last executing test programs: 6m48.422053224s ago: executing program 1 (id=8165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 6m48.309314663s ago: executing program 1 (id=8167): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8d8, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8c4, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x60, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x874, 0x2, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x4000001, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0x6cb, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x5, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x1, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xd, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc0, 0x14c6, 0x4, 0x2, 0xfffff800, 0x103d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x6, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x1000004, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x5, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0xc, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x4, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x101, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6m48.267412272s ago: executing program 1 (id=8169): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001400)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6m48.22580188s ago: executing program 1 (id=8181): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) close(r0) 6m48.123703714s ago: executing program 1 (id=8176): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 6m48.123160119s ago: executing program 1 (id=8179): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x4, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x38}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 6m32.729666217s ago: executing program 32 (id=8179): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x4, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x38}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 6m32.352526258s ago: executing program 0 (id=8285): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 6m32.346102166s ago: executing program 0 (id=8287): timer_create(0x1, 0x0, &(0x7f0000000000)) timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r0) 6m32.271968936s ago: executing program 0 (id=8290): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x8, 0x4) 6m32.201125212s ago: executing program 0 (id=8292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000005000000b7040000010000008500000015000000850000005000000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m32.126562734s ago: executing program 0 (id=8294): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 6m32.064623352s ago: executing program 0 (id=8297): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000013a00"/36, 0x24) 6m17.052548041s ago: executing program 33 (id=8297): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000013a00"/36, 0x24) 4m59.699446667s ago: executing program 4 (id=11565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400003e000000850000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 4m59.622233163s ago: executing program 4 (id=11570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r1, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) 4m59.621833408s ago: executing program 4 (id=11573): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) 4m59.432948241s ago: executing program 4 (id=11579): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 4m59.432631756s ago: executing program 4 (id=11581): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_setup(0x9, &(0x7f0000000240)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m59.192059524s ago: executing program 4 (id=11590): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x3c, r1, 0x615, 0x70bd27, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}]}]}, 0x3c}, 0x5, 0x0, 0x0, 0x44014}, 0x0) 4m59.051441885s ago: executing program 34 (id=11590): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x3c, r1, 0x615, 0x70bd27, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}]}]}, 0x3c}, 0x5, 0x0, 0x0, 0x44014}, 0x0) 3m8.217770539s ago: executing program 6 (id=15264): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) read(r0, &(0x7f00000001c0)=""/254, 0xfdef) 3m8.140874733s ago: executing program 6 (id=15265): mkdir(&(0x7f00000020c0)='./file0\x00', 0xa2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r0, 0x100000000004, 0x1) getdents64(r0, 0x0, 0x4f) 3m8.140547317s ago: executing program 6 (id=15267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) 3m7.991758953s ago: executing program 6 (id=15270): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m7.942583525s ago: executing program 6 (id=15272): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 3m7.563269253s ago: executing program 6 (id=15282): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0xb0dd000) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x3f, &(0x7f00000008c0)=0x2, 0x4) 3m7.495786624s ago: executing program 35 (id=15282): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0xb0dd000) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x3f, &(0x7f00000008c0)=0x2, 0x4) 2m55.974510666s ago: executing program 2 (id=15535): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x5, 0x1, 0x2, "ee4f6da8d2cf4011ac7b00", 0x43353039}) 2m55.914001317s ago: executing program 2 (id=15536): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 2m55.755663195s ago: executing program 2 (id=15540): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m55.693529323s ago: executing program 2 (id=15541): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m55.623517968s ago: executing program 2 (id=15543): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2m55.07458874s ago: executing program 2 (id=15553): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m54.977640188s ago: executing program 36 (id=15553): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 39.897111396s ago: executing program 3 (id=18640): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x96}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 39.774761108s ago: executing program 3 (id=18645): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mq_unlink(0x0) 39.422547673s ago: executing program 3 (id=18654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) 39.397782647s ago: executing program 3 (id=18656): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 39.329944077s ago: executing program 3 (id=18658): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 38.954725599s ago: executing program 3 (id=18664): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 38.884636745s ago: executing program 37 (id=18664): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 1.498263083s ago: executing program 7 (id=19509): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 909.060324ms ago: executing program 8 (id=19526): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0xffffffff80000001, 0x162862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x4, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) write(r0, &(0x7f0000000200)="d7", 0x1) 688.25938ms ago: executing program 8 (id=19531): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x200080d4}, 0x4c014) 608.263888ms ago: executing program 8 (id=19534): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000840)={0x0, 0x0, r1, r2, 0xd, 0x4, 0x3219, 0x3ff, {0x3606, 0x30, 0x6cde, 0xfffe, 0xfffe, 0x7, 0xd, 0xfb62, 0xfb62, 0xfb62, 0x5, 0x100002, 0x53d3, 0xfffffe01, "e10a2be47a666d3d42404ecfe5569fdc470ca9bd6cf42e33e5df01a3841470bb"}}) 607.535825ms ago: executing program 7 (id=19536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000005c0)={0x2, 0x0, [{0x40000010, 0x0, 0x6}, {0x179, 0x0, 0x2}]}) 553.538922ms ago: executing program 8 (id=19538): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 502.749591ms ago: executing program 5 (id=19540): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400010000000000000000c903"], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 439.468637ms ago: executing program 9 (id=19541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 438.665997ms ago: executing program 7 (id=19542): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x9, r0, 0x0, 0x0, 0x1}]) 438.193887ms ago: executing program 5 (id=19543): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff", 0x4}]) 382.091581ms ago: executing program 9 (id=19544): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x3b00, 0x0, 0x0) 380.471996ms ago: executing program 9 (id=19552): r0 = userfaultfd(0x80801) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) cachestat(r0, &(0x7f00000001c0)={0x1, 0x10000}, 0x0, 0xee) 302.260203ms ago: executing program 5 (id=19545): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 302.115938ms ago: executing program 9 (id=19546): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) 299.490746ms ago: executing program 9 (id=19547): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000001080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000001040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 266.389279ms ago: executing program 8 (id=19548): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x3, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) close(r0) 210.918451ms ago: executing program 7 (id=19549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8115}, 0x200000c0) 210.53917ms ago: executing program 7 (id=19550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x1b, &(0x7f0000000540), 0x4) 187.575864ms ago: executing program 5 (id=19551): r0 = syz_open_dev$dri(&(0x7f0000000440), 0xc, 0x40200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000f40)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0), 0x2c, r1, 0xeeeeeeee}) 112.89392ms ago: executing program 7 (id=19553): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) 112.587035ms ago: executing program 5 (id=19554): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r0, 0x40087446, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x16, 0xd, 0x1, 0x10001}]}) close_range(r0, r0, 0x0) 18.040214ms ago: executing program 5 (id=19555): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a1000519"], 0x3c}}, 0x0) 260.895µs ago: executing program 8 (id=19556): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) 0s ago: executing program 9 (id=19557): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28012, r0, 0xfc05000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): onfig 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 522.672215][T24408] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 522.676209][T24408] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.679546][T24408] usb 10-1: Product: syz [ 522.681337][T24408] usb 10-1: Manufacturer: syz [ 522.683717][T24408] usb 10-1: SerialNumber: syz [ 522.698860][ C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 522.711845][T24408] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input77 [ 522.920276][T24408] imon:send_packet: packet tx failed (-71) [ 522.950310][T24408] imon 10-1:155.0: panel buttons/knobs setup failed [ 522.952556][T24408] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 522.955573][T24408] (id 0x00) [ 523.023761][T24408] rc_core: IR keymap rc-imon-pad not found [ 523.031695][T24408] Registered IR keymap rc-empty [ 523.036200][T24408] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 523.044073][T24408] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 523.049211][T24408] imon:send_packet: packet tx failed (-71) [ 523.054206][ T9085] program syz.5.16491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.072954][T24408] imon 10-1:155.0: remote input dev register failed [ 523.077983][T24408] imon 10-1:155.0: imon_init_intf0: rc device setup failed [ 523.136454][T24408] imon 10-1:155.0: unable to initialize intf0, err 0 [ 523.143075][T24408] imon:imon_probe: failed to initialize context! [ 523.147473][T24408] imon 10-1:155.0: unable to register, err -19 [ 523.153793][T24408] usb 10-1: USB disconnect, device number 23 [ 523.308196][ T9096] lo speed is unknown, defaulting to 1000 [ 523.427155][ T9096] lo speed is unknown, defaulting to 1000 [ 524.262160][ T9126] netlink: 44 bytes leftover after parsing attributes in process `syz.8.16507'. [ 524.266466][ T9126] netlink: 43 bytes leftover after parsing attributes in process `syz.8.16507'. [ 524.270254][ T9126] netlink: 'syz.8.16507': attribute type 5 has an invalid length. [ 524.274935][ T9126] netlink: 43 bytes leftover after parsing attributes in process `syz.8.16507'. [ 524.462030][ T9136] binder: 9135:9136 ioctl 4018620d 0 returned -22 [ 524.953918][ T9161] input: syz0 as /devices/virtual/input/input79 [ 525.061509][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16528'. [ 525.074312][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16528'. [ 525.127228][ T5756] Bluetooth: hci2: unexpected event for opcode 0x0c57 [ 525.166783][ T9185] loop6: detected capacity change from 0 to 2640 [ 525.183517][T23837] buffer_io_error: 7 callbacks suppressed [ 525.183535][T23837] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.194357][T23837] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.197940][T23837] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.201265][T23837] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.204671][ T9185] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.208145][T23837] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.211133][ T9185] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.215321][ T9185] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.253762][ T9190] loop6: detected capacity change from 2640 to 524288000 [ 525.255277][ T9185] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.262925][ T9185] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.273090][ T9185] ldm_validate_partition_table(): Disk read failed. [ 525.275699][ T9185] Dev loop6: unable to read RDB block 0 [ 525.278199][ T9185] loop6: unable to read partition table [ 525.289514][ T9185] loop_reread_partitions: partition scan of loop6 (irc VUXGZtM<I i8NL W@Q6%) failed (rc=-5) [ 525.611950][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.7.16557'. [ 526.666596][ T9268] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 526.836511][ T9279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.849800][ T9279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.855749][ T9279] bond0 (unregistering): Released all slaves [ 526.886903][ T9283] netlink: 56 bytes leftover after parsing attributes in process `syz.8.16581'. [ 527.099087][ T9303] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.108530][ T9303] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.110822][ T9303] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.113042][ T9303] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.115243][ T9303] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.117443][ T9303] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.119625][ T9303] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.121726][ T9303] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.123949][ T9303] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.126147][ T9303] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 528.132936][ T10] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 528.296017][ T10] usb 10-1: config 0 has no interfaces? [ 528.300306][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.304851][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.308076][ T10] usb 10-1: Product: syz [ 528.309763][ T10] usb 10-1: Manufacturer: syz [ 528.311793][ T10] usb 10-1: SerialNumber: syz [ 528.315976][ T10] usb 10-1: config 0 descriptor?? [ 528.524755][ T10] usb 10-1: USB disconnect, device number 24 [ 528.682424][ T9397] bond1: invalid ARP target 0.0.0.0 specified for addition [ 528.688690][ T9397] bond1: option arp_ip_target: invalid value (0) [ 528.694077][ T9397] bond1 (unregistering): Released all slaves [ 528.778167][ T9408] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.197201][ T9443] overlayfs: upper fs does not support file handles, falling back to index=off. [ 529.200516][ T9443] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 529.286574][ T5855] hid_parser_main: 68 callbacks suppressed [ 529.286591][ T5855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 529.290999][ T5855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 529.294713][ T5855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 529.297192][ T5855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 529.299567][ T5855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 529.302070][ T5855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 529.309437][ T5855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 529.312508][ T5855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 529.315855][ T5855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 529.318684][ T5855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 529.322370][ T5855] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 529.322370][ T5855] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 529.376897][ T9452] fido_id[9452]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 530.052126][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16676'. [ 530.056105][ T9506] netlink: 'syz.8.16676': attribute type 1 has an invalid length. [ 530.065297][ T9506] gretap0: entered promiscuous mode [ 530.071155][ T9506] macvlan3: entered allmulticast mode [ 530.073989][ T9506] gretap0: entered allmulticast mode [ 530.145704][ T9519] lo speed is unknown, defaulting to 1000 [ 530.230735][ T9519] lo speed is unknown, defaulting to 1000 [ 530.652879][ T5896] kernel read not supported for file /dsp1 (pid: 5896 comm: kworker/3:4) [ 531.252171][ T9569] netlink: 136 bytes leftover after parsing attributes in process `syz.7.16702'. [ 531.764149][ T9553] syz.7.16693 (9553) used greatest stack depth: 18264 bytes left [ 532.043695][ T9592] netlink: 16142 bytes leftover after parsing attributes in process `syz.8.16712'. [ 532.735940][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.738487][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.881341][ T9618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.893807][ T9618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.101856][ T9618] gretap0: left allmulticast mode [ 533.105689][ T9618] macvlan3: left allmulticast mode [ 533.114604][ T1238] lo speed is unknown, defaulting to 1000 [ 533.117303][ T1238] sz1: Port: 1 Link DOWN [ 533.139651][ T9623] geneve2: entered promiscuous mode [ 533.151765][T22557] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.165071][T22557] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 51871 - 0 [ 533.170072][ T5824] syz1: Port: 1 Link DOWN [ 533.173116][T22557] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.180759][T22557] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 51871 - 0 [ 533.186479][ T1238] lo speed is unknown, defaulting to 1000 [ 533.196445][T22557] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.200013][T22557] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 51871 - 0 [ 533.203053][T22557] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.206305][T22557] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 51871 - 0 [ 533.252315][ T9632] netlink: 57 bytes leftover after parsing attributes in process `syz.8.16738'. [ 533.258160][ T9632] netlink: 57 bytes leftover after parsing attributes in process `syz.8.16738'. [ 533.674645][ T9655] tipc: Resetting bearer [ 533.699500][ T9655] batman_adv: batadv0: Interface deactivated: dummy0 [ 533.716793][ T9655] tipc: Resetting bearer [ 533.773036][ T9655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.782069][ T9655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.827441][ T9655] veth3: left promiscuous mode [ 533.829056][ T9655] veth3: left allmulticast mode [ 533.831302][ T9655] vlan2: left promiscuous mode [ 533.834192][ T9655] bridge0: left promiscuous mode [ 533.872224][ T9658] geneve2: entered promiscuous mode [ 533.876611][T22557] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.880258][T22557] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.884274][T22557] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 46250 - 0 [ 533.891704][T22557] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.897045][T22557] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.899817][T22557] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 46250 - 0 [ 533.902453][T22557] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.906022][T22557] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.909120][T22557] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 46250 - 0 [ 533.911824][T22557] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.915058][T22557] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.917766][T22557] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 46250 - 0 [ 534.087344][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16755'. [ 534.308769][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16763'. [ 534.311750][ T9707] netlink: 'syz.8.16763': attribute type 21 has an invalid length. [ 534.815751][ T9734] netlink: 44 bytes leftover after parsing attributes in process `syz.7.16774'. [ 535.352905][ T5847] usb 12-1: new full-speed USB device number 6 using dummy_hcd [ 535.505925][ T5847] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 535.509674][ T5847] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 535.513999][ T5847] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 535.534699][ T5847] usb 12-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 535.539124][ T5847] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.542080][ T5847] usb 12-1: Product: syz [ 535.543872][ T5847] usb 12-1: Manufacturer: syz [ 535.545540][ T5847] usb 12-1: SerialNumber: syz [ 535.555132][ T5847] usb 12-1: config 0 descriptor?? [ 535.558081][ T9742] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 535.614405][ T5847] rc_core: IR keymap rc-streamzap not found [ 535.616928][ T5847] Registered IR keymap rc-empty [ 535.620673][ T5847] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 535.627745][ T5847] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input83 [ 535.648475][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16795'. [ 535.768750][ T5855] usb 12-1: USB disconnect, device number 6 [ 536.308456][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16794'. [ 536.313030][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16794'. [ 537.553646][ C3] net_ratelimit: 3321 callbacks suppressed [ 537.553667][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.616761][ T9853] sctp: [Deprecated]: syz.8.16828 (pid 9853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 537.616761][ T9853] Use struct sctp_sack_info instead [ 537.710741][ T9861] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 537.722315][ T9860] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 537.782827][ T5855] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 537.953124][ T5855] usb 12-1: Using ep0 maxpacket: 8 [ 537.956378][ T5855] usb 12-1: config index 0 descriptor too short (expected 74, got 45) [ 537.959000][ T5855] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 537.963163][ T5855] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 537.966316][ T5855] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 537.969785][ T5855] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 537.973122][ T5855] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.978282][ T5855] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 537.982110][ T5855] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.206879][ T5855] usb 12-1: GET_CAPABILITIES returned 0 [ 538.209293][ T5855] usbtmc 12-1:16.0: can't read capabilities [ 538.222306][ T1238] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 538.226525][ T1238] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 538.230585][ T1238] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 538.235585][ T1238] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 538.239027][ T1238] rtc rtc0: __rtc_set_alarm: err=-22 [ 538.414473][ C0] usbtmc 12-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 538.419089][ T9847] usbtmc 12-1:16.0: Unable to send data, error -71 [ 538.425129][ T1238] usb 12-1: USB disconnect, device number 7 [ 538.997492][ T9889] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 46250 - 0 [ 539.064073][ T9889] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 46250 - 0 [ 539.219075][ T9889] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 46250 - 0 [ 539.304802][ T9889] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 46250 - 0 [ 539.487641][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16858'. [ 539.489640][T22549] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 46250 - 0 [ 539.528103][T22549] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 46250 - 0 [ 539.540975][T22549] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 46250 - 0 [ 539.565104][ T5840] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 46250 - 0 [ 540.166624][ T9971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16878'. [ 540.421835][ T9986] rdma_rxe: rxe_newlink: failed to add lo [ 540.430004][ T9986] rdma_rxe: rxe_newlink: failed to add syz_tun [ 540.673671][ T9997] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 540.703791][T29834] Bluetooth: hci4: Frame reassembly failed (-84) [ 541.126264][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16903'. [ 541.271202][ T42] kauditd_printk_skb: 1615 callbacks suppressed [ 541.271217][ T42] audit: type=1326 audit(2000001620.440:10866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.3.16906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 541.280390][ T42] audit: type=1326 audit(2000001620.440:10867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.3.16906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 541.288479][ T42] audit: type=1326 audit(2000001620.440:10868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.3.16906" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 541.295456][ T42] audit: type=1326 audit(2000001620.440:10869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.3.16906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 541.302992][ T42] audit: type=1326 audit(2000001620.440:10870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.3.16906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 541.310413][ T42] audit: type=1326 audit(2000001620.440:10871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.3.16906" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 541.318573][ T42] audit: type=1326 audit(2000001620.450:10872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.3.16906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 541.326862][ T42] audit: type=1326 audit(2000001620.450:10873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.3.16906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 541.336494][ T42] audit: type=1326 audit(2000001620.450:10874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.3.16906" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 541.345045][ T42] audit: type=1326 audit(2000001620.450:10875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.3.16906" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 541.842362][T10061] input: syz0 as /devices/virtual/input/input84 [ 541.926019][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16923'. [ 542.753019][ T5756] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 542.753075][ T7327] Bluetooth: hci4: command 0x1003 tx timeout [ 542.795777][ T5838] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 542.962911][ T5838] usb 13-1: Using ep0 maxpacket: 32 [ 542.967178][ T5838] usb 13-1: config index 0 descriptor too short (expected 35577, got 27) [ 542.970916][ T5838] usb 13-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 542.975253][ T5838] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 542.978799][ T5838] usb 13-1: config 1 has no interface number 0 [ 542.980815][ T5838] usb 13-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.984917][ T5838] usb 13-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 542.989760][ T5838] usb 13-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 542.994153][ T5838] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.004228][ T5838] snd_usb_pod 13-1:1.1: Line 6 Pocket POD found [ 543.767636][ T5838] snd_usb_pod 13-1:1.1: Line 6 Pocket POD now attached [ 544.416730][ T5847] usb 13-1: USB disconnect, device number 7 [ 544.429232][ T5847] snd_usb_pod 13-1:1.1: Line 6 Pocket POD now disconnected [ 544.610223][T10194] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 544.889428][T10214] input: syz0 as /devices/virtual/input/input85 [ 545.182023][T10233] tap0: tun_chr_ioctl cmd 1074025672 [ 545.184650][T10233] tap0: ignored: set checksum disabled [ 545.321483][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16996'. [ 545.329828][T10241] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16996'. [ 545.833796][T10278] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 545.843552][T10278] block device autoloading is deprecated and will be removed. [ 545.879420][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17012'. [ 546.045846][T10291] netlink: 64 bytes leftover after parsing attributes in process `syz.8.17017'. [ 546.438839][ T5847] hid_parser_main: 6 callbacks suppressed [ 546.438861][ T5847] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 546.445248][ T5847] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 546.448327][ T5847] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 546.452456][ T5847] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 546.456251][ T5847] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 546.459444][ T5847] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 546.462437][ T5847] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 546.466156][ T5847] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 546.469649][ T5847] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 546.490663][ T5847] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 546.498474][ T5847] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 546.498474][ T5847] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 546.580433][T10323] fido_id[10323]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 546.999832][T10355] block nbd2: Unsupported socket: should be TCP or UNIX. [ 547.987688][T10409] overlayfs: failed to clone lowerpath [ 548.074528][T10420] netlink: 'syz.3.17073': attribute type 23 has an invalid length. [ 548.132471][T10426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.136505][T10426] bond0: (slave bond1): Enslaving as an active interface with an up link [ 549.447441][T10530] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 549.450740][T10530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.956604][T10558] input: syz1 as /devices/virtual/input/input86 [ 550.642667][T10627] dvmrp8: entered allmulticast mode [ 550.868581][T10643] netlink: 168 bytes leftover after parsing attributes in process `syz.7.17174'. [ 550.912926][ T5855] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 551.016725][T10660] loop5: detected capacity change from 0 to 7 [ 551.065286][ T5855] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.073315][ T5855] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.078152][ T5855] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 551.082352][T10665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17184'. [ 551.085868][ T5855] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.088907][ T5855] usb 13-1: Product: syz [ 551.090486][ T5855] usb 13-1: Manufacturer: syz [ 551.092288][ T5855] usb 13-1: SerialNumber: syz [ 551.187556][T10660] Dev loop5: unable to read RDB block 7 [ 551.189238][T10660] loop5: unable to read partition table [ 551.191083][T10660] loop5: partition table beyond EOD, truncated [ 551.193515][T10660] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 551.305995][ T5855] usb 13-1: 0:1 : does not exist [ 551.308250][ T5855] usb 13-1: unit 2 not found! [ 551.309921][ T5855] usb 13-1: unit 80 not found! [ 551.326836][ T5855] usb 13-1: USB disconnect, device number 8 [ 551.388986][T23837] udevd[23837]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.420083][T10697] isofs_fill_super: bread failed, dev=loop11, iso_blknum=16, block=32 [ 551.722890][T10717] Invalid logical block size (4095) [ 551.998750][ T1238] kernel write not supported for file [eventfd] (pid: 1238 comm: kworker/2:3) [ 552.093665][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17218'. [ 552.622094][T10791] tipc: Started in network mode [ 552.624320][T10791] tipc: Node identity 7f000001, cluster identity 4711 [ 552.628606][T10791] tipc: Enabled bearer , priority 4 [ 552.742791][T10801] loop6: detected capacity change from 524288000 to 0 [ 552.980334][T10835] loop7: detected capacity change from 0 to 7 [ 552.993119][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.997303][ C1] buffer_io_error: 12 callbacks suppressed [ 552.997321][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 553.015764][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.019690][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 553.023374][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.027336][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 553.031034][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.034006][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 553.036876][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.039850][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 553.042584][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.045684][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 553.048741][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.051662][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 553.057094][T10835] ldm_validate_partition_table(): Disk read failed. [ 553.059469][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.062394][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 553.065255][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.068401][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 553.071194][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.074305][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 553.077436][T10835] Dev loop7: unable to read RDB block 0 [ 553.082484][T10835] loop7: unable to read partition table [ 553.084653][T10835] loop7: partition table beyond EOD, truncated [ 553.087461][T10835] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 553.115626][T10838] ldm_validate_partition_table(): Disk read failed. [ 553.118631][T10838] Dev loop7: unable to read RDB block 0 [ 553.121136][T10838] loop7: unable to read partition table [ 553.126190][T10838] loop7: partition table beyond EOD, truncated [ 553.743272][ T34] tipc: Node number set to 2130706433 [ 554.253523][T24408] kernel read not supported for file /dsp1 (pid: 24408 comm: kworker/1:5) [ 554.255847][T10872] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.262114][T10872] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 554.267759][T10872] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 554.303832][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17275'. [ 554.388468][T10872] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.392433][T10872] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 554.397227][T10872] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 554.460655][T10872] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.465345][T10872] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 554.469210][T10872] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 554.561956][T10872] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.565969][T10872] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 554.570006][T10872] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 554.687622][ T5795] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.698041][ T5795] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 554.700848][ T5795] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 554.708781][ T5795] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.712664][ T5795] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 554.716687][ T5795] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 554.732881][T22549] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.735787][T22549] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 554.739043][T22549] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 554.749589][T10898] sctp: [Deprecated]: syz.8.17285 (pid 10898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.749589][T10898] Use struct sctp_sack_info instead [ 554.751883][ T5795] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.760319][ T5795] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 554.763443][ T5795] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 554.916412][T10913] C: renamed from veth1_to_team (while UP) [ 554.925367][T10913] netlink: 'syz.3.17293': attribute type 2 has an invalid length. [ 554.928901][T10913] netlink: 116 bytes leftover after parsing attributes in process `syz.3.17293'. [ 554.934223][T10913] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 555.107761][T10931] tmpfs: Too few inodes for current use [ 555.508066][T10968] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 555.528707][T10968] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 555.755399][T10983] bridge0: port 3(syz_tun) entered blocking state [ 555.759884][T10983] bridge0: port 3(syz_tun) entered disabled state [ 555.762484][T10983] syz_tun: entered allmulticast mode [ 555.770068][T10983] syz_tun: entered promiscuous mode [ 556.017032][T10996] input: syz0 as /devices/virtual/input/input87 [ 556.090472][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17333'. [ 556.242236][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17336'. [ 556.672872][ T34] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 556.833991][ T34] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 556.837530][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.840416][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.844105][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 556.847272][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.850275][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.854115][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 556.857131][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.860169][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.864051][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 556.867019][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.870018][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.873757][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 556.876768][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.879754][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.883827][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 556.887304][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.891012][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.894608][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 556.897952][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.901593][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.905256][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 556.908176][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.911152][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.915639][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 556.919766][ T34] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 556.923156][ T34] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 556.926072][ T34] usb 13-1: Product: syz [ 556.927502][ T34] usb 13-1: Manufacturer: syz [ 556.929236][ T34] usb 13-1: SerialNumber: syz [ 556.932337][ T34] usb 13-1: config 0 descriptor?? [ 556.937445][ T34] yurex 13-1:0.0: USB YUREX device now attached to Yurex #0 [ 557.059645][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17343'. [ 558.321644][T11044] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 558.642842][ T5847] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 558.792853][ T5847] usb 10-1: Using ep0 maxpacket: 8 [ 558.798855][ T5847] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 558.803230][ T5847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.811155][ T5847] usb 10-1: Product: syz [ 558.813622][ T5847] usb 10-1: Manufacturer: syz [ 558.815654][ T5847] usb 10-1: SerialNumber: syz [ 558.820461][ T5847] usb 10-1: config 0 descriptor?? [ 559.041357][ T5847] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 559.056477][ T5847] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 559.062553][ T5847] usb 10-1: USB disconnect, device number 25 [ 559.154208][ C3] usb 13-1: yurex_control_callback - control failed: -2 [ 559.159216][ T10] usb 13-1: USB disconnect, device number 9 [ 559.172334][ T10] yurex 13-1:0.0: USB YUREX #0 now disconnected [ 559.481095][T11085] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 559.886916][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.7.17375'. [ 559.890753][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.7.17375'. [ 560.231822][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17383'. [ 560.235421][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17383'. [ 560.353618][ T7327] Bluetooth: hci4: command 0x1003 tx timeout [ 560.372303][ T5756] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 560.607276][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17388'. [ 560.854920][ T5855] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 560.884717][T11148] netlink: 'syz.3.17397': attribute type 3 has an invalid length. [ 560.889055][T11148] netlink: 72 bytes leftover after parsing attributes in process `syz.3.17397'. [ 560.945436][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17399'. [ 561.002851][ T5855] usb 10-1: Using ep0 maxpacket: 32 [ 561.012648][ T5855] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 561.019486][ T5855] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 561.023930][ T5855] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 561.028484][ T5855] usb 10-1: config 1 has no interface number 0 [ 561.030958][ T5855] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 561.036267][ T5855] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 561.041730][ T5855] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 561.046453][ T5855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.065697][ T5855] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 561.127066][T11158] overlayfs: missing 'workdir' [ 561.342408][T11171] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17409'. [ 561.347104][T11171] netlink: 220 bytes leftover after parsing attributes in process `syz.3.17409'. [ 561.484055][T11180] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17414'. [ 561.488010][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17414'. [ 561.561254][T11186] netlink: 'syz.3.17417': attribute type 12 has an invalid length. [ 561.572180][T11186] netlink: 'syz.3.17417': attribute type 29 has an invalid length. [ 561.574875][T11186] netlink: 148 bytes leftover after parsing attributes in process `syz.3.17417'. [ 561.634125][T11192] netlink: 200 bytes leftover after parsing attributes in process `syz.8.17419'. [ 561.827620][ T5855] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 561.937314][T11210] loop5: detected capacity change from 0 to 7 [ 561.949363][ C1] blk_print_req_error: 25 callbacks suppressed [ 561.949384][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.954439][ C1] buffer_io_error: 25 callbacks suppressed [ 561.954450][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 561.965485][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.968484][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 561.971236][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.974124][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 561.979596][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.982630][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 561.987727][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.990710][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 562.032281][ T5855] usb 10-1: USB disconnect, device number 26 [ 562.047067][ T5855] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 562.048016][T11213] loop5: detected capacity change from 7 to 0 [ 562.049497][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.054899][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 562.057439][T11210] ldm_validate_partition_table(): Disk read failed. [ 562.062810][T11210] Dev loop5: unable to read RDB block 0 [ 562.068402][T11210] loop5: unable to read partition table [ 562.070340][T11210] loop5: partition table beyond EOD, truncated [ 562.073057][T11210] loop_reread_partitions: partition scan of loop5 (ɍn/C>|n˨,l-"@Iy}c9sGQaG%x?) failed (rc=-5) [ 563.473676][ T5756] Bluetooth: hci2: command 0x0419 tx timeout [ 563.616938][T11289] ref_ctr_offset mismatch. inode: 0x5687 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 563.948654][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17466'. [ 564.075170][T11310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17472'. [ 566.855417][ T5756] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 566.951752][T11462] veth0: entered promiscuous mode [ 566.962587][T11461] veth0: left promiscuous mode [ 567.143713][ T5824] kernel read not supported for file /dsp1 (pid: 5824 comm: kworker/1:3) [ 567.722898][ T1238] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 567.892871][ T1238] usb 13-1: Using ep0 maxpacket: 8 [ 567.897194][ T1238] usb 13-1: config 0 has no interfaces? [ 567.903677][ T1238] usb 13-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 567.910105][ T1238] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.915475][ T1238] usb 13-1: Product: syz [ 567.916907][ T1238] usb 13-1: Manufacturer: syz [ 567.918835][ T1238] usb 13-1: SerialNumber: syz [ 567.927011][ T1238] usb 13-1: config 0 descriptor?? [ 568.137167][ T1238] usb 13-1: USB disconnect, device number 10 [ 568.202209][T11526] bridge_slave_0: default FDB implementation only supports local addresses [ 568.316149][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17572'. [ 568.703981][T23837] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 568.926355][T23837] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 569.292855][ T5824] usb 13-1: new full-speed USB device number 11 using dummy_hcd [ 569.367034][T11609] netlink: 52 bytes leftover after parsing attributes in process `syz.7.17599'. [ 569.444594][ T5824] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 569.452790][ T5824] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 569.463769][ T5824] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 569.474220][ T5824] usb 13-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 569.479453][ T5824] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.481960][ T5824] usb 13-1: Product: syz [ 569.483954][ T5824] usb 13-1: Manufacturer: syz [ 569.485593][ T5824] usb 13-1: SerialNumber: syz [ 569.488852][T11616] tap0: tun_chr_ioctl cmd 1074025672 [ 569.489070][ T5824] usb 13-1: config 0 descriptor?? [ 569.490847][T11616] tap0: ignored: set checksum disabled [ 569.499359][T11590] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 569.553007][ T5824] rc_core: IR keymap rc-streamzap not found [ 569.558005][ T5824] Registered IR keymap rc-empty [ 569.560100][ T5824] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 569.571958][ T5824] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input88 [ 569.621774][T11624] ipvlan1: entered promiscuous mode [ 569.624358][T11624] ipvlan1: entered allmulticast mode [ 569.626377][T11624] veth0_vlan: entered allmulticast mode [ 569.717416][ T1238] usb 13-1: USB disconnect, device number 11 [ 570.395893][ T10] hid_parser_main: 6 callbacks suppressed [ 570.395923][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x7 [ 570.400604][ T10] hid-generic 0000:0000:0000.000E: ignoring exceeding usage max [ 570.404476][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 570.407313][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 570.409653][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 570.411936][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 570.416730][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 570.419141][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 570.421433][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 570.424144][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 570.426461][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 570.430014][ T10] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz0] on syz0 [ 570.469409][T11648] fido_id[11648]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 571.522838][T11671] input: syz0 as /devices/virtual/input/input89 [ 572.037959][T11710] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 572.044838][T11710] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 572.099477][T11713] block nbd2: Unsupported socket: should be TCP or UNIX. [ 572.107391][T11715] netlink: 'syz.3.17642': attribute type 5 has an invalid length. [ 572.434973][T11733] ubi: mtd0 is already attached to ubi16 [ 572.655384][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17653'. [ 572.741684][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17659'. [ 572.745716][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17659'. [ 572.748725][T11751] netlink: 'syz.3.17659': attribute type 13 has an invalid length. [ 572.751712][T11751] netlink: 'syz.3.17659': attribute type 11 has an invalid length. [ 573.037837][ T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 573.665119][T11836] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17697'. [ 573.669648][T11836] netlink: 32 bytes leftover after parsing attributes in process `syz.7.17697'. [ 573.676606][T11836] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17697'. [ 573.682019][T11836] netlink: 32 bytes leftover after parsing attributes in process `syz.7.17697'. [ 573.853268][T11856] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 573.856544][T11856] block device autoloading is deprecated and will be removed. [ 573.891827][T11859] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17709'. [ 573.896742][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17709'. [ 573.900018][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17709'. [ 574.090575][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17716'. [ 574.094405][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17716'. [ 574.142938][T11885] tun0: tun_chr_ioctl cmd 1074025676 [ 574.144835][T11885] tun0: owner set to 0 [ 574.313268][T11906] input: syz1 as /devices/virtual/input/input90 [ 574.952956][ T5896] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 575.112892][ T5896] usb 10-1: Using ep0 maxpacket: 8 [ 575.116764][ T5896] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 575.125198][ T5896] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 575.131162][ T5896] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 575.135977][ T5896] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 575.139496][ T5896] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.143629][ T5896] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 575.146705][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.356896][ T5896] usb 10-1: GET_CAPABILITIES returned 0 [ 575.358850][ T5896] usbtmc 10-1:16.0: can't read capabilities [ 575.383119][ T29] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 575.544769][ T29] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 575.548492][ T29] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.557306][ T29] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 575.564248][ T1238] usb 10-1: USB disconnect, device number 27 [ 575.568760][ T29] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.590949][ T29] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 575.602778][ T29] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 575.606649][ T29] usb 13-1: Product: syz [ 575.608363][ T29] usb 13-1: Manufacturer: syz [ 575.628372][ T29] cdc_wdm 13-1:1.0: skipping garbage [ 575.630481][ T29] cdc_wdm 13-1:1.0: skipping garbage [ 575.646422][ T29] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 575.652811][ T29] cdc_wdm 13-1:1.0: Unknown control protocol [ 575.789788][T11967] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 575.796693][T11967] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 575.839213][ T5855] usb 13-1: USB disconnect, device number 12 [ 576.123424][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17762'. [ 576.136606][ T5820] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.143736][ T5820] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.146564][ T5820] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.149378][ T5820] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.197307][ T7327] Bluetooth: hci4: sending frame failed (-49) [ 576.205952][ T5756] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 576.371712][T12001] ipvlan2: entered allmulticast mode [ 576.374988][T12001] batadv_slave_1: entered allmulticast mode [ 576.378705][T12001] batman_adv: batadv0: Adding interface: ipvlan2 [ 576.381480][T12001] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 576.392874][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.397206][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.400749][T12001] batman_adv: batadv0: Interface activated: ipvlan2 [ 577.682989][ T29] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 577.713024][ T1238] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 577.835944][ T29] usb 13-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 577.840825][ T29] usb 13-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 577.845982][ T29] usb 13-1: config 0 interface 0 has no altsetting 0 [ 577.851069][ T29] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 577.855061][ T29] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 577.857830][ T29] usb 13-1: Product: syz [ 577.859309][ T29] usb 13-1: Manufacturer: syz [ 577.860975][ T29] usb 13-1: SerialNumber: syz [ 577.862932][ T1238] usb 12-1: Using ep0 maxpacket: 8 [ 577.864689][ T29] usb 13-1: config 0 descriptor?? [ 577.867898][ T1238] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 577.869741][ T29] usb 13-1: selecting invalid altsetting 0 [ 577.872420][ T1238] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 577.878355][ T1238] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 577.882352][ T1238] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.887591][ T1238] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 577.891208][ T1238] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.078987][ T5838] usb 13-1: USB disconnect, device number 13 [ 578.101074][ T1238] usb 12-1: GET_CAPABILITIES returned 0 [ 578.103009][ T1238] usbtmc 12-1:16.0: can't read capabilities [ 578.304299][ C1] usbtmc 12-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 578.311670][T12061] usbtmc 12-1:16.0: Unable to send data, error -71 [ 578.315160][ T1238] usb 12-1: USB disconnect, device number 8 [ 578.333152][ T42] audit: type=1326 audit(2000001657.510:10876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12064 comm="syz.5.17797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7fc00000 [ 578.867900][T12091] bond1: ARP target 9.0.0.0 is already present [ 578.871850][T12091] bond1: option arp_ip_target: invalid value (9) [ 578.891796][T12091] bond1 (unregistering): Released all slaves [ 579.250943][T12118] overlayfs: invalid origin (0000) [ 583.181160][T12216] __nla_validate_parse: 1 callbacks suppressed [ 583.181175][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17864'. [ 583.416974][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17871'. [ 583.573967][T12240] netlink: 24 bytes leftover after parsing attributes in process `syz.7.17875'. [ 583.836752][T12263] netlink: 'syz.7.17886': attribute type 12 has an invalid length. [ 583.840557][T12263] netlink: 'syz.7.17886': attribute type 29 has an invalid length. [ 583.844619][T12263] netlink: 'syz.7.17886': attribute type 7 has an invalid length. [ 583.847673][T12263] netlink: 'syz.7.17886': attribute type 37 has an invalid length. [ 583.850577][T12263] netlink: 80 bytes leftover after parsing attributes in process `syz.7.17886'. [ 585.122139][ T1238] hid_parser_main: 12 callbacks suppressed [ 585.122165][ T1238] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 585.133095][ T1238] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 585.317725][T12341] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17920'. [ 585.376272][T12343] binder: 12342:12343 ioctl c018620c 80000140 returned -1 [ 586.371495][ T42] audit: type=1326 audit(2000001665.540:10877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.7.17940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 586.385207][ T42] audit: type=1326 audit(2000001665.540:10878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.7.17940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 586.392262][ T42] audit: type=1326 audit(2000001665.560:10879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.7.17940" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 586.399280][ T42] audit: type=1326 audit(2000001665.560:10880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.7.17940" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x0 [ 587.301682][ T42] audit: type=1326 audit(2000001666.470:10881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.7.17945" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f12fec code=0x0 [ 587.911016][T12436] erspan0: entered promiscuous mode [ 588.188130][T12456] netlink: 52 bytes leftover after parsing attributes in process `syz.5.17971'. [ 588.288183][T12463] lo: entered allmulticast mode [ 588.519269][T12484] netlink: 'syz.5.17984': attribute type 12 has an invalid length. [ 588.526274][T12484] netlink: 'syz.5.17984': attribute type 29 has an invalid length. [ 588.529451][T12484] netlink: 148 bytes leftover after parsing attributes in process `syz.5.17984'. [ 588.535226][T12484] netlink: 'syz.5.17984': attribute type 1 has an invalid length. [ 588.538349][T12484] netlink: 'syz.5.17984': attribute type 2 has an invalid length. [ 588.811508][T12510] Falling back ldisc for ttyS3. [ 589.308643][T12550] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.18013'. [ 589.318482][T12548] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.18013'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 589.654154][T12580] input: syz0 as /devices/virtual/input/input91 [ 590.194811][ T5838] kernel write not supported for file /uinput (pid: 5838 comm: kworker/3:3) [ 590.661270][T12641] netlink: 20 bytes leftover after parsing attributes in process `syz.8.18057'. [ 590.772891][ T5838] kernel read not supported for file /dsp1 (pid: 5838 comm: kworker/3:3) [ 590.917331][T12652] bond0: entered promiscuous mode [ 591.122579][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 591.369459][T12686] Bluetooth: hci4: Frame reassembly failed (-84) [ 591.534145][T12699] loop5: detected capacity change from 0 to 7 [ 591.697612][T12699] Dev loop5: unable to read RDB block 7 [ 591.699633][T12699] loop5: unable to read partition table [ 591.702083][T12699] loop5: partition table beyond EOD, truncated [ 591.705059][T12699] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 591.867983][T12718] input: syz1 as /devices/virtual/input/input92 [ 592.836549][T12782] input: syz0 as /devices/virtual/input/input93 [ 592.918707][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18121'. [ 592.922603][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18121'. [ 592.936218][T22549] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.939982][T22549] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.944468][T22549] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.947908][T22549] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.131541][T12793] netlink: 'syz.5.18125': attribute type 8 has an invalid length. [ 593.169518][ T5838] hid-generic 0000:0000:0000.0010: unknown main item tag 0x7 [ 593.173293][ T5838] hid-generic 0000:0000:0000.0010: ignoring exceeding usage max [ 593.177308][ T5838] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 593.180416][ T5838] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 593.184563][ T5838] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 593.187938][ T5838] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 593.190998][ T5838] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 593.194260][ T5838] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 593.199529][ T5838] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 593.205903][ T5838] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 593.209066][ T5838] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 593.213935][ T5838] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz0] on syz0 [ 593.260042][T12800] fido_id[12800]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 593.300717][T12804] netlink: 'syz.7.18129': attribute type 19 has an invalid length. [ 593.304486][T12804] netlink: 144 bytes leftover after parsing attributes in process `syz.7.18129'. [ 593.345408][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18131'. [ 593.393132][ T5756] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 593.522907][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18139'. [ 594.029992][T12863] tipc: Enabled bearer , priority 4 [ 594.125986][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18163'. [ 594.131098][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18163'. [ 595.087644][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18180'. [ 595.376745][T12940] lo speed is unknown, defaulting to 1000 [ 595.530238][T12940] lo speed is unknown, defaulting to 1000 [ 595.593989][ T29] hid-generic 0000:0000:0000.0011: hidraw1: HID v0.00 Device [syz1] on syz0 [ 595.856262][T12967] input: syz1 as /devices/virtual/input/input94 [ 595.963355][ T143] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 595.970774][ T143] Bluetooth: hci4: Frame reassembly failed (-84) [ 596.392918][ T1238] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 596.554450][ T1238] usb 12-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 596.558642][ T1238] usb 12-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 596.562985][ T1238] usb 12-1: config 0 interface 0 has no altsetting 0 [ 596.568381][ T1238] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 596.571742][ T1238] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 596.574577][ T1238] usb 12-1: Product: syz [ 596.576058][ T1238] usb 12-1: Manufacturer: syz [ 596.577581][ T1238] usb 12-1: SerialNumber: syz [ 596.580790][ T1238] usb 12-1: config 0 descriptor?? [ 596.586063][ T1238] usb 12-1: selecting invalid altsetting 0 [ 596.796641][ T1238] usb 12-1: USB disconnect, device number 9 [ 596.911686][T12998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18219'. [ 596.918165][T12998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18219'. [ 597.085029][T13012] input: syz1 as /devices/virtual/input/input96 [ 597.760608][T13056] loop7: detected capacity change from 0 to 7 [ 597.765278][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.768470][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 597.771150][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.774093][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 597.776837][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.779850][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 597.783271][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.786761][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 597.790591][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.793735][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 597.797312][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.801318][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 597.804971][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.808446][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 597.811572][T13056] ldm_validate_partition_table(): Disk read failed. [ 597.814963][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.818185][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 597.820941][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.823872][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 597.826736][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.830596][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 597.834463][T13056] Dev loop7: unable to read RDB block 0 [ 597.837767][T13056] loop7: unable to read partition table [ 597.840358][T13056] loop7: partition table beyond EOD, truncated [ 597.846039][T13056] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 597.867991][T13058] ldm_validate_partition_table(): Disk read failed. [ 597.871186][T13058] Dev loop7: unable to read RDB block 0 [ 597.877722][T13058] loop7: unable to read partition table [ 597.880482][T13058] loop7: partition table beyond EOD, truncated [ 598.033622][ T7327] Bluetooth: hci4: command 0x1003 tx timeout [ 598.050892][ T5756] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 598.117777][T13080] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18256'. [ 598.922360][ T1238] kernel write not supported for file /uinput (pid: 1238 comm: kworker/2:3) [ 598.958199][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18279'. [ 598.962675][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18279'. [ 599.147123][T13147] loop8: detected capacity change from 0 to 524287999 [ 599.208684][ T42] audit: type=1326 audit(2000001678.380:10882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.5.18286" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 599.867654][T13178] digital: digital_start_poll: Unknown protocol [ 599.877153][T13180] Failed to get privilege flags for destination (handle=0x2:0x0) [ 600.030406][T13192] veth0: entered promiscuous mode [ 600.032517][T13191] veth0: left promiscuous mode [ 600.589638][ T5838] hid_parser_main: 13 callbacks suppressed [ 600.589663][ T5838] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 600.595428][ T5838] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 600.604119][ T5838] hid-generic 0000:0000:0000.0012: hidraw1: HID v0.00 Device [syz0] on syz0 [ 600.664362][T13232] fido_id[13232]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 600.765694][T13240] overlayfs: invalid origin (0000) [ 600.831933][T13246] netlink: 4852 bytes leftover after parsing attributes in process `syz.8.18329'. [ 600.835952][T13246] netlink: 4852 bytes leftover after parsing attributes in process `syz.8.18329'. [ 600.932415][T13251] lo speed is unknown, defaulting to 1000 [ 601.022876][ T5824] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 601.040900][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18333'. [ 601.121834][T13251] lo speed is unknown, defaulting to 1000 [ 601.172892][ T5824] usb 10-1: Using ep0 maxpacket: 8 [ 601.176340][ T5824] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 601.179431][ T5824] usb 10-1: config 0 has no interface number 0 [ 601.181534][ T5824] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 601.185813][ T5824] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 601.190809][ T5824] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 601.195543][ T5824] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 601.200875][ T5824] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 601.205251][ T5824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.211323][ T5824] usb 10-1: config 0 descriptor?? [ 601.230477][ T5824] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 601.431650][ T5824] usb 10-1: USB disconnect, device number 28 [ 601.450529][ T5824] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 601.587119][T13284] overlayfs: failed to resolve './file1/file0': -2 [ 602.241855][T13323] overlayfs: upper fs does not support tmpfile. [ 602.256354][T13329] macvlan0: entered promiscuous mode [ 602.258470][T13329] netlink: 'syz.8.18367': attribute type 2 has an invalid length. [ 602.498409][T13350] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 603.430151][ T5824] kernel write not supported for file bpf-map (pid: 5824 comm: kworker/1:3) [ 603.496774][T13416] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 603.877755][T13436] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 603.935980][ T5756] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 605.432847][T13519] loop8: detected capacity change from 0 to 7 [ 605.452252][ C1] blk_print_req_error: 25 callbacks suppressed [ 605.452274][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.459015][ C1] buffer_io_error: 26 callbacks suppressed [ 605.459032][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 605.466312][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.469419][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 605.477448][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.480782][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 605.485167][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.489142][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 605.492104][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.495072][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 605.497971][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.500856][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 605.503799][T13521] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 605.505478][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.506762][T13521] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 605.509267][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 605.512122][T13521] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 605.514653][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.514689][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 605.514712][T13519] ldm_validate_partition_table(): Disk read failed. [ 605.514786][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.527470][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 605.530764][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.533692][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 605.536528][T13519] Dev loop8: unable to read RDB block 0 [ 605.538827][T13519] loop8: unable to read partition table [ 605.540759][T13519] loop8: partition table beyond EOD, truncated [ 605.543243][T13519] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 605.672879][ T5824] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 605.775876][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18458'. [ 605.781059][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18458'. [ 605.842843][ T5824] usb 10-1: Using ep0 maxpacket: 8 [ 605.846197][ T5824] usb 10-1: config 2 has an invalid interface number: 224 but max is 0 [ 605.848902][ T5824] usb 10-1: config 2 has no interface number 0 [ 605.850857][ T5824] usb 10-1: config 2 interface 224 has no altsetting 0 [ 605.857632][ T5824] usb 10-1: New USB device found, idVendor=0af0, idProduct=7051, bcdDevice=48.78 [ 605.860624][ T5824] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.863972][ T5824] usb 10-1: Product: syz [ 605.865640][ T5824] usb 10-1: Manufacturer: syz [ 605.868088][ T5824] usb 10-1: SerialNumber: syz [ 606.173210][ T1238] kernel read not supported for file /dsp1 (pid: 1238 comm: kworker/2:3) [ 606.235472][ T5824] hso 10-1:2.224: Not our interface [ 606.246203][ T5824] usb 10-1: USB disconnect, device number 29 [ 606.885733][T13601] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 607.170165][T13614] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18480'. [ 607.176324][T13614] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18480'. [ 607.231637][T13618] lo speed is unknown, defaulting to 1000 [ 607.361373][T13618] lo speed is unknown, defaulting to 1000 [ 607.552938][ T5103] Bluetooth: hci2: command 0x0419 tx timeout [ 607.553719][ T5750] Bluetooth: hci3: command 0x0c1a tx timeout [ 607.557639][ T5103] Bluetooth: hci0: command 0x0405 tx timeout [ 608.726665][T13669] binder: 13668:13669 ioctl c0306201 80000180 returned -14 [ 608.915335][ T5756] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 609.443062][ T5847] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 609.486400][T13715] netlink: 16 bytes leftover after parsing attributes in process `syz.8.18523'. [ 609.597155][ T5847] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 609.602995][ T5847] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 609.612872][ T5847] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 609.617005][ T5847] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.623947][T13696] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 609.632175][ T5847] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 609.642853][ T7327] Bluetooth: hci2: command 0x0419 tx timeout [ 609.844967][ T34] usb 12-1: USB disconnect, device number 10 [ 609.846229][T13727] Bluetooth: hci4: Frame reassembly failed (-84) [ 610.868911][ T5896] kernel read not supported for file /dsp1 (pid: 5896 comm: kworker/3:4) [ 611.162058][T13796] trusted_key: encrypted_key: keyword 'upeate' not recognized [ 611.469765][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18574'. [ 611.847232][T13841] netlink: 'syz.3.18582': attribute type 8 has an invalid length. [ 611.873207][ T5756] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 611.909896][T13848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18584'. [ 611.986395][ T5855] kernel write not supported for file /input/event2 (pid: 5855 comm: kworker/0:3) [ 612.071422][T13859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18590'. [ 612.076607][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18590'. [ 613.072926][ T5824] usb 12-1: new full-speed USB device number 11 using dummy_hcd [ 613.250492][ T5824] usb 12-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 613.266270][ T5824] usb 12-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 613.273957][ T5824] usb 12-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 613.282982][ T5824] usb 12-1: config 0 interface 0 has no altsetting 0 [ 613.285932][T13923] input: syz0 as /devices/virtual/input/input97 [ 613.289385][ T5824] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 613.296364][ T5824] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 613.301877][ T5824] usb 12-1: Product: syz [ 613.304125][ T5824] usb 12-1: Manufacturer: syz [ 613.308068][ T5824] usb 12-1: SerialNumber: syz [ 613.314696][ T5824] usb 12-1: config 0 descriptor?? [ 613.323245][T13902] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 613.327924][ T5824] usb 12-1: selecting invalid altsetting 0 [ 613.538379][ T5824] usb 12-1: USB disconnect, device number 11 [ 614.048071][T13955] block nbd8: NBD_DISCONNECT [ 614.050683][T13953] block nbd8: Disconnected due to user request. [ 614.054347][T13953] block nbd8: shutting down sockets [ 615.375998][ T7327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 615.387338][ T7327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 615.397563][ T7327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 615.405478][ T7327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 615.410686][ T7327] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 615.652121][ T42] audit: type=1326 audit(2000001695.819:10883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14044 comm="syz.7.18670" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13008 code=0x7ffc0000 [ 615.660945][ T42] audit: type=1326 audit(2000001695.819:10884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14044 comm="syz.7.18670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 615.663187][T14026] lo speed is unknown, defaulting to 1000 [ 615.670113][ T42] audit: type=1326 audit(2000001695.819:10885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14044 comm="syz.7.18670" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13008 code=0x7ffc0000 [ 615.680630][ T42] audit: type=1326 audit(2000001695.819:10886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14044 comm="syz.7.18670" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13008 code=0x7ffc0000 [ 615.689807][ T42] audit: type=1326 audit(2000001695.819:10887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14044 comm="syz.7.18670" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13008 code=0x7ffc0000 [ 615.702871][ T42] audit: type=1326 audit(2000001695.819:10888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14044 comm="syz.7.18670" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13008 code=0x7ffc0000 [ 615.712812][ T42] audit: type=1326 audit(2000001695.819:10889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14044 comm="syz.7.18670" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13008 code=0x7ffc0000 [ 615.720417][ T42] audit: type=1326 audit(2000001695.819:10890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14044 comm="syz.7.18670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 615.728785][ T42] audit: type=1326 audit(2000001695.819:10891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14044 comm="syz.7.18670" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13008 code=0x7ffc0000 [ 615.738572][ T42] audit: type=1326 audit(2000001695.819:10892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14044 comm="syz.7.18670" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13008 code=0x7ffc0000 [ 615.782193][T14051] netlink: 88 bytes leftover after parsing attributes in process `syz.5.18673'. [ 615.830315][T14054] [U] [ 615.831271][T14054] [U] [ 615.832197][T14054] [U] [ 615.833086][T14054] [U] [ 615.833966][T14054] [U] [ 615.835124][T14054] [U] [ 615.836253][T14054] [U] [ 615.837193][T14054] [U] [ 615.851878][T14054] [U] [ 615.853034][T14054] [U] [ 615.853952][T14054] [U] [ 615.855126][T14054] [U] [ 615.856040][T14026] lo speed is unknown, defaulting to 1000 [ 615.856314][T14054] [U] [ 615.859279][T14054] [U] [ 615.860472][T14054] [U] [ 615.861768][T14054] [U] [ 615.864238][T14054] [U] [ 615.865557][T14054] [U] [ 615.866746][T14054] [U] [ 615.867940][T14054] [U] [ 615.869114][T14054] [U] [ 615.870301][T14054] [U] [ 615.871469][T14054] [U] [ 615.872626][T14054] [U] [ 615.874858][T14054] [U] [ 615.876097][T14054] [U] [ 615.877283][T14054] [U] [ 615.878483][T14054] [U] [ 615.879660][T14054] [U] [ 615.880669][T14054] [U] [ 615.881547][T14054] [U] [ 615.882448][T14054] [U] [ 615.885043][T14054] [U] [ 615.885978][T14054] [U] [ 615.886886][T14054] [U] [ 615.887800][T14054] [U] [ 615.888679][T14054] [U] [ 615.889560][T14054] [U] [ 615.890440][T14054] [U] [ 615.891308][T14054] [U] [ 615.892248][T14054] [U] [ 615.893136][T14054] [U] [ 615.894082][T14054] [U] [ 615.895230][T14054] [U] [ 615.896345][T14054] [U] [ 615.897308][T14054] [U] [ 615.898258][T14054] [U] [ 615.899158][T14054] [U] [ 615.901102][T14054] [U] [ 615.902021][T14054] [U] [ 615.902941][T14054] [U] [ 615.903816][T14054] [U] [ 615.904830][T14054] [U] [ 615.905690][T14054] [U] [ 615.906575][T14054] [U] [ 615.907451][T14054] [U] [ 615.909247][T14054] [U] [ 615.910170][T14054] [U] [ 615.911060][T14054] [U] [ 615.911940][T14054] [U] [ 615.912816][T14054] [U] [ 615.913689][T14054] [U] [ 615.914525][T14054] [U] [ 615.915371][T14054] [U] [ 615.916719][T14054] [U] [ 615.917586][T14054] [U] [ 615.918508][T14054] [U] [ 615.919380][T14054] [U] [ 615.920254][T14054] [U] [ 615.921126][T14054] [U] [ 615.922012][T14054] [U] [ 615.922901][T14054] [U] [ 615.924226][T14054] [U] [ 615.925104][T14054] [U] [ 615.925993][T14054] [U] [ 615.926905][T14054] [U] [ 615.927708][T14054] [U] [ 615.928563][T14054] [U] [ 615.929414][T14054] [U] [ 615.930262][T14054] [U] [ 615.931376][T14054] [U] [ 615.932251][T14054] [U] [ 615.933134][T14054] [U] [ 615.934007][T14054] [U] [ 615.935729][T14054] [U] [ 615.936896][T14054] [U] [ 615.938523][T14054] [U] [ 615.939614][T14054] [U] [ 615.942290][T14054] [U] [ 615.943468][T14054] [U] [ 615.944529][T14054] [U] [ 615.945655][T14054] [U] [ 615.946722][T14054] [U] [ 615.947864][T14054] [U] [ 615.949017][T14054] [U] [ 615.950190][T14054] [U] [ 615.952448][T14054] [U] [ 615.953677][T14054] [U] [ 615.954839][T14054] [U] [ 615.956042][T14054] [U] [ 615.957222][T14054] [U] [ 615.958398][T14054] [U] [ 615.959537][T14054] [U] [ 615.960674][T14054] [U] [ 615.962557][T14054] [U] [ 615.963909][T14054] [U] [ 615.965084][T14054] [U] [ 615.966302][T14054] [U] [ 615.967426][T14054] [U] [ 615.968579][T14054] [U] [ 615.969744][T14054] [U] [ 615.970947][T14054] [U] [ 615.973442][T14054] [U] [ 615.974680][T14054] [U] [ 615.975879][T14054] [U] [ 615.977045][T14054] [U] [ 615.978256][T14054] [U] [ 615.979407][T14054] [U] [ 615.980451][T14054] [U] [ 615.981648][T14054] [U] [ 615.984670][T14054] [U] [ 615.985851][T14054] [U] [ 615.987021][T14054] [U] [ 615.988205][T14054] [U] [ 615.989379][T14054] [U] [ 615.990567][T14054] [U] [ 615.991749][T14054] [U] [ 616.025984][T14053] [U] [ 616.323316][ T5824] kernel read not supported for file /dsp1 (pid: 5824 comm: kworker/1:3) [ 616.387979][T14026] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.390939][T14026] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.394741][T14026] bridge_slave_0: entered allmulticast mode [ 616.401358][T14026] bridge_slave_0: entered promiscuous mode [ 616.424638][T14026] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.432232][T14026] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.437629][T14026] bridge_slave_1: entered allmulticast mode [ 616.441561][T14026] bridge_slave_1: entered promiscuous mode [ 616.507902][T14026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.518999][T14026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.555412][T14026] team0: Port device team_slave_0 added [ 616.560430][T14026] team0: Port device team_slave_1 added [ 616.584323][T14026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.587178][T14026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.596471][T14026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.601109][T14026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.603548][T14026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.613858][T14026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.660807][T14026] hsr_slave_0: entered promiscuous mode [ 616.663560][T14026] hsr_slave_1: entered promiscuous mode [ 616.667766][T14026] debugfs: 'hsr0' already exists in 'hsr' [ 616.670028][T14026] Cannot create hsr debugfs directory [ 616.814962][ T847] kernel read not supported for file /dsp (pid: 847 comm: kworker/2:2) [ 616.995993][T14026] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 617.004068][T14026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 617.008375][T14026] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 617.016969][T14026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 617.019985][T14026] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 617.026803][T14026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 617.029736][T14026] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 617.037691][T14026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 617.063153][ T10] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 617.108359][T14026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.127084][T14026] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.134758][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.137671][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.147195][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.150166][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.217057][ T10] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.221145][ T10] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.224691][ T10] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 617.229619][ T10] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 617.233834][ T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.238157][ T10] usb 13-1: config 0 descriptor?? [ 617.473157][ T7327] Bluetooth: hci1: command tx timeout [ 617.508472][T14026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.657824][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 617.661499][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 617.664625][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 617.667915][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 617.671088][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 617.675097][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 617.677471][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 617.679886][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 617.682152][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 617.685007][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 617.710926][ T10] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 617.725204][T14026] veth0_vlan: entered promiscuous mode [ 617.734813][T14026] veth1_vlan: entered promiscuous mode [ 617.761454][T14026] veth0_macvtap: entered promiscuous mode [ 617.771298][T14026] veth1_macvtap: entered promiscuous mode [ 617.786547][T14026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.796439][T14026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.807689][ T5820] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.811388][ T5820] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.816669][ T5820] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.820438][ T5820] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.933284][ T1257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.935796][ T1257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.960986][ T9] usb 13-1: USB disconnect, device number 14 [ 617.964135][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.967063][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.549626][T14144] gfs2: path_lookup on  returned error -2 [ 619.218098][T14177] loop5: detected capacity change from 0 to 7 [ 619.221086][T14177] buffer_io_error: 11 callbacks suppressed [ 619.221101][T14177] Buffer I/O error on dev loop5, logical block 0, async page read [ 619.228510][T14177] Buffer I/O error on dev loop5, logical block 0, async page read [ 619.231735][T14177] Buffer I/O error on dev loop5, logical block 0, async page read [ 619.237106][T14177] Buffer I/O error on dev loop5, logical block 0, async page read [ 619.240709][T14177] Buffer I/O error on dev loop5, logical block 0, async page read [ 619.244615][T14177] Buffer I/O error on dev loop5, logical block 0, async page read [ 619.247864][T14177] Buffer I/O error on dev loop5, logical block 0, async page read [ 619.251086][T14177] ldm_validate_partition_table(): Disk read failed. [ 619.254801][T14177] Buffer I/O error on dev loop5, logical block 0, async page read [ 619.258291][T14177] Buffer I/O error on dev loop5, logical block 0, async page read [ 619.261816][T14177] Buffer I/O error on dev loop5, logical block 0, async page read [ 619.266132][T14177] Dev loop5: unable to read RDB block 0 [ 619.327506][T14177] loop5: unable to read partition table [ 619.331071][T14177] loop5: partition table beyond EOD, truncated [ 619.334740][T14177] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 619.562979][ T7327] Bluetooth: hci1: command tx timeout [ 621.098949][T14261] loop8: detected capacity change from 0 to 7 [ 621.105676][ C0] blk_print_req_error: 11 callbacks suppressed [ 621.105748][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.113971][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.121098][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.125723][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.130968][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.135292][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.139369][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.144685][T14261] ldm_validate_partition_table(): Disk read failed. [ 621.147143][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.158534][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.162545][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.172273][T14261] Dev loop8: unable to read RDB block 0 [ 621.176603][T14261] loop8: unable to read partition table [ 621.178633][T14261] loop8: partition table beyond EOD, truncated [ 621.180697][T14261] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 621.347577][T14276] netlink: 16 bytes leftover after parsing attributes in process `syz.8.18756'. [ 621.351487][T14276] netlink: 16 bytes leftover after parsing attributes in process `syz.8.18756'. [ 621.614158][T14301] netlink: 52 bytes leftover after parsing attributes in process `syz.9.18768'. [ 621.624229][T14301] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.626680][T14301] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.633215][ T7327] Bluetooth: hci1: command tx timeout [ 621.666766][T14299] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 621.674984][T14299] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 621.681176][T14299] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 621.684263][T14299] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 621.687079][T14299] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 621.698535][T14299] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 621.815668][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18772'. [ 621.819585][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18772'. [ 621.823516][T14312] netlink: 'syz.5.18772': attribute type 18 has an invalid length. [ 621.826805][T14312] netlink: 'syz.5.18772': attribute type 15 has an invalid length. [ 621.927540][ T9] kernel read not supported for file /swradio9 (pid: 9 comm: kworker/0:0) [ 622.139089][ T5847] kernel read not supported for file /swradio5 (pid: 5847 comm: kworker/2:5) [ 622.201546][T14350] Invalid option length (1003308) for dns_resolver key [ 622.588251][ T42] kauditd_printk_skb: 120 callbacks suppressed [ 622.588266][ T42] audit: type=1326 audit(2000001702.759:11013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.18801" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 622.603106][ T42] audit: type=1326 audit(2000001702.759:11014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.18801" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 622.630888][ T42] audit: type=1326 audit(2000001702.769:11015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.18801" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf709efec code=0x7ffc0000 [ 622.645536][ T42] audit: type=1326 audit(2000001702.789:11016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.18801" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 622.656624][ T42] audit: type=1326 audit(2000001702.789:11017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14380 comm="syz.5.18801" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d72eb code=0x7ffc0000 [ 622.663898][ T42] audit: type=1326 audit(2000001702.789:11018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.18801" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 622.666823][T14383] dummy0: entered allmulticast mode [ 622.670785][ T42] audit: type=1326 audit(2000001702.799:11019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.18801" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf709efec code=0x7ffc0000 [ 622.676061][T14382] dummy0: left allmulticast mode [ 622.679625][ T42] audit: type=1326 audit(2000001702.799:11020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.18801" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 622.679654][ T42] audit: type=1326 audit(2000001702.799:11021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.18801" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 622.679679][ T42] audit: type=1326 audit(2000001702.799:11022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.18801" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709f008 code=0x7ffc0000 [ 623.447143][ T7327] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 623.712988][ T7327] Bluetooth: hci2: command 0x0419 tx timeout [ 623.715029][ T5756] Bluetooth: hci3: command 0x0c1a tx timeout [ 623.716660][ T5103] Bluetooth: hci0: command 0x0405 tx timeout [ 624.660784][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18835'. [ 624.867715][T14471] o2cb: This node has not been configured. [ 624.873032][T14471] o2cb: Cluster check failed. Fix errors before retrying. [ 624.880983][T14471] (syz.8.18840,14471,2):user_dlm_register:674 ERROR: status = -22 [ 624.885164][T14471] (syz.8.18840,14471,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 625.177416][T14496] openvswitch: netlink: IP tunnel dst address not specified [ 625.180703][T14496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.320707][T14421] syz.9.18817 (14421) used greatest stack depth: 18248 bytes left [ 625.875816][T14540] binder: Binderfs stats mode cannot be changed during a remount [ 626.243546][T14573] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18882'. [ 626.250571][ T34] kernel write not supported for file /input/event2 (pid: 34 comm: kworker/3:0) [ 626.256163][T14573] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18882'. [ 627.388442][T14616] lo speed is unknown, defaulting to 1000 [ 627.711694][T14616] lo speed is unknown, defaulting to 1000 [ 627.730061][T14639] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 628.200595][T14664] pimreg: tun_chr_ioctl cmd 1074025678 [ 628.204460][T14664] pimreg: group set to 768 [ 628.567472][T14675] block nbd9: shutting down sockets [ 629.618576][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18952'. [ 630.399455][T14770] input: syz1 as /devices/virtual/input/input98 [ 630.699759][ T7189] block nbd2: Receive control failed (result -32) [ 631.451044][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 631.451065][ T42] audit: type=1326 audit(2000001711.619:11027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14849 comm="syz.5.19003" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efec code=0x0 [ 631.948628][T14884] vivid-000: disconnect [ 631.959100][T14879] vivid-000: reconnect [ 632.008991][T14888] netlink: 24 bytes leftover after parsing attributes in process `syz.9.19018'. [ 632.295420][T14906] lo speed is unknown, defaulting to 1000 [ 632.352825][ T1480] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 632.401082][T14906] lo speed is unknown, defaulting to 1000 [ 632.512809][ T1480] usb 14-1: Using ep0 maxpacket: 32 [ 632.521415][ T1480] usb 14-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 632.535057][ T1480] usb 14-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 632.546808][ T1480] usb 14-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 632.555368][ T1480] usb 14-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 632.562063][ T1480] usb 14-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 632.567692][ T1480] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.570818][ T1480] usb 14-1: Product: syz [ 632.572530][ T1480] usb 14-1: Manufacturer: syz [ 632.574868][ T1480] usb 14-1: SerialNumber: syz [ 632.581704][ C1] imon 14-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 632.599204][ T1480] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/input/input99 [ 632.823348][ T1480] imon 14-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 632.826940][ T1480] (id 0x00) [ 632.883309][ T1480] rc_core: IR keymap rc-imon-pad not found [ 632.888690][ T1480] Registered IR keymap rc-empty [ 632.891311][ T1480] imon 14-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 632.897406][ T1480] imon 14-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 633.024566][ T1480] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0 [ 633.031285][ T1480] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0/input100 [ 633.041898][ T1480] imon 14-1:155.0: iMON device (15c2:ffdc, intf0) on usb<14:2> initialized [ 633.203861][ T5847] usb 14-1: USB disconnect, device number 2 [ 633.624100][ T42] audit: type=1326 audit(2000001713.789:11028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14952 comm="syz.7.19047" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f12fec code=0x0 [ 633.629671][T14955] binder: 14953:14955 ioctl 8933 0 returned -22 [ 633.929496][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19052'. [ 634.201316][T14981] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.19059'. [ 634.619700][T14997] bond1 (unregistering): Released all slaves [ 635.184797][T15034] dummy0: entered allmulticast mode [ 635.191432][T15033] dummy0: left allmulticast mode [ 635.220805][T15036] netlink: 52 bytes leftover after parsing attributes in process `syz.8.19085'. [ 635.318960][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19089'. [ 635.323750][T15045] netlink: 'syz.8.19089': attribute type 30 has an invalid length. [ 635.331753][ T5820] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.339115][ T5820] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.342611][ T5820] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.348745][ T5820] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.368948][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19089'. [ 635.375469][T15045] netlink: 'syz.8.19089': attribute type 30 has an invalid length. [ 635.381124][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19090'. [ 635.993180][ T1480] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 636.006171][T15093] netlink: 52 bytes leftover after parsing attributes in process `syz.9.19111'. [ 636.010106][T15093] netlink: 52 bytes leftover after parsing attributes in process `syz.9.19111'. [ 636.142889][ T1480] usb 10-1: Using ep0 maxpacket: 8 [ 636.149895][ T1480] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 636.154330][ T1480] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.162265][ T1480] pvrusb2: Hardware description: Terratec Grabster AV400 [ 636.165798][ T1480] pvrusb2: ********** [ 636.167466][ T1480] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 636.170779][ T1480] pvrusb2: Important functionality might not be entirely working. [ 636.174150][ T1480] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 636.177981][ T1480] pvrusb2: ********** [ 636.368123][ T2517] pvrusb2: Invalid write control endpoint [ 636.413263][ T2517] pvrusb2: Invalid write control endpoint [ 636.418993][ T2517] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 636.423445][ T2517] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 636.426930][ T2517] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 636.431078][ T2517] pvrusb2: Device being rendered inoperable [ 636.434653][ T2517] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 636.437586][ T2517] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 636.447835][ T2517] pvrusb2: Attached sub-driver cx25840 [ 636.450181][ T2517] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 636.454910][ T2517] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 636.568124][ T1480] usb 10-1: USB disconnect, device number 30 [ 636.689930][T15123] vimc link validate: Scaler:src:16x2160 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 636.824034][T15129] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 636.828033][T15129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.533195][T15181] netlink: 24 bytes leftover after parsing attributes in process `syz.8.19151'. [ 637.545997][T15181] netlink: 24 bytes leftover after parsing attributes in process `syz.8.19151'. [ 637.680564][ T5896] kernel write not supported for file /sequencer (pid: 5896 comm: kworker/3:4) [ 638.230081][T15229] netlink: 36 bytes leftover after parsing attributes in process `syz.5.19169'. [ 638.717058][ T5847] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 638.879953][T15261] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19188'. [ 638.884098][ T5847] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 638.891868][ T5847] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 638.899760][ T5847] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 638.910802][ T5847] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.920894][T15240] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 638.931634][ T5847] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 639.145108][ T34] usb 14-1: USB disconnect, device number 3 [ 639.761918][T15220] Set syz1 is full, maxelem 65536 reached [ 639.841017][T15296] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 640.474738][ T42] audit: type=1326 audit(2000001720.649:11029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.5.19214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 640.483948][ T42] audit: type=1326 audit(2000001720.649:11030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.5.19214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 640.493407][ T42] audit: type=1326 audit(2000001720.649:11031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.5.19214" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf709efec code=0x7ffc0000 [ 640.502550][ T42] audit: type=1326 audit(2000001720.649:11032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.5.19214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 640.511568][ T42] audit: type=1326 audit(2000001720.649:11033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.5.19214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 640.521030][ T42] audit: type=1326 audit(2000001720.649:11034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.5.19214" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf709efec code=0x7ffc0000 [ 640.529970][ T42] audit: type=1326 audit(2000001720.649:11035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.5.19214" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709f008 code=0x7ffc0000 [ 640.537694][ T42] audit: type=1326 audit(2000001720.649:11036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.5.19214" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709f008 code=0x7ffc0000 [ 640.546943][ T42] audit: type=1326 audit(2000001720.649:11037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.5.19214" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709f008 code=0x7ffc0000 [ 640.555757][ T42] audit: type=1326 audit(2000001720.649:11038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.5.19214" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709f008 code=0x7ffc0000 [ 641.320500][T15340] loop9: detected capacity change from 0 to 7 [ 641.496201][T15349] netlink: 'syz.8.19226': attribute type 4 has an invalid length. [ 641.499744][T15349] netlink: 'syz.8.19226': attribute type 8 has an invalid length. [ 641.505493][T15349] __nla_validate_parse: 1 callbacks suppressed [ 641.505508][T15349] netlink: 212 bytes leftover after parsing attributes in process `syz.8.19226'. [ 641.533228][ C3] blk_print_req_error: 11 callbacks suppressed [ 641.533249][ C3] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 641.539732][ C3] buffer_io_error: 30 callbacks suppressed [ 641.539744][ C3] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 641.603023][T15354] input: syz1 as /devices/virtual/input/input101 [ 641.759204][T15367] input: syz1 as /devices/virtual/input/input102 [ 641.872879][ T5756] Bluetooth: hci4: command 0x1003 tx timeout [ 641.873457][ T7327] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 641.969764][ T34] kernel write not supported for file /uhid (pid: 34 comm: kworker/3:0) [ 642.010643][T15389] netlink: 72 bytes leftover after parsing attributes in process `syz.7.19245'. [ 642.572868][ T1480] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 642.683628][T15432] netlink: 'syz.8.19265': attribute type 1 has an invalid length. [ 642.687097][T15432] netlink: 'syz.8.19265': attribute type 2 has an invalid length. [ 642.691808][T15432] netlink: 'syz.8.19265': attribute type 1 has an invalid length. [ 642.695592][T15432] netlink: 'syz.8.19265': attribute type 2 has an invalid length. [ 642.722815][ T1480] usb 12-1: Using ep0 maxpacket: 32 [ 642.726273][ T1480] usb 12-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 642.730054][ T1480] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 642.737438][ T1480] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 642.741138][ T1480] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 642.744115][ T1480] usb 12-1: Product: syz [ 642.745818][ T1480] usb 12-1: Manufacturer: syz [ 642.747397][ T1480] usb 12-1: SerialNumber: syz [ 642.750460][ T1480] usb 12-1: config 0 descriptor?? [ 642.963759][ T5896] usb 12-1: USB disconnect, device number 12 [ 643.211191][T15448] openvswitch: netlink: Missing key (keys=40, expected=100) [ 643.804916][ T5824] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 643.983663][ T5824] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 643.987163][ T5824] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 643.990123][ T5824] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 643.994231][ T5824] usb 12-1: config 0 interface 0 has no altsetting 0 [ 643.997495][ T5824] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 644.000451][ T5824] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 644.004757][ T5824] usb 12-1: config 0 interface 0 has no altsetting 0 [ 644.007869][ T5824] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 644.010788][ T5824] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 644.015191][ T5824] usb 12-1: config 0 interface 0 has no altsetting 0 [ 644.018860][ T5824] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 644.021769][ T5824] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 644.025727][ T5824] usb 12-1: config 0 interface 0 has no altsetting 0 [ 644.028612][ T5824] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 644.031545][ T5824] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 644.036347][ T5824] usb 12-1: config 0 interface 0 has no altsetting 0 [ 644.039552][ T5824] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 644.043546][ T5824] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 644.047930][ T5824] usb 12-1: config 0 interface 0 has no altsetting 0 [ 644.050746][ T5824] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 644.054145][ T5824] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 644.057747][ T5824] usb 12-1: config 0 interface 0 has no altsetting 0 [ 644.060706][ T5824] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 644.063780][ T5824] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 644.067872][ T5824] usb 12-1: config 0 interface 0 has no altsetting 0 [ 644.073223][ T5824] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 644.077061][ T5824] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 644.079813][ T5824] usb 12-1: Product: syz [ 644.081065][ T5824] usb 12-1: Manufacturer: syz [ 644.082571][ T5824] usb 12-1: SerialNumber: syz [ 644.086886][ T5824] usb 12-1: config 0 descriptor?? [ 644.096054][ T5824] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 644.383476][ T1480] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 644.450807][T15480] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19287'. [ 644.552992][ T1480] usb 14-1: Using ep0 maxpacket: 8 [ 644.560452][ T1480] usb 14-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 644.564593][ T1480] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.574537][ T1480] pvrusb2: Hardware description: Terratec Grabster AV400 [ 644.580042][ T1480] pvrusb2: ********** [ 644.581393][ T1480] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 644.584883][ T1480] pvrusb2: Important functionality might not be entirely working. [ 644.587712][ T1480] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 644.591294][ T1480] pvrusb2: ********** [ 644.790401][ T2517] pvrusb2: Invalid write control endpoint [ 644.861883][ T2517] pvrusb2: Invalid write control endpoint [ 644.864608][ T2517] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 644.868466][ T2517] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 644.871444][ T2517] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 644.875159][ T2517] pvrusb2: Device being rendered inoperable [ 644.877359][ T2517] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 644.880398][ T2517] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 644.885484][ T2517] pvrusb2: Attached sub-driver cx25840 [ 644.888790][ T2517] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 644.892071][ T2517] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 644.992075][T15467] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 645.004457][ T847] usb 14-1: USB disconnect, device number 4 [ 645.385029][T15517] netlink: 'syz.5.19301': attribute type 10 has an invalid length. [ 645.387865][T15517] netlink: 128 bytes leftover after parsing attributes in process `syz.5.19301'. [ 645.572836][ T847] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 645.722824][ T847] usb 13-1: Using ep0 maxpacket: 8 [ 645.726492][ T847] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 645.729348][ T847] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 645.732377][ T847] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 645.735776][ T847] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 645.739175][ T847] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.745878][ T847] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 645.749120][ T847] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.969693][ T847] usb 13-1: GET_CAPABILITIES returned 0 [ 645.972480][ T847] usbtmc 13-1:16.0: can't read capabilities [ 645.983263][ T1480] kernel read not supported for file /dsp1 (pid: 1480 comm: kworker/1:2) [ 646.098207][T15538] netlink: 'syz.9.19311': attribute type 1 has an invalid length. [ 646.100978][T15538] netlink: 'syz.9.19311': attribute type 2 has an invalid length. [ 646.355969][ C1] usb 12-1: yurex_control_callback - control failed: -2 [ 646.358461][ C1] usb 12-1: yurex_control_callback - control failed: -32 [ 646.366750][ T847] usb 12-1: USB disconnect, device number 13 [ 646.369737][ T34] usb 13-1: USB disconnect, device number 15 [ 646.373353][ T847] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 646.571552][T15567] sch_fq: defrate 0 ignored. [ 647.651913][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19359'. [ 647.663743][T15650] netlink: 'syz.7.19359': attribute type 30 has an invalid length. [ 647.670595][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19359'. [ 647.681380][T15650] netlink: 'syz.7.19359': attribute type 30 has an invalid length. [ 647.931729][T15665] netlink: 132 bytes leftover after parsing attributes in process `syz.9.19369'. [ 647.948000][T15665] netlink: 'syz.9.19369': attribute type 12 has an invalid length. [ 647.950578][T15665] netlink: 132 bytes leftover after parsing attributes in process `syz.9.19369'. [ 647.953459][ T847] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 648.106826][ T847] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 648.121785][ T847] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 648.133324][ T847] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 648.140395][ T847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.155329][T15652] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 648.172194][ T847] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 648.396889][ T847] usb 10-1: USB disconnect, device number 31 [ 650.274878][ T1480] kernel read not supported for file /dsp1 (pid: 1480 comm: kworker/1:2) [ 650.996007][T15846] netlink: 36 bytes leftover after parsing attributes in process `syz.9.19447'. [ 651.281299][T15868] Context (ID=0x0) not attached to queue pair (handle=0x4e1:0x0) [ 651.510977][T15884] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 651.514079][T15884] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 651.523885][T15884] vhci_hcd vhci_hcd.0: Device attached [ 651.552485][T15884] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 651.554734][T15884] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 651.572480][T15884] vhci_hcd vhci_hcd.0: Device attached [ 651.578730][T15884] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 651.581347][T15884] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 651.584864][T15884] vhci_hcd vhci_hcd.0: Device attached [ 651.589782][T15884] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(9) [ 651.591979][T15884] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 651.595040][T15884] vhci_hcd vhci_hcd.0: Device attached [ 651.598416][T15895] vhci_hcd: connection closed [ 651.598884][T15893] vhci_hcd: connection closed [ 651.598983][T15885] vhci_hcd: connection closed [ 651.600919][T22549] vhci_hcd vhci_hcd.5: stop threads [ 651.602210][T15890] vhci_hcd: connection closed [ 651.608220][T22549] vhci_hcd vhci_hcd.5: release socket [ 651.613837][T22549] vhci_hcd vhci_hcd.5: disconnect device [ 651.616477][T22549] vhci_hcd vhci_hcd.5: stop threads [ 651.618886][T22549] vhci_hcd vhci_hcd.5: release socket [ 651.621179][T22549] vhci_hcd vhci_hcd.5: disconnect device [ 651.625546][T22549] vhci_hcd vhci_hcd.5: stop threads [ 651.627870][T22549] vhci_hcd vhci_hcd.5: release socket [ 651.630272][T22549] vhci_hcd vhci_hcd.5: disconnect device [ 651.638246][T22549] vhci_hcd vhci_hcd.5: stop threads [ 651.640624][T22549] vhci_hcd vhci_hcd.5: release socket [ 651.645150][T22549] vhci_hcd vhci_hcd.5: disconnect device [ 651.713637][ T1480] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 651.990148][T15917] block nbd7: shutting down sockets [ 652.337671][T15950] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19491'. [ 652.365824][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19493'. [ 652.372054][T15952] netlink: 72 bytes leftover after parsing attributes in process `syz.9.19493'. [ 652.599027][T15974] netlink: 3 bytes leftover after parsing attributes in process `syz.5.19502'. [ 652.760012][T15993] tipc: Started in network mode [ 652.761673][T15993] tipc: Node identity ac14140f, cluster identity 4711 [ 652.766391][T15993] tipc: New replicast peer: 255.255.255.255 [ 652.769270][T15993] tipc: Enabled bearer , priority 4 [ 652.785699][T15991] GUP no longer grows the stack in syz.8.19511 (15991): 80009000-8000a000 (80005000) [ 652.802849][T15991] CPU: 3 UID: 0 PID: 15991 Comm: syz.8.19511 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.802886][T15991] Tainted: [L]=SOFTLOCKUP [ 652.802893][T15991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 652.802905][T15991] Call Trace: [ 652.802914][T15991] [ 652.802922][T15991] dump_stack_lvl+0x100/0x190 [ 652.802954][T15991] gup_vma_lookup.cold+0x83/0x96 [ 652.802987][T15991] __get_user_pages+0x241/0x32a0 [ 652.803022][T15991] ? down_read_killable+0x35e/0x520 [ 652.803052][T15991] ? __pfx___get_user_pages+0x10/0x10 [ 652.803087][T15991] __gup_longterm_locked+0x87d/0x16f0 [ 652.803123][T15991] ? __pfx___gup_longterm_locked+0x10/0x10 [ 652.803151][T15991] ? lock_acquire+0x1b9/0x370 [ 652.803191][T15991] gup_fast_fallback+0x16dc/0x2790 [ 652.803230][T15991] ? __pfx_gup_fast_fallback+0x10/0x10 [ 652.803252][T15991] ? find_held_lock+0x2b/0x80 [ 652.803275][T15991] ? __lock_acquire+0x49f/0x1a40 [ 652.803304][T15991] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 652.803323][T15991] ? lockdep_hardirqs_on+0x78/0x100 [ 652.803347][T15991] get_user_pages_fast+0xa7/0xf0 [ 652.803372][T15991] ? __pfx_get_user_pages_fast+0x10/0x10 [ 652.803400][T15991] ? iov_iter_advance+0xac/0x6d0 [ 652.803434][T15991] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 652.803467][T15991] ? pipe_lock+0x69/0x80 [ 652.803500][T15991] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 652.803530][T15991] ? __pfx___mutex_lock+0x10/0x10 [ 652.803552][T15991] ? iovec_from_user+0xda/0x140 [ 652.803578][T15991] iov_iter_get_pages2+0xa3/0x100 [ 652.803597][T15991] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 652.803616][T15991] ? wait_for_space+0x2ca/0x3b0 [ 652.803643][T15991] __do_sys_vmsplice+0x7dd/0x13c0 [ 652.803666][T15991] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 652.803687][T15991] ? __pfx_futex_wait+0x10/0x10 [ 652.803766][T15991] ? __do_fast_syscall_32+0xe7/0x970 [ 652.803790][T15991] __do_fast_syscall_32+0xe7/0x970 [ 652.803817][T15991] do_fast_syscall_32+0x32/0x70 [ 652.803836][T15991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 652.803858][T15991] RIP: 0023:0xf6feefec [ 652.803879][T15991] Code: Unable to access opcode bytes at 0xf6feefc2. [ 652.803888][T15991] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000013c [ 652.803908][T15991] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 652.803921][T15991] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 652.803934][T15991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 652.803946][T15991] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 652.803959][T15991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 652.803989][T15991] [ 652.897687][T16000] netlink: 'syz.9.19516': attribute type 4 has an invalid length. [ 652.923674][T16000] netlink: 'syz.9.19516': attribute type 8 has an invalid length. [ 652.926677][T16000] netlink: 212 bytes leftover after parsing attributes in process `syz.9.19516'. [ 653.242630][T16024] loop9: detected capacity change from 0 to 7 [ 653.440247][ C1] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 653.444253][ C1] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 653.508177][ T7327] Bluetooth: hci1: unexpected event for opcode 0x2043 [ 653.660299][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19540'. [ 653.777959][ T9] tipc: Node number set to 2886997007 [ 653.855539][ T34] kernel write not supported for file /uhid (pid: 34 comm: kworker/3:0) [ 653.969116][T16071] pimreg: entered allmulticast mode [ 653.976745][T16071] pimreg: left allmulticast mode [ 654.224144][ T230] ------------[ cut here ]------------ [ 654.229606][ T230] time_after(jiffies, timeout) [ 654.229624][ T230] WARNING: io_uring/io_uring.c:2365 at io_ring_exit_work+0x479/0xd7a, CPU#0: kworker/u33:6/230 [ 654.235908][ T230] Modules linked in: [ 654.239903][ T230] CPU: 0 UID: 0 PID: 230 Comm: kworker/u33:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.244679][ T230] Tainted: [L]=SOFTLOCKUP [ 654.246435][ T230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 654.250202][ T230] Workqueue: iou_exit io_ring_exit_work [ 654.252022][ T230] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 654.254143][ T230] Code: 8e e8 db 5f 43 01 48 8b 05 f4 a3 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 c2 d4 d3 00 4d 85 ff 79 12 e8 18 da d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 06 da d3 00 48 8b 74 24 20 [ 654.260315][ T230] RSP: 0000:ffffc90002cf7aa0 EFLAGS: 00010293 [ 654.262388][ T230] RAX: 0000000000000000 RBX: ffff8880141aa710 RCX: ffffffff81354e9e [ 654.265482][ T230] RDX: ffff888022d74a80 RSI: ffffffff81354ea8 RDI: ffff888022d74a80 [ 654.268311][ T230] RBP: ffffc90002cf7c38 R08: 0000000000000007 R09: 0000000000000000 [ 654.270891][ T230] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff8880141aa000 [ 654.273642][ T230] R13: dffffc0000000000 R14: 00000000141aa700 R15: ffffffffffffffff [ 654.276571][ T230] FS: 0000000000000000(0000) GS:ffff888096bee000(0000) knlGS:0000000000000000 [ 654.279700][ T230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.281957][ T230] CR2: 00000000f73a72f0 CR3: 000000000e992000 CR4: 0000000000352ef0 [ 654.285123][ T230] Call Trace: [ 654.286310][ T230] [ 654.287543][ T230] ? do_raw_spin_lock+0x128/0x260 [ 654.289578][ T230] ? __pfx_io_ring_exit_work+0x10/0x10 [ 654.291442][ T230] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 654.293379][ T230] ? debug_object_deactivate+0x2e4/0x3b0 [ 654.295189][ T230] ? rcu_is_watching+0x12/0xc0 [ 654.297144][ T230] process_one_work+0xa23/0x1940 [ 654.298773][ T230] ? __pfx_process_one_work+0x10/0x10 [ 654.300580][ T230] ? __pfx_io_ring_exit_work+0x10/0x10 [ 654.302351][ T230] worker_thread+0x5ef/0xe50 [ 654.303885][ T230] ? __pfx_worker_thread+0x10/0x10 [ 654.305608][ T230] ? kthread+0x13a/0x450 [ 654.307111][ T230] ? __pfx_worker_thread+0x10/0x10 [ 654.308749][ T230] kthread+0x370/0x450 [ 654.310126][ T230] ? __pfx_kthread+0x10/0x10 [ 654.311625][ T230] ret_from_fork+0x72b/0xd50 [ 654.313329][ T230] ? __pfx_ret_from_fork+0x10/0x10 [ 654.315418][ T230] ? __switch_to+0x800/0x10f0 [ 654.317349][ T230] ? __pfx_kthread+0x10/0x10 [ 654.319293][ T230] ret_from_fork_asm+0x1a/0x30 [ 654.321156][ T230] [ 654.322182][ T230] Kernel panic - not syncing: kernel: panic_on_warn set ... SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 654.324551][ T230] CPU: 0 UID: 0 PID: 230 Comm: kworker/u33:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.328854][ T230] Tainted: [L]=SOFTLOCKUP [ 654.330689][ T230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 654.334335][ T230] Workqueue: iou_exit io_ring_exit_work [ 654.336269][ T230] Call Trace: [ 654.337534][ T230] [ 654.338644][ T230] dump_stack_lvl+0x100/0x190 [ 654.340366][ T230] vpanic+0x552/0x970 [ 654.341840][ T230] ? __pfx_vpanic+0x10/0x10 [ 654.343522][ T230] panic+0xd1/0xe0 [ 654.344893][ T230] ? __pfx_panic+0x10/0x10 [ 654.346635][ T230] ? check_panic_on_warn+0x1f/0x90 [ 654.348839][ T230] check_panic_on_warn.cold+0x19/0x34 [ 654.351166][ T230] ? io_ring_exit_work+0x479/0xd7a [ 654.353305][ T230] __warn.cold+0x191/0x318 [ 654.355099][ T230] __report_bug+0x30f/0x440 [ 654.356477][ T230] ? io_ring_exit_work+0x479/0xd7a [ 654.358396][ T230] ? __pfx___report_bug+0x10/0x10 [ 654.360363][ T230] ? rcu_is_watching+0x12/0xc0 [ 654.362365][ T230] ? trace_contention_end+0x126/0x160 [ 654.364552][ T230] ? __mutex_lock+0x26d/0x1bd0 [ 654.366437][ T230] ? io_ring_exit_work+0x422/0xd7a [ 654.368624][ T230] ? find_held_lock+0x2b/0x80 [ 654.370665][ T230] ? io_ring_exit_work+0x434/0xd7a [ 654.372817][ T230] ? io_ring_exit_work+0x479/0xd7a [ 654.374979][ T230] report_bug+0xb2/0x220 [ 654.376729][ T230] ? io_ring_exit_work+0x479/0xd7a [ 654.378905][ T230] handle_bug+0x16a/0x2a0 [ 654.380707][ T230] exc_invalid_op+0x17/0x50 [ 654.382596][ T230] asm_exc_invalid_op+0x1a/0x20 [ 654.384643][ T230] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 654.387021][ T230] Code: 8e e8 db 5f 43 01 48 8b 05 f4 a3 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 c2 d4 d3 00 4d 85 ff 79 12 e8 18 da d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 06 da d3 00 48 8b 74 24 20 [ 654.394925][ T230] RSP: 0000:ffffc90002cf7aa0 EFLAGS: 00010293 [ 654.397511][ T230] RAX: 0000000000000000 RBX: ffff8880141aa710 RCX: ffffffff81354e9e [ 654.400559][ T230] RDX: ffff888022d74a80 RSI: ffffffff81354ea8 RDI: ffff888022d74a80 [ 654.403090][ T230] RBP: ffffc90002cf7c38 R08: 0000000000000007 R09: 0000000000000000 [ 654.405545][ T230] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff8880141aa000 [ 654.408268][ T230] R13: dffffc0000000000 R14: 00000000141aa700 R15: ffffffffffffffff [ 654.410830][ T230] ? io_ring_exit_work+0x46e/0xd7a [ 654.412465][ T230] ? io_ring_exit_work+0x478/0xd7a [ 654.414201][ T230] ? do_raw_spin_lock+0x128/0x260 [ 654.415880][ T230] ? __pfx_io_ring_exit_work+0x10/0x10 [ 654.418135][ T230] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 654.420229][ T230] ? debug_object_deactivate+0x2e4/0x3b0 [ 654.422483][ T230] ? rcu_is_watching+0x12/0xc0 [ 654.424385][ T230] process_one_work+0xa23/0x1940 [ 654.426286][ T230] ? __pfx_process_one_work+0x10/0x10 [ 654.428276][ T230] ? __pfx_io_ring_exit_work+0x10/0x10 [ 654.430284][ T230] worker_thread+0x5ef/0xe50 [ 654.431762][ T230] ? __pfx_worker_thread+0x10/0x10 [ 654.433399][ T230] ? kthread+0x13a/0x450 [ 654.435086][ T230] ? __pfx_worker_thread+0x10/0x10 [ 654.437078][ T230] kthread+0x370/0x450 [ 654.438682][ T230] ? __pfx_kthread+0x10/0x10 [ 654.440500][ T230] ret_from_fork+0x72b/0xd50 [ 654.442335][ T230] ? __pfx_ret_from_fork+0x10/0x10 [ 654.444316][ T230] ? __switch_to+0x800/0x10f0 [ 654.446171][ T230] ? __pfx_kthread+0x10/0x10 [ 654.447984][ T230] ret_from_fork_asm+0x1a/0x30 [ 654.449654][ T230] [ 654.451478][ T230] Kernel Offset: disabled [ 654.453215][ T230] Rebooting in 86400 seconds..