last executing test programs: 5.84870889s ago: executing program 1 (id=3042): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) 5.751306527s ago: executing program 1 (id=3043): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b24, 0x0) 4.030188853s ago: executing program 2 (id=3063): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r2], 0x70}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 3.981974782s ago: executing program 2 (id=3065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b000600000008001800400000000a001000010000000000000008000b000600000008000c"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) 3.906578522s ago: executing program 2 (id=3067): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 3.834822244s ago: executing program 2 (id=3069): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, 0x28e3291, 0x0) 3.74088492s ago: executing program 2 (id=3070): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000001c0)={@hyper, 0x2}) 3.545890442s ago: executing program 2 (id=3073): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 3.429524286s ago: executing program 32 (id=3073): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2.727924177s ago: executing program 1 (id=3088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.578737875s ago: executing program 1 (id=3093): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 2.286311671s ago: executing program 1 (id=3096): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000340)="b6", 0x1}], 0x1) 1.018139305s ago: executing program 3 (id=3107): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 939.40391ms ago: executing program 3 (id=3109): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 874.718754ms ago: executing program 3 (id=3114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x7, 0x901, 0xfffffffffffffffd, 0x7, 0xfffffffffffffff7, 0x40000000000009e, 0xfffffffffffffffe, 0xffff, 0x400, 0xfb, 0x5, 0x4000000004b, 0xe4, 0x3d, 0x2000000009, 0x7], 0x0, 0x10683}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 874.565566ms ago: executing program 0 (id=3115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) 660.930237ms ago: executing program 1 (id=3118): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 518.803598ms ago: executing program 3 (id=3119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x2ec, 0x2, 0x0, 0xc, 0x7, 0x5, 0x16, 0x9, 0x9, 0x5, 0x12, 0x20, 0x54, 0x5, 0x9, 0x1}}]}}]}, 0x170}}, 0x24040004) 518.64417ms ago: executing program 0 (id=3120): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 518.265822ms ago: executing program 3 (id=3121): r0 = io_uring_setup(0x68f6, &(0x7f00000000c0)={0x0, 0x48c7, 0x1000, 0x0, 0x13ad}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x80800) close_range(r0, 0xffffffffffffffff, 0x0) 439.912956ms ago: executing program 0 (id=3122): syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_HYPERV_EVENTFD(r1, 0x400caed0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0xffffffff}) 380.826ms ago: executing program 4 (id=3123): pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 345.890251ms ago: executing program 3 (id=3124): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x2, 0x100, 0x7, 0x85, 0x10, 0x6}) 239.067234ms ago: executing program 4 (id=3125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) 238.168237ms ago: executing program 4 (id=3126): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 130.81603ms ago: executing program 4 (id=3127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) 129.16485ms ago: executing program 0 (id=3135): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffdfffc, 0x4022c114, 0x0, 0x809, 0x8, 0x0, 0x0, 0x0, 0x3f818615bd736746, 0x9}}, 0x50) 69.393954ms ago: executing program 4 (id=3128): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}], [], 0x2f}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001100010000000000000000", @ANYRES32, @ANYBLOB='\x00\a'], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 68.994127ms ago: executing program 0 (id=3129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 68.836279ms ago: executing program 4 (id=3130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x200000, 0x30002, 0xc, 0x0, 0x9}) 0s ago: executing program 0 (id=3131): sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 0s ago: executing program 0 (id=3133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x48, r2, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) kernel console output (not intermixed with test programs): d-generic 0005:10CF:5508.0002: item fetching failed at offset 0/3 [ 67.343086][ T50] hid-generic 0005:10CF:5508.0002: probe with driver hid-generic failed with error -22 [ 67.487023][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 67.638929][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.642597][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.645753][ T50] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.653359][ T50] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.656975][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.661561][ T50] usb 8-1: config 0 descriptor?? [ 67.919761][ T6594] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.923043][ T70] Bluetooth: hci4: Frame reassembly failed (-84) [ 68.078973][ T50] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.081618][ T50] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.084990][ T50] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.087872][ T50] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.090392][ T50] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.092948][ T50] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.095493][ T50] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.098264][ T50] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.100769][ T50] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.103077][ T50] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.113858][ T50] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 68.339675][ T34] usb 8-1: USB disconnect, device number 2 [ 68.620432][ T6612] tun0: tun_chr_ioctl cmd 1074025676 [ 68.623557][ T6612] tun0: owner set to 0 [ 68.730355][ T6616] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.735905][ T6616] netlink: 'syz.1.251': attribute type 12 has an invalid length. [ 68.740393][ T6616] netlink: 'syz.1.251': attribute type 29 has an invalid length. [ 68.743278][ T6616] netlink: 148 bytes leftover after parsing attributes in process `syz.1.251'. [ 69.966349][ T5946] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 69.966359][ T5942] Bluetooth: hci4: command 0xfc11 tx timeout [ 70.396331][ T1026] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 70.558323][ T1026] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 70.563131][ T1026] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 70.568128][ T1026] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 70.571927][ T1026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.579751][ T6678] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.582872][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 70.588783][ T1026] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 70.639067][ T6680] loop6: detected capacity change from 0 to 2640 [ 70.643894][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.647834][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.650564][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.653100][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.655959][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.659175][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.662297][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.665835][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.669376][ T5945] ldm_validate_partition_table(): Disk read failed. [ 70.672672][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.675314][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.678029][ T5945] Dev loop6: unable to read RDB block 0 [ 70.680034][ T5945] loop6: unable to read partition table [ 70.684735][ T6680] ldm_validate_partition_table(): Disk read failed. [ 70.746812][ T6681] loop6: detected capacity change from 2640 to 524288000 [ 70.746903][ T6680] Dev loop6: unable to read RDB block 0 [ 70.751915][ T6680] loop6: unable to read partition table [ 70.754288][ T6680] loop_reread_partitions: partition scan of loop6 (irc VUXGZtM<I i8NL W@Q6%) failed (rc=-5) [ 70.910145][ T6688] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 70.910424][ T6690] netlink: 52 bytes leftover after parsing attributes in process `syz.3.286'. [ 70.916394][ T6024] usb 5-1: USB disconnect, device number 4 [ 70.965470][ T6694] overlayfs: upper fs does not support file handles, falling back to index=off. [ 70.970288][ T6694] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 71.758307][ T1026] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 71.928636][ T1026] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 71.933586][ T1026] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 71.937735][ T1026] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 71.941115][ T1026] usb 5-1: config 0 interface 0 has no altsetting 0 [ 71.946598][ T1026] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 71.949425][ T1026] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 71.952007][ T1026] usb 5-1: Product: syz [ 71.953343][ T1026] usb 5-1: Manufacturer: syz [ 71.954834][ T1026] usb 5-1: SerialNumber: syz [ 71.961573][ T1026] usb 5-1: config 0 descriptor?? [ 71.964100][ T6733] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 71.972487][ T1026] usb 5-1: selecting invalid altsetting 0 [ 72.215531][ T1026] usb 5-1: USB disconnect, device number 5 [ 72.827534][ T6800] vivid-007: disconnect [ 72.832053][ T6800] vivid-007: reconnect [ 73.356347][ T842] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 73.526336][ T842] usb 8-1: Using ep0 maxpacket: 8 [ 73.534065][ T842] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 73.538971][ T842] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 73.543456][ T842] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 73.548305][ T842] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 73.552055][ T842] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 73.555774][ T842] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.561753][ T842] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.564832][ T842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.783005][ T842] usb 8-1: GET_CAPABILITIES returned 0 [ 73.784805][ T842] usbtmc 8-1:16.0: can't read capabilities [ 74.001645][ T842] usb 8-1: USB disconnect, device number 3 [ 74.484028][ T6824] syz.0.344 (6824): drop_caches: 2 [ 74.994232][ T6881] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.372'. [ 75.490722][ T6914] pimreg: tun_chr_ioctl cmd 1074025678 [ 75.493368][ T6914] pimreg: group set to 768 [ 75.969566][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.972319][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.117594][ T6943] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.401'. [ 76.121464][ T6943] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 76.398834][ T6972] devpts: Bad value for 'max' [ 76.449888][ T6977] netlink: 11 bytes leftover after parsing attributes in process `syz.0.417'. [ 76.696164][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 76.705825][ T6990] netlink: 104 bytes leftover after parsing attributes in process `syz.1.425'. [ 76.710789][ T6990] netlink: 104 bytes leftover after parsing attributes in process `syz.1.425'. [ 76.888159][ T7004] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.915306][ T7008] loop7: detected capacity change from 0 to 7 [ 77.006559][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 77.044647][ T7018] binder: 7017:7018 ioctl c018620c 80000000 returned -1 [ 77.097613][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 77.191677][ T7027] veth1_to_batadv: entered promiscuous mode [ 77.194187][ T7027] macsec2: entered promiscuous mode [ 77.468400][ T7052] warning: `syz.0.452' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.593252][ T7064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.458'. [ 77.844529][ T7091] netlink: 'syz.2.471': attribute type 4 has an invalid length. [ 77.968967][ T7102] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 78.445405][ T7147] batadv_slave_1: entered promiscuous mode [ 78.451569][ T7145] batadv_slave_1: left promiscuous mode [ 78.886734][ T7177] input: syz0 as /devices/virtual/input/input6 [ 79.005420][ T7191] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 79.101921][ T7196] loop7: detected capacity change from 0 to 7 [ 79.191658][ T7205] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 79.195610][ T7205] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 79.201536][ T7205] overlayfs: failed to get uuid (178/file0, err=-13); falling back to uuid=null. [ 79.564217][ T7229] loop7: detected capacity change from 0 to 7 [ 79.640859][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 79.926360][ T842] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 80.098458][ T842] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.102618][ T842] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 80.116408][ T842] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.120056][ T842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.132033][ T7241] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 80.138646][ T842] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.468140][ T842] usb 7-1: USB disconnect, device number 2 [ 80.679093][ T7270] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.244647][ T7308] bond0: entered promiscuous mode [ 81.247417][ T7308] bond_slave_0: entered promiscuous mode [ 81.249356][ T7308] bond_slave_1: entered promiscuous mode [ 81.254300][ T7308] bond0: left promiscuous mode [ 81.257405][ T7308] bond_slave_0: left promiscuous mode [ 81.259484][ T7308] bond_slave_1: left promiscuous mode [ 81.487508][ T7323] debugfs: 'ttyS3' already exists in 'caif_serial' [ 81.788102][ T7350] loop4: detected capacity change from 0 to 524287936 [ 82.021680][ T7366] vlan2: entered allmulticast mode [ 82.023492][ T7366] macvtap0: entered allmulticast mode [ 82.025207][ T7366] veth0_macvtap: entered allmulticast mode [ 82.156615][ T842] kernel read not supported for file /dsp1 (pid: 842 comm: kworker/0:2) [ 82.310813][ T7394] input: syz1 as /devices/virtual/input/input7 [ 82.326300][ T842] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 82.473695][ T7406] loop8: detected capacity change from 0 to 524287999 [ 82.487368][ T5945] buffer_io_error: 24 callbacks suppressed [ 82.487379][ T5945] Buffer I/O error on dev loop8, logical block 65535998, async page read [ 82.496652][ T842] usb 5-1: Using ep0 maxpacket: 8 [ 82.515421][ T842] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 82.518640][ T842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.522317][ T842] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.526060][ T842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.531560][ T842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 82.538057][ T842] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 82.541654][ T842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.546016][ T842] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.554244][ T842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.559002][ T842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 82.561088][ T7410] Bluetooth: MGMT ver 1.23 [ 82.563581][ T842] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 82.567352][ T842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.571230][ T842] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.575645][ T842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.580063][ T842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 82.588475][ T842] usb 5-1: string descriptor 0 read error: -22 [ 82.590751][ T842] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 82.593819][ T842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.604507][ T842] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 82.815610][ T842] usb 5-1: USB disconnect, device number 6 [ 82.874225][ T7428] debugfs: 'ttyS3' already exists in 'caif_serial' [ 83.009014][ T7440] __nla_validate_parse: 1 callbacks suppressed [ 83.009030][ T7440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'. [ 83.022493][ T7372] adutux: No device or device unplugged -19 [ 83.242057][ T7465] vlan2: entered allmulticast mode [ 83.244288][ T7465] macvtap0: entered allmulticast mode [ 83.247580][ T7465] veth0_macvtap: entered allmulticast mode [ 83.702084][ T7498] vlan2: entered allmulticast mode [ 83.704001][ T7498] macvtap0: entered allmulticast mode [ 83.705891][ T7498] veth0_macvtap: entered allmulticast mode [ 83.784527][ T7506] loop4: detected capacity change from 0 to 7 [ 83.790708][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.793888][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.798305][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.801392][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.804047][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.808056][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.816248][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.819733][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.824725][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.827902][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.832315][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.835828][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.839571][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.842874][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.845567][ T5945] ldm_validate_partition_table(): Disk read failed. [ 83.849050][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.852540][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.855226][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.858884][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.862351][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.871107][ T5945] Dev loop4: unable to read RDB block 0 [ 83.873776][ T5945] loop4: unable to read partition table [ 83.875784][ T5945] loop4: partition table beyond EOD, truncated [ 83.884114][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'. [ 83.917473][ T7506] ldm_validate_partition_table(): Disk read failed. [ 83.920651][ T7506] Dev loop4: unable to read RDB block 0 [ 83.923025][ T7506] loop4: unable to read partition table [ 83.925493][ T7506] loop4: partition table beyond EOD, truncated [ 83.928275][ T7506] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 84.935060][ T7601] vcan0: tx address claim with dest, not broadcast [ 86.221886][ T54] cfg80211: failed to load regulatory.db [ 86.275444][ T7653] netlink: 7 bytes leftover after parsing attributes in process `syz.1.722'. [ 86.506291][ T5985] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 86.677620][ T5985] usb 7-1: Using ep0 maxpacket: 8 [ 86.682063][ T5985] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 86.685945][ T5985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.717746][ T5985] pvrusb2: Hardware description: Terratec Grabster AV400 [ 86.720668][ T5985] pvrusb2: ********** [ 86.721960][ T5985] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 86.725213][ T5985] pvrusb2: Important functionality might not be entirely working. [ 86.728675][ T5985] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 86.732525][ T5985] pvrusb2: ********** [ 86.923694][ T2490] pvrusb2: Invalid write control endpoint [ 86.971907][ T2490] pvrusb2: Invalid write control endpoint [ 86.974496][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 86.979864][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 86.983907][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 86.988851][ T2490] pvrusb2: Device being rendered inoperable [ 86.993624][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 86.997593][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 87.005959][ T2490] pvrusb2: Attached sub-driver cx25840 [ 87.008955][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 87.013329][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 87.131495][ T7648] pvrusb2: Attempted to execute control transfer when device not ok [ 87.137090][ T6024] usb 7-1: USB disconnect, device number 3 [ 87.227805][ T7708] loop6: detected capacity change from 524288000 to 0 [ 87.701331][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.757'. [ 87.791301][ T7734] netlink: 40 bytes leftover after parsing attributes in process `syz.1.760'. [ 88.506822][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 88.551118][ T7766] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 88.553893][ T7766] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 88.662288][ T7775] can0: slcan on ttyS3. [ 88.731234][ T7782] tun0: tun_chr_ioctl cmd 1074025675 [ 88.733481][ T7782] tun0: persist disabled [ 88.767156][ T7775] can0 (unregistered): slcan off ttyS3. [ 88.947673][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 88.952354][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.784'. [ 88.957694][ T7798] netlink: 'syz.0.784': attribute type 20 has an invalid length. [ 89.195853][ T7817] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 89.198918][ T7817] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 89.539423][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 89.570183][ T7843] sp0: Synchronizing with TNC [ 89.738718][ T7850] netlink: 'syz.0.813': attribute type 3 has an invalid length. [ 90.283278][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 90.289812][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 90.361380][ T7901] usb usb9: usbfs: process 7901 (syz.0.829) did not claim interface 37 before use [ 90.546073][ T7919] can0: slcan on ttyS3. [ 90.628408][ T7919] can0 (unregistered): slcan off ttyS3. [ 91.160413][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 91.164254][ T7958] netlink: 56 bytes leftover after parsing attributes in process `syz.2.851'. [ 91.228151][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 91.443310][ T7980] program syz.2.861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.465228][ T7984] : renamed from vlan0 (while UP) [ 91.857606][ T40] audit: type=1326 audit(1774266085.568:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.1.879" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff6f6c code=0x0 [ 92.337206][ T50] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 92.491410][ T50] usb 7-1: unable to get BOS descriptor or descriptor too short [ 92.495412][ T50] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 92.498616][ T50] usb 7-1: can't read configurations, error -71 [ 93.086343][ T8074] block nbd3: NBD_DISCONNECT [ 93.126714][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 93.781826][ T8105] netlink: 148 bytes leftover after parsing attributes in process `syz.3.916'. [ 93.890597][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 94.177271][ T8121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.922'. [ 94.181097][ T8121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.922'. [ 94.244648][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 94.250103][ T8131] netlink: 148 bytes leftover after parsing attributes in process `syz.2.927'. [ 94.436313][ T5985] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 94.606650][ T5985] usb 6-1: Using ep0 maxpacket: 8 [ 94.613100][ T5985] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 94.617208][ T5985] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.621569][ T5985] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.627708][ T5985] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.633043][ T5985] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.638254][ T5985] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.642060][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.853153][ T8173] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.945'. [ 94.858284][ T5985] usb 6-1: GET_CAPABILITIES returned 0 [ 94.860709][ T5985] usbtmc 6-1:16.0: can't read capabilities [ 95.073166][ T842] usb 6-1: USB disconnect, device number 2 [ 95.623790][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.974'. [ 96.005440][ T13] Bluetooth: hci4: Frame reassembly failed (-90) [ 97.096310][ T842] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.246593][ T842] usb 5-1: Using ep0 maxpacket: 8 [ 97.249812][ T842] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 97.254241][ T842] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 97.258985][ T842] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.263787][ T842] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.270499][ T842] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.274961][ T842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.487079][ T842] usb 5-1: GET_CAPABILITIES returned 0 [ 97.489807][ T842] usbtmc 5-1:16.0: can't read capabilities [ 97.587725][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 97.691371][ T50] usb 5-1: USB disconnect, device number 7 [ 97.924597][ T8310] sch_fq: defrate 0 ignored. [ 98.046398][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.046425][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 98.112756][ T5985] hid_parser_main: 28 callbacks suppressed [ 98.112770][ T5985] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.126311][ T5985] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.129081][ T5985] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.131689][ T5985] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.134496][ T5985] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.136540][ T5946] Bluetooth: hci3: command tx timeout [ 98.137685][ T5985] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.142022][ T5985] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.145451][ T5985] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.148527][ T5985] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.152141][ T5985] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.165415][ T5985] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 98.165415][ T5985] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 98.215483][ T8325] fido_id[8325]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.413999][ T8338] faux_driver vgem: [drm] Unknown color mode 65545; guessing buffer size. [ 98.515366][ T8344] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 99.415842][ T8385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.461763][ T8389] pimreg0: renamed from lo (while UP) [ 99.550352][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 99.558297][ T8399] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1045'. [ 99.562359][ T8399] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1045'. [ 100.125558][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 100.129927][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 100.378372][ T5985] kernel write not supported for file /input/event2 (pid: 5985 comm: kworker/3:3) [ 100.867632][ T8462] netlink: 'syz.3.1073': attribute type 6 has an invalid length. [ 101.054943][ T13] bond0: (slave bond_slave_0): interface is now down [ 101.058659][ T13] bond0: (slave bond_slave_1): interface is now down [ 101.064329][ T13] bond0: now running without any active interface! [ 101.095057][ T8474] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1079'. [ 101.768864][ T8509] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 101.913213][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1097'. [ 101.959019][ T40] audit: type=1326 audit(1774266095.668:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6f88 code=0x7ffc0000 [ 101.970900][ T40] audit: type=1326 audit(1774266095.668:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6f88 code=0x7ffc0000 [ 101.981446][ T40] audit: type=1326 audit(1774266095.668:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6f88 code=0x7ffc0000 [ 101.989235][ T40] audit: type=1326 audit(1774266095.668:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6f88 code=0x7ffc0000 [ 101.997578][ T40] audit: type=1326 audit(1774266095.668:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6f88 code=0x7ffc0000 [ 102.009099][ T40] audit: type=1326 audit(1774266095.668:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6f88 code=0x7ffc0000 [ 102.020587][ T40] audit: type=1326 audit(1774266095.668:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 102.031313][ T40] audit: type=1326 audit(1774266095.668:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 102.040065][ T40] audit: type=1326 audit(1774266095.668:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6f88 code=0x7ffc0000 [ 102.048771][ T40] audit: type=1326 audit(1774266095.668:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6f88 code=0x7ffc0000 [ 102.433383][ T54] hid-generic 0080:0008:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 102.464390][ T8546] fido_id[8546]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.008657][ T8576] dvmrp0: entered allmulticast mode [ 103.103024][ T8586] sp0: Synchronizing with TNC [ 103.123080][ T8585] [U] `` [ 103.290999][ T8595] batadv_slave_1: entered promiscuous mode [ 103.294562][ T8595] batadv_slave_1: left promiscuous mode [ 103.595506][ T8617] dvmrp0: entered allmulticast mode [ 103.652919][ T8620] netlink: 'syz.2.1142': attribute type 1 has an invalid length. [ 103.906449][ T842] kernel read not supported for file /dsp1 (pid: 842 comm: kworker/0:2) [ 103.909668][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 103.924241][ T8637] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 103.927196][ T8637] dvmrp1: linktype set to 804 [ 104.178186][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1156'. [ 104.236038][ T8658] loop5: detected capacity change from 0 to 7 [ 104.243065][ T7682] Dev loop5: unable to read RDB block 7 [ 104.245742][ T7682] loop5: AHDI p1 [ 104.247927][ T7682] loop5: partition table partially beyond EOD, truncated [ 104.259389][ T8658] Dev loop5: unable to read RDB block 7 [ 104.261303][ T8658] loop5: AHDI p1 [ 104.262606][ T8658] loop5: partition table partially beyond EOD, truncated [ 104.384888][ T8672] input: syz1 as /devices/virtual/input/input9 [ 104.672546][ T8693] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 104.855660][ T8707] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 105.070473][ T5985] hid_parser_main: 46 callbacks suppressed [ 105.070491][ T5985] hid-generic 0005:15C2:0C6E.0006: unknown main item tag 0x0 [ 105.088434][ T5985] hid-generic 0005:15C2:0C6E.0006: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 105.108739][ T8726] netlink: 'syz.0.1190': attribute type 1 has an invalid length. [ 105.112005][ T8726] netlink: 'syz.0.1190': attribute type 2 has an invalid length. [ 105.115443][ T8726] netlink: 'syz.0.1190': attribute type 1 has an invalid length. [ 105.300027][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'. [ 105.305142][ T8751] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1200'. [ 105.308228][ T8751] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1200'. [ 105.664910][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1219'. [ 105.742935][ T8805] netlink: 'syz.3.1223': attribute type 1 has an invalid length. [ 105.745705][ T8805] netlink: 'syz.3.1223': attribute type 2 has an invalid length. [ 105.748480][ T8805] netlink: 'syz.3.1223': attribute type 1 has an invalid length. [ 105.751224][ T8805] netlink: 'syz.3.1223': attribute type 3 has an invalid length. [ 105.753854][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'. [ 105.896579][ T54] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.058757][ T54] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 106.062906][ T54] usb 5-1: config 0 interface 0 has no altsetting 0 [ 106.068530][ T54] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.072220][ T54] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.075011][ T54] usb 5-1: Product: syz [ 106.077590][ T54] usb 5-1: Manufacturer: syz [ 106.079669][ T54] usb 5-1: SerialNumber: syz [ 106.083541][ T54] usb 5-1: config 0 descriptor?? [ 106.102306][ T54] usb 5-1: selecting invalid altsetting 0 [ 106.110571][ T8837] mmap: syz.1.1235 (8837) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.313473][ T54] usb 5-1: USB disconnect, device number 8 [ 106.927976][ T842] kernel write not supported for file /video8 (pid: 842 comm: kworker/0:2) [ 107.016387][ T6023] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 107.049057][ T8901] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1268'. [ 107.052223][ T8901] netlink: 'syz.3.1268': attribute type 1 has an invalid length. [ 107.179901][ T6023] usb 7-1: config 0 has no interfaces? [ 107.184165][ T6023] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.189405][ T6023] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.194506][ T6023] usb 7-1: Product: syz [ 107.197023][ T6023] usb 7-1: Manufacturer: syz [ 107.199494][ T6023] usb 7-1: SerialNumber: syz [ 107.208022][ T6023] usb 7-1: config 0 descriptor?? [ 107.309915][ T8927] capability: warning: `syz.0.1280' uses deprecated v2 capabilities in a way that may be insecure [ 107.414404][ T6023] usb 7-1: USB disconnect, device number 6 [ 107.765147][ T8935] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1284'. [ 107.822938][ T8937] netlink: 'syz.0.1285': attribute type 2 has an invalid length. [ 107.868704][ T8939] input: syz1 as /devices/virtual/input/input10 [ 108.025758][ T40] kauditd_printk_skb: 96 callbacks suppressed [ 108.025776][ T40] audit: type=1800 audit(1774266101.728:113): pid=8945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1289" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 108.787007][ T9012] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1320'. [ 108.802524][ T9015] netlink: 'syz.0.1321': attribute type 2 has an invalid length. [ 109.480833][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 109.649414][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1352'. [ 109.927857][ T9097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.930919][ T9097] IPv6: NLM_F_CREATE should be set when creating new route [ 109.933290][ T9097] IPv6: NLM_F_CREATE should be set when creating new route [ 109.935637][ T9097] IPv6: NLM_F_CREATE should be set when creating new route [ 110.180590][ T961] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.183678][ T961] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.191245][ T961] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz1 [ 110.237897][ T9111] fido_id[9111]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.306408][ T842] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 111.326372][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 111.326419][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 111.373587][ T9142] netlink: 'syz.3.1379': attribute type 10 has an invalid length. [ 111.459025][ T842] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.462633][ T842] usb 6-1: config 0 has no interface number 0 [ 111.465640][ T842] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 111.470609][ T842] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 111.475359][ T842] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.480608][ T842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.492093][ T842] usb 6-1: config 0 descriptor?? [ 111.494956][ T9138] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 111.503482][ T9142] syz_tun: entered promiscuous mode [ 111.504148][ T842] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 111.519113][ T9142] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 111.584433][ T9151] __nla_validate_parse: 1 callbacks suppressed [ 111.584452][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'. [ 111.715506][ T50] usb 6-1: USB disconnect, device number 3 [ 111.844109][ T9178] Attempt to restore checkpoint with obsolete wellknown handles [ 112.050597][ T9200] bridge0: entered promiscuous mode [ 112.053145][ T9200] macvlan2: entered promiscuous mode [ 112.253305][ T9219] kvm_intel: kvm [9218]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 112.336855][ T9225] hub 1-0:1.0: USB hub found [ 112.342055][ T9225] hub 1-0:1.0: 2 ports detected [ 112.363490][ T29] kernel write not supported for file /snd/seq (pid: 29 comm: kworker/1:0) [ 113.857507][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'. [ 113.863007][ T9294] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1451'. [ 113.866054][ T9294] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1451'. [ 114.597233][ T40] audit: type=1326 audit(1774266108.308:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 114.609939][ T40] audit: type=1326 audit(1774266108.308:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 114.619693][ T40] audit: type=1326 audit(1774266108.308:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 114.630269][ T40] audit: type=1326 audit(1774266108.308:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1480" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 114.640499][ T40] audit: type=1326 audit(1774266108.308:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 114.649508][ T40] audit: type=1326 audit(1774266108.308:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 114.659279][ T40] audit: type=1326 audit(1774266108.308:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1480" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 114.668754][ T40] audit: type=1326 audit(1774266108.308:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1480" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 115.145271][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1506'. [ 115.152843][ T9414] netlink: 'syz.2.1506': attribute type 6 has an invalid length. [ 115.399205][ T9444] sctp: [Deprecated]: syz.1.1520 (pid 9444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.399205][ T9444] Use struct sctp_sack_info instead [ 116.396449][ T54] kernel read not supported for file /dsp1 (pid: 54 comm: kworker/1:1) [ 117.305562][ T40] audit: type=1326 audit(1774266111.008:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.1.1540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7fc00000 [ 117.339912][ T9528] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 117.342936][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1551'. [ 117.679211][ T9557] kvm: kvm [9554]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1 [ 118.159882][ T9593] (syz.2.1579,9593,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 118.491897][ T9615] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 119.113037][ T1026] kernel read not supported for file /dsp (pid: 1026 comm: kworker/3:2) [ 119.305092][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1612'. [ 120.633949][ T40] audit: type=1326 audit(1774266114.338:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.1.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 120.634290][ T9720] input: syz1 as /devices/virtual/input/input12 [ 120.649039][ T40] audit: type=1326 audit(1774266114.338:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.1.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6f88 code=0x7ffc0000 [ 120.662839][ T40] audit: type=1326 audit(1774266114.338:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.1.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 120.678550][ T40] audit: type=1326 audit(1774266114.348:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.1.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6f88 code=0x7ffc0000 [ 120.685674][ T40] audit: type=1326 audit(1774266114.348:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.1.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6f88 code=0x7ffc0000 [ 120.693330][ T40] audit: type=1326 audit(1774266114.348:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.1.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6f88 code=0x7ffc0000 [ 120.701102][ T40] audit: type=1326 audit(1774266114.348:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.1.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 120.708331][ T40] audit: type=1326 audit(1774266114.348:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.1.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 120.713047][ T9726] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1641'. [ 120.715323][ T40] audit: type=1326 audit(1774266114.348:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.1.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6f88 code=0x7ffc0000 [ 120.805390][ T9737] netlink: 'syz.1.1646': attribute type 6 has an invalid length. [ 120.809524][ T9737] netlink: 'syz.1.1646': attribute type 6 has an invalid length. [ 121.334603][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 121.666170][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1681'. [ 121.791489][ T9820] input: syz1 as /devices/virtual/input/input14 [ 121.844187][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'. [ 121.962211][ T9833] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 121.966513][ T9833] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 122.058076][ T9834] Falling back ldisc for ttyS3. [ 122.246260][ T40] audit: type=1326 audit(1774266115.948:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.0.1699" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdef6c code=0x0 [ 123.044666][ T9900] can0: slcan on ttyS3. [ 123.117698][ T9900] can0 (unregistered): slcan off ttyS3. [ 123.255875][ T9919] can0: slcan on ttynull. [ 123.475993][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1730'. [ 123.526039][ T1026] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 123.687035][ T1026] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 123.691148][ T1026] usb 7-1: config 0 has no interfaces? [ 123.694674][ T1026] usb 7-1: config 0 has no interfaces? [ 123.698729][ T1026] usb 7-1: config 0 has no interfaces? [ 123.703177][ T1026] usb 7-1: config 0 has no interfaces? [ 123.707932][ T1026] usb 7-1: config 0 has no interfaces? [ 123.711294][ T1026] usb 7-1: config 0 has no interfaces? [ 123.714743][ T1026] usb 7-1: config 0 has no interfaces? [ 123.718359][ T1026] usb 7-1: config 0 has no interfaces? [ 123.722345][ T1026] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 123.725973][ T1026] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 123.729754][ T1026] usb 7-1: Product: syz [ 123.731879][ T1026] usb 7-1: Manufacturer: syz [ 123.734229][ T1026] usb 7-1: SerialNumber: syz [ 123.740353][ T1026] usb 7-1: config 0 descriptor?? [ 123.945421][ T1026] usb 7-1: USB disconnect, device number 7 [ 124.027558][ T9918] can0 (unregistered): slcan off ttynull. [ 124.585020][ T9971] block nbd0: Unsupported socket: should be TCP or UNIX. [ 125.061234][ T9991] kernel read not supported for file /:){{:, (pid: 9991 comm: syz.1.1747) [ 125.105085][ T34] IPVS: starting estimator thread 0... [ 125.189984][T10000] binder: 9998:10000 ioctl c0306201 0 returned -14 [ 125.206514][ T9996] IPVS: using max 45 ests per chain, 108000 per kthread [ 125.471068][T10025] binder: Binderfs stats mode cannot be changed during a remount [ 125.753734][ T6029] kernel read not supported for file /swradio3 (pid: 6029 comm: kworker/2:4) [ 126.985749][T10112] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1801'. [ 127.027500][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 127.031192][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1803'. [ 127.088909][T10119] openvswitch: netlink: IP tunnel dst address not specified [ 127.274990][T10134] netlink: 'syz.0.1812': attribute type 4 has an invalid length. [ 127.645329][T10155] blkio.reset_stats is deprecated [ 127.727850][T10159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1822'. [ 128.266261][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 128.283768][ T5946] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 128.428448][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.432536][ T29] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 128.437115][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.445417][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 128.451424][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.455020][ T29] usb 5-1: Product: syz [ 128.457775][ T29] usb 5-1: Manufacturer: syz [ 128.460897][ T29] usb 5-1: SerialNumber: syz [ 128.472555][ T29] hub 5-1:1.0: bad descriptor, ignoring hub [ 128.475343][ T29] hub 5-1:1.0: probe with driver hub failed with error -5 [ 128.575624][T10186] netlink: 'syz.3.1833': attribute type 8 has an invalid length. [ 128.679487][ T29] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 129.772771][T10216] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1845'. [ 129.969275][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 129.969291][ T40] audit: type=1326 audit(1774266123.678:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.2.1852" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 129.988549][ T40] audit: type=1326 audit(1774266123.678:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.2.1852" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 130.001033][ T40] audit: type=1326 audit(1774266123.678:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.2.1852" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 130.010070][ T40] audit: type=1326 audit(1774266123.678:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.2.1852" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 130.019257][ T40] audit: type=1326 audit(1774266123.678:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.2.1852" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 130.029413][ T40] audit: type=1326 audit(1774266123.678:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.2.1852" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 130.038574][ T40] audit: type=1326 audit(1774266123.688:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.2.1852" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 130.047980][ T40] audit: type=1326 audit(1774266123.688:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.2.1852" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 130.058162][ T40] audit: type=1326 audit(1774266123.688:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.2.1852" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 130.067990][ T40] audit: type=1326 audit(1774266123.688:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.2.1852" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 130.377892][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1856'. [ 130.386097][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1856'. [ 130.892580][T10268] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1877'. [ 130.896152][T10268] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1877'. [ 131.906587][T10322] nbd0: detected capacity change from 0 to 63 [ 131.922021][ T5946] block nbd0: Receive control failed (result -104) [ 131.922037][ T5942] block nbd0: Receive control failed (result -32) [ 131.922166][ T5951] block nbd0: Receive control failed (result -32) [ 132.052320][ T6023] kernel read not supported for file /vcs (pid: 6023 comm: kworker/0:3) [ 132.140812][ T6029] usb 5-1: USB disconnect, device number 9 [ 132.153627][ T6029] usblp0: removed [ 132.203710][T10365] binder: 10363:10365 ioctl c0306201 80000640 returned -22 [ 132.246687][ T961] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 132.407776][ T961] usb 7-1: Using ep0 maxpacket: 8 [ 132.422359][ T961] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 132.431914][ T961] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 132.437114][ T961] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.441756][ T961] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.450956][ T961] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.454838][ T961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.563442][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1926'. [ 132.668618][ T961] usb 7-1: GET_CAPABILITIES returned 0 [ 132.671070][ T961] usbtmc 7-1:16.0: can't read capabilities [ 132.855058][T10419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1935'. [ 132.875595][ T961] usb 7-1: USB disconnect, device number 8 [ 132.909231][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 132.914167][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 133.228438][T10439] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 133.235095][ T70] Bluetooth: hci4: Frame reassembly failed (-84) [ 133.306375][T10425] nbd1: detected capacity change from 0 to 63 [ 133.321613][ T63] block nbd1: Receive control failed (result -104) [ 133.321624][ T5946] block nbd1: Receive control failed (result -32) [ 133.321636][ T5942] block nbd1: Receive control failed (result -32) [ 133.605932][T10465] netem: incorrect ge model size [ 133.607811][T10465] netem: change failed [ 133.796643][ T29] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 133.841905][T10487] ip6erspan0: entered allmulticast mode [ 133.963776][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.969033][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.974249][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.978004][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.196326][ T29] usb 7-1: GET_CAPABILITIES returned 0 [ 134.198166][ T29] usbtmc 7-1:16.0: can't read capabilities [ 134.395109][ T961] usb 7-1: USB disconnect, device number 9 [ 134.576428][T10519] nbd2: detected capacity change from 0 to 63 [ 134.588911][ T5946] block nbd2: Receive control failed (result -104) [ 134.588925][ T5942] block nbd2: Receive control failed (result -32) [ 134.588939][ T63] block nbd2: Receive control failed (result -32) [ 135.112068][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 135.119465][T10543] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1990'. [ 135.246550][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 135.247940][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 135.525412][T10579] team_slave_0: entered promiscuous mode [ 135.527998][T10579] team_slave_1: entered promiscuous mode [ 135.532325][T10579] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 135.750890][T10602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2018'. [ 135.834792][T10613] vlan2: entered allmulticast mode [ 135.837920][T10613] veth0_to_bond: entered allmulticast mode [ 136.026455][T10640] input: syz0 as /devices/virtual/input/input15 [ 136.044566][T10643] ALSA: mixer_oss: invalid OSS volume '' [ 136.185132][T10658] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2046'. [ 136.260520][ T40] kauditd_printk_skb: 187 callbacks suppressed [ 136.260534][ T40] audit: type=1800 audit(1774266129.968:337): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2047" name="file0" dev="9p" ino=71827929 res=0 errno=0 [ 136.281458][T10662] netfs: Couldn't get user pages (rc=-14) [ 136.562367][T10671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2051'. [ 136.657166][ T1026] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 136.826355][ T1026] usb 7-1: Using ep0 maxpacket: 8 [ 136.834380][ T1026] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.838106][ T1026] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.841526][ T1026] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.847701][ T1026] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.852894][ T1026] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 136.857210][ T1026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.073341][ T1026] usb 7-1: GET_CAPABILITIES returned 0 [ 137.078012][ T1026] usbtmc 7-1:16.0: can't read capabilities [ 137.277059][ T1026] usb 7-1: USB disconnect, device number 10 [ 137.337273][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2067'. [ 137.410130][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.414587][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.526839][T10713] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.340472][T10754] C: renamed from team_slave_0 (while UP) [ 138.345524][T10754] netlink: 'syz.3.2089': attribute type 2 has an invalid length. [ 138.349300][T10754] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2089'. [ 138.353603][T10754] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 138.391068][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 138.395879][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 138.640843][T10776] netlink: 'syz.2.2099': attribute type 15 has an invalid length. [ 138.879095][T10795] sp0: Synchronizing with TNC [ 138.914659][T10798] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 138.924473][T10798] block device autoloading is deprecated and will be removed. [ 138.945183][T10803] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 139.028984][ T6024] kernel read not supported for file /sysvipc/sem (pid: 6024 comm: kworker/1:4) [ 139.167620][T10824] netlink: 'syz.0.2121': attribute type 7 has an invalid length. [ 139.344127][T10835] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2126'. [ 139.511169][ T223] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.546640][ T50] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 139.698068][ T50] usb 7-1: config 0 has no interfaces? [ 139.700880][ T50] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 139.703841][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.708661][ T50] usb 7-1: config 0 descriptor?? [ 139.876614][ T50] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 139.918626][ T961] usb 7-1: USB disconnect, device number 11 [ 140.026429][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 140.030181][ T50] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 140.033826][ T50] usb 5-1: config 0 has no interface number 0 [ 140.036032][ T50] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.039992][ T50] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 140.045300][ T50] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 140.050234][ T50] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.055836][ T50] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 140.059673][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.062515][ T50] usb 5-1: Product: syz [ 140.063933][ T50] usb 5-1: Manufacturer: syz [ 140.065847][ T50] usb 5-1: SerialNumber: syz [ 140.076871][ T50] usb 5-1: config 0 descriptor?? [ 140.288344][ T50] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 140.472613][T10877] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2134'. [ 140.488648][ T34] usb 5-1: USB disconnect, device number 10 [ 140.792844][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2139'. [ 141.006516][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 141.007865][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 141.233846][T10907] o2cb: This node has not been configured. [ 141.236045][T10907] o2cb: Cluster check failed. Fix errors before retrying. [ 141.240646][T10907] (syz.1.2149,10907,3):user_dlm_register:674 ERROR: status = -22 [ 141.244161][T10907] (syz.1.2149,10907,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 141.428680][T10928] netlink: 'syz.1.2159': attribute type 6 has an invalid length. [ 141.566461][ T5942] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 141.699335][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2165'. [ 141.834616][T10954] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2171'. [ 142.002501][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2179'. [ 142.058515][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 142.061987][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'. [ 142.065572][T10983] netlink: 'syz.0.2181': attribute type 13 has an invalid length. [ 142.072257][T10983] netlink: 'syz.0.2181': attribute type 11 has an invalid length. [ 142.152787][T10987] kvm: kvm [10985]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000086) = 0x0 [ 142.391131][T10998] netlink: 'syz.2.2186': attribute type 9 has an invalid length. [ 142.395575][T10998] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2186'. [ 143.470924][T11083] o2cb: This node has not been configured. [ 143.473694][T11083] o2cb: Cluster check failed. Fix errors before retrying. [ 143.478398][T11083] (syz.2.2227,11083,0):user_dlm_register:674 ERROR: status = -22 [ 143.481829][T11083] (syz.2.2227,11083,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 143.856997][T11098] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2233'. [ 144.316056][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'. [ 144.386333][ T1026] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 144.547045][ T1026] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 144.557138][ T1026] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.560756][ T1026] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.564675][ T1026] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.568280][ T1026] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.571651][ T1026] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.576722][ T1026] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.580501][ T1026] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.583549][ T1026] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.587937][ T1026] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.592400][ T1026] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.596617][ T1026] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.600354][ T1026] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.603596][ T1026] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.606704][ T1026] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.610326][ T1026] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.613245][ T1026] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.617772][ T1026] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.622492][ T1026] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.629446][ T1026] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.633472][ T1026] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.637555][ T1026] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.640518][ T1026] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.643476][ T1026] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.647926][ T1026] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.651991][ T1026] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 144.655171][ T1026] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 144.658768][ T1026] usb 5-1: Product: syz [ 144.660763][ T1026] usb 5-1: Manufacturer: syz [ 144.662599][ T1026] usb 5-1: SerialNumber: syz [ 144.665896][ T1026] usb 5-1: config 0 descriptor?? [ 144.671432][ T1026] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 145.355342][T11170] syz.2.2265 uses obsolete (PF_INET,SOCK_PACKET) [ 145.562693][T11178] __nla_validate_parse: 2 callbacks suppressed [ 145.562713][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'. [ 146.190571][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 146.474358][T11216] input: syz0 as /devices/virtual/input/input18 [ 146.803807][T11224] trusted_key: syz.2.2288 sent an empty control message without MSG_MORE. [ 146.926630][ C3] usb 5-1: yurex_control_callback - control failed: -2 [ 146.929849][ C3] usb 5-1: yurex_control_callback - control failed: -32 [ 146.936813][ T34] usb 5-1: USB disconnect, device number 11 [ 146.947718][ T34] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 147.080289][T11234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2291'. [ 147.124415][T11236] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 147.127963][T11236] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.132203][T11236] vhci_hcd vhci_hcd.0: Device attached [ 147.140306][T11236] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 147.143105][T11236] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.146031][T11236] vhci_hcd vhci_hcd.0: Device attached [ 147.150168][T11236] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 147.153007][T11236] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 147.156938][T11236] vhci_hcd vhci_hcd.0: Device attached [ 147.161547][T11236] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 147.164510][T11236] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.169324][T11236] vhci_hcd vhci_hcd.0: Device attached [ 147.174430][T11236] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 147.180979][T11237] vhci_hcd: connection closed [ 147.180993][T11239] vhci_hcd: connection closed [ 147.182395][T11243] vhci_hcd: connection closed [ 147.185828][T11241] vhci_hcd: connection closed [ 147.188064][ T223] vhci_hcd vhci_hcd.1: stop threads [ 147.189715][ T223] vhci_hcd vhci_hcd.1: release socket [ 147.194891][ T223] vhci_hcd vhci_hcd.1: disconnect device [ 147.198517][ T223] vhci_hcd vhci_hcd.1: stop threads [ 147.200425][ T223] vhci_hcd vhci_hcd.1: release socket [ 147.202242][ T223] vhci_hcd vhci_hcd.1: disconnect device [ 147.204407][ T223] vhci_hcd vhci_hcd.1: stop threads [ 147.209690][ T223] vhci_hcd vhci_hcd.1: release socket [ 147.211949][ T223] vhci_hcd vhci_hcd.1: disconnect device [ 147.214433][ T223] vhci_hcd vhci_hcd.1: stop threads [ 147.217142][ T223] vhci_hcd vhci_hcd.1: release socket [ 147.219351][ T223] vhci_hcd vhci_hcd.1: disconnect device [ 147.299209][T11250] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.836626][ T29] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 148.006315][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 148.010387][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.014371][ T29] usb 5-1: config 0 has no interface number 0 [ 148.017548][ T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.024176][ T29] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.028636][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.040265][ T29] usb 5-1: config 0 descriptor?? [ 148.046916][ T29] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 148.253020][ T29] usb 5-1: USB disconnect, device number 12 [ 148.255831][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 149.020925][T11326] netlink: 'syz.3.2332': attribute type 11 has an invalid length. [ 149.136365][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 149.276427][T11334] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 149.297550][ T29] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 149.300604][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.306746][ T29] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 149.310505][ T29] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 149.314097][ T29] usb 6-1: Manufacturer: syz [ 149.329610][ T29] usb 6-1: config 0 descriptor?? [ 149.406373][ T29] rc_core: IR keymap rc-hauppauge not found [ 149.408362][ T29] Registered IR keymap rc-empty [ 149.416538][ T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 149.423305][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input19 [ 149.488929][T11346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2340'. [ 149.544963][ T961] usb 6-1: USB disconnect, device number 4 [ 150.337035][ T842] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 150.496317][ T842] usb 5-1: Using ep0 maxpacket: 32 [ 150.500110][ T842] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 150.504165][ T842] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 150.509725][ T842] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.513579][ T842] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 150.520895][ T842] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 150.525335][ T842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.529661][ T842] usb 5-1: Product: syz [ 150.531627][ T842] usb 5-1: Manufacturer: syz [ 150.533632][ T842] usb 5-1: SerialNumber: syz [ 150.544488][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 150.550380][ T842] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input20 [ 150.766292][ T842] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 150.769767][ T842] (id 0x00) [ 150.826414][ T842] rc_core: IR keymap rc-imon-pad not found [ 150.828744][ T842] Registered IR keymap rc-empty [ 150.830701][ T842] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 150.835072][ T842] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 150.969177][ T842] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 150.976013][ T842] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input21 [ 150.984667][ T842] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:13> initialized [ 151.153438][T11365] imon:vfd_write: invalid payload size [ 151.158374][ T34] usb 5-1: USB disconnect, device number 13 [ 151.316396][T11407] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 151.454885][T11419] syzkaller1: entered promiscuous mode [ 151.458358][T11419] syzkaller1: entered allmulticast mode [ 152.286390][ T842] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 152.456309][ T842] usb 6-1: Using ep0 maxpacket: 8 [ 152.462369][ T842] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 152.467090][ T842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.471329][ T842] usb 6-1: Product: syz [ 152.473388][ T842] usb 6-1: Manufacturer: syz [ 152.475526][ T842] usb 6-1: SerialNumber: syz [ 152.476152][T11462] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2391'. [ 152.481449][T11462] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2391'. [ 152.481753][ T842] usb 6-1: config 0 descriptor?? [ 152.591670][T11472] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 152.694750][ T842] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 152.707982][ T842] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 152.713812][ T842] usb 6-1: USB disconnect, device number 5 [ 153.201964][T11499] loop5: detected capacity change from 0 to 7 [ 153.230055][T11499] Dev loop5: unable to read RDB block 7 [ 153.232644][T11499] loop5: unable to read partition table [ 153.234927][T11499] loop5: partition table beyond EOD, truncated [ 153.238198][T11499] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 153.302239][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2410'. [ 153.309467][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2410'. [ 153.500458][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 153.504428][T11518] netlink: 'syz.2.2418': attribute type 20 has an invalid length. [ 153.508097][T11518] netlink: 'syz.2.2418': attribute type 21 has an invalid length. [ 154.368140][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2427'. [ 154.404423][T11544] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 155.087276][T11592] netlink: 'syz.0.2451': attribute type 25 has an invalid length. [ 155.090919][T11592] netlink: 'syz.0.2451': attribute type 28 has an invalid length. [ 155.579767][T11601] syzkaller1: entered promiscuous mode [ 155.582618][T11601] syzkaller1: entered allmulticast mode [ 155.979650][ T40] audit: type=1326 audit(1774266149.688:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11614 comm="syz.2.2461" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f02f6c code=0x0 [ 156.276502][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 156.446443][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 156.450700][ T34] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.453846][ T34] usb 6-1: config 0 has no interface number 0 [ 156.455891][ T34] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.459908][ T34] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 156.464503][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.469996][ T34] usb 6-1: config 0 descriptor?? [ 156.478119][ T34] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 156.686727][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 156.690658][ T842] usb 6-1: USB disconnect, device number 6 [ 156.904289][T11640] netlink: 'syz.0.2471': attribute type 10 has an invalid length. [ 156.912014][T11640] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 156.923069][T11640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.926574][T11640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.931253][T11640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.934884][T11640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.990669][T11647] netlink: 'syz.3.2475': attribute type 13 has an invalid length. [ 157.182436][T11656] netlink: 'syz.0.2480': attribute type 1 has an invalid length. [ 157.185784][T11656] netlink: 'syz.0.2480': attribute type 2 has an invalid length. [ 157.398887][T11671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2487'. [ 157.402882][T11671] netlink: 'syz.3.2487': attribute type 7 has an invalid length. [ 157.406658][T11671] netlink: 'syz.3.2487': attribute type 8 has an invalid length. [ 157.411821][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2487'. [ 157.417896][ T40] audit: type=1326 audit(1774266151.118:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 157.431906][T11671] erspan0: entered promiscuous mode [ 157.434981][ T40] audit: type=1326 audit(1774266151.118:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 157.437807][T11671] gretap0: entered promiscuous mode [ 157.446440][ T40] audit: type=1326 audit(1774266151.118:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 157.455997][T11671] erspan0: left promiscuous mode [ 157.456415][ T40] audit: type=1326 audit(1774266151.118:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 157.468730][T11671] gretap0: left promiscuous mode [ 157.468758][ T40] audit: type=1326 audit(1774266151.118:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 157.478926][ T40] audit: type=1326 audit(1774266151.118:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 157.488444][ T40] audit: type=1326 audit(1774266151.118:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 157.496113][ T40] audit: type=1326 audit(1774266151.128:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 157.516344][ T40] audit: type=1326 audit(1774266151.128:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f02f88 code=0x7ffc0000 [ 157.688275][T11685] syzkaller1: entered promiscuous mode [ 157.690436][T11685] syzkaller1: entered allmulticast mode [ 157.879599][ T702] wlan1: failed to finalize CSA on link 0, disconnecting [ 158.085344][T11706] input: syz1 as /devices/virtual/input/input23 [ 158.231455][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2510'. [ 158.461741][T11743] kvm: user requested TSC rate below hardware speed [ 158.922316][T11768] syzkaller1: entered promiscuous mode [ 158.924216][T11768] syzkaller1: entered allmulticast mode [ 159.045722][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2534'. [ 159.783930][T11804] input: syz1 as /devices/virtual/input/input24 [ 160.864405][T11852] nbd: nbd1 already in use [ 160.867415][T11852] block nbd1: NBD_DISCONNECT [ 160.872670][T11852] block nbd1: Send disconnect failed -32 [ 160.875916][T11852] block nbd1: Send disconnect failed -32 [ 160.878958][T11852] block nbd1: Send disconnect failed -32 [ 160.881559][T11852] block nbd1: shutting down sockets [ 160.884847][T11852] blk_print_req_error: 25 callbacks suppressed [ 160.884866][T11852] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.892657][T11852] buffer_io_error: 26 callbacks suppressed [ 160.892674][T11852] Buffer I/O error on dev nbd1, logical block 0, async page read [ 160.900397][T11852] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.904299][T11852] Buffer I/O error on dev nbd1, logical block 1, async page read [ 160.907910][T11852] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.912219][T11852] Buffer I/O error on dev nbd1, logical block 2, async page read [ 160.917413][T11852] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.921849][T11852] Buffer I/O error on dev nbd1, logical block 3, async page read [ 160.927723][ T7686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.932741][ T7686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 160.936408][ T7686] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.941496][ T7686] Buffer I/O error on dev nbd1, logical block 1, async page read [ 160.944832][ T7686] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.949231][ T7686] Buffer I/O error on dev nbd1, logical block 2, async page read [ 160.952726][ T7686] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.956919][ T7686] Buffer I/O error on dev nbd1, logical block 3, async page read [ 160.960890][ T7686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.965194][ T7686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 160.968503][ T7686] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.972429][ T7686] Buffer I/O error on dev nbd1, logical block 1, async page read [ 160.976855][ T7686] ldm_validate_partition_table(): Disk read failed. [ 160.980581][ T7686] Dev nbd1: unable to read RDB block 0 [ 160.983771][ T7686] nbd1: unable to read partition table [ 160.992049][ T7686] ldm_validate_partition_table(): Disk read failed. [ 160.995176][ T7686] Dev nbd1: unable to read RDB block 0 [ 160.997797][ T7686] nbd1: unable to read partition table [ 161.381715][T11871] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2576'. [ 161.384761][T11871] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2576'. [ 161.565619][T11892] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 161.688014][T11902] syzkaller1: entered promiscuous mode [ 161.690256][T11902] syzkaller1: entered allmulticast mode [ 162.159912][T11920] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2599'. [ 162.376357][ T2216] block nbd0: Connection timed out, retrying (0/3 alive) [ 162.381440][ T2216] block nbd0: Connection timed out, retrying (0/3 alive) [ 162.384367][ T2216] block nbd0: Connection timed out, retrying (0/3 alive) [ 162.388487][ T2216] block nbd0: Connection timed out, retrying (0/3 alive) [ 162.392204][ T2216] block nbd0: Dead connection, failed to find a fallback [ 162.395515][ T2216] block nbd0: shutting down sockets [ 162.402159][ T7682] ldm_validate_partition_table(): Disk read failed. [ 162.405563][ T7682] Dev nbd0: unable to read RDB block 0 [ 162.408476][ T7682] nbd0: unable to read partition table [ 162.417928][ T7682] ldm_validate_partition_table(): Disk read failed. [ 162.421732][ T7682] Dev nbd0: unable to read RDB block 0 [ 162.424898][ T7682] nbd0: unable to read partition table [ 163.226442][ T54] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 163.376278][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 163.389496][ T54] usb 6-1: config 0 has no interfaces? [ 163.393708][ T54] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 163.397680][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.401013][ T54] usb 6-1: Product: syz [ 163.402554][ T54] usb 6-1: Manufacturer: syz [ 163.404031][ T54] usb 6-1: SerialNumber: syz [ 163.408149][ T54] usb 6-1: config 0 descriptor?? [ 163.629107][ T54] usb 6-1: USB disconnect, device number 7 [ 163.938351][T12000] bridge0: port 3(syz_tun) entered blocking state [ 163.941777][T12000] bridge0: port 3(syz_tun) entered disabled state [ 163.944445][T12000] syz_tun: entered allmulticast mode [ 163.958769][T12000] syz_tun: entered promiscuous mode [ 163.961612][T12000] bridge0: port 3(syz_tun) entered blocking state [ 163.964701][T12000] bridge0: port 3(syz_tun) entered forwarding state [ 164.374955][T12026] binder: 12025:12026 ioctl c0306201 80000280 returned -22 [ 164.931743][ T1285] block nbd2: Connection timed out, retrying (0/3 alive) [ 164.934492][ T1285] block nbd2: Connection timed out, retrying (0/3 alive) [ 164.936917][ T1285] block nbd2: Connection timed out, retrying (0/3 alive) [ 164.939865][ T1285] block nbd2: Connection timed out, retrying (0/3 alive) [ 164.945795][ T1285] block nbd2: Dead connection, failed to find a fallback [ 164.950348][ T1285] block nbd2: shutting down sockets [ 164.953506][ T5945] ldm_validate_partition_table(): Disk read failed. [ 164.957051][ T5945] Dev nbd2: unable to read RDB block 0 [ 164.960433][ T5945] nbd2: unable to read partition table [ 164.965680][ T5945] ldm_validate_partition_table(): Disk read failed. [ 164.968303][ T5945] Dev nbd2: unable to read RDB block 0 [ 164.970699][ T5945] nbd2: unable to read partition table [ 165.477092][T12098] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 165.486160][T12098] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2678'. [ 165.810132][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2691'. [ 165.814052][T12129] netlink: 'syz.0.2691': attribute type 21 has an invalid length. [ 165.912538][ T1154] Bluetooth: hci4: Frame reassembly failed (-84) [ 166.374010][T12151] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 166.379150][T12151] bond1 (unregistering): Released all slaves [ 167.021774][T12181] loop9: detected capacity change from 0 to 7 [ 167.024651][ T7682] buffer_io_error: 434 callbacks suppressed [ 167.024661][ T7682] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.029344][ T7682] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.031827][ T7682] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.034792][ T7682] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.038927][ T7682] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.041285][ T7682] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.043704][ T7682] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.046172][ T7682] ldm_validate_partition_table(): Disk read failed. [ 167.048481][ T7682] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.050915][ T7682] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.053399][ T7682] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.056044][ T7682] Dev loop9: unable to read RDB block 0 [ 167.057908][ T7682] loop9: unable to read partition table [ 167.059592][ T7682] loop9: partition table beyond EOD, truncated [ 167.062994][T12181] ldm_validate_partition_table(): Disk read failed. [ 167.065832][T12181] Dev loop9: unable to read RDB block 0 [ 167.069534][T12181] loop9: unable to read partition table [ 167.073051][T12181] loop9: partition table beyond EOD, truncated [ 167.075556][T12181] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 167.075556][T12181] ) failed (rc=-5) [ 167.126916][T12183] loop9: detected capacity change from 7 to 0 [ 167.181404][T12185] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 167.676401][ T29] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 167.827228][ T29] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 167.831815][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.834725][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.838917][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.842278][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.845485][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.849919][T12225] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 167.850413][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.857749][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.861071][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.865127][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.869316][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.872853][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.878348][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.881873][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.885219][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.889140][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.892226][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.896551][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.901411][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.905538][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.909872][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.913877][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.917796][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.921829][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.926984][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.933257][ T29] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 167.937390][ T29] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 167.940070][ T29] usb 7-1: Product: syz [ 167.941541][ T29] usb 7-1: Manufacturer: syz [ 167.943200][ T29] usb 7-1: SerialNumber: syz [ 167.946914][ T29] usb 7-1: config 0 descriptor?? [ 167.951988][ T29] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 167.966375][ T5951] Bluetooth: hci4: command 0xfc11 tx timeout [ 167.966760][ T5942] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 168.157149][ T34] usb 7-1: USB disconnect, device number 12 [ 168.161801][ T34] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 168.995460][T12264] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2750'. [ 169.000078][T12264] openvswitch: netlink: Message has 3 unknown bytes. [ 169.171670][T12283] netlink: 'syz.1.2759': attribute type 2 has an invalid length. [ 169.496397][ T54] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 169.636440][ T961] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 169.676993][ T54] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 169.681459][ T54] usb 5-1: config 0 interface 0 has no altsetting 0 [ 169.708689][ T54] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 169.719033][ T54] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 169.722502][ T54] usb 5-1: Product: syz [ 169.724417][ T54] usb 5-1: Manufacturer: syz [ 169.726850][ T54] usb 5-1: SerialNumber: syz [ 169.738051][ T54] usb 5-1: config 0 descriptor?? [ 169.751725][ T54] usb 5-1: selecting invalid altsetting 0 [ 169.788776][ T961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.792696][ T961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.796308][ T961] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.801267][ T961] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.805405][ T961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.812013][ T961] usb 7-1: config 0 descriptor?? [ 169.954801][ T9] usb 5-1: USB disconnect, device number 14 [ 170.249500][ T961] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 170.466415][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 170.618561][ T9] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 170.621475][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.625661][ T9] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 170.628742][ T9] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 170.631309][ T9] usb 6-1: Manufacturer: syz [ 170.633997][ T9] usb 6-1: config 0 descriptor?? [ 170.676341][ T9] rc_core: IR keymap rc-hauppauge not found [ 170.678441][ T9] Registered IR keymap rc-empty [ 170.680937][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 170.685750][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 170.954893][ T29] usb 6-1: USB disconnect, device number 8 [ 171.550041][ C1] plantronics 0003:047F:FFFF.0008: usb_submit_urb(ctrl) failed: -1 [ 171.966377][ T54] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 172.054296][ T1154] Bluetooth: hci4: Frame reassembly failed (-84) [ 172.057690][ T1154] Bluetooth: hci4: Frame reassembly failed (-84) [ 172.119874][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.124128][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.127851][ T54] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.132489][ T54] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.135548][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.142816][ T54] usb 5-1: config 0 descriptor?? [ 172.331535][ T50] usb 7-1: USB disconnect, device number 13 [ 172.561988][ T54] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 172.765009][T12359] Invalid argument reading file caps for ./file0 [ 174.136395][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 174.136490][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 174.650794][ T1026] usb 5-1: USB disconnect, device number 15 [ 174.938084][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2822'. [ 174.941497][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2822'. [ 175.107323][ T842] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 175.258825][ T842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.264071][ T842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.268513][ T842] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.274614][ T842] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.279974][ T842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.291364][ T842] usb 6-1: config 0 descriptor?? [ 175.709073][ T842] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 176.116644][T12459] input: syz1 as /devices/virtual/input/input26 [ 176.219351][T12470] nbd: nbd0 already in use [ 176.221884][T12470] block nbd0: NBD_DISCONNECT [ 176.224331][T12470] block nbd0: Send disconnect failed -32 [ 176.243573][T12470] block nbd0: Send disconnect failed -32 [ 176.246415][T12470] block nbd0: Send disconnect failed -32 [ 176.544990][T12495] Invalid argument reading file caps for ./file0 [ 177.332459][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2861'. [ 177.339636][T12526] ubi31: attaching mtd0 [ 177.374927][T12528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2862'. [ 177.379546][T12528] bond0: ARP target 8.4.0.0 is already present [ 177.382435][T12528] bond0: option arp_ip_target: invalid value (1032) [ 177.718733][ T842] usb 6-1: USB disconnect, device number 9 [ 177.899863][ T40] kauditd_printk_skb: 571 callbacks suppressed [ 177.899876][ T40] audit: type=1326 audit(1774266427.600:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.1.2873" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x0 [ 178.746770][ T1026] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 178.898317][ T1026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.902863][ T1026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.908332][ T1026] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.913954][ T1026] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.918801][ T1026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.924668][ T1026] usb 7-1: config 0 descriptor?? [ 179.126462][ T50] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 179.277890][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 179.280928][ T50] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.284431][ T50] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.287937][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 179.290996][ T50] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 179.295085][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.304257][ T50] usb 5-1: config 0 descriptor?? [ 179.341516][ T1026] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 179.724064][ T50] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 179.726860][ T50] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 179.729265][ T50] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 179.731500][ T50] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 179.733810][ T50] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 179.736478][ T50] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 179.925757][ T1026] usb 5-1: USB disconnect, device number 16 [ 180.446342][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 180.446360][ T5946] Bluetooth: hci2: command 0x0406 tx timeout [ 181.220834][T12622] binder: 12621:12622 ioctl c0306201 800001c0 returned -14 [ 181.418543][ T961] usb 7-1: USB disconnect, device number 14 [ 181.650811][T12641] netlink: 'syz.1.2920': attribute type 15 has an invalid length. [ 181.653267][T12641] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2920'. [ 181.820510][ T40] audit: type=1326 audit(1774266431.530:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.2.2918" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x0 [ 182.107595][T12666] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.184230][T12666] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.283437][T12666] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.358336][T12666] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.440459][ T702] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.450609][ T702] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.460191][ T702] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.471418][ T702] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.708049][T12680] sctp: [Deprecated]: syz.1.2928 (pid 12680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.708049][T12680] Use struct sctp_sack_info instead [ 182.714630][T12680] sctp: [Deprecated]: syz.1.2928 (pid 12680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.714630][T12680] Use struct sctp_sack_info instead [ 183.046283][ T29] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 183.067725][ T6024] kernel read not supported for file /dsp (pid: 6024 comm: kworker/1:4) [ 183.129390][T12690] pim6reg1: entered promiscuous mode [ 183.131138][T12690] pim6reg1: entered allmulticast mode [ 183.227525][ T29] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.231086][ T29] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.234178][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.237099][ T29] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 183.240176][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.244841][ T29] usb 6-1: config 0 descriptor?? [ 183.660551][ T29] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 183.663755][ T29] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 183.666837][ T29] hid-steam 0003:28DE:1102.000D: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 183.726639][ T29] hid-steam 0003:28DE:1102.000D: Steam Controller 'XXXXXXXXXX' connected [ 183.734346][ T29] input: Steam Controller as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:28DE:1102.000D/input/input27 [ 183.763355][ T29] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0 [ 183.766993][ T29] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0 [ 183.790734][ T29] hid-steam 0003:28DE:1102.000E: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 183.864108][ T1026] usb 6-1: USB disconnect, device number 10 [ 183.891920][ T1026] hid-steam 0003:28DE:1102.000D: Steam Controller 'XXXXXXXXXX' disconnected [ 186.616264][T12706] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 186.616356][ T5942] Bluetooth: hci1: command 0x0406 tx timeout [ 186.622358][T12706] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 187.467714][T12706] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.470448][T12706] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 187.476822][T12706] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.479589][T12706] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 187.486640][T12706] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 187.737153][ T961] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 187.746411][T12747] input: syz1 as /devices/virtual/input/input28 [ 188.368693][ T842] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 188.371965][ T842] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 188.375182][ T842] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 188.384987][ T842] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 188.389256][ T842] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 188.392489][ T842] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 188.394937][ T842] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 188.397698][ T842] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 188.400428][ T842] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 188.403671][ T842] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 188.411687][ T842] hid-generic 00A0:0006:0003.000F: hidraw1: HID v0.05 Device [syz1] on syz0 [ 188.686599][ T5942] Bluetooth: hci2: command 0x0406 tx timeout [ 188.686805][ T5951] Bluetooth: hci1: command 0x0406 tx timeout [ 188.738283][T12820] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2988'. [ 188.946479][ T961] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 188.992052][T12838] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2993'. [ 189.098639][ T961] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.103023][ T961] usb 5-1: config 0 has no interfaces? [ 189.113533][ T961] usb 5-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.a6 [ 189.118349][ T961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.119730][T12843] /dev/nullb0: Can't open blockdev [ 189.121790][ T961] usb 5-1: Product: syz [ 189.121808][ T961] usb 5-1: Manufacturer: syz [ 189.131730][ T961] usb 5-1: SerialNumber: syz [ 189.136935][ T961] usb 5-1: config 0 descriptor?? [ 189.287083][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2998'. [ 189.348936][ T961] usb 5-1: USB disconnect, device number 18 [ 189.362722][T12849] team0: Port device C removed [ 189.496357][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.291007][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3020'. [ 190.308695][T12900] bond1: Invalid ad_actor_system MAC address. [ 190.310794][T12900] bond1: option ad_actor_system: invalid value (281419142266867) [ 190.314606][T12900] bond1 (unregistering): Released all slaves [ 190.421485][T12912] erspan0: entered promiscuous mode [ 190.423688][T12912] erspan0: entered allmulticast mode [ 190.617146][T12925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3031'. [ 190.644661][T12927] serio: Serial port ptm0 [ 190.726442][ T6024] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 190.766552][ T5951] Bluetooth: hci2: command 0x0406 tx timeout [ 190.878360][ T6024] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 190.884767][ T6024] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.893312][ T6024] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.898400][ T6024] usb 7-1: config 0 interface 0 has no altsetting 0 [ 190.903095][ T6024] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.910682][ T6024] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.915615][ T6024] usb 7-1: config 0 interface 0 has no altsetting 0 [ 190.919621][ T6024] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.923160][ T6024] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.927518][ T6024] usb 7-1: config 0 interface 0 has no altsetting 0 [ 190.935750][ T6024] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.943622][ T6024] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.949479][ T6024] usb 7-1: config 0 interface 0 has no altsetting 0 [ 190.952374][ T6024] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.955481][ T6024] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.960005][ T6024] usb 7-1: config 0 interface 0 has no altsetting 0 [ 190.963848][ T6024] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.968598][ T6024] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.973489][ T6024] usb 7-1: config 0 interface 0 has no altsetting 0 [ 190.977805][ T6024] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.981921][ T6024] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.986878][ T6024] usb 7-1: config 0 interface 0 has no altsetting 0 [ 190.989913][ T6024] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.993356][ T6024] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.997271][ T6024] usb 7-1: config 0 interface 0 has no altsetting 0 [ 191.002494][ T6024] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 191.007342][ T6024] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 191.010835][ T6024] usb 7-1: Product: syz [ 191.012857][ T6024] usb 7-1: Manufacturer: syz [ 191.015237][ T6024] usb 7-1: SerialNumber: syz [ 191.019829][ T6024] usb 7-1: config 0 descriptor?? [ 191.033359][ T6024] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 191.126305][ T842] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 191.226396][ T6023] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 191.280054][ T842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.285418][ T842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.290283][ T842] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.294180][ T842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.300657][ T842] usb 5-1: config 0 descriptor?? [ 191.342396][ C1] usb 7-1: yurex_control_callback - control failed: -71 [ 191.342595][ T34] usb 7-1: USB disconnect, device number 15 [ 191.348956][ T34] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 191.387382][ T6023] usb 6-1: Using ep0 maxpacket: 8 [ 191.396562][ T6023] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 191.401767][ T6023] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.408398][ T6023] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.412572][ T6023] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.416827][ T6023] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.422898][ T6023] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.426989][ T6023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.566341][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.642975][ T6023] usb 6-1: usb_control_msg returned -32 [ 191.645511][ T6023] usbtmc 6-1:16.0: can't read capabilities [ 191.718112][ T842] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 191.725575][ T842] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0926:3333.0010/input/input29 [ 191.819750][ T842] keytouch 0003:0926:3333.0010: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 191.919330][ T34] usb 5-1: USB disconnect, device number 19 [ 192.127845][T12967] Bluetooth: MGMT ver 1.23 [ 192.198220][T12971] kvm: user requested TSC rate below hardware speed [ 192.327422][T12979] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3052'. [ 192.497150][T12986] netlink: 'syz.2.3056': attribute type 11 has an invalid length. [ 192.756599][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 192.808115][T13005] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3065'. [ 192.939177][ T40] audit: type=1326 audit(1774266442.640:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13011 comm="syz.0.3068" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 193.403558][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.412132][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.417130][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.424228][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.427965][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.450281][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3077'. [ 193.559838][T13024] chnl_net:caif_netlink_parms(): no params data found [ 193.647857][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.651809][T13024] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.654994][T13024] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.657659][T13024] bridge_slave_0: entered allmulticast mode [ 193.660536][T13024] bridge_slave_0: entered promiscuous mode [ 193.664366][T13024] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.667108][T13024] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.669676][T13024] bridge_slave_1: entered allmulticast mode [ 193.672579][T13024] bridge_slave_1: entered promiscuous mode [ 193.697729][T13024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.703805][T13024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.722237][T13024] team0: Port device team_slave_0 added [ 193.734659][T13024] team0: Port device team_slave_1 added [ 193.761830][T13044] pim6reg1: entered promiscuous mode [ 193.764127][T13044] pim6reg1: entered allmulticast mode [ 193.769271][T13024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.772230][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.782252][T13024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.806138][T13024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.809628][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.820632][T13024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.861274][T13024] hsr_slave_0: entered promiscuous mode [ 193.864894][T13024] hsr_slave_1: entered promiscuous mode [ 193.868673][T13024] debugfs: 'hsr0' already exists in 'hsr' [ 193.871151][T13024] Cannot create hsr debugfs directory [ 193.873639][T13048] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3083'. [ 193.889014][T13048] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3083'. [ 193.896452][ T40] audit: type=1326 audit(1774266443.590:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13049 comm="syz.3.3084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 193.904602][ T40] audit: type=1326 audit(1774266443.590:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13049 comm="syz.3.3084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 193.921329][ T40] audit: type=1326 audit(1774266443.590:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13049 comm="syz.3.3084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 193.929530][ T40] audit: type=1326 audit(1774266443.590:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13049 comm="syz.3.3084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 193.939734][ T40] audit: type=1326 audit(1774266443.600:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13049 comm="syz.3.3084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 193.949822][ T40] audit: type=1326 audit(1774266443.600:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13049 comm="syz.3.3084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 193.959801][ T40] audit: type=1326 audit(1774266443.600:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13049 comm="syz.3.3084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 193.967972][ T40] audit: type=1326 audit(1774266443.600:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13049 comm="syz.3.3084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 193.976905][ T40] audit: type=1326 audit(1774266443.600:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13049 comm="syz.3.3084" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 194.002560][ T34] usb 6-1: USB disconnect, device number 11 [ 194.022541][T13056] netlink: 'syz.3.3087': attribute type 2 has an invalid length. [ 194.050485][T13058] syzkaller1: entered promiscuous mode [ 194.052736][T13058] syzkaller1: entered allmulticast mode [ 194.060656][T13024] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.069764][T13024] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.095987][T13024] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.100981][T13024] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.121747][T13024] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.125479][T13024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.129398][T13024] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.132289][T13024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.177638][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3091'. [ 194.230540][T13024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.251388][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.254701][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.264807][T13024] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.276460][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.279600][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.291441][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.294554][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.449098][T13024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.466614][ T961] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 194.626459][ T961] usb 5-1: Using ep0 maxpacket: 8 [ 194.629453][ T961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.633535][ T961] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 194.646401][ T961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.654789][ T961] usb 5-1: config 0 descriptor?? [ 194.658021][T13024] veth0_vlan: entered promiscuous mode [ 194.663893][T13024] veth1_vlan: entered promiscuous mode [ 194.683585][T13024] veth0_macvtap: entered promiscuous mode [ 194.689713][T13024] veth1_macvtap: entered promiscuous mode [ 194.700437][T13024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.712129][T13024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.723155][ T223] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.725993][ T223] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.730251][ T223] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.733009][ T223] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.736359][ T34] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 194.780855][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.783700][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.796140][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.800070][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.869011][ T961] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 194.896370][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 194.899361][ T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 194.902155][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.905275][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.910171][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.914063][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.918688][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.921473][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.130603][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 195.132804][ T34] usbtmc 6-1:16.0: can't read capabilities [ 195.275103][ T961] usb 5-1: USB disconnect, device number 20 [ 195.339119][ T6029] usb 6-1: USB disconnect, device number 12 [ 195.496409][ T5951] Bluetooth: hci0: command tx timeout [ 195.574009][T13112] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3103'. [ 195.810283][T13124] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 195.928968][T13135] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 195.934467][T13135] bond1 (unregistering): Released all slaves [ 196.105416][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3117'. [ 196.277114][ T5951] block nbd0: Receive control failed (result -107) [ 196.356459][ T54] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 196.526417][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 196.533251][ T54] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 196.538582][ T54] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.542815][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.547335][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.551561][ T54] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.552409][T13162] netlink: 'syz.4.3126': attribute type 12 has an invalid length. [ 196.557462][ T54] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.557478][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.566360][T13162] netlink: 'syz.4.3126': attribute type 29 has an invalid length. [ 196.569798][T13162] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3126'. [ 196.572658][T13162] netlink: 'syz.4.3126': attribute type 2 has an invalid length. [ 196.575053][T13162] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3126'. [ 196.670758][T13168] overlay: Unknown parameter '/' [ 196.674198][T13168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3128'. [ 196.765184][ T54] usb 6-1: usb_control_msg returned -32 [ 196.777908][ T54] usbtmc 6-1:16.0: can't read capabilities [ 196.806319][T13174] syz.0.3131 (13174) used greatest stack depth: 19088 bytes left [ 196.821719][T13178] [ 196.822793][T13178] ====================================================== [ 196.825851][T13178] WARNING: possible circular locking dependency detected [ 196.829325][T13178] syzkaller #0 Tainted: G L [ 196.832530][T13178] ------------------------------------------------------ [ 196.835541][T13178] syz.0.3133/13178 is trying to acquire lock: [ 196.837949][T13178] ffffffff8e9aa540 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x4c/0x6e0 [ 196.841376][T13178] [ 196.841376][T13178] but task is already holding lock: [ 196.843983][T13178] ffffffff8e978108 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 196.847997][T13178] [ 196.847997][T13178] which lock already depends on the new lock. [ 196.847997][T13178] [ 196.852811][T13178] [ 196.852811][T13178] the existing dependency chain (in reverse order) is: [ 196.856685][T13178] [ 196.856685][T13178] -> #8 (slab_mutex){+.+.}-{4:4}: [ 196.859737][T13178] __mutex_lock+0x1a2/0x1b90 [ 196.861978][T13178] kmem_cache_destroy+0x59/0x180 [ 196.864462][T13178] p9_client_destroy+0x20c/0x3a0 [ 196.866997][T13178] v9fs_session_close+0x49/0x2d0 [ 196.869397][T13178] v9fs_kill_super+0x4d/0xa0 [ 196.871418][T13178] deactivate_locked_super+0xc1/0x1b0 [ 196.873770][T13178] deactivate_super+0xe7/0x110 [ 196.876022][T13178] cleanup_mnt+0x21f/0x450 [ 196.878190][T13178] task_work_run+0x150/0x240 [ 196.880577][T13178] exit_to_user_mode_loop+0x100/0x4a0 [ 196.883290][T13178] __do_fast_syscall_32+0x578/0x8c0 [ 196.885848][T13178] do_fast_syscall_32+0x32/0x70 [ 196.888052][T13178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.890824][T13178] [ 196.890824][T13178] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 196.894017][T13178] cpus_read_lock+0x42/0x170 [ 196.896628][T13178] static_key_disable+0x12/0x20 [ 196.899355][T13178] __inet_hash_connect+0x1378/0x1e40 [ 196.902057][T13178] tcp_v4_connect+0xeb0/0x1b40 [ 196.904467][T13178] __inet_stream_connect+0x208/0xfa0 [ 196.906991][T13178] inet_stream_connect+0x57/0xa0 [ 196.909027][T13178] __sys_connect_file+0x141/0x1a0 [ 196.910905][T13178] __sys_connect+0x141/0x170 [ 196.912743][T13178] __ia32_compat_sys_socketcall+0x45e/0x770 [ 196.915016][T13178] __do_fast_syscall_32+0xe3/0x8c0 [ 196.917165][T13178] do_fast_syscall_32+0x32/0x70 [ 196.919540][T13178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.922368][T13178] [ 196.922368][T13178] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 196.925833][T13178] lock_sock_nested+0x41/0xf0 [ 196.928692][T13178] inet_shutdown+0x67/0x410 [ 196.930990][T13178] nbd_mark_nsock_dead+0xae/0x5c0 [ 196.933339][T13178] recv_work+0x5fb/0x8c0 [ 196.935319][T13178] process_one_work+0xa23/0x19a0 [ 196.937606][T13178] worker_thread+0x5ef/0xe50 [ 196.939830][T13178] kthread+0x370/0x450 [ 196.941893][T13178] ret_from_fork+0x754/0xd80 [ 196.943981][T13178] ret_from_fork_asm+0x1a/0x30 [ 196.945745][T13178] [ 196.945745][T13178] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 196.948356][T13178] __mutex_lock+0x1a2/0x1b90 [ 196.950021][T13178] nbd_queue_rq+0x428/0x1080 [ 196.951633][T13178] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 196.953590][T13178] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 196.955811][T13178] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 196.958033][T13178] blk_mq_run_hw_queue+0x23c/0x670 [ 196.959906][T13178] blk_mq_dispatch_list+0x51d/0x1360 [ 196.961766][T13178] blk_mq_flush_plug_list+0x130/0x600 [ 196.963629][T13178] __blk_flush_plug+0x2c4/0x4b0 [ 196.965348][T13178] __submit_bio+0x584/0x6c0 [ 196.966940][T13178] submit_bio_noacct_nocheck+0x562/0xc10 [ 196.968993][T13178] submit_bio_noacct+0xd17/0x2010 [ 196.970937][T13178] submit_bh_wbc+0x59c/0x770 [ 196.972702][T13178] block_read_full_folio+0x264/0x8e0 [ 196.974730][T13178] filemap_read_folio+0xfc/0x3b0 [ 196.976628][T13178] do_read_cache_folio+0x2d7/0x6b0 [ 196.979087][T13178] read_part_sector+0xd1/0x370 [ 196.980891][T13178] adfspart_check_ICS+0x93/0x910 [ 196.982637][T13178] bdev_disk_changed+0x7f8/0xc80 [ 196.984364][T13178] blkdev_get_whole+0x187/0x290 [ 196.986076][T13178] bdev_open+0x2c7/0xe40 [ 196.987595][T13178] blkdev_open+0x34e/0x4f0 [ 196.989174][T13178] do_dentry_open+0x6d8/0x1660 [ 196.990961][T13178] vfs_open+0x82/0x3f0 [ 196.992495][T13178] path_openat+0x208c/0x31a0 [ 196.994251][T13178] do_file_open+0x20e/0x430 [ 196.995993][T13178] do_sys_openat2+0x10d/0x1e0 [ 196.997955][T13178] __x64_sys_openat+0x12d/0x210 [ 196.999731][T13178] do_syscall_64+0x106/0xf80 [ 197.001453][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.003837][T13178] [ 197.003837][T13178] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 197.006173][T13178] __mutex_lock+0x1a2/0x1b90 [ 197.007930][T13178] nbd_queue_rq+0xba/0x1080 [ 197.010012][T13178] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 197.012935][T13178] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 197.015662][T13178] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 197.018026][T13178] blk_mq_run_hw_queue+0x23c/0x670 [ 197.020435][T13178] blk_mq_dispatch_list+0x51d/0x1360 [ 197.022608][T13178] blk_mq_flush_plug_list+0x130/0x600 [ 197.024386][T13178] __blk_flush_plug+0x2c4/0x4b0 [ 197.026060][T13178] __submit_bio+0x584/0x6c0 [ 197.027905][T13178] submit_bio_noacct_nocheck+0x562/0xc10 [ 197.030383][T13178] submit_bio_noacct+0xd17/0x2010 [ 197.032431][T13178] submit_bh_wbc+0x59c/0x770 [ 197.034301][T13178] block_read_full_folio+0x264/0x8e0 [ 197.036588][T13178] filemap_read_folio+0xfc/0x3b0 [ 197.038670][T13178] do_read_cache_folio+0x2d7/0x6b0 [ 197.040407][T13178] read_part_sector+0xd1/0x370 [ 197.042062][T13178] adfspart_check_ICS+0x93/0x910 [ 197.043805][T13178] bdev_disk_changed+0x7f8/0xc80 [ 197.045569][T13178] blkdev_get_whole+0x187/0x290 [ 197.047371][T13178] bdev_open+0x2c7/0xe40 [ 197.049070][T13178] blkdev_open+0x34e/0x4f0 [ 197.050830][T13178] do_dentry_open+0x6d8/0x1660 [ 197.052794][T13178] vfs_open+0x82/0x3f0 [ 197.054727][T13178] path_openat+0x208c/0x31a0 [ 197.056878][T13178] do_file_open+0x20e/0x430 [ 197.059079][T13178] do_sys_openat2+0x10d/0x1e0 [ 197.061190][T13178] __x64_sys_openat+0x12d/0x210 [ 197.063494][T13178] do_syscall_64+0x106/0xf80 [ 197.065734][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.068627][T13178] [ 197.068627][T13178] -> #3 (set->srcu){.+.+}-{0:0}: [ 197.071312][T13178] __synchronize_srcu+0xa1/0x2a0 [ 197.073011][T13178] blk_mq_quiesce_queue+0x149/0x1c0 [ 197.075017][T13178] elevator_switch+0x17b/0x7e0 [ 197.077158][T13178] elevator_change+0x352/0x530 [ 197.079469][T13178] elevator_set_default+0x29e/0x360 [ 197.081845][T13178] blk_register_queue+0x412/0x590 [ 197.084218][T13178] __add_disk+0x73f/0xe40 [ 197.086385][T13178] add_disk_fwnode+0x118/0x5c0 [ 197.089153][T13178] nbd_dev_add+0x77a/0xb10 [ 197.091249][T13178] nbd_init+0x291/0x2b0 [ 197.092943][T13178] do_one_initcall+0x11d/0x760 [ 197.094873][T13178] kernel_init_freeable+0x6e5/0x7a0 [ 197.097182][T13178] kernel_init+0x1f/0x1e0 [ 197.099183][T13178] ret_from_fork+0x754/0xd80 [ 197.101229][T13178] ret_from_fork_asm+0x1a/0x30 [ 197.103275][T13178] [ 197.103275][T13178] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 197.106460][T13178] __mutex_lock+0x1a2/0x1b90 [ 197.108631][T13178] elevator_change+0x1bc/0x530 [ 197.110938][T13178] elevator_set_none+0x92/0xf0 [ 197.113136][T13178] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 197.115695][T13178] nbd_start_device+0x1a6/0xbd0 [ 197.117903][T13178] nbd_genl_connect+0xff2/0x1a40 [ 197.120133][T13178] genl_family_rcv_msg_doit+0x214/0x300 [ 197.122507][T13178] genl_rcv_msg+0x560/0x800 [ 197.124625][T13178] netlink_rcv_skb+0x159/0x420 [ 197.127110][T13178] genl_rcv+0x28/0x40 [ 197.129231][T13178] netlink_unicast+0x5aa/0x870 [ 197.131702][T13178] netlink_sendmsg+0x8b0/0xda0 [ 197.133982][T13178] ____sys_sendmsg+0x9e1/0xb70 [ 197.136152][T13178] ___sys_sendmsg+0x190/0x1e0 [ 197.138235][T13178] __sys_sendmsg+0x170/0x220 [ 197.140357][T13178] __do_fast_syscall_32+0xe3/0x8c0 [ 197.142661][T13178] do_fast_syscall_32+0x32/0x70 [ 197.144943][T13178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.148197][T13178] [ 197.148197][T13178] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 197.152008][T13178] blk_alloc_queue+0x610/0x790 [ 197.154206][T13178] blk_mq_alloc_queue+0x174/0x290 [ 197.156392][T13178] __blk_mq_alloc_disk+0x29/0x120 [ 197.158639][T13178] nbd_dev_add+0x492/0xb10 [ 197.160613][T13178] nbd_init+0x291/0x2b0 [ 197.162591][T13178] do_one_initcall+0x11d/0x760 [ 197.164816][T13178] kernel_init_freeable+0x6e5/0x7a0 [ 197.167377][T13178] kernel_init+0x1f/0x1e0 [ 197.169555][T13178] ret_from_fork+0x754/0xd80 [ 197.171765][T13178] ret_from_fork_asm+0x1a/0x30 [ 197.173929][T13178] [ 197.173929][T13178] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 197.176908][T13178] __lock_acquire+0x14b8/0x2630 [ 197.179116][T13178] lock_acquire+0x1cf/0x380 [ 197.181161][T13178] fs_reclaim_acquire+0xc4/0x100 [ 197.183382][T13178] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 197.186083][T13178] __kmem_cache_create_args+0x366/0x420 [ 197.188891][T13178] ieee80211_mesh_init_sdata+0x596/0x690 [ 197.191587][T13178] ieee80211_setup_sdata+0xabd/0xcf0 [ 197.194100][T13178] ieee80211_if_add+0xa30/0x1860 [ 197.196256][T13178] ieee80211_add_iface+0xaf/0x5d0 [ 197.198451][T13178] nl80211_new_interface+0x65f/0x11d0 [ 197.200854][T13178] genl_family_rcv_msg_doit+0x214/0x300 [ 197.203170][T13178] genl_rcv_msg+0x560/0x800 [ 197.205257][T13178] netlink_rcv_skb+0x159/0x420 [ 197.207399][T13178] genl_rcv+0x28/0x40 [ 197.209264][T13178] netlink_unicast+0x5aa/0x870 [ 197.211517][T13178] netlink_sendmsg+0x8b0/0xda0 [ 197.213971][T13178] ____sys_sendmsg+0x9e1/0xb70 [ 197.216444][T13178] ___sys_sendmsg+0x190/0x1e0 [ 197.218637][T13178] __sys_sendmsg+0x170/0x220 [ 197.220734][T13178] __do_fast_syscall_32+0xe3/0x8c0 [ 197.223025][T13178] do_fast_syscall_32+0x32/0x70 [ 197.225088][T13178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.227824][T13178] [ 197.227824][T13178] other info that might help us debug this: [ 197.227824][T13178] [ 197.232389][T13178] Chain exists of: [ 197.232389][T13178] fs_reclaim --> cpu_hotplug_lock --> slab_mutex [ 197.232389][T13178] [ 197.236804][T13178] Possible unsafe locking scenario: [ 197.236804][T13178] [ 197.239184][T13178] CPU0 CPU1 [ 197.240867][T13178] ---- ---- [ 197.242671][T13178] lock(slab_mutex); [ 197.244062][T13178] lock(cpu_hotplug_lock); [ 197.246901][T13178] lock(slab_mutex); [ 197.249786][T13178] lock(fs_reclaim); [ 197.251474][T13178] [ 197.251474][T13178] *** DEADLOCK *** [ 197.251474][T13178] [ 197.254696][T13178] 4 locks held by syz.0.3133/13178: [ 197.256784][T13178] #0: ffffffff906c15d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 197.260285][T13178] #1: ffffffff906152a8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xae0 [ 197.264274][T13178] #2: ffff88806ca18788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_new_interface+0xac/0x11d0 [ 197.268344][T13178] #3: ffffffff8e978108 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 197.272257][T13178] [ 197.272257][T13178] stack backtrace: [ 197.275028][T13178] CPU: 1 UID: 0 PID: 13178 Comm: syz.0.3133 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.275059][T13178] Tainted: [L]=SOFTLOCKUP [ 197.275066][T13178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.275079][T13178] Call Trace: [ 197.275087][T13178] [ 197.275096][T13178] dump_stack_lvl+0x100/0x190 [ 197.275129][T13178] print_circular_bug.cold+0x178/0x1c7 [ 197.275162][T13178] check_noncircular+0x146/0x160 [ 197.275190][T13178] __lock_acquire+0x14b8/0x2630 [ 197.275217][T13178] ? __kmem_cache_create_args+0x44/0x420 [ 197.275248][T13178] lock_acquire+0x1cf/0x380 [ 197.275273][T13178] ? kmem_cache_alloc_noprof+0x4c/0x6e0 [ 197.275309][T13178] fs_reclaim_acquire+0xc4/0x100 [ 197.275332][T13178] ? kmem_cache_alloc_noprof+0x4c/0x6e0 [ 197.275362][T13178] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 197.275393][T13178] ? __kmem_cache_create_args+0x366/0x420 [ 197.275425][T13178] __kmem_cache_create_args+0x366/0x420 [ 197.275455][T13178] ieee80211_mesh_init_sdata+0x596/0x690 [ 197.275480][T13178] ? __pfx_ieee80211_mesh_init_sdata+0x10/0x10 [ 197.275501][T13178] ? __pfx___debug_object_init+0x10/0x10 [ 197.275523][T13178] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.275543][T13178] ? lockdep_init_map_type+0x5c/0x250 [ 197.275571][T13178] ieee80211_setup_sdata+0xabd/0xcf0 [ 197.275600][T13178] ieee80211_if_add+0xa30/0x1860 [ 197.275631][T13178] ieee80211_add_iface+0xaf/0x5d0 [ 197.275660][T13178] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 197.275688][T13178] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.275710][T13178] nl80211_new_interface+0x65f/0x11d0 [ 197.275737][T13178] ? __pfx_nl80211_new_interface+0x10/0x10 [ 197.275765][T13178] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 197.275790][T13178] ? nl80211_pre_doit+0x19a/0xae0 [ 197.275816][T13178] genl_family_rcv_msg_doit+0x214/0x300 [ 197.275840][T13178] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 197.275862][T13178] ? genl_get_cmd+0x3ef/0x720 [ 197.275884][T13178] ? bpf_lsm_capable+0x9/0x10 [ 197.275905][T13178] ? security_capable+0x80/0x260 [ 197.275937][T13178] ? ns_capable+0xd2/0xf0 [ 197.275963][T13178] genl_rcv_msg+0x560/0x800 [ 197.275985][T13178] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.276006][T13178] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 197.276030][T13178] ? __pfx_nl80211_new_interface+0x10/0x10 [ 197.276054][T13178] ? __pfx_nl80211_post_doit+0x10/0x10 [ 197.276085][T13178] netlink_rcv_skb+0x159/0x420 [ 197.276102][T13178] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.276124][T13178] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.276147][T13178] ? netlink_deliver_tap+0x1ae/0xcc0 [ 197.276179][T13178] genl_rcv+0x28/0x40 [ 197.276197][T13178] netlink_unicast+0x5aa/0x870 [ 197.276228][T13178] ? __pfx_netlink_unicast+0x10/0x10 [ 197.276265][T13178] netlink_sendmsg+0x8b0/0xda0 [ 197.276290][T13178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.276309][T13178] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 197.276349][T13178] ____sys_sendmsg+0x9e1/0xb70 [ 197.276370][T13178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.276389][T13178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.276413][T13178] ? __pfx_futex_wake_mark+0x10/0x10 [ 197.276448][T13178] ___sys_sendmsg+0x190/0x1e0 [ 197.276474][T13178] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.276514][T13178] __sys_sendmsg+0x170/0x220 [ 197.276546][T13178] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.276577][T13178] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 197.276617][T13178] __do_fast_syscall_32+0xe3/0x8c0 [ 197.276652][T13178] do_fast_syscall_32+0x32/0x70 [ 197.276672][T13178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.276700][T13178] RIP: 0023:0xf6fdef6c [ 197.276716][T13178] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 197.276737][T13178] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 197.276757][T13178] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 197.276771][T13178] RDX: 0000000024044884 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.276784][T13178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.276796][T13178] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 197.276809][T13178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.276829][T13178] [ 197.279266][T13180] usbtmc 6-1:16.0: stb usb_control_msg returned -32 [ 197.474421][ T54] usb 6-1: USB disconnect, device number 13 [ 197.576464][ T5951] Bluetooth: hci0: command tx timeout [ 198.848887][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.851209][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.656363][ T5951] Bluetooth: hci0: command tx timeout [ 201.726336][ T5951] Bluetooth: hci0: command tx timeout