last executing test programs: 8.251833965s ago: executing program 5 (id=2406): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0x80000000, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001000000", @ANYRES32=0x1, @ANYBLOB="00e5efb900"/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r0}, 0x38) 6.985400739s ago: executing program 4 (id=2421): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xff00, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 6.699661655s ago: executing program 4 (id=2426): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="1c", 0x1, 0x200080c0, &(0x7f0000000140)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) sendto$inet6(r0, &(0x7f0000000180)="f8", 0x1, 0x20000040, 0x0, 0x0) 6.14446512s ago: executing program 4 (id=2428): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@dioread_nolock}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x8, 0x5, 0x4) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 6.055543107s ago: executing program 5 (id=2430): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x4dc0, 0x9c080, 0xa, 0x1b1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.806876383s ago: executing program 5 (id=2436): r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x21}, 0x20) 5.643729s ago: executing program 0 (id=2438): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 5.514034436s ago: executing program 5 (id=2440): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, 0x0) 5.468360455s ago: executing program 0 (id=2441): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4020744f, &(0x7f0000000040)=0x80) 5.268183924s ago: executing program 5 (id=2444): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0xd4, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @mcast2, 0x80}, r1, 0x40099d}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000580)={0xc, 0x8, 0xfa00, {&(0x7f0000000400)}}, 0x10) 5.267760919s ago: executing program 0 (id=2445): syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b03010107208c0904000000010120041d000708240a0001ff23000c24030207030004000700810904010000010220090501090002030b040825010000400400090402000001022000090402010101023000092402020400cc1c051024010201000400000008b800"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd700006dbdf250900020073797a30000000000800410073697700140033007767310000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080150905810300020000000904010000020d0000090401"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000580)={0x20, 0xb14f4fbf63e83789}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpgrp(0xffffffffffffffff) waitid(0x3, r4, &(0x7f0000000440), 0x4, &(0x7f00000004c0)) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, 0x0, 0x80) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) 5.08009824s ago: executing program 5 (id=2448): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$xdp(0x2c, 0x3, 0x0) r4 = dup2(r1, r1) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1c00, 0xda3, 0x7fff, 0x5, 0x11}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) 5.079542248s ago: executing program 4 (id=2450): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 4.690901141s ago: executing program 4 (id=2458): r0 = socket$inet6(0xa, 0x5, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x4, 0x3b, 0x4ec, 0xffff7fff, 0xe8, 0x588a, 0x6}, &(0x7f00000000c0)=0x9c) 4.375844027s ago: executing program 4 (id=2463): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f000001aec0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000000)="dc", 0x1}], 0x1}}, {{&(0x7f0000019640)={0xa, 0x4e22, 0x6, @mcast2, 0x1}, 0x1c, &(0x7f0000019940)=[{&(0x7f0000019680)="64a7", 0x2}], 0x1}}], 0x2, 0x4c040) 4.037248352s ago: executing program 32 (id=2463): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f000001aec0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000000)="dc", 0x1}], 0x1}}, {{&(0x7f0000019640)={0xa, 0x4e22, 0x6, @mcast2, 0x1}, 0x1c, &(0x7f0000019940)=[{&(0x7f0000019680)="64a7", 0x2}], 0x1}}], 0x2, 0x4c040) 4.015212991s ago: executing program 3 (id=2468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 3.721300805s ago: executing program 3 (id=2470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}, @IFLA_BR_STP_STATE={0x8, 0x32, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) 2.831487789s ago: executing program 3 (id=2477): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@nodioread_nolock}, {@noload}, {@nolazytime}, {@oldalloc}]}, 0x1, 0x586, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00000003c0)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@dioread_nolock}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) 2.443865509s ago: executing program 3 (id=2480): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa2401, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r1 = syz_open_pts(r0, 0x200) dup3(r1, r0, 0x0) 2.402999432s ago: executing program 1 (id=2481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) 2.149228947s ago: executing program 1 (id=2483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x11, 0xfffa, 0x35a2, 0x1, 0x9, 0x1, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.103143065s ago: executing program 3 (id=2484): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b"], 0x0) mkdir(0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0x5) io_setup(0x66, &(0x7f0000000400)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x1, 0x13) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x80, 0x97be, 0x6, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) 1.737071498s ago: executing program 2 (id=2486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x60450, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x3c}}, 0x0) 1.267426002s ago: executing program 0 (id=2487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xc}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xe}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 675.834904ms ago: executing program 1 (id=2488): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) 675.56293ms ago: executing program 2 (id=2489): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000640)={0x1, 0x0, 0x3, 0xe, 0x5a, 0x0}) 534.519609ms ago: executing program 1 (id=2490): r0 = io_uring_setup(0x64ef, &(0x7f0000000000)={0x0, 0x190c, 0x10000, 0x0, 0x2000030}) io_uring_register$IORING_REGISTER_QUERY(r0, 0x23, &(0x7f0000000080), 0x0) 520.265761ms ago: executing program 0 (id=2491): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) 499.218059ms ago: executing program 2 (id=2492): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8410, &(0x7f00000006c0), 0x2, 0x24b, &(0x7f0000000840)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2000844, &(0x7f0000000080)={[{}, {@nodots}, {@dots}, {@dots}, {@fat=@debug}, {@dots}, {@nodots}, {@fat=@quiet}, {@fat=@nfs_nostale_ro}, {@fat=@sys_immutable}, {@nodots}, {@fat=@nfs_nostale_ro}, {@fat=@time_offset={'time_offset', 0x3d, 0xa8}}, {@dots}, {@fat=@showexec}, {@fat=@errors_continue}]}, 0x1, 0x241, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) 323.903045ms ago: executing program 1 (id=2493): r0 = syz_open_dev$loop(&(0x7f0000000900), 0x7c00, 0x8000) ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) 323.567356ms ago: executing program 2 (id=2494): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x8080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x101040a) 248.1093ms ago: executing program 2 (id=2495): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x7f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r0, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x4e24, 0x8001, @loopback, 0x8}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'caif0\x00', 0x1}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) 207.863509ms ago: executing program 0 (id=2496): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2c00) ioctl$BLKGETNRZONES(r0, 0x80041285, &(0x7f0000000100)=0xb3) 123.474422ms ago: executing program 1 (id=2497): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000001"], 0x48) r0 = syz_io_uring_setup(0x6c8b, &(0x7f00000011c0)={0x0, 0xac0c, 0x800, 0x400000, 0x3c1}, &(0x7f0000001340), &(0x7f0000001380), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 318.069µs ago: executing program 2 (id=2498): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) 0s ago: executing program 3 (id=2499): bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x10, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x5a}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) kernel console output (not intermixed with test programs): ver after parsing attributes in process `syz.4.592'. [ 316.138066][ T9020] binder: 9018:9020 ioctl 4018620d 0 returned -22 [ 318.009683][ T5742] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 318.383356][ T5742] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 318.407049][ T5742] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 319.018587][ T5742] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 319.042116][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 319.062994][ T5742] usb 5-1: SerialNumber: syz [ 319.126460][ T5742] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 319.155117][ T5742] usb-storage 5-1:1.0: USB Mass Storage device detected [ 319.188637][ T5742] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 319.217299][ T5742] scsi host1: usb-storage 5-1:1.0 [ 319.329734][ T5864] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 319.807373][ T5864] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.823603][ T5864] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 319.844405][ T5864] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 319.857160][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 319.865591][ T5864] usb 6-1: SerialNumber: syz [ 319.885820][ T5864] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 319.894763][ T5864] usb-storage 6-1:1.0: USB Mass Storage device detected [ 319.941346][ T5864] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 319.986034][ T5864] scsi host2: usb-storage 6-1:1.0 [ 320.338944][ T5742] usb 6-1: USB disconnect, device number 6 [ 322.104217][ T5778] usb 5-1: USB disconnect, device number 4 [ 328.740188][ T5864] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 328.961390][ T5864] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.972614][ T5864] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 329.098349][ T5864] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 329.118055][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 329.132529][ T5864] usb 4-1: SerialNumber: syz [ 329.600119][ T5864] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 329.610114][ T5864] usb-storage 4-1:1.0: USB Mass Storage device detected [ 329.622013][ T5864] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 329.642973][ T5864] scsi host1: usb-storage 4-1:1.0 [ 330.093686][ T9155] binder: 9154:9155 ioctl 4018620d 0 returned -22 [ 333.629634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 333.669643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 335.046896][ T5778] usb 4-1: USB disconnect, device number 5 [ 336.323075][ T24] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 336.502455][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 336.519480][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 336.557695][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 336.581639][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 336.612492][ T24] usb 5-1: SerialNumber: syz [ 336.643443][ T24] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 336.671408][ T24] usb-storage 5-1:1.0: USB Mass Storage device detected [ 336.691246][ T9212] overlayfs: failed to resolve './file0': -2 [ 336.706947][ T24] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 336.738786][ T24] scsi host1: usb-storage 5-1:1.0 [ 338.616888][ T5778] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 338.831342][ T5778] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 338.870251][ T5778] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 338.913290][ T5778] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 338.937934][ T5778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 338.976772][ T5778] usb 3-1: SerialNumber: syz [ 339.248918][ T5778] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 339.352749][ T5778] usb-storage 3-1:1.0: USB Mass Storage device detected [ 339.365181][ T5778] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 339.725637][ T5778] scsi host2: usb-storage 3-1:1.0 [ 341.788410][ T5630] usb 5-1: USB disconnect, device number 5 [ 342.119584][ T5778] usb 3-1: USB disconnect, device number 5 [ 348.899852][ T5785] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 350.342759][ T5785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.354501][ T5785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 350.373914][ T5785] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 350.394555][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 350.402069][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 350.402768][ T5785] usb 2-1: SerialNumber: syz [ 350.684093][ T5785] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 350.714051][ T5785] usb-storage 2-1:1.0: USB Mass Storage device detected [ 350.755639][ T5785] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 350.794177][ T5785] scsi host1: usb-storage 2-1:1.0 [ 351.367243][ T9353] netlink: 112 bytes leftover after parsing attributes in process `syz.0.674'. [ 352.358797][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 352.900410][ T5778] usb 2-1: USB disconnect, device number 4 [ 355.695543][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.673'. [ 358.839900][ T5785] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 359.842347][ T5785] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.855744][ T5785] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 359.891871][ T5785] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 359.917289][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 359.959202][ T5785] usb 1-1: SerialNumber: syz [ 360.007693][ T5785] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 360.040017][ T5785] usb-storage 1-1:1.0: USB Mass Storage device detected [ 360.139901][ T5785] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 360.191725][ T5785] scsi host1: usb-storage 1-1:1.0 [ 361.277301][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.693'. [ 361.286497][ T9427] netlink: 72 bytes leftover after parsing attributes in process `syz.5.693'. [ 361.334879][ T9427] bridge1: entered allmulticast mode [ 362.444832][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.694'. [ 362.498172][ T9436] bridge2: entered allmulticast mode [ 364.369473][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 364.378544][ T9450] netlink: 72 bytes leftover after parsing attributes in process `syz.3.697'. [ 364.439627][ T9450] bridge1: entered allmulticast mode [ 364.655348][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 364.669436][ T9451] bridge1: entered allmulticast mode [ 365.395555][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 365.449802][ T9462] bridge1: entered allmulticast mode [ 367.735293][ T5742] usb 1-1: USB disconnect, device number 7 [ 369.555218][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 369.564232][ T9516] netlink: 56 bytes leftover after parsing attributes in process `syz.1.710'. [ 370.063325][ T9516] bridge1: entered allmulticast mode [ 371.852264][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 371.866210][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 372.802785][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.809663][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.136222][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 373.145271][ T9567] netlink: 64 bytes leftover after parsing attributes in process `syz.0.719'. [ 373.186416][ T9567] bridge1: entered allmulticast mode [ 374.292874][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 374.301896][ T9577] netlink: 56 bytes leftover after parsing attributes in process `syz.0.723'. [ 374.340426][ T9577] bridge2: entered allmulticast mode [ 380.920855][ T9608] binder: 9607:9608 ioctl c0306201 0 returned -14 [ 382.282063][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 382.291089][ T9630] netlink: 64 bytes leftover after parsing attributes in process `syz.3.734'. [ 382.459623][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.736'. [ 382.468733][ T9632] netlink: 56 bytes leftover after parsing attributes in process `syz.5.736'. [ 382.485209][ T9630] bridge2: entered allmulticast mode [ 382.547707][ T9632] bridge3: entered allmulticast mode [ 385.117203][ T9666] netlink: 112 bytes leftover after parsing attributes in process `syz.5.745'. [ 390.764430][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 390.773562][ T9708] netlink: 56 bytes leftover after parsing attributes in process `syz.0.755'. [ 390.820733][ T9708] bridge3: entered allmulticast mode [ 403.076511][ T9815] bond0: Error: Cannot enslave bond to itself. [ 406.405039][ T9836] bond0: Error: Cannot enslave bond to itself. [ 408.679746][ T5778] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 408.833831][ T5778] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.896409][ T5778] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.928071][ T5778] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 408.964394][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 408.990482][ T5778] usb 2-1: SerialNumber: syz [ 410.729521][ T5778] usb 2-1: 0:2 : does not exist [ 410.755510][ T5778] usb 2-1: unit 5 not found! [ 411.793352][ T5778] usb 2-1: USB disconnect, device number 5 [ 411.927153][ T9845] udevd[9845]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.613342][ T9916] bond0: Error: Cannot enslave bond to itself. [ 421.244340][ T9950] overlayfs: missing 'lowerdir' [ 424.455876][ T5764] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 424.630636][ T5764] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.688214][ T5764] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.718912][ T5764] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 424.896896][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.915675][ T5764] usb 2-1: SerialNumber: syz [ 427.027471][ T5764] usb 2-1: 0:2 : does not exist [ 427.034162][ T5764] usb 2-1: unit 5: unexpected type 0x0c [ 428.171701][ T5764] usb 2-1: USB disconnect, device number 6 [ 428.268037][T10005] udevd[10005]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.635309][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.642069][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 436.729103][T10092] overlayfs: failed to resolve './file0': -2 [ 438.302247][ T5742] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 439.051384][ T5742] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.089953][ T5742] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.121198][ T5742] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 439.219786][ T5742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 439.256790][ T5742] usb 6-1: SerialNumber: syz [ 439.362493][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.851'. [ 439.470001][T10119] block nbd0: server does not support multiple connections per device. [ 439.502171][T10119] block nbd0: shutting down sockets [ 441.843625][ T5742] usb 6-1: 0:2 : does not exist [ 441.850516][ T5742] usb 6-1: unit 5 not found! [ 442.021047][ T5742] usb 6-1: USB disconnect, device number 7 [ 442.217063][T10005] udevd[10005]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.431052][ T5864] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 445.371477][ T5864] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.393437][ T5864] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.437133][ T5864] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 445.500065][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 445.548078][ T5864] usb 1-1: SerialNumber: syz [ 445.814076][ T5864] usb 1-1: can't set config #1, error -71 [ 445.844121][ T5864] usb 1-1: USB disconnect, device number 8 [ 448.740215][ T5764] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 449.051341][ T5764] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.106263][ T5764] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.185004][ T5764] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 449.720141][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 449.738822][ T5764] usb 2-1: SerialNumber: syz [ 449.750245][ T5785] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 449.939617][ T5785] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.980892][ T5785] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.038106][ T5785] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 450.083899][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 450.482885][ T5785] usb 1-1: SerialNumber: syz [ 450.782277][ T5764] usb 2-1: 0:2 : does not exist [ 450.825264][ T5764] usb 2-1: unit 5: unexpected type 0x0c [ 450.965534][ T5764] usb 2-1: USB disconnect, device number 7 [ 451.603047][T10164] udevd[10164]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.660137][ T5785] usb 1-1: 0:2 : does not exist [ 452.686507][ T5785] usb 1-1: unit 5 not found! [ 452.845067][ T5785] usb 1-1: USB disconnect, device number 9 [ 453.472107][T10164] udevd[10164]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.694125][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.880'. [ 454.210074][T10227] block nbd0: server does not support multiple connections per device. [ 454.229817][T10227] block nbd0: shutting down sockets [ 454.349310][T10236] netlink: 32 bytes leftover after parsing attributes in process `syz.3.882'. [ 456.532380][T10255] xt_hashlimit: size too large, truncated to 1048576 [ 457.330513][ T5785] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 457.806122][ T5785] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.816402][ T5785] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 458.033218][ T5785] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 458.069457][ T5785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 458.111845][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 458.121037][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 458.185191][ T5785] usb 6-1: SerialNumber: syz [ 459.329259][ T5785] usb 6-1: can't set config #1, error -71 [ 459.344407][ T5785] usb 6-1: USB disconnect, device number 8 [ 463.987041][T10323] syzkaller1: entered allmulticast mode [ 464.254780][T10325] process 'syz.3.905' launched './file0' with NULL argv: empty string added [ 464.722284][T10295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.269649][ T5785] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 471.867562][ T5785] usb 2-1: device descriptor read/all, error -71 [ 473.432786][T10382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.615465][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.933'. [ 475.624863][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.933'. [ 475.937557][T10436] syzkaller1: entered allmulticast mode [ 476.295055][T10442] xt_hashlimit: size too large, truncated to 1048576 [ 480.557942][T10481] syzkaller0: entered promiscuous mode [ 480.572497][T10481] syzkaller0: entered allmulticast mode [ 485.047954][T10523] syzkaller1: entered allmulticast mode [ 485.416407][T10526] xt_hashlimit: size too large, truncated to 1048576 [ 490.372148][T10565] syzkaller0: entered promiscuous mode [ 490.378434][T10565] syzkaller0: entered allmulticast mode [ 493.809789][ T5756] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 494.769764][ T5756] usb 6-1: Using ep0 maxpacket: 16 [ 494.781832][ T5756] usb 6-1: unable to get BOS descriptor or descriptor too short [ 494.812680][ T5756] usb 6-1: config 176 has an invalid interface number: 188 but max is 2 [ 494.812765][T10612] syzkaller1: entered allmulticast mode [ 494.821704][ T5756] usb 6-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 494.838791][ T5756] usb 6-1: config 176 has an invalid interface number: 44 but max is 2 [ 494.848045][ T5756] usb 6-1: config 176 has an invalid interface number: 212 but max is 2 [ 495.106189][T10613] xt_hashlimit: size too large, truncated to 1048576 [ 495.311150][ T5756] usb 6-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 495.377921][ T5756] usb 6-1: config 176 has no interface number 0 [ 495.434212][ T5756] usb 6-1: config 176 has no interface number 1 [ 495.569755][ T5756] usb 6-1: config 176 has no interface number 2 [ 495.621990][ T5756] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 495.681191][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.691482][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.732740][ T5756] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 495.810967][ T5756] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 495.853345][ T5756] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 495.910030][ T5756] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 495.965149][ T5756] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 495.999996][ T5756] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 496.046546][ T5756] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 496.086651][ T5756] usb 6-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 496.144617][ T5756] usb 6-1: config 176 interface 188 has no altsetting 0 [ 496.178644][ T5756] usb 6-1: config 176 interface 44 has no altsetting 0 [ 496.229096][ T5756] usb 6-1: config 176 interface 212 has no altsetting 0 [ 496.257579][ T5756] usb 6-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 496.274190][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.298184][ T5756] usb 6-1: Product: syz [ 496.313342][ T5756] usb 6-1: Manufacturer: syz [ 496.351827][ T5756] usb 6-1: SerialNumber: syz [ 496.581298][ T5756] option 6-1:176.188: GSM modem (1-port) converter detected [ 496.959242][ T5756] usb 6-1: USB disconnect, device number 9 [ 497.011975][ T5756] option 6-1:176.188: device disconnected [ 498.676199][T10643] syzkaller0: entered promiscuous mode [ 498.691989][T10643] syzkaller0: entered allmulticast mode [ 504.654289][T10699] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 506.101492][T10705] syzkaller0: entered promiscuous mode [ 506.556990][T10705] syzkaller0: entered allmulticast mode [ 513.691179][T10788] syzkaller0: entered promiscuous mode [ 513.713366][T10788] syzkaller0: entered allmulticast mode [ 515.495126][T10804] xt_hashlimit: size too large, truncated to 1048576 [ 515.552424][T10805] syzkaller1: entered allmulticast mode [ 515.913943][T10816] : entered promiscuous mode [ 515.951634][ T5786] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 516.149604][ T5786] usb 3-1: Using ep0 maxpacket: 16 [ 516.179329][ T5786] usb 3-1: unable to get BOS descriptor or descriptor too short [ 516.199404][ T5786] usb 3-1: config 176 has an invalid interface number: 188 but max is 2 [ 516.223384][ T5786] usb 3-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 516.249918][ T5786] usb 3-1: config 176 has an invalid interface number: 44 but max is 2 [ 516.271130][ T5786] usb 3-1: config 176 has an invalid interface number: 212 but max is 2 [ 516.304063][ T5786] usb 3-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 516.338266][ T5786] usb 3-1: config 176 has no interface number 0 [ 516.362940][ T5786] usb 3-1: config 176 has no interface number 1 [ 516.383845][ T5786] usb 3-1: config 176 has no interface number 2 [ 516.405432][ T5786] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 516.579209][ T5786] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 516.604244][ T5786] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 517.184159][ T5786] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 517.973194][ T5786] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 518.018582][ T5786] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 518.036279][ T5786] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 518.181848][ T5786] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 518.286641][ T5786] usb 3-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 518.304080][ T5786] usb 3-1: config 176 interface 188 has no altsetting 0 [ 518.311119][ T5786] usb 3-1: config 176 interface 44 has no altsetting 0 [ 518.381331][ T5786] usb 3-1: config 176 interface 212 has no altsetting 0 [ 518.734071][ T5786] usb 3-1: string descriptor 0 read error: -71 [ 518.768403][ T5786] usb 3-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 519.136009][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.709968][ T5786] usb 3-1: can't set config #176, error -71 [ 519.742891][ T5786] usb 3-1: USB disconnect, device number 6 [ 521.462073][ T5756] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 522.335463][ T5756] usb 4-1: Using ep0 maxpacket: 16 [ 522.399754][ T5864] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 522.408642][ T5756] usb 4-1: unable to get BOS descriptor or descriptor too short [ 522.418994][ T5756] usb 4-1: config 176 has an invalid interface number: 188 but max is 2 [ 522.431236][ T5756] usb 4-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 522.480334][ T5756] usb 4-1: config 176 has an invalid interface number: 44 but max is 2 [ 522.534107][ T5756] usb 4-1: config 176 has an invalid interface number: 212 but max is 2 [ 522.569396][ T5864] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.590570][ T5756] usb 4-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 522.606972][ T5864] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.627035][ T5756] usb 4-1: config 176 has no interface number 0 [ 522.670407][ T5864] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 522.681419][ T5756] usb 4-1: config 176 has no interface number 1 [ 522.695031][ T5756] usb 4-1: config 176 has no interface number 2 [ 522.701532][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 522.712497][ T5756] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 522.725175][ T5864] usb 6-1: SerialNumber: syz [ 522.745286][ T5756] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 522.773941][ T5756] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 522.816494][ T5756] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 522.843588][ T5756] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 522.878075][ T5756] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 523.044516][ T5756] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 523.056481][ T5756] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 523.068271][ T5756] usb 4-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 523.083906][ T5756] usb 4-1: config 176 interface 188 has no altsetting 0 [ 523.091828][ T5756] usb 4-1: config 176 interface 44 has no altsetting 0 [ 523.101559][ T5756] usb 4-1: config 176 interface 212 has no altsetting 0 [ 523.114775][ T5756] usb 4-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 523.732905][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.751475][ T5756] usb 4-1: Product: syz [ 523.857211][ T5756] usb 4-1: Manufacturer: syz [ 523.873152][ T5756] usb 4-1: SerialNumber: syz [ 525.937652][ T5864] usb 6-1: 0:2 : does not exist [ 525.950884][ T5864] usb 6-1: unit 5: unexpected type 0x0b [ 525.992458][ T5756] option 4-1:176.188: GSM modem (1-port) converter detected [ 526.145008][ T5864] usb 6-1: USB disconnect, device number 10 [ 526.184875][ T5756] usb 4-1: USB disconnect, device number 6 [ 526.712486][ T5756] option 4-1:176.188: device disconnected [ 526.753375][T10164] udevd[10164]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.799626][ T5764] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 531.969596][ T5764] usb 1-1: Using ep0 maxpacket: 16 [ 532.002449][ T5764] usb 1-1: unable to get BOS descriptor or descriptor too short [ 532.035758][ T5764] usb 1-1: config 176 has an invalid interface number: 188 but max is 2 [ 532.067530][ T5764] usb 1-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 532.105826][ T5764] usb 1-1: config 176 has an invalid interface number: 44 but max is 2 [ 532.400607][ T5764] usb 1-1: config 176 has an invalid interface number: 212 but max is 2 [ 532.410088][ T5764] usb 1-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 532.461419][ T5764] usb 1-1: config 176 has no interface number 0 [ 532.517223][ T5764] usb 1-1: config 176 has no interface number 1 [ 532.808195][ T5764] usb 1-1: config 176 has no interface number 2 [ 532.830295][ T5764] usb 1-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 532.890249][ T5764] usb 1-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 533.096778][ T5764] usb 1-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 533.110898][ T5764] usb 1-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 533.122792][ T5764] usb 1-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 533.680991][ T5764] usb 1-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 533.708444][ T5764] usb 1-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 533.744557][ T5764] usb 1-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 533.900600][ T5764] usb 1-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 533.941917][ T5764] usb 1-1: config 176 interface 188 has no altsetting 0 [ 534.038161][ T5764] usb 1-1: config 176 interface 44 has no altsetting 0 [ 534.903946][ T5764] usb 1-1: config 176 interface 212 has no altsetting 0 [ 535.078603][ T5764] usb 1-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 535.110456][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.795485][ T5764] usb 1-1: can't set config #176, error -71 [ 535.836483][ T5764] usb 1-1: USB disconnect, device number 10 [ 536.119107][T10963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1061'. [ 537.064321][T10973] bond0: Error: Cannot enslave bond to itself. [ 543.581614][ T5353] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 543.760820][ T5353] usb 5-1: Using ep0 maxpacket: 16 [ 543.787106][ T5353] usb 5-1: unable to get BOS descriptor or descriptor too short [ 543.810221][ T5353] usb 5-1: config 176 has an invalid interface number: 188 but max is 2 [ 543.832864][ T5353] usb 5-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 543.865286][ T5353] usb 5-1: config 176 has an invalid interface number: 44 but max is 2 [ 543.894118][ T5353] usb 5-1: config 176 has an invalid interface number: 212 but max is 2 [ 543.924955][ T5353] usb 5-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 543.959835][ T5353] usb 5-1: config 176 has no interface number 0 [ 543.980580][ T5353] usb 5-1: config 176 has no interface number 1 [ 544.002238][ T5353] usb 5-1: config 176 has no interface number 2 [ 544.027451][ T5353] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 544.063115][ T5353] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 544.102107][ T5353] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 544.139565][ T5353] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 544.167280][ T5353] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 544.190426][ T5353] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 544.216616][ T5353] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 544.246416][ T5353] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 544.377216][ T5353] usb 5-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 544.391102][ T5353] usb 5-1: config 176 interface 188 has no altsetting 0 [ 544.399258][ T5353] usb 5-1: config 176 interface 44 has no altsetting 0 [ 544.406678][ T5353] usb 5-1: config 176 interface 212 has no altsetting 0 [ 544.415596][ T5353] usb 5-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 544.439597][ T5353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.590806][ T5353] usb 5-1: Product: syz [ 544.595426][ T5353] usb 5-1: Manufacturer: syz [ 544.600144][ T5353] usb 5-1: SerialNumber: syz [ 546.275497][ T5353] option 5-1:176.188: GSM modem (1-port) converter detected [ 546.368818][ T5353] usb 5-1: USB disconnect, device number 6 [ 546.415626][ T5353] option 5-1:176.188: device disconnected [ 548.119354][T11060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1083'. [ 548.759708][ T5353] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 549.359582][ T5353] usb 3-1: Using ep0 maxpacket: 16 [ 549.392938][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1090'. [ 549.430801][ T5353] usb 3-1: unable to get BOS descriptor or descriptor too short [ 549.459581][ T5353] usb 3-1: config 176 has an invalid interface number: 188 but max is 2 [ 549.488277][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'. [ 549.497369][ T5353] usb 3-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 549.718608][ T5353] usb 3-1: config 176 has an invalid interface number: 44 but max is 2 [ 549.734380][ T5353] usb 3-1: config 176 has an invalid interface number: 212 but max is 2 [ 549.748896][ T5353] usb 3-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 549.765642][ T5640] block nbd0: Receive control failed (result -32) [ 549.794383][ T5353] usb 3-1: config 176 has no interface number 0 [ 549.837022][ T5353] usb 3-1: config 176 has no interface number 1 [ 549.933649][ T5353] usb 3-1: config 176 has no interface number 2 [ 550.168251][ T5353] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 550.215862][ T5353] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 550.241378][ T5353] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 550.279533][ T5353] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 550.319361][ T5353] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 550.348892][ T5353] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 550.374640][ T5353] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 550.410771][ T5353] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 550.456290][ T5353] usb 3-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 550.494609][ T5353] usb 3-1: config 176 interface 188 has no altsetting 0 [ 550.521643][ T5353] usb 3-1: config 176 interface 44 has no altsetting 0 [ 550.549546][ T5353] usb 3-1: config 176 interface 212 has no altsetting 0 [ 550.575185][ T5353] usb 3-1: string descriptor 0 read error: -71 [ 550.601150][ T5353] usb 3-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 550.635105][ T5353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.683455][ T5353] usb 3-1: can't set config #176, error -71 [ 550.938304][ T5353] usb 3-1: USB disconnect, device number 7 [ 551.123581][T11092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.166559][T11092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.206056][T11092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.235031][T11092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.963743][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 553.279657][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 553.982444][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 554.002397][ T9] usb 5-1: config 176 has an invalid interface number: 188 but max is 2 [ 554.021987][ T9] usb 5-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 554.040939][ T9] usb 5-1: config 176 has an invalid interface number: 44 but max is 2 [ 554.071024][ T9] usb 5-1: config 176 has an invalid interface number: 212 but max is 2 [ 554.119200][ T9] usb 5-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 554.147044][ T9] usb 5-1: config 176 has no interface number 0 [ 554.183692][ T9] usb 5-1: config 176 has no interface number 1 [ 554.251408][ T9] usb 5-1: config 176 has no interface number 2 [ 554.286165][ T9] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 554.313479][T11118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.322587][ T9] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 554.348948][T11118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.359172][ T9] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 554.381048][T11118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.406753][ T9] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 554.459597][T11118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.478267][ T9] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 554.515529][ T9] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 554.556645][ T9] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 555.174944][ T9] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 555.189236][ T9] usb 5-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 555.203701][ T9] usb 5-1: config 176 interface 188 has no altsetting 0 [ 555.211577][ T9] usb 5-1: config 176 interface 44 has no altsetting 0 [ 555.219611][ T9] usb 5-1: config 176 interface 212 has no altsetting 0 [ 555.242167][ T9] usb 5-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 555.275564][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.328521][ T9] usb 5-1: Product: syz [ 555.339328][ T9] usb 5-1: Manufacturer: syz [ 555.349465][ T9] usb 5-1: SerialNumber: syz [ 555.657320][ T9] option 5-1:176.188: GSM modem (1-port) converter detected [ 555.779792][ T5353] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 556.640759][ T9] usb 5-1: USB disconnect, device number 7 [ 556.693253][ T9] option 5-1:176.188: device disconnected [ 556.782448][ T5353] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.842795][ T5353] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.853654][ T5764] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 556.894357][ T5353] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 556.943546][ T5353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 556.983573][ T5353] usb 4-1: SerialNumber: syz [ 557.051761][ T5764] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.122511][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.122611][ T5764] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.139102][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.180525][ T5764] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 557.219784][ T5764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 557.246896][ T5764] usb 6-1: SerialNumber: syz [ 557.353892][ T5353] usb 4-1: 0:2 : does not exist [ 557.372683][ T5353] usb 4-1: unit 5: unexpected type 0x09 [ 557.486484][ T5353] usb 4-1: USB disconnect, device number 7 [ 557.500458][ T5764] usb 6-1: 0:2 : does not exist [ 557.537603][ T5764] usb 6-1: unit 5: unexpected type 0x09 [ 558.204413][ T5764] usb 6-1: USB disconnect, device number 11 [ 558.287092][T11019] udevd[11019]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 558.356367][T11116] udevd[11116]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 558.574436][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1118'. [ 559.011219][ T5640] block nbd1: Receive control failed (result -32) [ 567.100318][T11242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1136'. [ 568.475876][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1145'. [ 568.560566][T11271] block nbd2: shutting down sockets [ 569.532274][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 569.601382][T11282] block nbd2: shutting down sockets [ 570.992442][T11304] syzkaller0: entered promiscuous mode [ 571.018305][T11304] syzkaller0: entered allmulticast mode [ 575.395278][T11344] hub 8-0:1.0: USB hub found [ 575.401005][T11344] hub 8-0:1.0: 1 port detected [ 577.143626][T11363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1169'. [ 578.438795][T11381] syzkaller0: entered promiscuous mode [ 578.460308][T11381] syzkaller0: entered allmulticast mode [ 579.443918][T11391] hub 8-0:1.0: USB hub found [ 579.449728][T11391] hub 8-0:1.0: 1 port detected [ 581.560373][T11411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1182'. [ 584.125462][T11455] syzkaller0: entered promiscuous mode [ 584.148781][T11455] syzkaller0: entered allmulticast mode [ 584.242222][T11457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1195'. [ 585.429147][T11468] hub 8-0:1.0: USB hub found [ 585.434705][T11468] hub 8-0:1.0: 1 port detected [ 586.036730][T11467] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 586.995731][T11477] hub 8-0:1.0: USB hub found [ 587.002915][T11477] hub 8-0:1.0: 1 port detected [ 587.498153][T11477] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 588.551898][T11500] hub 8-0:1.0: USB hub found [ 588.557857][T11500] hub 8-0:1.0: 1 port detected [ 589.508054][T11509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1211'. [ 589.524529][T11507] syzkaller0: entered promiscuous mode [ 589.543644][T11507] syzkaller0: entered allmulticast mode [ 591.485905][T11531] hub 8-0:1.0: USB hub found [ 591.491568][T11531] hub 8-0:1.0: 1 port detected [ 592.071014][T11530] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 597.253110][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 599.371050][T11588] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 602.581350][T11636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1244'. [ 607.843355][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 610.757172][T11731] hub 8-0:1.0: USB hub found [ 610.762897][T11731] hub 8-0:1.0: 1 port detected [ 611.399802][T11730] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 612.304321][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1272'. [ 614.484253][T11764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.523057][T11764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.556962][T11764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.616303][T11764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.690230][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 615.545055][T11788] hub 8-0:1.0: USB hub found [ 615.550703][T11788] hub 8-0:1.0: 1 port detected [ 618.572842][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.579241][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.690882][T11836] hub 8-0:1.0: USB hub found [ 619.696624][T11836] hub 8-0:1.0: 1 port detected [ 620.901573][T11849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1301'. [ 621.762818][T11863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.912863][T11869] hub 8-0:1.0: USB hub found [ 621.919009][T11869] hub 8-0:1.0: 1 port detected [ 622.462320][T11863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.504530][T11863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.514323][T11863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.205996][T11879] hub 8-0:1.0: USB hub found [ 623.212037][T11879] hub 8-0:1.0: 1 port detected [ 624.175461][T11891] hub 8-0:1.0: USB hub found [ 624.181446][T11891] hub 8-0:1.0: 1 port detected [ 624.963051][T11900] hub 8-0:1.0: USB hub found [ 624.968849][T11900] hub 8-0:1.0: 1 port detected [ 627.218240][T11927] syzkaller1: entered allmulticast mode [ 627.418835][T11929] xt_hashlimit: size too large, truncated to 1048576 [ 627.870916][T11939] syzkaller1: entered allmulticast mode [ 628.180639][T11942] xt_hashlimit: size too large, truncated to 1048576 [ 630.179556][ T5864] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 630.467370][T11971] hub 8-0:1.0: USB hub found [ 630.474526][T11971] hub 8-0:1.0: 1 port detected [ 631.049545][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 631.057217][ T5864] usb 2-1: unable to get BOS descriptor or descriptor too short [ 631.102430][ T5864] usb 2-1: config 176 has an invalid interface number: 188 but max is 2 [ 631.112536][ T5864] usb 2-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 631.124037][ T5864] usb 2-1: config 176 has an invalid interface number: 44 but max is 2 [ 631.231809][ T5864] usb 2-1: config 176 has an invalid interface number: 212 but max is 2 [ 631.293069][ T5864] usb 2-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 631.380989][ T5864] usb 2-1: config 176 has no interface number 0 [ 631.400084][ T5864] usb 2-1: config 176 has no interface number 1 [ 631.408322][ T5864] usb 2-1: config 176 has no interface number 2 [ 631.422862][ T5864] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 631.436082][ T5864] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 631.507416][ T5864] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 631.712131][ T5864] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 631.728594][ T5864] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 631.740278][ T5864] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 632.402014][ T5864] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 632.701142][ T5864] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 632.718135][T11978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1336'. [ 632.734362][ T5864] usb 2-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 632.773534][ T5864] usb 2-1: config 176 interface 188 has no altsetting 0 [ 632.792984][ T5864] usb 2-1: config 176 interface 44 has no altsetting 0 [ 632.808310][ T5864] usb 2-1: config 176 interface 212 has no altsetting 0 [ 632.835685][ T5864] usb 2-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 632.904239][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.956501][ T5864] usb 2-1: Product: syz [ 632.984810][ T5864] usb 2-1: Manufacturer: syz [ 633.027753][ T5864] usb 2-1: SerialNumber: syz [ 633.075915][ T5864] usb 2-1: can't set config #176, error -71 [ 633.126918][ T5864] usb 2-1: USB disconnect, device number 10 [ 634.685284][T12019] hub 8-0:1.0: USB hub found [ 634.690919][T12019] hub 8-0:1.0: 1 port detected [ 635.954385][T12029] hub 8-0:1.0: USB hub found [ 635.960209][T12029] hub 8-0:1.0: 1 port detected [ 636.955319][T12036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.975054][T12036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.004848][T12036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.271318][T12036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.059784][T12058] hub 8-0:1.0: USB hub found [ 639.066087][T12058] hub 8-0:1.0: 1 port detected [ 639.639859][T12069] xt_hashlimit: size too large, truncated to 1048576 [ 641.336399][T12080] hub 8-0:1.0: USB hub found [ 641.341644][T12080] hub 8-0:1.0: 1 port detected [ 642.810783][T12102] xt_hashlimit: size too large, truncated to 1048576 [ 643.084355][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1368'. [ 646.369689][T12147] hub 8-0:1.0: USB hub found [ 646.375227][T12147] hub 8-0:1.0: 1 port detected [ 649.731232][T12181] hub 8-0:1.0: USB hub found [ 649.736984][T12181] hub 8-0:1.0: 1 port detected [ 651.133432][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 651.779559][ T5353] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 651.991748][ T5353] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.034354][ T5353] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 652.078940][ T5353] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 652.130825][ T5353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 652.177264][ T5353] usb 5-1: SerialNumber: syz [ 652.898772][ T5353] usb 5-1: 0:2 : does not exist [ 653.474320][ T5353] usb 5-1: unit 5: unexpected type 0x09 [ 653.589550][T10196] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 653.599424][ T5353] usb 5-1: USB disconnect, device number 8 [ 653.678399][T11966] udevd[11966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.791644][T10196] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.869973][T10196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 653.937494][T10196] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 653.951514][T10196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 653.966866][T10196] usb 1-1: SerialNumber: syz [ 655.062436][ T5630] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 655.091462][T10196] usb 1-1: 0:2 : does not exist [ 655.126821][T10196] usb 1-1: unit 5: unexpected type 0x09 [ 655.234790][T10196] usb 1-1: USB disconnect, device number 11 [ 655.239530][ T5630] usb 5-1: Using ep0 maxpacket: 16 [ 655.290165][ T5630] usb 5-1: unable to get BOS descriptor or descriptor too short [ 655.322274][T11966] udevd[11966]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.362311][ T5630] usb 5-1: config 176 has an invalid interface number: 188 but max is 2 [ 655.398464][ T5630] usb 5-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 655.446984][ T5630] usb 5-1: config 176 has an invalid interface number: 44 but max is 2 [ 655.485474][ T5630] usb 5-1: config 176 has an invalid interface number: 212 but max is 2 [ 655.508745][ T5630] usb 5-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 655.552827][ T5630] usb 5-1: config 176 has no interface number 0 [ 655.576404][ T5630] usb 5-1: config 176 has no interface number 1 [ 655.599556][ T5630] usb 5-1: config 176 has no interface number 2 [ 655.628925][ T5630] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 655.667875][ T5630] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 655.692262][ T5630] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 655.729572][ T5630] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 655.774715][ T5630] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 655.813664][ T5630] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 655.866460][ T5630] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 655.924301][ T5630] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 655.958574][ T5630] usb 5-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 656.013147][ T5630] usb 5-1: config 176 interface 188 has no altsetting 0 [ 656.037804][ T5630] usb 5-1: config 176 interface 44 has no altsetting 0 [ 656.600915][ T5630] usb 5-1: config 176 interface 212 has no altsetting 0 [ 656.616787][ T5630] usb 5-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 656.626669][ T5630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.636601][ T5630] usb 5-1: Product: syz [ 656.642543][ T5630] usb 5-1: Manufacturer: syz [ 656.647523][ T5630] usb 5-1: SerialNumber: syz [ 656.951614][T12259] hub 8-0:1.0: USB hub found [ 656.956947][T12259] hub 8-0:1.0: 1 port detected [ 657.605039][ T5630] option 5-1:176.188: GSM modem (1-port) converter detected [ 657.715370][ T5630] usb 5-1: USB disconnect, device number 9 [ 657.774944][ T5630] option 5-1:176.188: device disconnected [ 657.894871][T12271] hub 8-0:1.0: USB hub found [ 657.901243][T12271] hub 8-0:1.0: 1 port detected [ 659.999199][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 661.099103][T12314] hub 8-0:1.0: USB hub found [ 661.105124][T12314] hub 8-0:1.0: 1 port detected [ 662.479530][T12327] hub 8-0:1.0: USB hub found [ 662.485066][T12327] hub 8-0:1.0: 1 port detected [ 666.285741][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1443'. [ 666.412332][T12361] block nbd2: shutting down sockets [ 668.913535][T12383] hub 8-0:1.0: USB hub found [ 668.918626][T12383] hub 8-0:1.0: 1 port detected [ 669.167499][T12399] hub 8-0:1.0: USB hub found [ 669.179698][T12399] hub 8-0:1.0: 1 port detected [ 673.813894][T12440] hub 8-0:1.0: USB hub found [ 673.818771][T12440] hub 8-0:1.0: 1 port detected [ 674.792110][T12446] hub 8-0:1.0: USB hub found [ 674.797842][T12446] hub 8-0:1.0: 1 port detected [ 675.377801][T12453] hub 8-0:1.0: USB hub found [ 675.383549][T12453] hub 8-0:1.0: 1 port detected [ 676.221116][T12463] hub 8-0:1.0: USB hub found [ 676.226890][T12463] hub 8-0:1.0: 1 port detected [ 678.315488][T12487] xt_hashlimit: size too large, truncated to 1048576 [ 680.070176][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.076729][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 682.535052][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1483'. [ 682.556107][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1483'. [ 683.224318][T12532] hub 8-0:1.0: USB hub found [ 683.229965][T12532] hub 8-0:1.0: 1 port detected [ 684.549634][T12548] vivid-004: ================= START STATUS ================= [ 684.576529][T12548] vivid-004: Radio HW Seek Mode: Bounded [ 684.607795][T12548] vivid-004: Radio Programmable HW Seek: false [ 684.619573][T12548] vivid-004: RDS Rx I/O Mode: Block I/O [ 684.654831][T12548] vivid-004: Generate RBDS Instead of RDS: false [ 684.682288][T12548] vivid-004: RDS Reception: true [ 684.700826][T12548] vivid-004: RDS Program Type: 0 inactive [ 684.707391][T12548] vivid-004: RDS PS Name: inactive [ 684.722112][T12548] vivid-004: RDS Radio Text: inactive [ 684.787205][T12548] vivid-004: RDS Traffic Announcement: false inactive [ 684.878588][T12548] vivid-004: RDS Traffic Program: false inactive [ 684.926811][T12548] vivid-004: RDS Music: false inactive [ 684.976282][T12548] vivid-004: ================== END STATUS ================== [ 685.679657][T12567] xt_hashlimit: size too large, truncated to 1048576 [ 686.093978][T12087] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 686.363236][T12087] usb 5-1: Using ep0 maxpacket: 16 [ 686.430681][T12087] usb 5-1: unable to get BOS descriptor or descriptor too short [ 686.513976][T12087] usb 5-1: config 176 has an invalid interface number: 188 but max is 2 [ 686.584113][T12087] usb 5-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 686.639552][T12087] usb 5-1: config 176 has an invalid interface number: 44 but max is 2 [ 686.677597][T12087] usb 5-1: config 176 has an invalid interface number: 212 but max is 2 [ 686.713935][T12087] usb 5-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 686.743893][T12087] usb 5-1: config 176 has no interface number 0 [ 686.790641][T12087] usb 5-1: config 176 has no interface number 1 [ 686.813893][T12087] usb 5-1: config 176 has no interface number 2 [ 686.835640][T12087] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 686.883883][T12087] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 686.922329][T12087] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 686.969673][T12087] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 687.021282][T12087] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 687.053812][T12087] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 687.082744][T12087] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 687.124739][T12087] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 687.193714][T12087] usb 5-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 687.227066][T12087] usb 5-1: config 176 interface 188 has no altsetting 0 [ 687.253005][T12087] usb 5-1: config 176 interface 44 has no altsetting 0 [ 687.276886][T12087] usb 5-1: config 176 interface 212 has no altsetting 0 [ 687.295928][T12087] usb 5-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 687.306994][T12087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.317225][T12087] usb 5-1: Product: syz [ 687.325707][T12087] usb 5-1: Manufacturer: syz [ 687.332532][T12087] usb 5-1: SerialNumber: syz [ 689.025965][T12087] option 5-1:176.188: GSM modem (1-port) converter detected [ 689.429809][T12087] usb 5-1: USB disconnect, device number 10 [ 689.459912][T12087] option 5-1:176.188: device disconnected [ 689.586205][T12607] syzkaller1: entered allmulticast mode [ 689.989816][T12611] xt_hashlimit: size too large, truncated to 1048576 [ 690.604915][T12619] syzkaller1: entered allmulticast mode [ 690.636537][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1504'. [ 690.993606][T12629] xt_hashlimit: size too large, truncated to 1048576 [ 691.831516][T12634] hub 8-0:1.0: USB hub found [ 691.851047][T12634] hub 8-0:1.0: 1 port detected [ 691.880478][T12636] syzkaller1: entered allmulticast mode [ 692.170613][T12641] hub 8-0:1.0: USB hub found [ 692.198640][T12641] hub 8-0:1.0: 1 port detected [ 692.858880][T12652] xt_hashlimit: size too large, truncated to 1048576 [ 695.493827][T12684] hub 8-0:1.0: USB hub found [ 695.499490][T12684] hub 8-0:1.0: 1 port detected [ 696.379879][T12686] syzkaller1: entered allmulticast mode [ 696.799149][T12691] xt_hashlimit: size too large, truncated to 1048576 [ 697.479354][T12700] hub 8-0:1.0: USB hub found [ 697.485058][T12700] hub 8-0:1.0: 1 port detected [ 703.611360][T12759] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 704.121445][T12763] hub 8-0:1.0: USB hub found [ 704.127204][T12763] hub 8-0:1.0: 1 port detected [ 704.544915][T12767] syzkaller1: entered allmulticast mode [ 705.006137][T12776] xt_hashlimit: size too large, truncated to 1048576 [ 706.527144][T12789] hub 8-0:1.0: USB hub found [ 706.531998][T12789] hub 8-0:1.0: 1 port detected [ 707.001590][T12796] hub 8-0:1.0: USB hub found [ 707.007364][T12796] hub 8-0:1.0: 1 port detected [ 707.902732][T12805] syzkaller1: entered allmulticast mode [ 708.229404][T12815] xt_hashlimit: size too large, truncated to 1048576 [ 709.190684][T12822] hub 8-0:1.0: USB hub found [ 709.197041][T12822] hub 8-0:1.0: 1 port detected [ 709.912350][T12826] hub 8-0:1.0: USB hub found [ 709.918016][T12826] hub 8-0:1.0: 1 port detected [ 711.808182][T12850] warning: `syz.3.1565' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 712.536906][T12857] xt_hashlimit: size too large, truncated to 1048576 [ 714.381499][T12871] hub 8-0:1.0: USB hub found [ 714.387329][T12871] hub 8-0:1.0: 1 port detected [ 715.601535][T12879] hub 8-0:1.0: USB hub found [ 715.607045][T12879] hub 8-0:1.0: 1 port detected [ 716.494116][T12884] hub 8-0:1.0: USB hub found [ 716.499764][T12884] hub 8-0:1.0: 1 port detected [ 717.523838][T12890] xt_hashlimit: size too large, truncated to 1048576 [ 719.106134][T12910] hub 8-0:1.0: USB hub found [ 719.127886][T12910] hub 8-0:1.0: 1 port detected [ 719.372000][T12917] syzkaller1: entered allmulticast mode [ 719.610580][T12920] hub 8-0:1.0: USB hub found [ 719.616373][T12920] hub 8-0:1.0: 1 port detected [ 719.823402][T12922] xt_hashlimit: size too large, truncated to 1048576 [ 721.198438][T12933] hub 8-0:1.0: USB hub found [ 721.204583][T12933] hub 8-0:1.0: 1 port detected [ 722.285090][T12940] xt_hashlimit: size too large, truncated to 1048576 [ 723.515923][T12955] hub 8-0:1.0: USB hub found [ 723.522791][T12955] hub 8-0:1.0: 1 port detected [ 726.629514][T12087] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 726.789516][T12087] usb 3-1: Using ep0 maxpacket: 16 [ 726.818424][T12087] usb 3-1: unable to get BOS descriptor or descriptor too short [ 726.844508][T12087] usb 3-1: config 176 has an invalid interface number: 188 but max is 2 [ 726.873703][T12087] usb 3-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 726.915179][T12087] usb 3-1: config 176 has an invalid interface number: 44 but max is 2 [ 726.953757][T12087] usb 3-1: config 176 has an invalid interface number: 212 but max is 2 [ 726.978991][T12087] usb 3-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 726.989800][T12087] usb 3-1: config 176 has no interface number 0 [ 727.017885][T12087] usb 3-1: config 176 has no interface number 1 [ 727.033343][T12087] usb 3-1: config 176 has no interface number 2 [ 727.050009][T12087] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 727.075494][T12087] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 727.101245][T12087] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 727.127325][T12087] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 727.154851][T12087] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 727.187596][T12087] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 727.206039][T12087] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 727.222929][T12087] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 727.234923][T12087] usb 3-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 727.316458][T12087] usb 3-1: config 176 interface 188 has no altsetting 0 [ 727.336706][T12087] usb 3-1: config 176 interface 44 has no altsetting 0 [ 727.356677][T12087] usb 3-1: config 176 interface 212 has no altsetting 0 [ 727.404535][T12087] usb 3-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 727.429476][T12087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.459599][T12087] usb 3-1: Product: syz [ 727.464435][T12087] usb 3-1: Manufacturer: syz [ 727.487788][T12087] usb 3-1: SerialNumber: syz [ 727.958776][T13002] hub 8-0:1.0: USB hub found [ 727.969572][T13002] hub 8-0:1.0: 1 port detected [ 729.157942][T12087] option 3-1:176.188: GSM modem (1-port) converter detected [ 729.289604][T12087] usb 3-1: USB disconnect, device number 8 [ 729.323680][T12087] option 3-1:176.188: device disconnected [ 730.533451][T13027] hub 8-0:1.0: USB hub found [ 730.538290][T13027] hub 8-0:1.0: 1 port detected [ 735.199692][ T5756] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 735.766748][ T5756] usb 2-1: Using ep0 maxpacket: 16 [ 735.780108][ T5756] usb 2-1: unable to get BOS descriptor or descriptor too short [ 735.793022][ T5756] usb 2-1: config 176 has an invalid interface number: 188 but max is 2 [ 735.807767][ T5756] usb 2-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 735.835898][ T5756] usb 2-1: config 176 has an invalid interface number: 44 but max is 2 [ 735.913325][ T5756] usb 2-1: config 176 has an invalid interface number: 212 but max is 2 [ 735.993236][ T5756] usb 2-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 736.010944][ T5756] usb 2-1: config 176 has no interface number 0 [ 736.033908][ T5756] usb 2-1: config 176 has no interface number 1 [ 736.041451][ T5756] usb 2-1: config 176 has no interface number 2 [ 736.761775][T13091] hub 8-0:1.0: USB hub found [ 736.767033][T13091] hub 8-0:1.0: 1 port detected [ 736.903756][ T5756] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 736.929000][ T5756] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 736.976810][ T5756] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 737.034037][ T5756] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 737.045810][ T5756] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 737.057594][ T5756] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 737.069195][ T5756] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 737.093664][ T5756] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 737.107769][ T5756] usb 2-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 737.125760][ T5756] usb 2-1: config 176 interface 188 has no altsetting 0 [ 737.133921][ T5756] usb 2-1: config 176 interface 44 has no altsetting 0 [ 737.141280][ T5756] usb 2-1: config 176 interface 212 has no altsetting 0 [ 737.154207][ T5756] usb 2-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 737.164404][ T5756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.172765][ T5756] usb 2-1: Product: syz [ 737.177143][ T5756] usb 2-1: Manufacturer: syz [ 737.182130][ T5756] usb 2-1: SerialNumber: syz [ 737.500991][T13095] xt_hashlimit: size too large, truncated to 1048576 [ 738.495021][ T5756] option 2-1:176.188: GSM modem (1-port) converter detected [ 738.742321][ T5756] usb 2-1: USB disconnect, device number 11 [ 738.911498][ T5756] option 2-1:176.188: device disconnected [ 742.360043][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.372052][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 744.199705][ T5785] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 744.479577][ T5785] usb 5-1: Using ep0 maxpacket: 16 [ 744.495704][ T5785] usb 5-1: unable to get BOS descriptor or descriptor too short [ 744.509746][ T5785] usb 5-1: config 176 has an invalid interface number: 188 but max is 2 [ 744.551105][ T5785] usb 5-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 744.597902][ T5785] usb 5-1: config 176 has an invalid interface number: 44 but max is 2 [ 744.618037][ T5785] usb 5-1: config 176 has an invalid interface number: 212 but max is 2 [ 744.647019][ T5785] usb 5-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 744.667807][ T5785] usb 5-1: config 176 has no interface number 0 [ 744.704978][ T5785] usb 5-1: config 176 has no interface number 1 [ 744.725816][ T5785] usb 5-1: config 176 has no interface number 2 [ 744.748514][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 744.808876][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 744.848011][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 744.889314][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 744.937652][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 744.981969][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 745.015316][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 745.086815][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 745.130233][ T5785] usb 5-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 745.215391][ T5785] usb 5-1: config 176 interface 188 has no altsetting 0 [ 746.165876][ T5785] usb 5-1: config 176 interface 44 has no altsetting 0 [ 746.518762][ T5785] usb 5-1: config 176 interface 212 has no altsetting 0 [ 746.558042][ T5785] usb 5-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 746.617229][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.646439][ T5785] usb 5-1: Product: syz [ 746.659881][ T5785] usb 5-1: Manufacturer: syz [ 746.679501][ T5785] usb 5-1: SerialNumber: syz [ 747.112019][ T5785] option 5-1:176.188: GSM modem (1-port) converter detected [ 747.224454][ T5785] usb 5-1: USB disconnect, device number 11 [ 747.257227][ T5785] option 5-1:176.188: device disconnected [ 748.167745][T13199] hub 8-0:1.0: USB hub found [ 748.188172][T13199] hub 8-0:1.0: 1 port detected [ 748.273093][T13203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1649'. [ 748.646966][T13210] xt_hashlimit: size too large, truncated to 1048576 [ 751.898977][T13254] hub 8-0:1.0: USB hub found [ 751.955800][T13254] hub 8-0:1.0: 1 port detected [ 754.465772][T13279] hub 8-0:1.0: USB hub found [ 754.474450][T13279] hub 8-0:1.0: 1 port detected [ 757.090648][T13306] hub 8-0:1.0: USB hub found [ 757.096678][T13306] hub 8-0:1.0: 1 port detected [ 758.609795][ T5756] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 758.819736][ T5756] usb 5-1: Using ep0 maxpacket: 16 [ 758.854180][ T5756] usb 5-1: unable to get BOS descriptor or descriptor too short [ 758.915956][ T5756] usb 5-1: config 176 has an invalid interface number: 188 but max is 2 [ 758.950737][ T5756] usb 5-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 758.959998][ T5756] usb 5-1: config 176 has an invalid interface number: 44 but max is 2 [ 758.981557][ T5756] usb 5-1: config 176 has an invalid interface number: 212 but max is 2 [ 758.995749][ T5756] usb 5-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 759.021226][ T5756] usb 5-1: config 176 has no interface number 0 [ 759.050633][ T5756] usb 5-1: config 176 has no interface number 1 [ 759.077540][ T5756] usb 5-1: config 176 has no interface number 2 [ 759.105644][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 759.174033][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 759.286238][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 759.384042][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 759.501550][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 759.597655][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 759.706601][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 759.749399][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 760.087056][ T5756] usb 5-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 760.379759][ T5756] usb 5-1: config 176 interface 188 has no altsetting 0 [ 760.408857][ T5756] usb 5-1: config 176 interface 44 has no altsetting 0 [ 760.426123][ T5756] usb 5-1: config 176 interface 212 has no altsetting 0 [ 760.438107][ T5756] usb 5-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 760.457341][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.489516][ T5756] usb 5-1: Product: syz [ 760.497936][ T5756] usb 5-1: Manufacturer: syz [ 760.513041][ T5756] usb 5-1: SerialNumber: syz [ 761.171728][T13351] hub 8-0:1.0: USB hub found [ 761.176560][T13351] hub 8-0:1.0: 1 port detected [ 763.897682][ T5756] option 5-1:176.188: GSM modem (1-port) converter detected [ 764.084127][ T5756] usb 5-1: USB disconnect, device number 12 [ 764.425347][ T5756] option 5-1:176.188: device disconnected [ 764.699198][ T5778] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 765.139978][ T5778] usb 6-1: Using ep0 maxpacket: 16 [ 765.158546][ T5778] usb 6-1: unable to get BOS descriptor or descriptor too short [ 765.180456][ T5778] usb 6-1: config 176 has an invalid interface number: 188 but max is 2 [ 765.209981][ T5778] usb 6-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 765.242814][ T5778] usb 6-1: config 176 has an invalid interface number: 44 but max is 2 [ 765.276391][ T5778] usb 6-1: config 176 has an invalid interface number: 212 but max is 2 [ 765.305147][ T5778] usb 6-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 765.334944][ T5778] usb 6-1: config 176 has no interface number 0 [ 765.354827][ T5778] usb 6-1: config 176 has no interface number 1 [ 765.383460][ T5778] usb 6-1: config 176 has no interface number 2 [ 765.413822][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 765.467990][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 765.480659][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 765.491843][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 765.503647][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 765.515204][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 765.543714][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 765.646594][T13403] hub 8-0:1.0: USB hub found [ 765.659867][T13403] hub 8-0:1.0: 1 port detected [ 766.320100][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 766.353897][ T5778] usb 6-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 766.415616][ T5778] usb 6-1: config 176 interface 188 has no altsetting 0 [ 766.466035][ T5778] usb 6-1: config 176 interface 44 has no altsetting 0 [ 766.493433][ T5778] usb 6-1: config 176 interface 212 has no altsetting 0 [ 766.813834][ T5778] usb 6-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 766.841368][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.867819][ T5778] usb 6-1: Product: syz [ 766.884645][ T5778] usb 6-1: Manufacturer: syz [ 766.916769][ T5778] usb 6-1: SerialNumber: syz [ 767.392249][ T5778] option 6-1:176.188: GSM modem (1-port) converter detected [ 767.482901][ T5778] usb 6-1: USB disconnect, device number 12 [ 767.539899][ T5778] option 6-1:176.188: device disconnected [ 769.667000][T13442] xt_hashlimit: size too large, truncated to 1048576 [ 773.166083][T13492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1727'. [ 773.440490][T13494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1726'. [ 778.517542][T13571] hub 8-0:1.0: USB hub found [ 778.522442][T13571] hub 8-0:1.0: 1 port detected [ 779.175455][T13572] hub 8-0:1.0: USB hub found [ 779.180308][T13572] hub 8-0:1.0: 1 port detected [ 779.829972][ T5785] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 780.279462][ T5785] usb 5-1: Using ep0 maxpacket: 16 [ 780.290819][ T5785] usb 5-1: unable to get BOS descriptor or descriptor too short [ 780.302804][ T5785] usb 5-1: config 176 has an invalid interface number: 188 but max is 2 [ 780.322217][ T5785] usb 5-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 780.347195][ T5785] usb 5-1: config 176 has an invalid interface number: 44 but max is 2 [ 780.368511][ T5785] usb 5-1: config 176 has an invalid interface number: 212 but max is 2 [ 780.403192][ T5785] usb 5-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 780.460221][ T5785] usb 5-1: config 176 has no interface number 0 [ 780.634051][ T5785] usb 5-1: config 176 has no interface number 1 [ 780.659114][ T5785] usb 5-1: config 176 has no interface number 2 [ 780.741065][T13597] xt_hashlimit: size too large, truncated to 1048576 [ 781.196966][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 781.572998][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 781.636260][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 781.694016][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 781.702026][T13606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1758'. [ 781.737941][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 781.772072][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 781.793108][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 781.848112][ T5785] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 782.241563][ T5785] usb 5-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 782.281297][ T5785] usb 5-1: config 176 interface 188 has no altsetting 0 [ 782.300052][ T5785] usb 5-1: config 176 interface 44 has no altsetting 0 [ 782.320347][ T5785] usb 5-1: config 176 interface 212 has no altsetting 0 [ 782.411701][ T5785] usb 5-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 782.447046][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.474859][ T5785] usb 5-1: Product: syz [ 782.498999][ T5785] usb 5-1: Manufacturer: syz [ 782.516835][ T5785] usb 5-1: SerialNumber: syz [ 782.548861][ T5785] usb 5-1: can't set config #176, error -71 [ 782.576866][ T5785] usb 5-1: USB disconnect, device number 13 [ 784.696576][T13640] xt_hashlimit: size too large, truncated to 1048576 [ 785.749705][T13649] hub 8-0:1.0: USB hub found [ 785.755713][T13649] hub 8-0:1.0: 1 port detected [ 786.627037][T13655] hub 8-0:1.0: USB hub found [ 786.632688][T13655] hub 8-0:1.0: 1 port detected [ 791.099494][ T5786] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 791.301594][ T5786] usb 5-1: Using ep0 maxpacket: 16 [ 791.318676][ T5786] usb 5-1: unable to get BOS descriptor or descriptor too short [ 791.348569][ T5786] usb 5-1: config 176 has an invalid interface number: 188 but max is 2 [ 791.383516][ T5786] usb 5-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 791.423203][ T5786] usb 5-1: config 176 has an invalid interface number: 44 but max is 2 [ 791.457825][ T5786] usb 5-1: config 176 has an invalid interface number: 212 but max is 2 [ 791.499788][ T5786] usb 5-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 791.541642][ T5786] usb 5-1: config 176 has no interface number 0 [ 791.564500][ T5786] usb 5-1: config 176 has no interface number 1 [ 791.587715][ T5786] usb 5-1: config 176 has no interface number 2 [ 791.613364][ T5786] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 791.661357][ T5786] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 791.703179][ T5786] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 791.749279][ T5786] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 791.783874][ T5786] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 791.821633][ T5786] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 791.860999][ T5786] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 791.896611][ T5786] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 791.933789][ T5786] usb 5-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 791.971263][ T5786] usb 5-1: config 176 interface 188 has no altsetting 0 [ 791.978483][ T5786] usb 5-1: config 176 interface 44 has no altsetting 0 [ 791.985596][ T5786] usb 5-1: config 176 interface 212 has no altsetting 0 [ 791.995902][ T5786] usb 5-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 792.191479][T13721] hub 8-0:1.0: USB hub found [ 792.197115][T13721] hub 8-0:1.0: 1 port detected [ 792.661205][ T5786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.689576][ T5786] usb 5-1: Product: syz [ 792.705687][ T5786] usb 5-1: Manufacturer: syz [ 792.723280][ T5786] usb 5-1: SerialNumber: syz [ 793.812785][ T5786] option 5-1:176.188: GSM modem (1-port) converter detected [ 794.004997][ T5786] usb 5-1: USB disconnect, device number 14 [ 794.034773][ T5786] option 5-1:176.188: device disconnected [ 795.052129][T13755] hub 8-0:1.0: USB hub found [ 795.059067][T13755] hub 8-0:1.0: 1 port detected [ 796.475408][T13795] hub 8-0:1.0: USB hub found [ 796.480841][T13795] hub 8-0:1.0: 1 port detected [ 796.678287][T13797] xt_hashlimit: size too large, truncated to 1048576 [ 798.612896][T13812] xt_hashlimit: size too large, truncated to 1048576 [ 799.532026][T13807] xt_hashlimit: size too large, truncated to 1048576 [ 799.829974][T13828] hub 8-0:1.0: USB hub found [ 799.836870][T13828] hub 8-0:1.0: 1 port detected [ 800.803831][T13832] xt_hashlimit: size too large, truncated to 1048576 [ 801.824597][T13846] hub 8-0:1.0: USB hub found [ 801.830148][T13846] hub 8-0:1.0: 1 port detected [ 802.881104][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 802.890201][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.562325][T13909] xt_hashlimit: size too large, truncated to 1048576 [ 807.464912][T13920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1834'. [ 807.563366][T13924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1834'. [ 810.658431][T13980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1844'. [ 810.776531][T13980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1844'. [ 811.272018][T14008] hub 8-0:1.0: USB hub found [ 811.278332][T14008] hub 8-0:1.0: 1 port detected [ 813.812130][T14064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1851'. [ 820.952691][T14169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1872'. [ 820.963458][T14169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1872'. [ 821.733909][T14183] xt_hashlimit: size too large, truncated to 1048576 [ 822.185243][T14189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 822.444111][T14189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 822.599156][T14198] hub 8-0:1.0: USB hub found [ 822.605916][T14198] hub 8-0:1.0: 1 port detected [ 824.013250][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1877'. [ 825.257116][T14232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1884'. [ 826.683136][T14243] hub 8-0:1.0: USB hub found [ 826.688578][T14243] hub 8-0:1.0: 1 port detected [ 827.338853][ T5764] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 827.729509][ T5764] usb 3-1: Using ep0 maxpacket: 16 [ 827.750283][ T5764] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 828.325951][ T5764] usb 3-1: config 1 has no interface number 0 [ 828.722070][ T5764] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 829.109505][ T5764] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 829.147972][ T5764] usb 3-1: config 1 interface 105 has no altsetting 0 [ 829.287618][ T5764] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 829.318652][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 829.346845][ T5764] usb 3-1: Product: syz [ 829.369477][ T5764] usb 3-1: Manufacturer: syz [ 829.385063][ T5764] usb 3-1: SerialNumber: syz [ 829.412629][T14246] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 829.426027][T14246] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 829.530909][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1900'. [ 830.237561][ T5764] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 830.315613][ T5764] usb 3-1: USB disconnect, device number 9 [ 831.745330][T14315] hub 8-0:1.0: USB hub found [ 831.751127][T14315] hub 8-0:1.0: 1 port detected [ 832.630009][ T5778] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 832.812065][ T5778] usb 6-1: Using ep0 maxpacket: 16 [ 832.837309][ T5778] usb 6-1: unable to get BOS descriptor or descriptor too short [ 832.882512][ T5778] usb 6-1: config 176 has an invalid interface number: 188 but max is 2 [ 832.919931][ T5778] usb 6-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 833.011643][ T5778] usb 6-1: config 176 has an invalid interface number: 44 but max is 2 [ 833.059628][ T5778] usb 6-1: config 176 has an invalid interface number: 212 but max is 2 [ 833.102091][ T5778] usb 6-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 833.157531][ T5778] usb 6-1: config 176 has no interface number 0 [ 833.192853][ T5778] usb 6-1: config 176 has no interface number 1 [ 833.217082][ T5778] usb 6-1: config 176 has no interface number 2 [ 833.250975][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 833.286884][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 833.338303][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 833.415344][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 833.611098][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 833.699519][ T5864] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 833.755034][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 833.877797][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 833.917673][ T5778] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 833.955388][ T5778] usb 6-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 833.970334][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 833.991169][ T5864] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 834.019767][ T5864] usb 4-1: config 1 has no interface number 0 [ 834.033334][ T5778] usb 6-1: config 176 interface 188 has no altsetting 0 [ 834.055242][ T5864] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 834.068191][ T5778] usb 6-1: config 176 interface 44 has no altsetting 0 [ 834.091696][ T5778] usb 6-1: config 176 interface 212 has no altsetting 0 [ 834.104634][ T5864] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 834.124640][ T5778] usb 6-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 834.136021][ T5864] usb 4-1: config 1 interface 105 has no altsetting 0 [ 834.151811][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.174478][ T5864] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 834.186737][ T5778] usb 6-1: Product: syz [ 834.196142][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 834.210541][ T5778] usb 6-1: Manufacturer: syz [ 834.222700][ T5778] usb 6-1: SerialNumber: syz [ 834.229102][ T5864] usb 4-1: Product: syz [ 834.246864][ T5864] usb 4-1: Manufacturer: syz [ 834.261350][ T5864] usb 4-1: SerialNumber: syz [ 834.277034][T14355] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 834.293232][T14355] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 834.993630][ T5864] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 835.005332][ T5778] option 6-1:176.188: GSM modem (1-port) converter detected [ 835.042637][ T5864] usb 4-1: USB disconnect, device number 8 [ 835.092642][ T5778] usb 6-1: USB disconnect, device number 13 [ 835.135934][ T5778] option 6-1:176.188: device disconnected [ 835.873978][T14379] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1914'. [ 836.536490][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 838.062232][T14433] hub 8-0:1.0: USB hub found [ 838.067777][T14433] hub 8-0:1.0: 1 port detected [ 839.293037][T14443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1923'. [ 839.377700][T14443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1923'. [ 841.697150][T14472] xt_hashlimit: size too large, truncated to 1048576 [ 842.149117][T14477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1930'. [ 842.701433][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1932'. [ 844.949787][ T5864] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 845.119779][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 845.215177][T14517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1940'. [ 845.256199][T14517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1940'. [ 845.438160][ T5864] usb 6-1: unable to get BOS descriptor or descriptor too short [ 845.454428][ T5864] usb 6-1: config 176 has an invalid interface number: 188 but max is 2 [ 845.469487][ T5864] usb 6-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 845.488042][ T5864] usb 6-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 845.501417][ T5864] usb 6-1: config 176 has 1 interface, different from the descriptor's value: 3 [ 846.034681][ T5864] usb 6-1: config 176 has no interface number 0 [ 846.042339][ T5864] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 846.053740][ T5864] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 846.066279][ T5864] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 846.098866][ T5864] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 846.128515][ T5864] usb 6-1: config 176 interface 188 altsetting 255 has 10 endpoint descriptors, different from the interface descriptor's value: 14 [ 846.157740][ T5864] usb 6-1: config 176 interface 188 has no altsetting 0 [ 846.173740][ T5864] usb 6-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 846.183171][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.198992][ T5864] usb 6-1: Product: syz [ 846.208442][ T5864] usb 6-1: Manufacturer: syz [ 846.216936][ T5864] usb 6-1: SerialNumber: syz [ 846.379588][ T5764] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 847.154288][T14532] hub 8-0:1.0: USB hub found [ 847.160652][T14532] hub 8-0:1.0: 1 port detected [ 847.419425][ T5764] usb 2-1: Using ep0 maxpacket: 16 [ 847.435403][ T5764] usb 2-1: unable to get BOS descriptor or descriptor too short [ 847.452421][ T5764] usb 2-1: config 176 has an invalid interface number: 188 but max is 2 [ 847.782324][ T5764] usb 2-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 847.792310][ T5764] usb 2-1: config 176 has an invalid interface number: 44 but max is 2 [ 847.973979][ T5764] usb 2-1: config 176 has an invalid interface number: 212 but max is 2 [ 847.995704][ T5764] usb 2-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 848.007463][ T5764] usb 2-1: config 176 has no interface number 0 [ 848.045485][ T5764] usb 2-1: config 176 has no interface number 1 [ 848.054634][ T5864] option 6-1:176.188: GSM modem (1-port) converter detected [ 848.065515][ T5764] usb 2-1: config 176 has no interface number 2 [ 848.073456][ T5764] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 848.085472][ T5764] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 848.097285][ T5764] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 848.117473][ T5764] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 848.128708][ T5864] usb 6-1: USB disconnect, device number 14 [ 848.353789][ T5864] option 6-1:176.188: device disconnected [ 848.382429][ T5764] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 848.732457][ T5764] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 848.790350][ T5764] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 848.841450][ T5764] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 848.865913][ T5764] usb 2-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 848.929172][ T5764] usb 2-1: config 176 interface 188 has no altsetting 0 [ 848.955242][ T5764] usb 2-1: config 176 interface 44 has no altsetting 0 [ 848.965879][ T5764] usb 2-1: config 176 interface 212 has no altsetting 0 [ 848.974493][ T5764] usb 2-1: string descriptor 0 read error: -71 [ 848.984725][ T5764] usb 2-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 849.071764][T14549] hub 8-0:1.0: USB hub found [ 849.078357][T14549] hub 8-0:1.0: 1 port detected [ 849.694433][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.708316][ T5764] usb 2-1: can't set config #176, error -71 [ 849.737028][ T5764] usb 2-1: USB disconnect, device number 12 [ 850.067525][T14559] hub 8-0:1.0: USB hub found [ 850.074598][T14559] hub 8-0:1.0: 1 port detected [ 851.631153][T14570] hub 8-0:1.0: USB hub found [ 851.636034][T14570] hub 8-0:1.0: 1 port detected [ 851.801444][T14568] hub 8-0:1.0: USB hub found [ 851.809488][T14568] hub 8-0:1.0: 1 port detected [ 852.551278][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1959'. [ 853.232008][T14597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1963'. [ 853.325821][T14597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1963'. [ 855.709564][ T5756] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 856.359452][ T5756] usb 6-1: Using ep0 maxpacket: 16 [ 856.883487][T14641] hub 8-0:1.0: USB hub found [ 856.889584][T14641] hub 8-0:1.0: 1 port detected [ 858.457351][ T5756] usb 6-1: unable to get BOS descriptor or descriptor too short [ 858.488281][ T5756] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 858.534900][ T5756] usb 6-1: can't read configurations, error -71 [ 858.651824][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 861.279581][ T5756] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 861.692097][ T5756] usb 5-1: Using ep0 maxpacket: 16 [ 861.712011][ T5756] usb 5-1: unable to get BOS descriptor or descriptor too short [ 861.739707][ T5756] usb 5-1: config 176 has an invalid interface number: 188 but max is 2 [ 861.771221][ T5756] usb 5-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 861.826114][ T5756] usb 5-1: config 176 has an invalid interface number: 44 but max is 2 [ 861.889429][ T5756] usb 5-1: config 176 has an invalid interface number: 212 but max is 2 [ 861.921935][ T5756] usb 5-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 861.995338][ T5756] usb 5-1: config 176 has no interface number 0 [ 862.031274][ T5756] usb 5-1: config 176 has no interface number 1 [ 862.053490][ T5756] usb 5-1: config 176 has no interface number 2 [ 862.059452][ T5764] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 862.060200][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 862.081669][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 862.093201][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 862.329996][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 862.352471][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 862.435083][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 862.466699][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 862.501406][ T5756] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 862.551182][ T5756] usb 5-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 862.569460][ T5764] usb 3-1: Using ep0 maxpacket: 16 [ 862.593715][ T5756] usb 5-1: config 176 interface 188 has no altsetting 0 [ 862.612817][ T5764] usb 3-1: unable to get BOS descriptor or descriptor too short [ 862.616889][ T5756] usb 5-1: config 176 interface 44 has no altsetting 0 [ 862.658988][ T5756] usb 5-1: config 176 interface 212 has no altsetting 0 [ 862.679998][ T5764] usb 3-1: config 176 has an invalid interface number: 188 but max is 2 [ 862.683542][ T5756] usb 5-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 862.727706][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.755176][ T5764] usb 3-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 862.755193][ T5756] usb 5-1: Product: syz [ 862.755224][ T5756] usb 5-1: Manufacturer: syz [ 862.829421][ T5764] usb 3-1: config 176 has an invalid interface number: 44 but max is 2 [ 862.830648][ T5756] usb 5-1: SerialNumber: syz [ 862.884227][ T5764] usb 3-1: config 176 has an invalid interface number: 212 but max is 2 [ 863.230089][ T5764] usb 3-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 863.287141][ T5764] usb 3-1: config 176 has no interface number 0 [ 863.316274][ T5764] usb 3-1: config 176 has no interface number 1 [ 863.337868][ T5764] usb 3-1: config 176 has no interface number 2 [ 863.362980][ T5764] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 863.398656][ T5764] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 863.442093][ T5764] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 863.475020][ T5764] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 863.501519][ T5764] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 863.584982][ T5764] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 863.831506][ T5764] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 863.921394][ T5764] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 863.932835][ T5764] usb 3-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 863.959050][ T5764] usb 3-1: config 176 interface 188 has no altsetting 0 [ 864.070109][ T5764] usb 3-1: config 176 interface 44 has no altsetting 0 [ 864.321802][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.330623][ T5764] usb 3-1: config 176 interface 212 has no altsetting 0 [ 864.338276][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.375527][ T5764] usb 3-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 864.385571][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.033734][T14717] hub 8-0:1.0: USB hub found [ 865.038564][T14717] hub 8-0:1.0: 1 port detected [ 865.044686][ T5764] usb 3-1: Product: syz [ 865.054022][ T5764] usb 3-1: Manufacturer: syz [ 865.059032][ T5764] usb 3-1: SerialNumber: syz [ 865.066455][ T5756] option 5-1:176.188: GSM modem (1-port) converter detected [ 865.113583][ T5756] usb 5-1: USB disconnect, device number 15 [ 865.123933][ T5756] option 5-1:176.188: device disconnected [ 865.267104][ T5764] usb 3-1: can't set config #176, error -71 [ 865.325075][ T5764] usb 3-1: USB disconnect, device number 10 [ 868.546065][T14757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2010'. [ 868.870647][T14762] hub 8-0:1.0: USB hub found [ 868.876340][T14762] hub 8-0:1.0: 1 port detected [ 870.116933][T14770] hub 8-0:1.0: USB hub found [ 870.122611][T14770] hub 8-0:1.0: 1 port detected [ 873.359232][T14808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2024'. [ 873.396330][T14808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2024'. [ 874.742670][T14828] netlink: 'syz.4.2031': attribute type 3 has an invalid length. [ 874.769481][T14828] netlink: 'syz.4.2031': attribute type 1 has an invalid length. [ 874.842308][T14828] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2031'. [ 874.977928][T14837] loop0: detected capacity change from 0 to 256 [ 875.011337][T14837] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 875.103138][ T30] audit: type=1800 audit(1782124014.407:2): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2035" name="bus" dev="loop0" ino=1048636 res=0 errno=0 [ 875.197076][ T30] audit: type=1804 audit(1782124014.407:3): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2035" name="/newroot/343/file0/bus" dev="loop0" ino=1048636 res=1 errno=0 [ 875.737488][T14873] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 875.737637][T14873] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 875.745492][T14873] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 875.753261][T14873] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 876.300533][ T30] audit: type=1326 audit(1782124015.597:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.1.2060" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74bed9ce59 code=0x7ffc0000 [ 876.402437][ T30] audit: type=1326 audit(1782124015.597:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.1.2060" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74bed9ce59 code=0x7ffc0000 [ 876.486662][T14909] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2064'. [ 876.511318][ T30] audit: type=1326 audit(1782124015.607:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.1.2060" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f74bed9ce59 code=0x7ffc0000 [ 876.557407][ T30] audit: type=1326 audit(1782124015.607:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.1.2060" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74bed9ce59 code=0x7ffc0000 [ 877.037815][T14936] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2075'. [ 877.189058][T14953] loop0: detected capacity change from 0 to 512 [ 877.202381][T14953] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 877.244366][T14953] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 877.276550][T14953] EXT4-fs (loop0): 1 truncate cleaned up [ 877.306696][T14953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.424530][ T5624] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.615760][T14968] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.634739][T14971] loop0: detected capacity change from 0 to 512 [ 877.671879][T14971] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 877.724185][T14971] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 877.783765][T14971] EXT4-fs (loop0): orphan cleanup on readonly fs [ 877.833147][T14971] EXT4-fs warning (device loop0): ext4_enable_quotas:7272: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 877.871664][T14971] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 877.879670][T14971] EXT4-fs (loop0): 1 orphan inode deleted [ 877.908128][T14971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 877.924408][T14971] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.100066][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2097'. [ 878.233508][T14993] tipc: Started in network mode [ 878.253558][T14993] tipc: Node identity dacbc185e36f, cluster identity 4711 [ 878.270414][T14993] tipc: Enabled bearer , priority 0 [ 878.314282][T14999] capability: warning: `syz.1.2101' uses 32-bit capabilities (legacy support in use) [ 878.418919][T14993] syzkaller0: entered promiscuous mode [ 878.437902][T14993] syzkaller0: entered allmulticast mode [ 878.453261][T14993] tipc: Resetting bearer [ 878.583032][T14992] tipc: Resetting bearer [ 878.869777][T14992] tipc: Disabling bearer [ 879.068437][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2116'. [ 879.088972][T15040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2116'. [ 879.126988][T15040] gtp0: entered promiscuous mode [ 879.360555][T15059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2124'. [ 879.584735][T15071] netlink: 'syz.5.2131': attribute type 10 has an invalid length. [ 879.630001][T15071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.640361][T15071] team0: Port device bond0 added [ 879.720977][ T5742] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 879.890795][ T5742] usb 4-1: Using ep0 maxpacket: 16 [ 879.910686][T15066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.931516][T15066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.977927][ T5742] usb 4-1: unable to get BOS descriptor or descriptor too short [ 879.996382][ T5742] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 880.014246][ T5742] usb 4-1: can't read configurations, error -71 [ 880.318223][T15097] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2144'. [ 881.475907][T15120] sch_tbf: burst 14 is lower than device syzkaller0 mtu (1500) ! [ 881.511770][T15120] syzkaller0: entered promiscuous mode [ 881.529080][T15120] syzkaller0: entered allmulticast mode [ 881.639294][T15126] geneve2: entered promiscuous mode [ 881.656046][T15126] geneve2: entered allmulticast mode [ 881.706078][ T9598] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 881.744536][ T9598] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 881.792078][ T9598] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 881.811989][ T9598] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 881.995961][T15140] syzkaller0: entered promiscuous mode [ 882.031398][T15140] syzkaller0: entered allmulticast mode [ 882.527981][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.535262][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.621229][T15167] syzkaller1: entered promiscuous mode [ 882.642951][T15167] syzkaller1: entered allmulticast mode [ 882.766568][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'. [ 882.797981][T15181] openvswitch: netlink: Flow key attr not present in new flow. [ 883.616817][T15243] netlink: 'syz.4.2184': attribute type 4 has an invalid length. [ 883.725352][T15243] netlink: 'syz.4.2184': attribute type 4 has an invalid length. [ 883.763013][T15247] loop0: detected capacity change from 0 to 512 [ 883.786201][T15247] EXT4-fs: Ignoring removed bh option [ 883.807400][T15247] EXT4-fs: inline encryption not supported [ 883.831753][T15247] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 883.876050][T15247] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 883.972366][T15247] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.2186: bg 0: block 248: padding at end of block bitmap is not set [ 883.998686][T15247] loop0: lost filesystem error report for type 5 error -117 [ 883.999419][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 884.013293][ C1] EXT4-fs (loop0): last error at time 1782124023: ext4_validate_block_bitmap:440 [ 884.055326][T15247] Quota error (device loop0): write_blk: dquota write failed [ 884.071355][T15247] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 884.095042][T15247] EXT4-fs error (device loop0): ext4_acquire_dquot:7039: comm syz.0.2186: Failed to acquire dquot type 1 [ 884.121104][T15247] loop0: lost filesystem error report for type 5 error -28 [ 884.125063][T15247] EXT4-fs (loop0): 1 truncate cleaned up [ 884.162698][T15247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 884.182236][T15258] tipc: Started in network mode [ 884.187332][T15258] tipc: Node identity ac14140f, cluster identity 4711 [ 884.195919][T15258] tipc: Enabled bearer , priority 10 [ 884.215325][T15247] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 884.234695][T15247] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 884.265477][T15247] EXT4-fs error (device loop0): ext4_acquire_dquot:7039: comm syz.0.2186: Failed to acquire dquot type 1 [ 884.356563][ T5624] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 884.372998][T13778] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 884.393469][T13778] EXT4-fs error (device loop0): ext4_release_dquot:7075: comm kworker/u8:5: Failed to release dquot type 1 [ 884.430631][T13778] loop0: lost filesystem error report for type 5 error -117 [ 884.559127][T15272] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2194'. [ 884.597359][T15272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2194'. [ 884.619102][T15274] netlink: 1039 bytes leftover after parsing attributes in process `syz.3.2196'. [ 884.825619][T15283] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2200'. [ 885.045742][T15291] syzkaller0: entered promiscuous mode [ 885.076450][T15291] syzkaller0: entered allmulticast mode [ 885.331991][ T5742] tipc: Node number set to 2886997007 [ 885.346653][T15305] dummy0: entered allmulticast mode [ 885.505063][T15313] capability: warning: `syz.2.2212' uses deprecated v2 capabilities in a way that may be insecure [ 885.767713][T15326] Set syz1 is full, maxelem 14 reached [ 886.123829][T15340] syzkaller0: entered promiscuous mode [ 886.143769][T15340] syzkaller0: entered allmulticast mode [ 886.554224][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2238'. [ 886.655282][T15371] syzkaller0: entered promiscuous mode [ 886.772078][T15371] syzkaller0: entered allmulticast mode [ 887.873489][T15404] syzkaller0: entered promiscuous mode [ 887.879038][T15404] syzkaller0: entered allmulticast mode [ 888.535569][T15431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2261'. [ 889.223496][T15466] netlink: 'syz.2.2273': attribute type 1 has an invalid length. [ 889.968418][T15222] bond0: (slave bond_slave_0): interface is now down [ 889.979611][T15498] netlink: 'syz.2.2288': attribute type 10 has an invalid length. [ 889.987535][T15222] bond0: (slave bond_slave_1): interface is now down [ 889.999035][T15222] bond0: now running without any active interface! [ 890.237567][T15498] syz_tun: entered promiscuous mode [ 890.267542][T15498] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 890.279511][T13778] bond0: (slave syz_tun): interface is now down [ 890.310513][T15222] bond0: (slave syz_tun): interface is now down [ 890.337377][T15222] bond0: now running without any active interface! [ 890.584819][T15523] IPv6: addrconf: prefix option has invalid lifetime [ 891.353832][T15568] netlink: 'syz.3.2318': attribute type 8 has an invalid length. [ 892.093726][T15579] loop0: detected capacity change from 0 to 512 [ 892.129821][T15580] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 892.153718][T15579] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 892.216040][T15579] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.2324: iget: bad i_size value: 38620345925642 [ 892.268895][T15579] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 892.269408][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 892.285125][ C1] EXT4-fs (loop0): initial error at time 1782124031: ext4_orphan_get:1399: inode 15 [ 892.293818][T15579] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2324: couldn't read orphan inode 15 (err -117) [ 892.294618][ C1] EXT4-fs (loop0): last error at time 1782124031: ext4_orphan_get:1399: inode 15 [ 892.406308][T15579] loop0: lost filesystem error report for type 5 error -117 [ 892.408183][T15579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.496563][T15579] EXT4-fs (loop0): shut down requested (0) [ 892.665305][ T5624] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.804629][T15640] bond1 (unregistering): Released all slaves [ 895.051765][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 896.827205][T15737] loop0: detected capacity change from 0 to 512 [ 896.840518][T15737] EXT4-fs: Ignoring removed bh option [ 896.864739][T15737] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 896.895765][T15737] EXT4-fs (loop0): 1 truncate cleaned up [ 896.925626][T15737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.057957][T15752] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2398'. [ 897.073601][ T5624] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.042512][T15794] »»»»»»: renamed from vlan0 (while UP) [ 898.662614][T15801] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.2419'. [ 898.696317][T15801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2419'. [ 898.910807][T15811] hub 8-0:1.0: USB hub found [ 898.912243][T15811] hub 8-0:1.0: 1 port detected [ 900.608047][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 900.628032][T15868] tc_dump_action: action bad kind [ 900.639587][ T5756] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 900.823159][ T5756] usb 1-1: unable to get BOS descriptor or descriptor too short [ 900.848731][ T5756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 900.872780][ T5756] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 900.891100][ T5756] usb 1-1: config 1 has no interface number 1 [ 900.906453][ T5756] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 900.938608][ T5756] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 900.961238][ T5756] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 900.990882][ T5756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.018814][ T5756] usb 1-1: Product: syz [ 901.023464][ T5756] usb 1-1: Manufacturer: syz [ 901.030558][ T5756] usb 1-1: SerialNumber: syz [ 901.172249][T15206] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.283845][T15206] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.324084][T15899] wg1 speed is unknown, defaulting to 1000 [ 901.347728][T15899] wg1 speed is unknown, defaulting to 1000 [ 901.364828][T15206] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.401889][T15899] wg1 speed is unknown, defaulting to 1000 [ 901.433605][T15900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.473258][T15206] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.503777][T15900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.504076][T15899] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 901.547104][T15899] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 901.628700][T15899] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 901.780593][ T30] audit: type=1804 audit(1782124041.067:8): pid=15900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2445" name="bus" dev="ramfs" ino=37902 res=1 errno=0 [ 901.878131][T15899] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 901.888467][T15206] bridge_slave_1: left allmulticast mode [ 901.899201][T15206] bridge_slave_1: left promiscuous mode [ 901.915252][T15206] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.959883][T15206] bridge_slave_0: left allmulticast mode [ 901.967946][T15206] bridge_slave_0: left promiscuous mode [ 902.002280][T15911] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 902.011870][T15911] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 902.020965][T15911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 902.028726][T15206] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.037767][T15911] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 902.049559][T15911] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 902.096200][T15899] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 902.433387][T15206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.482017][T15206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.514258][T15206] bond0 (unregistering): Released all slaves [ 902.546004][T15206] bond1 (unregistering): Released all slaves [ 902.666575][T15206] tipc: Left network mode [ 902.685425][T15899] wg1 speed is unknown, defaulting to 1000 [ 902.832949][T15899] wg1 speed is unknown, defaulting to 1000 [ 902.840315][T15927] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 902.869071][T15927] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 902.929729][T15899] wg1 speed is unknown, defaulting to 1000 [ 903.000370][T15899] wg1 speed is unknown, defaulting to 1000 [ 903.091736][T15899] wg1 speed is unknown, defaulting to 1000 [ 903.140103][T15899] wg1 speed is unknown, defaulting to 1000 [ 903.273311][T15206] hsr_slave_0: left promiscuous mode [ 903.333851][T15206] hsr_slave_1: left promiscuous mode [ 903.382595][T15206] veth1_macvtap: left promiscuous mode [ 903.404591][T15206] veth0_macvtap: left promiscuous mode [ 903.424862][T15206] veth1_vlan: left promiscuous mode [ 903.444695][T15206] veth0_vlan: left promiscuous mode [ 903.648136][T15953] netlink: 'syz.3.2484': attribute type 1 has an invalid length. [ 903.939488][ T5742] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 904.079666][ T5640] Bluetooth: hci1: command tx timeout [ 904.123004][ T5742] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 904.134909][T15206] team0 (unregistering): Port device team_slave_1 removed [ 904.175065][ T5742] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 904.216714][T15206] team0 (unregistering): Port device team_slave_0 removed [ 904.242012][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 904.288955][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 904.316154][ T5742] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 904.376188][ T5742] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 904.405257][ T5756] usb 1-1: USB disconnect, device number 12 [ 904.410120][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.444714][ T5742] usb 4-1: Product: syz [ 904.461795][ T5742] usb 4-1: Manufacturer: syz [ 904.477260][ T5742] usb 4-1: SerialNumber: syz [ 904.498888][ T5742] usb 4-1: config 0 descriptor?? [ 904.525680][ T5742] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 904.546672][T14721] udevd[14721]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.549328][ T5742] imon 4-1:0.0: unable to initialize intf0, err -90 [ 904.620127][ T5742] imon:imon_probe: failed to initialize context! [ 904.657265][ T5742] imon 4-1:0.0: unable to register, err -19 [ 904.725792][T15967] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 904.765370][T15970] tipc: Enabling of bearer rejected, failed to enable media [ 904.810493][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 904.843518][ T5630] usb 4-1: USB disconnect, device number 11 [ 904.954490][T15909] wg1 speed is unknown, defaulting to 1000 [ 905.624261][T16021] ------------[ cut here ]------------ [ 905.629835][T16021] !(flags & __GFP_NOWARN) [ 905.629854][T16021] WARNING: mm/slub.c:6841 at __kvmalloc_node_noprof+0x6f7/0xa60, CPU#0: syz.1.2497/16021 [ 905.644120][T16021] Modules linked in: [ 905.648034][T16021] CPU: 0 UID: 0 PID: 16021 Comm: syz.1.2497 Not tainted syzkaller #0 PREEMPT(full) [ 905.657537][T16021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 905.668011][T16021] RIP: 0010:__kvmalloc_node_noprof+0x6f7/0xa60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 905.674278][T16021] Code: c1 e8 5d 0f ff ff 4d 85 f6 0f 85 21 fd ff ff 48 81 fb ff ff ff 7f 0f 86 b8 fc ff ff 41 81 e4 00 20 00 00 0f 85 07 fd ff ff 90 <0f> 0b 90 e9 fe fc ff ff be 43 01 00 00 48 c7 c7 67 5f f2 8d e8 10 [ 905.694218][T16021] RSP: 0018:ffffc90008877a88 EFLAGS: 00010246 [ 905.700714][T16021] RAX: 0000000000000001 RBX: 0000000080000008 RCX: 0000000100000000 [ 905.709226][T16021] RDX: 0000000000000000 RSI: ffffffff8c1d2b80 RDI: ffffffff8e1ef920 [ 905.717652][T16021] RBP: 0000000000000021 R08: 00000000004028c0 R09: 00000000ffffffff [ 905.726012][T16021] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 905.734311][T16021] R13: 00000000ffffffff R14: 0000000000000000 R15: 00000000004028c0 [ 905.742610][T16021] FS: 00007f74bfc1b6c0(0000) GS:ffff88812431a000(0000) knlGS:0000000000000000 [ 905.751883][T16021] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.758757][T16021] CR2: 0000200000002300 CR3: 000000005c5ea000 CR4: 0000000000350ef0 [ 905.767105][T16021] Call Trace: [ 905.770880][T16021] [ 905.773822][T16021] ? io_pin_pages+0xc3/0x1e0 [ 905.778459][T16021] io_pin_pages+0xc3/0x1e0 [ 905.782961][T16021] io_sqe_buffer_register+0x1d9/0x1500 [ 905.788472][T16021] ? rcu_is_cpu_rrupt_from_idle+0x250/0x270 [ 905.794501][T16021] ? trace_kmalloc+0xeb/0x110 [ 905.799233][T16021] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 905.805196][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 905.810958][T16021] ? io_rsrc_data_alloc+0x2c/0xa0 [ 905.816080][T16021] ? copy_iovec_from_user+0x102/0x140 [ 905.821550][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 905.827216][T16021] ? iovec_from_user+0xda/0x140 [ 905.832144][T16021] io_sqe_buffers_register.cold+0x346/0x4c3 [ 905.838095][T16021] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 905.844257][T16021] ? __fget_files+0x21f/0x3d0 [ 905.848998][T16021] __do_sys_io_uring_register+0x13ce/0x1bc0 [ 905.854969][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 905.860666][T16021] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 905.866943][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 905.873067][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 905.878758][T16021] ? __x64_sys_futex+0x358/0x4d0 [ 905.883757][T16021] ? rcu_is_watching+0x12/0xc0 [ 905.888567][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 905.894253][T16021] ? xfd_validate_state+0x129/0x190 [ 905.899533][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 905.905200][T16021] ? rcu_is_watching+0x12/0xc0 [ 905.910025][T16021] do_syscall_64+0x115/0x870 [ 905.914644][T16021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.920582][T16021] RIP: 0033:0x7f74bed9ce59 [ 905.925009][T16021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.944688][T16021] RSP: 002b:00007f74bfc1b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 905.953168][T16021] RAX: ffffffffffffffda RBX: 00007f74bf015fa0 RCX: 00007f74bed9ce59 [ 905.961209][T16021] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000003 [ 905.969282][T16021] RBP: 00007f74bee32e6f R08: 0000000000000000 R09: 0000000000000000 [ 905.977615][T16021] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000000 [ 905.985630][T16021] R13: 00007f74bf016038 R14: 00007f74bf015fa0 R15: 00007ffed268c148 [ 905.993656][T16021] [ 905.996684][T16021] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 906.003970][T16021] CPU: 0 UID: 0 PID: 16021 Comm: syz.1.2497 Not tainted syzkaller #0 PREEMPT(full) [ 906.013357][T16021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 906.023417][T16021] Call Trace: [ 906.026692][T16021] [ 906.029621][T16021] dump_stack_lvl+0x100/0x190 [ 906.034316][T16021] vpanic+0x552/0x970 [ 906.038307][T16021] ? __pfx_vpanic+0x10/0x10 [ 906.042816][T16021] ? lock_release+0x24d/0x310 [ 906.047509][T16021] panic+0xd1/0xe0 [ 906.051236][T16021] ? __pfx_panic+0x10/0x10 [ 906.055671][T16021] check_panic_on_warn.cold+0x19/0x34 [ 906.061053][T16021] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 906.066622][T16021] __warn.cold+0x191/0x318 [ 906.071049][T16021] __report_bug+0x30f/0x440 [ 906.075582][T16021] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 906.081180][T16021] ? __pfx___report_bug+0x10/0x10 [ 906.086225][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 906.091878][T16021] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 906.097810][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 906.103460][T16021] ? policy_nodemask+0xed/0x4f0 [ 906.108342][T16021] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 906.113910][T16021] report_bug+0xb2/0x220 [ 906.118169][T16021] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 906.123738][T16021] handle_bug+0x16a/0x2a0 [ 906.128090][T16021] exc_invalid_op+0x17/0x50 [ 906.132622][T16021] asm_exc_invalid_op+0x1a/0x20 [ 906.137484][T16021] RIP: 0010:__kvmalloc_node_noprof+0x6f7/0xa60 [ 906.143664][T16021] Code: c1 e8 5d 0f ff ff 4d 85 f6 0f 85 21 fd ff ff 48 81 fb ff ff ff 7f 0f 86 b8 fc ff ff 41 81 e4 00 20 00 00 0f 85 07 fd ff ff 90 <0f> 0b 90 e9 fe fc ff ff be 43 01 00 00 48 c7 c7 67 5f f2 8d e8 10 [ 906.163296][T16021] RSP: 0018:ffffc90008877a88 EFLAGS: 00010246 [ 906.169384][T16021] RAX: 0000000000000001 RBX: 0000000080000008 RCX: 0000000100000000 [ 906.177358][T16021] RDX: 0000000000000000 RSI: ffffffff8c1d2b80 RDI: ffffffff8e1ef920 [ 906.185346][T16021] RBP: 0000000000000021 R08: 00000000004028c0 R09: 00000000ffffffff [ 906.193327][T16021] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 906.201297][T16021] R13: 00000000ffffffff R14: 0000000000000000 R15: 00000000004028c0 [ 906.209287][T16021] ? __kvmalloc_node_noprof+0x6d3/0xa60 [ 906.214863][T16021] ? io_pin_pages+0xc3/0x1e0 [ 906.219484][T16021] io_pin_pages+0xc3/0x1e0 [ 906.223927][T16021] io_sqe_buffer_register+0x1d9/0x1500 [ 906.229415][T16021] ? rcu_is_cpu_rrupt_from_idle+0x250/0x270 [ 906.235341][T16021] ? trace_kmalloc+0xeb/0x110 [ 906.240050][T16021] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 906.245977][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 906.251639][T16021] ? io_rsrc_data_alloc+0x2c/0xa0 [ 906.256699][T16021] ? copy_iovec_from_user+0x102/0x140 [ 906.262105][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 906.267761][T16021] ? iovec_from_user+0xda/0x140 [ 906.272650][T16021] io_sqe_buffers_register.cold+0x346/0x4c3 [ 906.278589][T16021] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 906.284601][T16021] ? __fget_files+0x21f/0x3d0 [ 906.289311][T16021] __do_sys_io_uring_register+0x13ce/0x1bc0 [ 906.295240][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 906.300900][T16021] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 906.307167][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 906.312819][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 906.318473][T16021] ? __x64_sys_futex+0x358/0x4d0 [ 906.323434][T16021] ? rcu_is_watching+0x12/0xc0 [ 906.328226][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 906.333882][T16021] ? xfd_validate_state+0x129/0x190 [ 906.339110][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 906.344768][T16021] ? rcu_is_watching+0x12/0xc0 [ 906.349602][T16021] do_syscall_64+0x115/0x870 [ 906.354217][T16021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.360126][T16021] RIP: 0033:0x7f74bed9ce59 [ 906.364546][T16021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.384171][T16021] RSP: 002b:00007f74bfc1b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 906.392605][T16021] RAX: ffffffffffffffda RBX: 00007f74bf015fa0 RCX: 00007f74bed9ce59 [ 906.400582][T16021] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000003 [ 906.408567][T16021] RBP: 00007f74bee32e6f R08: 0000000000000000 R09: 0000000000000000 [ 906.416546][T16021] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000000 [ 906.424526][T16021] R13: 00007f74bf016038 R14: 00007f74bf015fa0 R15: 00007ffed268c148 [ 906.432562][T16021] [ 906.435808][T16021] Kernel Offset: disabled [ 906.440140][T16021] Rebooting in 86400 seconds..