last executing test programs: 1m21.330271153s ago: executing program 0 (id=1044): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000000c0)='uid=1\x00nk]e\t\xee\x00\xb5\x91[!\xb1\xe0\xaf\xff\x01T_zf\xd9\xd8\xca\x13\x05\xdb\xddA\xcb\xa1\x03\x03\xd0\xf9ds\x80@\xef\xce<\x8b\xd8|\x85U\xa7\xb3;^U*\x16\xa8\xb4S L\xd3\x8b \x14\x8a\xf6\xf9\x95\x8b*qy4J\xf4\\\xe2\xa5\x04U\xfd\x02G\xa9\x8fD[\xe5\xafE@\xa2\x9e3\x1a`\xa9\xe4\xae\xd49k\xc2\xfc\xadL\xe6EIe\xd4\xea\xed\xa3\b~\xce\x8a\xec\xb3\x89N\x8e=\x12\xc2\"\xf8&C\x93\xd4\x99\xf0') r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000cc0)={0x2020}, 0x2020) 1m21.253152383s ago: executing program 0 (id=1046): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/76, 0x4c) 1m21.204021587s ago: executing program 0 (id=1048): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r1, r0, 0x4, r0}, 0x10) 1m21.131968681s ago: executing program 0 (id=1049): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m21.131403325s ago: executing program 0 (id=1051): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0}}], 0x1, 0x4000040) 1m20.801716285s ago: executing program 0 (id=1057): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x0, 0x2400, 0x4e21, 0x5, 0x2, 0x20, 0x20, 0x62}, {0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x3}, {0x7e3}, 0x0, 0x20000, 0x0, 0x0, 0x2, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x40002}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 1m20.716666776s ago: executing program 32 (id=1057): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x0, 0x2400, 0x4e21, 0x5, 0x2, 0x20, 0x20, 0x62}, {0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x3}, {0x7e3}, 0x0, 0x20000, 0x0, 0x0, 0x2, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x40002}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 1.843201191s ago: executing program 2 (id=2888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x140, 0x0, 0x140}]}) 1.742884363s ago: executing program 2 (id=2889): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x2020) 1.742669513s ago: executing program 2 (id=2890): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x41cc, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0xffffffffffffffd1, 0x40012052, 0x0, 0x0) 1.663248876s ago: executing program 2 (id=2892): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x141c42, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/39, 0x27}], 0x1) 1.582537422s ago: executing program 2 (id=2894): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000280)={0x400, r0, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000180)=0x6) 1.580888108s ago: executing program 2 (id=2896): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/145, 0x91}], 0x1) syz_usb_disconnect(r0) 670.788382ms ago: executing program 4 (id=2906): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @empty, 0x1}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000000440)) 666.574578ms ago: executing program 4 (id=2907): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) unshare(0x20000600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0xc0000}], 0x1c, 0x0, 0x0, 0x0) 571.772432ms ago: executing program 4 (id=2908): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 510.479746ms ago: executing program 4 (id=2911): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="fa82", 0xfdef}], 0x1}, 0x20000000) 506.133361ms ago: executing program 4 (id=2912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, 0x0}) 437.936777ms ago: executing program 1 (id=2913): unshare(0x62040200) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x7, 0x3, 0x101, 0x80, 0x5]}, &(0x7f0000000000)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0xc, 0x0, 0xb, 0x4, 0x35]}, &(0x7f0000000040)=0x54) 363.818913ms ago: executing program 4 (id=2914): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) fsync(r0) 283.967167ms ago: executing program 1 (id=2916): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 220.065712ms ago: executing program 1 (id=2917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'veth0_vlan\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bond_slave_1\x00', 0x200}) 219.736762ms ago: executing program 3 (id=2918): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r1, 0x1}, &(0x7f0000000940)=0x8) 218.616996ms ago: executing program 3 (id=2919): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) r2 = dup3(r0, r1, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, 0x0) 123.747202ms ago: executing program 3 (id=2920): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'dummy0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, 0x28}}, 0x0) 123.419682ms ago: executing program 3 (id=2921): mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r0]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=ANY=[], 0x0, 0x0) 112.020968ms ago: executing program 1 (id=2922): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0xeb4c, 0x40) 107.8314ms ago: executing program 3 (id=2923): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 53.641601ms ago: executing program 1 (id=2924): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x2020) 1.177097ms ago: executing program 1 (id=2925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000072, 0x0, 0x100067c5}]}) 0s ago: executing program 3 (id=2926): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x4}, 0x1c) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) kernel console output (not intermixed with test programs): hsr_slave_0: entered promiscuous mode [ 66.616507][ T5965] hsr_slave_1: entered promiscuous mode [ 66.619592][ T5965] debugfs: 'hsr0' already exists in 'hsr' [ 66.622173][ T5965] Cannot create hsr debugfs directory [ 66.653578][ T5971] hsr_slave_0: entered promiscuous mode [ 66.656983][ T5971] hsr_slave_1: entered promiscuous mode [ 66.659930][ T5971] debugfs: 'hsr0' already exists in 'hsr' [ 66.662849][ T5971] Cannot create hsr debugfs directory [ 67.029028][ T5966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.039361][ T5966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.042555][ T5966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.052945][ T5966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.057044][ T5966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.063814][ T5966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.076031][ T5966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.082805][ T5966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.111586][ T5979] Bluetooth: hci1: command tx timeout [ 67.111692][ T5967] Bluetooth: hci3: command tx timeout [ 67.112357][ T5978] Bluetooth: hci0: command tx timeout [ 67.127692][ T5976] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.135593][ T5976] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.138688][ T5976] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.146062][ T5976] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.154490][ T5976] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.160214][ T5976] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.164638][ T5976] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.171355][ T5976] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.181243][ T5967] Bluetooth: hci2: command tx timeout [ 67.267021][ T5971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.274867][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.278854][ T5971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.286229][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.292682][ T5971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.301713][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.305575][ T5971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.312139][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.382779][ T5965] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.387415][ T5965] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.393762][ T5965] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.397937][ T5965] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.402610][ T5965] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.407245][ T5965] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.410344][ T5965] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.415202][ T5965] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.449735][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.473473][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.499897][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.512491][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.525313][ T219] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.527994][ T219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.545839][ T219] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.549433][ T219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.555600][ T219] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.559123][ T219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.566475][ T219] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.569527][ T219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.650165][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.685621][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.709830][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.721390][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.724115][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.735895][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.743968][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.747289][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.760634][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.763621][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.769418][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.772972][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.883083][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.887809][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.952888][ T5976] veth0_vlan: entered promiscuous mode [ 67.957394][ T5966] veth0_vlan: entered promiscuous mode [ 67.966696][ T5976] veth1_vlan: entered promiscuous mode [ 67.971940][ T5966] veth1_vlan: entered promiscuous mode [ 68.009634][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.022068][ T5966] veth0_macvtap: entered promiscuous mode [ 68.026805][ T5966] veth1_macvtap: entered promiscuous mode [ 68.036644][ T5976] veth0_macvtap: entered promiscuous mode [ 68.044171][ T5976] veth1_macvtap: entered promiscuous mode [ 68.055482][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.080032][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.089284][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.096890][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.111384][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.115301][ T219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.129102][ T219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.133063][ T219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.146760][ T219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.149902][ T219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.154938][ T5965] veth0_vlan: entered promiscuous mode [ 68.160680][ T219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.164705][ T219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.172489][ T219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.197325][ T5965] veth1_vlan: entered promiscuous mode [ 68.261923][ T5965] veth0_macvtap: entered promiscuous mode [ 68.268853][ T5971] veth0_vlan: entered promiscuous mode [ 68.287930][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.291953][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.299683][ T5965] veth1_macvtap: entered promiscuous mode [ 68.313528][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.316488][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.332802][ T5971] veth1_vlan: entered promiscuous mode [ 68.342819][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.345650][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.356341][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.372583][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.376800][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.379547][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.388058][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.397882][ T219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.402619][ T219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.410950][ T219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.430302][ T5976] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.440590][ T5971] veth0_macvtap: entered promiscuous mode [ 68.466371][ T5971] veth1_macvtap: entered promiscuous mode [ 68.531007][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.540513][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.545783][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.557048][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.574574][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.578302][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.601468][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.608238][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.608680][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.612354][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.663127][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.668858][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.716526][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.719960][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.933668][ T6076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9'. [ 68.977071][ T6081] macvlan0: entered promiscuous mode [ 68.988950][ T6081] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 68.994274][ T6081] netlink: 'syz.1.11': attribute type 2 has an invalid length. [ 69.003468][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.009073][ T6076] bridge_slave_1: left allmulticast mode [ 69.013179][ T6076] bridge_slave_1: left promiscuous mode [ 69.015511][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.182682][ T5967] Bluetooth: hci0: command tx timeout [ 69.182861][ T5979] Bluetooth: hci3: command tx timeout [ 69.191062][ T5979] Bluetooth: hci1: command tx timeout [ 69.261576][ T5979] Bluetooth: hci2: command tx timeout [ 69.362510][ T6107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23'. [ 69.367002][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23'. [ 69.372489][ T6107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23'. [ 69.549439][ T6117] process 'syz.3.28' launched './file0' with NULL argv: empty string added [ 70.095972][ T6149] vivid-004: ================= START STATUS ================= [ 70.099926][ T6149] vivid-004: Radio HW Seek Mode: Bounded [ 70.105849][ T6149] vivid-004: Radio Programmable HW Seek: false [ 70.109260][ T6149] vivid-004: RDS Rx I/O Mode: Block I/O [ 70.120234][ T6149] vivid-004: Generate RBDS Instead of RDS: false [ 70.124107][ T6149] vivid-004: RDS Reception: true [ 70.126201][ T6149] vivid-004: RDS Program Type: 0 inactive [ 70.128163][ T6149] vivid-004: RDS PS Name: inactive [ 70.130492][ T6149] vivid-004: RDS Radio Text: inactive [ 70.132997][ T6149] vivid-004: RDS Traffic Announcement: false inactive [ 70.135310][ T6149] vivid-004: RDS Traffic Program: false inactive [ 70.137607][ T6149] vivid-004: RDS Music: false inactive [ 70.140353][ T6149] vivid-004: ================== END STATUS ================== [ 70.300576][ T6158] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 70.584699][ T6176] netlink: 'syz.3.54': attribute type 7 has an invalid length. [ 70.618725][ T6176] Zero length message leads to an empty skb [ 70.619757][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.629286][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.634706][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.638708][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.085869][ T40] audit: type=1326 audit(1776956956.148:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34fe8 code=0x7ffc0000 [ 71.100842][ T40] audit: type=1326 audit(1776956956.148:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 71.118085][ T40] audit: type=1326 audit(1776956956.148:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 71.127998][ T40] audit: type=1326 audit(1776956956.148:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34fe8 code=0x7ffc0000 [ 71.137743][ T40] audit: type=1326 audit(1776956956.148:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 71.147089][ T40] audit: type=1326 audit(1776956956.148:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34fe8 code=0x7ffc0000 [ 71.158105][ T40] audit: type=1326 audit(1776956956.148:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34fe8 code=0x7ffc0000 [ 71.167510][ T40] audit: type=1326 audit(1776956956.148:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 71.176023][ T40] audit: type=1326 audit(1776956956.148:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 71.183709][ T40] audit: type=1326 audit(1776956956.148:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34fe8 code=0x7ffc0000 [ 71.260933][ T5979] Bluetooth: hci1: command tx timeout [ 71.261019][ T5967] Bluetooth: hci0: command tx timeout [ 71.263341][ T5979] Bluetooth: hci3: command tx timeout [ 71.341441][ T5967] Bluetooth: hci2: command tx timeout [ 72.391936][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.83'. [ 72.545765][ T6247] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.87'. [ 72.593015][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 73.352847][ T5967] Bluetooth: hci0: command tx timeout [ 73.355677][ T5967] Bluetooth: hci3: command tx timeout [ 73.356851][ T5978] Bluetooth: hci1: command tx timeout [ 73.421007][ T5978] Bluetooth: hci2: command tx timeout [ 73.566706][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 73.760599][ T6290] syz.2.109 (6290): drop_caches: 2 [ 74.303595][ T6329] syz.1.124 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.358411][ T6336] bpf: Bad value for 'uid' [ 74.646999][ T6356] faux_driver vgem: [drm] Unknown color mode 39161; guessing buffer size. [ 75.068538][ T6372] ======================================================= [ 75.068538][ T6372] WARNING: The mand mount option has been deprecated and [ 75.068538][ T6372] and is ignored by this kernel. Remove the mand [ 75.068538][ T6372] option from the mount to silence this warning. [ 75.068538][ T6372] ======================================================= [ 75.088095][ T6372] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 75.381633][ T6023] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 75.540929][ T6023] usb 7-1: Using ep0 maxpacket: 8 [ 75.552370][ T6023] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 75.559382][ T6023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 75.565172][ T6023] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.570636][ T6023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.576407][ T6023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.581643][ T6023] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 75.584184][ T6023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 75.588477][ T6023] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.594365][ T6023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.598097][ T6023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.604402][ T6023] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 75.607428][ T6023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 75.613754][ T6023] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.618339][ T6023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.622299][ T6023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.628734][ T6023] usb 7-1: string descriptor 0 read error: -22 [ 75.631526][ T6023] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 75.634938][ T6023] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.652604][ T6023] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 75.859936][ T6010] usb 7-1: USB disconnect, device number 2 [ 75.991330][ T39] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 76.062126][ T6377] adutux: No device or device unplugged -19 [ 76.141274][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 76.145910][ T39] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 76.149579][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.152977][ T39] usb 6-1: Product: syz [ 76.154330][ T39] usb 6-1: Manufacturer: syz [ 76.156126][ T39] usb 6-1: SerialNumber: syz [ 76.306405][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.309507][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.384898][ T39] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 76.393206][ T39] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 76.396984][ T39] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 76.401918][ T39] usb 6-1: media controller created [ 76.416049][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.577953][ T39] zl10353_read_register: readreg error (reg=127, ret==-71) [ 76.621865][ T39] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 76.629283][ T39] usb 6-1: USB disconnect, device number 2 [ 77.712408][ T6464] warning: `syz.0.185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.715175][ T34] kernel read not supported for file /vcs (pid: 34 comm: kworker/3:0) [ 77.987787][ T6493] netlink: 112 bytes leftover after parsing attributes in process `syz.1.201'. [ 78.516912][ T6533] erspan0: entered promiscuous mode [ 78.523034][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 78.526126][ T6533] erspan0: left promiscuous mode [ 78.833290][ T6557] overlayfs: upper fs does not support tmpfile. [ 78.849998][ T9] IPVS: starting estimator thread 0... [ 78.889275][ T6564] tmpfs: Cannot change global quota limit on remount [ 78.951187][ T6561] IPVS: using max 44 ests per chain, 105600 per kthread [ 79.127204][ T6589] syz_tun: entered allmulticast mode [ 79.130215][ T6589] syz_tun: left allmulticast mode [ 79.629739][ T6590] syz.1.245 (6590): drop_caches: 1 [ 79.634958][ T6587] syz.1.245 (6587): drop_caches: 1 [ 79.662304][ T6587] syz.1.245 (6587): drop_caches: 1 [ 80.119441][ T6637] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 80.130340][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 81.296367][ T9] Process accounting resumed [ 81.564482][ T6685] capability: warning: `syz.3.290' uses 32-bit capabilities (legacy support in use) [ 81.647882][ T6694] sctp: [Deprecated]: syz.1.294 (pid 6694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.647882][ T6694] Use struct sctp_sack_info instead [ 82.142585][ T5978] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 82.301011][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 82.461304][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 82.466001][ T9] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 82.468909][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 82.473753][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 82.477254][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 82.480835][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 82.484046][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.488564][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.492329][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.707875][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 82.709841][ T9] usbtmc 6-1:16.0: can't read capabilities [ 82.914705][ C3] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 82.918915][ T6725] usbtmc 6-1:16.0: Unable to send data, error -71 [ 82.929338][ T840] usb 6-1: USB disconnect, device number 3 [ 83.053773][ T6752] syz.3.316 (6752): drop_caches: 1 [ 83.054470][ T6750] syz.3.316 (6750): drop_caches: 1 [ 83.092493][ T6750] syz.3.316 (6750): drop_caches: 1 [ 83.262570][ T5979] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 83.262576][ T5978] Bluetooth: hci5: command 0xfc11 tx timeout [ 83.410658][ T6768] input: syz1 as /devices/virtual/input/input7 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa8000) [ 83.507356][ T1126] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 83.509542][ T1126] ata1: failed to read log page 10h (errno=-5) [ 83.511968][ T1126] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 83.517245][ T1126] ata1.00: irq_stat 0x40000000 [ 83.519419][ T1126] ata1.00: failed command: READ FPDMA QUEUED [ 83.524612][ T1126] ata1.00: cmd 60/40:70:ee:33:01/05:00:00:00:00/40 tag 14 ncq dma 688128 in [ 83.524612][ T1126] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 83.532374][ T1126] ata1.00: status: { DRDY } [ 83.534356][ T1126] ata1.00: error: { ABRT } [ 83.536013][ T1126] ata1.00: failed command: READ FPDMA QUEUED [ 83.538114][ T1126] ata1.00: cmd 60/c0:78:2e:39:01/02:00:00:00:00/40 tag 15 ncq dma 360448 in [ 83.538114][ T1126] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 83.544467][ T1126] ata1.00: status: { DRDY } [ 83.546109][ T1126] ata1.00: error: { ABRT } [ 83.557060][ T1126] ata1.00: configured for UDMA/100 [ 83.559033][ T1126] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 83.567845][ T1126] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 83.571197][ T1126] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 83.574391][ T1126] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 33 ee 00 05 40 00 [ 83.577386][ T1126] I/O error, dev sda, sector 78830 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 83.581446][ T1126] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 83.584827][ T1126] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 83.587854][ T1126] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 83.591985][ T1126] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 01 39 2e 00 02 c0 00 [ 83.596125][ T1126] I/O error, dev sda, sector 80174 op 0x0:(READ) flags 0x80700 phys_seg 88 prio class 2 [ 83.600423][ T1126] ata1: EH complete [ 83.605918][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 83.931683][ T840] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 84.081160][ T840] usb 7-1: Using ep0 maxpacket: 8 [ 84.088094][ T840] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 84.090540][ T6823] ptrace attach of "/syz-executor exec"[5971] was attempted by ""[6823] [ 84.092081][ T840] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 84.101241][ T840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 84.105585][ T840] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 84.110647][ T840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 84.117564][ T840] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.124129][ T840] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.128382][ T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.132518][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 84.345380][ T840] usb 7-1: GET_CAPABILITIES returned 0 [ 84.348090][ T840] usbtmc 7-1:16.0: can't read capabilities [ 84.549993][ C3] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 84.555762][ T6790] usbtmc 7-1:16.0: Unable to send data, error -71 [ 84.560195][ T840] usb 7-1: USB disconnect, device number 3 [ 84.690609][ T6873] syz.0.367 (6873): drop_caches: 1 [ 84.691684][ T6868] syz.0.367 (6868): drop_caches: 1 [ 84.718402][ T6868] syz.0.367 (6868): drop_caches: 1 [ 85.172382][ T6900] syz.2.385 (6900): drop_caches: 1 [ 85.193312][ T6900] syz.2.385 (6900): drop_caches: 1 [ 85.238849][ T6900] syz.2.385 (6900): drop_caches: 1 [ 85.286365][ T6908] binder: 6907:6908 ioctl c018620c 80000280 returned -1 [ 85.913271][ T6023] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 86.070866][ T6023] usb 8-1: Using ep0 maxpacket: 8 [ 86.076773][ T6023] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 86.080427][ T6023] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 86.085485][ T6023] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 86.090432][ T6023] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 86.095832][ T6023] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 86.100285][ T6023] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.106562][ T6023] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.110688][ T6023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.325053][ T6023] usb 8-1: GET_CAPABILITIES returned 0 [ 86.326971][ T6023] usbtmc 8-1:16.0: can't read capabilities [ 86.499959][ T6928] kthread_run failed with err -4 [ 86.531104][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 86.534101][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 86.537037][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 86.539983][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 86.548395][ T6926] usbtmc 8-1:16.0: Unable to send data, error -71 [ 86.554247][ T6010] usb 8-1: USB disconnect, device number 2 [ 86.557440][ T53] cfg80211: failed to load regulatory.db [ 86.589771][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 86.589786][ T40] audit: type=1326 audit(1776956971.648:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.2.400" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efcc code=0x0 [ 86.649867][ T6942] input: syz0 as /devices/virtual/input/input8 [ 86.744686][ T6951] loop2: detected capacity change from 0 to 7 [ 86.758836][ T6951] Dev loop2: unable to read RDB block 7 [ 86.762835][ T6951] loop2: unable to read partition table [ 86.765726][ T6951] loop2: partition table beyond EOD, truncated [ 86.769080][ T6951] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 86.921499][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 87.125680][ T6966] serio: Serial port ptm0 [ 87.966563][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 87.969564][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 88.080155][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.431'. [ 88.192467][ T7014] loop5: detected capacity change from 0 to 7 [ 88.199711][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.203901][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.216926][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.220974][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.229147][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.234816][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.243308][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.245841][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.439'. [ 88.246672][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.253091][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.256293][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.286849][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 88.303601][ T6023] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.306836][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.309914][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.315373][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.319031][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.323798][ T7014] ldm_validate_partition_table(): Disk read failed. [ 88.327506][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.330546][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.334147][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.337645][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.341662][ T7014] Dev loop5: unable to read RDB block 0 [ 88.344570][ T7014] loop5: unable to read partition table [ 88.346479][ T7014] loop5: partition table beyond EOD, truncated [ 88.352007][ T7014] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 88.480985][ T6023] usb 5-1: Using ep0 maxpacket: 8 [ 88.486751][ T6023] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 88.492612][ T6023] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 88.497540][ T6023] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 88.503435][ T6023] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 88.508397][ T6023] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 88.511850][ T6023] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.521714][ T6023] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.525694][ T6023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.751423][ T6023] usb 5-1: GET_CAPABILITIES returned 0 [ 88.753575][ T6023] usbtmc 5-1:16.0: can't read capabilities [ 88.953058][ T39] Process accounting resumed [ 88.955384][ C3] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 88.956100][ T6995] usbtmc 5-1:16.0: Unable to send data, error -71 [ 88.968211][ T840] usb 5-1: USB disconnect, device number 2 [ 88.972896][ T7055] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.978748][ T7055] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.995206][ T7055] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.003687][ T7055] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.008940][ T7055] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.020059][ T7055] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.026355][ T7055] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.028357][ T7055] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.044611][ T7055] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.049929][ T7055] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.054221][ T7055] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.062095][ T7055] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.111509][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 89.190932][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 89.194704][ T7073] netlink: 148 bytes leftover after parsing attributes in process `syz.2.463'. [ 90.172930][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 90.632935][ T7108] devpts: Bad value for 'max' [ 90.771435][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'. [ 91.001017][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 91.021062][ T5979] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.021105][ T5978] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.111230][ T5978] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.111273][ T5979] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.380569][ T7146] input: syz1 as /devices/virtual/input/input9 [ 91.389346][ T7148] Bluetooth: MGMT ver 1.23 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xda000) [ 91.443008][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 91.445952][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'. [ 91.448855][ T7151] netlink: 'syz.1.499': attribute type 20 has an invalid length. [ 91.502128][ T1126] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 91.511205][ T1126] ata1: failed to read log page 10h (errno=-5) [ 91.516275][ T1126] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 91.523280][ T1126] ata1.00: irq_stat 0x41000000 [ 91.525833][ T1126] ata1.00: failed command: READ FPDMA QUEUED [ 91.532276][ T1126] ata1.00: cmd 60/d0:70:6e:32:01/06:00:00:00:00/40 tag 14 ncq dma 892928 in [ 91.532276][ T1126] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 91.561830][ T1126] ata1.00: status: { DRDY } [ 91.564543][ T1126] ata1.00: error: { ABRT } [ 91.566505][ T1126] ata1.00: failed command: READ FPDMA QUEUED [ 91.574885][ T1126] ata1.00: cmd 60/d0:78:3e:39:01/02:00:00:00:00/40 tag 15 ncq dma 368640 in [ 91.574885][ T1126] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 91.591179][ T1126] ata1.00: status: { DRDY } [ 91.593659][ T1126] ata1.00: error: { ABRT } [ 91.596715][ T1126] ata1.00: configured for UDMA/100 [ 91.599607][ T1126] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 91.606289][ T1126] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 91.609994][ T1126] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 91.617752][ T1126] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 32 6e 00 06 d0 00 [ 91.622139][ T1126] blk_print_req_error: 12 callbacks suppressed [ 91.622156][ T1126] I/O error, dev sda, sector 78446 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 91.626140][ T40] audit: type=1326 audit(1776956976.688:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.3.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 91.630003][ T1126] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 91.646163][ T1126] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 91.649413][ T1126] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 91.651197][ T40] audit: type=1326 audit(1776956976.698:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.3.502" exe="/syz-executor" sig=0 arch=40000003 syscall=181 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 91.653267][ T1126] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 01 39 3e 00 02 d0 00 [ 91.666468][ T1126] I/O error, dev sda, sector 80190 op 0x0:(READ) flags 0x80700 phys_seg 88 prio class 2 [ 91.669698][ T40] audit: type=1326 audit(1776956976.698:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.3.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 91.671463][ T1126] ata1: EH complete [ 91.684557][ T40] audit: type=1326 audit(1776956976.698:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.3.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 91.958383][ T7184] kvm: kvm [7183]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000086) = 0x0 [ 92.224519][ T7211] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 92.228172][ T1160] Bluetooth: hci4: Frame reassembly failed (-84) [ 92.455951][ T7226] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.530'. [ 92.892931][ T7244] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.895043][ T7244] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 92.897117][ T7244] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.899356][ T7244] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.832042][ T7274] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.839047][ T7274] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.848400][ T7274] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.853452][ T7274] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.903474][ T7284] batadv_slave_0: entered promiscuous mode [ 93.907319][ T7283] batadv_slave_0: left promiscuous mode [ 93.920536][ T29] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 93.926267][ T29] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 93.942550][ T29] hid-generic 0000:0000:0002.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 94.030090][ T7286] fido_id[7286]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.311010][ T5978] Bluetooth: hci4: command 0x1003 tx timeout [ 94.313353][ T5979] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 95.147865][ T7338] input: syz1 as /devices/virtual/input/input10 [ 95.784148][ T5979] Bluetooth: hci0: unexpected event for opcode 0x0405 [ 95.834284][ T7393] binder: 7392:7393 ioctl c0306201 0 returned -14 [ 95.912548][ T5979] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.913315][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.914722][ T5979] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.210069][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 97.235043][ T7469] loop6: detected capacity change from 0 to 2640 [ 97.239247][ T7469] buffer_io_error: 10 callbacks suppressed [ 97.239259][ T7469] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.244373][ T7469] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.247993][ T7469] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.252968][ T7469] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.256962][ T7469] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.259886][ T7469] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.263619][ T7469] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.267026][ T7469] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.269590][ T7469] ldm_validate_partition_table(): Disk read failed. [ 97.273423][ T7469] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.282312][ T7469] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.286679][ T7469] Dev loop6: unable to read RDB block 0 [ 97.289890][ T7469] loop6: unable to read partition table [ 97.294162][ T7469] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 97.310246][ T5367] ldm_validate_partition_table(): Disk read failed. [ 97.314581][ T5367] Dev loop6: unable to read RDB block 0 [ 97.317580][ T5367] loop6: unable to read partition table [ 97.665978][ T7494] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 97.980977][ T5967] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.990976][ T5967] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.991216][ T5979] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.857857][ T7565] sp0: Synchronizing with TNC [ 98.866053][ T7567] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.991769][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 98.999900][ T7573] netlink: 72 bytes leftover after parsing attributes in process `syz.3.681'. [ 99.180915][ T6010] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.255324][ T7590] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 0, id = 0 [ 99.331486][ T6010] usb 5-1: Using ep0 maxpacket: 8 [ 99.337506][ T6010] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 99.344062][ T6010] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 99.349464][ T6010] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.353749][ T6010] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.360321][ T6010] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.364236][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.420958][ T5979] Bluetooth: hci4: command 0x1003 tx timeout [ 99.421187][ T5978] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 99.582071][ T6010] usb 5-1: GET_CAPABILITIES returned 0 [ 99.584544][ T6010] usbtmc 5-1:16.0: can't read capabilities [ 99.755623][ T7615] bond1: invalid ARP target 0.0.0.0 specified for addition [ 99.758376][ T7615] bond1: option arp_ip_target: invalid value (0) [ 99.764823][ T7615] bond1 (unregistering): Released all slaves [ 99.784198][ T840] usb 5-1: USB disconnect, device number 3 [ 99.827366][ T7619] input: syz0 as /devices/virtual/input/input11 [ 99.932951][ T6010] kernel read not supported for file /dsp1 (pid: 6010 comm: kworker/0:3) [ 100.061451][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.157954][ T7649] batman_adv: batadv0: Adding interface: dummy0 [ 100.161472][ T7649] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.169414][ T7649] batman_adv: batadv0: Interface activated: dummy0 [ 100.272724][ T7660] Bluetooth: MGMT ver 1.23 [ 100.275104][ T7660] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 100.646029][ T7691] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 100.930952][ T915] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.007542][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 101.012783][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 101.051989][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 101.095292][ T915] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 101.099744][ T915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.103239][ T915] usb 5-1: Product: syz [ 101.104831][ T915] usb 5-1: Manufacturer: syz [ 101.106831][ T915] usb 5-1: SerialNumber: syz [ 101.361262][ T915] rtl8150 5-1:1.0: couldn't reset the device [ 101.364477][ T915] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 101.391809][ T915] usb 5-1: USB disconnect, device number 4 [ 101.931367][ T840] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 102.081200][ T840] usb 8-1: Using ep0 maxpacket: 16 [ 102.091598][ T840] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 102.095479][ T840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.098016][ T840] usb 8-1: Product: syz [ 102.099733][ T840] usb 8-1: Manufacturer: syz [ 102.102184][ T840] usb 8-1: SerialNumber: syz [ 102.319028][ T840] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 102.328599][ T840] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 102.333058][ T840] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 102.336832][ T840] usb 8-1: media controller created [ 102.348723][ T840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.572987][ T840] zl10353_read_register: readreg error (reg=127, ret==-110) [ 102.604293][ T840] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 102.610232][ T840] usb 8-1: USB disconnect, device number 3 [ 103.355158][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 103.406017][ T7767] batman_adv: batadv0: Adding interface: dummy0 [ 103.411129][ T7767] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.423393][ T7767] batman_adv: batadv0: Interface activated: dummy0 [ 104.361078][ T840] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 104.511433][ T840] usb 8-1: Using ep0 maxpacket: 8 [ 104.518403][ T840] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 104.523174][ T840] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 104.526438][ T840] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.530094][ T840] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.534940][ T840] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.538713][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.611094][ T915] kernel read not supported for file /dsp1 (pid: 915 comm: kworker/2:2) [ 104.761717][ T840] usb 8-1: GET_CAPABILITIES returned 0 [ 104.763860][ T840] usbtmc 8-1:16.0: can't read capabilities [ 104.826577][ T40] audit: type=1400 audit(1776957245.891:79): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A50302D302D353A2050434D204361707475726520302D302D35203A20534C4156450A50302D302D363A2050434D20506C61796261636B20302D302D36203A20534C4156450A50302D302D373A2050434D204361707475726520302D302D37203A20534C4156450A50302D302D383A2050434D20506C61796261636B20302D302D38203A20534C4156450A50302D302D393A2050434D204361707475726520302D302D39203A20534C4156450A50302D302D31303A2050434D20506C61796261636B20302D302D3130203A20534C4156450A50302D302D31313A2050434D204361707475726520302D302D3131203A pid=7849 comm="syz.1.804" [ 104.877365][ T7855] kvm: kvm [7853]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000086) = 0x0 [ 104.967903][ T915] usb 8-1: USB disconnect, device number 4 [ 105.022845][ T7864] netlink: 'syz.2.812': attribute type 1 has an invalid length. [ 105.025652][ T7864] netlink: 288 bytes leftover after parsing attributes in process `syz.2.812'. [ 105.165807][ T7872] kvm: kvm [7871]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x7 [ 106.290055][ T7930] netlink: 88 bytes leftover after parsing attributes in process `syz.1.842'. [ 106.793372][ T7979] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.865'. [ 107.086045][ T8009] netlink: 'syz.0.880': attribute type 2 has an invalid length. [ 107.194088][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 107.197120][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 107.200557][ T8027] netlink: 'syz.3.886': attribute type 18 has an invalid length. [ 107.207382][ T8027] netlink: 'syz.3.886': attribute type 15 has an invalid length. [ 107.252363][ T8032] netlink: 'syz.0.891': attribute type 39 has an invalid length. [ 107.733418][ T8059] block nbd0: shutting down sockets [ 108.097490][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'. [ 108.103362][ T8077] netlink: 72 bytes leftover after parsing attributes in process `syz.1.917'. [ 109.537856][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 109.543246][ T8104] netlink: 72 bytes leftover after parsing attributes in process `syz.2.919'. [ 109.592367][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 109.648967][ T8113] can0: slcan on ttyS3. [ 109.722584][ T8113] can0 (unregistered): slcan off ttyS3. [ 109.758802][ T8118] netem: incorrect ge model size [ 109.810926][ T6058] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 109.960936][ T6058] usb 8-1: Using ep0 maxpacket: 16 [ 109.965147][ T6058] usb 8-1: config 0 has no interfaces? [ 109.967874][ T6058] usb 8-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 109.971865][ T6058] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.976918][ T6058] usb 8-1: config 0 descriptor?? qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xd0000) [ 110.033454][ T1126] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 110.036464][ T1126] ata1: failed to read log page 10h (errno=-5) [ 110.039104][ T1126] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 110.042897][ T1126] ata1.00: irq_stat 0x41000000 [ 110.045046][ T1126] ata1.00: failed command: READ FPDMA QUEUED [ 110.047602][ T1126] ata1.00: cmd 60/80:70:6e:5b:01/06:00:00:00:00/40 tag 14 ncq dma 851968 in [ 110.047602][ T1126] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 110.055016][ T1126] ata1.00: status: { DRDY } [ 110.057217][ T1126] ata1.00: error: { ABRT } [ 110.062799][ T1126] ata1.00: configured for UDMA/100 [ 110.064830][ T1126] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 110.067943][ T1126] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 110.070445][ T1126] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 110.073855][ T1126] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 5b 6e 00 06 80 00 [ 110.076592][ T1126] I/O error, dev sda, sector 88942 op 0x0:(READ) flags 0x80700 phys_seg 88 prio class 2 [ 110.079837][ T1126] ata1: EH complete [ 110.186283][ T6058] usb 8-1: USB disconnect, device number 5 [ 110.241533][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 110.938342][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.959'. [ 111.016411][ T8196] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.963'. [ 111.485735][ T8231] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 111.653672][ T8244] bond1: entered promiscuous mode [ 112.498863][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 112.504985][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 112.716069][ T8283] netlink: 'syz.0.1006': attribute type 1 has an invalid length. [ 112.719666][ T8283] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1006'. [ 112.725260][ T8283] netlink: 'syz.0.1006': attribute type 1 has an invalid length. [ 112.728650][ T8283] netlink: 'syz.0.1006': attribute type 8 has an invalid length. [ 112.731607][ T8283] netlink: 582 bytes leftover after parsing attributes in process `syz.0.1006'. [ 112.873483][ T8301] loop9: detected capacity change from 0 to 7 [ 112.879102][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.882272][ C0] buffer_io_error: 27 callbacks suppressed [ 112.882287][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.888761][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.893186][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.898467][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.902453][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.916452][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.919428][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.922397][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.926104][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.929780][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.933739][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.978651][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.982023][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.989349][ T8301] ldm_validate_partition_table(): Disk read failed. [ 112.992212][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.995163][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.997856][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.001596][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.004454][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.009305][ T8301] Dev loop9: unable to read RDB block 0 [ 113.014525][ T8301] loop9: unable to read partition table [ 113.017928][ T8301] loop9: partition table beyond EOD, truncated [ 113.022173][ T8301] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 113.592208][ T8374] bond0: entered promiscuous mode [ 113.594279][ T8374] bond_slave_0: entered promiscuous mode [ 113.596897][ T8374] bond_slave_1: entered promiscuous mode [ 113.604038][ T8374] batadv0: entered promiscuous mode [ 113.609323][ T8374] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 113.921050][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.029814][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.111179][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.154291][ T5979] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.160586][ T5979] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.165640][ T5979] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.170595][ T5979] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.174391][ T5979] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.188408][ T8395] capability: warning: `syz.2.1068' uses deprecated v2 capabilities in a way that may be insecure [ 114.226582][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.395930][ T8392] chnl_net:caif_netlink_parms(): no params data found [ 114.454332][ T59] bridge_slave_1: left allmulticast mode [ 114.457386][ T59] bridge_slave_1: left promiscuous mode [ 114.462513][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.469067][ T59] bridge_slave_0: left allmulticast mode [ 114.478044][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.697508][ T1340] kernel read not supported for file /swradio7 (pid: 1340 comm: kworker/1:2) [ 114.703097][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.717010][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.721217][ T59] bond0 (unregistering): Released all slaves [ 114.824964][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.831453][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.834476][ T8392] bridge_slave_0: entered allmulticast mode [ 114.837551][ T8392] bridge_slave_0: entered promiscuous mode [ 114.843894][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.853201][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.856778][ T8392] bridge_slave_1: entered allmulticast mode [ 114.861012][ T8392] bridge_slave_1: entered promiscuous mode [ 114.883879][ T8392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.890609][ T8392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.100706][ T8392] team0: Port device team_slave_0 added [ 115.112244][ T8392] team0: Port device team_slave_1 added [ 115.164433][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.167599][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.178005][ T8392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.189210][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.192483][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.210040][ T8392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.231038][ T5670] 8021q: adding VLAN 0 to HW filter on device eth2 [ 115.285697][ T8458] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 115.288975][ T8458] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 115.299444][ T8458] overlayfs: fs on './cgroup' does not support file handles, falling back to xino=off. [ 115.863923][ T8392] hsr_slave_0: entered promiscuous mode [ 115.868176][ T8392] hsr_slave_1: entered promiscuous mode [ 115.871151][ T8392] debugfs: 'hsr0' already exists in 'hsr' [ 115.874104][ T8392] Cannot create hsr debugfs directory [ 116.139682][ T5670] 8021q: adding VLAN 0 to HW filter on device eth3 [ 116.209700][ T59] hsr_slave_0: left promiscuous mode [ 116.213077][ T59] hsr_slave_1: left promiscuous mode [ 116.215868][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.218660][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.221067][ T5978] Bluetooth: hci1: command tx timeout [ 116.228698][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.231832][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.236513][ T59] batman_adv: batadv0: Interface deactivated: dummy0 [ 116.239386][ T59] batman_adv: batadv0: Removing interface: dummy0 [ 116.275142][ T59] veth1_macvtap: left promiscuous mode [ 116.277836][ T59] veth0_macvtap: left promiscuous mode [ 116.279873][ T59] veth1_vlan: left promiscuous mode [ 116.281882][ T59] veth0_vlan: left promiscuous mode [ 117.382295][ T59] team0 (unregistering): Port device team_slave_1 removed [ 117.404759][ T59] team0 (unregistering): Port device team_slave_0 removed [ 117.649682][ T915] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 117.660002][ T8392] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.676885][ T8392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.681996][ T8392] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.699109][ T8392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.728296][ T8392] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.735572][ T8392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.739307][ T8392] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.747821][ T8392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.859429][ T8392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.882841][ T8392] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.894944][ T219] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.898136][ T219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.917868][ T219] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.920354][ T219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.923872][ T59] IPVS: stop unused estimator thread 0... [ 117.991320][ T5670] 8021q: adding VLAN 0 to HW filter on device eth4 [ 118.137743][ T8392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.156614][ T5670] 8021q: adding VLAN 0 to HW filter on device eth5 [ 118.301299][ T5978] Bluetooth: hci1: command tx timeout [ 118.320178][ T8392] veth0_vlan: entered promiscuous mode [ 118.327360][ T8392] veth1_vlan: entered promiscuous mode [ 118.348515][ T8392] veth0_macvtap: entered promiscuous mode [ 118.353693][ T8392] veth1_macvtap: entered promiscuous mode [ 118.363938][ T8392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.370853][ T8392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.377372][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.380352][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.386496][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.389613][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.461873][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.466760][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.487793][ T1268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.491764][ T1268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.724188][ T8569] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.729869][ T8569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.734582][ T8569] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.735954][ T8576] __nla_validate_parse: 4 callbacks suppressed [ 118.735967][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'. [ 118.736798][ T8569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.744383][ T8569] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 118.750421][ T8569] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 118.811048][ T8581] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 118.819205][ T8581] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 119.677810][ T8648] netlink: 'syz.1.1142': attribute type 4 has an invalid length. [ 119.686489][ T8648] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 119.690353][ T8648] netlink: 'syz.1.1142': attribute type 3 has an invalid length. [ 119.694343][ T8648] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1142'. [ 119.698175][ T8648] NCSI netlink: No device for ifindex 830110067 [ 119.701113][ T8651] netlink: 'syz.2.1144': attribute type 39 has an invalid length. [ 120.689114][ T8710] netem: incorrect ge model size [ 120.694544][ T8710] netem: change failed [ 120.781711][ T5978] Bluetooth: hci1: command 0x0419 tx timeout [ 120.781786][ T5979] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.781807][ T5967] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.781835][ T5967] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.993839][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 121.139810][ T8754] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1191'. [ 121.148209][ T8754] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 121.163760][ T8758] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1193'. [ 121.850105][ T8794] pim6reg: entered allmulticast mode [ 121.855485][ T8794] team0: entered allmulticast mode [ 121.858073][ T8794] team_slave_0: entered allmulticast mode [ 121.861057][ T8794] team_slave_1: entered allmulticast mode [ 122.343528][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'. [ 122.347048][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'. [ 122.861024][ T5979] Bluetooth: hci1: command 0x0419 tx timeout [ 122.870958][ T5979] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.890931][ T8561] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 123.060926][ T8561] usb 9-1: Using ep0 maxpacket: 8 [ 123.064864][ T8561] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 123.068568][ T8561] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 123.072361][ T8561] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.076895][ T8561] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.081859][ T8561] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.085087][ T8561] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.251063][ T8873] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 0, id = 0 [ 123.296121][ T8561] usb 9-1: GET_CAPABILITIES returned 0 [ 123.298471][ T8561] usbtmc 9-1:16.0: can't read capabilities [ 123.518459][ T8561] usb 9-1: USB disconnect, device number 2 [ 123.551829][ T840] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 123.702159][ T840] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 123.709291][ T840] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 123.718589][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.725547][ T840] usb 6-1: Product: syz [ 123.727462][ T840] usb 6-1: Manufacturer: syz [ 123.743686][ T840] usb 6-1: SerialNumber: syz [ 123.750705][ T8865] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 123.768501][ T8865] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 123.853817][ T8902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1259'. [ 123.869234][ T8902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1259'. [ 123.986276][ T840] usb 6-1: USB disconnect, device number 4 [ 124.341461][ T8937] C: renamed from team_slave_0 (while UP) [ 124.346921][ T8937] netlink: 'syz.3.1274': attribute type 4 has an invalid length. [ 124.349421][ T8937] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1274'. [ 124.353145][ T8937] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 124.467922][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'. [ 124.471828][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'. [ 124.549534][ T8955] input: syz0 as /devices/virtual/input/input13 [ 124.625112][ T8962] : renamed from vlan0 (while UP) [ 124.839787][ T8980] loop8: detected capacity change from 0 to 7 [ 124.844749][ C2] blk_print_req_error: 11 callbacks suppressed [ 124.844762][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.850146][ C2] buffer_io_error: 10 callbacks suppressed [ 124.850158][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 124.856231][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.859219][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 124.863217][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.866385][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 124.869313][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.872670][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 124.877765][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.881166][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 124.884014][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.887353][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 124.893214][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.897463][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 124.900884][ T8980] ldm_validate_partition_table(): Disk read failed. [ 124.906076][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.909250][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 124.912431][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.916895][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 124.923955][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.928599][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 124.934166][ T8980] Dev loop8: unable to read RDB block 0 [ 124.937298][ T8980] loop8: unable to read partition table [ 124.939538][ T8980] loop8: partition table beyond EOD, truncated [ 124.942602][ T5979] Bluetooth: hci1: command 0x0419 tx timeout [ 124.947324][ T8980] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 125.606541][ T9020] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1311'. [ 125.610558][ T9020] netlink: 'syz.3.1311': attribute type 2 has an invalid length. [ 126.000916][ T9035] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.1318'. [ 126.004321][ T9035] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 126.057027][ T9037] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 126.077064][ T9039] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 127.020864][ T5979] Bluetooth: hci1: command 0x0419 tx timeout [ 127.033842][ T9116] mmap: syz.4.1357 (9116) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.106943][ T9125] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 0, id = 0 [ 127.327474][ T9147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1371'. [ 127.331247][ T9147] netem: change failed [ 127.371308][ T840] kernel read not supported for file /dsp (pid: 840 comm: kworker/3:2) [ 127.580570][ T9171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1381'. [ 127.584889][ T9171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1381'. [ 127.754495][ T40] audit: type=1326 audit(1776957268.821:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.4.1390" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd6fcc code=0x0 [ 128.664929][ T9237] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.669885][ T9237] block device autoloading is deprecated and will be removed. [ 128.678689][ T9240] Invalid source name [ 129.743528][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 129.748652][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 129.779668][ T40] audit: type=1800 audit(1776957270.841:81): pid=9327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1441" name="file0" dev="9p" ino=72876331 res=0 errno=0 [ 129.818430][ T9333] netem: change failed [ 130.215799][ T840] kernel write not supported for file /snd/seq (pid: 840 comm: kworker/3:2) [ 130.259084][ T9376] mkiss: ax0: crc mode is auto. [ 130.309796][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1469'. [ 130.547360][ T9415] loop6: detected capacity change from 0 to 2640 [ 130.550421][ T9415] buffer_io_error: 11 callbacks suppressed [ 130.550437][ T9415] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.556646][ T9415] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.559646][ T9415] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.563083][ T9415] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.565796][ T9415] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.568437][ T9415] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.575109][ T9415] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.577981][ T9415] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.581177][ T9415] ldm_validate_partition_table(): Disk read failed. [ 130.583924][ T9415] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.586682][ T9415] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.589438][ T9415] Dev loop6: unable to read RDB block 0 [ 130.595205][ T9415] loop6: unable to read partition table [ 130.597525][ T9415] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 130.645219][ T9418] loop6: detected capacity change from 2640 to 524288000 [ 130.879851][ T9435] kvm: kvm [9434]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 131.167905][ T9460] block nbd4: NBD_DISCONNECT [ 131.202460][ T9462] tmpfs: Cannot retroactively limit size [ 131.750937][ T915] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 131.913579][ T915] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 131.917375][ T915] usb 9-1: config 0 interface 0 has no altsetting 0 [ 131.921716][ T915] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.926534][ T915] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 131.930299][ T915] usb 9-1: Product: syz [ 131.932721][ T915] usb 9-1: Manufacturer: syz [ 131.934431][ T915] usb 9-1: SerialNumber: syz [ 131.938133][ T915] usb 9-1: config 0 descriptor?? [ 131.973290][ T915] usb 9-1: selecting invalid altsetting 0 [ 132.148581][ T915] usb 9-1: USB disconnect, device number 3 [ 132.403455][ T9514] netlink: 'syz.1.1524': attribute type 9 has an invalid length. [ 133.737958][ T9590] vivid-003: disconnect [ 133.743366][ T9588] vivid-003: reconnect [ 134.338458][ T6057] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.341845][ T6057] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.344310][ T6057] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.346949][ T6057] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.349570][ T6057] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.352422][ T6057] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.355011][ T6057] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.357477][ T6057] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.359878][ T6057] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.362563][ T6057] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.369084][ T6057] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 134.369084][ T6057] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 134.437536][ T9617] fido_id[9617]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 135.151072][ T9650] input: syz1 as /devices/virtual/input/input14 [ 136.523883][ T9703] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1609'. [ 136.862305][ T840] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 137.043523][ T840] usb 6-1: config 0 has no interfaces? [ 137.046053][ T840] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 137.050031][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.058253][ T840] usb 6-1: config 0 descriptor?? [ 137.309668][ T840] usb 6-1: USB disconnect, device number 5 [ 137.502593][ T5982] Bluetooth: hci4: command 0x1003 tx timeout [ 137.502607][ T5979] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 137.745883][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.748057][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.798330][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'. [ 137.899521][ T9770] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1638'. [ 138.146877][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 138.149875][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1648'. [ 139.106048][ T9846] input: syz0 as /devices/virtual/input/input15 [ 139.911738][ T9875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1682'. [ 140.083534][ T9885] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.086670][ T9885] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.227250][ T9885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.245744][ T9885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.403178][ T9893] tipc: Started in network mode [ 140.404857][ T9893] tipc: Node identity , cluster identity 4711 [ 140.406936][ T9893] tipc: Failed to set node id, please configure manually [ 140.409358][ T9893] tipc: Enabling of bearer rejected, failed to enable media [ 140.418552][ T41] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.430119][ T41] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.449154][ T41] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.456780][ T41] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.496710][ T9910] input: syz1 as /devices/virtual/input/input16 [ 140.916465][ T9960] syz.1.1720 uses obsolete (PF_INET,SOCK_PACKET) [ 140.968246][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1721'. [ 141.263619][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1729'. [ 142.280823][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1751'. [ 142.630176][T10059] overlayfs: invalid origin (0000) [ 143.783791][T10138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1792'. [ 143.811030][ T6023] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 143.974539][ T6023] usb 9-1: config 0 has no interfaces? [ 143.977120][ T6023] usb 9-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 143.981125][ T6023] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.988061][ T6023] usb 9-1: config 0 descriptor?? [ 144.247205][ T840] usb 9-1: USB disconnect, device number 4 [ 144.417148][T10159] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 145.484494][T10218] usb usb9: usbfs: process 10218 (syz.3.1829) did not claim interface 37 before use [ 146.111653][T10259] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.114742][T10259] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.117655][T10259] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.120315][T10259] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.128065][T10267] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 146.802133][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'. [ 148.140949][ T5979] Bluetooth: hci1: command 0x0419 tx timeout [ 148.141287][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.141330][ T5967] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.149613][ T5982] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.280955][ T5983] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 148.370942][ T9] kernel read not supported for file /dsp1 (pid: 9 comm: kworker/0:0) [ 148.434159][ T5983] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.439540][ T5983] usb 6-1: config 0 has no interface number 0 [ 148.442607][ T5983] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 148.449963][ T5983] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 148.455156][ T5983] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.459580][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.468427][ T5983] usb 6-1: config 0 descriptor?? [ 148.472912][T10364] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.485174][ T5983] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 148.724244][ T6023] usb 6-1: USB disconnect, device number 6 [ 149.757507][T10401] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.760540][T10401] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.764226][T10401] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.767085][T10401] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.799228][ T40] audit: type=1326 audit(1776957290.861:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.4.1908" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6fe8 code=0x7ffc0000 [ 149.813537][ T40] audit: type=1326 audit(1776957290.861:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.4.1908" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6fe8 code=0x7ffc0000 [ 149.823090][ T40] audit: type=1326 audit(1776957290.861:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.4.1908" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6fe8 code=0x7ffc0000 [ 149.834032][ T40] audit: type=1326 audit(1776957290.861:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.4.1908" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6fe8 code=0x7ffc0000 [ 149.848665][ T40] audit: type=1326 audit(1776957290.861:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.4.1908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fcc code=0x7ffc0000 [ 149.858489][ T40] audit: type=1326 audit(1776957290.861:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.4.1908" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6fe8 code=0x7ffc0000 [ 149.870886][ T40] audit: type=1326 audit(1776957290.861:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.4.1908" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6fe8 code=0x7ffc0000 [ 149.882692][ T40] audit: type=1326 audit(1776957290.861:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.4.1908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fcc code=0x7ffc0000 [ 149.889494][ T40] audit: type=1326 audit(1776957290.861:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.4.1908" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6fe8 code=0x7ffc0000 [ 149.896562][ T40] audit: type=1326 audit(1776957290.861:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.4.1908" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6fe8 code=0x7ffc0000 [ 150.779696][ T915] IPVS: starting estimator thread 0... [ 150.781815][T10436] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.1928'. [ 150.847073][T10434] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 150.849149][T10434] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.861375][T10434] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.864053][T10434] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 150.881317][T10435] IPVS: using max 28 ests per chain, 67200 per kthread [ 150.884838][T10447] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1926'. [ 151.039299][T10460] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1933'. [ 151.272343][T10472] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 151.274773][T10472] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.277046][T10472] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 151.279236][T10472] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.365464][T10483] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 151.369316][T10483] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 151.375350][T10483] overlayfs: failed to set uuid (534/file0, err=-13); falling back to uuid=null. [ 152.156082][ T6023] kernel write not supported for file /uinput (pid: 6023 comm: kworker/1:3) [ 152.601914][T10539] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 152.651550][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 152.715542][T10542] loop4: detected capacity change from 0 to 524287936 [ 153.022916][ T5982] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 153.172309][T10562] block nbd0: server does not support multiple connections per device. [ 153.179517][T10562] block nbd0: shutting down sockets [ 153.352396][ T5982] Bluetooth: hci1: command 0x0419 tx timeout [ 153.352707][ T5978] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.354807][ T5982] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.356998][ T5979] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.684474][T10594] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1993'. [ 154.349919][T10649] netlink: 'syz.3.2015': attribute type 10 has an invalid length. [ 154.352837][T10649] batman_adv: batadv0: Interface deactivated: dummy0 [ 154.354955][T10649] batman_adv: batadv0: Removing interface: dummy0 [ 154.710611][T10674] erspan0: entered promiscuous mode [ 154.816235][T10691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2035'. [ 155.320354][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2047'. [ 155.399989][T10721] tap0: tun_chr_ioctl cmd 1074025672 [ 155.402400][T10721] tap0: ignored: set checksum disabled [ 156.590388][T10796] netlink: 'syz.1.2080': attribute type 4 has an invalid length. [ 156.855697][ T1219] Bluetooth: hci4: Frame reassembly failed (-84) [ 156.881632][ T1160] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 156.982305][T10818] syz_tun: entered allmulticast mode [ 156.986060][T10816] syz_tun: left allmulticast mode [ 157.241469][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 157.244569][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'. [ 157.247897][T10824] netlink: 'syz.1.2094': attribute type 13 has an invalid length. [ 157.250705][T10824] netlink: 'syz.1.2094': attribute type 11 has an invalid length. [ 157.800989][ T6023] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 157.950942][ T6023] usb 9-1: Using ep0 maxpacket: 8 [ 157.955258][ T6023] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 157.958536][ T6023] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 157.964104][ T6023] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 157.969365][ T6023] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.974526][ T6023] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.979977][ T6023] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.987591][ T6023] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 157.994073][ T6023] usb 9-1: config 168 interface 0 has no altsetting 0 [ 157.998123][ T6023] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 158.002524][ T6023] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 158.007536][ T6023] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.013791][ T6023] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.018928][ T6023] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.024354][ T6023] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.030359][ T6023] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 158.036577][ T6023] usb 9-1: config 168 interface 0 has no altsetting 0 [ 158.041672][ T6023] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 158.044909][ T6023] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 158.049660][ T6023] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.055443][ T6023] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.060538][ T6023] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.065602][ T6023] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.071050][ T6023] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 158.077279][ T6023] usb 9-1: config 168 interface 0 has no altsetting 0 [ 158.084800][ T6023] usb 9-1: string descriptor 0 read error: -22 [ 158.087617][ T6023] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 158.090667][ T6023] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.102973][ T6023] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 158.509548][ T6023] usb 9-1: USB disconnect, device number 5 [ 158.545605][ T8561] kernel write not supported for file /uinput (pid: 8561 comm: kworker/1:4) [ 158.861830][ T5978] Bluetooth: hci4: command 0x1003 tx timeout [ 158.862728][ T5979] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 159.047033][T10883] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 159.050560][T10883] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 159.289635][ T6023] hid_parser_main: 6 callbacks suppressed [ 159.289651][ T6023] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 159.295233][ T6023] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 159.298218][ T6023] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 159.300600][ T6023] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 159.304311][ T6023] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 159.306798][ T6023] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 159.309115][ T6023] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 159.312159][ T6023] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 159.314798][ T6023] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 159.324084][ T6023] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 159.333274][ T6023] hid-generic 0103:0004:0000.0004: hidraw1: HID v0.02 Device [syz1] on syz1 [ 159.545362][T10930] batadv_slave_0: entered promiscuous mode [ 159.548294][T10929] batadv_slave_0: left promiscuous mode [ 159.586292][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 159.590555][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 159.675379][T10947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2150'. [ 160.606305][ T39] IPVS: starting estimator thread 0... [ 160.712833][T10967] IPVS: using max 44 ests per chain, 105600 per kthread [ 161.098790][T10986] kernel read not supported for file /:){{:, (pid: 10986 comm: syz.1.2166) [ 161.102764][ T40] kauditd_printk_skb: 241 callbacks suppressed [ 161.102774][ T40] audit: type=1800 audit(1776957308.167:333): pid=10986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2166" name=":){{:," dev="mqueue" ino=39280 res=0 errno=0 [ 161.401012][ T5983] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 161.445870][T11000] debugfs: 'ttyS3' already exists in 'caif_serial' [ 161.551757][ T5983] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 161.555842][ T5983] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.558822][ T5983] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.565645][ T5983] usb 9-1: config 0 interface 0 has no altsetting 0 [ 161.569260][ T5983] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.572983][ T5983] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.576419][ T5983] usb 9-1: config 0 interface 0 has no altsetting 0 [ 161.579260][ T5983] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.584691][ T5983] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.588693][ T5983] usb 9-1: config 0 interface 0 has no altsetting 0 [ 161.593369][ T5983] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.596253][ T5983] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.599650][ T5983] usb 9-1: config 0 interface 0 has no altsetting 0 [ 161.603066][ T5983] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.605874][ T5983] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.610252][ T5983] usb 9-1: config 0 interface 0 has no altsetting 0 [ 161.614175][ T5983] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.617324][ T5983] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.621094][ T5983] usb 9-1: config 0 interface 0 has no altsetting 0 [ 161.623944][ T5983] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.626906][ T5983] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.630254][ T5983] usb 9-1: config 0 interface 0 has no altsetting 0 [ 161.633964][ T5983] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.637184][ T5983] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.641347][ T5983] usb 9-1: config 0 interface 0 has no altsetting 0 [ 161.645113][ T5983] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 161.648063][ T5983] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 161.651239][ T5983] usb 9-1: Product: syz [ 161.652752][ T5983] usb 9-1: Manufacturer: syz [ 161.654653][ T5983] usb 9-1: SerialNumber: syz [ 161.658785][ T5983] usb 9-1: config 0 descriptor?? [ 161.672253][ T5983] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 161.934153][ C3] usb 9-1: yurex_control_callback - control failed: -71 [ 161.935577][ T6057] usb 9-1: USB disconnect, device number 6 [ 161.947532][ T6057] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 162.729546][T11051] (syz.3.2190,11051,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 162.782116][T11057] veth1_to_bond: entered allmulticast mode [ 162.794265][T11057] veth1_to_bond: left allmulticast mode [ 162.837317][ T40] audit: type=1326 audit(1776957309.897:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.1.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 162.845960][ T40] audit: type=1326 audit(1776957309.897:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.1.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 162.855940][ T40] audit: type=1326 audit(1776957309.897:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.1.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 162.871806][ T40] audit: type=1326 audit(1776957309.897:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.1.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 162.882133][ T40] audit: type=1326 audit(1776957309.917:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.1.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 162.893737][ T40] audit: type=1326 audit(1776957309.917:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.1.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 162.902852][ T40] audit: type=1326 audit(1776957309.917:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.1.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 162.913629][ T40] audit: type=1326 audit(1776957309.917:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.1.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 162.926193][ T40] audit: type=1326 audit(1776957309.917:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.1.2197" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 163.091652][T11087] netem: unknown loss type 0 [ 163.093715][T11087] netem: change failed [ 163.386222][T11124] binder: 11122:11124 ioctl c0306201 0 returned -14 [ 163.702003][T11150] sp0: Synchronizing with TNC [ 163.715279][T11152] macvlan2: entered promiscuous mode [ 163.718194][T11152] bridge0: entered promiscuous mode [ 164.241026][ T4174] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 164.395348][ T4174] usb 8-1: config 0 has no interfaces? [ 164.397928][ T4174] usb 8-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 164.402405][ T4174] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.408596][ T4174] usb 8-1: config 0 descriptor?? [ 164.479888][ T6023] kernel write not supported for file /amidi2 (pid: 6023 comm: kworker/1:3) [ 164.566634][T11188] loop5: detected capacity change from 0 to 7 [ 164.633463][ T24] usb 8-1: USB disconnect, device number 6 [ 164.740096][T11188] Dev loop5: unable to read RDB block 7 [ 164.742573][T11188] loop5: unable to read partition table [ 164.744849][T11188] loop5: partition table beyond EOD, truncated [ 164.747295][T11188] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 166.125511][T11257] input: syz1 as /devices/virtual/input/input17 [ 166.771451][ T5979] Bluetooth: hci2: ISO packet too small [ 166.890997][T11306] erspan0: entered promiscuous mode [ 166.959500][T11312] loop5: detected capacity change from 0 to 7 [ 167.012445][ T5334] blk_print_req_error: 11 callbacks suppressed [ 167.012461][ T5334] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.019583][ T5334] buffer_io_error: 11 callbacks suppressed [ 167.019594][ T5334] Buffer I/O error on dev loop5, logical block 0, async page read [ 167.025625][T11312] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.030721][T11312] Buffer I/O error on dev loop5, logical block 0, async page read [ 167.034289][T11312] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.038308][T11312] Buffer I/O error on dev loop5, logical block 0, async page read [ 167.043063][T11312] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.046778][T11312] Buffer I/O error on dev loop5, logical block 0, async page read [ 167.049571][T11312] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.053121][T11312] Buffer I/O error on dev loop5, logical block 0, async page read [ 167.055912][T11312] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.059003][T11312] Buffer I/O error on dev loop5, logical block 0, async page read [ 167.062305][T11312] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.073558][T11312] Buffer I/O error on dev loop5, logical block 0, async page read [ 167.077210][T11312] ldm_validate_partition_table(): Disk read failed. [ 167.080451][T11312] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.083736][T11312] Buffer I/O error on dev loop5, logical block 0, async page read [ 167.086270][T11312] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.089133][T11312] Buffer I/O error on dev loop5, logical block 0, async page read [ 167.092509][T11312] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.096550][T11312] Buffer I/O error on dev loop5, logical block 0, async page read [ 167.102001][T11312] Dev loop5: unable to read RDB block 0 [ 167.103950][T11312] loop5: unable to read partition table [ 167.105817][T11312] loop5: partition table beyond EOD, truncated [ 167.107819][T11312] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 168.785038][T11366] input: syz1 as /devices/virtual/input/input18 [ 168.900920][ T4174] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 169.053457][ T4174] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.057606][ T4174] usb 8-1: config 0 has no interface number 0 [ 169.060557][ T4174] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 169.065441][ T4174] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 169.069923][ T4174] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.074073][ T4174] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.081402][ T4174] usb 8-1: config 0 descriptor?? [ 169.084733][T11361] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.094632][ T4174] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 169.296625][ T6023] usb 8-1: USB disconnect, device number 7 [ 169.474079][T11380] input: syz0 as /devices/virtual/input/input19 [ 169.534277][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2340'. [ 169.590269][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2344'. [ 169.596038][T11391] hsr_slave_0: left promiscuous mode [ 169.600290][T11391] hsr_slave_1: left promiscuous mode [ 169.859759][T11408] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2351'. [ 169.971220][ T53] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 170.121169][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 170.125683][ T53] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 170.129920][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.138651][ T53] pvrusb2: Hardware description: Terratec Grabster AV400 [ 170.144363][ T53] pvrusb2: ********** [ 170.151178][ T53] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 170.158148][ T53] pvrusb2: Important functionality might not be entirely working. [ 170.163436][ T53] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 170.168534][ T53] pvrusb2: ********** [ 170.346303][ T2508] pvrusb2: Invalid write control endpoint [ 170.379807][ T2508] pvrusb2: Invalid write control endpoint [ 170.385968][ T2508] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 170.390449][ T2508] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 170.396226][ T2508] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 170.400139][ T2508] pvrusb2: Device being rendered inoperable [ 170.407926][ T2508] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 170.411403][ T2508] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 170.416303][ T2508] pvrusb2: Attached sub-driver cx25840 [ 170.418150][ T2508] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 170.422953][ T2508] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 170.546745][T11400] pvrusb2: Attempted to execute control transfer when device not ok [ 170.552577][ T39] usb 9-1: USB disconnect, device number 7 [ 171.116519][T11450] tun0: tun_chr_ioctl cmd 1074025675 [ 171.118290][T11450] tun0: persist disabled [ 171.652635][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 171.759055][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2382'. [ 171.803858][ T24] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 171.810124][ T24] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 171.814420][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.817577][ T24] usb 9-1: Product: syz [ 171.819392][ T24] usb 9-1: Manufacturer: syz [ 171.822128][ T24] usb 9-1: SerialNumber: syz [ 171.832771][T11452] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.835276][T11452] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.960562][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2388'. [ 171.966633][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2388'. [ 172.045368][ T5983] usb 9-1: USB disconnect, device number 8 [ 172.128281][T11498] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 173.578997][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2422'. [ 173.593429][T11561] block nbd0: Unsupported socket: should be TCP or UNIX. [ 173.663642][T11568] tun0: tun_chr_ioctl cmd 1074025675 [ 173.666139][T11568] tun0: persist disabled [ 173.766511][T11576] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2430'. [ 173.773272][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.777789][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.582739][T11613] program syz.4.2448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.090936][ T8561] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 175.251141][ T8561] usb 8-1: Using ep0 maxpacket: 32 [ 175.255283][ T8561] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 175.258896][ T8561] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 175.265349][ T8561] usb 8-1: string descriptor 0 read error: -22 [ 175.268128][ T8561] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 175.272083][ T8561] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.279003][T11642] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.285834][ T8561] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 175.288704][ T8561] usb 8-1: MIDIStreaming interface descriptor not found [ 175.494464][ T8561] usb 8-1: USB disconnect, device number 8 [ 176.017911][T11681] debugfs: 'ttyS3' already exists in 'caif_serial' [ 176.200917][ T53] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 176.350899][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 176.355410][ T53] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 176.358513][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.372042][ T53] pvrusb2: Hardware description: Terratec Grabster AV400 [ 176.374789][ T53] pvrusb2: ********** [ 176.376287][ T53] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 176.379619][ T53] pvrusb2: Important functionality might not be entirely working. [ 176.388695][ T53] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 176.394498][ T53] pvrusb2: ********** [ 176.577725][ T2508] pvrusb2: Invalid write control endpoint [ 176.612762][ T2508] pvrusb2: Invalid write control endpoint [ 176.615953][ T2508] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 176.618929][ T2508] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 176.621651][ T2508] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 176.625221][ T2508] pvrusb2: Device being rendered inoperable [ 176.627262][ T2508] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 176.629841][ T2508] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 176.634031][ T2508] pvrusb2: Attached sub-driver cx25840 [ 176.636770][ T2508] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 176.640061][ T2508] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 176.778548][T11679] pvrusb2: Killing an I2C write to 2 that is too large (desired=62 limit=61) [ 176.785943][ T4174] usb 6-1: USB disconnect, device number 7 [ 177.260959][ T4174] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 177.433009][ T4174] usb 8-1: config 0 has no interfaces? [ 177.437473][ T4174] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 177.441450][ T4174] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.445178][ T4174] usb 8-1: Product: syz [ 177.447330][ T4174] usb 8-1: Manufacturer: syz [ 177.449628][ T4174] usb 8-1: SerialNumber: syz [ 177.459526][ T4174] usb 8-1: config 0 descriptor?? [ 177.675904][ T9] usb 8-1: USB disconnect, device number 9 [ 178.046215][T11792] mkiss: ax0: crc mode is auto. [ 178.320177][T11806] sp0: Synchronizing with TNC [ 179.338071][T11876] mkiss: ax0: crc mode is auto. [ 179.436775][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2564'. [ 179.557311][ T8561] kernel read not supported for file /rfkill (pid: 8561 comm: kworker/1:4) [ 179.965535][T11926] netlink: 62967 bytes leftover after parsing attributes in process `syz.3.2582'. [ 180.034677][T11929] sp0: Synchronizing with TNC [ 181.624837][T11996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2616'. [ 182.473919][T12055] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 182.674836][T12066] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2648'. [ 182.757521][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2651'. [ 183.009439][ T40] audit: type=1326 audit(1776957330.067:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12083 comm="syz.1.2656" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34fe8 code=0x7ffc0000 [ 183.018720][ T40] audit: type=1326 audit(1776957330.067:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12083 comm="syz.1.2656" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 183.029664][ T40] audit: type=1326 audit(1776957330.067:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12083 comm="syz.1.2656" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34fe8 code=0x7ffc0000 [ 183.043710][ T40] audit: type=1326 audit(1776957330.067:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12083 comm="syz.1.2656" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 183.054054][ T40] audit: type=1326 audit(1776957330.067:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12083 comm="syz.1.2656" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 183.062923][ T40] audit: type=1326 audit(1776957330.067:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12083 comm="syz.1.2656" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 183.072314][ T40] audit: type=1326 audit(1776957330.067:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12083 comm="syz.1.2656" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34fe8 code=0x7ffc0000 [ 183.083059][ T40] audit: type=1326 audit(1776957330.067:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12083 comm="syz.1.2656" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34fe8 code=0x7ffc0000 [ 183.092199][ T40] audit: type=1326 audit(1776957330.067:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12083 comm="syz.1.2656" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34fe8 code=0x7ffc0000 [ 183.129912][ T40] audit: type=1326 audit(1776957330.067:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12083 comm="syz.1.2656" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f34fe8 code=0x7ffc0000 [ 183.163540][T12102] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 183.169820][T12102] batadv_slave_0: entered promiscuous mode [ 183.173336][T12102] batadv_slave_0: left promiscuous mode [ 183.177047][T12102] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 183.331863][ T53] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 183.490957][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 183.495434][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 183.502926][ T53] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 183.514382][ T53] usb 6-1: string descriptor 0 read error: -22 [ 183.518366][ T53] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 183.530861][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.562044][T12095] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.574689][ T53] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.576288][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2671'. [ 183.577957][ T53] usb 6-1: MIDIStreaming interface descriptor not found [ 183.676991][ T5979] Bluetooth: hci1: Malformed LE Event: 0x0b [ 183.786739][ T53] usb 6-1: USB disconnect, device number 8 [ 184.162817][T12152] binder: Binderfs stats mode cannot be changed during a remount [ 185.483813][T12231] batman_adv: batadv0: Adding interface: ipvlan2 [ 185.486135][T12231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.490453][T12231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.497312][T12231] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 186.365512][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/2:0) [ 186.634726][T12264] input: syz1 as /devices/virtual/input/input20 [ 186.797503][T12276] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 187.400000][T12316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2765'. [ 187.403858][ T53] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 187.564483][ T53] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 187.570852][ T53] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.574949][ T53] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 187.578569][ T53] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.585859][ T53] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 187.589991][ T53] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 187.594380][ T53] usb 9-1: Product: syz [ 187.596088][ T53] usb 9-1: Manufacturer: syz [ 187.609448][ T53] cdc_wdm 9-1:1.0: skipping garbage [ 187.612049][ T53] cdc_wdm 9-1:1.0: skipping garbage [ 187.624218][ T53] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 187.626682][ T53] cdc_wdm 9-1:1.0: Unknown control protocol [ 187.838668][T12339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.843073][T12339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.845270][T12339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.847421][T12339] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.812090][T12363] team0: No ports can be present during mode change [ 188.929758][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2792'. [ 189.129899][T12388] loop9: detected capacity change from 0 to 8 [ 189.135508][T12388] Dev loop9: unable to read RDB block 8 [ 189.137696][T12388] loop9: unable to read partition table [ 189.140153][T12388] loop9: partition table beyond EOD, truncated [ 189.143709][T12388] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 189.173319][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'. [ 189.274463][T12402] loop7: detected capacity change from 0 to 7 [ 189.327517][T12402] Dev loop7: unable to read RDB block 7 [ 189.330253][T12402] loop7: unable to read partition table [ 189.335501][T12402] loop7: partition table beyond EOD, truncated [ 189.340416][T12402] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 189.433729][T12411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2808'. [ 189.436880][T12411] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2808'. [ 189.820939][ T5979] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.900994][ T5978] Bluetooth: hci1: command 0x0419 tx timeout [ 189.901217][ T5982] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.904730][ T5979] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.117516][ T40] kauditd_printk_skb: 191 callbacks suppressed [ 190.117530][ T40] audit: type=1326 audit(1776957337.177:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 190.127657][ T40] audit: type=1326 audit(1776957337.187:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 190.137854][ T40] audit: type=1326 audit(1776957337.187:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 190.146765][ T40] audit: type=1326 audit(1776957337.187:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 190.153754][ T40] audit: type=1326 audit(1776957337.187:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 190.159676][T12459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2828'. [ 190.162117][ T40] audit: type=1326 audit(1776957337.187:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fcc code=0x7ffc0000 [ 190.176882][T12459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2828'. [ 190.181543][ T6023] usb 9-1: USB disconnect, device number 9 [ 190.242355][T12463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2832'. [ 190.245414][T12463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2832'. [ 190.253855][T12463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2832'. [ 190.283656][T12468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.294069][T12468] bond0: (slave bond1): Enslaving as an active interface with an up link [ 190.326054][T12469] bond1 (unregistering): Released all slaves [ 191.093409][T12530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.096632][T12530] IPv6: NLM_F_CREATE should be set when creating new route [ 191.393762][ T9] kernel write not supported for file /radio5 (pid: 9 comm: kworker/0:0) [ 191.490461][ T40] audit: type=1800 audit(1776957338.547:550): pid=12556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2872" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 192.270928][ T53] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 192.422347][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.425458][ T53] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 192.428747][ T53] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.436655][ T53] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 192.440476][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 192.444302][ T53] usb 6-1: Product: syz [ 192.446144][ T53] usb 6-1: Manufacturer: syz [ 192.448133][ T53] usb 6-1: SerialNumber: syz [ 192.470862][ T5978] Bluetooth: hci4: command 0x1003 tx timeout [ 192.471093][ T5979] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 192.661374][ T53] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 192.865787][ T53] usb 6-1: USB disconnect, device number 9 [ 192.879961][ T53] usblp0: removed [ 194.280940][ T24] kernel read not supported for file /dsp1 (pid: 24 comm: kworker/2:0) [ 194.511271][T12654] sctp: [Deprecated]: syz.3.2918 (pid 12654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.511271][T12654] Use struct sctp_sack_info instead [ 194.881403][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 195.041255][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 195.046409][ T5979] Bluetooth: hci0: Malformed LE Event: 0x0b [ 195.161371][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 195.582261][ T1268] ref_tracker: reference already released. [ 195.585199][ T1268] ref_tracker: allocated in: [ 195.587223][ T1268] netdev_watchdog_up+0x183/0x210 [ 195.589444][ T1268] netif_carrier_on+0xfc/0x120 [ 195.591767][ T1268] e1000_watchdog.cold+0x2a3/0x449 [ 195.594081][ T1268] process_one_work+0xa0e/0x1980 [ 195.596407][ T1268] worker_thread+0x5ef/0xe50 [ 195.598733][ T1268] kthread+0x370/0x450 [ 195.601127][ T1268] ret_from_fork+0x72b/0xd50 [ 195.603214][ T1268] ret_from_fork_asm+0x1a/0x30 [ 195.605356][ T1268] ref_tracker: freed in: [ 195.607303][ T1268] dev_deactivate_many+0x293/0xff0 [ 195.609310][ T1268] dev_deactivate+0x109/0x1d0 [ 195.611120][ T1268] linkwatch_do_dev+0xd3/0x120 [ 195.613126][ T1268] __linkwatch_run_queue+0x3a9/0x900 [ 195.615252][ T1268] linkwatch_event+0x8f/0xc0 [ 195.617446][ T1268] process_one_work+0xa0e/0x1980 [ 195.619731][ T1268] worker_thread+0x5ef/0xe50 [ 195.621630][ T1268] kthread+0x370/0x450 [ 195.622985][ T1268] ret_from_fork+0x72b/0xd50 [ 195.624826][ T1268] ret_from_fork_asm+0x1a/0x30 [ 195.627981][ T1268] ------------[ cut here ]------------ [ 195.631412][ T1268] 1 [ 195.631424][ T1268] WARNING: lib/ref_tracker.c:322 at ref_tracker_free.cold+0x116/0x154, CPU#1: kworker/u32:10/1268 [ 195.636498][ T1268] Modules linked in: [ 195.638588][ T1268] CPU: 1 UID: 0 PID: 1268 Comm: kworker/u32:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.642745][ T1268] Tainted: [L]=SOFTLOCKUP [ 195.644164][ T1268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.647488][ T1268] Workqueue: events_unbound linkwatch_event [ 195.649435][ T1268] RIP: 0010:ref_tracker_free.cold+0x116/0x154 [ 195.651562][ T1268] Code: 48 c1 e0 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 4e 8b 7b 18 e8 e6 f6 f4 03 e8 71 54 d1 00 48 8b 34 24 48 89 ef e8 f5 7d 63 0a 90 <0f> 0b 90 bb ea ff ff ff e9 00 21 f5 03 4c 89 f7 e8 7f 17 3e 01 e9 [ 195.657972][ T1268] RSP: 0000:ffffc90006a17880 EFLAGS: 00010202 [ 195.660293][ T1268] RAX: 0000000000000201 RBX: ffff888023aaf880 RCX: 0000000000000000 [ 195.663778][ T1268] RDX: 0000000000000202 RSI: ffffffff8df55422 RDI: 0000000000000001 [ 195.666517][ T1268] RBP: ffff888028e74620 R08: 0000000000000001 R09: 0000000000000000 [ 195.669053][ T1268] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000d42f12 [ 195.671725][ T1268] R13: ffffc90006a178b0 R14: ffff888023aaf898 R15: 0000000003b40432 [ 195.674159][ T1268] FS: 0000000000000000(0000) GS:ffff8880971e2000(0000) knlGS:0000000000000000 [ 195.676920][ T1268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.679018][ T1268] CR2: 0000000031511ff8 CR3: 0000000059e62000 CR4: 0000000000352ef0 [ 195.681804][ T1268] Call Trace: [ 195.682864][ T1268] [ 195.683840][ T1268] ? __pfx_ref_tracker_free+0x10/0x10 [ 195.685702][ T1268] ? dev_deactivate_many+0x293/0xff0 [ 195.687516][ T1268] ? dev_deactivate+0x109/0x1d0 [ 195.689329][ T1268] ? linkwatch_do_dev+0xd3/0x120 [ 195.691206][ T1268] ? __linkwatch_run_queue+0x3a9/0x900 [ 195.693037][ T1268] ? linkwatch_event+0x8f/0xc0 [ 195.694610][ T1268] ? process_one_work+0xa0e/0x1980 [ 195.696252][ T1268] ? worker_thread+0x5ef/0xe50 [ 195.697765][ T1268] ? kthread+0x370/0x450 [ 195.699135][ T1268] ? ret_from_fork+0x72b/0xd50 [ 195.700820][ T1268] ? ret_from_fork_asm+0x1a/0x30 [ 195.702602][ T1268] ? netif_freeze_queues+0x183/0x1f0 [ 195.704772][ T1268] dev_deactivate_many+0x293/0xff0 [ 195.706570][ T1268] ? kfree+0x141/0x6c0 [ 195.708041][ T1268] ? __pfx_dev_deactivate_many+0x10/0x10 [ 195.709898][ T1268] ? ref_tracker_free+0x37e/0x6c0 [ 195.711617][ T1268] ? __pfx_ref_tracker_free+0x10/0x10 [ 195.713711][ T1268] dev_deactivate+0x109/0x1d0 [ 195.715236][ T1268] ? __pfx_dev_deactivate+0x10/0x10 [ 195.716926][ T1268] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 195.718859][ T1268] linkwatch_do_dev+0xd3/0x120 [ 195.720544][ T1268] __linkwatch_run_queue+0x3a9/0x900 [ 195.722424][ T1268] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 195.724337][ T1268] linkwatch_event+0x8f/0xc0 [ 195.725844][ T1268] ? __pfx_linkwatch_event+0x10/0x10 [ 195.727549][ T1268] ? rcu_is_watching+0x12/0xc0 [ 195.729158][ T1268] process_one_work+0xa0e/0x1980 [ 195.731014][ T1268] ? __pfx_process_one_work+0x10/0x10 [ 195.732892][ T1268] ? __pfx_linkwatch_event+0x10/0x10 [ 195.734626][ T1268] worker_thread+0x5ef/0xe50 [ 195.736268][ T1268] ? __pfx_worker_thread+0x10/0x10 [ 195.737964][ T1268] ? kthread+0x13a/0x450 [ 195.739383][ T1268] ? __pfx_worker_thread+0x10/0x10 [ 195.741290][ T1268] kthread+0x370/0x450 [ 195.742874][ T1268] ? __pfx_kthread+0x10/0x10 [ 195.744560][ T1268] ret_from_fork+0x72b/0xd50 [ 195.746212][ T1268] ? __pfx_ret_from_fork+0x10/0x10 [ 195.748001][ T1268] ? __switch_to+0x800/0x1100 [ 195.749638][ T1268] ? __pfx_kthread+0x10/0x10 [ 195.751264][ T1268] ret_from_fork_asm+0x1a/0x30 [ 195.752862][ T1268] [ 195.753871][ T1268] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 195.756244][ T1268] CPU: 1 UID: 0 PID: 1268 Comm: kworker/u32:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.760084][ T1268] Tainted: [L]=SOFTLOCKUP [ 195.761805][ T1268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.765297][ T1268] Workqueue: events_unbound linkwatch_event [ 195.767178][ T1268] Call Trace: [ 195.768268][ T1268] [ 195.769365][ T1268] dump_stack_lvl+0x100/0x190 [ 195.770910][ T1268] vpanic+0x552/0x970 [ 195.772267][ T1268] ? __pfx_vpanic+0x10/0x10 [ 195.773966][ T1268] panic+0xd1/0xe0 [ 195.775454][ T1268] ? __pfx_panic+0x10/0x10 [ 195.777468][ T1268] ? check_panic_on_warn+0x1f/0x90 [ 195.779594][ T1268] check_panic_on_warn.cold+0x19/0x34 [ 195.781406][ T1268] ? ref_tracker_free.cold+0x116/0x154 [ 195.783164][ T1268] __warn.cold+0x191/0x328 [ 195.784797][ T1268] __report_bug+0x296/0x3d0 [ 195.786207][ T1268] ? ref_tracker_free.cold+0x116/0x154 [ 195.788089][ T1268] ? __pfx___report_bug+0x10/0x10 [ 195.789747][ T1268] ? __pfx_clockevents_program_event+0x10/0x10 [ 195.792009][ T1268] ? find_held_lock+0x2b/0x80 [ 195.793744][ T1268] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 195.796013][ T1268] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 195.798289][ T1268] ? ref_tracker_free.cold+0x116/0x154 [ 195.800188][ T1268] report_bug+0xb2/0x220 [ 195.801603][ T1268] ? ref_tracker_free.cold+0x116/0x154 [ 195.803377][ T1268] handle_bug+0x16a/0x2a0 [ 195.804809][ T1268] exc_invalid_op+0x17/0x50 [ 195.806278][ T1268] asm_exc_invalid_op+0x1a/0x20 [ 195.807868][ T1268] RIP: 0010:ref_tracker_free.cold+0x116/0x154 [ 195.809887][ T1268] Code: 48 c1 e0 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 4e 8b 7b 18 e8 e6 f6 f4 03 e8 71 54 d1 00 48 8b 34 24 48 89 ef e8 f5 7d 63 0a 90 <0f> 0b 90 bb ea ff ff ff e9 00 21 f5 03 4c 89 f7 e8 7f 17 3e 01 e9 [ 195.817045][ T1268] RSP: 0000:ffffc90006a17880 EFLAGS: 00010202 [ 195.819003][ T1268] RAX: 0000000000000201 RBX: ffff888023aaf880 RCX: 0000000000000000 [ 195.821561][ T1268] RDX: 0000000000000202 RSI: ffffffff8df55422 RDI: 0000000000000001 [ 195.824106][ T1268] RBP: ffff888028e74620 R08: 0000000000000001 R09: 0000000000000000 [ 195.826630][ T1268] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000d42f12 [ 195.829174][ T1268] R13: ffffc90006a178b0 R14: ffff888023aaf898 R15: 0000000003b40432 [ 195.831834][ T1268] ? __pfx_ref_tracker_free+0x10/0x10 [ 195.833559][ T1268] ? dev_deactivate_many+0x293/0xff0 [ 195.835275][ T1268] ? dev_deactivate+0x109/0x1d0 [ 195.837044][ T1268] ? linkwatch_do_dev+0xd3/0x120 [ 195.838944][ T1268] ? __linkwatch_run_queue+0x3a9/0x900 [ 195.840926][ T1268] ? linkwatch_event+0x8f/0xc0 [ 195.842530][ T1268] ? process_one_work+0xa0e/0x1980 [ 195.844480][ T1268] ? worker_thread+0x5ef/0xe50 [ 195.846038][ T1268] ? kthread+0x370/0x450 [ 195.847421][ T1268] ? ret_from_fork+0x72b/0xd50 [ 195.848987][ T1268] ? ret_from_fork_asm+0x1a/0x30 [ 195.850621][ T1268] ? netif_freeze_queues+0x183/0x1f0 [ 195.852588][ T1268] dev_deactivate_many+0x293/0xff0 [ 195.854436][ T1268] ? kfree+0x141/0x6c0 [ 195.855931][ T1268] ? __pfx_dev_deactivate_many+0x10/0x10 [ 195.857915][ T1268] ? ref_tracker_free+0x37e/0x6c0 [ 195.859568][ T1268] ? __pfx_ref_tracker_free+0x10/0x10 [ 195.861331][ T1268] dev_deactivate+0x109/0x1d0 [ 195.862989][ T1268] ? __pfx_dev_deactivate+0x10/0x10 [ 195.864763][ T1268] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 195.866673][ T1268] linkwatch_do_dev+0xd3/0x120 [ 195.868238][ T1268] __linkwatch_run_queue+0x3a9/0x900 [ 195.869981][ T1268] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 195.872037][ T1268] linkwatch_event+0x8f/0xc0 [ 195.873745][ T1268] ? __pfx_linkwatch_event+0x10/0x10 [ 195.875729][ T1268] ? rcu_is_watching+0x12/0xc0 [ 195.877597][ T1268] process_one_work+0xa0e/0x1980 [ 195.879265][ T1268] ? __pfx_process_one_work+0x10/0x10 [ 195.881007][ T1268] ? __pfx_linkwatch_event+0x10/0x10 [ 195.882703][ T1268] worker_thread+0x5ef/0xe50 [ 195.884219][ T1268] ? __pfx_worker_thread+0x10/0x10 [ 195.885940][ T1268] ? kthread+0x13a/0x450 [ 195.887316][ T1268] ? __pfx_worker_thread+0x10/0x10 [ 195.889053][ T1268] kthread+0x370/0x450 [ 195.890555][ T1268] ? __pfx_kthread+0x10/0x10 [ 195.892289][ T1268] ret_from_fork+0x72b/0xd50 [ 195.894128][ T1268] ? __pfx_ret_from_fork+0x10/0x10 [ 195.895981][ T1268] ? __switch_to+0x800/0x1100 [ 195.897847][ T1268] ? __pfx_kthread+0x10/0x10 [ 195.899408][ T1268] ret_from_fork_asm+0x1a/0x30 [ 195.901116][ T1268] [ 195.903051][ T1268] Kernel Offset: disabled [ 195.904503][ T1268] Rebooting in 86400 seconds..