last executing test programs: 6m59.620038536s ago: executing program 1 (id=866): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x8, 0x0) fanotify_mark(r1, 0x201, 0x40000032, r0, 0x0) 6m59.572767095s ago: executing program 1 (id=870): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) 6m59.439500339s ago: executing program 1 (id=874): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 6m59.435766761s ago: executing program 1 (id=876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 6m59.383661352s ago: executing program 1 (id=878): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 6m59.333785862s ago: executing program 1 (id=880): unshare(0x28020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 6m44.290830235s ago: executing program 32 (id=880): unshare(0x28020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 6m24.674717386s ago: executing program 4 (id=1721): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xd1, 0xa0, 0x5e, 0x20, 0xccd, 0x102, 0x890e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x54, 0x40, 0x1, "", [{{0x9, 0x4, 0xbc, 0x80, 0x0, 0xc, 0xf1, 0xc7, 0x7f}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x0}) 6m23.244844568s ago: executing program 4 (id=1740): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m23.152261501s ago: executing program 4 (id=1744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0x70) 6m23.10080537s ago: executing program 4 (id=1749): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x54}, 0x2, 0x34005}, 0x0) 6m23.03962542s ago: executing program 4 (id=1754): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') 6m22.982334971s ago: executing program 4 (id=1756): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}]}, 0x50}, 0x1, 0xba01}, 0x0) 6m7.921269752s ago: executing program 33 (id=1756): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}]}, 0x50}, 0x1, 0xba01}, 0x0) 47.980303439s ago: executing program 0 (id=8889): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) poll(0x0, 0x0, 0x9e7) 47.07921668s ago: executing program 0 (id=8908): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x100, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x167) 47.076451885s ago: executing program 0 (id=8910): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 47.009907623s ago: executing program 0 (id=8912): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 47.005047486s ago: executing program 0 (id=8914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564dff, 0x0, 0x8}]}) 46.849759389s ago: executing program 0 (id=8919): sync() sync() r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0x7) 31.842372762s ago: executing program 34 (id=8919): sync() sync() r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0x7) 29.941887898s ago: executing program 2 (id=9156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x2d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 29.656555162s ago: executing program 2 (id=9149): r0 = memfd_create(&(0x7f0000000bc0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1a\xd2\'\xb2cB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\x00\x02\xe4\x96\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\x06\x00$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1\x00\x00\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write(r0, &(0x7f0000000f00)='M', 0x1) 29.621731564s ago: executing program 2 (id=9151): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x0, 0x3, 0x3}, 0x36) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 29.544286962s ago: executing program 2 (id=9165): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 29.514729258s ago: executing program 2 (id=9158): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000004c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tw'], 0xa) 29.24900329s ago: executing program 2 (id=9164): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000070000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 29.192243527s ago: executing program 35 (id=9164): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000070000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.109421007s ago: executing program 5 (id=9532): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=""/94, 0x5e}, 0x0) sendmsg$inet(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x10) 1.005613025s ago: executing program 5 (id=9533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x3, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f8680000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) 1.00369386s ago: executing program 5 (id=9534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_io_uring_setup(0x408c, &(0x7f0000000040)={0x0, 0xf84, 0x10081, 0x1, 0x2e1}, &(0x7f0000000300), &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) 928.327598ms ago: executing program 5 (id=9536): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 747.177952ms ago: executing program 5 (id=9542): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf250100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0) 705.018275ms ago: executing program 5 (id=9545): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0xfd, 0x1, 0x8, 0x0}) 533.980688ms ago: executing program 7 (id=9552): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00') 457.252182ms ago: executing program 6 (id=9554): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000}) 414.754175ms ago: executing program 3 (id=9555): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88440, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 414.09843ms ago: executing program 6 (id=9556): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 411.331195ms ago: executing program 3 (id=9557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000170a0101"], 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) read(r0, &(0x7f0000000400)=""/96, 0x60) 358.880949ms ago: executing program 3 (id=9558): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="3d25ff0706000000000000c1a4dd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 355.184997ms ago: executing program 6 (id=9559): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@dstopts={0x6c}, 0x8) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e25, 0x1, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 266.798182ms ago: executing program 3 (id=9560): syz_io_uring_setup(0x10d3, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000007c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0300000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 266.379181ms ago: executing program 3 (id=9561): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe9d, 0x80a0a1240160183c) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 261.226ms ago: executing program 7 (id=9562): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) close_range(r0, 0xffffffffffffffff, 0x0) 177.456961ms ago: executing program 6 (id=9563): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="28033e000a00140000007ef506be1e000000000000000000000000143baa111f1f858c3d4fcd84e632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe85e3b574652510e08c6d8ec319c1ef17e9620e1a0dff70ea03f7b57205dcf116bdf27bfd7fd5f007037c181c952049f543fed12e3c44a154c8d244bb66d4826d51ad4c42f93ecb4015382992a", 0x90, 0x400c010, &(0x7f00000000c0)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @local}, 0x6f) 177.124292ms ago: executing program 7 (id=9564): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4) 107.984378ms ago: executing program 3 (id=9565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000002, 0x0, 0x6}, {0x40000002, 0x0, 0x100000001}]}) 107.60865ms ago: executing program 6 (id=9566): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x4, &(0x7f0000000080)={0x2, 0x4c1e, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r0, &(0x7f0000008400)=[{{0x0, 0x0, 0x0}, 0x4bd}], 0x1, 0x10142, 0x0) 107.262766ms ago: executing program 7 (id=9567): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0xba, 0xe, 0x54, 0x5, 0xff, 0x8, 0x2c, 0x40, 0x0, 0x5, 0x5, 0x2, 0x80, 0x9, 0x5, 0x5d}}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 90.833206ms ago: executing program 6 (id=9568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0xec000000, 0xcd}]}) 88.302432ms ago: executing program 7 (id=9569): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000200"/20, @ANYRES32=0x1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3}) 0s ago: executing program 7 (id=9570): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x1000, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x101}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)='=', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="f28f7b01f0101ce8947b91a70da1d394d249dec210d50a23f041819385ba7ced924832018e319c05d1cefe67c8ea06f0e0ca20aa1f70ade7d675ebf4a3354046ad92e5b410c4f1fe67ceaf3266f05e5e4ad23a9c1dcdd999de79be0f35d1507bd2d6eebef61c24fded2f346ed489a22ab33b63ccd641e2fdf8cb9335116f5b7d701870329386b4c6c51441000597a3fe47e50ddb6e145ef3fd3ab50409e573a1", 0xa0}, {&(0x7f0000000300)="dd27f645140f69be399f30d86d213f317819e50f68770cf94c617eb0274620c5d3228dc2c29495cb487e98251733b0bb1339146a31cb", 0x36}], 0x2}}], 0x2, 0x48819) kernel console output (not intermixed with test programs): pid=20427 comm="syz.0.6516" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 362.013679][ T40] audit: type=1326 audit(1778831630.764:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20427 comm="syz.0.6516" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704efe8 code=0x7ffc0000 [ 362.022080][ T40] audit: type=1326 audit(1778831630.764:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20427 comm="syz.0.6516" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704efe8 code=0x7ffc0000 [ 362.029300][ T40] audit: type=1326 audit(1778831630.764:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20427 comm="syz.0.6516" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704efe8 code=0x7ffc0000 [ 362.035888][ T40] audit: type=1326 audit(1778831630.764:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20427 comm="syz.0.6516" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704efe8 code=0x7ffc0000 [ 362.727040][ T5758] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 362.731412][ T5102] Bluetooth: hci4: command 0x1003 tx timeout [ 363.196545][T20451] ip6_vti0 speed is unknown, defaulting to 1000 [ 364.371441][T20486] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 364.887039][ T5102] Bluetooth: hci4: command 0x1003 tx timeout [ 364.887454][ T5758] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 366.332486][ T59] kernel write not supported for file /sequencer (pid: 59 comm: kworker/1:1) [ 368.498715][T20575] ip6_vti0 speed is unknown, defaulting to 1000 [ 368.813679][T20596] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 369.860777][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6603'. [ 370.856574][T20629] hub 1-0:1.0: USB hub found [ 370.868980][T20629] hub 1-0:1.0: 2 ports detected [ 371.002350][ T8873] hid_parser_main: 68 callbacks suppressed [ 371.002370][ T8873] hid-generic 0000:0000:0002.000C: unknown main item tag 0x0 [ 371.010799][ T8873] hid-generic 0000:0000:0002.000C: unknown main item tag 0x0 [ 371.017343][ T8873] hid-generic 0000:0000:0002.000C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 371.054254][T20650] fido_id[20650]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 371.066681][ T40] kauditd_printk_skb: 433 callbacks suppressed [ 371.066695][ T40] audit: type=1326 audit(1778831639.854:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20651 comm="syz.2.6612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 371.076463][ T40] audit: type=1326 audit(1778831639.854:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20651 comm="syz.2.6612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 371.084873][ T40] audit: type=1326 audit(1778831639.874:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20651 comm="syz.2.6612" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 371.096042][ T40] audit: type=1326 audit(1778831639.874:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20651 comm="syz.2.6612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 371.106066][ T40] audit: type=1326 audit(1778831639.874:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20651 comm="syz.2.6612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 371.114400][ T40] audit: type=1326 audit(1778831639.874:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20651 comm="syz.2.6612" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 371.121058][ T40] audit: type=1326 audit(1778831639.874:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20651 comm="syz.2.6612" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 371.137155][ T40] audit: type=1326 audit(1778831639.874:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20651 comm="syz.2.6612" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 371.147027][ T40] audit: type=1326 audit(1778831639.874:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20651 comm="syz.2.6612" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 371.154668][ T40] audit: type=1326 audit(1778831639.874:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20651 comm="syz.2.6612" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 371.757095][ T8873] kernel read not supported for file /dsp1 (pid: 8873 comm: kworker/0:5) [ 371.810867][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6620'. [ 371.821288][T20668] netlink: 'syz.3.6620': attribute type 30 has an invalid length. [ 371.835962][ T6466] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.840826][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6620'. [ 371.843681][ T6466] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.847739][T20668] netlink: 'syz.3.6620': attribute type 30 has an invalid length. [ 371.850425][ T6466] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.853361][ T6466] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.027836][T20680] hub 1-0:1.0: USB hub found [ 372.033312][T20680] hub 1-0:1.0: 2 ports detected [ 372.781321][T20726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6649'. [ 372.786574][T20726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6649'. [ 372.807708][T20729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.819369][T20729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.826180][T20729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.829880][T20729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.835789][T20729] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.857353][T20731] netlink: 'syz.0.6650': attribute type 8 has an invalid length. [ 372.967321][T20729] Bluetooth: hci1: command 0x0c1a tx timeout [ 373.026447][T20727] ip6_vti0 speed is unknown, defaulting to 1000 [ 373.071172][T20752] can0: slcan on ttynull. [ 373.329347][T20727] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.331750][T20727] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.334121][T20727] bridge_slave_0: entered allmulticast mode [ 373.337305][T20727] bridge_slave_0: entered promiscuous mode [ 373.340800][T20727] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.343133][T20727] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.345456][T20727] bridge_slave_1: entered allmulticast mode [ 373.347124][ T59] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 373.348737][T20727] bridge_slave_1: entered promiscuous mode [ 373.370267][T20727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.375195][T20727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.398119][T20727] team0: Port device team_slave_0 added [ 373.401284][T20727] team0: Port device team_slave_1 added [ 373.414820][T20727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.417108][T20727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.424970][T20727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.432062][T20727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.434242][T20727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.442590][T20727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.471225][T20727] hsr_slave_0: entered promiscuous mode [ 373.473603][T20727] hsr_slave_1: entered promiscuous mode [ 373.475676][T20727] debugfs: 'hsr0' already exists in 'hsr' [ 373.478032][T20727] Cannot create hsr debugfs directory [ 373.509279][ T59] usb 10-1: config 0 has no interfaces? [ 373.511749][ T59] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.515521][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.525869][ T59] usb 10-1: config 0 descriptor?? [ 373.625186][T20727] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.667561][T20775] nbd4: detected capacity change from 0 to 63 [ 373.678345][ T5758] block nbd4: Receive control failed (result -104) [ 373.732311][ T59] usb 10-1: USB disconnect, device number 16 [ 373.751282][T20727] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.864775][T20727] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.892290][T20751] can0 (unregistered): slcan off ttynull. [ 373.988646][T20727] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.151764][T20727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.156202][T20727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 374.159486][T20727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.163180][T20727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.165869][T20727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 374.170106][T20727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.172792][T20727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 374.176428][T20727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 374.216387][T20727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.225335][T20727] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.232331][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.234666][ T6466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.241212][ T6464] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.243593][ T6464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.505615][T20727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.540429][T20727] veth0_vlan: entered promiscuous mode [ 374.549066][T20727] veth1_vlan: entered promiscuous mode [ 374.578519][T20727] veth0_macvtap: entered promiscuous mode [ 374.584157][T20727] veth1_macvtap: entered promiscuous mode [ 374.601270][T20727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.611451][T20727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.621513][ T6524] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.624568][ T6524] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.627936][ T6524] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.631247][ T6524] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.694314][ T6464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.704204][ T6464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.738077][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.741337][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.887440][ T5758] Bluetooth: hci0: command tx timeout [ 375.543804][T20852] kvm: kvm [20851]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 375.568071][ T59] kernel read not supported for file /dsp1 (pid: 59 comm: kworker/1:1) [ 375.750538][T20867] loop4: detected capacity change from 0 to 7 [ 375.757594][ C3] blk_print_req_error: 5 callbacks suppressed [ 375.757606][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.762563][ C3] buffer_io_error: 5 callbacks suppressed [ 375.762575][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.775925][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.778932][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.784315][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.787260][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.790072][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.793657][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.796669][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.800001][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.804733][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.808209][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.815182][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.818158][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.820695][T20867] ldm_validate_partition_table(): Disk read failed. [ 375.823462][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.826551][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.830219][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.833155][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.835876][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.838663][T20872] loop5: detected capacity change from 0 to 7 [ 375.840933][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 375.843681][T20867] Dev loop4: unable to read RDB block 0 [ 375.849891][T20867] loop4: unable to read partition table [ 375.853816][T20867] loop4: partition table beyond EOD, truncated [ 375.856782][T20867] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 375.993538][T20872] Dev loop5: unable to read RDB block 7 [ 375.995390][T20872] loop5: unable to read partition table [ 375.997774][T20872] loop5: partition table beyond EOD, truncated [ 375.999998][T20872] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 376.076732][ T40] kauditd_printk_skb: 253 callbacks suppressed [ 376.076747][ T40] audit: type=1326 audit(1778831644.864:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.5.6690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 376.086542][ T40] audit: type=1326 audit(1778831644.864:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.5.6690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 376.097811][ T40] audit: type=1326 audit(1778831644.874:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.5.6690" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 376.116648][ T40] audit: type=1326 audit(1778831644.874:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.5.6690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 376.124646][ T40] audit: type=1326 audit(1778831644.874:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.5.6690" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 376.131599][ T40] audit: type=1326 audit(1778831644.874:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.5.6690" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb3fe8 code=0x7ffc0000 [ 376.138458][ T40] audit: type=1326 audit(1778831644.874:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.5.6690" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb3fe8 code=0x7ffc0000 [ 376.145190][ T40] audit: type=1326 audit(1778831644.874:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.5.6690" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb3fe8 code=0x7ffc0000 [ 376.152219][ T40] audit: type=1326 audit(1778831644.874:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.5.6690" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb3fe8 code=0x7ffc0000 [ 376.159711][ T40] audit: type=1326 audit(1778831644.874:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.5.6690" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb3fe8 code=0x7ffc0000 [ 376.328922][T20898] evm: overlay not supported [ 376.600094][T20910] input: syz0 as /devices/virtual/input/input34 [ 376.757081][ T39] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 376.764697][T20924] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.6708'. [ 376.878876][T20936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6715'. [ 376.919880][ T39] usb 10-1: Using ep0 maxpacket: 8 [ 376.923681][ T39] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 376.927463][ T39] usb 10-1: config 0 has no interface number 0 [ 376.930722][ T39] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.934602][ T39] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 376.938461][ T39] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 376.941883][ T39] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 376.945926][ T39] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 376.949404][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.953845][ T39] usb 10-1: config 0 descriptor?? [ 376.962685][ T39] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 376.967515][ T5758] Bluetooth: hci0: command tx timeout [ 377.206506][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6724'. [ 377.210952][T20955] netlink: 'syz.2.6724': attribute type 25 has an invalid length. [ 377.214072][T20955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6724'. [ 377.239103][ T8873] usb 10-1: USB disconnect, device number 17 [ 377.253023][ T8873] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 377.317585][T20963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6728'. [ 377.651837][T20978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6735'. [ 377.816610][T20989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.826432][T20991] bridge_slave_0: invalid flags given to default FDB implementation [ 377.887567][T20997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6745'. [ 377.891111][T20999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6744'. [ 377.962933][T21005] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 377.976125][ T6524] Bluetooth: hci4: Frame reassembly failed (-84) [ 379.047546][ T5102] Bluetooth: hci0: command tx timeout [ 379.315970][T21009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6750'. [ 379.349236][T21011] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 379.793843][T21035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6763'. [ 380.007149][ T5758] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 380.007254][T20729] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 380.007903][ T5102] Bluetooth: hci4: command 0x1003 tx timeout [ 380.007977][ T5102] Bluetooth: hci5: command 0x1003 tx timeout [ 381.127134][T20729] Bluetooth: hci0: command tx timeout [ 381.536522][T21134] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 381.887212][ T59] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 382.046962][ T59] usb 10-1: Using ep0 maxpacket: 32 [ 382.050724][ T59] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 382.053763][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.057931][ T59] usb 10-1: config 0 descriptor?? [ 382.064072][ T59] as10x_usb: device has been detected [ 382.066748][ T59] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 382.076580][ T59] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 382.094424][ T59] as10x_usb: error during firmware upload part1 [ 382.096758][ T59] Registered device nBox DVB-T Dongle [ 382.266786][ T8873] usb 10-1: USB disconnect, device number 18 [ 382.285479][ T8873] Unregistered device nBox DVB-T Dongle [ 382.287205][ T8873] as10x_usb: device has been disconnected [ 382.791740][T21195] netem: change failed [ 382.967663][ T40] kauditd_printk_skb: 182 callbacks suppressed [ 382.967677][ T40] audit: type=1326 audit(1778831651.764:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21199 comm="syz.3.6842" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 382.978309][ T40] audit: type=1326 audit(1778831651.764:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21199 comm="syz.3.6842" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 382.986209][ T40] audit: type=1326 audit(1778831651.764:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21199 comm="syz.3.6842" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 382.996504][ T40] audit: type=1326 audit(1778831651.764:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21199 comm="syz.3.6842" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 383.003995][ T40] audit: type=1326 audit(1778831651.764:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21199 comm="syz.3.6842" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 383.010793][ T40] audit: type=1326 audit(1778831651.764:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21199 comm="syz.3.6842" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 383.017837][ T40] audit: type=1326 audit(1778831651.764:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21199 comm="syz.3.6842" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 383.025527][ T40] audit: type=1326 audit(1778831651.764:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21199 comm="syz.3.6842" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 383.034311][ T40] audit: type=1326 audit(1778831651.764:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21199 comm="syz.3.6842" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 383.043707][ T40] audit: type=1326 audit(1778831651.764:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21199 comm="syz.3.6842" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 383.057148][ T39] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 383.220272][ T39] usb 10-1: Using ep0 maxpacket: 8 [ 383.224757][ T39] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 383.228584][ T39] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.232616][ T39] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 383.237416][ T39] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 383.251907][ T39] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.262326][ T39] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 383.265238][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.288738][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.481510][ T39] usb 10-1: GET_CAPABILITIES returned 0 [ 383.483378][ T39] usbtmc 10-1:16.0: can't read capabilities [ 383.686371][ T843] usb 10-1: USB disconnect, device number 19 [ 384.253188][T21246] __nla_validate_parse: 4 callbacks suppressed [ 384.253201][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6854'. [ 384.452722][T21268] binder: 21267:21268 ioctl c0306201 0 returned -14 [ 385.261392][T21308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6882'. [ 385.265122][T21308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6882'. [ 385.273711][T21308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6882'. [ 385.276472][T21308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6882'. [ 385.367924][ T6464] wlan1: Trigger new scan to find an IBSS to join [ 386.059146][ T843] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 386.206920][ T843] usb 10-1: Using ep0 maxpacket: 8 [ 386.210038][ T843] usb 10-1: config 0 has an invalid interface number: 186 but max is 0 [ 386.212703][ T843] usb 10-1: config 0 has no interface number 0 [ 386.214583][ T843] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 386.218512][ T843] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 386.222127][ T843] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 386.225640][ T843] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 386.229553][ T843] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.235383][ T843] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 386.238638][ T843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.241120][ T843] usb 10-1: Product: syz [ 386.242399][ T843] usb 10-1: Manufacturer: syz [ 386.243908][ T843] usb 10-1: SerialNumber: syz [ 386.247402][ T843] usb 10-1: config 0 descriptor?? [ 386.470482][ T843] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 386.668757][ T843] usb 10-1: USB disconnect, device number 20 [ 386.716537][T21368] tipc: Started in network mode [ 386.718873][T21368] tipc: Node identity ac14140f, cluster identity 4711 [ 386.721292][T21368] tipc: New replicast peer: 172.30.0.3 [ 386.723265][T21368] tipc: Enabled bearer , priority 10 [ 386.727661][T21368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6911'. [ 386.730611][T21368] tipc: Disabling bearer [ 386.778488][T21372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6913'. [ 387.404054][T21404] bond1 (unregistering): Released all slaves [ 387.465524][T21409] netlink: 'syz.3.6931': attribute type 8 has an invalid length. [ 387.677412][T21413] nbd5: detected capacity change from 0 to 63 [ 387.687123][T20729] block nbd5: Receive control failed (result -104) [ 387.894773][T21438] tipc: Enabling of bearer rejected, already enabled [ 387.948354][T21444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6954'. [ 388.408315][ T1250] wlan1: Trigger new scan to find an IBSS to join [ 388.638995][T21469] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6957'. [ 389.023008][ T1250] tipc: Subscription rejected, illegal request [ 389.347334][ T843] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 389.357704][ T6524] wlan1: Creating new IBSS network, BSSID 5a:98:45:64:28:0c [ 389.541157][ T843] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 389.544153][ T843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.549267][ T843] usb 10-1: Product: syz [ 389.550624][ T843] usb 10-1: Manufacturer: syz [ 389.554262][ T843] usb 10-1: SerialNumber: syz [ 389.801340][ T843] rtl8150 10-1:1.0: couldn't reset the device [ 389.803660][ T843] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 389.809510][ T843] usb 10-1: USB disconnect, device number 21 [ 390.532295][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/2:0) [ 391.068374][T21597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7016'. [ 391.280016][T21619] tun0: tun_chr_ioctl cmd 1074025676 [ 391.282229][T21619] tun0: owner set to 0 [ 391.385103][T21625] netem: change failed [ 391.472715][T21633] can0: slcan on ttyS3. [ 391.540287][T21633] can0 (unregistered): slcan off ttyS3. [ 391.837377][T21661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7044'. [ 391.840720][T21661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7044'. [ 391.903488][T21665] bad cache= option: noner_mlock 0 [ 391.903488][T21665] nr_zspages 1541 [ 391.903488][T21665] nr_free_cma 0 [ 391.903488][T21665] numa_hit 196845 [ 391.903488][T21665] numa_miss 3590178 [ 391.903488][T21665] numa_foreign 3590178 [ 391.903488][T21665] numa_interleave 5879 [ 391.903488][T21665] numa_local 191446 [ 391.903488][T21665] numa_other 3595577 [ 391.903488][T21665] nr_inactive_anon 938 [ 391.903488][T21665] nr_active_anon 1804 [ 391.903488][T21665] nr_inactive_file 22150 [ 391.903488][T21665] nr_active_file 5524 [ 391.903488][T21665] nr_unevictable 1741 [ 391.903488][T21665] nr_slab_reclaimable 7029 [ 391.903488][T21665] nr_slab_unreclaimable 68558 [ 391.903488][T21665] nr_isolated_anon 0 [ 391.903488][T21665] nr_isolated_file 0 [ 391.903488][T21665] workingset_nodes 56 [ 391.903488][T21665] workingset_refault_anon 1364 [ 391.903488][T21665] workingset_refault_file 16807 [ 391.903488][T21665] workingset_activate_anon 716 [ 391.903488][T21665] workingset_activate_file 14152 [ 391.903488][T21665] workingset_restore_anon 13 [ 391.903488][T21665] workingset_restore_file 317 [ 391.903488][T21665] workingset_nodereclaim 35 [ 391.903488][T21665] nr_anon_pages 2095 [ 391.903488][T21665] nr_mapped 22819 [ 391.903488][T21665] nr_file_pages 30224 [ 391.903488][T21665] nr_dirty 421 [ 391.903488][T21665] nr_writeback 0 [ 391.903488][T21665] nr_shmem 1802 [ 391.903488][T21665] nr_shmem_hugepages 0 [ 391.903488][T21665] nr_shmem_pmdmapped 0 [ 391.903488][T21665] nr_file_hugepages 0 [ 391.903488][T21665] nr_file_pmdmapped 0 [ 391.903488][T21665] nr_anon_transparent_hugepages 0 [ 391.903488][T21665] nr_vmscan_write 25517 [ 391.903488][T21665] nr_vmscan_immediate_reclaim 1 [ 391.903488][T21665] nr_dirtied 16783 [ 391.903488][T21665] nr_written 16362 [ 391.903488][T21665] nr_throttled_written 0 [ 391.903488][T21665] nr_kernel_misc_reclaimable 0 [ 391.903488][T21665] nr_foll_pin_acquired 11991 [ 391.903488][T21665] nr_foll_pin_released 11991 [ 391.903895][T21665] CIFS: VFS: bad cache= option: noner_mlock 0 [ 391.903895][T21665] nr_zspages 1541 [ 391.903895][T21665] nr_free_cma 0 [ 391.903895][T21665] numa_hit 196845 [ 391.903895][T21665] numa_miss 3590178 [ 391.903895][T21665] numa_foreign 3590178 [ 391.903895][T21665] numa_interleave 5879 [ 391.903895][T21665] numa_local 191446 [ 391.903895][T21665] numa_other 3595577 [ 391.903895][T21665] nr_inactive_anon 938 [ 391.903895][T21665] nr_active_anon 1804 [ 391.903895][T21665] nr_inactive_file 22150 [ 391.903895][T21665] nr_active_file 5524 [ 391.903895][T21665] nr_unevictable 1741 [ 391.903895][T21665] nr_slab_reclaimable 7029 [ 391.903895][T21665] nr_slab_unreclaimable 68558 [ 391.903895][T21665] nr_isolated_anon 0 [ 391.903895][T21665] nr_isolated_file 0 [ 391.903895][T21665] workingset_nodes 56 [ 391.903895][T21665] workingset_refault_anon 1364 [ 391.903895][T21665] workingset_refault_file 16807 [ 391.903895][T21665] workingset_activate_anon 716 [ 391.903895][T21665] workingset_activate_file 14152 [ 391.903895][T21665] workingset_restore_anon 13 [ 391.903895][T21665] workingset_restore_file 317 [ 391.903895][T21665] workingset_nodereclaim 35 [ 391.903895][T21665] nr_anon_pages 2095 [ 391.903895][T21665] nr_mapped 22819 [ 391.903895][T21665] nr_file_pages 30224 [ 391.903895][T21665] nr_dirty 421 [ 391.903895][T21665] nr_writeback 0 [ 391.903895][T21665] nr_shmem 1802 [ 391.903895][T21665] nr_shmem_hugepages 0 [ 391.903895][T21665] nr_shmem_pmdmapped 0 [ 391.903895][T21665] nr_file_hugepages 0 [ 391.903895][T21665] nr_file_pmdmapped 0 [ 391.903895][T21665] nr_anon_transparent_hugepages 0 [ 391.903895][T21665] nr_vmscan_write 25517 [ 391.903895][T21665] nr_vmscan_immediate_reclaim 1 [ 391.903895][T21665] nr_dirtied 16783 [ 391.903895][T21665] nr_written 16362 [ 391.903895][T21665] nr_throttled_written 0 [ 391.903895][T21665] nr_kernel_misc_reclaimable 0 [ 391.903895][T21665] nr_foll_pin_acquired 11991 [ 391.903895][T21665] nr_foll_pin_released 11991 [ 392.026193][T21673] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 392.262765][T21695] sch_fq: defrate 0 ignored. [ 392.366163][T21707] bond0: entered promiscuous mode [ 393.442899][T21748] can0: slcan on ttyS3. [ 393.518391][T21748] can0 (unregistered): slcan off ttyS3. [ 393.771778][T21766] macvtap0: entered promiscuous mode [ 393.773878][T21766] macvtap0: entered allmulticast mode [ 393.776204][T21766] dummy0: entered allmulticast mode [ 393.780260][T21766] dummy0: entered promiscuous mode [ 393.788619][T21766] team0: Device macvtap0 failed to register rx_handler [ 393.791327][T21766] dummy0: left allmulticast mode [ 393.792926][T21766] dummy0: left promiscuous mode [ 394.631553][ T40] kauditd_printk_skb: 261 callbacks suppressed [ 394.631569][ T40] audit: type=1326 audit(1778831663.424:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.7097" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb3fe8 code=0x7ffc0000 [ 394.643276][ T40] audit: type=1326 audit(1778831663.424:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.7097" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb3fe8 code=0x7ffc0000 [ 394.652329][ T40] audit: type=1326 audit(1778831663.424:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.7097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 394.662969][ T40] audit: type=1326 audit(1778831663.424:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.7097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 394.672116][ T40] audit: type=1326 audit(1778831663.424:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.7097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 394.680771][ T40] audit: type=1326 audit(1778831663.424:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.7097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 394.687764][ T40] audit: type=1326 audit(1778831663.424:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.7097" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb3fe8 code=0x7ffc0000 [ 394.687789][ T40] audit: type=1326 audit(1778831663.424:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.7097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 394.687812][ T40] audit: type=1326 audit(1778831663.424:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.7097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 394.687836][ T40] audit: type=1326 audit(1778831663.424:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.7097" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb3fe8 code=0x7ffc0000 [ 395.316406][T21829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7113'. [ 395.632192][T21850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7122'. [ 396.225579][T21890] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.7140'. [ 396.230806][T21890] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.7140'. [ 396.287131][ T59] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 396.313122][T21896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7144'. [ 396.436959][ T59] usb 10-1: Using ep0 maxpacket: 32 [ 396.440923][ T59] usb 10-1: unable to get BOS descriptor or descriptor too short [ 396.446482][ T59] usb 10-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 396.450384][ T59] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.453451][ T59] usb 10-1: Product: syz [ 396.454821][ T59] usb 10-1: Manufacturer: syz [ 396.456360][ T59] usb 10-1: SerialNumber: syz [ 396.465961][T21905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7147'. [ 396.680906][T21912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7150'. [ 396.689593][ T59] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 396.693127][ T59] usb 10-1: MIDIStreaming interface descriptor not found [ 396.742669][ T59] usb 10-1: USB disconnect, device number 22 [ 396.757444][T21917] Bluetooth: MGMT ver 1.23 [ 397.164942][T21951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7169'. [ 397.169783][T21951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7169'. [ 397.265715][T21962] kvm: kvm [21960]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000005e) = 0x1 [ 397.274435][ T59] kernel read not supported for file /vcs (pid: 59 comm: kworker/1:1) [ 397.476770][T21986] netem: change failed [ 398.048176][T22019] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 398.060784][ T5758] Bluetooth: hci4: sending frame failed (-49) [ 398.070212][T20729] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 399.881926][T22076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7228'. [ 399.885717][T22076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7228'. [ 400.102608][T22089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7233'. [ 400.536711][T22120] vivid-000: disconnect [ 400.541489][T22118] vivid-000: reconnect [ 400.837201][ T59] kernel read not supported for file /dsp1 (pid: 59 comm: kworker/1:1) [ 402.256922][ T5849] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 402.407878][ T5849] usb 10-1: Using ep0 maxpacket: 8 [ 402.411195][ T5849] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 402.413881][ T5849] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 402.417963][ T5849] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 402.421820][ T5849] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.424973][ T5849] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.429529][ T5849] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 402.432545][ T5849] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.483989][T22255] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 402.644815][ T5849] usb 10-1: GET_CAPABILITIES returned 0 [ 402.646814][ T5849] usbtmc 10-1:16.0: can't read capabilities [ 402.858029][ T39] usb 10-1: USB disconnect, device number 23 [ 403.773897][ T35] block nbd4: Possible stuck request ffff888028057000: control (read@0,1024B). Runtime 30 seconds [ 403.778366][ T35] block nbd4: Possible stuck request ffff8880280571c0: control (read@1024,1024B). Runtime 30 seconds [ 403.781812][ T35] block nbd4: Possible stuck request ffff888028057380: control (read@2048,1024B). Runtime 30 seconds [ 403.791763][ T35] block nbd4: Possible stuck request ffff888028057540: control (read@3072,1024B). Runtime 30 seconds [ 403.906589][T22303] __nla_validate_parse: 1 callbacks suppressed [ 403.906603][T22303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7333'. [ 404.497026][ T5758] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 404.564782][T22331] netlink: 'syz.3.7346': attribute type 10 has an invalid length. [ 404.841109][T22345] bond1 (unregistering): Released all slaves [ 405.204573][ T59] kernel write not supported for file /input/event2 (pid: 59 comm: kworker/1:1) [ 405.537211][T22372] netlink: 'syz.5.7364': attribute type 4 has an invalid length. [ 405.858987][T22388] netem: unknown loss type 0 [ 405.863218][T22388] netem: change failed [ 406.352708][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7384'. [ 406.719436][T22435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7393'. [ 406.796997][ T5758] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 406.847376][T22441] kvm: kvm [22440]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb7 [ 407.207341][ T6524] Bluetooth: hci4: Frame reassembly failed (-84) [ 407.210981][T22452] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 407.348115][T22456] overlayfs: upper fs does not support tmpfile. [ 408.199730][T22470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7409'. [ 408.204157][T22470] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7409'. [ 408.207197][T22470] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7409'. [ 408.575705][T22494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7421'. [ 408.613674][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x7 [ 408.616170][ T10] hid-generic 0000:0000:0000.000D: ignoring exceeding usage max [ 408.619450][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 408.621962][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 408.624488][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 408.626820][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 408.629259][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 408.632072][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 408.634559][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 408.638392][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 408.640796][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 408.644553][ T10] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz0 [ 408.673081][T22497] fido_id[22497]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 408.791694][T22503] team0: No ports can be present during mode change [ 409.210093][T20729] Bluetooth: hci4: command 0x1003 tx timeout [ 409.210107][ T5758] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 409.737595][T22541] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.674616][T22587] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7459'. [ 410.792598][T22596] tipc: Enabling of bearer rejected, failed to enable media [ 410.907782][T22604] loop2: detected capacity change from 0 to 7 [ 410.911204][T22604] Dev loop2: unable to read RDB block 7 [ 410.913547][T22604] loop2: AHDI p1 p2 [ 410.915328][T22604] loop2: partition table partially beyond EOD, truncated [ 410.923666][T22604] loop2: p1 start 1700753509 is beyond EOD, truncated [ 411.034384][T22613] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7469'. [ 411.591307][T22653] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 411.593958][T22653] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 411.602003][T22653] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 411.604037][T22653] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 411.609152][T22653] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 412.444518][T22741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7529'. [ 413.128932][T22769] input: syz0 as /devices/virtual/input/input37 [ 413.617392][T20729] Bluetooth: hci1: command 0x0c1a tx timeout [ 413.620018][ T62] Bluetooth: hci3: command 0x041b tx timeout [ 413.622264][ T5758] Bluetooth: hci0: command 0x0c1a tx timeout [ 413.817025][ T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1) [ 414.074114][T22816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 414.076310][T22816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 414.078778][T22816] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 414.469149][T22842] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7571'. [ 415.384427][T22883] loop8: detected capacity change from 0 to 7 [ 415.392369][T22883] loop8: [POWERTEC] [ 416.087336][T20729] Bluetooth: hci1: command 0x0c1a tx timeout [ 416.090040][ T5758] Bluetooth: hci3: command 0x041b tx timeout [ 416.090427][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 416.090956][T22906] blk_print_req_error: 10 callbacks suppressed [ 416.090970][T22906] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.090991][T22906] buffer_io_error: 10 callbacks suppressed [ 416.091000][T22906] Buffer I/O error on dev nbd3, logical block 0, async page read [ 416.091120][T22906] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.091135][T22906] Buffer I/O error on dev nbd3, logical block 0, async page read [ 416.091195][T22906] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.091208][T22906] Buffer I/O error on dev nbd3, logical block 0, async page read [ 416.091290][T22906] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.091310][T22906] Buffer I/O error on dev nbd3, logical block 0, async page read [ 416.091402][T22906] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.091420][T22906] Buffer I/O error on dev nbd3, logical block 0, async page read [ 416.091533][T22906] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.091551][T22906] Buffer I/O error on dev nbd3, logical block 0, async page read [ 416.091840][T22906] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.091863][T22906] Buffer I/O error on dev nbd3, logical block 0, async page read [ 416.091967][T22906] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.091986][T22906] Buffer I/O error on dev nbd3, logical block 0, async page read [ 416.092047][T22906] ldm_validate_partition_table(): Disk read failed. [ 416.092105][T22906] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.092121][T22906] Buffer I/O error on dev nbd3, logical block 0, async page read [ 416.092219][T22906] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.092236][T22906] Buffer I/O error on dev nbd3, logical block 0, async page read [ 416.092459][T22906] Dev nbd3: unable to read RDB block 0 [ 416.158904][T22906] nbd3: unable to read partition table [ 416.241097][T22911] bridge0: port 3(batadv1) entered blocking state [ 416.243343][T22911] bridge0: port 3(batadv1) entered disabled state [ 416.245537][T22911] batadv1: entered allmulticast mode [ 416.248581][T22911] batadv1: entered promiscuous mode [ 416.740535][T22937] kvm: kvm [22936]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 416.757035][ T6466] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 416.763408][ T6466] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 416.817605][T22939] hugetlbfs: syz.2.7616 (22939): Using mlock ulimits for SHM_HUGETLB is obsolete [ 417.072506][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7624'. [ 417.108733][T22960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.111839][T22960] IPv6: NLM_F_CREATE should be set when creating new route [ 417.114746][T22960] IPv6: NLM_F_CREATE should be set when creating new route [ 417.123369][T22960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.612818][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7638'. [ 417.623838][T22986] veth1_macvtap: left promiscuous mode [ 417.813625][T22992] overlayfs: upper fs does not support file handles, falling back to index=off. [ 417.816743][T22992] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 417.820360][T22992] overlayfs: conflicting lowerdir path [ 417.849237][ T35] block nbd5: Possible stuck request ffff8880280ee000: control (read@0,1024B). Runtime 30 seconds [ 417.853117][ T35] block nbd5: Possible stuck request ffff8880280ee1c0: control (read@1024,1024B). Runtime 30 seconds [ 417.856481][ T35] block nbd5: Possible stuck request ffff8880280ee380: control (read@2048,1024B). Runtime 30 seconds [ 417.860739][ T35] block nbd5: Possible stuck request ffff8880280ee540: control (read@3072,1024B). Runtime 30 seconds [ 417.999517][ T10] kernel read not supported for file /comedi3 (pid: 10 comm: kworker/0:1) [ 418.049971][T23012] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7651'. [ 418.124165][T23020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7655'. [ 418.167020][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 418.406554][ T40] kauditd_printk_skb: 114 callbacks suppressed [ 418.406567][ T40] audit: type=1326 audit(1778831687.194:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.0.7666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 418.415618][ T40] audit: type=1326 audit(1778831687.194:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.0.7666" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704efe8 code=0x7ffc0000 [ 418.422965][ T40] audit: type=1326 audit(1778831687.194:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.0.7666" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704efe8 code=0x7ffc0000 [ 418.430041][ T40] audit: type=1326 audit(1778831687.204:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.0.7666" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704efe8 code=0x7ffc0000 [ 418.436721][ T40] audit: type=1326 audit(1778831687.204:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.0.7666" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704efe8 code=0x7ffc0000 [ 418.443687][ T40] audit: type=1326 audit(1778831687.204:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.0.7666" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704efe8 code=0x7ffc0000 [ 418.466590][ T40] audit: type=1326 audit(1778831687.204:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.0.7666" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704efe8 code=0x7ffc0000 [ 418.483087][ T40] audit: type=1326 audit(1778831687.204:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.0.7666" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704efe8 code=0x7ffc0000 [ 418.491187][ T40] audit: type=1326 audit(1778831687.204:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.0.7666" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704efe8 code=0x7ffc0000 [ 418.498482][ T40] audit: type=1326 audit(1778831687.204:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.0.7666" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704efe8 code=0x7ffc0000 [ 418.672076][T23076] loop8: detected capacity change from 0 to 7 [ 418.706400][T23076] ldm_validate_partition_table(): Disk read failed. [ 418.712232][T23076] Dev loop8: unable to read RDB block 0 [ 418.715000][T23076] loop8: unable to read partition table [ 418.718851][T23076] loop8: partition table beyond EOD, truncated [ 418.720878][T23076] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 418.856671][T23091] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7688'. [ 419.004591][ T62] block nbd6: Receive control failed (result -32) [ 419.395029][ T6466] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 420.222318][T23200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7737'. [ 420.235117][T23200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7737'. [ 421.933142][T23311] netlink: 'syz.0.7786': attribute type 14 has an invalid length. [ 422.024341][T23323] bpf: Bad value for 'uid' [ 422.395144][T23349] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7804'. [ 422.408420][T23349] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7804'. [ 422.488065][ T1159] wlan1: Trigger new scan to find an IBSS to join [ 422.844154][T23387] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 422.849336][T23387] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 422.875927][T23389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7823'. [ 423.334640][T23426] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 423.530920][T23441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7846'. [ 423.539947][T23441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7846'. [ 423.636525][T23454] bridge0: port 4(vlan4) entered blocking state [ 423.642150][T23454] bridge0: port 4(vlan4) entered disabled state [ 423.644903][T23454] vlan4: entered allmulticast mode [ 423.647629][T23454] bridge0: entered allmulticast mode [ 423.650967][T23454] vlan4: left allmulticast mode [ 423.653237][T23454] bridge0: left allmulticast mode [ 423.736297][T23460] overlayfs: upper fs does not support file handles, falling back to index=off. [ 423.740933][T23460] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 423.985688][T23485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7866'. [ 424.190984][T23502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7874'. [ 424.195694][T23502] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7874'. [ 425.033326][T23533] netlink: 'syz.3.7887': attribute type 3 has an invalid length. [ 425.036506][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7887'. [ 425.203115][T23539] input: syz0 as /devices/virtual/input/input38 [ 425.459963][ T1159] wlan1: Trigger new scan to find an IBSS to join [ 425.607330][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 425.708873][T23559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7900'. [ 425.856799][T23569] bridge0: port 3(vlan2) entered blocking state [ 425.860364][T23569] bridge0: port 3(vlan2) entered disabled state [ 425.862921][T23569] vlan2: entered allmulticast mode [ 425.864549][T23569] bridge0: entered allmulticast mode [ 425.867412][T23569] vlan2: left allmulticast mode [ 425.868963][T23569] bridge0: left allmulticast mode [ 425.998471][T20821] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 426.148880][T20821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 426.154054][T20821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 426.157780][T20821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 426.163111][T20821] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 426.166671][T20821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.170215][T20821] usb 10-1: Product: syz [ 426.171599][T20821] usb 10-1: Manufacturer: syz [ 426.173203][T20821] usb 10-1: SerialNumber: syz [ 426.177279][T20821] usb 10-1: config 0 descriptor?? [ 426.390264][T20821] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 427.505733][T23619] __nla_validate_parse: 5 callbacks suppressed [ 427.505747][T23619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7929'. [ 427.511061][T23619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7929'. [ 427.812033][ T62] Bluetooth: hci0: unexpected event for opcode 0x204e [ 427.916438][T23636] ptrace attach of "/syz-executor exec"[16883] was attempted by "/syz-executor exec"[23636] [ 428.407857][ T1250] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 428.488730][T23651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7940'. [ 428.492521][T23651] netlink: 'syz.3.7940': attribute type 30 has an invalid length. [ 428.653773][ T10] usb 10-1: USB disconnect, device number 24 [ 428.738119][T23659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7945'. [ 429.361553][T23695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7960'. [ 429.506088][ T5849] hid_parser_main: 12 callbacks suppressed [ 429.506102][ T5849] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 429.512629][ T5849] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 429.515333][ T5849] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 429.518006][ T5849] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 429.520494][ T5849] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 429.523017][ T5849] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 429.525641][ T5849] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 429.529316][ T5849] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 429.531715][ T5849] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 429.534302][ T5849] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 429.570615][ T5849] hid-generic 0005:00B6:0009.000E: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 430.010024][T23736] blkio.reset_stats is deprecated [ 430.775273][T20729] Bluetooth: hci4: sending frame failed (-49) [ 430.779012][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 430.786971][ T59] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 430.937289][ T59] usb 10-1: Using ep0 maxpacket: 16 [ 430.941929][ T59] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 430.944863][ T59] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.947983][ T59] usb 10-1: Product: syz [ 430.949479][ T59] usb 10-1: Manufacturer: syz [ 430.955242][ T59] usb 10-1: SerialNumber: syz [ 431.094070][T23785] netlink: 'syz.0.8000': attribute type 2 has an invalid length. [ 431.168923][ T59] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 431.173963][ T59] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 431.177531][ T59] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 431.180378][ T59] usb 10-1: media controller created [ 431.186683][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 431.271331][T23792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8003'. [ 431.303828][T23795] loop9: detected capacity change from 0 to 7 [ 431.309036][ C0] blk_print_req_error: 27 callbacks suppressed [ 431.309047][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.313892][ C0] buffer_io_error: 27 callbacks suppressed [ 431.313900][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.318654][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.322585][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.326067][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.329746][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.333188][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.336055][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.338802][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.341776][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.344594][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.347659][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.350700][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.353602][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.356023][T23795] ldm_validate_partition_table(): Disk read failed. [ 431.359102][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.362025][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.364706][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.367778][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.373306][ T59] zl10353_read_register: readreg error (reg=127, ret==-71) [ 431.388850][ T59] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 431.392887][ T59] usb 10-1: USB disconnect, device number 25 [ 431.420757][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.423712][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.426316][T23795] Dev loop9: unable to read RDB block 0 [ 431.430012][T23795] loop9: unable to read partition table [ 431.431953][T23795] loop9: partition table beyond EOD, truncated [ 431.433901][T23795] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 431.676933][T23813] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 431.714135][T23815] program syz.2.8013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.023638][T23836] vivid-007: disconnect [ 432.026233][T23835] vivid-007: reconnect [ 432.043290][ T62] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 432.730795][T23883] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8042'. [ 433.209514][ T10] kernel write not supported for file /uinput (pid: 10 comm: kworker/0:1) [ 433.350354][T23821] Set syz1 is full, maxelem 65536 reached [ 433.484382][T23908] erspan0: entered promiscuous mode [ 433.674036][T23926] netlink: 200 bytes leftover after parsing attributes in process `syz.5.8064'. [ 433.712939][T23931] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8066'. [ 433.854904][ T35] block nbd4: Possible stuck request ffff888028057000: control (read@0,1024B). Runtime 60 seconds [ 433.858703][ T35] block nbd4: Possible stuck request ffff8880280571c0: control (read@1024,1024B). Runtime 60 seconds [ 433.862192][ T35] block nbd4: Possible stuck request ffff888028057380: control (read@2048,1024B). Runtime 60 seconds [ 433.865564][ T35] block nbd4: Possible stuck request ffff888028057540: control (read@3072,1024B). Runtime 60 seconds [ 434.145896][T23966] input: syz1 as /devices/virtual/input/input39 [ 434.148491][T23966] input: failed to attach handler leds to device input39, error: -6 [ 434.151457][T23968] binder: 23967:23968 ioctl c0306201 80000480 returned -22 [ 434.306091][T23977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8087'. [ 435.357092][T24049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8120'. [ 435.362797][T24049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8120'. [ 435.443283][T24057] ip6_vti0 speed is unknown, defaulting to 1000 [ 436.376049][T24093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8139'. [ 436.391694][T24093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8139'. [ 436.968971][T24127] sg_write: process 3872 (syz.5.8155) changed security contexts after opening file descriptor, this is not allowed. [ 437.305867][T24160] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 437.310555][T24160] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 437.314782][T24160] overlayfs: fs on './cgroup' does not support file handles, falling back to xino=off. [ 438.032905][ T24] kernel read not supported for file /adsp1 (pid: 24 comm: kworker/2:0) [ 438.904212][T24227] netlink: 'syz.2.8202': attribute type 7 has an invalid length. [ 438.906777][T24227] netem: change failed [ 438.939747][T24229] devpts: Bad value for 'max' [ 439.028203][T24235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8207'. [ 439.147964][T24244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8210'. [ 439.590869][T24267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8222'. [ 439.758693][T24286] syzkaller1: tun_chr_ioctl cmd 35108 [ 440.133027][T24303] netlink: 71 bytes leftover after parsing attributes in process `syz.2.8237'. [ 440.359014][T24318] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 440.362989][T24318] block device autoloading is deprecated and will be removed. [ 440.527897][T24328] loop6: detected capacity change from 0 to 524288000 [ 440.905809][T24355] ip6_vti0 speed is unknown, defaulting to 1000 [ 443.222282][T24446] ip6_vti0 speed is unknown, defaulting to 1000 [ 443.367561][ T1250] wlan1: Trigger new scan to find an IBSS to join [ 444.453708][ T5849] hid_parser_main: 4086 callbacks suppressed [ 444.453729][ T5849] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 444.519451][ T5849] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 444.590724][T24469] fido_id[24469]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 444.732959][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.890472][T24493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8320'. [ 445.903570][T24546] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.981640][T24553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8348'. [ 445.986802][T24553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8348'. [ 445.994960][T24553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8348'. [ 446.099401][ T5849] kernel read not supported for file /dsp (pid: 5849 comm: kworker/3:4) [ 446.218774][T24567] ip6_vti0 speed is unknown, defaulting to 1000 [ 446.488013][ T1250] wlan1: Trigger new scan to find an IBSS to join [ 446.807743][ T5849] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 446.900656][T24597] nr0: tun_chr_ioctl cmd 21731 [ 446.960574][ T5849] usb 10-1: Using ep0 maxpacket: 32 [ 446.974127][ T5849] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 446.978423][ T5849] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 446.983513][ T5849] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 446.989795][ T5849] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 446.995244][ T5849] usb 10-1: config 0 interface 0 has no altsetting 0 [ 447.000146][ T5849] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 447.003212][ T5849] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 447.006589][ T5849] usb 10-1: Product: syz [ 447.008966][ T5849] usb 10-1: Manufacturer: syz [ 447.010478][ T5849] usb 10-1: SerialNumber: syz [ 447.018964][ T5849] usb 10-1: config 0 descriptor?? [ 447.025345][ T5849] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 447.042099][ T5849] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 447.234718][ T5849] usb 10-1: USB disconnect, device number 26 [ 447.248515][ T5849] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 447.929475][ T35] block nbd5: Possible stuck request ffff8880280ee000: control (read@0,1024B). Runtime 60 seconds [ 447.934294][ T35] block nbd5: Possible stuck request ffff8880280ee1c0: control (read@1024,1024B). Runtime 60 seconds [ 447.941419][ T35] block nbd5: Possible stuck request ffff8880280ee380: control (read@2048,1024B). Runtime 60 seconds [ 447.945151][ T35] block nbd5: Possible stuck request ffff8880280ee540: control (read@3072,1024B). Runtime 60 seconds [ 448.090164][T24647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8390'. [ 448.093799][T24647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8390'. [ 448.097732][T24647] netlink: 'syz.5.8390': attribute type 18 has an invalid length. [ 448.100880][T24647] netlink: 'syz.5.8390': attribute type 15 has an invalid length. [ 448.143128][T24649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8391'. [ 448.327426][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 448.327831][T20729] Bluetooth: hci4: command 0x1003 tx timeout [ 448.534230][T24675] ip6_vti0 speed is unknown, defaulting to 1000 [ 448.864535][T24703] netlink: 27 bytes leftover after parsing attributes in process `syz.5.8416'. [ 449.196452][T24724] input: syz0 as /devices/virtual/input/input41 [ 449.367609][ T6464] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 449.564612][T24739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8431'. [ 449.569539][T24739] netlink: 'syz.0.8431': attribute type 5 has an invalid length. [ 449.633603][T24745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8434'. [ 449.813836][T24765] binder: 24764:24765 ioctl c0306201 0 returned -14 [ 450.014874][T24780] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8449'. [ 450.275448][T24794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8455'. [ 450.759731][T24813] ip6_vti0 speed is unknown, defaulting to 1000 [ 451.317978][ T6466] wlan1: Selected IBSS BSSID 00:8d:ff:ff:00:00 based on configured SSID [ 452.198438][T24877] ip6_vti0 speed is unknown, defaulting to 1000 [ 452.300125][T24890] loop4: detected capacity change from 0 to 7 [ 452.307731][ C0] blk_print_req_error: 10 callbacks suppressed [ 452.307742][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.312538][ C0] buffer_io_error: 10 callbacks suppressed [ 452.312547][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 452.317575][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.320577][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 452.325514][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.328314][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 452.330853][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.334436][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 452.339881][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.343429][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 452.346952][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.350497][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 452.354138][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.357242][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 452.360401][T24890] ldm_validate_partition_table(): Disk read failed. [ 452.363018][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.366582][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 452.369934][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.373325][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 452.379392][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.382331][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 452.387186][T24890] Dev loop4: unable to read RDB block 0 [ 452.390468][T24890] loop4: unable to read partition table [ 452.392819][T24890] loop4: partition table beyond EOD, truncated [ 452.395276][T24890] loop_reread_partitions: partition scan of loop4 (Cj̖P= ) failed (rc=-5) [ 452.483346][T24900] bridge0: port 1(wlan1) entered blocking state [ 452.486623][T24900] bridge0: port 1(wlan1) entered disabled state [ 452.491739][T24900] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 452.500186][T24900] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 452.566349][T24906] input: syz0 as /devices/virtual/input/input42 [ 452.800456][ T40] kauditd_printk_skb: 258 callbacks suppressed [ 452.800468][ T40] audit: type=1326 audit(1778831722.592:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24901 comm="syz.0.8508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 452.810041][ T40] audit: type=1326 audit(1778831722.592:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24901 comm="syz.0.8508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 452.816510][ T40] audit: type=1326 audit(1778831722.592:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24901 comm="syz.0.8508" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 452.826660][ T40] audit: type=1326 audit(1778831722.592:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24901 comm="syz.0.8508" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 452.880267][T24923] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 452.914141][T24925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8510'. [ 452.918842][T24925] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 452.951716][T24931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8513'. [ 453.102168][T24951] sctp: [Deprecated]: syz.0.8524 (pid 24951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.102168][T24951] Use struct sctp_sack_info instead [ 453.286148][T24975] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 453.399127][ T40] audit: type=1326 audit(1778831723.182:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.8541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fcc code=0x7ffc0000 [ 453.417358][ T40] audit: type=1326 audit(1778831723.192:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.8541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fcc code=0x7ffc0000 [ 453.426762][ T40] audit: type=1326 audit(1778831723.192:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.8541" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f27fcc code=0x7ffc0000 [ 453.437667][ T40] audit: type=1326 audit(1778831723.192:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.8541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fcc code=0x7ffc0000 [ 453.445927][ T40] audit: type=1326 audit(1778831723.192:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.8541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fcc code=0x7ffc0000 [ 453.456720][ T40] audit: type=1326 audit(1778831723.192:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.8541" exe="/syz-executor" sig=0 arch=40000003 syscall=195 compat=1 ip=0xf7f27fcc code=0x7ffc0000 [ 453.581765][T25007] openvswitch: netlink: IP tunnel dst address not specified [ 453.599831][T25009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.746121][T25023] : renamed from vlan0 [ 453.808134][T25022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8558'. [ 454.162315][T25064] netlink: 'syz.3.8578': attribute type 12 has an invalid length. [ 454.165592][T25064] netlink: 'syz.3.8578': attribute type 29 has an invalid length. [ 454.168790][T25064] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8578'. [ 454.355513][T25082] veth1_to_bond: entered allmulticast mode [ 454.359935][T25082] veth1_to_bond: left allmulticast mode [ 454.402869][T25085] bond1: entered promiscuous mode [ 454.747558][ T843] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 454.858300][T25121] pimreg: tun_chr_ioctl cmd 1074025678 [ 454.860219][T25121] pimreg: group set to 768 [ 454.899527][ T843] usb 10-1: config 0 has no interfaces? [ 454.901875][ T843] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 454.905462][ T843] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.917972][ T843] usb 10-1: config 0 descriptor?? [ 454.966957][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 454.973728][T20729] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 455.131686][ T843] usb 10-1: USB disconnect, device number 27 [ 455.272586][T25144] ldm_validate_partition_table(): Disk read failed. [ 455.278981][T25144] Dev nbd3: unable to read RDB block 0 [ 455.281668][T25144] nbd3: unable to read partition table [ 455.287384][T25144] block nbd3: Cannot use ioctl interface on a netlink controlled device. [ 455.293052][T25144] block nbd3: NBD_DISCONNECT [ 455.296807][T25144] block nbd3: Send disconnect failed -32 [ 455.441683][T25168] (syz.0.8617,25168,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 455.523675][T25182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8621'. [ 455.917266][T25217] Invalid ELF header magic: != ELF [ 458.138718][T25306] geneve3: entered promiscuous mode [ 458.360264][T25324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8682'. [ 458.554044][T25350] netlink: 'syz.5.8695': attribute type 8 has an invalid length. [ 458.949346][ T59] kernel read not supported for file /dsp1 (pid: 59 comm: kworker/1:1) [ 459.052742][T25386] netlink: 'syz.3.8711': attribute type 1 has an invalid length. [ 459.058999][T25386] netlink: 'syz.3.8711': attribute type 7 has an invalid length. [ 459.061569][T25386] netlink: 'syz.3.8711': attribute type 8 has an invalid length. [ 459.064145][T25386] netlink: 208 bytes leftover after parsing attributes in process `syz.3.8711'. [ 459.069934][T25386] NCSI netlink: No device for ifindex 119 [ 459.198320][T25399] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8716'. [ 459.484596][T25415] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 459.573532][T25421] ieee802154 phy0 wpan0: encryption failed: -22 [ 459.575950][T25421] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.061702][T25455] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8742'. [ 460.110162][T25461] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8746'. [ 460.114353][T25461] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8746'. [ 460.237956][T25463] Falling back ldisc for ttyS3. [ 460.295976][T25482] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8753'. [ 460.342665][T25488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8755'. [ 460.360957][T25488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8755'. [ 460.447864][T25504] /dev/nullb0: Can't open blockdev [ 461.394632][T25523] input: syz1 as /devices/virtual/input/input43 [ 462.813006][T25568] __nla_validate_parse: 1 callbacks suppressed [ 462.813019][T25568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8790'. [ 462.852042][T25572] blk_print_req_error: 26 callbacks suppressed [ 462.852056][T25572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.857137][T25572] buffer_io_error: 26 callbacks suppressed [ 462.857147][T25572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.861563][T25572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.866224][T25572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.873217][T25572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.878465][T25572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.882236][T25572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.886233][T25572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.890733][T25572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.893623][T25572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.896174][T25572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.900140][T25572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.903198][T25572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.906715][T25572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.911454][T25572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.915493][T25572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.920002][T25572] ldm_validate_partition_table(): Disk read failed. [ 462.923511][T25572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.928034][T25572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.930815][T25572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.933884][T25572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.938279][T25572] Dev nbd3: unable to read RDB block 0 [ 462.940754][T25572] nbd3: unable to read partition table [ 463.651716][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 463.651734][ T40] audit: type=1326 audit(1778831733.442:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.0.8802" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 463.668620][ T40] audit: type=1326 audit(1778831733.442:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.0.8802" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 463.684200][ T40] audit: type=1326 audit(1778831733.452:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.0.8802" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 463.693083][ T40] audit: type=1326 audit(1778831733.452:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.0.8802" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 463.702488][ T40] audit: type=1326 audit(1778831733.452:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.0.8802" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 463.709685][ T40] audit: type=1326 audit(1778831733.452:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.0.8802" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 463.717846][ T40] audit: type=1326 audit(1778831733.452:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.0.8802" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 463.728709][ T40] audit: type=1326 audit(1778831733.452:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.0.8802" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 463.736813][ T40] audit: type=1326 audit(1778831733.462:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.0.8802" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 463.744177][ T40] audit: type=1326 audit(1778831733.462:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.0.8802" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 463.927592][ T35] block nbd4: Possible stuck request ffff888028057000: control (read@0,1024B). Runtime 90 seconds [ 463.931395][ T35] block nbd4: Possible stuck request ffff8880280571c0: control (read@1024,1024B). Runtime 90 seconds [ 463.934688][ T35] block nbd4: Possible stuck request ffff888028057380: control (read@2048,1024B). Runtime 90 seconds [ 463.939064][ T35] block nbd4: Possible stuck request ffff888028057540: control (read@3072,1024B). Runtime 90 seconds [ 464.339688][T25657] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 464.898517][T25657] bond0: (slave bond_slave_1): Releasing backup interface [ 465.389428][T25678] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 465.394623][T25678] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 465.398633][T25678] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 465.678180][T25705] input: syz0 as /devices/virtual/input/input44 [ 465.683275][T25704] program syz.3.8851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 466.008023][T25740] netlink: 'syz.5.8864': attribute type 8 has an invalid length. [ 466.357591][ T10] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 466.508286][ T10] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 466.511874][ T10] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 466.515226][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 466.518187][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 466.521695][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 466.526543][ T10] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 466.530337][ T10] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 466.533270][ T10] usb 10-1: Product: syz [ 466.534696][ T10] usb 10-1: Manufacturer: syz [ 466.536233][T25778] usb usb9: usbfs: process 25778 (syz.3.8878) did not claim interface 37 before use [ 466.543419][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 466.545427][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 466.549420][ T10] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 466.551408][ T10] cdc_wdm 10-1:1.0: Unknown control protocol [ 466.659310][T25787] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8882'. [ 466.744239][T25795] binder: 25794:25795 ioctl c018620c 80000880 returned -1 [ 466.754034][ T10] usb 10-1: USB disconnect, device number 28 [ 467.446996][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 467.447110][T20729] Bluetooth: hci1: command 0x0c1a tx timeout [ 467.457051][T20729] Bluetooth: hci3: command 0x041b tx timeout [ 467.533049][T25834] input: syz0 as /devices/virtual/input/input45 [ 468.494809][T25883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8926'. [ 468.499541][T25883] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8926'. [ 468.670847][T25891] netlink: 'syz.5.8930': attribute type 3 has an invalid length. [ 468.673707][T25891] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8930'. [ 468.808374][T25895] serio: Serial port ttynull [ 468.917834][T25900] support for the xor transformation has been removed. [ 469.944437][T25946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.043337][T25946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.144568][T25946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.248553][T25946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.343446][ T6464] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.361388][ T6464] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.375985][ T6464] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.390049][ T6464] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.705086][T25965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8965'. [ 471.010924][ T40] audit: type=1326 audit(1778831740.802:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25978 comm="syz.2.8972" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f27fcc code=0x0 [ 471.059816][T25985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8975'. [ 471.105274][T25990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8977'. [ 471.479232][ T40] audit: type=1326 audit(1778831741.272:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26010 comm="syz.3.8987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 471.487857][ T40] audit: type=1326 audit(1778831741.272:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26010 comm="syz.3.8987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 471.501988][ T40] audit: type=1326 audit(1778831741.272:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26010 comm="syz.3.8987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 471.509805][ T40] audit: type=1326 audit(1778831741.272:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26010 comm="syz.3.8987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 471.525311][ T40] audit: type=1326 audit(1778831741.272:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26010 comm="syz.3.8987" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 471.539994][ T40] audit: type=1326 audit(1778831741.272:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26010 comm="syz.3.8987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 471.546741][ T40] audit: type=1326 audit(1778831741.272:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26010 comm="syz.3.8987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 471.554902][ T40] audit: type=1326 audit(1778831741.272:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26010 comm="syz.3.8987" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 471.565595][ T40] audit: type=1326 audit(1778831741.272:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26010 comm="syz.3.8987" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 471.687197][T26023] gtp0: entered allmulticast mode [ 472.269081][T26042] (syz.2.9000,26042,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 472.500152][T26057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9006'. [ 472.583839][T26064] loop5: detected capacity change from 0 to 7 [ 472.729662][T26065] Invalid logical block size (-1) [ 472.730501][T26064] Dev loop5: unable to read RDB block 7 [ 472.730524][T26064] loop5: unable to read partition table [ 472.730652][T26064] loop5: partition table beyond EOD, truncated [ 472.730676][T26064] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 473.291816][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/2:0) [ 473.384455][T26081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9018'. [ 473.545550][T26090] loop8: detected capacity change from 0 to 524287999 [ 473.560501][T18938] buffer_io_error: 6 callbacks suppressed [ 473.560519][T18938] Buffer I/O error on dev loop8, logical block 65535998, async page read [ 473.597859][T26094] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9024'. [ 473.703348][T26103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9028'. [ 475.413048][T26154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9051'. [ 475.416390][T26154] block nbd7: Unsupported socket: should be TCP or UNIX. [ 475.574873][T26160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9055'. [ 476.152303][T26195] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9069'. [ 476.257623][T26205] tun0: tun_chr_ioctl cmd 1074025675 [ 476.259386][T26205] tun0: persist disabled [ 478.010134][ T35] block nbd5: Possible stuck request ffff8880280ee000: control (read@0,1024B). Runtime 90 seconds [ 478.014568][ T35] block nbd5: Possible stuck request ffff8880280ee1c0: control (read@1024,1024B). Runtime 90 seconds [ 478.019085][ T35] block nbd5: Possible stuck request ffff8880280ee380: control (read@2048,1024B). Runtime 90 seconds [ 478.023657][ T35] block nbd5: Possible stuck request ffff8880280ee540: control (read@3072,1024B). Runtime 90 seconds [ 479.439721][T26246] netlink: 'syz.2.9090': attribute type 1 has an invalid length. [ 479.442147][T26246] netlink: 'syz.2.9090': attribute type 7 has an invalid length. [ 479.444576][T26246] netlink: 'syz.2.9090': attribute type 8 has an invalid length. [ 479.448008][T26246] netlink: 208 bytes leftover after parsing attributes in process `syz.2.9090'. [ 479.450861][T26246] NCSI netlink: No device for ifindex 119 [ 479.814821][ T40] audit: type=1326 audit(1778831749.602:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26269 comm="syz.2.9103" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fcc code=0x7ffc0000 [ 479.825779][ T40] audit: type=1326 audit(1778831749.602:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26269 comm="syz.2.9103" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fcc code=0x7ffc0000 [ 479.835415][ T40] audit: type=1326 audit(1778831749.612:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26269 comm="syz.2.9103" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f27fcc code=0x7ffc0000 [ 479.844784][ T40] audit: type=1326 audit(1778831749.612:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26269 comm="syz.2.9103" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fcc code=0x7ffc0000 [ 479.854528][ T40] audit: type=1326 audit(1778831749.612:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26269 comm="syz.2.9103" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fcc code=0x7ffc0000 [ 479.861692][ T40] audit: type=1326 audit(1778831749.612:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26269 comm="syz.2.9103" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f27fcc code=0x7ffc0000 [ 479.869813][ T40] audit: type=1326 audit(1778831749.612:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26269 comm="syz.2.9103" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f27fe8 code=0x7ffc0000 [ 479.876388][ T40] audit: type=1326 audit(1778831749.612:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26269 comm="syz.2.9103" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fcc code=0x7ffc0000 [ 479.883089][ T40] audit: type=1326 audit(1778831749.612:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26269 comm="syz.2.9103" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f27fe8 code=0x7ffc0000 [ 479.889867][ T40] audit: type=1326 audit(1778831749.612:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26269 comm="syz.2.9103" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f27fe8 code=0x7ffc0000 [ 479.933540][T26277] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9106'. [ 479.939693][T26277] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9106'. [ 481.196707][T26305] /dev/nullb0: Can't open blockdev [ 481.234929][T26307] netlink: 236 bytes leftover after parsing attributes in process `syz.5.9118'. [ 481.239098][T26307] netlink: 236 bytes leftover after parsing attributes in process `syz.5.9118'. [ 482.135450][T26316] input: syz1 as /devices/virtual/input/input46 [ 483.109882][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 483.115293][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 483.120406][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 483.126575][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 483.132075][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 483.375370][T26363] ip6_vti0 speed is unknown, defaulting to 1000 [ 483.719545][T26363] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.721883][T26363] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.724315][T26363] bridge_slave_0: entered allmulticast mode [ 483.727730][T26363] bridge_slave_0: entered promiscuous mode [ 483.731294][T26363] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.733613][T26363] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.735907][T26363] bridge_slave_1: entered allmulticast mode [ 483.739686][T26363] bridge_slave_1: entered promiscuous mode [ 483.758720][T26363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.763441][T26363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.780434][T26363] team0: Port device team_slave_0 added [ 483.783689][T26363] team0: Port device team_slave_1 added [ 483.799464][T26363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.801931][T26363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.810449][T26363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.814846][T26363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.817898][T26363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.825886][T26363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.851165][T26363] hsr_slave_0: entered promiscuous mode [ 483.853378][T26363] hsr_slave_1: entered promiscuous mode [ 483.855461][T26363] debugfs: 'hsr0' already exists in 'hsr' [ 483.857854][T26363] Cannot create hsr debugfs directory [ 483.978474][T26363] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 484.095311][T26363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.100399][T26363] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 484.173716][T26363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.176709][T26363] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 484.183174][T26363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.187020][T26363] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 484.193733][T26363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.215349][T26363] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.218169][T26363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.220636][T26363] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.223082][T26363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.272862][T26363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.281236][ T1250] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.284743][ T1250] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.297223][T26363] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.305423][ T6464] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.308459][ T6464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.319762][ T6466] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.322778][ T6466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.592331][T26363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.725644][T26363] veth0_vlan: entered promiscuous mode [ 484.731482][T26363] veth1_vlan: entered promiscuous mode [ 484.747289][T26363] veth0_macvtap: entered promiscuous mode [ 484.752630][T26363] veth1_macvtap: entered promiscuous mode [ 484.763248][T26363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.770203][T26363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.776336][ T6464] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.779838][ T1250] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.785455][ T1250] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.788876][ T1250] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.850223][ T1250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.853390][ T1250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.884959][ T6466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.890417][ T6466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.214315][T20729] Bluetooth: hci4: command tx timeout [ 485.640521][ T6464] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.792454][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.806816][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.813866][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.818125][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 485.821670][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 485.904441][ T6464] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.995689][ T6464] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.062927][ T6464] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.103659][T26456] ip6_vti0 speed is unknown, defaulting to 1000 [ 486.297541][ T6464] bridge_slave_1: left promiscuous mode [ 486.299635][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.305731][ T6464] bridge_slave_0: left allmulticast mode [ 486.309606][ T6464] bridge_slave_0: left promiscuous mode [ 486.313981][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.605326][ T6464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.613188][ T6464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.619651][ T6464] bond0 (unregistering): Released all slaves [ 486.630938][ T6464] bond1 (unregistering): Released all slaves [ 486.762114][ T6464] tipc: Left network mode [ 486.948019][ T5453] 8021q: adding VLAN 0 to HW filter on device eth10 [ 486.964289][T26456] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.966633][T26456] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.970738][T26456] bridge_slave_0: entered allmulticast mode [ 486.973589][T26456] bridge_slave_0: entered promiscuous mode [ 486.987026][T26456] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.989345][T26456] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.991720][T26456] bridge_slave_1: entered allmulticast mode [ 486.994384][T26456] bridge_slave_1: entered promiscuous mode [ 487.029537][T26456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.042838][T26456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.092339][T26456] team0: Port device team_slave_0 added [ 487.096924][T26456] team0: Port device team_slave_1 added [ 487.148437][ T6464] hsr_slave_0: left promiscuous mode [ 487.150611][ T6464] hsr_slave_1: left promiscuous mode [ 487.152640][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.154935][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.163401][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.166263][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.174180][ T6464] veth1_macvtap: left promiscuous mode [ 487.177732][ T6464] veth0_macvtap: left promiscuous mode [ 487.179623][ T6464] veth0_vlan: left promiscuous mode [ 487.297370][T20729] Bluetooth: hci4: command tx timeout [ 487.403347][ T6464] team0 (unregistering): Port device team_slave_1 removed [ 487.411032][ T6464] team0 (unregistering): Port device team_slave_0 removed [ 487.501322][T26456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.503630][T26456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.511602][T26456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.517415][ T5453] 8021q: adding VLAN 0 to HW filter on device eth11 [ 487.520195][T26456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.522281][T26456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.530917][T26456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.555221][T26456] hsr_slave_0: entered promiscuous mode [ 487.557733][T26456] hsr_slave_1: entered promiscuous mode [ 487.559911][T26456] debugfs: 'hsr0' already exists in 'hsr' [ 487.561680][T26456] Cannot create hsr debugfs directory [ 487.751841][T26456] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 487.761744][T26456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.764775][T26456] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 487.771274][T26456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.778436][T26456] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 487.784240][T26456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.790808][T26456] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 487.794911][T26456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.800508][ T5453] 8021q: adding VLAN 0 to HW filter on device eth12 [ 487.922362][T26456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.927475][T20729] Bluetooth: hci0: command tx timeout [ 487.946511][T26456] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.954842][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.957988][ T6524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.967742][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.970809][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.040289][ T5453] 8021q: adding VLAN 0 to HW filter on device eth13 [ 488.333363][T26456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.494371][T26456] veth0_vlan: entered promiscuous mode [ 488.500566][T26456] veth1_vlan: entered promiscuous mode [ 488.522688][T26456] veth0_macvtap: entered promiscuous mode [ 488.529548][T26456] veth1_macvtap: entered promiscuous mode [ 488.544110][T26456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.554799][T26456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.563027][ T1250] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.573758][ T1250] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.581472][ T1250] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.590401][ T1250] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.659227][ T6466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.664379][ T6466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.693474][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.701754][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.937978][T26580] misc userio: Can't change port type on an already running userio instance [ 489.147419][T26596] kvm: apic: phys broadcast and lowest prio [ 489.284845][T26606] netlink: 'syz.3.9191': attribute type 11 has an invalid length. [ 489.289741][T26606] netlink: 'syz.3.9191': attribute type 4 has an invalid length. [ 489.293020][T26606] netlink: 'syz.3.9191': attribute type 6 has an invalid length. [ 489.296173][T26606] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.9191'. [ 489.367455][T20729] Bluetooth: hci4: command tx timeout [ 489.459963][T26620] netlink: 284 bytes leftover after parsing attributes in process `syz.3.9199'. [ 490.007126][T20729] Bluetooth: hci0: command tx timeout [ 490.184875][T26669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9221'. [ 490.393322][ T24] kernel write not supported for file /uinput (pid: 24 comm: kworker/2:0) [ 490.959034][T26723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9247'. [ 491.450406][T20729] Bluetooth: hci4: command tx timeout [ 491.625747][T26757] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9262'. [ 492.055732][T26781] tun0: tun_chr_ioctl cmd 1074025675 [ 492.060586][T26781] tun0: persist disabled [ 492.098325][T20729] Bluetooth: hci0: command tx timeout [ 492.874147][T26821] tun0: tun_chr_ioctl cmd 1074025675 [ 492.875912][T26821] tun0: persist disabled [ 493.121919][T26830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.185211][T26834] ip6_vti0 speed is unknown, defaulting to 1000 [ 493.313383][T26841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9301'. [ 493.316404][T26841] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9301'. [ 493.468120][ T843] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 493.482697][T26855] gtp0: entered allmulticast mode [ 493.618753][ T843] usb 10-1: config 0 has no interfaces? [ 493.622002][ T843] usb 10-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 493.627801][ T843] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.634147][ T843] usb 10-1: config 0 descriptor?? [ 493.846418][ T843] usb 10-1: USB disconnect, device number 29 [ 494.010916][ T35] block nbd4: Possible stuck request ffff888028057000: control (read@0,1024B). Runtime 120 seconds [ 494.014259][ T35] block nbd4: Possible stuck request ffff8880280571c0: control (read@1024,1024B). Runtime 120 seconds [ 494.018444][ T35] block nbd4: Possible stuck request ffff888028057380: control (read@2048,1024B). Runtime 120 seconds [ 494.023086][ T35] block nbd4: Possible stuck request ffff888028057540: control (read@3072,1024B). Runtime 120 seconds [ 494.167085][T20729] Bluetooth: hci0: command tx timeout [ 494.363109][ T843] IPVS: starting estimator thread 0... [ 494.460846][T26873] IPVS: using max 43 ests per chain, 103200 per kthread [ 494.477784][T26877] serio: Serial port ttynull [ 494.607960][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 494.944632][T26411] IPVS: starting estimator thread 0... [ 495.037242][T26910] IPVS: using max 29 ests per chain, 69600 per kthread [ 496.808080][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 498.225939][ T5151] udevd[5151]: worker [20510] /devices/virtual/block/nbd4 is taking a long time [ 498.228959][ T5151] udevd[5151]: worker [19415] /devices/virtual/block/nbd5 is taking a long time [ 505.079749][T26981] batman_adv: batadv0: Adding interface: gretap1 [ 505.081769][T26981] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.108471][T26981] batman_adv: batadv0: Interface activated: gretap1 [ 505.300604][T26986] sctp: [Deprecated]: syz.3.9337 (pid 26986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.300604][T26986] Use struct sctp_sack_info instead [ 505.318377][T26986] sctp: [Deprecated]: syz.3.9337 (pid 26986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.318377][T26986] Use struct sctp_sack_info instead [ 505.456141][T26998] Bluetooth: MGMT ver 1.23 [ 505.562662][T27005] gfs2: path_lookup on  returned error -2 [ 505.984639][T27031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9357'. [ 506.099875][T27039] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9361'. [ 506.168415][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.170940][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 506.170955][ T40] audit: type=1326 audit(1778831775.962:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27040 comm="syz.3.9362" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdefcc code=0x0 [ 506.666732][T27067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9374'. [ 506.752526][T27071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.756168][T27071] bond1: entered promiscuous mode [ 506.758634][T27071] bond0: (slave bond1): Enslaving as an active interface with an up link [ 506.964720][T27085] can0: slcan on ttyS3. [ 507.058901][T27092] tmpfs: Cannot change global quota limit on remount [ 507.068217][T27095] input: syz1 as /devices/virtual/input/input48 [ 507.098768][T27085] can0 (unregistered): slcan off ttyS3. [ 507.150273][T27101] binder: 27100:27101 ioctl c0306201 80000540 returned -14 [ 507.383694][T27125] ip6_vti0 speed is unknown, defaulting to 1000 [ 507.407291][ T5891] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 507.568535][ T5891] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.572082][ T5891] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.575834][ T5891] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 507.581969][ T5891] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 507.585636][ T5891] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.593896][ T5891] usb 12-1: config 0 descriptor?? [ 507.733045][T27145] vlan2: entered allmulticast mode [ 507.737439][T27145] gretap0: entered allmulticast mode [ 508.022430][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 508.028821][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 508.031337][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 508.033718][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 508.036132][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 508.038590][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 508.040900][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 508.043264][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 508.045661][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 508.048598][ T5891] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 508.076003][ T5891] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 508.107567][ T35] block nbd5: Possible stuck request ffff8880280ee000: control (read@0,1024B). Runtime 120 seconds [ 508.111490][ T35] block nbd5: Possible stuck request ffff8880280ee1c0: control (read@1024,1024B). Runtime 120 seconds [ 508.115691][ T35] block nbd5: Possible stuck request ffff8880280ee380: control (read@2048,1024B). Runtime 120 seconds [ 508.120131][ T35] block nbd5: Possible stuck request ffff8880280ee540: control (read@3072,1024B). Runtime 120 seconds [ 508.137395][ T5827] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 508.282350][ T960] usb 12-1: USB disconnect, device number 2 [ 508.289224][ T5827] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 508.293003][ T5827] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 508.296429][ T5827] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 508.301923][ T5827] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 508.307990][ T5827] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 508.311819][ T5827] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.319426][ T5827] usb 11-1: config 0 descriptor?? [ 508.479491][T27178] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 508.760206][ T5827] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 508.988352][T27213] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 508.994187][T27213] overlayfs: workdir and upperdir must be separate subtrees [ 508.999182][ T1038] usb 11-1: USB disconnect, device number 2 [ 509.298283][T27244] syzkaller1: entered promiscuous mode [ 509.300087][T27244] syzkaller1: entered allmulticast mode [ 509.606616][T27262] kernel profiling enabled (shift: 9) [ 509.905238][T27279] overlayfs: missing 'workdir' [ 510.487073][ T62] Bluetooth: hci0: command 0x0401 tx timeout [ 510.491240][T20729] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 510.577023][ T5827] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 510.727393][ T5827] usb 11-1: Using ep0 maxpacket: 8 [ 510.732586][ T5827] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.738561][ T5827] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.741586][ T5827] usb 11-1: config 0 interface 0 has no altsetting 0 [ 510.743590][ T5827] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 510.746338][ T5827] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.750897][ T5827] usb 11-1: config 0 descriptor?? [ 511.163780][ T5827] mcp2221 0003:04D8:00DD.0012: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 511.649348][T26411] usb 11-1: USB disconnect, device number 3 [ 512.526003][T20729] block nbd7: Receive control failed (result -32) [ 512.529016][ T62] block nbd7: Receive control failed (result -32) [ 512.567619][T20729] Bluetooth: hci0: command 0x0401 tx timeout [ 512.768543][T27381] batadv_slave_0: entered promiscuous mode [ 512.830170][ T5849] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 512.971071][T27380] batadv_slave_0: left promiscuous mode [ 512.977674][ T5849] usb 11-1: Using ep0 maxpacket: 8 [ 512.981513][ T5849] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 512.985694][ T5849] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 512.990797][ T5849] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 512.998920][ T5849] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.011542][ T5849] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 513.014739][ T5849] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.049606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.052919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.055544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.069786][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.224932][ T5849] usb 11-1: GET_CAPABILITIES returned 0 [ 513.227946][ T5849] usbtmc 11-1:16.0: can't read capabilities [ 513.342458][T27417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9524'. [ 513.429641][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.433514][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.437346][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.441076][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.444780][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.448477][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.454004][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.457674][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.460546][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.463344][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.466488][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.472386][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.475317][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.478346][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.481187][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.483975][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 513.494548][T26411] usb 11-1: USB disconnect, device number 4 [ 513.617451][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.316753][T27474] netlink: 'syz.3.9551': attribute type 12 has an invalid length. [ 514.328955][T27474] netlink: 'syz.3.9551': attribute type 29 has an invalid length. [ 514.335026][T27474] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9551'. [ 514.339136][T27474] netlink: 'syz.3.9551': attribute type 1 has an invalid length. [ 514.341525][T27474] netlink: 'syz.3.9551': attribute type 2 has an invalid length. [ 514.344436][T27474] netlink: 15 bytes leftover after parsing attributes in process `syz.3.9551'. [ 514.437232][ T10] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 514.459231][T27482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9556'. [ 514.470623][ T6464] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.474343][ T6464] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.480347][ T6464] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.481710][T27482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9556'. [ 514.483443][ T6464] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.599080][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 514.604041][ T10] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.611078][ T10] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.615066][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 514.618683][ T10] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 514.622278][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.634474][ T10] usb 10-1: config 0 descriptor?? [ 514.665966][ T960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.755882][T27504] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.9567'. [ 514.843319][T27510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.850074][T27510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.853088][T27510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.860571][T27510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.864200][T27509] [ 514.865055][T27509] ====================================================== [ 514.867223][T27509] WARNING: possible circular locking dependency detected [ 514.869671][T27509] syzkaller #0 Tainted: G L [ 514.871831][T27509] ------------------------------------------------------ [ 514.874007][T27509] syz.7.9570/27509 is trying to acquire lock: [ 514.875938][T27509] ffffffff8e9b0b40 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 514.878949][T27509] [ 514.878949][T27509] but task is already holding lock: [ 514.881118][T27509] ffff888024c6e0e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 514.883823][T27509] [ 514.883823][T27509] which lock already depends on the new lock. [ 514.883823][T27509] [ 514.887764][T27509] [ 514.887764][T27509] the existing dependency chain (in reverse order) is: [ 514.891337][T27509] [ 514.891337][T27509] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 514.894489][T27509] lock_sock_nested+0x41/0xf0 [ 514.896695][T27509] inet_shutdown+0x67/0x410 [ 514.898825][T27509] nbd_mark_nsock_dead+0xae/0x5c0 [ 514.901098][T27509] sock_shutdown+0x16b/0x200 [ 514.902926][T27509] nbd_config_put+0x1eb/0x750 [ 514.905048][T27509] nbd_genl_connect+0xaf8/0x1a40 [ 514.906785][T27509] genl_family_rcv_msg_doit+0x214/0x300 [ 514.908791][T27509] genl_rcv_msg+0x560/0x800 [ 514.910686][T27509] netlink_rcv_skb+0x159/0x420 [ 514.912348][T27509] genl_rcv+0x28/0x40 [ 514.913699][T27509] netlink_unicast+0x585/0x850 [ 514.915342][T27509] netlink_sendmsg+0x8b0/0xda0 [ 514.917130][T27509] ____sys_sendmsg+0x9e1/0xb70 [ 514.919051][T27509] ___sys_sendmsg+0x190/0x1e0 [ 514.921094][T27509] __sys_sendmsg+0x170/0x220 [ 514.923170][T27509] __do_fast_syscall_32+0xe7/0x950 [ 514.925540][T27509] do_fast_syscall_32+0x32/0x70 [ 514.927662][T27509] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 514.930502][T27509] [ 514.930502][T27509] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 514.932932][T27509] __mutex_lock+0x1a4/0x1b10 [ 514.934489][T27509] nbd_queue_rq+0x428/0x1080 [ 514.936147][T27509] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 514.938211][T27509] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 514.940930][T27509] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 514.943018][T27509] blk_mq_run_hw_queue+0x23c/0x670 [ 514.944651][T27509] blk_mq_dispatch_list+0x51d/0x1360 [ 514.946561][T27509] blk_mq_flush_plug_list+0x130/0x600 [ 514.948470][T27509] __blk_flush_plug+0x2c4/0x4b0 [ 514.950089][T27509] __submit_bio+0x584/0x6c0 [ 514.951609][T27509] submit_bio_noacct_nocheck+0x543/0xbf0 [ 514.953471][T27509] submit_bio_noacct+0xd18/0x2000 [ 514.955143][T27509] submit_bh_wbc+0x681/0x890 [ 514.956739][T27509] block_read_full_folio+0x4c8/0x8e0 [ 514.958602][T27509] filemap_read_folio+0xfc/0x3b0 [ 514.960259][T27509] do_read_cache_folio+0x2d7/0x6b0 [ 514.961944][T27509] read_part_sector+0xd1/0x370 [ 514.963543][T27509] adfspart_check_ICS+0x91/0x7d0 [ 514.965183][T27509] bdev_disk_changed+0x7a3/0x1250 [ 514.966962][T27509] blkdev_get_whole+0x187/0x290 [ 514.968704][T27509] bdev_open+0x2c7/0xe40 [ 514.970594][T27509] blkdev_open+0x34e/0x4f0 [ 514.972587][T27509] do_dentry_open+0x6d8/0x1660 [ 514.974720][T27509] vfs_open+0x82/0x3f0 [ 514.976574][T27509] path_openat+0x208c/0x31a0 [ 514.978691][T27509] do_file_open+0x20e/0x430 [ 514.980731][T27509] do_sys_openat2+0x10d/0x1e0 [ 514.982737][T27509] __x64_sys_openat+0x12d/0x210 [ 514.984738][T27509] do_syscall_64+0x10b/0xf80 [ 514.986837][T27509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.989340][T27509] [ 514.989340][T27509] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 514.992136][T27509] __mutex_lock+0x1a4/0x1b10 [ 514.994175][T27509] nbd_queue_rq+0xba/0x1080 [ 514.996300][T27509] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 514.998747][T27509] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 515.001503][T27509] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 515.004093][T27509] blk_mq_run_hw_queue+0x23c/0x670 [ 515.005885][T27509] blk_mq_dispatch_list+0x51d/0x1360 [ 515.008181][T27509] blk_mq_flush_plug_list+0x130/0x600 [ 515.009964][T27509] __blk_flush_plug+0x2c4/0x4b0 [ 515.011576][T27509] __submit_bio+0x584/0x6c0 [ 515.013130][T27509] submit_bio_noacct_nocheck+0x543/0xbf0 [ 515.015062][T27509] submit_bio_noacct+0xd18/0x2000 [ 515.016773][T27509] submit_bh_wbc+0x681/0x890 [ 515.018342][T27509] block_read_full_folio+0x4c8/0x8e0 [ 515.020117][T27509] filemap_read_folio+0xfc/0x3b0 [ 515.021803][T27509] do_read_cache_folio+0x2d7/0x6b0 [ 515.023496][T27509] read_part_sector+0xd1/0x370 [ 515.025105][T27509] adfspart_check_ICS+0x91/0x7d0 [ 515.027127][T27509] bdev_disk_changed+0x7a3/0x1250 [ 515.028856][T27509] blkdev_get_whole+0x187/0x290 [ 515.030497][T27509] bdev_open+0x2c7/0xe40 [ 515.031945][T27509] blkdev_open+0x34e/0x4f0 [ 515.033502][T27509] do_dentry_open+0x6d8/0x1660 [ 515.035485][T27509] vfs_open+0x82/0x3f0 [ 515.036998][T27509] path_openat+0x208c/0x31a0 [ 515.038605][T27509] do_file_open+0x20e/0x430 [ 515.040152][T27509] do_sys_openat2+0x10d/0x1e0 [ 515.041735][T27509] __x64_sys_openat+0x12d/0x210 [ 515.043414][T27509] do_syscall_64+0x10b/0xf80 [ 515.045044][T27509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.047446][T27509] [ 515.047446][T27509] -> #3 (set->srcu){.+.+}-{0:0}: [ 515.049777][T27509] __synchronize_srcu+0xa2/0x300 [ 515.051564][T27509] blk_mq_quiesce_queue+0x149/0x1c0 [ 515.053627][T27509] elevator_switch+0x17b/0x7e0 [ 515.055333][T27509] elevator_change+0x352/0x530 [ 515.057044][T27509] elevator_set_default+0x29e/0x360 [ 515.059069][T27509] blk_register_queue+0x48e/0x630 [ 515.061335][T27509] __add_disk+0x73f/0xe40 [ 515.063393][T27509] add_disk_fwnode+0x118/0x5c0 [ 515.065579][T27509] nbd_dev_add+0x77a/0xb10 [ 515.067226][T27509] nbd_init+0x291/0x2b0 [ 515.068713][T27509] do_one_initcall+0x121/0x750 [ 515.070340][T27509] kernel_init_freeable+0x6ea/0x7b0 [ 515.072070][T27509] kernel_init+0x1f/0x1e0 [ 515.073564][T27509] ret_from_fork+0x72b/0xd50 [ 515.075138][T27509] ret_from_fork_asm+0x1a/0x30 [ 515.077096][T27509] [ 515.077096][T27509] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 515.080227][T27509] __mutex_lock+0x1a4/0x1b10 [ 515.082383][T27509] elevator_change+0x1bc/0x530 [ 515.084473][T27509] elevator_set_none+0x92/0xf0 [ 515.086637][T27509] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 515.089243][T27509] nbd_start_device+0x1a6/0xbd0 [ 515.091429][T27509] nbd_genl_connect+0xff2/0x1a40 [ 515.093605][T27509] genl_family_rcv_msg_doit+0x214/0x300 [ 515.096058][T27509] genl_rcv_msg+0x560/0x800 [ 515.098180][T27509] netlink_rcv_skb+0x159/0x420 [ 515.100316][T27509] genl_rcv+0x28/0x40 [ 515.102176][T27509] netlink_unicast+0x585/0x850 [ 515.104357][T27509] netlink_sendmsg+0x8b0/0xda0 [ 515.106554][T27509] ____sys_sendmsg+0x9e1/0xb70 [ 515.108650][T27509] ___sys_sendmsg+0x190/0x1e0 [ 515.110877][T27509] __sys_sendmsg+0x170/0x220 [ 515.113000][T27509] __do_fast_syscall_32+0xe7/0x950 [ 515.115321][T27509] do_fast_syscall_32+0x32/0x70 [ 515.117595][T27509] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 515.120489][T27509] [ 515.120489][T27509] -> #1 (&q->q_usage_counter(io)#56){++++}-{0:0}: [ 515.124062][T27509] blk_alloc_queue+0x610/0x790 [ 515.126252][T27509] blk_mq_alloc_queue+0x174/0x290 [ 515.128567][T27509] __blk_mq_alloc_disk+0x29/0x120 [ 515.130756][T27509] nbd_dev_add+0x492/0xb10 [ 515.132814][T27509] nbd_init+0x291/0x2b0 [ 515.134770][T27509] do_one_initcall+0x121/0x750 [ 515.136918][T27509] kernel_init_freeable+0x6ea/0x7b0 [ 515.139307][T27509] kernel_init+0x1f/0x1e0 [ 515.141327][T27509] ret_from_fork+0x72b/0xd50 [ 515.143485][T27509] ret_from_fork_asm+0x1a/0x30 [ 515.145705][T27509] [ 515.145705][T27509] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 515.148728][T27509] __lock_acquire+0x14b8/0x2630 [ 515.150815][T27509] lock_acquire+0x1b1/0x370 [ 515.152830][T27509] fs_reclaim_acquire+0xc4/0x100 [ 515.155015][T27509] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 515.157451][T27509] __alloc_skb+0x140/0x710 [ 515.159524][T27509] tcp_send_active_reset+0x8b/0xa50 [ 515.161710][T27509] __tcp_close+0x41e/0x1110 [ 515.163545][T27509] tcp_close+0x28/0x110 [ 515.165307][T27509] inet_release+0xed/0x200 [ 515.167283][T27509] inet6_release+0x4f/0x70 [ 515.169309][T27509] __sock_release+0xb3/0x260 [ 515.171347][T27509] sock_close+0x1c/0x30 [ 515.173290][T27509] __fput+0x3ff/0xb50 [ 515.175160][T27509] task_work_run+0x150/0x240 [ 515.177205][T27509] exit_to_user_mode_loop+0x107/0x4f0 [ 515.179478][T27509] __do_fast_syscall_32+0x608/0x950 [ 515.181801][T27509] do_fast_syscall_32+0x32/0x70 [ 515.183964][T27509] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 515.186774][T27509] [ 515.186774][T27509] other info that might help us debug this: [ 515.186774][T27509] [ 515.190912][T27509] Chain exists of: [ 515.190912][T27509] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 515.190912][T27509] [ 515.195929][T27509] Possible unsafe locking scenario: [ 515.195929][T27509] [ 515.198961][T27509] CPU0 CPU1 [ 515.201136][T27509] ---- ---- [ 515.202947][T27509] lock(sk_lock-AF_INET6); [ 515.204413][T27509] lock(&nsock->tx_lock); [ 515.206889][T27509] lock(sk_lock-AF_INET6); [ 515.209089][T27509] lock(fs_reclaim); [ 515.210706][T27509] [ 515.210706][T27509] *** DEADLOCK *** [ 515.210706][T27509] [ 515.213996][T27509] 2 locks held by syz.7.9570/27509: [ 515.216181][T27509] #0: ffff88802860c440 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 515.220426][T27509] #1: ffff888024c6e0e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 515.223264][T27509] [ 515.223264][T27509] stack backtrace: [ 515.225000][T27509] CPU: 0 UID: 0 PID: 27509 Comm: syz.7.9570 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.225016][T27509] Tainted: [L]=SOFTLOCKUP [ 515.225020][T27509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 515.225048][T27509] Call Trace: [ 515.225066][T27509] [ 515.225071][T27509] dump_stack_lvl+0x100/0x190 [ 515.225087][T27509] print_circular_bug.cold+0x178/0x1c7 [ 515.225106][T27509] check_noncircular+0x146/0x160 [ 515.225123][T27509] ? stack_depot_save_flags+0x27/0x9d0 [ 515.225178][T27509] __lock_acquire+0x14b8/0x2630 [ 515.225191][T27509] lock_acquire+0x1b1/0x370 [ 515.225201][T27509] ? kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 515.225214][T27509] ? lock_acquire+0x1b1/0x370 [ 515.225224][T27509] fs_reclaim_acquire+0xc4/0x100 [ 515.225238][T27509] ? kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 515.225249][T27509] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 515.225260][T27509] ? __alloc_skb+0x140/0x710 [ 515.225273][T27509] __alloc_skb+0x140/0x710 [ 515.225283][T27509] ? __alloc_skb+0x5b7/0x710 [ 515.225294][T27509] ? __pfx___alloc_skb+0x10/0x10 [ 515.225306][T27509] ? skb_attempt_defer_free+0x310/0x830 [ 515.225324][T27509] tcp_send_active_reset+0x8b/0xa50 [ 515.225341][T27509] __tcp_close+0x41e/0x1110 [ 515.225355][T27509] tcp_close+0x28/0x110 [ 515.225367][T27509] inet_release+0xed/0x200 [ 515.225378][T27509] inet6_release+0x4f/0x70 [ 515.225392][T27509] __sock_release+0xb3/0x260 [ 515.225406][T27509] ? __pfx_sock_close+0x10/0x10 [ 515.225418][T27509] sock_close+0x1c/0x30 [ 515.225429][T27509] __fput+0x3ff/0xb50 [ 515.225446][T27509] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.225462][T27509] task_work_run+0x150/0x240 [ 515.225474][T27509] ? __pfx_task_work_run+0x10/0x10 [ 515.225485][T27509] ? rcu_is_watching+0x12/0xc0 [ 515.225499][T27509] exit_to_user_mode_loop+0x107/0x4f0 [ 515.225511][T27509] ? rcu_is_watching+0x12/0xc0 [ 515.225525][T27509] __do_fast_syscall_32+0x608/0x950 [ 515.225544][T27509] do_fast_syscall_32+0x32/0x70 [ 515.225554][T27509] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 515.225568][T27509] RIP: 0023:0xf7f06fcc [ 515.225577][T27509] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 515.225588][T27509] RSP: 002b:00000000ffc7437c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 515.225598][T27509] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 515.225604][T27509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.225610][T27509] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 515.225616][T27509] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 515.225624][T27509] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 515.225638][T27509] [ 515.338648][ T10] hid_parser_main: 25 callbacks suppressed [ 515.338666][ T10] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 515.344051][ T10] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 515.347066][ T10] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 515.350001][ T10] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 515.352909][ T10] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 515.356177][ T10] mcp2221 0003:04D8:00DD.0013: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 515.542052][ T960] usb 10-1: USB disconnect, device number 30 [ 518.337584][ T5849] net_ratelimit: 7 callbacks suppressed [ 518.337603][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.407727][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.807512][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.977246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.847584][ T960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.887656][ T960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.897543][T20821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.447143][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.927146][ T960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.967045][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.017198][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.090116][ T35] block nbd4: Possible stuck request ffff888028057000: control (read@0,1024B). Runtime 150 seconds [ 524.094604][ T35] block nbd4: Possible stuck request ffff8880280571c0: control (read@1024,1024B). Runtime 150 seconds [ 524.099721][ T35] block nbd4: Possible stuck request ffff888028057380: control (read@2048,1024B). Runtime 150 seconds [ 524.104207][ T35] block nbd4: Possible stuck request ffff888028057540: control (read@3072,1024B). Runtime 150 seconds [ 524.487475][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog