probe with driver asix failed with error -71 [ 230.072945][ T5897] usb 8-1: USB disconnect, device number 27 [ 230.627891][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 230.627906][ T42] audit: type=1800 audit(1785981232.217:183): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2118" name="zoned" dev="configfs" ino=32511 res=0 errno=0 [ 230.641749][ T42] audit: type=1800 audit(1785981232.217:184): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2118" name="memory_backed" dev="configfs" ino=32512 res=0 errno=0 [ 230.648595][ T42] audit: type=1800 audit(1785981232.217:185): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2118" name="zone_nr_conv" dev="configfs" ino=32513 res=0 errno=0 [ 230.655111][ T42] audit: type=1800 audit(1785981232.217:186): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2118" name="power" dev="configfs" ino=32514 res=0 errno=0 [ 230.974290][ T5895] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 231.143553][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.147286][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.150704][ T5895] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.156102][ T5895] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.159364][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.165931][ T5895] usb 8-1: config 0 descriptor?? [ 231.486362][ T1893] usbhid 6-1:1.0: can't add hid device: -71 [ 231.488339][ T1893] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 231.492247][ T1893] usb 6-1: USB disconnect, device number 31 [ 231.563473][T11614] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2121'. [ 231.590430][ T5895] hid_parser_main: 5 callbacks suppressed [ 231.590450][ T5895] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 231.599396][ T5895] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 231.601732][ T5895] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 231.603962][ T5895] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 231.606679][ T5895] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 231.608922][ T5895] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 231.612092][ T5895] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 231.614495][ T5895] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 231.617462][ T5895] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 231.620096][ T5895] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 231.704539][ T5895] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 231.729499][T11627] netlink: 'syz.0.2125': attribute type 1 has an invalid length. [ 231.733298][T11627] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2125'. [ 231.736250][T11627] netlink: 'syz.0.2125': attribute type 1 has an invalid length. [ 231.895591][ T5897] usb 8-1: USB disconnect, device number 28 [ 233.161809][ T5981] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 233.210313][T11646] xs_local_setup_socket: unhandled error (91) connecting to /var/run/gssproxy.sock [ 233.471277][ T5895] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 233.631430][ T5895] usb 6-1: Using ep0 maxpacket: 8 [ 233.635403][ T5895] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.640728][ T5895] usb 6-1: config 1 interface 0 has no altsetting 0 [ 233.646652][ T5895] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 233.650352][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.653558][ T5895] usb 6-1: Product: syz [ 233.654857][ T5895] usb 6-1: Manufacturer: syz [ 233.656323][ T5895] usb 6-1: SerialNumber: syz [ 235.302078][T11682] netlink: 'syz.0.2138': attribute type 1 has an invalid length. [ 235.305372][T11682] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2138'. [ 235.309196][T11682] netlink: 'syz.0.2138': attribute type 1 has an invalid length. [ 235.434314][ T5981] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 235.770681][ T5799] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 235.924128][ T5799] usb 7-1: unable to get BOS descriptor or descriptor too short [ 235.928663][ T5799] usb 7-1: not running at top speed; connect to a high speed hub [ 235.932202][ T5799] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 235.934987][ T5799] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 235.937609][ T5799] usb 7-1: config 14 has no interface number 0 [ 235.939552][ T5799] usb 7-1: config 14 has no interface number 1 [ 235.941960][ T5799] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 235.945672][ T5799] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 235.950228][ T5799] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 235.954369][ T5799] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.959091][ T5799] usb 7-1: config 14 interface 57 has no altsetting 0 [ 235.961791][ T5799] usb 7-1: config 14 interface 228 has no altsetting 0 [ 235.965858][ T5799] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 235.968829][ T5799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.972502][ T5799] usb 7-1: Product: syz [ 235.974357][ T5799] usb 7-1: Manufacturer: syz [ 235.976394][ T5799] usb 7-1: SerialNumber: syz [ 236.233290][ T5895] usbhid 6-1:1.0: can't add hid device: -71 [ 236.235260][ T5895] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 236.244867][ T5895] usb 6-1: USB disconnect, device number 32 [ 236.394238][ T5799] legousbtower 7-1:14.57: interrupt endpoints not found [ 236.434415][ T64] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 236.735309][T11730] netlink: 'syz.0.2154': attribute type 1 has an invalid length. [ 236.737976][T11730] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2154'. [ 236.740871][T11730] netlink: 'syz.0.2154': attribute type 1 has an invalid length. [ 236.799795][ T5799] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 51.63 build 1747 [ 236.804001][ T5799] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 236.814085][ T5981] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 236.951380][ T5833] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 237.121864][ T5833] usb 8-1: Using ep0 maxpacket: 8 [ 237.125850][ T5833] usb 8-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.131083][ T5833] usb 8-1: config 1 interface 0 has no altsetting 0 [ 237.135892][ T5833] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 237.139663][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.143171][ T5833] usb 8-1: Product: syz [ 237.145030][ T5833] usb 8-1: Manufacturer: syz [ 237.147046][ T5833] usb 8-1: SerialNumber: syz [ 237.362659][ T5833] usbhid 8-1:1.0: can't add hid device: -71 [ 237.364621][ T5833] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 237.368391][ T5833] usb 8-1: USB disconnect, device number 29 [ 237.565412][ T5981] usb 7-1: USB disconnect, device number 44 [ 237.574199][ T5981] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 238.001348][T11761] netlink: 'syz.0.2167': attribute type 1 has an invalid length. [ 238.003910][T11761] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2167'. [ 238.006873][T11761] netlink: 'syz.0.2167': attribute type 1 has an invalid length. [ 238.043171][T11764] input: syz0 as /devices/virtual/input/input32 [ 238.061856][ T5981] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 238.371321][ T5981] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 238.411373][ T5897] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 238.522934][ T5981] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.526249][ T5981] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.530577][ T5981] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.533729][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.561367][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 238.565303][ T5897] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.570632][ T5897] usb 5-1: config 1 interface 0 has no altsetting 0 [ 238.575574][ T5897] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 238.579481][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.582981][ T5897] usb 5-1: Product: syz [ 238.584739][ T5897] usb 5-1: Manufacturer: syz [ 238.586698][ T5897] usb 5-1: SerialNumber: syz [ 238.742905][ T5981] usb 7-1: usb_control_msg returned -32 [ 238.745386][ T5981] usbtmc 7-1:16.0: can't read capabilities [ 238.754969][ T5981] usb 7-1: USB disconnect, device number 45 [ 238.807866][ T5897] usbhid 5-1:1.0: can't add hid device: -71 [ 238.810440][ T5897] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 238.815825][ T5897] usb 5-1: USB disconnect, device number 30 [ 239.192986][T11781] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2177'. [ 239.339512][T11790] netlink: 'syz.2.2180': attribute type 1 has an invalid length. [ 239.344424][T11790] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2180'. [ 239.349633][T11790] netlink: 'syz.2.2180': attribute type 1 has an invalid length. [ 239.432173][ T5981] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 240.540838][T11805] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2187'. [ 240.671394][ T5799] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 240.761599][ T24] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 240.823581][ T5799] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.827597][ T5799] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.833111][ T5799] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 240.836796][ T5799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.921397][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 240.928085][ T24] usb 8-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.937618][ T24] usb 8-1: config 1 interface 0 has no altsetting 0 [ 240.942878][ T24] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 240.949073][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.954970][ T24] usb 8-1: Product: syz [ 240.957110][ T24] usb 8-1: Manufacturer: syz [ 240.959135][ T24] usb 8-1: SerialNumber: syz [ 241.056481][ T5799] usb 7-1: usb_control_msg returned -32 [ 241.059701][ T5799] usbtmc 7-1:16.0: can't read capabilities [ 241.071725][ T5799] usb 7-1: USB disconnect, device number 46 [ 241.180119][ T24] usbhid 8-1:1.0: can't add hid device: -71 [ 241.182167][ T24] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 241.187146][ T24] usb 8-1: USB disconnect, device number 30 [ 241.703334][T11827] netlink: 'syz.2.2194': attribute type 1 has an invalid length. [ 241.705807][T11827] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2194'. [ 241.708619][T11827] netlink: 'syz.2.2194': attribute type 1 has an invalid length. [ 241.771872][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 241.814303][T11837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2198'. [ 242.065997][T11842] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2199'. [ 252.090863][T11881] jffs2: notice: (11881) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 252.215062][T11886] kAFS: unable to lookup cell 'ÿ' [ 253.137548][T11905] netlink: 'syz.3.2211': attribute type 1 has an invalid length. [ 253.140045][T11905] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2211'. [ 253.148626][T11905] netlink: 'syz.3.2211': attribute type 1 has an invalid length. [ 253.182167][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 255.278940][T11952] netlink: 'syz.2.2225': attribute type 1 has an invalid length. [ 255.281566][T11952] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2225'. [ 255.287457][T11952] netlink: 'syz.2.2225': attribute type 1 has an invalid length. [ 255.337994][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.785474][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 266.040143][T12029] loop0: detected capacity change from 0 to 32768 [ 266.350727][T12029] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 267.290040][T12053] program syz.0.2244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.096932][T12076] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 268.471459][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 268.631374][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 268.636613][ T24] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 268.644980][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 268.661282][ T24] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 268.671298][ T24] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 268.677595][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 268.695654][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 268.698568][ T24] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 268.701284][ T24] usb 5-1: Product: syz [ 268.702622][ T24] usb 5-1: Manufacturer: syz [ 268.704101][ T24] usb 5-1: SerialNumber: syz [ 268.709528][ T24] usb 5-1: config 0 descriptor?? [ 268.716269][ T24] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 268.731521][ T24] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 269.176017][T12093] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2258'. [ 269.178696][ T42] audit: type=1800 audit(1785981270.767:187): pid=12095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2259" name="idProduct" dev="configfs" ino=35370 res=0 errno=0 [ 269.182361][ T24] usb 5-1: USB disconnect, device number 31 [ 269.187095][ T42] audit: type=1800 audit(1785981270.777:188): pid=12095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2259" name="ep_name" dev="configfs" ino=33689 res=0 errno=0 [ 269.199218][ T24] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 269.206257][ T42] audit: type=1800 audit(1785981270.797:189): pid=12095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2259" name="name" dev="configfs" ino=35371 res=0 errno=0 [ 269.243457][ T64] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 269.250773][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2262'. [ 269.258318][T12101] netlink: 'syz.3.2262': attribute type 1 has an invalid length. [ 269.721622][T12121] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2271'. [ 269.726437][T12120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.743129][ T34] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 269.750983][ T42] audit: type=1800 audit(1785981271.337:190): pid=12123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2272" name="idProduct" dev="configfs" ino=33719 res=0 errno=0 [ 269.759629][ T42] audit: type=1800 audit(1785981271.347:191): pid=12123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2272" name="ep_name" dev="configfs" ino=33720 res=0 errno=0 [ 269.769212][ T42] audit: type=1800 audit(1785981271.347:192): pid=12123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2272" name="name" dev="configfs" ino=33721 res=0 errno=0 [ 269.815106][T12124] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 269.820120][T12124] block device autoloading is deprecated and will be removed. [ 269.903299][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 269.907686][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 269.917498][ T34] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 269.921473][ T34] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 269.924843][ T34] usb 7-1: Product: syz [ 269.926834][ T34] usb 7-1: Manufacturer: syz [ 269.928859][ T34] usb 7-1: SerialNumber: syz [ 269.933316][ T34] usb 7-1: config 0 descriptor?? [ 269.936628][T12113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 269.942101][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 269.944851][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 270.181347][ T5833] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 270.313531][T12141] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 270.341377][ T5833] usb 6-1: Using ep0 maxpacket: 8 [ 270.350750][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.359249][ T5833] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 270.360381][T12113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.363298][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.373882][ T5833] usb 6-1: config 0 descriptor?? [ 270.391900][T12113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.581670][ T5833] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 270.599558][ T42] audit: type=1800 audit(1785981272.187:193): pid=12146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2281" name="idProduct" dev="configfs" ino=36463 res=0 errno=0 [ 270.606454][ T42] audit: type=1800 audit(1785981272.187:194): pid=12146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2281" name="name" dev="configfs" ino=36464 res=0 errno=0 [ 270.684767][T12144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.690745][T12144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.871313][ T1893] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 271.021367][ T1893] usb 8-1: Using ep0 maxpacket: 32 [ 271.026128][ T1893] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 271.029575][ T1893] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 271.033662][ T1893] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 271.037709][ T1893] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 271.043269][ T1893] usb 8-1: config 0 interface 0 has no altsetting 0 [ 271.047509][ T1893] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 271.051380][ T1893] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 271.054860][ T1893] usb 8-1: Product: syz [ 271.056587][ T1893] usb 8-1: Manufacturer: syz [ 271.058516][ T1893] usb 8-1: SerialNumber: syz [ 271.061878][ T1893] usb 8-1: config 0 descriptor?? [ 271.066296][ T1893] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 271.069514][T12151] nvmet: adding nsid 1 to subsystem testnqn [ 271.076300][ T42] audit: type=1800 audit(1785981272.667:195): pid=12151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2283" name="device_path" dev="configfs" ino=33733 res=0 errno=0 [ 271.087180][ T42] audit: type=1800 audit(1785981272.677:196): pid=12151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2283" name="enable" dev="configfs" ino=33734 res=0 errno=0 [ 271.095092][ T1893] ldusb 8-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 271.205055][ T6583] raw-gadget.0 gadget.2: failed to queue suspend event [ 271.271945][T12113] raw-gadget.0 gadget.2: failed to queue resume event [ 271.292366][ T6611] raw-gadget.0 gadget.2: failed to queue suspend event [ 271.371502][T12113] raw-gadget.0 gadget.2: failed to queue resume event [ 271.376640][T12154] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2284'. [ 271.392018][ T6583] raw-gadget.0 gadget.2: failed to queue suspend event [ 271.461514][T12113] raw-gadget.0 gadget.2: failed to queue resume event [ 271.483199][ T6611] raw-gadget.0 gadget.2: failed to queue suspend event [ 271.486153][ T5799] usb 8-1: USB disconnect, device number 31 [ 271.490771][ T5799] ldusb 8-1:0.0: LD USB Device #2 now disconnected [ 271.551336][T12113] raw-gadget.0 gadget.2: failed to queue resume event [ 271.551858][T12144] raw-gadget.0 gadget.2: failed to queue disconnect event [ 271.918153][ T5833] usb 7-1: USB disconnect, device number 47 [ 272.052467][ T5833] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 272.224122][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 272.231462][ T5833] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 272.235185][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 272.238529][ T5833] usb 7-1: Product: syz [ 272.240295][ T5833] usb 7-1: Manufacturer: syz [ 272.243971][ T5833] usb 7-1: SerialNumber: syz [ 272.247494][ T5833] usb 7-1: config 0 descriptor?? [ 272.252758][T12144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 272.257084][ T5833] hub 7-1:0.0: bad descriptor, ignoring hub [ 272.259899][ T5833] hub 7-1:0.0: probe with driver hub failed with error -5 [ 272.603533][ T5833] usb 7-1: USB disconnect, device number 48 [ 272.664204][T12167] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2288'. [ 272.667914][T12166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.933023][ T24] usb 6-1: USB disconnect, device number 33 [ 273.051891][ T40] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 273.100891][T12182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2292'. [ 273.165615][T12188] jffs2: notice: (12188) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 273.255189][ T64] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 273.264516][ T64] Bluetooth: hci1: Injecting HCI hardware error event [ 273.271126][ T5106] Bluetooth: hci1: hardware error 0x00 [ 273.381360][ T34] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 273.541434][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 273.544890][ T34] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 273.547986][ T34] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 273.552004][ T34] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 273.555430][ T34] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 273.560008][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 273.564310][ T34] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 273.567367][ T34] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 273.570215][ T34] usb 8-1: Product: syz [ 273.571643][ T34] usb 8-1: Manufacturer: syz [ 273.573115][ T34] usb 8-1: SerialNumber: syz [ 273.575969][ T34] usb 8-1: config 0 descriptor?? [ 273.581799][ T34] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 273.585783][ T34] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 275.321362][ T5106] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 278.841918][T12185] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 278.856981][ T5897] usb 8-1: USB disconnect, device number 32 [ 278.862817][ T5897] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 279.758963][T12221] jffs2: notice: (12221) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 280.057351][T12243] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2305'. [ 280.062119][T12242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.084880][T12236] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2300'. [ 280.088608][T12236] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2300'. [ 280.312128][T12247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2307'. [ 280.994149][ T5897] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 281.163746][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 281.170353][ T5897] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 281.182159][ T5897] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 281.185490][ T5897] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 281.188920][ T5897] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 281.194004][ T5897] usb 7-1: config 0 interface 0 has no altsetting 0 [ 281.235074][ T5897] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 281.239044][ T5897] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 281.251530][ T5897] usb 7-1: Product: syz [ 281.253270][ T5897] usb 7-1: Manufacturer: syz [ 281.255283][ T5897] usb 7-1: SerialNumber: syz [ 281.259483][ T5897] usb 7-1: config 0 descriptor?? [ 281.266159][ T5897] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 281.271164][ T5897] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 282.343479][T12281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2316'. [ 282.396339][T12283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.581363][ T5833] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 282.733257][ T5833] usb 6-1: config 0 has no interfaces? [ 282.735570][ T5833] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 282.739101][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.744291][ T5833] usb 6-1: config 0 descriptor?? [ 282.958198][ T5799] usb 6-1: USB disconnect, device number 34 [ 283.652633][T12307] comedi comedi0: 8255: I/O base address not correctly aligned [ 283.679498][T12307] bridge1: entered promiscuous mode [ 283.685696][T12307] bridge1: entered allmulticast mode [ 283.772633][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.779693][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.784263][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.788948][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.794103][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.262367][T12333] netlink: 'syz.0.2331': attribute type 2 has an invalid length. [ 284.264920][T12333] netlink: 'syz.0.2331': attribute type 2 has an invalid length. [ 284.529336][T12312] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.538986][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.544759][T12312] bridge_slave_0: entered allmulticast mode [ 284.550643][T12312] bridge_slave_0: entered promiscuous mode [ 284.557330][T12312] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.559783][T12312] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.562599][T12312] bridge_slave_1: entered allmulticast mode [ 284.575420][T12312] bridge_slave_1: entered promiscuous mode [ 284.603290][T12312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.609487][T12312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.628302][T12312] team0: Port device team_slave_0 added [ 284.631897][T12312] team0: Port device team_slave_1 added [ 284.646805][T12312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.649121][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.657411][T12312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.662269][T12312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.664541][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.673722][T12312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.701496][T12312] hsr_slave_0: entered promiscuous mode [ 284.703919][T12312] hsr_slave_1: entered promiscuous mode [ 284.706096][T12312] debugfs: 'hsr0' already exists in 'hsr' [ 284.707983][T12312] Cannot create hsr debugfs directory [ 284.804544][T12312] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.812086][ T5833] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 284.909587][T12312] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.963785][ T5833] usb 6-1: unable to get BOS descriptor or descriptor too short [ 284.967447][ T5833] usb 6-1: not running at top speed; connect to a high speed hub [ 284.971026][ T5833] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 284.973890][ T5833] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 284.976597][ T5833] usb 6-1: config 14 has no interface number 0 [ 284.978577][ T5833] usb 6-1: config 14 has no interface number 1 [ 284.980985][ T5833] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 284.985421][ T5833] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 284.990196][ T5833] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 284.993921][ T5833] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.998240][ T5833] usb 6-1: config 14 interface 57 has no altsetting 0 [ 285.000485][ T5833] usb 6-1: config 14 interface 228 has no altsetting 0 [ 285.003230][T12312] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.004486][ T5833] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 285.009760][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.014115][ T5833] usb 6-1: Product: syz [ 285.015552][ T5833] usb 6-1: Manufacturer: syz [ 285.017217][ T5833] usb 6-1: SerialNumber: syz [ 285.090628][T12312] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.209247][T12312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 285.217935][T12312] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 285.221912][T12312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 285.235424][T12312] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 285.240348][T12312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.248887][T12312] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 285.252959][T12312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.266271][T12312] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 285.310378][T12312] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.314243][T12312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.317495][T12312] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.320558][T12312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.328416][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.332577][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.378796][T12312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.392304][T12312] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.399720][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.402110][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.411037][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.413484][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.436294][ T5833] legousbtower 6-1:14.57: interrupt endpoints not found [ 285.685156][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.716384][T12312] veth0_vlan: entered promiscuous mode [ 285.728378][T12312] veth1_vlan: entered promiscuous mode [ 285.750086][T12312] veth0_macvtap: entered promiscuous mode [ 285.757112][T12312] veth1_macvtap: entered promiscuous mode [ 285.769732][T12312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.780902][T12312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.819657][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.835964][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.878725][ T6607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.881430][ T5106] Bluetooth: hci3: command tx timeout [ 285.884426][ T6607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.903583][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.917582][ T6607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.920570][ T6607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.923059][ T5809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.335229][ T5106] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 286.521516][T12253] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 286.529123][ T5833] legousbtower 6-1:14.228: get version request failed: -71 [ 286.537183][ T5833] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 286.549847][ T5833] usb 6-1: USB disconnect, device number 35 [ 286.557403][ T5896] usb 7-1: USB disconnect, device number 49 [ 286.593970][ T5896] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 286.618225][T12395] syzkaller0: entered promiscuous mode [ 286.620023][T12395] syzkaller0: entered allmulticast mode [ 286.634129][T12395] tipc: Started in network mode [ 286.639467][T12395] tipc: Node identity d69496a739d3, cluster identity 4711 [ 286.646931][T12395] tipc: Enabled bearer , priority 0 [ 286.657738][T12394] tipc: Resetting bearer [ 286.686038][T12394] tipc: Disabling bearer [ 286.783685][T12403] netlink: 'syz.0.2347': attribute type 2 has an invalid length. [ 286.786244][T12403] netlink: 'syz.0.2347': attribute type 2 has an invalid length. [ 287.138908][T12409] efs: cannot read volume header [ 287.669721][T12426] kAFS: No cell specified [ 287.971643][ T5106] Bluetooth: hci3: command tx timeout [ 288.015274][T12442] netlink: 'syz.3.2359': attribute type 2 has an invalid length. [ 288.017845][T12442] netlink: 'syz.3.2359': attribute type 2 has an invalid length. [ 288.115912][T12447] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 288.125091][T12447] lpc_ich 0000:00:00.0: No MFD cells added [ 288.522147][ T5799] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 288.672468][ T5799] usb 8-1: Using ep0 maxpacket: 16 [ 288.700558][ T5799] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 288.707374][ T5799] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 288.711310][ T5799] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.714719][ T5799] usb 8-1: Product: syz [ 288.716873][ T5799] usb 8-1: Manufacturer: syz [ 288.719058][ T5799] usb 8-1: SerialNumber: syz [ 288.726030][ T5799] usb 8-1: config 0 descriptor?? [ 288.733084][ T5799] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 288.736959][ T5799] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 288.973899][T12459] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2365'. [ 289.341098][ T5799] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 289.631366][ T5897] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 289.641595][ T1042] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 289.749762][ T5799] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 289.753366][ T5799] em28xx 8-1:0.0: board has no eeprom [ 289.784269][ T5897] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 289.791691][ T1042] usb 7-1: Using ep0 maxpacket: 8 [ 289.794170][ T5897] usb 6-1: config 0 interface 0 has no altsetting 0 [ 289.799967][ T1042] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 289.805511][ T1042] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.809476][ T1042] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.813790][ T5897] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 289.817549][ T1042] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.821652][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 289.825003][ T1042] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.830258][ T5897] usb 6-1: Product: syz [ 289.832052][ T5799] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 289.832076][ T5799] em28xx 8-1:0.0: dvb set to bulk mode. [ 289.833247][ T5896] em28xx 8-1:0.0: Binding DVB extension [ 289.835256][ T1042] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 289.842164][ T5799] usb 8-1: USB disconnect, device number 33 [ 289.843333][ T5897] usb 6-1: Manufacturer: syz [ 289.847658][ T5897] usb 6-1: SerialNumber: syz [ 289.852385][ T1042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.853138][ T5799] em28xx 8-1:0.0: Disconnecting em28xx [ 289.887512][ T5897] usb 6-1: config 0 descriptor?? [ 289.889163][ T5896] em28xx 8-1:0.0: Registering input extension [ 289.894704][ T5799] em28xx 8-1:0.0: Closing input extension [ 289.920102][ T5897] usb 6-1: selecting invalid altsetting 0 [ 289.953125][ T5799] em28xx 8-1:0.0: Freeing device [ 290.042174][ T5106] Bluetooth: hci3: command tx timeout [ 290.207770][ T5799] usb 6-1: USB disconnect, device number 36 [ 290.209813][ C3] usb 6-1: Unable to submit urb #1: -19 at snd_usb_queue_pending_output_urbs [ 290.214018][T12475] usb 6-1: cannot submit urb 0, error -19: no device [ 290.363141][ T5106] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 290.368438][ T5106] Bluetooth: hci0: Injecting HCI hardware error event [ 290.375473][ T64] Bluetooth: hci0: hardware error 0x00 [ 290.641051][T12483] usbtmc 7-1:16.0: simple control status returned 43 [ 290.818436][T12487] tipc: Enabling of bearer rejected, failed to enable media [ 290.842736][ T9] usb 7-1: USB disconnect, device number 50 [ 290.858422][T12482] infiniband syz2: set down [ 290.864646][T12482] infiniband syz2: added ipvlan0 [ 290.889083][T12482] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 290.894559][T12482] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 290.900183][T12482] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 290.944520][ T42] audit: type=1800 audit(1785981292.537:197): pid=12494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2378" name="device_path" dev="configfs" ino=37252 res=0 errno=0 [ 290.947405][T12482] RDS/IB: syz2: added [ 290.954270][ T42] audit: type=1800 audit(1785981292.547:198): pid=12494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2378" name="enable" dev="configfs" ino=37253 res=0 errno=0 [ 290.956713][T12482] smc: adding ib device syz2 with port count 1 [ 290.965689][T12482] smc: ib device syz2 port 1 has no pnetid [ 291.278462][T12504] netlink: 'syz.0.2383': attribute type 2 has an invalid length. [ 291.285941][T12504] netlink: 'syz.0.2383': attribute type 2 has an invalid length. [ 291.341396][ T24] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 291.465288][T12512] tipc: Enabling of bearer rejected, failed to enable media [ 291.511371][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 291.516670][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 291.523858][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 291.528740][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.533969][ T24] usb 6-1: Product: syz [ 291.535319][ T24] usb 6-1: Manufacturer: syz [ 291.541374][ T24] usb 6-1: SerialNumber: syz [ 291.546551][ T24] usb 6-1: config 0 descriptor?? [ 291.554867][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 291.557840][ T24] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 291.971472][ T5799] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 292.131364][ T5106] Bluetooth: hci3: command tx timeout [ 292.135983][ T5799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.139632][ T5799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.143074][ T5799] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 292.146459][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.155896][ T24] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 292.156597][ T5799] usb 5-1: config 0 descriptor?? [ 292.441381][ T64] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 292.571044][ T24] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 292.571141][ T5799] hid_parser_main: 28 callbacks suppressed [ 292.571156][ T5799] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 292.577039][ T24] em28xx 6-1:0.0: board has no eeprom [ 292.579171][ T5799] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 292.583330][ T5799] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 292.585912][ T5799] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 292.588536][ T5799] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 292.600213][ T5799] playstation 0003:054C:0DF2.000E: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 292.631774][ T24] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 292.634301][ T24] em28xx 6-1:0.0: dvb set to bulk mode. [ 292.639029][ T24] usb 6-1: USB disconnect, device number 37 [ 292.642739][ T5981] em28xx 6-1:0.0: Binding DVB extension [ 292.645127][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 292.698564][ T5981] em28xx 6-1:0.0: Registering input extension [ 292.700636][ T24] em28xx 6-1:0.0: Closing input extension [ 292.708717][ T24] em28xx 6-1:0.0: Freeing device [ 293.173181][ T5799] playstation 0003:054C:0DF2.000E: Invalid gyro calibration data for axis (3), disabling calibration. [ 293.176743][ T5799] playstation 0003:054C:0DF2.000E: Invalid gyro calibration data for axis (4), disabling calibration. [ 293.180485][ T5799] playstation 0003:054C:0DF2.000E: Invalid gyro calibration data for axis (5), disabling calibration. [ 293.184039][ T5799] playstation 0003:054C:0DF2.000E: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 293.187697][ T5799] playstation 0003:054C:0DF2.000E: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 293.191617][ T5799] playstation 0003:054C:0DF2.000E: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 293.199930][ T5799] input: HID 054c:0df2 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:054C:0DF2.000E/input/input35 [ 293.262860][ T5799] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:054C:0DF2.000E/input/input36 [ 293.308328][ T5799] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:054C:0DF2.000E/input/input37 [ 293.347224][ T9] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 293.402572][ T5799] input: HID 054c:0df2 Headset Jack as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:054C:0DF2.000E/input/input38 [ 293.488219][ T5799] playstation 0003:054C:0DF2.000E: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 293.501184][ T5799] usb 5-1: USB disconnect, device number 32 [ 293.535457][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.540172][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 293.544045][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 293.550285][ T9] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 293.553798][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.557081][ T9] usb 8-1: Product: syz [ 293.559291][ T9] usb 8-1: Manufacturer: syz [ 293.561611][ T9] usb 8-1: SerialNumber: syz [ 293.580132][ T9] usb 8-1: config 0 descriptor?? [ 293.583664][T12534] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.632471][T12546] MTDSB: Device #1 doesn't appear to exist [ 293.632471][T12546] [ 293.653847][ T9] rc_core: IR keymap rc-streamzap not found [ 293.656562][ T9] Registered IR keymap rc-empty [ 293.670752][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2400'. [ 293.674786][T12548] netlink: 'syz.2.2400': attribute type 30 has an invalid length. [ 293.679575][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2400'. [ 293.699516][ T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 293.730697][ T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input39 [ 293.858594][ T9] usb 8-1: USB disconnect, device number 34 [ 295.391358][ T5897] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 295.480962][T12579] input: syz1 as /devices/virtual/input/input40 [ 295.551372][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 295.563814][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.568437][ T5897] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 295.581287][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.590471][ T5897] usb 7-1: config 0 descriptor?? [ 295.819291][ T5897] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 295.823910][ T5897] usb 7-1: USB disconnect, device number 51 [ 295.890685][ T42] audit: type=1800 audit(1785981297.477:199): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2409" name="device_path" dev="configfs" ino=39348 res=0 errno=0 [ 296.148595][T12590] netlink: 'syz.3.2411': attribute type 2 has an invalid length. [ 296.152323][T12590] netlink: 'syz.3.2411': attribute type 2 has an invalid length. [ 296.606105][T12600] syzkaller0: entered promiscuous mode [ 296.608488][T12600] syzkaller0: entered allmulticast mode [ 296.746081][ T42] audit: type=1800 audit(1785981298.337:200): pid=12604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2418" name="device_path" dev="configfs" ino=39368 res=0 errno=0 [ 296.851359][ T5897] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 296.942131][T12609] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2420'. [ 296.988845][T12612] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 297.011282][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 297.016124][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 297.023373][ T5897] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 297.027845][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.030447][ T5897] usb 6-1: Product: syz [ 297.032196][ T5897] usb 6-1: Manufacturer: syz [ 297.033750][ T5897] usb 6-1: SerialNumber: syz [ 297.040318][ T5897] usb 6-1: config 0 descriptor?? [ 297.044725][ T5897] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 297.048197][ T5897] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 297.421451][ T24] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 297.571552][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 297.586976][T12624] binder: 12622:12624 ioctl c00c620f 800003c0 returned -22 [ 297.633065][ T24] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 297.636954][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.640401][ T24] usb 7-1: Product: syz [ 297.642534][ T24] usb 7-1: Manufacturer: syz [ 297.644941][ T24] usb 7-1: SerialNumber: syz [ 297.649235][ T5897] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 297.867385][ T24] usb 7-1: 1:1 : bogus bTerminalLink 128 [ 297.875202][ T24] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 297.919340][ T24] usb 7-1: USB disconnect, device number 52 [ 297.948119][T12214] udevd[12214]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.058455][ T5897] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 298.060940][ T5897] em28xx 6-1:0.0: board has no eeprom [ 298.121331][ T5897] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 298.124593][ T5897] em28xx 6-1:0.0: dvb set to bulk mode. [ 298.127428][ T34] em28xx 6-1:0.0: Binding DVB extension [ 298.134882][ T5897] usb 6-1: USB disconnect, device number 38 [ 298.138480][ T5897] em28xx 6-1:0.0: Disconnecting em28xx [ 298.159611][ T34] em28xx 6-1:0.0: Registering input extension [ 298.162401][ T5897] em28xx 6-1:0.0: Closing input extension [ 298.176128][ T5897] em28xx 6-1:0.0: Freeing device [ 298.525435][T12645] MTD: Couldn't look up './dev/mtdblock0': -2 [ 298.629648][T12649] tipc: Started in network mode [ 298.632025][T12649] tipc: Node identity d28bef1544ed, cluster identity 4711 [ 298.635014][T12649] tipc: Enabled bearer , priority 0 [ 298.654405][T12648] tipc: Disabling bearer [ 298.871448][ T24] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 298.976826][T12662] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 299.056467][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 299.314794][T12669] MTD: Couldn't look up './dev/mtdblock0': -2 [ 299.488536][T12671] tipc: Enabled bearer , priority 0 [ 299.520802][T12670] tipc: Disabling bearer [ 299.775637][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.888282][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 299.891357][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.897131][ T24] usb 6-1: config 0 descriptor?? [ 300.102152][T12690] syzkaller0: entered promiscuous mode [ 300.104507][T12690] syzkaller0: entered allmulticast mode [ 300.114099][T12690] tipc: Enabled bearer , priority 0 [ 300.116861][ T24] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 300.121922][ T24] usb 6-1: USB disconnect, device number 39 [ 300.124813][T12689] tipc: Resetting bearer [ 300.138501][T12689] tipc: Disabling bearer [ 300.312029][T12695] MTD: Couldn't look up './dev/mtdblock0': -2 [ 300.457713][T12697] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.462645][T12697] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.614803][T12697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.628967][T12697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.811422][ T5809] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.816161][ T5809] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.819999][ T5809] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.823687][ T5809] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.512944][T12712] netlink: 'syz.1.2464': attribute type 2 has an invalid length. [ 301.516000][T12712] netlink: 'syz.1.2464': attribute type 2 has an invalid length. [ 301.708912][T12713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.752118][T12716] syzkaller0: entered promiscuous mode [ 301.753965][T12716] syzkaller0: entered allmulticast mode [ 301.769299][T12716] tipc: Started in network mode [ 301.770970][T12716] tipc: Node identity ea8282324ec8, cluster identity 4711 [ 301.774778][T12716] tipc: Enabled bearer , priority 0 [ 301.778996][T12715] tipc: Resetting bearer [ 301.792207][T12715] tipc: Disabling bearer [ 301.796929][T12720] kAFS: No cell specified [ 301.828472][T12723] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2469'. [ 302.341754][T12742] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2476'. [ 303.041840][ T42] audit: type=1800 audit(1785981304.637:201): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2486" name="enable" dev="configfs" ino=37547 res=0 errno=0 [ 303.861383][ T5854] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 304.021324][ T5854] usb 8-1: Using ep0 maxpacket: 16 [ 304.025985][ T5854] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 304.033526][ T5854] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 304.037961][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.041744][ T5854] usb 8-1: Product: syz [ 304.043453][ T5854] usb 8-1: Manufacturer: syz [ 304.045116][ T5854] usb 8-1: SerialNumber: syz [ 304.057156][ T5854] usb 8-1: config 0 descriptor?? [ 304.068732][ T5854] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 304.072365][ T5854] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 304.218429][T12802] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2501'. [ 304.221622][T12802] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2501'. [ 304.251330][ T846] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 304.402635][ T846] usb 6-1: config 0 has no interfaces? [ 304.404447][ T846] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 304.407422][ T846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.411312][ T846] usb 6-1: config 0 descriptor?? [ 304.624050][ T5799] usb 6-1: USB disconnect, device number 40 [ 304.666441][ T5854] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 304.991063][T12805] netlink: 'syz.2.2502': attribute type 2 has an invalid length. [ 304.994959][T12805] netlink: 'syz.2.2502': attribute type 2 has an invalid length. [ 305.050027][T12807] syzkaller0: entered promiscuous mode [ 305.052170][T12807] syzkaller0: entered allmulticast mode [ 305.083478][ T5854] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 305.086077][ T5854] em28xx 8-1:0.0: board has no eeprom [ 305.144057][ T5854] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 305.147219][ T5854] em28xx 8-1:0.0: dvb set to bulk mode. [ 305.149579][ T5799] em28xx 8-1:0.0: Binding DVB extension [ 305.164762][ T5854] usb 8-1: USB disconnect, device number 35 [ 305.182952][ T5854] em28xx 8-1:0.0: Disconnecting em28xx [ 305.195439][ T5799] em28xx 8-1:0.0: Registering input extension [ 305.199643][ T5854] em28xx 8-1:0.0: Closing input extension [ 305.207340][T12810] syzkaller0: entered promiscuous mode [ 305.209740][T12810] syzkaller0: entered allmulticast mode [ 305.214143][ T5854] em28xx 8-1:0.0: Freeing device [ 305.218256][T12810] tipc: Enabled bearer , priority 0 [ 305.224201][T12809] tipc: Resetting bearer [ 305.250505][T12809] tipc: Disabling bearer [ 305.482263][ T846] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 305.529206][T12823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.576414][T12826] lo speed is unknown, defaulting to 1000 [ 305.583222][T12826] lo speed is unknown, defaulting to 1000 [ 305.585373][T12826] lo speed is unknown, defaulting to 1000 [ 305.633203][ T846] usb 7-1: unable to get BOS descriptor or descriptor too short [ 305.636457][ T846] usb 7-1: not running at top speed; connect to a high speed hub [ 305.641588][ T846] usb 7-1: config 14 has an invalid interface number: 57 but max is 0 [ 305.644604][ T846] usb 7-1: config 14 has no interface number 0 [ 305.647114][ T846] usb 7-1: config 14 interface 57 has no altsetting 0 [ 305.651841][ T846] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 305.655284][ T846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.658802][ T846] usb 7-1: Product: syz [ 305.660471][ T846] usb 7-1: Manufacturer: syz [ 305.662509][ T846] usb 7-1: SerialNumber: syz [ 305.744311][ T40] lo speed is unknown, defaulting to 1000 [ 305.748025][T12826] infiniband sz1: set active [ 305.749864][T12826] infiniband sz1: added lo [ 305.757801][T12826] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 305.763060][T12826] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 305.768311][T12826] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 305.789920][T12826] RDS/IB: sz1: added [ 305.792018][T12826] smc: adding ib device sz1 with port count 1 [ 305.794707][T12826] smc: ib device sz1 port 1 has no pnetid [ 305.803492][T12826] lo speed is unknown, defaulting to 1000 [ 305.812553][ T34] lo speed is unknown, defaulting to 1000 [ 305.896249][T12826] lo speed is unknown, defaulting to 1000 [ 305.998264][T12826] lo speed is unknown, defaulting to 1000 [ 306.074597][ T846] legousbtower 7-1:14.57: interrupt endpoints not found [ 306.218830][T12826] lo speed is unknown, defaulting to 1000 [ 306.518144][T12826] lo speed is unknown, defaulting to 1000 [ 306.728131][T12848] netlink: 'syz.1.2518': attribute type 2 has an invalid length. [ 306.731747][T12848] netlink: 'syz.1.2518': attribute type 2 has an invalid length. [ 306.734555][T12849] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 307.041344][ T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 307.202620][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 307.210350][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 307.218377][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 307.223440][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.226619][ T24] usb 6-1: Product: syz [ 307.229459][ T24] usb 6-1: Manufacturer: syz [ 307.233648][ T24] usb 6-1: SerialNumber: syz [ 307.240306][ T24] usb 6-1: config 0 descriptor?? [ 307.251432][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 307.255023][ T24] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 307.852389][ T24] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 308.215455][T12873] netlink: 'syz.3.2528': attribute type 2 has an invalid length. [ 308.218194][T12873] netlink: 'syz.3.2528': attribute type 2 has an invalid length. [ 308.262399][ T24] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 308.265293][ T24] em28xx 6-1:0.0: board has no eeprom [ 308.333565][ T24] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 308.336314][ T24] em28xx 6-1:0.0: dvb set to bulk mode. [ 308.342561][ T40] em28xx 6-1:0.0: Binding DVB extension [ 308.344901][ T24] usb 6-1: USB disconnect, device number 41 [ 308.361033][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 308.364870][ T5897] usb 7-1: USB disconnect, device number 53 [ 308.388243][ T40] em28xx 6-1:0.0: Registering input extension [ 308.390419][ T24] em28xx 6-1:0.0: Closing input extension [ 308.399144][ T24] em28xx 6-1:0.0: Freeing device [ 308.825311][T12902] netlink: 'syz.1.2538': attribute type 2 has an invalid length. [ 308.829341][T12902] netlink: 'syz.1.2538': attribute type 2 has an invalid length. [ 309.141522][ T5854] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 309.313696][ T5854] usb 6-1: unable to get BOS descriptor or descriptor too short [ 309.317421][ T5854] usb 6-1: not running at top speed; connect to a high speed hub [ 309.321856][ T5854] usb 6-1: config 14 has an invalid interface number: 57 but max is 0 [ 309.325448][ T5854] usb 6-1: config 14 has no interface number 0 [ 309.327496][ T5854] usb 6-1: config 14 interface 57 has no altsetting 0 [ 309.332397][ T5854] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 309.335621][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.338288][ T5854] usb 6-1: Product: syz [ 309.339775][ T5854] usb 6-1: Manufacturer: syz [ 309.341626][ T5854] usb 6-1: SerialNumber: syz [ 309.443042][ T5833] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 309.603202][ T5833] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 309.606551][ T5833] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 309.609742][ T5833] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 309.612797][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.752975][ T5854] legousbtower 6-1:14.57: interrupt endpoints not found [ 310.031686][ T5833] gud 5-1:1.0: probe with driver gud failed with error -71 [ 310.034608][T12921] tipc: Enabling of bearer rejected, failed to enable media [ 310.037347][ T5833] usb 5-1: USB disconnect, device number 33 [ 310.119350][T12923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2546'. [ 310.574474][T12947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2556'. [ 311.381685][T12958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2559'. [ 311.384828][T12958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2559'. [ 311.392996][T12958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2559'. [ 311.766675][T12964] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 312.051109][ T24] usb 6-1: USB disconnect, device number 42 [ 312.107930][T12953] tipc: Enabling of bearer rejected, failed to enable media [ 312.369960][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.375596][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.380139][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.386603][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.389910][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.530329][ T5809] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.662287][ T5809] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.788224][ T5809] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.795107][T12976] lo speed is unknown, defaulting to 1000 [ 312.867094][ T5809] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.026885][T13001] MTD: Couldn't look up './dev/mtdblock0': -2 [ 313.144369][ T5809] bridge_slave_1: left allmulticast mode [ 313.148791][ T5809] bridge_slave_1: left promiscuous mode [ 313.153207][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.162377][T13009] /dev/nullb0: Can't open blockdev [ 313.166015][ T5809] bridge_slave_0: left allmulticast mode [ 313.169200][ T5809] bridge_slave_0: left promiscuous mode [ 313.172907][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.344892][T13021] pi3usb30532 0-0005: Error reading config register -6 [ 313.360925][T13021] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 313.398990][T13026] No source specified [ 313.448607][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.456632][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.461638][ T5809] bond0 (unregistering): Released all slaves [ 313.494872][ T5459] 8021q: adding VLAN 0 to HW filter on device eth2 [ 313.498248][T12976] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.501873][T12976] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.504568][T12976] bridge_slave_0: entered allmulticast mode [ 313.507416][T12976] bridge_slave_0: entered promiscuous mode [ 313.515680][T12976] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.518328][T12976] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.520730][T12976] bridge_slave_1: entered allmulticast mode [ 313.524841][T12976] bridge_slave_1: entered promiscuous mode [ 313.572453][T12976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.575928][ T5809] tipc: Left network mode [ 313.577515][T12976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.596785][T12976] team0: Port device team_slave_0 added [ 313.600637][T12976] team0: Port device team_slave_1 added [ 313.628891][T13040] netlink: 'syz.2.2580': attribute type 2 has an invalid length. [ 313.634783][T13040] netlink: 'syz.2.2580': attribute type 2 has an invalid length. [ 313.644465][T12976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.648767][T12976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.661492][T12976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.664592][T13043] syz2: rxe_newlink: already configured on ipvlan0 [ 313.666294][T12976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.669237][T12976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.678304][T12976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.747370][T12976] hsr_slave_0: entered promiscuous mode [ 313.752572][T12976] hsr_slave_1: entered promiscuous mode [ 313.755371][T12976] debugfs: 'hsr0' already exists in 'hsr' [ 313.757540][T12976] Cannot create hsr debugfs directory [ 313.879531][ T5459] 8021q: adding VLAN 0 to HW filter on device eth3 [ 314.313230][ T5809] hsr_slave_0: left promiscuous mode [ 314.316281][ T5809] hsr_slave_1: left promiscuous mode [ 314.319136][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.322723][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.326793][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.329861][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.340467][ T5809] veth1_macvtap: left promiscuous mode [ 314.343798][ T5809] veth0_macvtap: left promiscuous mode [ 314.346551][ T5809] veth1_vlan: left promiscuous mode [ 314.348830][ T5809] veth0_vlan: left promiscuous mode [ 314.521448][ T5106] Bluetooth: hci2: command tx timeout [ 314.552870][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 314.563900][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 314.635558][T13068] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2588'. [ 314.980979][T12976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.991101][T12976] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.995143][T12976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.999455][T12976] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.002559][T12976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 315.006648][T12976] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.009905][T12976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 315.016801][T12976] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.118474][T12976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.131691][T13092] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input44 [ 315.140534][T12976] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.148777][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.151088][ T6609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.166618][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.169046][ T6609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.399103][T13109] »»»»»»: renamed from vlan0 (while UP) [ 315.455493][T12976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.486351][T12976] veth0_vlan: entered promiscuous mode [ 315.492461][T12976] veth1_vlan: entered promiscuous mode [ 315.498737][T13121] netlink: 'syz.2.2595': attribute type 2 has an invalid length. [ 315.501417][T13121] netlink: 'syz.2.2595': attribute type 2 has an invalid length. [ 315.514938][T12976] veth0_macvtap: entered promiscuous mode [ 315.520458][T12976] veth1_macvtap: entered promiscuous mode [ 315.532165][T12976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.538899][T12976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.576200][ T5809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.601766][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.651749][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.654908][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.667785][ T6570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.670324][ T6570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.712344][ T6570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.715689][ T6570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.981150][T13138] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 316.056329][T13139] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2601'. [ 316.307607][ T42] audit: type=1800 audit(1785981317.897:202): pid=13143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2603" name="device_path" dev="configfs" ino=41590 res=0 errno=0 [ 316.316200][ T42] audit: type=1800 audit(1785981317.907:203): pid=13143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2603" name="enable" dev="configfs" ino=41591 res=0 errno=0 [ 316.499363][T13152] MTD: Couldn't look up './dev/mtdblock0': -2 [ 316.601397][ T5106] Bluetooth: hci2: command tx timeout [ 316.676364][T13161] netlink: 'syz.3.2611': attribute type 2 has an invalid length. [ 316.679446][T13161] netlink: 'syz.3.2611': attribute type 2 has an invalid length. [ 316.762334][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.811391][ T1893] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 316.919701][ T42] audit: type=1800 audit(1785981318.507:204): pid=13171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2615" name="device_path" dev="configfs" ino=42126 res=0 errno=0 [ 316.928775][ T42] audit: type=1800 audit(1785981318.517:205): pid=13171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2615" name="enable" dev="configfs" ino=41622 res=0 errno=0 [ 316.973372][ T1893] usb 7-1: unable to get BOS descriptor or descriptor too short [ 316.977015][ T1893] usb 7-1: not running at top speed; connect to a high speed hub [ 316.980962][ T1893] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 316.984971][ T1893] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 316.987690][ T1893] usb 7-1: config 14 has no interface number 0 [ 316.989703][ T1893] usb 7-1: config 14 has no interface number 1 [ 316.991973][ T1893] usb 7-1: config 14 interface 57 has no altsetting 0 [ 316.994171][ T1893] usb 7-1: config 14 interface 228 has no altsetting 0 [ 316.998375][ T1893] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 317.005342][ T1893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.008067][ T1893] usb 7-1: Product: syz [ 317.009396][ T1893] usb 7-1: Manufacturer: syz [ 317.010880][ T1893] usb 7-1: SerialNumber: syz [ 317.377627][ T42] audit: type=1800 audit(1785981318.967:206): pid=13192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2624" name="power" dev="configfs" ino=42149 res=0 errno=0 [ 317.388515][T13192] null_blk: nullb2: using native zone append [ 317.391373][ T42] audit: type=1800 audit(1785981318.977:207): pid=13192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2624" name="zoned" dev="configfs" ino=42154 res=0 errno=0 [ 317.404199][ T42] audit: type=1800 audit(1785981318.977:208): pid=13192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2624" name="power" dev="configfs" ino=42155 res=0 errno=0 [ 317.422494][ T1893] legousbtower 7-1:14.57: interrupt endpoints not found [ 317.442787][T13192] null_blk: disk nullb2 created [ 317.629798][ T1893] legousbtower 7-1:14.228: interrupt endpoints not found [ 317.637528][T13203] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 317.760029][T13211] busy [ 317.991300][ T1893] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 318.121817][ T1893] usb 8-1: device descriptor read/64, error -71 [ 318.362071][ T1893] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 318.491444][ T1893] usb 8-1: device descriptor read/64, error -71 [ 318.602321][ T1893] usb usb8-port1: attempt power cycle [ 318.682853][ T5106] Bluetooth: hci2: command tx timeout [ 318.941461][ T1893] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 318.963541][ T1893] usb 8-1: device descriptor read/8, error -71 [ 319.201377][ T1893] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 319.221958][ T1893] usb 8-1: device descriptor read/8, error -71 [ 319.331774][ T1893] usb usb8-port1: unable to enumerate USB device [ 319.593473][ T5981] usb 7-1: USB disconnect, device number 54 [ 319.675453][T13240] kAFS: No cell specified [ 320.089076][T13249] No source specified [ 320.101670][ T5981] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 320.261360][ T5981] usb 7-1: Using ep0 maxpacket: 16 [ 320.266257][ T5981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.271302][ T5981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.277162][ T5981] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 320.284773][ T5981] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 320.289786][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.295362][ T5981] usb 7-1: config 0 descriptor?? [ 320.709089][ T5981] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 320.711871][ T5981] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 320.714338][ T5981] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 320.716600][ T5981] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 320.719034][ T5981] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 320.721375][ T5981] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 320.723758][ T5981] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 320.726504][ T5981] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 320.728925][ T5981] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 320.731981][ T5981] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 320.745391][ T5981] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.000F/input/input45 [ 320.762084][ T5106] Bluetooth: hci2: command tx timeout [ 320.824088][ T5981] microsoft 0003:045E:07DA.000F: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 320.910132][ T5981] usb 7-1: USB disconnect, device number 55 [ 320.931787][T13269] syzkaller0: entered promiscuous mode [ 320.934133][T13269] syzkaller0: entered allmulticast mode [ 321.087224][T13276] No source specified [ 321.118680][ T42] audit: type=1800 audit(1785981322.707:209): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2653" name="zoned" dev="configfs" ino=41760 res=0 errno=0 [ 321.126217][ T42] audit: type=1800 audit(1785981322.707:210): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2653" name="memory_backed" dev="configfs" ino=42329 res=0 errno=0 [ 321.133496][ T42] audit: type=1800 audit(1785981322.707:211): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2653" name="zone_nr_conv" dev="configfs" ino=42330 res=0 errno=0 [ 321.291754][ T5981] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 321.403793][T13289] syzkaller0: entered promiscuous mode [ 321.405669][T13289] syzkaller0: entered allmulticast mode [ 321.411458][T13290] netlink: 'syz.1.2657': attribute type 2 has an invalid length. [ 321.434002][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 321.571466][ T9] usb 5-1: device descriptor read/64, error -71 [ 321.587666][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 321.587684][ T42] audit: type=1800 audit(1785981323.177:213): pid=13294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2660" name="block_bytes" dev="configfs" ino=42345 res=0 errno=0 [ 321.814018][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 321.937007][T13300] block device autoloading is deprecated and will be removed. [ 321.952515][ T9] usb 5-1: device descriptor read/64, error -71 [ 322.061587][ T9] usb usb5-port1: attempt power cycle [ 322.423945][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 322.457872][ T9] usb 5-1: device descriptor read/8, error -71 [ 322.570819][T13309] tipc: Enabling of bearer rejected, failed to enable media [ 322.693859][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 322.715291][T13311] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 322.720016][T13311] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 322.724254][ T9] usb 5-1: device descriptor read/8, error -71 [ 322.725300][T13311] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 322.735736][T13311] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 322.834067][ T9] usb usb5-port1: unable to enumerate USB device [ 323.109266][T13326] syzkaller0: entered promiscuous mode [ 323.111088][T13326] syzkaller0: entered allmulticast mode [ 323.400593][T13341] tipc: Enabling of bearer rejected, failed to enable media [ 323.592733][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.599382][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.605683][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.610596][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.613792][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.677329][T13351] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 324.146574][T13348] lo speed is unknown, defaulting to 1000 [ 324.364077][ T5981] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 324.604474][ T5826] bridge_slave_1: left allmulticast mode [ 324.606390][ T5826] bridge_slave_1: left promiscuous mode [ 324.608363][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.615764][ T5826] bridge_slave_0: left allmulticast mode [ 324.618369][ T5826] bridge_slave_0: left promiscuous mode [ 324.621838][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.691468][ T5897] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 324.805099][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.808454][ T6570] smbdirect: ib_dev[syz1] removed [ 324.811899][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.816329][ T5826] bond0 (unregistering): Released all slaves [ 324.852565][ T5897] usb 5-1: config 0 has no interfaces? [ 324.857160][ T5897] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 324.861006][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.870861][ T5897] usb 5-1: config 0 descriptor?? [ 324.955990][T13375] tipc: Enabling of bearer rejected, failed to enable media [ 324.977196][ T5826] tipc: Left network mode [ 325.024349][T13348] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.040585][T13348] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.044050][T13348] bridge_slave_0: entered allmulticast mode [ 325.048131][T13348] bridge_slave_0: entered promiscuous mode [ 325.057537][T13348] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.060697][T13348] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.063909][T13348] bridge_slave_1: entered allmulticast mode [ 325.067906][T13348] bridge_slave_1: entered promiscuous mode [ 325.116301][T13348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.122060][ T846] usb 5-1: USB disconnect, device number 38 [ 325.122184][T13348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.138231][ T5459] 8021q: adding VLAN 0 to HW filter on device eth2 [ 325.184061][T13348] team0: Port device team_slave_0 added [ 325.187610][T13348] team0: Port device team_slave_1 added [ 325.202004][T13348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.204352][T13348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.212901][T13348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.218058][T13348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.220279][T13348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.228224][T13348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.268559][T13348] hsr_slave_0: entered promiscuous mode [ 325.270921][T13348] hsr_slave_1: entered promiscuous mode [ 325.383346][ T5459] 8021q: adding VLAN 0 to HW filter on device eth3 [ 325.597877][ T5826] hsr_slave_0: left promiscuous mode [ 325.600075][ T5826] hsr_slave_1: left promiscuous mode [ 325.608232][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.610995][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.642310][ T5106] Bluetooth: hci0: command tx timeout [ 325.741336][ T5833] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 325.766728][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 325.779326][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 325.891372][ T5833] usb 8-1: Using ep0 maxpacket: 8 [ 325.895323][ T5833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.898958][ T5833] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 325.902019][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.907465][ T5833] usb 8-1: config 0 descriptor?? [ 325.961338][ T5897] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 326.113082][ T5897] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 326.114167][ T5833] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 326.117797][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 326.130770][ T5897] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 326.134905][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 326.136640][T13348] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.144533][ T5897] usb 5-1: Product: syz [ 326.146407][ T5897] usb 5-1: Manufacturer: syz [ 326.153631][ T5897] usb 5-1: SerialNumber: syz [ 326.164791][T13348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.165940][ T5897] usb 5-1: config 0 descriptor?? [ 326.173777][T13348] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.176694][ T5897] usb 5-1: selecting invalid altsetting 0 [ 326.193739][T13348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.197189][T13348] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.205659][T13348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.209156][T13348] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 326.217072][T13348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.280157][T13348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.298154][T13348] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.308293][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.311410][ T6583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.319369][ T58] usb 8-1: USB disconnect, device number 40 [ 326.319912][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.324387][ T6583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.439811][ T9] usb 5-1: USB disconnect, device number 39 [ 326.439814][ C3] usb 5-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 326.441896][ C3] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 326.601826][ T5981] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 326.787606][T13348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.837508][T13348] veth0_vlan: entered promiscuous mode [ 326.858229][T13348] veth1_vlan: entered promiscuous mode [ 326.896595][T13348] veth0_macvtap: entered promiscuous mode [ 326.904586][T13348] veth1_macvtap: entered promiscuous mode [ 326.921880][T13348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.938313][T13348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.963681][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.005681][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.040086][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.101590][ T5612] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.114961][ T6570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.123039][ T6570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.144807][ T6570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.147669][ T6570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.604580][T13479] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 327.721315][ T5106] Bluetooth: hci0: command tx timeout [ 327.981399][ T24] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 328.021343][ T34] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 328.141408][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 328.145591][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.149244][ T24] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 328.152879][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.158232][ T24] usb 7-1: config 0 descriptor?? [ 328.184468][ T34] usb 8-1: unable to get BOS descriptor or descriptor too short [ 328.192146][ T34] usb 8-1: not running at top speed; connect to a high speed hub [ 328.203611][ T34] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 328.207373][ T34] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 328.210895][ T34] usb 8-1: config 14 has no interface number 0 [ 328.213960][ T34] usb 8-1: config 14 has no interface number 1 [ 328.217733][ T34] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 328.231489][ T34] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 328.238537][ T34] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 328.243700][ T34] usb 8-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 328.249603][ T34] usb 8-1: config 14 interface 57 has no altsetting 0 [ 328.253239][ T34] usb 8-1: config 14 interface 228 has no altsetting 0 [ 328.258413][ T34] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 328.263152][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.266440][ T34] usb 8-1: Product: syz [ 328.268194][ T34] usb 8-1: Manufacturer: syz [ 328.270264][ T34] usb 8-1: SerialNumber: syz [ 328.342255][T13502] tipc: Enabling of bearer rejected, failed to enable media [ 328.371382][ T5833] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 328.376059][ T24] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 328.524444][ T5833] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 328.528221][ T5833] usb 6-1: config 0 interface 0 has no altsetting 0 [ 328.533131][ T5833] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 328.536173][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 328.539302][ T5833] usb 6-1: Product: syz [ 328.540830][ T5833] usb 6-1: Manufacturer: syz [ 328.542628][ T5833] usb 6-1: SerialNumber: syz [ 328.551733][ T5833] usb 6-1: config 0 descriptor?? [ 328.559757][ T5833] usb 6-1: selecting invalid altsetting 0 [ 328.579224][ T1042] usb 7-1: USB disconnect, device number 56 [ 328.686946][ T34] legousbtower 8-1:14.57: interrupt endpoints not found [ 328.815992][ T5981] usb 6-1: USB disconnect, device number 43 [ 328.816009][ C0] usb 6-1: Unable to submit urb #1: -19 at snd_usb_queue_pending_output_urbs [ 328.822739][T13497] usb 6-1: cannot submit urb 0, error -19: no device [ 328.832075][ T5854] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 328.891775][ T34] legousbtower 8-1:14.228: interrupt endpoints not found [ 328.983517][ T5854] usb 5-1: config 0 has no interfaces? [ 328.985994][ T5854] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 328.988998][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.994651][ T5854] usb 5-1: config 0 descriptor?? [ 329.207785][ T5833] usb 5-1: USB disconnect, device number 40 [ 329.621463][ T5854] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 329.782424][ T5854] usb 6-1: device descriptor read/64, error -71 [ 329.803031][ T5106] Bluetooth: hci0: command tx timeout [ 329.831165][T13538] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 329.902199][T13538] md: could not open device unknown-block(1,0). [ 329.929682][T13538] md/raid:md0: not clean -- starting background reconstruction [ 329.933413][T13538] md/raid:md0: device ram0 operational as raid disk 0 [ 329.953010][T13538] md/raid:md0: raid level 5 active with 1 out of 1 devices, algorithm 0 [ 329.957204][T13538] ------------[ cut here ]------------ [ 329.959567][T13538] UBSAN: shift-out-of-bounds in ./include/linux/log2.h:57:13 [ 329.963215][T13538] shift exponent 64 is too large for 64-bit type 'long unsigned int' SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 329.967745][T13538] CPU: 2 UID: 0 PID: 13538 Comm: syz.2.2716 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.967780][T13538] Tainted: [L]=SOFTLOCKUP [ 329.967787][T13538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.967799][T13538] Call Trace: [ 329.967807][T13538] [ 329.967814][T13538] dump_stack_lvl+0x100/0x190 [ 329.967848][T13538] ubsan_epilogue+0xa/0x30 [ 329.967867][T13538] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 329.967903][T13538] raid5_set_limits+0x310/0x53c [ 329.967928][T13538] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 329.967975][T13538] ? __pfx_raid5_set_limits+0x10/0x10 [ 329.968017][T13538] raid5_run.cold+0x35a/0xd19 [ 329.968047][T13538] md_run+0xc2f/0x2510 [ 329.968113][T13538] ? __pfx_md_run+0x10/0x10 [ 329.968139][T13538] ? set_disk_ro+0x1b7/0x210 [ 329.968183][T13538] ? __pfx_set_disk_ro+0x10/0x10 [ 329.968210][T13538] do_md_run+0x36/0x660 [ 329.968241][T13538] array_state_store+0x9c5/0xcf0 [ 329.968262][T13538] md_attr_store+0x1c5/0x330 [ 329.968284][T13538] ? __pfx_md_attr_store+0x10/0x10 [ 329.968311][T13538] sysfs_kf_write+0xf2/0x150 [ 329.968338][T13538] kernfs_fop_write_iter+0x3e0/0x5f0 [ 329.968358][T13538] ? __pfx_sysfs_kf_write+0x10/0x10 [ 329.968384][T13538] vfs_write+0x6ac/0x1050 [ 329.968404][T13538] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 329.968427][T13538] ? __pfx_vfs_write+0x10/0x10 [ 329.968443][T13538] ? find_held_lock+0x2b/0x80 [ 329.968483][T13538] ksys_write+0x12a/0x250 [ 329.968501][T13538] ? __pfx_ksys_write+0x10/0x10 [ 329.968990][T13538] __do_fast_syscall_32+0xe7/0x970 [ 329.969034][T13538] do_fast_syscall_32+0x32/0x70 [ 329.969062][T13538] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.969088][T13538] RIP: 0023:0xf702efec [ 329.969114][T13538] Code: Unable to access opcode bytes at 0xf702efc2. [ 329.969124][T13538] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 329.969144][T13538] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000e00 [ 329.969155][T13538] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.969168][T13538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.969177][T13538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.969185][T13538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.969209][T13538] [ 329.969357][T13538] ---[ end trace ]--- [ 330.041382][ T5854] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 330.044873][T13538] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 330.044897][T13538] CPU: 2 UID: 0 PID: 13538 Comm: syz.2.2716 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.044928][T13538] Tainted: [L]=SOFTLOCKUP [ 330.044934][T13538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.044946][T13538] Call Trace: [ 330.044952][T13538] [ 330.044961][T13538] dump_stack_lvl+0x100/0x190 [ 330.086479][T13538] vpanic+0x552/0x970 [ 330.088192][T13538] ? __pfx_vpanic+0x10/0x10 [ 330.090122][T13538] ? irqentry_exit+0x24d/0xa00 [ 330.092152][T13538] ? lockdep_hardirqs_on+0x78/0x100 [ 330.094343][T13538] ? irqentry_exit+0x24d/0xa00 [ 330.096391][T13538] panic+0xd1/0xe0 [ 330.098028][T13538] ? __pfx_panic+0x10/0x10 [ 330.099922][T13538] ? dump_stack_lvl+0x176/0x190 [ 330.101731][T13538] check_panic_on_warn.cold+0x19/0x34 [ 330.103416][T13538] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 330.105706][T13538] raid5_set_limits+0x310/0x53c [ 330.107678][T13538] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 330.109805][T13538] ? __pfx_raid5_set_limits+0x10/0x10 [ 330.112065][T13538] raid5_run.cold+0x35a/0xd19 [ 330.114052][T13538] md_run+0xc2f/0x2510 [ 330.115818][T13538] ? __pfx_md_run+0x10/0x10 [ 330.117798][T13538] ? set_disk_ro+0x1b7/0x210 [ 330.119733][T13538] ? __pfx_set_disk_ro+0x10/0x10 [ 330.121544][T13538] do_md_run+0x36/0x660 [ 330.122845][T13538] array_state_store+0x9c5/0xcf0 [ 330.124447][T13538] md_attr_store+0x1c5/0x330 [ 330.125918][T13538] ? __pfx_md_attr_store+0x10/0x10 [ 330.127543][T13538] sysfs_kf_write+0xf2/0x150 [ 330.129011][T13538] kernfs_fop_write_iter+0x3e0/0x5f0 [ 330.130669][T13538] ? __pfx_sysfs_kf_write+0x10/0x10 [ 330.132302][T13538] vfs_write+0x6ac/0x1050 [ 330.133673][T13538] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 330.135548][T13538] ? __pfx_vfs_write+0x10/0x10 [ 330.137063][T13538] ? find_held_lock+0x2b/0x80 [ 330.138572][T13538] ksys_write+0x12a/0x250 [ 330.139934][T13538] ? __pfx_ksys_write+0x10/0x10 [ 330.141514][T13538] __do_fast_syscall_32+0xe7/0x970 [ 330.143126][T13538] do_fast_syscall_32+0x32/0x70 [ 330.144668][T13538] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.146658][T13538] RIP: 0023:0xf702efec [ 330.148038][T13538] Code: Unable to access opcode bytes at 0xf702efc2. [ 330.150108][T13538] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 330.152733][T13538] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000e00 [ 330.155210][T13538] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.157698][T13538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.160153][T13538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.162622][T13538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.165091][T13538] [ 330.166801][T13538] Kernel Offset: disabled [ 330.168248][T13538] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:55:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000512a39 RBX=ffffffff8e891480 RCX=ffffffff8bb892d5 RDX=0000000000000000 RSI=ffffffff8e1a9b0a RDI=ffffffff8c400a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2db83cfa10 CR3=0000000062bcb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000006fd0a7 RBX=ffff88801c742540 RCX=ffffffff8bb892d5 RDX=0000000000000000 RSI=ffffffff8e1a9b0a RDI=ffffffff8c400a80 RBP=ffffed10038e84a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2db83a0e9c CR3=000000005f19c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffc900045bedc4 RCX=ffffffff8bb4ec3c RDX=00000000ffffffeb RSI=0000000000000000 RDI=ffff88802473a540 RBP=ffffffff9b723037 RSP=ffffc900045bed40 R8 =0000000000000005 R9 =0000000000000000 R10=00000000ffffffeb R11=0000000000000000 R12=0000000000000031 R13=0000000000000014 R14=ffffc900045bedb0 R15=dffffc0000000000 RIP=ffffffff8209a9db RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3649be CR3=0000000069ab1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffea00017765d8 RBX=0000000000000000 RCX=ffffffff824c79f5 RDX=ffff88802390a540 RSI=ffffffff825d294f RDI=ffff88802390a540 RBP=0000000000000000 RSP=ffffc9000485f7a0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888021328000 R13=ffffea00017765c0 R14=ffff888052511dd0 R15=800000005dd97825 RIP=ffffffff825d2957 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f76ec0 CR3=0000000069ab1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000