last executing test programs: 1m55.990307816s ago: executing program 3 (id=185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1m55.926448145s ago: executing program 3 (id=189): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1m55.864561951s ago: executing program 3 (id=191): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(0x3) 1m55.809766498s ago: executing program 3 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m55.789494484s ago: executing program 3 (id=195): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1m55.57144671s ago: executing program 3 (id=198): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x304000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001880)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 1m55.54792353s ago: executing program 32 (id=198): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x304000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001880)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 1m52.301257679s ago: executing program 2 (id=243): r0 = socket(0x2b, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000d00), 0x4) 1m52.240727766s ago: executing program 2 (id=244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 1m52.105928941s ago: executing program 2 (id=245): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="14000100ff010000000000000000000000000001140006"], 0x70}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 1m51.945288534s ago: executing program 2 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m51.903704403s ago: executing program 2 (id=249): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x7, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r1}}, 0x30) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m51.621584884s ago: executing program 2 (id=252): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="3303120081fd120000007ef52f555f2a0c09000000fd88a800f788a83baa99000f8588a832f4", 0xfeba, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0xcf}, 0x14) 1m51.538044618s ago: executing program 33 (id=252): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="3303120081fd120000007ef52f555f2a0c09000000fd88a800f788a83baa99000f8588a832f4", 0xfeba, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0xcf}, 0x14) 1m18.634175832s ago: executing program 5 (id=800): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000540)=';', 0x1}], 0x1) 1m17.730871969s ago: executing program 5 (id=814): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7f, 0x0, 0x7fc00100}]}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000000}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) 1m16.853847638s ago: executing program 5 (id=828): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={r1, 0x8000}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="d3d0666d223e4686", 0x8) 1m16.771007668s ago: executing program 5 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x44) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 1m16.769990371s ago: executing program 5 (id=830): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x0, 0x0, r2}) write$eventfd(r2, &(0x7f0000000080)=0x430f, 0x8) 1m16.580907755s ago: executing program 5 (id=831): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/35, 0x23}, {&(0x7f0000000400)=""/147, 0x93}, {0x0}], 0x3) syz_emit_ethernet(0x6f, &(0x7f0000002240)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x8, 0x4, "f7b9aa3f9606d32f2d244712593e655e189e64f114be88c85290b6e10e1ca6068680f332d169f5da49814c1b6f8911e2a3d47626bb"}}}}}}, 0x0) 1m16.489652064s ago: executing program 34 (id=831): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/35, 0x23}, {&(0x7f0000000400)=""/147, 0x93}, {0x0}], 0x3) syz_emit_ethernet(0x6f, &(0x7f0000002240)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x8, 0x4, "f7b9aa3f9606d32f2d244712593e655e189e64f114be88c85290b6e10e1ca6068680f332d169f5da49814c1b6f8911e2a3d47626bb"}}}}}}, 0x0) 28.229158544s ago: executing program 0 (id=1536): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) 28.225989134s ago: executing program 0 (id=1545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000008000000000000000000a28000000000a011b0000000000000000010000020900010073797a3100000000080002400000000254000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f756f5f626174616476000900010073797a310000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r3 = dup2(r0, r2) close_range(r3, 0xffffffffffffffff, 0x0) 28.121685768s ago: executing program 0 (id=1540): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast1, 0x7daa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000380)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e80900000024678ec86fc2e69d7e422d199f3fc2b4ff0000f03ac710aa7d0000ffffffffffffffff", 0x58}], 0x1) 28.029925365s ago: executing program 0 (id=1542): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20) 27.969713849s ago: executing program 0 (id=1554): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_complete(r0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) 27.16404025s ago: executing program 0 (id=1563): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$alg(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="9991ebcf25a3893cb367ba89edca2652", 0x10}], 0x1, &(0x7f0000000d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8890}, 0x1) 27.023955908s ago: executing program 35 (id=1563): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$alg(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="9991ebcf25a3893cb367ba89edca2652", 0x10}], 0x1, &(0x7f0000000d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8890}, 0x1) 2.030505168s ago: executing program 1 (id=2022): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0xad0}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 1.980942732s ago: executing program 1 (id=2023): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.81047039s ago: executing program 1 (id=2024): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 1.810203054s ago: executing program 1 (id=2025): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) 1.100272996s ago: executing program 7 (id=2031): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 1.098664266s ago: executing program 7 (id=2032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) 1.030619143s ago: executing program 7 (id=2033): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "0f0d3c3618cac193", "8ec6e70dcd0a98a1949925e6d80f38cd", "05d5f594", "57188939998a73bc"}, 0x28) 960.333891ms ago: executing program 7 (id=2034): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) 960.142267ms ago: executing program 7 (id=2035): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3}], 0x1, 0x40800) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 670.133858ms ago: executing program 7 (id=2038): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000c00000/0x400000)=nil, 0x400000}) 601.861894ms ago: executing program 6 (id=2040): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x64b}], 0x1, 0x0, 0x0, 0xfffffffffffffe19) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000180)) 360.963274ms ago: executing program 6 (id=2042): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000380), 0xffe7) 270.244145ms ago: executing program 4 (id=2044): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) read$FUSE(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 210.056152ms ago: executing program 4 (id=2045): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd82, &(0x7f0000000780)={@multicast, @broadcast, @void, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x0, 0x6, "72bbba", 0xd4c, 0x3a, 0xff, @rand_addr=' \x01\x00', @loopback, {[@dstopts={0x0, 0x18, '\x00', [@jumbo={0xc2, 0x4, 0x800}, @generic={0x7, 0xb9, "9e3e20d52e296af5fbe11071638f6de5df31a160a2bfa739bfb63e88eec271841577e896c066b05b41b63490d4899c7374ae400af8cdc9eb718827f1c48083c5baf4ce80f06858384fc356e833beefcb18ef2e8517bcba0ff7f59085080ab856aeb13a87798cc022b19a22bab32992e396ba250ac6e922009eafc158e770f902c27d366bec7bd106422932bb99db5355cfcd0d9b3ef519c82450a99faa9c55f76752b1ac7d8dab2d236431bb9cd7de0f1e2b8b51551b13d079"}]}, @dstopts={0x32, 0x8, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0x2}, @pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x8, [0xff, 0x400, 0xa7]}}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x6}]}, @hopopts={0x29, 0x1, '\x00', [@ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x80}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x32, 0x17a, '\x00', [@generic={0x8e, 0x36, "ab7df4b111c748c05cf0ab496f24760731c3fe7cd0af876ab328c576a357e5fd41a5819409223593d21ebf8850ce3e12fa07b221f5ed"}, @generic={0x7, 0xb7b, "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"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x5}}, @hao={0xc9, 0x10, @mcast1}]}, @dstopts={0x87, 0x0, '\x00', [@ra={0x5, 0x2, 0xdca}]}], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9, "26a361be7bc00fd1c13f44a78b345d3141c56e50d8f89c7ce1ae5e84"}}}}}}}, 0x0) 208.545514ms ago: executing program 4 (id=2046): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000380)={0x400001, 0x5, 0x0, 0x1003, 0x8000, 0x0, 0xff, 0x5, 0x0, 0x4, 0x800001}) 149.939606ms ago: executing program 6 (id=2047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 149.747792ms ago: executing program 4 (id=2048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) 101.001468ms ago: executing program 6 (id=2049): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 100.663708ms ago: executing program 6 (id=2050): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x8084) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 50.042599ms ago: executing program 4 (id=2051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 49.109559ms ago: executing program 6 (id=2052): socket(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendto$inet(r0, 0x0, 0x0, 0x200047f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 45.935551ms ago: executing program 1 (id=2053): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r1, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) 334.607µs ago: executing program 4 (id=2054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0xffff1000) 0s ago: executing program 1 (id=2055): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) kernel console output (not intermixed with test programs): 6 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.075310][ T6020] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.078991][ T6020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.106342][ T139] usb 5-1: USB disconnect, device number 5 [ 85.112407][ T139] usblp0: removed [ 85.154535][ T6645] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 85.203956][ T6002] usb 6-1: Using ep0 maxpacket: 32 [ 85.208556][ T6002] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 85.213238][ T6002] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 85.219335][ T6002] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.224871][ T6002] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 85.232545][ T6002] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 85.236781][ T6002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.240213][ T6002] usb 6-1: Product: syz [ 85.242002][ T6002] usb 6-1: Manufacturer: syz [ 85.244411][ T6002] usb 6-1: SerialNumber: syz [ 85.254601][ C3] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 85.261513][ T6002] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input9 [ 85.308210][ T6020] usb 9-1: GET_CAPABILITIES returned 0 [ 85.310753][ T6020] usbtmc 9-1:16.0: can't read capabilities [ 85.326401][ T6645] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 85.330791][ T6645] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 85.335609][ T6645] usb 10-1: config 1 interface 0 has no altsetting 0 [ 85.341284][ T6645] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 85.345481][ T6645] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.349129][ T6645] usb 10-1: Product: syz [ 85.351154][ T6645] usb 10-1: Manufacturer: syz [ 85.353298][ T6645] usb 10-1: SerialNumber: syz [ 85.360224][ T7300] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 85.363409][ T7300] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 85.475098][ T6002] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 85.477606][ T6002] (id 0x00) [ 85.519121][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.522574][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.523943][ T6002] rc_core: IR keymap rc-imon-pad not found [ 85.525527][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.525560][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.527360][ T6002] Registered IR keymap rc-empty [ 85.530367][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.530388][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.530406][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.533115][ T6002] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 85.535936][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.538640][ T6002] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 85.541792][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.541832][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.563912][ T139] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 85.564490][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.572062][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.575921][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.579690][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.583479][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.588257][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 85.594513][ T1339] usb 9-1: USB disconnect, device number 3 [ 85.675462][ T6002] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 85.681375][ T6002] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input10 [ 85.686904][ T6002] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:7> initialized [ 85.729580][ T139] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 85.733430][ T139] usb 5-1: config 0 has no interface number 0 [ 85.736561][ T139] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 85.742054][ T139] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 85.747245][ T139] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 85.751406][ T139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.759544][ T139] usb 5-1: config 0 descriptor?? [ 85.761843][ T7309] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.766608][ T139] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 85.861889][ T1339] usb 6-1: USB disconnect, device number 7 [ 86.051785][ T1456] usb 5-1: USB disconnect, device number 6 [ 86.400332][ T6645] (unnamed net_device) (uninitialized): Assigned a random MAC address: 72:1d:a4:ad:91:b4 [ 86.410449][ T6645] rtl8150 10-1:1.0: eth10: rtl8150 is detected [ 86.416725][ T6645] usb 10-1: USB disconnect, device number 5 [ 86.438429][ T7315] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.907221][ T63] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 86.910783][ T63] CPU: 0 UID: 0 PID: 63 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 86.910805][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.910818][ T63] Workqueue: hci0 hci_rx_work [ 86.910844][ T63] Call Trace: [ 86.910851][ T63] [ 86.910859][ T63] dump_stack_lvl+0x100/0x190 [ 86.910888][ T63] sysfs_warn_dup.cold+0x1c/0x28 [ 86.910914][ T63] sysfs_create_dir_ns+0x24b/0x2b0 [ 86.910941][ T63] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 86.910964][ T63] ? find_held_lock+0x2b/0x80 [ 86.910979][ T63] ? kobject_add_internal+0x25f/0x930 [ 86.911006][ T63] ? kobject_add_internal+0x25f/0x930 [ 86.911034][ T63] ? do_raw_spin_unlock+0x145/0x1e0 [ 86.911059][ T63] kobject_add_internal+0x2c8/0x930 [ 86.911088][ T63] kobject_add+0x16a/0x1e0 [ 86.911104][ T63] ? __pfx_kobject_add+0x10/0x10 [ 86.911119][ T63] ? class_to_subsys+0x10f/0x150 [ 86.911143][ T63] ? kobject_put+0xb9/0x640 [ 86.911161][ T63] ? _raw_spin_unlock+0x28/0x50 [ 86.911178][ T63] device_add+0x294/0x1950 [ 86.911191][ T63] ? __pfx_dev_set_name+0x10/0x10 [ 86.911205][ T63] ? __pfx_device_add+0x10/0x10 [ 86.911218][ T63] ? mgmt_send_event_skb+0x2fb/0x460 [ 86.911239][ T63] hci_conn_add_sysfs+0x1a3/0x260 [ 86.911265][ T63] le_conn_complete_evt+0x11cb/0x1f40 [ 86.911291][ T63] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 86.911318][ T63] hci_le_conn_complete_evt+0x23c/0x3a0 [ 86.911339][ T63] ? skb_pull_data+0x15f/0x1e0 [ 86.911360][ T63] hci_le_meta_evt+0x34a/0x5f0 [ 86.911382][ T63] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 86.911405][ T63] hci_event_packet+0x682/0x11c0 [ 86.911426][ T63] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 86.911448][ T63] ? __pfx_hci_event_packet+0x10/0x10 [ 86.911470][ T63] ? kcov_remote_start+0x374/0x660 [ 86.911486][ T63] ? lockdep_hardirqs_on+0x78/0x100 [ 86.911514][ T63] hci_rx_work+0x451/0xfc0 [ 86.911539][ T63] process_one_work+0xa23/0x19a0 [ 86.911573][ T63] ? __pfx_process_one_work+0x10/0x10 [ 86.911602][ T63] ? __pfx_hci_rx_work+0x10/0x10 [ 86.911625][ T63] worker_thread+0x5ef/0xe50 [ 86.911663][ T63] ? kthread+0x13a/0x450 [ 86.911684][ T63] ? __pfx_worker_thread+0x10/0x10 [ 86.911708][ T63] kthread+0x370/0x450 [ 86.911730][ T63] ? __pfx_kthread+0x10/0x10 [ 86.911752][ T63] ret_from_fork+0x754/0xd80 [ 86.911778][ T63] ? __pfx_ret_from_fork+0x10/0x10 [ 86.911804][ T63] ? __switch_to+0x7b4/0x1120 [ 86.911822][ T63] ? __pfx_kthread+0x10/0x10 [ 86.911844][ T63] ret_from_fork_asm+0x1a/0x30 [ 86.911874][ T63] [ 86.911895][ T63] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 87.018779][ T63] Bluetooth: hci0: failed to register connection device [ 87.145858][ T7333] netlink: 'syz.4.495': attribute type 1 has an invalid length. [ 87.157505][ T7333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.178884][ T7333] bond1: (slave geneve2): making interface the new active one [ 87.182187][ T7333] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 87.203995][ T6645] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 87.369587][ T6645] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 87.373068][ T6645] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.377828][ T6645] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.381266][ T6645] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 87.388692][ T6645] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 87.391797][ T6645] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 87.394879][ T6645] usb 10-1: Manufacturer: syz [ 87.398089][ T6645] usb 10-1: config 0 descriptor?? [ 87.542565][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 87.545449][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 87.549386][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 87.551416][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 87.703617][ T7365] "syz.1.508" (7365) uses obsolete ecb(arc4) skcipher [ 87.804890][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 87.807141][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 87.811491][ T6645] hid_parser_main: 5 callbacks suppressed [ 87.811502][ T6645] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 87.818618][ T6645] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 88.314357][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 88.316998][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 88.362117][ T7352] ceph: No mds server is up or the cluster is laggy [ 88.486942][ T40] audit: type=1326 audit(1773733383.713:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.0.517" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 88.628791][ T6083] usb 10-1: USB disconnect, device number 6 [ 88.707064][ T7405] netlink: 32 bytes leftover after parsing attributes in process `syz.1.524'. [ 88.710930][ T7405] netlink: 76 bytes leftover after parsing attributes in process `syz.1.524'. [ 88.714909][ T7405] tipc: Started in network mode [ 88.717062][ T7405] tipc: Node identity ffffffff, cluster identity 4711 [ 88.720036][ T7405] tipc: Node number set to 4294967295 [ 89.114875][ T7419] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 89.136163][ T7419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.165002][ T7419] bond1: (slave geneve2): making interface the new active one [ 89.169021][ T7419] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 89.525622][ T7438] IPv4: Oversized IP packet from 127.202.26.0 [ 89.956677][ T7463] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 89.978609][ T7463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.137160][ T7463] bond1: (slave geneve2): making interface the new active one [ 90.141972][ T7463] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 90.235762][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.551'. [ 90.241830][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.551'. [ 90.247316][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.551'. [ 90.350081][ T7473] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 90.353812][ T7473] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 90.522696][ T7487] netlink: 35 bytes leftover after parsing attributes in process `syz.1.560'. [ 90.577296][ T7489] loop2: detected capacity change from 0 to 7 [ 90.599966][ T6055] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 90.601941][ T6055] loop2: partition table partially beyond EOD, truncated [ 90.606594][ T6055] loop2: p1 size 1898597519 extends beyond EOD, truncated [ 90.617753][ T7489] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 90.619748][ T7489] loop2: partition table partially beyond EOD, truncated [ 90.627535][ T7489] loop2: p1 size 1898597519 extends beyond EOD, truncated [ 90.680837][ T6055] udevd[6055]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 90.703194][ T6055] udevd[6055]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 90.800358][ T7509] netlink: 'syz.5.571': attribute type 4 has an invalid length. [ 90.877960][ T7515] input: syz1 as /devices/virtual/input/input11 [ 90.887124][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.574'. [ 90.913717][ T7518] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.575'. [ 90.944433][ T7520] netlink: 67 bytes leftover after parsing attributes in process `syz.0.576'. [ 91.358595][ T7550] loop1: detected capacity change from 0 to 4 [ 91.362727][ T7550] Dev loop1: unable to read RDB block 4 [ 91.366106][ T7550] loop1: unable to read partition table [ 91.368180][ T7550] loop1: partition table beyond EOD, truncated [ 91.374253][ T7550] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 91.518174][ T7562] evm: overlay not supported [ 91.673529][ T7574] 9pnet: p9_errstr2errno: server reported unknown error ile1 [ 92.001769][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 92.057016][ T7600] netlink: 'syz.0.612': attribute type 1 has an invalid length. [ 92.059513][ T7600] netlink: 'syz.0.612': attribute type 4 has an invalid length. [ 92.113662][ T7605] netlink: 'syz.0.614': attribute type 3 has an invalid length. [ 92.424926][ T6021] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.444110][ T1456] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 92.574200][ T6021] usb 5-1: Using ep0 maxpacket: 8 [ 92.579347][ T6021] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.582870][ T6021] usb 5-1: config 0 has no interface number 0 [ 92.586536][ T6021] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.591228][ T6021] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.595860][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.601322][ T1456] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.607058][ T1456] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.612068][ T1456] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.616087][ T1456] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.619625][ T6021] usb 5-1: config 0 descriptor?? [ 92.627876][ T6021] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 92.636050][ T7615] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 92.647215][ T1456] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.744364][ T29] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 92.811887][ T7629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.836808][ T6020] usb 5-1: USB disconnect, device number 7 [ 92.869185][ T53] usb 9-1: USB disconnect, device number 4 [ 92.896377][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.900050][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.903213][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.910974][ T29] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.916494][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.921900][ T29] usb 10-1: config 0 descriptor?? [ 93.340612][ T29] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 93.527125][ T7643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.589422][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.653150][ T7650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.635752][ C1] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 95.285549][ T39] hid-generic 0000:0003:0001.0007: unknown main item tag 0x0 [ 95.289053][ T39] hid-generic 0000:0003:0001.0007: unknown main item tag 0x0 [ 95.303592][ T39] hid-generic 0000:0003:0001.0007: hidraw2: HID v0.03 Device [syz0] on syz1 [ 95.319088][ T7697] "syz.5.654" (7697) uses obsolete ecb(arc4) skcipher [ 95.333509][ T7695] fido_id[7695]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.392247][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.396294][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.414566][ T6021] usb 10-1: USB disconnect, device number 7 [ 95.451988][ T7699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.457471][ T7699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.504112][ T39] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 95.560906][ T46] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.563777][ T46] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.567657][ T46] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.570911][ T46] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.666623][ T39] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 95.673687][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.678018][ T39] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.681814][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.685874][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.690309][ T39] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 95.692742][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.696591][ T39] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.700555][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.705454][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.710000][ T39] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 95.712442][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.718948][ T39] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.722900][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.726664][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.734801][ T39] usb 6-1: string descriptor 0 read error: -22 [ 95.736929][ T39] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 95.739796][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.746910][ T39] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 95.947022][ T7730] __nla_validate_parse: 2 callbacks suppressed [ 95.947034][ T7730] netlink: 44 bytes leftover after parsing attributes in process `syz.0.667'. [ 95.952201][ T7730] netlink: 43 bytes leftover after parsing attributes in process `syz.0.667'. [ 95.956533][ T7730] netlink: 'syz.0.667': attribute type 5 has an invalid length. [ 95.959814][ T7730] netlink: 43 bytes leftover after parsing attributes in process `syz.0.667'. [ 96.083945][ T6020] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 96.233898][ T6020] usb 10-1: Using ep0 maxpacket: 8 [ 96.237735][ T6020] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 96.241049][ T6020] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 96.245262][ T6020] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 96.248559][ T6020] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 96.252195][ T6020] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 96.255809][ T6020] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.260593][ T6020] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.264786][ T6020] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.476875][ T6020] usb 10-1: usb_control_msg returned -32 [ 96.478889][ T6020] usbtmc 10-1:16.0: can't read capabilities [ 97.594491][ T7763] input: syz1 as /devices/virtual/input/input12 [ 97.596832][ T7763] input: failed to attach handler leds to device input12, error: -6 [ 97.679921][ T7767] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.680'. [ 97.691348][ T7767] netlink: Unknown conntrack attr (type=2304, max=9) [ 98.104793][ T1456] usb 6-1: USB disconnect, device number 8 [ 98.110191][ T7741] adutux: adu_open - error, can't find device for minor 0 [ 98.436402][ T7810] team0: Port device syz_tun added [ 98.683905][ T6083] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 98.843945][ T6083] usb 9-1: Using ep0 maxpacket: 32 [ 98.854316][ T6083] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 98.858804][ T6083] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 98.863647][ T6083] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.868581][ T6083] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 98.876227][ T6083] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 98.879343][ T6083] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.881782][ T6083] usb 9-1: Product: syz [ 98.883200][ T6083] usb 9-1: Manufacturer: syz [ 98.884922][ T6083] usb 9-1: SerialNumber: syz [ 98.892783][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 98.897050][ T6083] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input13 [ 98.994399][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 99.134078][ T6083] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 99.137727][ T6083] (id 0x00) [ 99.140454][ T6020] usb 10-1: USB disconnect, device number 8 [ 99.158692][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.163237][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.167680][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.172846][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.177883][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.187083][ T10] usb 5-1: config 0 descriptor?? [ 99.194403][ T6083] rc_core: IR keymap rc-imon-pad not found [ 99.198058][ T6083] Registered IR keymap rc-empty [ 99.200077][ T6083] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 99.203719][ T6083] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 99.324393][ T6083] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 99.334846][ T6083] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input14 [ 99.348239][ T6083] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:5> initialized [ 99.438384][ T7857] syzkaller1: entered promiscuous mode [ 99.440226][ T7857] syzkaller1: entered allmulticast mode [ 99.521977][ T139] usb 9-1: USB disconnect, device number 5 [ 99.610671][ T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 99.613105][ T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 99.616047][ T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 99.618508][ T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 99.621486][ T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 99.623984][ T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 99.626357][ T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 99.628803][ T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 99.636239][ T10] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 99.865603][ T1456] usb 5-1: USB disconnect, device number 8 [ 100.554921][ T7899] ip6gretap1: entered promiscuous mode [ 100.557531][ T7899] ip6gretap1: entered allmulticast mode [ 100.574702][ T7902] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.580796][ T7902] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.670798][ T7908] netlink: 208 bytes leftover after parsing attributes in process `syz.5.738'. [ 100.676790][ T7908] netlink: 208 bytes leftover after parsing attributes in process `syz.5.738'. [ 100.756420][ T40] audit: type=1326 audit(1773733395.983:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.0.741" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 100.774192][ T34] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 100.954241][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 100.965423][ T34] usb 9-1: config 0 has no interfaces? [ 100.976327][ T34] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 100.979534][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.982147][ T34] usb 9-1: Product: syz [ 100.983634][ T34] usb 9-1: Manufacturer: syz [ 100.988749][ T34] usb 9-1: SerialNumber: syz [ 100.993630][ T34] usb 9-1: config 0 descriptor?? [ 101.235374][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.733'. [ 101.242032][ T34] usb 9-1: USB disconnect, device number 6 [ 101.627711][ T7952] ip6gretap1: entered promiscuous mode [ 101.629569][ T7952] ip6gretap1: entered allmulticast mode [ 101.901920][ T7977] ip6gretap1: entered promiscuous mode [ 101.903816][ T7977] ip6gretap1: entered allmulticast mode [ 102.024510][ T40] audit: type=1326 audit(1773733397.243:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.4.765" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x0 [ 102.033972][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 102.205764][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 102.208950][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.223997][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.228550][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.233209][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.239654][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.243518][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.452245][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 102.454279][ T34] usbtmc 6-1:16.0: can't read capabilities [ 102.528778][ T40] audit: type=1326 audit(1773733397.753:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.0.778" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 102.654137][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.657109][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.660272][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.663535][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.667057][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.670561][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.674516][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.678089][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.681968][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.686493][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.690396][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.693776][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.697187][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.700934][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.704097][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.707133][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.710921][ T139] usb 6-1: USB disconnect, device number 9 [ 103.294345][ T8033] netlink: 'syz.5.792': attribute type 4 has an invalid length. [ 103.297062][ T8033] netlink: 'syz.5.792': attribute type 8 has an invalid length. [ 103.299496][ T8033] netlink: 'syz.5.792': attribute type 1 has an invalid length. [ 103.301965][ T8033] netlink: 172 bytes leftover after parsing attributes in process `syz.5.792'. [ 103.304954][ T8033] NCSI netlink: No device for ifindex 0 [ 104.313998][ T53] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 104.485071][ T53] usb 6-1: config 0 has no interfaces? [ 104.488314][ T53] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.492270][ T53] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.495304][ T53] usb 6-1: Product: syz [ 104.496690][ T53] usb 6-1: Manufacturer: syz [ 104.499419][ T53] usb 6-1: config 0 descriptor?? [ 104.709291][ T34] usb 6-1: USB disconnect, device number 10 [ 105.364517][ T139] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 105.525377][ T139] usb 6-1: config 0 has no interfaces? [ 105.529003][ T139] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.532070][ T139] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.535204][ T139] usb 6-1: Product: syz [ 105.536892][ T139] usb 6-1: Manufacturer: syz [ 105.544457][ T139] usb 6-1: config 0 descriptor?? [ 105.748162][ T139] usb 6-1: USB disconnect, device number 11 [ 106.068219][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.071739][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.075010][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.078556][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.082882][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.207270][ T8143] chnl_net:caif_netlink_parms(): no params data found [ 106.275716][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.278312][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.280728][ T8143] bridge_slave_0: entered allmulticast mode [ 106.289631][ T8143] bridge_slave_0: entered promiscuous mode [ 106.294938][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.298030][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.301330][ T8143] bridge_slave_1: entered allmulticast mode [ 106.305335][ T8143] bridge_slave_1: entered promiscuous mode [ 106.349128][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.356017][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.380205][ T8143] team0: Port device team_slave_0 added [ 106.385112][ T8143] team0: Port device team_slave_1 added [ 106.408364][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.411140][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.421996][ T8143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.429065][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.431589][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.442144][ T8143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.474163][ T8143] hsr_slave_0: entered promiscuous mode [ 106.477110][ T8143] hsr_slave_1: entered promiscuous mode [ 106.479644][ T8143] debugfs: 'hsr0' already exists in 'hsr' [ 106.482075][ T8143] Cannot create hsr debugfs directory [ 106.610333][ T8143] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 106.616603][ T8143] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 106.621704][ T8143] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 106.628020][ T8143] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 106.649113][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.652000][ T8143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.655656][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.658793][ T8143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.698369][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.708907][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.712700][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.726301][ T8143] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.734570][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.737616][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.746345][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.749432][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.776813][ T8143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.827079][ T35] block nbd0: Connection timed out, retrying (0/2 alive) [ 106.830957][ T35] block nbd0: Connection timed out, retrying (0/2 alive) [ 106.833621][ T35] block nbd0: Connection timed out, retrying (0/2 alive) [ 106.836540][ T35] block nbd0: Connection timed out, retrying (0/2 alive) [ 106.839773][ T35] block nbd0: Dead connection, failed to find a fallback [ 106.843172][ T35] block nbd0: shutting down sockets [ 106.846130][ T35] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.850681][ T35] Buffer I/O error on dev nbd0, logical block 3, async page read [ 106.853706][ T35] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.857569][ T35] Buffer I/O error on dev nbd0, logical block 2, async page read [ 106.860151][ T35] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.863159][ T35] Buffer I/O error on dev nbd0, logical block 1, async page read [ 106.865703][ T35] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.868645][ T35] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.872606][ T5944] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.877525][ T5944] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.880238][ T5944] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.884513][ T5944] Buffer I/O error on dev nbd0, logical block 1, async page read [ 106.887897][ T5944] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.891962][ T5944] Buffer I/O error on dev nbd0, logical block 2, async page read [ 106.895649][ T5944] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.899129][ T5944] Buffer I/O error on dev nbd0, logical block 3, async page read [ 106.901660][ T5944] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.904925][ T5944] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.907508][ T5944] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.910679][ T5944] Buffer I/O error on dev nbd0, logical block 1, async page read [ 106.913716][ T5944] ldm_validate_partition_table(): Disk read failed. [ 106.914610][ T8143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.916330][ T5944] Dev nbd0: unable to read RDB block 0 [ 106.921991][ T5944] nbd0: unable to read partition table [ 106.929025][ T5944] ldm_validate_partition_table(): Disk read failed. [ 106.932043][ T5944] Dev nbd0: unable to read RDB block 0 [ 106.934495][ T5944] nbd0: unable to read partition table [ 106.999951][ T8186] input: syz0 as /devices/virtual/input/input15 [ 107.126116][ T8143] veth0_vlan: entered promiscuous mode [ 107.133666][ T8198] netlink: 'syz.4.847': attribute type 1 has an invalid length. [ 107.147324][ T8198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.150620][ T8143] veth1_vlan: entered promiscuous mode [ 107.168435][ T8143] veth0_macvtap: entered promiscuous mode [ 107.173251][ T8143] veth1_macvtap: entered promiscuous mode [ 107.183248][ T8143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.189645][ T8143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.197071][ T61] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.202066][ T61] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.206647][ T61] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.213912][ T61] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.264955][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.268138][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.290877][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.293406][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.365540][ T1456] libceph: connect (1)[c::]:6789 error -101 [ 107.367867][ T1456] libceph: mon0 (1)[c::]:6789 connect error [ 107.370177][ T8204] veth0: entered promiscuous mode [ 107.384254][ T8204] veth0: left promiscuous mode [ 107.434763][ T1456] libceph: connect (1)[c::]:6789 error -101 [ 107.436707][ T1456] libceph: mon0 (1)[c::]:6789 connect error [ 107.625902][ T1456] libceph: connect (1)[c::]:6789 error -101 [ 107.628129][ T1456] libceph: mon0 (1)[c::]:6789 connect error [ 107.695197][ T1456] libceph: connect (1)[c::]:6789 error -101 [ 107.697976][ T1456] libceph: mon0 (1)[c::]:6789 connect error [ 108.114097][ T5943] Bluetooth: hci2: command tx timeout [ 108.135330][ T1456] libceph: connect (1)[c::]:6789 error -101 [ 108.138306][ T1456] libceph: mon0 (1)[c::]:6789 connect error [ 108.187379][ T8206] ceph: No mds server is up or the cluster is laggy [ 108.187569][ T8216] ceph: No mds server is up or the cluster is laggy [ 108.214285][ T1456] libceph: connect (1)[c::]:6789 error -101 [ 108.216958][ T1456] libceph: mon0 (1)[c::]:6789 connect error [ 108.274443][ T6645] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 108.435759][ T6645] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.439364][ T6645] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.442433][ T6645] usb 6-1: config 0 interface 0 has no altsetting 0 [ 108.444716][ T6645] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 108.447772][ T6645] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.451668][ T6645] usb 6-1: config 0 descriptor?? [ 108.667895][ T8262] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 108.862775][ T6645] hid_parser_main: 7 callbacks suppressed [ 108.862788][ T6645] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 108.869583][ T6645] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 108.872222][ T6645] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 108.875210][ T6645] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 108.877639][ T6645] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 108.880237][ T6645] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 108.888020][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.878'. [ 109.060879][ T1456] usb 6-1: USB disconnect, device number 12 [ 109.529210][ T8311] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 109.535953][ T8311] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 109.550349][ T8311] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 109.555615][ T8311] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 109.559369][ T8311] overlayfs: d_ino too big (157, ino=9223372036854776629, xinobits=3) [ 109.563167][ T8311] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 109.567227][ T8311] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 109.570718][ T8311] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 109.574267][ T8311] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 109.577192][ T8311] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 109.579952][ T8311] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 109.582832][ T8311] overlayfs: d_ino too big (instances, ino=4611686018427390143, xinobits=3) [ 109.745787][ T8336] batadv_slave_0: entered promiscuous mode [ 109.750035][ T8333] batadv_slave_0: left promiscuous mode [ 110.022572][ T40] audit: type=1326 audit(1773733405.243:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.0.914" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 110.184340][ T5943] Bluetooth: hci2: command tx timeout [ 110.636648][ T8405] input: syz0 as /devices/virtual/input/input16 [ 110.684725][ T8402] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 110.696826][ T8402] bond3: (slave lo): Enslaving as an active interface with an up link [ 110.703933][ T8402] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 111.916705][ T8440] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 111.927836][ T8440] bond2: (slave lo): Enslaving as an active interface with an up link [ 111.934626][ T8440] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 112.124055][ T6645] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 112.264034][ T5943] Bluetooth: hci2: command tx timeout [ 112.285624][ T6645] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.305648][ T6645] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 112.309560][ T6645] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 112.312976][ T6645] usb 11-1: Product: syz [ 112.314925][ T6645] usb 11-1: Manufacturer: syz [ 112.316806][ T6645] usb 11-1: SerialNumber: syz [ 112.534034][ T6645] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 112.801710][ T39] usb 11-1: USB disconnect, device number 2 [ 112.813474][ T39] usblp0: removed [ 112.908453][ T8474] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.213924][ T6020] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 113.375385][ T6020] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.378232][ T6020] usb 9-1: config 0 has no interface number 0 [ 113.380448][ T6020] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 113.384501][ T6020] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 113.389543][ T6020] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 113.393666][ T6020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.400399][ T6020] usb 9-1: config 0 descriptor?? [ 113.403526][ T8480] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 113.412164][ T6020] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 113.678463][ T8504] syzkaller1: entered promiscuous mode [ 113.680406][ T8504] syzkaller1: entered allmulticast mode [ 113.729568][ T39] usb 9-1: USB disconnect, device number 7 [ 113.729597][ C0] iowarrior 9-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 113.798867][ T8508] netlink: 'syz.1.974': attribute type 1 has an invalid length. [ 113.823441][ T8508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.869534][ T8508] bond3: (slave geneve3): making interface the new active one [ 113.872806][ T8508] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 114.355348][ T63] Bluetooth: hci2: command tx timeout [ 114.524022][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 114.683906][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 114.687033][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.690911][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.695339][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.699151][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.705990][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.710594][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.929422][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 114.931906][ T10] usbtmc 6-1:16.0: can't read capabilities [ 115.138305][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.141434][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.144330][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.147254][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.150213][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.153054][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.156855][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.159863][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.162761][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.165626][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.168576][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.172477][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.175376][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.178341][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.181438][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 115.184304][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 115.188501][ T6479] usb 6-1: USB disconnect, device number 13 [ 115.522758][ T8557] "syz.4.991" (8557) uses obsolete ecb(arc4) skcipher [ 115.673969][ T6479] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 115.835843][ T6479] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.843983][ T6479] usb 11-1: config 0 has no interface number 0 [ 115.846762][ T6479] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 115.851531][ T6479] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 115.856949][ T6479] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.860865][ T6479] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.867486][ T6479] usb 11-1: config 0 descriptor?? [ 115.871708][ T8550] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 115.878927][ T6479] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 115.903795][ T8581] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1004'. [ 116.117251][ T40] audit: type=1800 audit(1773733411.343:86): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1008" name="bus" dev="tmpfs" ino=1015 res=0 errno=0 [ 116.183115][ T6479] usb 11-1: USB disconnect, device number 3 [ 116.183121][ C0] iowarrior 11-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 117.565759][ T8646] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1030'. [ 117.569695][ T8646] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1030'. [ 117.573560][ T8646] tipc: Started in network mode [ 117.575782][ T8646] tipc: Node identity ffffffff, cluster identity 4711 [ 117.578735][ T8646] tipc: Node number set to 4294967295 [ 117.953991][ T6479] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 118.125804][ T6479] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 118.129558][ T6479] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.133234][ T6479] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.133981][ T1339] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 118.136581][ T6479] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 118.145018][ T6479] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 118.148105][ T6479] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 118.150714][ T6479] usb 9-1: Manufacturer: syz [ 118.153715][ T6479] usb 9-1: config 0 descriptor?? [ 118.285296][ T1339] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.287948][ T1339] usb 6-1: config 0 has no interface number 0 [ 118.290270][ T1339] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 118.294345][ T1339] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 118.297843][ T1339] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.300784][ T1339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.304873][ T1339] usb 6-1: config 0 descriptor?? [ 118.307035][ T8662] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 118.311968][ T1339] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 118.571275][ T6479] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 118.585679][ T6479] appleir 0003:05AC:8243.000A: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 118.604796][ T1339] usb 6-1: USB disconnect, device number 14 [ 118.604893][ C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 118.616498][ T5943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 118.619720][ T5943] CPU: 1 UID: 0 PID: 5943 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.619739][ T5943] Tainted: [L]=SOFTLOCKUP [ 118.619742][ T5943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.619750][ T5943] Workqueue: hci2 hci_rx_work [ 118.619820][ T5943] Call Trace: [ 118.619825][ T5943] [ 118.619830][ T5943] dump_stack_lvl+0x100/0x190 [ 118.619849][ T5943] sysfs_warn_dup.cold+0x1c/0x28 [ 118.619864][ T5943] sysfs_create_dir_ns+0x24b/0x2b0 [ 118.619880][ T5943] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 118.619894][ T5943] ? find_held_lock+0x2b/0x80 [ 118.619904][ T5943] ? kobject_add_internal+0x25f/0x930 [ 118.619921][ T5943] ? kobject_add_internal+0x25f/0x930 [ 118.619939][ T5943] ? do_raw_spin_unlock+0x145/0x1e0 [ 118.619956][ T5943] kobject_add_internal+0x2c8/0x930 [ 118.619976][ T5943] kobject_add+0x16a/0x1e0 [ 118.619991][ T5943] ? __pfx_kobject_add+0x10/0x10 [ 118.620001][ T5943] ? class_to_subsys+0x10f/0x150 [ 118.620037][ T5943] ? kobject_put+0xb9/0x640 [ 118.620052][ T5943] ? _raw_spin_unlock+0x28/0x50 [ 118.620069][ T5943] device_add+0x294/0x1950 [ 118.620082][ T5943] ? __pfx_dev_set_name+0x10/0x10 [ 118.620098][ T5943] ? __pfx_device_add+0x10/0x10 [ 118.620112][ T5943] ? mgmt_send_event_skb+0x2fb/0x460 [ 118.620130][ T5943] hci_conn_add_sysfs+0x1a3/0x260 [ 118.620146][ T5943] le_conn_complete_evt+0x11cb/0x1f40 [ 118.620162][ T5943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 118.620179][ T5943] hci_le_conn_complete_evt+0x23c/0x3a0 [ 118.620193][ T5943] ? skb_pull_data+0x15f/0x1e0 [ 118.620206][ T5943] hci_le_meta_evt+0x34a/0x5f0 [ 118.620221][ T5943] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 118.620236][ T5943] hci_event_packet+0x682/0x11c0 [ 118.620249][ T5943] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 118.620263][ T5943] ? __pfx_hci_event_packet+0x10/0x10 [ 118.620277][ T5943] ? kcov_remote_start+0x374/0x660 [ 118.620288][ T5943] ? lockdep_hardirqs_on+0x78/0x100 [ 118.620306][ T5943] hci_rx_work+0x451/0xfc0 [ 118.620322][ T5943] process_one_work+0xa23/0x19a0 [ 118.620343][ T5943] ? __pfx_process_one_work+0x10/0x10 [ 118.620363][ T5943] ? __pfx_hci_rx_work+0x10/0x10 [ 118.620376][ T5943] worker_thread+0x5ef/0xe50 [ 118.620397][ T5943] ? kthread+0x13a/0x450 [ 118.620410][ T5943] ? __pfx_worker_thread+0x10/0x10 [ 118.620424][ T5943] kthread+0x370/0x450 [ 118.620437][ T5943] ? __pfx_kthread+0x10/0x10 [ 118.620452][ T5943] ret_from_fork+0x754/0xd80 [ 118.620468][ T5943] ? __pfx_ret_from_fork+0x10/0x10 [ 118.620485][ T5943] ? __switch_to+0x7b4/0x1120 [ 118.620497][ T5943] ? __pfx_kthread+0x10/0x10 [ 118.620512][ T5943] ret_from_fork_asm+0x1a/0x30 [ 118.620530][ T5943] [ 118.620543][ T5943] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 118.732997][ T5943] Bluetooth: hci2: failed to register connection device [ 120.713457][ T6479] usb 9-1: USB disconnect, device number 8 [ 120.751036][ T8680] kvm: user requested TSC rate below hardware speed [ 120.873303][ T8693] netlink: 'syz.1.1048': attribute type 1 has an invalid length. [ 120.893697][ T8693] 8021q: adding VLAN 0 to HW filter on device bond4 [ 120.916281][ T8693] bond4: (slave geneve4): making interface the new active one [ 120.920067][ T8693] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 120.924993][ T692] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.930192][ T692] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.933280][ T692] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.937856][ T692] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 121.126763][ T40] audit: type=1804 audit(1773733416.343:87): pid=8711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1056" name="/newroot/52/file1" dev="tmpfs" ino=284 res=1 errno=0 [ 121.157035][ T8714] netlink: 'syz.1.1058': attribute type 2 has an invalid length. [ 121.160350][ T8714] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1058'. [ 121.230838][ T8718] 9p: Bad value for 'rfdno' [ 121.272936][ T8720] kernel read not supported for file /file1 (pid: 8720 comm: syz.1.1062) [ 121.276095][ T40] audit: type=1800 audit(1773733416.503:88): pid=8720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1062" name="file1" dev="mqueue" ino=24792 res=0 errno=0 [ 121.289491][ T8720] capability: warning: `syz.1.1062' uses deprecated v2 capabilities in a way that may be insecure [ 121.324211][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1061'. [ 121.327509][ T8722] netlink: 'syz.6.1061': attribute type 7 has an invalid length. [ 121.330416][ T8722] netlink: 'syz.6.1061': attribute type 8 has an invalid length. [ 121.332894][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1061'. [ 121.384376][ T8730] netlink: 1371 bytes leftover after parsing attributes in process `syz.6.1065'. [ 121.591726][ T8740] overlayfs: failed to clone upperpath [ 121.895305][ T8753] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1083'. [ 122.021714][ T8763] netlink: 1371 bytes leftover after parsing attributes in process `syz.4.1079'. [ 122.183285][ T8771] input: syz1 as /devices/virtual/input/input17 [ 122.269636][ T8776] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1087'. [ 122.283163][ T8777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1086'. [ 122.426865][ T8789] loop2: detected capacity change from 0 to 7 [ 122.432837][ T5944] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 122.434709][ T5944] loop2: partition table partially beyond EOD, truncated [ 122.438940][ T5944] loop2: p1 size 1898597519 extends beyond EOD, truncated [ 122.449875][ T8789] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 122.453080][ T8789] loop2: partition table partially beyond EOD, truncated [ 122.456808][ T8789] loop2: p1 size 1898597519 extends beyond EOD, truncated [ 122.483278][ T5944] udevd[5944]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 122.494211][ T5944] udevd[5944]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 122.533750][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1107'. [ 122.540912][ T8803] netlink: 'syz.1.1107': attribute type 7 has an invalid length. [ 122.544949][ T8803] netlink: 'syz.1.1107': attribute type 8 has an invalid length. [ 122.547848][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 122.704256][ T8820] kernel read not supported for file /file1 (pid: 8820 comm: syz.4.1106) [ 122.714077][ T40] audit: type=1800 audit(1773733417.943:89): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1106" name="file1" dev="mqueue" ino=25863 res=0 errno=0 [ 122.776264][ T8822] loop2: detected capacity change from 0 to 7 [ 122.779394][ T5944] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 122.781897][ T5944] loop2: partition table partially beyond EOD, truncated [ 122.785464][ T5944] loop2: p1 size 1898597519 extends beyond EOD, truncated [ 122.799692][ T8822] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 122.801553][ T8822] loop2: partition table partially beyond EOD, truncated [ 122.805136][ T8822] loop2: p1 size 1898597519 extends beyond EOD, truncated [ 122.848327][ T5944] udevd[5944]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 122.856976][ T8828] loop1: detected capacity change from 0 to 4 [ 122.860079][ T5944] udevd[5944]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 122.860684][ T8828] Dev loop1: unable to read RDB block 4 [ 122.865427][ T8828] loop1: unable to read partition table [ 122.868053][ T8828] loop1: partition table beyond EOD, truncated [ 122.877952][ T8828] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 123.167682][ T8854] 9pnet: p9_errstr2errno: server reported unknown error ile1 [ 124.170763][ T8894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.173504][ T8888] loop2: detected capacity change from 0 to 7 [ 124.178359][ T5944] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 124.180473][ T5944] loop2: partition table partially beyond EOD, truncated [ 124.185257][ T5944] loop2: p1 size 1898597519 extends beyond EOD, truncated [ 124.206947][ T8888] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 124.209413][ T8888] loop2: partition table partially beyond EOD, truncated [ 124.212354][ T8888] loop2: p1 size 1898597519 extends beyond EOD, truncated [ 124.253785][ T5944] udevd[5944]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 124.265587][ T5944] udevd[5944]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 124.324623][ T8908] netlink: 'syz.1.1148': attribute type 4 has an invalid length. [ 124.458654][ T8924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.470871][ T8926] netlink: 'syz.1.1156': attribute type 3 has an invalid length. [ 124.549508][ T8938] netlink: 'syz.4.1163': attribute type 4 has an invalid length. [ 124.774007][ T1339] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 124.934248][ T1339] usb 6-1: Using ep0 maxpacket: 8 [ 124.937946][ T1339] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.941161][ T1339] usb 6-1: config 0 has no interface number 0 [ 124.943579][ T1339] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.947768][ T1339] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.952029][ T1339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.957283][ T1339] usb 6-1: config 0 descriptor?? [ 124.967031][ T1339] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 125.169379][ T6083] usb 6-1: USB disconnect, device number 15 [ 125.603968][ T6479] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 125.776696][ T6479] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.780630][ T6479] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 125.784002][ T6479] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 125.787145][ T6479] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.794740][ T8964] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 125.798651][ T6479] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.012529][ T6479] usb 11-1: USB disconnect, device number 4 [ 126.636282][ T1339] hid-generic 0000:0003:0001.000B: unknown main item tag 0x0 [ 126.640212][ T1339] hid-generic 0000:0003:0001.000B: unknown main item tag 0x0 [ 126.646447][ T1339] hid-generic 0000:0003:0001.000B: hidraw1: HID v0.03 Device [syz0] on syz1 [ 126.682400][ T8994] fido_id[8994]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.861083][ T9002] kernel read not supported for file /file1 (pid: 9002 comm: syz.6.1191) [ 126.865246][ T40] audit: type=1800 audit(1773733422.093:90): pid=9002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1191" name="file1" dev="mqueue" ino=26039 res=0 errno=0 [ 126.938200][ T9008] __nla_validate_parse: 5 callbacks suppressed [ 126.938217][ T9008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1193'. [ 126.954228][ T9008] netlink: 'syz.4.1193': attribute type 7 has an invalid length. [ 126.956876][ T9008] netlink: 'syz.4.1193': attribute type 8 has an invalid length. [ 126.959919][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1193'. [ 127.367371][ T1339] hid-generic 0000:0003:0001.000C: unknown main item tag 0x0 [ 127.370744][ T1339] hid-generic 0000:0003:0001.000C: unknown main item tag 0x0 [ 127.376800][ T1339] hid-generic 0000:0003:0001.000C: hidraw1: HID v0.03 Device [syz0] on syz1 [ 127.414251][ T9030] fido_id[9030]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 127.433967][ T6020] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 127.595692][ T6020] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.601728][ T6020] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 127.605249][ T6020] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.608401][ T6020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.617534][ T9025] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 127.623394][ T6020] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.830103][ T1339] usb 6-1: USB disconnect, device number 16 [ 127.934180][ T39] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 128.103882][ T39] usb 9-1: Using ep0 maxpacket: 8 [ 128.106837][ T39] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.109417][ T39] usb 9-1: config 0 has no interface number 0 [ 128.111390][ T39] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.114957][ T39] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 128.118048][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.122111][ T39] usb 9-1: config 0 descriptor?? [ 128.128474][ T39] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 128.334861][ T39] usb 9-1: USB disconnect, device number 9 [ 130.213922][ T6020] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 130.364064][ T6020] usb 11-1: Using ep0 maxpacket: 8 [ 130.368489][ T6020] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.371806][ T6020] usb 11-1: config 0 has no interface number 0 [ 130.374748][ T6020] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.379399][ T6020] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.383084][ T6020] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.388607][ T6020] usb 11-1: config 0 descriptor?? [ 130.395788][ T6020] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 130.603437][ T6020] usb 11-1: USB disconnect, device number 5 [ 131.404077][ T6021] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 131.553899][ T6021] usb 9-1: Using ep0 maxpacket: 8 [ 131.557430][ T6021] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 131.561110][ T6021] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 131.567268][ T6021] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 131.570636][ T6021] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 131.574451][ T6021] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 131.577884][ T6021] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.583483][ T6021] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.587259][ T6021] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.805439][ T6021] usb 9-1: usb_control_msg returned -32 [ 131.807277][ T6021] usbtmc 9-1:16.0: can't read capabilities [ 132.160705][ T9125] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -71 [ 132.164185][ T9125] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 132.167985][ T139] usb 9-1: USB disconnect, device number 10 [ 132.718376][ T9131] syzkaller1: entered promiscuous mode [ 132.720796][ T9131] syzkaller1: entered allmulticast mode [ 133.033904][ T6021] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 133.104000][ T6479] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 133.183945][ T6021] usb 6-1: Using ep0 maxpacket: 32 [ 133.187196][ T6021] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 133.190827][ T6021] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 133.195473][ T6021] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.199073][ T6021] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 133.204939][ T6021] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 133.207809][ T6021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.210369][ T6021] usb 6-1: Product: syz [ 133.211722][ T6021] usb 6-1: Manufacturer: syz [ 133.213225][ T6021] usb 6-1: SerialNumber: syz [ 133.218781][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 133.222309][ T6021] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input18 [ 133.254078][ T6479] usb 11-1: Using ep0 maxpacket: 8 [ 133.257880][ T6479] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 133.261313][ T6479] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 133.266793][ T6479] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 133.271090][ T6479] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 133.275798][ T6479] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 133.279985][ T6479] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.285379][ T6479] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.289108][ T6479] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.443979][ T6021] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 133.446694][ T6021] (id 0x00) [ 133.493920][ T6021] rc_core: IR keymap rc-imon-pad not found [ 133.495947][ T6021] Registered IR keymap rc-empty [ 133.497587][ T6021] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 133.501795][ T6021] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 133.505432][ T6479] usb 11-1: usb_control_msg returned -32 [ 133.507876][ T6479] usbtmc 11-1:16.0: can't read capabilities [ 133.644387][ T6021] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 133.649366][ T6021] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input19 [ 133.654740][ T6021] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:17> initialized [ 133.840390][ T1339] usb 6-1: USB disconnect, device number 17 [ 133.860291][ T9150] usbtmc 11-1:16.0: send_request_dev_dep_msg_in returned -71 [ 133.863339][ T9150] usbtmc 11-1:16.0: usb_control_msg returned -32 [ 133.867675][ T6020] usb 11-1: USB disconnect, device number 6 [ 134.444137][ T9163] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.1260'. [ 134.447106][ T9163] netlink: Unknown conntrack attr (type=2304, max=9) [ 135.293938][ T34] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 135.454000][ T34] usb 11-1: Using ep0 maxpacket: 16 [ 135.458584][ T34] usb 11-1: config 0 has no interfaces? [ 135.463245][ T34] usb 11-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 135.467678][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.471238][ T34] usb 11-1: Product: syz [ 135.473211][ T34] usb 11-1: Manufacturer: syz [ 135.475822][ T34] usb 11-1: SerialNumber: syz [ 135.480573][ T34] usb 11-1: config 0 descriptor?? [ 135.692010][ T9206] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1278'. [ 135.697626][ T39] usb 11-1: USB disconnect, device number 7 [ 135.820565][ T9220] overlayfs: failed to clone upperpath [ 135.946635][ T9228] overlayfs: failed to clone upperpath [ 136.299180][ T9268] netlink: 'syz.6.1302': attribute type 2 has an invalid length. [ 136.303348][ T9268] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1302'. [ 136.613935][ T6020] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 136.783893][ T6020] usb 6-1: Using ep0 maxpacket: 16 [ 136.787528][ T6020] usb 6-1: config 0 has no interfaces? [ 136.791646][ T6020] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 136.794923][ T6020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.798208][ T6020] usb 6-1: Product: syz [ 136.799884][ T6020] usb 6-1: Manufacturer: syz [ 136.801537][ T6020] usb 6-1: SerialNumber: syz [ 136.804699][ T6020] usb 6-1: config 0 descriptor?? [ 136.957125][ T40] audit: type=1804 audit(1773733432.183:91): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1303" name="file1" dev="tmpfs" ino=1824 res=1 errno=0 [ 136.977393][ T40] audit: type=1326 audit(1773733432.203:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.6.1305" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701ef6c code=0x0 [ 137.053759][ T9270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1310'. [ 137.057812][ T34] usb 6-1: USB disconnect, device number 18 [ 137.546591][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.549348][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.744213][ T40] audit: type=1804 audit(1773733432.973:93): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1319" name="/newroot/308/file1" dev="tmpfs" ino=1648 res=1 errno=0 [ 138.621612][ T40] audit: type=1326 audit(1773733433.843:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.6.1351" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701ef6c code=0x0 [ 139.421573][ T9404] netlink: 'syz.6.1356': attribute type 4 has an invalid length. [ 139.424244][ T9404] netlink: 'syz.6.1356': attribute type 8 has an invalid length. [ 139.427039][ T9404] netlink: 'syz.6.1356': attribute type 1 has an invalid length. [ 139.429552][ T9404] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1356'. [ 139.432545][ T9404] NCSI netlink: No device for ifindex 0 [ 140.424106][ T53] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 140.574015][ T53] usb 11-1: Using ep0 maxpacket: 8 [ 140.576997][ T53] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.580384][ T53] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.583554][ T53] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.587691][ T53] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.593568][ T53] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.597500][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.821163][ T53] usb 11-1: GET_CAPABILITIES returned 0 [ 140.823031][ T53] usbtmc 11-1:16.0: can't read capabilities [ 141.027305][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.031401][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.035387][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.039681][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.043734][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.047307][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.050844][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.054082][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.058052][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.061855][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.064838][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.067704][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.070661][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.073597][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.076891][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.079785][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.084613][ T39] usb 11-1: USB disconnect, device number 8 [ 141.433924][ T39] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 141.593886][ T39] usb 9-1: Using ep0 maxpacket: 8 [ 141.597338][ T39] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.601506][ T39] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 141.607467][ T39] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 141.611001][ T39] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 141.614698][ T39] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 141.617590][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.627728][ T39] hub 9-1:1.0: bad descriptor, ignoring hub [ 141.630429][ T39] hub 9-1:1.0: probe with driver hub failed with error -5 [ 141.640731][ T39] cdc_wdm 9-1:1.0: skipping garbage [ 141.642575][ T39] cdc_wdm 9-1:1.0: skipping garbage [ 141.645455][ T39] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 141.647656][ T39] cdc_wdm 9-1:1.0: Unknown control protocol [ 141.765598][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 142.552244][ T9470] usb 9-1: reset high-speed USB device number 11 using dummy_hcd [ 142.691104][ T9531] overlayfs: failed to clone upperpath [ 142.716862][ T9470] usb 9-1: device firmware changed [ 142.720524][ T9470] cdc_wdm 9-1:1.0: Error autopm - -16 [ 142.722652][ T34] usb 9-1: USB disconnect, device number 11 [ 142.853954][ T34] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 142.860382][ T39] libceph: connect (1)[c::]:6789 error -101 [ 142.862528][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 142.908793][ T6002] libceph: connect (1)[c::]:6789 error -101 [ 142.910972][ T6002] libceph: mon0 (1)[c::]:6789 connect error [ 143.003919][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 143.024886][ T34] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.028093][ T34] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.031510][ T34] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.036904][ T34] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 143.040526][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.049667][ T34] hub 9-1:1.0: bad descriptor, ignoring hub [ 143.051998][ T34] hub 9-1:1.0: probe with driver hub failed with error -5 [ 143.054768][ T34] cdc_wdm 9-1:1.0: skipping garbage [ 143.056964][ T34] cdc_wdm 9-1:1.0: skipping garbage [ 143.058802][ T34] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 143.122444][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1421'. [ 143.132302][ T9547] batadv_slave_0: entered promiscuous mode [ 143.134177][ T39] libceph: connect (1)[c::]:6789 error -101 [ 143.136443][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 143.140625][ T9546] batadv_slave_0: left promiscuous mode [ 143.164163][ T34] libceph: connect (1)[c::]:6789 error -101 [ 143.167560][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 143.184632][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1421'. [ 143.364478][ T39] usb 9-1: USB disconnect, device number 12 [ 143.645306][ T39] libceph: connect (1)[c::]:6789 error -101 [ 143.647676][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 143.674675][ T6002] libceph: connect (1)[c::]:6789 error -101 [ 143.676912][ T6002] libceph: mon0 (1)[c::]:6789 connect error [ 143.690310][ T9538] ceph: No mds server is up or the cluster is laggy [ 143.693173][ T9541] ceph: No mds server is up or the cluster is laggy [ 143.765359][ T9577] overlayfs: failed to clone lowerpath [ 143.773518][ T9577] overlayfs: failed to clone lowerpath [ 144.243099][ T9606] overlayfs: invalid origin (00000079000000050000000000000000000000000000000000000001000000000000000000000000000000050000000000000000000000000000000000000000) [ 144.599576][ T9638] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.1450'. [ 144.877675][ T40] audit: type=1326 audit(1773733440.103:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.1.1457" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdef6c code=0x0 [ 145.320633][ T9692] IPv4: Oversized IP packet from 127.202.26.0 [ 145.625491][ T40] audit: type=1326 audit(1773733440.853:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.0.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7fc00000 [ 146.253734][ T40] audit: type=1326 audit(1773733441.473:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.0.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f5cab code=0x7fc00000 [ 147.324706][ T9745] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1491'. [ 147.534967][ T40] audit: type=1326 audit(1773733442.763:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9744 comm="syz.1.1482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7fc00000 [ 148.084017][ T6002] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 148.155516][ T40] audit: type=1326 audit(1773733443.383:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9744 comm="syz.1.1482" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7115cab code=0x7fc00000 [ 148.233979][ T6002] usb 9-1: Using ep0 maxpacket: 8 [ 148.238316][ T6002] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 148.241689][ T6002] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 148.245581][ T6002] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 148.249109][ T6002] usb 9-1: config 250 has no interface number 0 [ 148.251324][ T6002] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 148.255225][ T6002] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 148.259542][ T6002] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.264138][ T6002] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 148.268774][ T6002] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 148.273516][ T6002] usb 9-1: config 250 interface 228 has no altsetting 0 [ 148.278492][ T6002] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 148.282648][ T6002] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 148.286533][ T6002] usb 9-1: Product: syz [ 148.288384][ T6002] usb 9-1: SerialNumber: syz [ 148.299098][ T6002] hub 9-1:250.228: bad descriptor, ignoring hub [ 148.301912][ T6002] hub 9-1:250.228: probe with driver hub failed with error -5 [ 148.501366][ T6002] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 149.385693][ T9759] usb 9-1: reset high-speed USB device number 13 using dummy_hcd [ 150.054694][ T6479] usb 9-1: USB disconnect, device number 13 [ 150.059207][ T6479] usblp0: removed [ 151.974179][ T6021] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 152.126125][ T6021] usb 9-1: config 0 has no interfaces? [ 152.130108][ T6021] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.134166][ T6021] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.138367][ T6021] usb 9-1: Product: syz [ 152.140235][ T6021] usb 9-1: Manufacturer: syz [ 152.144526][ T6021] usb 9-1: config 0 descriptor?? [ 152.352638][ T6020] usb 9-1: USB disconnect, device number 14 [ 152.375664][ T9812] overlayfs: failed to clone upperpath [ 153.014038][ T1339] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 153.175578][ T1339] usb 9-1: config 0 has no interfaces? [ 153.179222][ T1339] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.182297][ T1339] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.184978][ T1339] usb 9-1: Product: syz [ 153.186428][ T1339] usb 9-1: Manufacturer: syz [ 153.189388][ T1339] usb 9-1: config 0 descriptor?? [ 153.325314][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1517'. [ 153.363614][ T9828] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 153.384683][ T9828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.400730][ T6021] usb 9-1: USB disconnect, device number 15 [ 153.426660][ T9828] bond2: (slave geneve3): making interface the new active one [ 153.430719][ T9828] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 153.435752][ T692] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 153.441673][ T692] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 153.451871][ T692] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 153.462080][ T692] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 153.626947][ T9846] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.700048][ T9846] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.800011][ T9846] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.908059][ T9846] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.001779][ T692] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.012817][ T692] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.026478][ T46] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.034502][ T46] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.210501][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1535'. [ 154.262118][ T9875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1535'. [ 154.396710][ T9881] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.401993][ T9881] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 154.517871][ T9881] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.521657][ T9881] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 154.599328][ T9881] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.602998][ T9881] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 154.695501][ T9881] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.699506][ T9881] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 154.810382][ T692] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 154.815310][ T692] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.831480][ T692] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 154.836178][ T692] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.849410][ T692] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 154.852691][ T692] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.862957][ T692] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 154.865645][ T692] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.942298][ T9907] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1551'. [ 154.994321][ T9914] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1551'. [ 155.071157][ T9461] team0: Port device syz_tun removed [ 155.130475][ T9924] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1566'. [ 155.138711][ T6479] libceph: connect (1)[c::]:6789 error -101 [ 155.141497][ T6479] libceph: mon0 (1)[c::]:6789 connect error [ 155.188388][ T34] libceph: connect (1)[c::]:6789 error -101 [ 155.190739][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 155.286948][ T46] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 155.366022][ T46] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 155.404261][ T6479] libceph: connect (1)[c::]:6789 error -101 [ 155.407036][ T6479] libceph: mon0 (1)[c::]:6789 connect error [ 155.421113][ T46] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 155.444257][ T34] libceph: connect (1)[c::]:6789 error -101 [ 155.446772][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 155.489222][ T46] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 155.538996][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.542587][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.546429][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.549269][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.555704][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.693028][ T46] bridge_slave_1: left allmulticast mode [ 155.696023][ T46] bridge_slave_1: left promiscuous mode [ 155.698595][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.706627][ T46] bridge_slave_0: left allmulticast mode [ 155.709205][ T46] bridge_slave_0: left promiscuous mode [ 155.711282][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.802934][ T46] bond2 (unregistering): (slave geneve3): Releasing active interface [ 155.810923][ T46] bond1 (unregistering): (slave geneve2): Releasing active interface [ 155.898091][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.902752][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.908066][ T46] bond0 (unregistering): Released all slaves [ 155.915246][ T46] bond1 (unregistering): Released all slaves [ 155.924324][ T6479] libceph: connect (1)[c::]:6789 error -101 [ 155.927593][ T6479] libceph: mon0 (1)[c::]:6789 connect error [ 155.930005][ T46] bond2 (unregistering): Released all slaves [ 155.954307][ T34] libceph: connect (1)[c::]:6789 error -101 [ 155.957249][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 155.966790][ T9931] ceph: No mds server is up or the cluster is laggy [ 155.967365][ T9926] ceph: No mds server is up or the cluster is laggy [ 156.031462][ T46] tipc: Left network mode [ 156.042997][ T9948] chnl_net:caif_netlink_parms(): no params data found [ 156.144005][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.147165][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.150331][ T9948] bridge_slave_0: entered allmulticast mode [ 156.154367][ T9948] bridge_slave_0: entered promiscuous mode [ 156.158797][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.161235][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.163555][ T9948] bridge_slave_1: entered allmulticast mode [ 156.167670][ T9948] bridge_slave_1: entered promiscuous mode [ 156.213793][ T9948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.222450][ T9948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.251674][ T9948] team0: Port device team_slave_0 added [ 156.257104][ T9948] team0: Port device team_slave_1 added [ 156.280657][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.282890][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.292424][ T9948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.299461][ T46] hsr_slave_0: left promiscuous mode [ 156.302428][ T46] hsr_slave_1: left promiscuous mode [ 156.305477][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.309159][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.406491][ T46] team0 (unregistering): Port device team_slave_1 removed [ 156.421361][ T46] team0 (unregistering): Port device team_slave_0 removed [ 156.486216][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.489114][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.497624][ T9948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.528797][ T9948] hsr_slave_0: entered promiscuous mode [ 156.531325][ T9948] hsr_slave_1: entered promiscuous mode [ 156.534004][ T9948] debugfs: 'hsr0' already exists in 'hsr' [ 156.536409][ T9948] Cannot create hsr debugfs directory [ 156.626029][ T9948] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 156.637080][ T9948] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 156.645450][ T9948] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 156.651831][ T9948] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 156.722111][ T9948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.734358][ T9948] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.739634][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.742841][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.752109][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.755438][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.904795][ T9948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.053268][ T9948] veth0_vlan: entered promiscuous mode [ 157.061006][ T9948] veth1_vlan: entered promiscuous mode [ 157.076157][ T9948] veth0_macvtap: entered promiscuous mode [ 157.080347][ T9948] veth1_macvtap: entered promiscuous mode [ 157.089001][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.095881][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.103274][ T46] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.106487][ T46] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.114849][ T46] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.117692][ T46] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.149206][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.152003][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.163291][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.166738][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.275675][T10018] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1571'. [ 157.322434][T10020] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.330820][T10024] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1571'. [ 157.402298][T10020] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.444405][T10035] Bluetooth: hci0: invalid len left 7, exp >= 131 [ 157.475511][T10020] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.486461][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1578'. [ 157.562526][T10020] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.623979][ T63] Bluetooth: hci3: command tx timeout [ 157.698966][T10047] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.1587'. [ 157.838412][ T40] audit: type=1326 audit(1773733453.063:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.1590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04f6c code=0x7ffc0000 [ 157.848705][ T40] audit: type=1326 audit(1773733453.063:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.1590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04f6c code=0x7ffc0000 [ 157.858586][ T40] audit: type=1326 audit(1773733453.073:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.1590" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f04f6c code=0x7ffc0000 [ 157.874041][ T40] audit: type=1326 audit(1773733453.073:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.1590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04f6c code=0x7ffc0000 [ 157.883983][ T40] audit: type=1326 audit(1773733453.073:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.1590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04f6c code=0x7ffc0000 [ 157.893369][ T40] audit: type=1326 audit(1773733453.073:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.1590" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f04f6c code=0x7ffc0000 [ 157.904463][ T40] audit: type=1326 audit(1773733453.073:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.1590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04f6c code=0x7ffc0000 [ 157.913652][ T40] audit: type=1326 audit(1773733453.073:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.1590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04f6c code=0x7ffc0000 [ 157.923695][ T40] audit: type=1326 audit(1773733453.073:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.1590" exe="/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7f04f6c code=0x7ffc0000 [ 157.933169][ T40] audit: type=1326 audit(1773733453.073:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.1590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04f6c code=0x7ffc0000 [ 159.101963][T10078] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 159.295082][ T692] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.302691][ T692] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.312413][ T692] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.324986][ T692] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.704240][ T63] Bluetooth: hci3: command tx timeout [ 160.472839][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 160.482045][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 160.602456][T10140] Set syz1 is full, maxelem 0 reached [ 160.739872][T10155] team0: entered promiscuous mode [ 160.742196][T10155] team_slave_0: entered promiscuous mode [ 160.745723][T10155] team_slave_1: entered promiscuous mode [ 160.749413][T10154] team0: left promiscuous mode [ 160.751578][T10154] team_slave_0: left promiscuous mode [ 160.754524][T10154] team_slave_1: left promiscuous mode [ 161.224133][ T24] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 161.374178][ T24] usb 12-1: Using ep0 maxpacket: 8 [ 161.377332][ T24] usb 12-1: config index 0 descriptor too short (expected 5924, got 36) [ 161.379980][ T24] usb 12-1: config 250 has an invalid interface number: 228 but max is -1 [ 161.382724][ T24] usb 12-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 161.386223][ T24] usb 12-1: config 250 has no interface number 0 [ 161.388293][ T24] usb 12-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 161.391993][ T24] usb 12-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 161.397377][ T24] usb 12-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.400616][ T24] usb 12-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 161.404995][ T24] usb 12-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 161.409445][ T24] usb 12-1: config 250 interface 228 has no altsetting 0 [ 161.412842][ T24] usb 12-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 161.416145][ T24] usb 12-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 161.422789][ T24] usb 12-1: Product: syz [ 161.424493][ T24] usb 12-1: SerialNumber: syz [ 161.431522][ T24] hub 12-1:250.228: bad descriptor, ignoring hub [ 161.433717][ T24] hub 12-1:250.228: probe with driver hub failed with error -5 [ 161.655643][ T24] usblp 12-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 161.732827][T10218] tipc: Started in network mode [ 161.734943][T10218] tipc: Node identity e2589d89935e, cluster identity 4711 [ 161.737383][T10218] tipc: Enabled bearer , priority 0 [ 161.750956][T10218] tipc: Disabling bearer [ 161.784508][ T63] Bluetooth: hci3: command tx timeout [ 162.574430][T10168] usb 12-1: reset high-speed USB device number 2 using dummy_hcd [ 162.668525][T10235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.702243][T10241] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 162.753545][T10235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.858943][T10235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.971414][T10235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.060852][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.069960][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.080225][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.093781][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.245615][ T34] usb 12-1: USB disconnect, device number 2 [ 163.250546][ T34] usblp0: removed [ 163.874792][ T63] Bluetooth: hci3: command tx timeout [ 164.010012][T10309] tipc: Enabled bearer , priority 0 [ 164.020750][T10309] tipc: Disabling bearer [ 164.180632][T10324] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1696'. [ 164.193226][T10324] vxlan0: entered promiscuous mode [ 164.196896][ T61] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.204310][ T61] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.213359][ T61] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.216425][ T61] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.929788][T10356] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1712'. [ 165.075942][T10364] netlink: 'syz.6.1716': attribute type 12 has an invalid length. [ 165.079392][T10364] netlink: 'syz.6.1716': attribute type 29 has an invalid length. [ 165.083016][T10364] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1716'. [ 165.088123][T10364] netlink: 'syz.6.1716': attribute type 2 has an invalid length. [ 165.091502][T10364] netlink: 23 bytes leftover after parsing attributes in process `syz.6.1716'. [ 165.260922][ T63] Bluetooth: hci0: Unable to find connection for big 0x00 [ 165.467676][T10391] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 165.468356][T10393] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1725'. [ 165.482486][T10393] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1725'. [ 165.802209][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1732'. [ 166.168442][T10430] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 166.171182][T10430] syzkaller1: Refused to change device type [ 166.406752][T10442] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 166.449983][T10441] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.453501][T10441] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.561129][T10441] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.564812][T10441] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.645318][T10441] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.648801][T10441] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.684131][ T24] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 166.739072][T10441] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.743706][T10441] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.834073][ T24] usb 11-1: Using ep0 maxpacket: 32 [ 166.838229][ T24] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 166.842764][ T24] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 166.849151][ T46] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.852721][ T46] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.856508][ T24] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.863546][ T24] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 166.870848][ T46] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.874998][ T46] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.884190][ T24] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 166.888278][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.889917][ T13] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.895927][ T13] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.900050][ T24] usb 11-1: Product: syz [ 166.901923][ T24] usb 11-1: Manufacturer: syz [ 166.904237][ T24] usb 11-1: SerialNumber: syz [ 166.906519][ T13] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.909499][ T13] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.920409][ C2] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 166.925742][ T139] libceph: connect (1)[c::]:6789 error -101 [ 166.927781][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input20 [ 166.927796][ T139] libceph: mon0 (1)[c::]:6789 connect error [ 167.009823][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 167.011918][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 167.153936][ T24] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 167.156756][ T24] (id 0x00) [ 167.184196][ T139] libceph: connect (1)[c::]:6789 error -101 [ 167.186353][ T139] libceph: mon0 (1)[c::]:6789 connect error [ 167.264505][ T24] rc_core: IR keymap rc-imon-pad not found [ 167.270110][ T24] Registered IR keymap rc-empty [ 167.273617][ T24] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 167.284187][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 167.286243][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 167.288236][ T24] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 167.355218][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0 [ 167.362423][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0/input21 [ 167.380673][ T24] imon 11-1:155.0: iMON device (15c2:ffdc, intf0) on usb<11:9> initialized [ 167.592209][ T34] usb 11-1: USB disconnect, device number 9 [ 167.592296][T10444] imon:send_packet: packet tx failed (-71) [ 167.609076][T10487] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.612368][T10487] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.628477][T10444] imon:vfd_write: send packet #0 failed [ 167.683503][T10487] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.688890][T10487] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.694455][ T139] libceph: connect (1)[c::]:6789 error -101 [ 167.704031][ T139] libceph: mon0 (1)[c::]:6789 connect error [ 167.751500][T10459] ceph: No mds server is up or the cluster is laggy [ 167.752136][T10462] ceph: No mds server is up or the cluster is laggy [ 167.771645][T10487] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.776485][T10487] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.837460][T10487] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.841104][T10487] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.346886][ T63] Bluetooth: hci2: Unable to find connection for big 0x00 [ 168.562634][T10519] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1767'. [ 169.482703][T10556] netlink: 'syz.6.1791': attribute type 3 has an invalid length. [ 169.527514][T10558] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 169.529486][T10558] syzkaller1: Refused to change device type [ 169.750007][T10573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1797'. [ 169.760999][T10573] vxlan0: entered promiscuous mode [ 169.765606][ T46] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.769394][ T46] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.772662][ T46] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.775570][ T46] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.026635][ T46] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.029366][ T46] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.036531][ T46] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.039351][ T46] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.047870][ T89] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.050662][ T89] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.058135][ T89] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.060922][ T89] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.516804][T10608] netlink: 'syz.7.1804': attribute type 3 has an invalid length. [ 173.575489][T10695] netlink: 'syz.6.1842': attribute type 3 has an invalid length. [ 173.938200][ T24] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 174.095738][ T24] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.100827][ T24] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 174.105282][ T24] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 174.109249][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.116906][T10707] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.121143][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.217240][T10749] fuse: Bad value for 'fd' [ 174.326884][ T24] usb 9-1: USB disconnect, device number 16 [ 175.085041][T10780] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.149450][T10780] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.209338][T10780] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.294872][T10780] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.334189][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 175.337254][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 175.376173][ T1182] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.379182][ T1182] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.379390][ T53] libceph: connect (1)[c::]:6789 error -101 [ 175.385008][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 175.392755][ T1182] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.396329][ T1182] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.594297][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 175.597073][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 175.654301][ T53] libceph: connect (1)[c::]:6789 error -101 [ 175.656688][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 175.802454][T10824] netlink: 'syz.4.1898': attribute type 2 has an invalid length. [ 176.053893][ T53] usb 11-1: new full-speed USB device number 10 using dummy_hcd [ 176.114339][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 176.117117][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 176.155716][T10793] ceph: No mds server is up or the cluster is laggy [ 176.158039][T10788] ceph: No mds server is up or the cluster is laggy [ 176.164710][ T29] libceph: connect (1)[c::]:6789 error -101 [ 176.167433][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 176.224932][ T53] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.228099][ T53] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.232270][ T53] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 176.235603][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.449790][ T53] usb 11-1: usb_control_msg returned -32 [ 176.451892][ T53] usbtmc 11-1:16.0: can't read capabilities [ 176.887440][ T1339] libceph: connect (1)[c::]:6789 error -101 [ 176.889595][ T1339] libceph: mon0 (1)[c::]:6789 connect error [ 176.941193][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 176.944934][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 177.133108][T10880] netlink: 'syz.1.1921': attribute type 12 has an invalid length. [ 177.135946][T10880] netlink: 'syz.1.1921': attribute type 29 has an invalid length. [ 177.138582][T10880] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1921'. [ 177.141558][T10880] netlink: 'syz.1.1921': attribute type 2 has an invalid length. [ 177.147695][ T1339] libceph: connect (1)[c::]:6789 error -101 [ 177.150250][ T1339] libceph: mon0 (1)[c::]:6789 connect error [ 177.152115][T10880] netlink: 'syz.1.1921': attribute type 3 has an invalid length. [ 177.156405][T10880] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1921'. [ 177.204447][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 177.207296][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 177.233749][T10889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1925'. [ 177.380519][T10899] sit0: entered allmulticast mode [ 177.388297][T10899] pim6reg: entered allmulticast mode [ 177.654348][ T1339] libceph: connect (1)[c::]:6789 error -101 [ 177.656506][ T1339] libceph: mon0 (1)[c::]:6789 connect error [ 177.715013][ T139] libceph: connect (1)[c::]:6789 error -101 [ 177.717132][ T139] libceph: mon0 (1)[c::]:6789 connect error [ 177.718163][T10861] ceph: No mds server is up or the cluster is laggy [ 177.722553][T10868] ceph: No mds server is up or the cluster is laggy [ 177.793216][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 177.793230][ T40] audit: type=1326 audit(1773733473.013:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1941" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704ef88 code=0x7ffc0000 [ 177.805803][ T40] audit: type=1326 audit(1773733473.013:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1941" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704ef88 code=0x7ffc0000 [ 177.813648][T10928] sit0: entered allmulticast mode [ 177.816481][ T40] audit: type=1326 audit(1773733473.013:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1941" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704ef88 code=0x7ffc0000 [ 177.823087][T10928] pim6reg: entered allmulticast mode [ 177.823600][ T40] audit: type=1326 audit(1773733473.013:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1941" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704ef88 code=0x7ffc0000 [ 177.833309][ T40] audit: type=1326 audit(1773733473.013:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1941" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704ef88 code=0x7ffc0000 [ 177.840796][ T40] audit: type=1326 audit(1773733473.023:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1941" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704ef88 code=0x7ffc0000 [ 177.849467][ T40] audit: type=1326 audit(1773733473.023:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1941" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704ef88 code=0x7ffc0000 [ 177.857627][ T40] audit: type=1326 audit(1773733473.023:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1941" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704ef88 code=0x7ffc0000 [ 177.866124][ T40] audit: type=1326 audit(1773733473.023:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1941" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704ef88 code=0x7ffc0000 [ 177.873710][ T40] audit: type=1326 audit(1773733473.023:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1941" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704ef88 code=0x7ffc0000 [ 178.231282][T10947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1952'. [ 178.367323][T10961] netlink: 'syz.4.1959': attribute type 13 has an invalid length. [ 178.388302][T10961] gretap0: refused to change device tx_queue_len [ 178.396829][T10961] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.440863][T10967] fuse: Bad value for 'fd' [ 178.842198][ T6020] usb 11-1: USB disconnect, device number 10 [ 179.480061][T11044] netlink: 'syz.6.1995': attribute type 13 has an invalid length. [ 179.954533][ T139] libceph: connect (1)[c::]:6789 error -101 [ 179.957021][ T139] libceph: mon0 (1)[c::]:6789 connect error [ 180.054072][T11067] ceph: No mds server is up or the cluster is laggy [ 180.115238][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2008'. [ 180.592803][ T63] Bluetooth: hci0: command 0x2016 tx timeout [ 180.934017][ T6021] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 181.093919][ T6021] usb 6-1: Using ep0 maxpacket: 8 [ 181.098192][ T6021] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 181.102934][ T6021] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.108076][ T6021] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.113053][ T6021] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.117773][ T6021] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.123637][ T6021] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 181.127665][ T6021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.297121][T11131] netlink: 'syz.7.2030': attribute type 9 has an invalid length. [ 181.300034][T11131] netlink: 'syz.7.2030': attribute type 11 has an invalid length. [ 181.302859][T11131] netlink: 'syz.7.2030': attribute type 12 has an invalid length. [ 181.306008][T11131] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.2030'. [ 181.309175][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2030'. [ 181.346676][ T6021] usb 6-1: usb_control_msg returned -32 [ 181.349106][ T6021] usbtmc 6-1:16.0: can't read capabilities [ 181.426717][T11137] tls_set_device_offload: netdev not found [ 181.772813][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2037'. [ 181.912455][ T139] usb 6-1: USB disconnect, device number 19 [ 182.305265][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2047'. [ 182.308497][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2047'. [ 182.432871][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2052'. [ 182.477672][ T5943] block nbd1: Receive control failed (result -107) [ 182.482497][ T5943] [ 182.483320][ T5943] ====================================================== [ 182.485571][ T5943] WARNING: possible circular locking dependency detected [ 182.487839][ T5943] syzkaller #0 Tainted: G L [ 182.489903][ T5943] ------------------------------------------------------ [ 182.492122][ T5943] kworker/u33:4/5943 is trying to acquire lock: [ 182.494117][ T5943] ffff888058a54220 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x67/0x410 [ 182.496935][ T5943] [ 182.496935][ T5943] but task is already holding lock: [ 182.499310][ T5943] ffff888020b66e70 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 182.502092][ T5943] [ 182.502092][ T5943] which lock already depends on the new lock. [ 182.502092][ T5943] [ 182.505323][ T5943] [ 182.505323][ T5943] the existing dependency chain (in reverse order) is: [ 182.508251][ T5943] [ 182.508251][ T5943] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 182.510722][ T5943] __mutex_lock+0x1a2/0x1b90 [ 182.512378][ T5943] nbd_queue_rq+0x428/0x1080 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 182.514059][ T5943] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 182.516438][ T5943] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 182.518680][ T5943] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 182.520841][ T5943] blk_mq_run_hw_queue+0x23c/0x670 [ 182.522892][ T5943] blk_mq_dispatch_list+0x51d/0x1360 [ 182.525098][ T5943] blk_mq_flush_plug_list+0x130/0x600 [ 182.527228][ T5943] __blk_flush_plug+0x2c4/0x4b0 [ 182.529484][ T5943] __submit_bio+0x584/0x6c0 [ 182.531525][ T5943] submit_bio_noacct_nocheck+0x562/0xc10 [ 182.533525][ T5943] submit_bio_noacct+0xd17/0x2010 [ 182.535444][ T5943] submit_bh_wbc+0x59c/0x770 [ 182.537330][ T5943] block_read_full_folio+0x264/0x8e0 [ 182.539413][ T5943] filemap_read_folio+0xfc/0x3b0 [ 182.541209][ T5943] do_read_cache_folio+0x2d7/0x6b0 [ 182.543125][ T5943] read_part_sector+0xd1/0x370 [ 182.544857][ T5943] adfspart_check_ICS+0x93/0x910 [ 182.546654][ T5943] bdev_disk_changed+0x7f8/0xc80 [ 182.548457][ T5943] blkdev_get_whole+0x187/0x290 [ 182.550218][ T5943] bdev_open+0x2c7/0xe40 [ 182.551784][ T5943] blkdev_open+0x34e/0x4f0 [ 182.553615][ T5943] do_dentry_open+0x6d8/0x1660 [ 182.555831][ T5943] vfs_open+0x82/0x3f0 [ 182.557635][ T5943] path_openat+0x208c/0x31a0 [ 182.559553][ T5943] do_file_open+0x20e/0x430 [ 182.561322][ T5943] do_sys_openat2+0x10d/0x1e0 [ 182.563428][ T5943] __x64_sys_openat+0x12d/0x210 [ 182.565644][ T5943] do_syscall_64+0x106/0xf80 [ 182.567346][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.569583][ T5943] [ 182.569583][ T5943] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 182.571964][ T5943] __mutex_lock+0x1a2/0x1b90 [ 182.573629][ T5943] nbd_queue_rq+0xba/0x1080 [ 182.575360][ T5943] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 182.577297][ T5943] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 182.579454][ T5943] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 182.581494][ T5943] blk_mq_run_hw_queue+0x23c/0x670 [ 182.583264][ T5943] blk_mq_dispatch_list+0x51d/0x1360 [ 182.585387][ T5943] blk_mq_flush_plug_list+0x130/0x600 [ 182.587779][ T5943] __blk_flush_plug+0x2c4/0x4b0 [ 182.589573][ T5943] __submit_bio+0x584/0x6c0 [ 182.591452][ T5943] submit_bio_noacct_nocheck+0x562/0xc10 [ 182.593451][ T5943] submit_bio_noacct+0xd17/0x2010 [ 182.595564][ T5943] submit_bh_wbc+0x59c/0x770 [ 182.597270][ T5943] block_read_full_folio+0x264/0x8e0 [ 182.599424][ T5943] filemap_read_folio+0xfc/0x3b0 [ 182.601576][ T5943] do_read_cache_folio+0x2d7/0x6b0 [ 182.603872][ T5943] read_part_sector+0xd1/0x370 [ 182.605997][ T5943] adfspart_check_ICS+0x93/0x910 [ 182.608175][ T5943] bdev_disk_changed+0x7f8/0xc80 [ 182.610364][ T5943] blkdev_get_whole+0x187/0x290 [ 182.612552][ T5943] bdev_open+0x2c7/0xe40 [ 182.614228][ T5943] blkdev_open+0x34e/0x4f0 [ 182.615845][ T5943] do_dentry_open+0x6d8/0x1660 [ 182.617976][ T5943] vfs_open+0x82/0x3f0 [ 182.619878][ T5943] path_openat+0x208c/0x31a0 [ 182.622005][ T5943] do_file_open+0x20e/0x430 [ 182.623634][ T5943] do_sys_openat2+0x10d/0x1e0 [ 182.625720][ T5943] __x64_sys_openat+0x12d/0x210 [ 182.627938][ T5943] do_syscall_64+0x106/0xf80 [ 182.629730][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.631910][ T5943] [ 182.631910][ T5943] -> #4 (set->srcu){.+.+}-{0:0}: [ 182.634127][ T5943] __synchronize_srcu+0xa1/0x2a0 [ 182.635855][ T5943] blk_mq_quiesce_queue+0x149/0x1c0 [ 182.637646][ T5943] elevator_switch+0x17b/0x7e0 [ 182.639337][ T5943] elevator_change+0x352/0x530 [ 182.640961][ T5943] elevator_set_default+0x29e/0x360 [ 182.642909][ T5943] blk_register_queue+0x412/0x590 [ 182.644873][ T5943] __add_disk+0x73f/0xe40 [ 182.646624][ T5943] add_disk_fwnode+0x118/0x5c0 [ 182.648701][ T5943] nbd_dev_add+0x77a/0xb10 [ 182.650618][ T5943] nbd_init+0x291/0x2b0 [ 182.652578][ T5943] do_one_initcall+0x11d/0x760 [ 182.654414][ T5943] kernel_init_freeable+0x6e5/0x7a0 [ 182.656173][ T5943] kernel_init+0x1f/0x1e0 [ 182.657929][ T5943] ret_from_fork+0x754/0xd80 [ 182.659836][ T5943] ret_from_fork_asm+0x1a/0x30 [ 182.661914][ T5943] [ 182.661914][ T5943] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 182.664836][ T5943] __mutex_lock+0x1a2/0x1b90 [ 182.666589][ T5943] elevator_change+0x1bc/0x530 [ 182.668197][ T5943] elevator_set_none+0x92/0xf0 [ 182.669881][ T5943] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 182.672097][ T5943] nbd_start_device+0x1a6/0xbd0 [ 182.673822][ T5943] nbd_genl_connect+0xff2/0x1a40 [ 182.675547][ T5943] genl_family_rcv_msg_doit+0x214/0x300 [ 182.677506][ T5943] genl_rcv_msg+0x560/0x800 [ 182.679143][ T5943] netlink_rcv_skb+0x159/0x420 [ 182.680813][ T5943] genl_rcv+0x28/0x40 [ 182.682279][ T5943] netlink_unicast+0x5aa/0x870 [ 182.683964][ T5943] netlink_sendmsg+0x8b0/0xda0 [ 182.685648][ T5943] ____sys_sendmsg+0x9e1/0xb70 [ 182.687316][ T5943] ___sys_sendmsg+0x190/0x1e0 [ 182.688912][ T5943] __sys_sendmsg+0x170/0x220 [ 182.690488][ T5943] __do_fast_syscall_32+0xe3/0x8c0 [ 182.692181][ T5943] do_fast_syscall_32+0x32/0x70 [ 182.693885][ T5943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.696003][ T5943] [ 182.696003][ T5943] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 182.698575][ T5943] blk_alloc_queue+0x610/0x790 [ 182.700220][ T5943] blk_mq_alloc_queue+0x174/0x290 [ 182.701984][ T5943] __blk_mq_alloc_disk+0x29/0x120 [ 182.703726][ T5943] nbd_dev_add+0x492/0xb10 [ 182.705267][ T5943] nbd_init+0x291/0x2b0 [ 182.706780][ T5943] do_one_initcall+0x11d/0x760 [ 182.708363][ T5943] kernel_init_freeable+0x6e5/0x7a0 [ 182.710177][ T5943] kernel_init+0x1f/0x1e0 [ 182.711717][ T5943] ret_from_fork+0x754/0xd80 [ 182.713367][ T5943] ret_from_fork_asm+0x1a/0x30 [ 182.715030][ T5943] [ 182.715030][ T5943] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 182.717307][ T5943] fs_reclaim_acquire+0xc4/0x100 [ 182.719021][ T5943] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 182.720968][ T5943] __alloc_skb+0x140/0x710 [ 182.722486][ T5943] tcp_stream_alloc_skb+0x34/0x660 [ 182.724181][ T5943] tcp_sendmsg_locked+0x1396/0x45e0 [ 182.725917][ T5943] tcp_sendmsg+0x2e/0x50 [ 182.727380][ T5943] inet_sendmsg+0xb9/0x140 [ 182.728988][ T5943] sock_write_iter+0x4ea/0x5a0 [ 182.731002][ T5943] vfs_write+0x6ac/0x1070 [ 182.732908][ T5943] ksys_write+0x1f8/0x250 [ 182.734602][ T5943] do_syscall_64+0x106/0xf80 [ 182.736452][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.738538][ T5943] [ 182.738538][ T5943] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 182.740933][ T5943] __lock_acquire+0x14b8/0x2630 [ 182.742655][ T5943] lock_acquire+0x1cf/0x380 [ 182.744251][ T5943] lock_sock_nested+0x41/0xf0 [ 182.745908][ T5943] inet_shutdown+0x67/0x410 [ 182.747453][ T5943] nbd_mark_nsock_dead+0xae/0x5c0 [ 182.749192][ T5943] recv_work+0x5fb/0x8c0 [ 182.750657][ T5943] process_one_work+0xa23/0x19a0 [ 182.752321][ T5943] worker_thread+0x5ef/0xe50 [ 182.753959][ T5943] kthread+0x370/0x450 [ 182.755441][ T5943] ret_from_fork+0x754/0xd80 [ 182.757114][ T5943] ret_from_fork_asm+0x1a/0x30 [ 182.758856][ T5943] [ 182.758856][ T5943] other info that might help us debug this: [ 182.758856][ T5943] [ 182.762051][ T5943] Chain exists of: [ 182.762051][ T5943] sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 182.762051][ T5943] [ 182.765907][ T5943] Possible unsafe locking scenario: [ 182.765907][ T5943] [ 182.768255][ T5943] CPU0 CPU1 [ 182.769955][ T5943] ---- ---- [ 182.771631][ T5943] lock(&nsock->tx_lock); [ 182.773045][ T5943] lock(&cmd->lock); [ 182.775108][ T5943] lock(&nsock->tx_lock); [ 182.777270][ T5943] lock(sk_lock-AF_INET); [ 182.778644][ T5943] [ 182.778644][ T5943] *** DEADLOCK *** [ 182.778644][ T5943] [ 182.781144][ T5943] 3 locks held by kworker/u33:4/5943: [ 182.782898][ T5943] #0: ffff88802736f148 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 182.786284][ T5943] #1: ffffc90003e1fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 182.789755][ T5943] #2: ffff888020b66e70 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 182.792628][ T5943] [ 182.792628][ T5943] stack backtrace: [ 182.794496][ T5943] CPU: 3 UID: 0 PID: 5943 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.794512][ T5943] Tainted: [L]=SOFTLOCKUP [ 182.794516][ T5943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.794523][ T5943] Workqueue: nbd1-recv recv_work [ 182.794534][ T5943] Call Trace: [ 182.794538][ T5943] [ 182.794543][ T5943] dump_stack_lvl+0x100/0x190 [ 182.794559][ T5943] print_circular_bug.cold+0x178/0x1c7 [ 182.794576][ T5943] check_noncircular+0x146/0x160 [ 182.794591][ T5943] __lock_acquire+0x14b8/0x2630 [ 182.794606][ T5943] lock_acquire+0x1cf/0x380 [ 182.794618][ T5943] ? inet_shutdown+0x67/0x410 [ 182.794635][ T5943] lock_sock_nested+0x41/0xf0 [ 182.794649][ T5943] ? inet_shutdown+0x67/0x410 [ 182.794665][ T5943] inet_shutdown+0x67/0x410 [ 182.794681][ T5943] nbd_mark_nsock_dead+0xae/0x5c0 [ 182.794697][ T5943] recv_work+0x5fb/0x8c0 [ 182.794706][ T5943] ? __lock_acquire+0xd73/0x2630 [ 182.794719][ T5943] ? __pfx_recv_work+0x10/0x10 [ 182.794728][ T5943] ? debug_object_deactivate+0x2e4/0x3b0 [ 182.794747][ T5943] ? rcu_is_watching+0x12/0xc0 [ 182.794763][ T5943] process_one_work+0xa23/0x19a0 [ 182.794779][ T5943] ? __pfx_process_one_work+0x10/0x10 [ 182.794796][ T5943] ? __pfx_recv_work+0x10/0x10 [ 182.794805][ T5943] worker_thread+0x5ef/0xe50 [ 182.794822][ T5943] ? kthread+0x13a/0x450 [ 182.794834][ T5943] ? __pfx_worker_thread+0x10/0x10 [ 182.794847][ T5943] kthread+0x370/0x450 [ 182.794861][ T5943] ? __pfx_kthread+0x10/0x10 [ 182.794874][ T5943] ret_from_fork+0x754/0xd80 [ 182.794890][ T5943] ? __pfx_ret_from_fork+0x10/0x10 [ 182.794905][ T5943] ? __switch_to+0x7b4/0x1120 [ 182.794915][ T5943] ? __pfx_kthread+0x10/0x10 [ 182.794929][ T5943] ret_from_fork_asm+0x1a/0x30 [ 182.794942][ T5943] [ 183.220110][ T89] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 183.224891][ T89] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 183.346685][ T89] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 183.349919][ T89] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 183.416375][ T89] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 183.419988][ T89] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 183.526857][ T89] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 183.530420][ T89] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 183.613313][ T89] bridge_slave_1: left allmulticast mode [ 183.615314][ T89] bridge_slave_1: left promiscuous mode [ 183.617231][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.620428][ T89] bridge_slave_0: left allmulticast mode [ 183.622358][ T89] bridge_slave_0: left promiscuous mode [ 183.624880][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.666592][ T89] bond4 (unregistering): (slave geneve4): Releasing active interface [ 183.670534][ T89] bond3 (unregistering): (slave geneve3): Releasing active interface [ 183.674318][ T89] bond1 (unregistering): (slave geneve2): Releasing active interface [ 183.766801][ T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.770884][ T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.774737][ T89] bond0 (unregistering): Released all slaves [ 183.778446][ T89] bond1 (unregistering): Released all slaves [ 183.784579][ T89] bond2 (unregistering): (slave lo): Releasing backup interface [ 183.788203][ T89] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 183.793187][ T89] bond2 (unregistering): Released all slaves [ 183.799980][ T89] bond3 (unregistering): Released all slaves [ 183.806249][ T89] bond4 (unregistering): Released all slaves [ 183.867198][ T89] tipc: Left network mode [ 184.070316][ T89] hsr_slave_0: left promiscuous mode [ 184.073153][ T89] hsr_slave_1: left promiscuous mode [ 184.075851][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.079204][ T89] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.082779][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.086550][ T89] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.092732][ T89] veth1_macvtap: left promiscuous mode [ 184.096242][ T89] veth0_macvtap: left promiscuous mode [ 184.098778][ T89] veth1_vlan: left promiscuous mode [ 184.101113][ T89] veth0_vlan: left promiscuous mode [ 184.192235][ T89] team0 (unregistering): Port device team_slave_1 removed [ 184.200557][ T89] team0 (unregistering): Port device team_slave_0 removed