last executing test programs: 8m27.366827601s ago: executing program 32 (id=1848): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r1, r0, &(0x7f00000001c0)=0x1, 0x8) 7m11.287150229s ago: executing program 33 (id=2885): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000380)={0xfbff, 0x0, 0x5, 0x3, r1}, 0x10) 6m30.094889027s ago: executing program 34 (id=3965): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket(0x22, 0x2, 0x4) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000100), 0x4) 4m55.597093676s ago: executing program 6 (id=4979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x19, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x2, 0x9, 0xe2e, 0x4, 0x0, 0x7, 0x1, 0x3b]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x64]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) 4m55.373200624s ago: executing program 6 (id=4973): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0x4) 4m55.013284712s ago: executing program 6 (id=4974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x183503, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x8000000000000001}) 4m52.067164949s ago: executing program 6 (id=4977): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x43, 0xb9) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0xc300, 0x16) 4m51.801770715s ago: executing program 6 (id=4988): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r0 = syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x541}, 0x1}) io_uring_enter(r0, 0xf, 0x7929, 0x1, 0x0, 0x0) 4m45.977638543s ago: executing program 6 (id=4982): madvise(&(0x7f00002e3000/0x1000)=nil, 0x1000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x48020100, 0x0, 0x0, 0x0, 0x0, 0x0) 4m35.019788052s ago: executing program 2 (id=5021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 4m34.997307267s ago: executing program 2 (id=5022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) 4m34.990895239s ago: executing program 2 (id=5023): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) close(0x3) 4m34.990422268s ago: executing program 2 (id=5024): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000000}) 4m33.768298644s ago: executing program 0 (id=5028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x40, r1, 0x1, 0xfffffffc, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m33.761645072s ago: executing program 0 (id=5030): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1, 0xfffffffffffffffc]}}) 4m33.74885964s ago: executing program 0 (id=5031): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4m33.736863494s ago: executing program 0 (id=5032): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 4m33.642101232s ago: executing program 0 (id=5034): r0 = epoll_create1(0x80000) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x60000007}) 4m33.37449376s ago: executing program 5 (id=5039): syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4m33.27364815s ago: executing program 0 (id=5040): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 4m32.329389512s ago: executing program 5 (id=5041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000480)={@random="cd82bd76a4a4", @local, @void, {@llc={0x8864, {@llc={0xfc, 0xfe, '%'}}}}}, 0x0) 4m32.235550785s ago: executing program 5 (id=5042): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 4m32.231531152s ago: executing program 5 (id=5043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x6d, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x37, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08a565c9a41d416c"}]}}}}}}, 0x0) 4m32.010168838s ago: executing program 5 (id=5044): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x43) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x800e, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc179fd2f8dda1af1ea89de2b7fb0a0100000000000000000300000000000004000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd49900", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0xfffffffffffffffe, 0x8b]}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x592) 4m32.010022564s ago: executing program 2 (id=5045): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 4m31.93307567s ago: executing program 5 (id=5046): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xffff8001) 4m22.616278744s ago: executing program 2 (id=5047): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x11, &(0x7f0000004100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m21.524587834s ago: executing program 35 (id=4982): madvise(&(0x7f00002e3000/0x1000)=nil, 0x1000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x48020100, 0x0, 0x0, 0x0, 0x0, 0x0) 4m12.960074313s ago: executing program 36 (id=5040): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 4m12.856010849s ago: executing program 37 (id=5046): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xffff8001) 4m12.628688733s ago: executing program 38 (id=5047): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x11, &(0x7f0000004100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m25.759531095s ago: executing program 7 (id=5110): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)="37ef", 0xff1b) syz_usb_disconnect(r0) 3m23.090391062s ago: executing program 7 (id=5121): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x88, 0xfffffff2, 0x6, 0xfaa, 0x800, 0x588, 0x3ff, 0x4, 0xa0, 0x0, 0x9, 0x3, 0x2, 0x51, 0x7, 0xe, 0x8, 0xfffff3d2, 0x100, 0x9, 0x2, 0xffff, 0xffff, 0x0, 0x2, 0x5e, 0x80000000, 0x8, 0xffff, 0xffffffff, 0x4, 0x1, 0x0, 0xfffffc36, 0x5, 0x5, 0x505d, 0x3, 0xa3, 0x1ff, 0x5, 0x554, 0x3, 0xe, 0x0, 0x6, 0x9, 0x4, 0x3, 0x81, 0x7, 0x7, 0x34fa, 0x1, 0x400, 0x80000001, 0x9, 0x76e, 0x5, 0x2, 0x9, 0x6d, 0x9, 0x1000, 0x4, 0x82, 0x7f, 0x1, 0xea5a, 0x3, 0x400, 0x7, 0xfff, 0x401, 0x6, 0x34e2, 0x4, 0x7c, 0x7, 0x5, 0x1, 0x7, 0x8, 0x359, 0x1, 0x10001, 0x0, 0x200, 0x0, 0x0, 0x7ffc, 0xfff, 0x4, 0x104, 0xc63b, 0x6, 0x8, 0x6, 0x9, 0x1, 0x6, 0x1, 0x1, 0x5, 0x48000000, 0x200, 0x9, 0xfffffff8, 0xf, 0x2, 0x3ec0, 0x4, 0x4f, 0xe7ce, 0x4, 0x1, 0x7fffffff, 0x80000002, 0x9, 0xb, 0x4, 0x0, 0x10001, 0xfffffff9, 0x80000000, 0x7, 0xffff86c1, 0xb5, 0x7, 0x4, 0x9, 0x4, 0x4, 0x5, 0x2, 0x8, 0x1, 0x1, 0x7, 0x400, 0x3ff, 0x8, 0x0, 0x3, 0x6, 0x3, 0x10000, 0x5, 0xd6bb, 0x6, 0xfffffff2, 0x5, 0x0, 0x0, 0xc7a2, 0x1, 0x9, 0x5, 0x10000, 0x100, 0xd61, 0x8, 0x30, 0x60d, 0x1, 0x9, 0x4, 0x10001, 0x1, 0x514, 0x200, 0xfffffff7, 0xdb15b858, 0xc, 0xb6a5, 0x3, 0x1, 0xfffff001, 0x7ff, 0xff, 0x3, 0x1, 0x7, 0x8, 0x0, 0xfffffffb, 0x5, 0x1, 0xd, 0x4, 0x7, 0x80, 0x5, 0x0, 0x0, 0xb520, 0x7, 0x7ffb, 0x2, 0x9, 0x80000000, 0x8, 0x1, 0x8, 0x8, 0x29d, 0x8, 0x6, 0x4, 0x4a, 0x220a28f7, 0x9, 0x80, 0x5, 0x81, 0x3, 0x7fff, 0x1, 0x3, 0x633, 0xb07, 0x8, 0xc, 0x6, 0xfffffffc, 0x2, 0x4, 0xb, 0x5, 0x9, 0x6, 0x6, 0x9, 0x5, 0x2, 0x87c, 0x504c000, 0x374e, 0x67, 0x8, 0x97f, 0x80000000, 0x5, 0xe, 0xff, 0x4, 0x0, 0x7, 0xc, 0x5, 0x6, 0x2, 0x2, 0x2, 0xd9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 3m21.46828091s ago: executing program 7 (id=5124): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0x0, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xc, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x9, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x0, 0x9, 0x3, 0x9, 0xd, 0x6, 0xd, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0xeeef0000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x4}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xe901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc4]}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000042000102"], 0x14}}, 0x0) 3m21.079218688s ago: executing program 7 (id=5126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x140}]}) 3m20.053360729s ago: executing program 8 (id=5131): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) lremovexattr(&(0x7f00000190c0)='./file0\x00', &(0x7f0000019100)=@known='system.posix_acl_default\x00') lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000019080)=ANY=[@ANYBLOB="6f59e2f332012058"]) 3m19.29164293s ago: executing program 8 (id=5134): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c000680080001"], 0x34}}, 0x0) 3m18.966961366s ago: executing program 8 (id=5136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m18.683498765s ago: executing program 8 (id=5137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="7c005a807400"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) 3m18.398473179s ago: executing program 8 (id=5139): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x2004002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x310100d, 0x1) write$binfmt_misc(r0, &(0x7f0000000c40)="cf", 0x1) 3m18.127585565s ago: executing program 8 (id=5140): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x5821, 0x0) 3m17.879055349s ago: executing program 7 (id=5141): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') execve(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 3m17.642900757s ago: executing program 7 (id=5142): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000380)=[{r0, 0x508a}], 0x1, 0x0, 0x0, 0x0) 3m2.886002825s ago: executing program 39 (id=5140): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x5821, 0x0) 3m2.263032285s ago: executing program 40 (id=5142): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000380)=[{r0, 0x508a}], 0x1, 0x0, 0x0, 0x0) 2.381676197s ago: executing program 9 (id=7567): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TCFLSH(r0, 0x800455c9, 0x4000000) 1.532033699s ago: executing program 4 (id=7578): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12) 1.471239588s ago: executing program 4 (id=7581): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) 1.423169507s ago: executing program 4 (id=7583): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x40, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0xfffffffffffffec9, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0xc0) 1.351690187s ago: executing program 4 (id=7587): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') lchown(&(0x7f0000000180)='./file2/file0\x00', 0x0, 0x0) 1.262865592s ago: executing program 4 (id=7590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x1c) 1.08138611s ago: executing program 3 (id=7595): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xc}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='C']}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.022065019s ago: executing program 3 (id=7597): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 1.021847746s ago: executing program 4 (id=7598): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80015b11, 0x0) 957.137903ms ago: executing program 3 (id=7600): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) 900.191069ms ago: executing program 3 (id=7603): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r1, &(0x7f0000000140)=""/213, 0xd5, 0x83) 899.941414ms ago: executing program 3 (id=7605): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "ab4fc659949ab924", "794cc3819b2325af225bcc55d7711a8f3b1123673f4f98d74ebae07697f22c28", "94dbed0a", "7a3ae7b1c7e44fe9"}, 0x38) 387.728026ms ago: executing program 1 (id=7612): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 282.810245ms ago: executing program 1 (id=7613): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80000000, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x9, 0x11, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 282.571637ms ago: executing program 9 (id=7614): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) unshare(0x24020400) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x1000000000000007}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x3, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) 212.461459ms ago: executing program 1 (id=7615): syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfcd, 0x1042, 0x6, 0x354}, 0x0, 0x0, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000040)) 212.210023ms ago: executing program 9 (id=7616): syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r0 = syz_io_uring_setup(0x3659, &(0x7f0000000200)={0x0, 0x626f, 0x1000, 0xfffffffe, 0x400000, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0x8, 0x0}) io_uring_enter(r0, 0x41ba, 0x21, 0x1, 0x0, 0x0) 212.045758ms ago: executing program 1 (id=7617): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x108, 0xe, 0x2f, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 120.988499ms ago: executing program 1 (id=7618): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) 120.692171ms ago: executing program 9 (id=7619): creat(&(0x7f0000000540)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',dfltuid=', @ANYRESHEX=r1]) 120.475209ms ago: executing program 1 (id=7620): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) splice(r0, 0x0, r2, 0x0, 0x6, 0xa) 61.975333ms ago: executing program 9 (id=7621): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect(r0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) close(r0) 61.77015ms ago: executing program 9 (id=7622): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) poll(&(0x7f0000000080)=[{r0, 0x8040}], 0x1, 0xffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x20, 0x9, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 0s ago: executing program 3 (id=7623): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) kernel console output (not intermixed with test programs): ddr:aa:aa:aa:aa:aa:1c, vlan:0) [ 654.415863][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.421377][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.427032][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 654.433401][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.440649][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.554821][ T39] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 654.684907][T19779] mkiss: ax0: crc mode is auto. [ 654.703038][ T39] usb 8-1: Using ep0 maxpacket: 8 [ 654.706376][ T39] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 654.709828][ T39] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 654.716238][ T39] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.720338][ T39] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 654.725574][ T39] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 654.733619][ T39] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 654.737916][ T39] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 654.748486][ T39] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.753748][ T39] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 654.758055][ T39] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 654.763802][ T39] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 654.767474][ T39] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 654.772080][ T39] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.776230][ T39] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 654.779875][ T39] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 654.788312][ T39] usb 8-1: string descriptor 0 read error: -22 [ 654.792140][ T39] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 654.796272][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.828018][ T39] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 655.038642][ T39] usb 8-1: USB disconnect, device number 14 [ 655.241523][T19770] adutux: No device or device unplugged -19 [ 655.303720][ T5984] Bluetooth: hci2: command 0x0c1a tx timeout [ 657.041854][T19822] veth1_to_bond: entered promiscuous mode [ 657.051740][T19822] batadv0: entered promiscuous mode [ 657.087525][T19822] veth1_to_bond: left promiscuous mode [ 657.103612][T19822] batadv0: left promiscuous mode [ 657.383072][ T5988] Bluetooth: hci2: command 0x0c1a tx timeout [ 657.715734][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5780'. [ 658.084858][T19837] hsr_slave_0: left promiscuous mode [ 658.100308][T19837] hsr_slave_1: left promiscuous mode [ 658.909457][T19860] netlink: 'syz.4.5790': attribute type 1 has an invalid length. [ 659.048459][T19864] loop9: detected capacity change from 0 to 7 [ 659.069608][ C3] blk_print_req_error: 10 callbacks suppressed [ 659.069629][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.076235][ C3] buffer_io_error: 10 callbacks suppressed [ 659.076254][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 659.082826][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.088186][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 659.092425][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.096428][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 659.393079][ C1] net_ratelimit: 20185 callbacks suppressed [ 659.393105][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 659.401623][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.408936][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.414457][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 659.421135][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.427195][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.431538][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 659.436010][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.441502][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.447886][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 659.498566][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.502531][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 659.516668][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.521290][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 659.525917][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.529809][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 659.534098][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.538752][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 659.542043][T19864] ldm_validate_partition_table(): Disk read failed. [ 659.545369][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.549502][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 659.553784][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.557797][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 659.561166][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.567862][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 659.577100][T19864] Dev loop9: unable to read RDB block 0 [ 659.580280][T19864] loop9: unable to read partition table [ 659.582972][T19864] loop9: partition table beyond EOD, truncated [ 659.585650][T19864] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 660.002920][T18752] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 660.155533][T18752] usb 9-1: config 0 has no interfaces? [ 660.162306][T18752] usb 9-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 660.170298][T18752] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.183412][T18752] usb 9-1: config 0 descriptor?? [ 660.312855][T18757] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 660.466431][T18757] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 660.509718][ T24] usb 9-1: USB disconnect, device number 6 [ 660.525018][T18757] usb 6-1: config 0 has no interface number 0 [ 660.529669][T18757] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 660.535172][T18757] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 660.538808][T18757] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 660.542507][T18757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.550149][T18757] usb 6-1: config 0 descriptor?? [ 660.552678][T19888] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 660.558789][T18757] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 660.767410][T18757] usb 6-1: USB disconnect, device number 18 [ 661.609611][T19941] netlink: 'syz.9.5828': attribute type 8 has an invalid length. [ 661.793850][T19951] batadv0: entered promiscuous mode [ 661.797277][T19951] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 661.807215][T19951] batadv0: left promiscuous mode [ 662.100771][T19968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5841'. [ 662.111107][T19968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5841'. [ 662.514224][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 662.642948][T19986] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5857'. [ 662.649407][T19986] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5857'. [ 662.688306][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 662.693792][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.699690][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.711348][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 662.716121][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 662.719328][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.729606][ T24] usb 6-1: config 0 descriptor?? [ 662.837172][T19991] bridge0: port 3(syz_tun) entered disabled state [ 662.856870][T19991] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.860778][T19991] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.042005][T19991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.048285][T19991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.201775][ T24] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:05AC:8241.000C/input/input29 [ 663.338274][ T24] appleir 0003:05AC:8241.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 663.378729][ T24] usb 6-1: USB disconnect, device number 19 [ 663.420356][T15358] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.424003][T19999] fido_id[19999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/6-1/report_descriptor': No such file or directory [ 663.424516][T15358] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.444069][T15358] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.454032][T15358] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.630646][T20007] (syz.3.5856,20007,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 664.166968][T20038] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5873'. [ 664.402972][ C1] net_ratelimit: 20664 callbacks suppressed [ 664.402997][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.412704][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.417653][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 664.422304][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.428944][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.434587][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 664.439721][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.444463][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.450192][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 664.455931][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.502937][T18752] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 665.667913][T18752] usb 6-1: unable to get BOS descriptor or descriptor too short [ 665.672130][T18752] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 665.675699][T18752] usb 6-1: can't read configurations, error -71 [ 666.165769][T20104] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5904'. [ 667.536352][T20181] trusted_key: encrypted_key: keyword 'upw' not recognized [ 667.562918][ T6021] usb 14-1: new low-speed USB device number 3 using dummy_hcd [ 667.725863][ T6021] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 667.732143][ T6021] usb 14-1: config 0 has no interface number 0 [ 667.740090][ T6021] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 667.752847][ T6021] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 667.765807][ T6021] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 667.770629][ T6021] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.798635][ T6021] usb 14-1: config 0 descriptor?? [ 667.807777][T20164] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 667.837290][ T6021] iowarrior 14-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 668.031656][ C0] iowarrior 14-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 668.037079][ T6021] usb 14-1: USB disconnect, device number 3 [ 669.412984][ C1] net_ratelimit: 17284 callbacks suppressed [ 669.413003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 669.421142][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.427091][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.433317][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 669.438662][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.448943][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.455983][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 669.461573][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.467492][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.473222][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 669.479233][T20245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5960'. [ 669.527983][T20247] loop5: detected capacity change from 0 to 7 [ 669.552153][ C0] blk_print_req_error: 10 callbacks suppressed [ 669.552174][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.558548][ C0] buffer_io_error: 10 callbacks suppressed [ 669.558567][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 669.574169][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.575028][ T40] kauditd_printk_skb: 3156 callbacks suppressed [ 669.575046][ T40] audit: type=1326 audit(2000000465.638:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20248 comm="syz.3.5963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 669.577339][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 669.590001][ T40] audit: type=1326 audit(2000000465.638:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20248 comm="syz.3.5963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 669.606145][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.610506][ T40] audit: type=1326 audit(2000000465.668:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20248 comm="syz.3.5963" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 669.621228][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.624624][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 669.630343][ T40] audit: type=1326 audit(2000000465.668:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20248 comm="syz.3.5963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 669.630774][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.644491][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 669.648515][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.652711][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 669.653763][ T40] audit: type=1326 audit(2000000465.668:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20248 comm="syz.3.5963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 669.657474][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.670790][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 669.679125][ T40] audit: type=1326 audit(2000000465.668:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20248 comm="syz.3.5963" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 669.685742][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.694054][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 669.699580][T20247] ldm_validate_partition_table(): Disk read failed. [ 669.700512][ T40] audit: type=1326 audit(2000000465.668:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20248 comm="syz.3.5963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 669.710758][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.718185][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 669.727812][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.731515][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 669.739488][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 669.742632][ T40] audit: type=1326 audit(2000000465.668:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20248 comm="syz.3.5963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 669.744194][T20247] Dev loop5: unable to read RDB block 0 [ 669.756464][ T40] audit: type=1326 audit(2000000465.668:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20248 comm="syz.3.5963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 669.770201][ T40] audit: type=1326 audit(2000000465.678:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20248 comm="syz.3.5963" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 669.799347][T20247] loop5: unable to read partition table [ 669.803364][T20247] loop5: partition table beyond EOD, truncated [ 669.815322][T20247] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 670.259604][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5970'. [ 670.263303][T20271] netlink: 'syz.1.5970': attribute type 18 has an invalid length. [ 670.266169][T20271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5970'. [ 670.406801][T20275] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.768413][T20291] bpf: Bad value for 'uid' [ 671.092404][T20301] macvlan0: entered promiscuous mode [ 671.095823][T20301] netlink: 'syz.4.5983': attribute type 1 has an invalid length. [ 671.099509][T20301] netlink: 'syz.4.5983': attribute type 2 has an invalid length. [ 671.688683][T20327] can0: slcan on pty38. [ 671.775061][T20320] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 671.781257][T20320] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 671.862506][T20320] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 671.879494][T20320] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 671.882385][T20320] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 671.894486][T20324] can0 (unregistered): slcan off pty38. [ 671.994338][T20341] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6000'. [ 673.501617][T20401] netlink: 'syz.9.6023': attribute type 3 has an invalid length. [ 673.517302][T20401] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6023'. [ 673.627752][T20403] input: syz0 as /devices/virtual/input/input32 [ 673.783411][ T5988] Bluetooth: hci7: command 0x0c1a tx timeout [ 673.794597][T20411] loop4: detected capacity change from 0 to 524287936 [ 673.953071][ T5988] Bluetooth: hci2: command 0x0c1a tx timeout [ 673.953973][ T5984] Bluetooth: hci1: command 0x0c1a tx timeout [ 673.955906][ T5988] Bluetooth: hci0: command 0x0c1a tx timeout [ 674.290379][T20433] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6040'. [ 674.304966][T20433] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6040'. [ 674.314392][T20433] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6040'. [ 674.422935][ C1] net_ratelimit: 17541 callbacks suppressed [ 674.422957][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.431133][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.437463][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 674.444347][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.449679][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.455059][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 674.461510][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.468765][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.474093][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 674.479232][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.251622][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6050'. [ 675.265790][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6050'. [ 675.349988][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6054'. [ 675.835435][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6062'. [ 675.874999][ T5984] Bluetooth: hci7: command 0x0c1a tx timeout [ 676.126791][T20491] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 677.576350][T20529] netlink: 'syz.9.6089': attribute type 1 has an invalid length. [ 677.698929][ T40] kauditd_printk_skb: 1052 callbacks suppressed [ 677.698946][ T40] audit: type=1326 audit(2000000473.758:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20516 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 677.727937][ T40] audit: type=1326 audit(2000000473.778:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20516 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 677.745382][ T40] audit: type=1326 audit(2000000473.778:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20516 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 677.761041][ T40] audit: type=1326 audit(2000000473.778:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20516 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 677.781348][ T40] audit: type=1326 audit(2000000473.778:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20516 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 677.800952][ T40] audit: type=1326 audit(2000000473.778:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20516 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 677.822927][ T40] audit: type=1326 audit(2000000473.788:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20516 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 677.852974][ T40] audit: type=1326 audit(2000000473.788:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20516 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 677.868961][ T40] audit: type=1326 audit(2000000473.788:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20516 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 677.869118][T20532] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6083'. [ 677.880100][ T40] audit: type=1326 audit(2000000473.788:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20516 comm="syz.3.6078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 678.862886][T18757] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 678.933004][T18752] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 679.013722][T18757] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 679.018324][T18757] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 679.022377][T18757] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 679.027633][T18757] usb 9-1: config 0 interface 0 has no altsetting 0 [ 679.031285][T18757] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 679.034870][T18757] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 679.038691][T18757] usb 9-1: config 0 interface 0 has no altsetting 0 [ 679.044721][T18757] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 679.048894][T18757] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 679.052460][T18757] usb 9-1: config 0 interface 0 has no altsetting 0 [ 679.056843][T18757] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 679.061101][T18757] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 679.067391][T18757] usb 9-1: config 0 interface 0 has no altsetting 0 [ 679.070761][T18757] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 679.074490][T18757] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 679.079496][T18757] usb 9-1: config 0 interface 0 has no altsetting 0 [ 679.088176][T18757] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 679.096322][T18752] usb 6-1: config 0 has no interfaces? [ 679.099453][T18757] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 679.103642][T18752] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 679.107645][T18752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.113391][T18757] usb 9-1: config 0 interface 0 has no altsetting 0 [ 679.127715][T18757] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 679.134179][T18752] usb 6-1: config 0 descriptor?? [ 679.141845][T18757] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 679.165190][T18757] usb 9-1: config 0 interface 0 has no altsetting 0 [ 679.173945][T18757] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 679.188149][T18757] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 679.196799][T18757] usb 9-1: config 0 interface 0 has no altsetting 0 [ 679.202127][T18757] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 679.207912][T18757] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 679.212231][T18757] usb 9-1: Product: syz [ 679.215335][T18757] usb 9-1: Manufacturer: syz [ 679.217607][T18757] usb 9-1: SerialNumber: syz [ 679.223523][T18757] usb 9-1: config 0 descriptor?? [ 679.240578][T18757] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 679.432871][ C1] net_ratelimit: 17821 callbacks suppressed [ 679.432896][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.441231][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.447023][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.452558][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.456631][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.462430][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.469514][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.475048][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.480718][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.487108][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.549620][T18757] usb 6-1: USB disconnect, device number 22 [ 681.473357][ C3] usb 9-1: yurex_control_callback - control failed: -2 [ 681.490763][ T6021] usb 9-1: USB disconnect, device number 7 [ 681.499263][ T6021] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 683.156160][T20635] input: syz1 as /devices/virtual/input/input33 [ 683.173130][T20637] netlink: 88 bytes leftover after parsing attributes in process `syz.9.6128'. [ 683.552936][ T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 683.703687][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 683.708636][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 683.718596][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 683.727217][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 683.731941][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.738491][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 683.744913][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.962229][ T10] usb 9-1: GET_CAPABILITIES returned 0 [ 683.965697][ T10] usbtmc 9-1:16.0: can't read capabilities [ 684.172860][T18752] usb 9-1: USB disconnect, device number 8 [ 684.442834][ C1] net_ratelimit: 18890 callbacks suppressed [ 684.442862][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 684.450807][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.457179][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.462265][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 684.467673][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.474134][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.480054][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 684.485676][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.491872][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.499304][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 684.582385][ T10] kernel write not supported for file /input/event2 (pid: 10 comm: kworker/0:1) [ 685.164635][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6148'. [ 685.171326][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6148'. [ 685.775993][T20713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6162'. [ 685.813073][ T39] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 685.983210][ T39] usb 14-1: Using ep0 maxpacket: 16 [ 685.991393][ T39] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.004700][ T39] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.020661][ T39] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 686.029731][ T39] usb 14-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 686.046606][ T39] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.066293][ T39] usb 14-1: config 0 descriptor?? [ 686.263453][T18752] kernel write not supported for file /input/event2 (pid: 18752 comm: kworker/3:6) [ 686.544172][ T39] input: HID 05ac:8241 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:05AC:8241.000D/input/input34 [ 686.666076][ T39] appleir 0003:05AC:8241.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 686.702651][T18757] usb 14-1: USB disconnect, device number 4 [ 686.763031][T18752] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 686.906164][T20733] fido_id[20733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb14/report_descriptor': No such file or directory [ 686.933129][T18752] usb 8-1: Using ep0 maxpacket: 8 [ 686.937614][T18752] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 686.944515][T18752] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 686.955233][T18752] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 686.963561][T18752] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 686.977549][T18752] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.984488][T18752] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 686.988820][T18752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.234880][T18752] usb 8-1: GET_CAPABILITIES returned 0 [ 687.241496][T18752] usbtmc 8-1:16.0: can't read capabilities [ 687.409944][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6183'. [ 687.425358][T20756] macvlan2: entered allmulticast mode [ 687.428588][T20756] hsr0: entered allmulticast mode [ 687.430963][T20756] hsr_slave_0: entered allmulticast mode [ 687.433595][T20756] hsr_slave_1: entered allmulticast mode [ 687.443482][T18752] usb 8-1: USB disconnect, device number 15 [ 687.556716][T20761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6185'. [ 688.202990][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6195'. [ 688.263072][T18752] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 688.432878][T18752] usb 8-1: Using ep0 maxpacket: 8 [ 688.438276][T18752] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 688.442278][T18752] usb 8-1: config 179 has no interface number 0 [ 688.445525][T18752] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 688.453624][T18752] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 688.462630][T18752] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 688.467990][T18752] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 688.473062][T18752] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 688.478762][T18752] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 688.483604][T18752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.491715][T20775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 688.734974][T18752] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input35 [ 688.910071][ T10] usb 8-1: USB disconnect, device number 16 [ 688.910105][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 688.916940][ C3] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 689.343241][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6206'. [ 689.348427][T20805] netlink: 'syz.9.6206': attribute type 25 has an invalid length. [ 689.352434][T20805] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6206'. [ 689.452799][ C1] net_ratelimit: 18372 callbacks suppressed [ 689.452813][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.461278][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.466807][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 689.473019][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.480675][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.486555][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 689.492073][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.498781][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.503938][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 689.508482][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.613731][T20819] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 690.639948][T20860] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 691.504130][T20893] 9p: Invalid gid '0x00000000ffffffff' [ 691.508881][T20892] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6248'. [ 691.522145][T20892] netlink: 'syz.9.6248': attribute type 2 has an invalid length. [ 691.623167][T17481] Bluetooth: hci3: command 0x1003 tx timeout [ 691.625535][ T5984] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 691.822249][T20911] netlink: 256 bytes leftover after parsing attributes in process `syz.9.6257'. [ 692.413955][T20951] tipc: Started in network mode [ 692.416566][T20951] tipc: Node identity , cluster identity 4711 [ 692.419734][T20951] tipc: Failed to set node id, please configure manually [ 692.423519][T20951] tipc: Enabling of bearer rejected, failed to enable media [ 692.749252][T20959] netlink: 'syz.9.6279': attribute type 1 has an invalid length. [ 692.873616][T18752] kernel write not supported for file /sequencer (pid: 18752 comm: kworker/3:6) [ 693.536909][T18752] kernel read not supported for file /dsp1 (pid: 18752 comm: kworker/3:6) [ 693.896410][ T40] kauditd_printk_skb: 111 callbacks suppressed [ 693.896432][ T40] audit: type=1326 audit(2000000489.958:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21011 comm="syz.9.6300" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efcc code=0x0 [ 694.456709][T21043] binder: 21041:21043 ioctl c0306201 0 returned -14 [ 694.462954][ C1] net_ratelimit: 22126 callbacks suppressed [ 694.462977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 694.471060][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.476008][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.480975][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 694.487021][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.491579][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.496253][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 694.502212][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.508047][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.513133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 695.163983][ T6021] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 695.332460][ T6021] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 695.340203][ T6021] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.346052][ T6021] usb 9-1: Product: syz [ 695.349153][ T6021] usb 9-1: Manufacturer: syz [ 695.353735][ T6021] usb 9-1: SerialNumber: syz [ 695.603898][ T6021] rtl8150 9-1:1.0: couldn't reset the device [ 695.608407][ T6021] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 695.638867][ T6021] usb 9-1: USB disconnect, device number 9 [ 695.673317][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 695.823326][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 695.829912][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 695.841905][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.858256][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 695.861377][ T10] pvrusb2: ********** [ 695.863884][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 695.868494][ T10] pvrusb2: Important functionality might not be entirely working. [ 695.871852][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 695.875896][ T10] pvrusb2: ********** [ 695.974280][T21085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6335'. [ 695.979851][T21085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6335'. [ 695.983585][T21085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6335'. [ 696.064370][ T2511] pvrusb2: Invalid write control endpoint [ 696.173493][ T2511] pvrusb2: Invalid write control endpoint [ 696.187662][ T2511] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 696.195243][ T2511] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 696.198545][ T2511] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 696.202705][ T2511] pvrusb2: Device being rendered inoperable [ 696.206269][ T2511] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 696.208911][ T2511] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 696.214044][ T2511] pvrusb2: Attached sub-driver cx25840 [ 696.218877][ T2511] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 696.225381][ T2511] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 696.273043][T18757] usb 6-1: USB disconnect, device number 23 [ 696.736800][T21107] kvm: kvm [21106]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 697.222336][T21128] ubi16: attaching mtd0 [ 697.224939][T21128] ubi16 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 697.262776][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6356'. [ 697.734753][ T40] audit: type=1326 audit(2000000493.788:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.9.6367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 697.750053][ T40] audit: type=1326 audit(2000000493.788:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.9.6367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 697.762631][ T40] audit: type=1326 audit(2000000493.818:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.9.6367" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 697.777273][ T40] audit: type=1326 audit(2000000493.818:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.9.6367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 697.802819][ T40] audit: type=1326 audit(2000000493.818:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.9.6367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 697.821526][ T40] audit: type=1326 audit(2000000493.828:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.9.6367" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 697.831590][ T40] audit: type=1326 audit(2000000493.828:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.9.6367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 697.841613][ T40] audit: type=1326 audit(2000000493.828:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.9.6367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 697.855929][ T40] audit: type=1326 audit(2000000493.838:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.9.6367" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 698.279232][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6385'. [ 698.324776][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6385'. [ 698.898207][T21225] netlink: 'syz.3.6399': attribute type 25 has an invalid length. [ 698.901777][T21225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6399'. [ 698.936313][T21227] kvm: kvm [21226]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000086) = 0x0 [ 699.389039][T21236] batadv_slave_0: entered promiscuous mode [ 699.392916][T21235] batadv_slave_0: left promiscuous mode [ 699.472983][ C1] net_ratelimit: 22822 callbacks suppressed [ 699.473007][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.481317][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.488481][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.494063][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.498798][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.504421][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.511939][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.517680][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.523171][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.528916][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.987143][T21245] netlink: 'syz.3.6407': attribute type 1 has an invalid length. [ 700.292961][T18752] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 700.451608][T18752] usb 14-1: unable to get BOS descriptor or descriptor too short [ 700.461174][T18752] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 700.466495][T18752] usb 14-1: can't read configurations, error -71 [ 701.170102][T21267] program syz.3.6415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 701.294815][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 701.294826][ T40] audit: type=1326 audit(2000000497.358:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21273 comm="syz.3.6419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 701.308487][ T40] audit: type=1326 audit(2000000497.358:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21273 comm="syz.3.6419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 701.318795][ T40] audit: type=1326 audit(2000000497.368:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21273 comm="syz.3.6419" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 701.328437][ T40] audit: type=1326 audit(2000000497.368:5042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21273 comm="syz.3.6419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 701.336040][ T40] audit: type=1326 audit(2000000497.368:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21273 comm="syz.3.6419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 701.359709][ T40] audit: type=1326 audit(2000000497.368:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21273 comm="syz.3.6419" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 701.372674][ T40] audit: type=1326 audit(2000000497.368:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21273 comm="syz.3.6419" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 701.381961][ T40] audit: type=1326 audit(2000000497.368:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21273 comm="syz.3.6419" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 701.391019][ T40] audit: type=1326 audit(2000000497.368:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21273 comm="syz.3.6419" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 701.407095][ T40] audit: type=1326 audit(2000000497.368:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21273 comm="syz.3.6419" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 702.331133][T21317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6439'. [ 702.347025][T21314] macvlan2: entered promiscuous mode [ 702.353118][T21314] bridge0: entered promiscuous mode [ 702.675627][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 702.678674][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 704.201468][T21389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6471'. [ 704.228669][T21390] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 704.482789][ C1] net_ratelimit: 22826 callbacks suppressed [ 704.482809][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.484110][T21403] (syz.1.6478,21403,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 704.485749][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.485998][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.486237][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.486511][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.486776][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.487028][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.487302][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.487527][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.539878][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.844991][T21417] tipc: Started in network mode [ 704.847261][T21417] tipc: Node identity ac1414aa, cluster identity 4711 [ 704.850365][T21417] tipc: New replicast peer: 100.1.1.1 [ 704.854957][T21417] tipc: Enabled bearer , priority 5 [ 705.055291][ T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 705.216840][ T24] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 705.232627][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.237213][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 705.241673][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.249043][ T24] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 705.253549][ T24] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 705.257379][ T24] usb 9-1: Product: syz [ 705.259255][ T24] usb 9-1: Manufacturer: syz [ 705.269157][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 705.271559][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 705.275134][ T24] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 705.277333][ T24] cdc_wdm 9-1:1.0: Unknown control protocol [ 705.313088][ T10] usb 14-1: new full-speed USB device number 7 using dummy_hcd [ 705.465260][ T10] usb 14-1: config 0 has no interfaces? [ 705.467813][ T10] usb 14-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 705.471744][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.478042][ T10] usb 14-1: config 0 descriptor?? [ 705.770966][T18752] usb 14-1: USB disconnect, device number 7 [ 705.983146][ T10] tipc: Node number set to 2886997162 [ 707.829231][T18752] usb 9-1: USB disconnect, device number 10 [ 707.917041][T21431] (syz.4.6488,21431,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 708.973039][T21476] tipc: Started in network mode [ 708.975977][T21476] tipc: Node identity ac1414aa, cluster identity 4711 [ 708.983210][T21476] tipc: New replicast peer: 100.1.1.1 [ 708.986282][T21476] tipc: Enabled bearer , priority 5 [ 709.315817][T18752] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 709.455558][T21491] sp0: Synchronizing with TNC [ 709.467721][T21491] [U] [ 709.492832][ C1] net_ratelimit: 24868 callbacks suppressed [ 709.492856][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.501820][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.506877][T18752] usb 14-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 709.507571][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.515731][T18752] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.517309][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.521271][T18752] usb 14-1: Product: syz [ 709.526561][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.529315][T18752] usb 14-1: Manufacturer: syz [ 709.533724][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.536252][T18752] usb 14-1: SerialNumber: syz [ 709.543550][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.550762][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.556343][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.561052][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.809021][T18752] rtl8150 14-1:1.0: couldn't reset the device [ 709.811406][T18752] rtl8150 14-1:1.0: probe with driver rtl8150 failed with error -5 [ 709.819693][T18752] usb 14-1: USB disconnect, device number 8 [ 710.113498][ T39] tipc: Node number set to 2886997162 [ 711.046003][T21516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6529'. [ 712.104618][T17481] Bluetooth: hci3: command 0xfc11 tx timeout [ 712.115889][ T5984] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 713.080327][T21586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6560'. [ 713.093950][T21586] netlink: 'syz.4.6560': attribute type 2 has an invalid length. [ 713.258543][T21596] tipc: Started in network mode [ 713.264149][T21596] tipc: Node identity ac1414aa, cluster identity 4711 [ 713.274353][T21596] tipc: New replicast peer: 100.1.1.1 [ 713.281198][T21596] tipc: Enabled bearer , priority 5 [ 713.605103][T21607] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 714.408795][ T24] tipc: Node number set to 2886997162 [ 714.485970][T21626] tipc: Enabling of bearer rejected, already enabled [ 714.502938][ C1] net_ratelimit: 23356 callbacks suppressed [ 714.502963][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 714.512324][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.517768][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.523605][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 714.529483][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.535015][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.540363][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 714.547625][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.552015][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.557519][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 715.092510][T21643] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6584'. [ 715.562961][T18752] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 715.622921][T17481] Bluetooth: hci3: command 0x1003 tx timeout [ 715.627099][ T5984] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 715.729533][T18752] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 715.734547][T18752] usb 8-1: config 0 has no interface number 0 [ 715.739769][T18752] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 715.752823][T18752] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 715.759435][T18752] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 715.769032][T18752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.782976][T18752] usb 8-1: config 0 descriptor?? [ 715.789657][T21651] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 715.805558][T18752] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 716.087894][ T24] usb 8-1: USB disconnect, device number 17 [ 716.087894][ C3] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 716.133760][T21672] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6596'. [ 716.522552][T21683] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 716.536439][ T74] Bluetooth: hci3: Frame reassembly failed (-84) [ 717.067105][ T24] kernel write not supported for file /sequencer (pid: 24 comm: kworker/2:0) [ 717.250197][T21707] netlink: 'syz.4.6605': attribute type 1 has an invalid length. [ 717.753046][T18752] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 717.915205][T18752] usb 8-1: config 0 has no interfaces? [ 717.917276][T18752] usb 8-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 717.920780][T18752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.928012][T18752] usb 8-1: config 0 descriptor?? [ 718.144577][ T24] usb 8-1: USB disconnect, device number 18 [ 718.582979][T17481] Bluetooth: hci3: command 0x1003 tx timeout [ 718.587247][ T5984] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 719.512913][ C1] net_ratelimit: 22752 callbacks suppressed [ 719.512940][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.521051][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.526451][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 719.531266][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.536164][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.541344][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 719.546901][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.552291][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.558634][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 719.563938][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.726762][ T40] kauditd_printk_skb: 1403 callbacks suppressed [ 719.726779][ T40] audit: type=1326 audit(2000000515.788:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21782 comm="syz.4.6652" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70befcc code=0x0 [ 721.225268][T21820] sp0: Synchronizing with TNC [ 721.251485][T21820] [U] [ 721.562852][T18752] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 721.724074][T18752] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 721.733431][T18752] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.748133][T18752] usb 9-1: Product: syz [ 721.752380][T18752] usb 9-1: Manufacturer: syz [ 721.759009][T18752] usb 9-1: SerialNumber: syz [ 722.030381][T18752] rtl8150 9-1:1.0: couldn't reset the device [ 722.034856][T18752] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 722.045776][T18752] usb 9-1: USB disconnect, device number 11 [ 722.563191][ T24] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 722.577071][ T24] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 722.779709][T21837] fido_id[21837]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 723.571443][T21860] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6675'. [ 723.580122][T21860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6675'. [ 723.590255][T21860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6675'. [ 723.983054][ T40] audit: type=1326 audit(2000000520.038:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.9.6687" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 723.990802][ T40] audit: type=1326 audit(2000000520.048:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.9.6687" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 724.003584][ T40] audit: type=1326 audit(2000000520.048:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.9.6687" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 724.010967][ T40] audit: type=1326 audit(2000000520.048:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.9.6687" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 724.025180][ T40] audit: type=1326 audit(2000000520.048:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.9.6687" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 724.039063][ T40] audit: type=1326 audit(2000000520.048:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.9.6687" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 724.052806][ T40] audit: type=1326 audit(2000000520.048:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.9.6687" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 724.063482][ T40] audit: type=1326 audit(2000000520.048:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.9.6687" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 724.073900][ T40] audit: type=1326 audit(2000000520.048:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.9.6687" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 724.163665][ T24] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 724.328733][ T24] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 724.333842][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.339130][ T24] usb 8-1: Product: syz [ 724.340599][ T24] usb 8-1: Manufacturer: syz [ 724.346716][ T24] usb 8-1: SerialNumber: syz [ 724.523408][ C1] net_ratelimit: 25616 callbacks suppressed [ 724.523433][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.530317][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.537194][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 724.542559][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.547967][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.553327][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 724.558683][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.564072][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.568203][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 724.573814][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.614901][ T24] rtl8150 8-1:1.0: couldn't reset the device [ 724.622316][ T24] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 724.644904][ T24] usb 8-1: USB disconnect, device number 19 [ 726.058005][T21915] netlink: 'syz.1.6704': attribute type 4 has an invalid length. [ 726.066375][T21915] netlink: 'syz.1.6704': attribute type 1 has an invalid length. [ 726.070582][T21915] netlink: 'syz.1.6704': attribute type 3 has an invalid length. [ 726.074242][T21915] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6704'. [ 726.077358][T21915] NCSI netlink: No device for ifindex 830110067 [ 726.715740][T21932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6712'. [ 726.721123][T21932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6712'. [ 726.811621][T21936] netlink: 62967 bytes leftover after parsing attributes in process `syz.1.6714'. [ 727.006792][T21938] netlink: 'syz.3.6715': attribute type 4 has an invalid length. [ 727.010039][T21938] netlink: 'syz.3.6715': attribute type 1 has an invalid length. [ 727.012563][T21938] netlink: 'syz.3.6715': attribute type 3 has an invalid length. [ 727.015632][T21938] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6715'. [ 727.019871][T21938] NCSI netlink: No device for ifindex 830110067 [ 727.325103][T21966] netlink: 'syz.1.6728': attribute type 25 has an invalid length. [ 727.327922][T21966] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6728'. [ 727.783903][T21988] mkiss: ax0: crc mode is auto. [ 727.838962][T21992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6737'. [ 728.086350][T22000] sp0: Synchronizing with TNC [ 728.328635][T22005] ubi16: attaching mtd0 [ 728.330348][T22005] ubi16 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 728.999736][T22028] __nla_validate_parse: 1 callbacks suppressed [ 728.999757][T22028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6752'. [ 729.177613][T22031] kvm: kvm [22030]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000086) = 0x0 [ 729.532937][ C1] net_ratelimit: 17746 callbacks suppressed [ 729.532961][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 729.540957][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.546097][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.550498][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 729.554835][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.560142][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.565138][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 729.569309][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.574576][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.580470][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 730.038378][T22054] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 732.070046][T22105] netlink: 'syz.9.6780': attribute type 4 has an invalid length. [ 732.076812][T22105] netlink: 'syz.9.6780': attribute type 1 has an invalid length. [ 732.083973][T22105] netlink: 'syz.9.6780': attribute type 3 has an invalid length. [ 732.091302][T22105] netlink: 184 bytes leftover after parsing attributes in process `syz.9.6780'. [ 732.101484][T22105] NCSI netlink: No device for ifindex 830110067 [ 732.106533][T22107] bridge0: entered promiscuous mode [ 732.120326][T22107] macvlan3: entered promiscuous mode [ 732.572431][T22123] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6789'. [ 733.096550][T22142] macvlan4: entered promiscuous mode [ 733.099145][T22142] bridge0: entered promiscuous mode [ 733.924809][T22160] netlink: 62967 bytes leftover after parsing attributes in process `syz.9.6804'. [ 734.035511][T22164] loop5: detected capacity change from 0 to 7 [ 734.204551][T22164] Dev loop5: unable to read RDB block 7 [ 734.207136][T22164] loop5: unable to read partition table [ 734.213212][T22164] loop5: partition table beyond EOD, truncated [ 734.216207][T22164] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 734.237399][T22168] Invalid logical block size (-1) [ 734.393248][T22176] block nbd0: server does not support multiple connections per device. [ 734.407531][T22176] block nbd0: shutting down sockets [ 734.543077][ C1] net_ratelimit: 23457 callbacks suppressed [ 734.543099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.549765][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.554047][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 734.559734][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.565454][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.569999][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 734.574541][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.579593][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.583633][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 734.587457][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.771009][T22202] loop5: detected capacity change from 0 to 7 [ 734.952681][T22202] Dev loop5: unable to read RDB block 7 [ 734.955236][T22202] loop5: unable to read partition table [ 734.958251][T22202] loop5: partition table beyond EOD, truncated [ 734.962440][T22202] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 735.154353][T22208] Invalid logical block size (-1) [ 736.927131][T17481] Bluetooth: hci3: sending frame failed (-49) [ 736.932377][ T5984] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 736.973363][ T10] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 737.070779][T22280] sctp: [Deprecated]: syz.9.6857 (pid 22280) Use of int in maxseg socket option. [ 737.070779][T22280] Use struct sctp_assoc_value instead [ 737.136155][ T10] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 737.139514][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.142319][ T10] usb 8-1: Product: syz [ 737.147046][ T10] usb 8-1: Manufacturer: syz [ 737.149125][ T10] usb 8-1: SerialNumber: syz [ 737.407458][ T10] rtl8150 8-1:1.0: couldn't reset the device [ 737.410420][ T10] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 737.422207][ T10] usb 8-1: USB disconnect, device number 20 [ 738.061604][T22305] sctp: [Deprecated]: syz.3.6868 (pid 22305) Use of int in maxseg socket option. [ 738.061604][T22305] Use struct sctp_assoc_value instead [ 739.173036][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 739.336362][ T24] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 739.344161][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.350021][ T24] usb 6-1: Product: syz [ 739.354398][ T24] usb 6-1: Manufacturer: syz [ 739.372990][ T24] usb 6-1: SerialNumber: syz [ 739.552821][ C1] net_ratelimit: 28369 callbacks suppressed [ 739.552843][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 739.559928][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.564471][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.568645][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 739.574190][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.579402][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.583757][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 739.588240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.593093][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.598133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 739.638553][ T24] rtl8150 6-1:1.0: couldn't reset the device [ 739.641595][ T24] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 739.651024][ T24] usb 6-1: USB disconnect, device number 24 [ 740.885163][T22418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6922'. [ 741.589773][T15358] Bluetooth: hci3: Frame reassembly failed (-90) [ 743.623703][ T5984] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 743.623808][T17481] Bluetooth: hci3: command 0x1003 tx timeout [ 743.930149][T22529] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6972'. [ 744.562945][ C1] net_ratelimit: 28324 callbacks suppressed [ 744.562969][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.572035][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.578488][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 744.584379][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.590127][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.595561][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 744.600627][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.607225][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.612530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 744.617917][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.176599][T22581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6996'. [ 745.180879][T22581] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6996'. [ 745.186156][T22581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6996'. [ 745.189628][T22581] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6996'. [ 745.497392][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/2:0) [ 745.859613][T22601] Invalid source name [ 746.138742][ T40] kauditd_printk_skb: 444 callbacks suppressed [ 746.138755][ T40] audit: type=1326 audit(2000000542.198:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22618 comm="syz.9.7021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 746.159276][ T40] audit: type=1326 audit(2000000542.208:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22618 comm="syz.9.7021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 746.174819][ T40] audit: type=1326 audit(2000000542.208:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22618 comm="syz.9.7021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 746.195415][ T40] audit: type=1326 audit(2000000542.208:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22618 comm="syz.9.7021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 746.215367][ T40] audit: type=1326 audit(2000000542.208:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22618 comm="syz.9.7021" exe="/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 746.242851][ T40] audit: type=1326 audit(2000000542.208:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22618 comm="syz.9.7021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 746.252992][ T40] audit: type=1326 audit(2000000542.208:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22618 comm="syz.9.7021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 746.273081][ T40] audit: type=1326 audit(2000000542.208:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22618 comm="syz.9.7021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 746.290943][ T40] audit: type=1326 audit(2000000542.208:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22618 comm="syz.9.7021" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 746.300561][ T40] audit: type=1326 audit(2000000542.208:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22618 comm="syz.9.7021" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 746.507606][T22640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7020'. [ 746.541018][T22640] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7020'. [ 746.605287][T22644] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 746.615377][T22644] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 746.620129][T22644] overlayfs: fs on './cgroup' does not support file handles, falling back to xino=off. [ 746.782084][T22655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7028'. [ 746.787364][T22655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7028'. [ 746.804866][T22655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7028'. [ 746.812821][T22655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7028'. [ 746.923858][T22664] Invalid source name [ 747.078221][T22672] pim6reg: entered allmulticast mode [ 747.082288][T22672] team0: entered allmulticast mode [ 747.085184][T22672] team_slave_0: entered allmulticast mode [ 747.087224][T22672] team_slave_1: entered allmulticast mode [ 748.285972][T22750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7072'. [ 748.289216][T22750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7072'. [ 748.294989][T22750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7072'. [ 748.298063][T22750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7072'. [ 748.761303][T22768] Bluetooth: MGMT ver 1.23 [ 748.779865][ T24] kernel read not supported for file /swradio9 (pid: 24 comm: kworker/2:0) [ 749.572959][ C1] net_ratelimit: 24849 callbacks suppressed [ 749.572984][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.579662][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.583919][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 749.589457][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.593716][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.598347][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 749.602325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.606847][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.611460][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 749.616096][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.863515][T18757] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 749.996960][T22835] input: syz0 as /devices/virtual/input/input38 [ 750.024419][T18757] usb 8-1: Using ep0 maxpacket: 8 [ 750.034208][T18757] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 750.039772][T18757] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 750.047583][T18757] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 750.054936][T18757] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 750.060064][T18757] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 750.072967][T18757] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 750.079306][T18757] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 750.086353][T18757] usb 8-1: config 168 interface 0 has no altsetting 0 [ 750.090519][T18757] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 750.097909][T18757] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 750.104110][T18757] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 750.108775][T18757] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 750.114815][T18757] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 750.121119][T18757] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 750.126738][T18757] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 750.132564][T18757] usb 8-1: config 168 interface 0 has no altsetting 0 [ 750.138387][T18757] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 750.142109][T18757] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 750.147713][T18757] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 750.152613][T18757] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 750.158279][T18757] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 750.164479][T18757] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 750.170099][T18757] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 750.176198][T18757] usb 8-1: config 168 interface 0 has no altsetting 0 [ 750.183709][T18757] usb 8-1: string descriptor 0 read error: -22 [ 750.187210][T18757] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 750.191384][T18757] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.209913][T18757] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 750.427467][T18757] usb 8-1: USB disconnect, device number 21 [ 750.632191][T22815] adutux: No device or device unplugged -19 [ 750.648465][T22877] input: syz0 as /devices/virtual/input/input39 [ 751.150611][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 751.150627][ T40] audit: type=1326 audit(2000000547.208:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.4.7149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 751.175256][ T40] audit: type=1326 audit(2000000547.228:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.4.7149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 751.190504][ T40] audit: type=1326 audit(2000000547.228:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.4.7149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 751.201020][ T40] audit: type=1326 audit(2000000547.228:6939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.4.7149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 751.211476][ T40] audit: type=1326 audit(2000000547.228:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.4.7149" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 751.220568][ T40] audit: type=1326 audit(2000000547.228:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.4.7149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 751.232404][ T40] audit: type=1326 audit(2000000547.228:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.4.7149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 751.245386][ T40] audit: type=1326 audit(2000000547.228:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.4.7149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 751.257238][ T40] audit: type=1326 audit(2000000547.228:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.4.7149" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 751.265094][ T40] audit: type=1326 audit(2000000547.228:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.4.7149" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 751.438727][T22929] input: syz0 as /devices/virtual/input/input40 [ 751.590694][T22936] loop5: detected capacity change from 0 to 7 [ 751.640518][ T8038] blk_print_req_error: 11 callbacks suppressed [ 751.640539][ T8038] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.650756][ T8038] buffer_io_error: 10 callbacks suppressed [ 751.650773][ T8038] Buffer I/O error on dev loop5, logical block 0, async page read [ 751.660337][T22936] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.673552][T22936] Buffer I/O error on dev loop5, logical block 0, async page read [ 751.680460][T22936] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.685547][T22936] Buffer I/O error on dev loop5, logical block 0, async page read [ 751.689002][T22936] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.694348][T22936] Buffer I/O error on dev loop5, logical block 0, async page read [ 751.698082][T22936] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.708165][T22936] Buffer I/O error on dev loop5, logical block 0, async page read [ 751.713568][T22936] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.717558][T22936] Buffer I/O error on dev loop5, logical block 0, async page read [ 751.721143][T22936] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.726303][T22936] Buffer I/O error on dev loop5, logical block 0, async page read [ 751.730123][T22936] ldm_validate_partition_table(): Disk read failed. [ 751.733180][T22936] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.737213][T22936] Buffer I/O error on dev loop5, logical block 0, async page read [ 751.741229][T22936] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.745099][T22936] Buffer I/O error on dev loop5, logical block 0, async page read [ 751.747910][T22936] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.750961][T22936] Buffer I/O error on dev loop5, logical block 0, async page read [ 751.755220][T22936] Dev loop5: unable to read RDB block 0 [ 751.758166][T22936] loop5: unable to read partition table [ 751.761148][T22936] loop5: partition table beyond EOD, truncated [ 751.767708][T22936] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 751.772315][T22941] netlink: 'syz.3.7164': attribute type 7 has an invalid length. [ 753.159883][T23013] input: syz0 as /devices/virtual/input/input41 [ 753.343785][T23024] loop5: detected capacity change from 0 to 7 [ 753.516169][T23024] Dev loop5: unable to read RDB block 7 [ 753.518262][T23024] loop5: unable to read partition table [ 753.520510][T23024] loop5: partition table beyond EOD, truncated [ 753.525094][T23024] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 753.605404][T23040] input: syz0 as /devices/virtual/input/input42 [ 753.905185][T23061] loop5: detected capacity change from 0 to 7 [ 754.093022][T23070] __nla_validate_parse: 3 callbacks suppressed [ 754.093043][T23070] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7223'. [ 754.100320][T23061] Dev loop5: unable to read RDB block 7 [ 754.107177][T23061] loop5: unable to read partition table [ 754.111792][T23061] loop5: partition table beyond EOD, truncated [ 754.118272][T23061] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 754.374241][T23054] nbd0: detected capacity change from 0 to 128 [ 754.398458][T17481] block nbd0: Receive control failed (result -104) [ 754.399861][ T5984] block nbd0: Receive control failed (result -32) [ 754.530228][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7232'. [ 754.582886][ C1] net_ratelimit: 27315 callbacks suppressed [ 754.582910][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.590142][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 754.597076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.602653][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.607710][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 754.613694][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.619477][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.623782][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 754.628122][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.634011][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.292882][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 755.333073][T17778] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 755.446262][ T10] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 755.449472][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.452176][ T10] usb 8-1: Product: syz [ 755.454736][ T10] usb 8-1: Manufacturer: syz [ 755.456713][ T10] usb 8-1: SerialNumber: syz [ 755.482944][T17778] usb 6-1: Using ep0 maxpacket: 8 [ 755.486922][T17778] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 755.490273][T17778] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 755.495912][T17778] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 755.501021][T17778] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 755.505966][T17778] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 755.511539][T17778] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 755.516929][T17778] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 755.522407][T17778] usb 6-1: config 168 interface 0 has no altsetting 0 [ 755.526912][T17778] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 755.530336][T17778] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 755.536477][T17778] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 755.541277][T17778] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 755.546379][T17778] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 755.551020][T17778] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 755.557242][T17778] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 755.563047][T17778] usb 6-1: config 168 interface 0 has no altsetting 0 [ 755.567430][T17778] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 755.571145][T17778] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 755.576484][T17778] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 755.581539][T17778] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 755.587680][ T24] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 755.591096][T17778] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 755.596234][T17778] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 755.601369][T17778] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 755.608340][T17778] usb 6-1: config 168 interface 0 has no altsetting 0 [ 755.614299][T17778] usb 6-1: string descriptor 0 read error: -22 [ 755.617622][T17778] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 755.622080][T17778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.646232][T17778] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 755.723471][ T10] rtl8150 8-1:1.0: couldn't reset the device [ 755.723636][ T10] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 755.730116][ T10] usb 8-1: USB disconnect, device number 22 [ 755.754554][ T24] usb 14-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 755.761446][ T24] usb 14-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 755.761478][ T24] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.761498][ T24] usb 14-1: Product: syz [ 755.761514][ T24] usb 14-1: Manufacturer: syz [ 755.761529][ T24] usb 14-1: SerialNumber: syz [ 755.765259][T23129] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 755.765404][T23129] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 755.854326][T18752] usb 6-1: USB disconnect, device number 25 [ 755.969734][T18757] usb 14-1: USB disconnect, device number 9 [ 756.060352][T23127] adutux: No device or device unplugged -19 [ 756.745270][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 756.745293][ T40] audit: type=1800 audit(2000000552.798:6965): pid=23160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7265" name="file0" dev="9p" ino=72876367 res=0 errno=0 [ 757.063350][T10866] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 757.235724][T23166] netlink: 75 bytes leftover after parsing attributes in process `syz.3.7268'. [ 757.246941][T10866] usb 8-1: unable to get BOS descriptor or descriptor too short [ 757.256024][T10866] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 757.262626][T10866] usb 8-1: can't read configurations, error -71 [ 757.542884][T23180] nbd1: detected capacity change from 0 to 128 [ 757.558467][T17481] block nbd1: Receive control failed (result -32) [ 757.565108][ T5984] block nbd1: Receive control failed (result -32) [ 757.585043][T18018] block nbd1: Dead connection, failed to find a fallback [ 757.620440][T18018] block nbd1: shutting down sockets [ 757.636876][T18018] blk_print_req_error: 5 callbacks suppressed [ 757.636897][T18018] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.648057][T18018] buffer_io_error: 5 callbacks suppressed [ 757.648075][T18018] Buffer I/O error on dev nbd1, logical block 0, async page read [ 757.655687][T18018] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.660624][T18018] Buffer I/O error on dev nbd1, logical block 0, async page read [ 757.669677][T18018] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.674630][T18018] Buffer I/O error on dev nbd1, logical block 0, async page read [ 757.678871][T18018] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.693562][T18018] Buffer I/O error on dev nbd1, logical block 0, async page read [ 757.697104][T18018] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.700961][T18018] Buffer I/O error on dev nbd1, logical block 0, async page read [ 757.706537][T18018] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.710459][T18018] Buffer I/O error on dev nbd1, logical block 0, async page read [ 757.721627][T18018] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.726274][T18018] Buffer I/O error on dev nbd1, logical block 0, async page read [ 757.729985][T18018] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.734256][T18018] Buffer I/O error on dev nbd1, logical block 0, async page read [ 757.737944][T18018] ldm_validate_partition_table(): Disk read failed. [ 757.741222][T18018] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.745839][T18018] Buffer I/O error on dev nbd1, logical block 0, async page read [ 757.749339][T18018] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.754355][T18018] Buffer I/O error on dev nbd1, logical block 0, async page read [ 757.758628][T18018] Dev nbd1: unable to read RDB block 0 [ 757.762325][T18018] nbd1: unable to read partition table [ 757.770293][T18018] ldm_validate_partition_table(): Disk read failed. [ 757.774495][T18018] Dev nbd1: unable to read RDB block 0 [ 757.778850][T18018] nbd1: unable to read partition table [ 758.444232][T23206] tun0: tun_chr_ioctl cmd 1074025675 [ 758.450217][T23206] tun0: persist disabled [ 758.462386][T23210] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 758.467602][T23210] dvmrp1: linktype set to 804 [ 758.912896][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 759.080238][T23225] netlink: 75 bytes leftover after parsing attributes in process `syz.1.7291'. [ 759.091950][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 759.096480][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 759.103125][ T24] usb 6-1: can't read configurations, error -71 [ 759.277223][T23254] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 759.592957][ C1] net_ratelimit: 27545 callbacks suppressed [ 759.592983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.601728][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 759.607125][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.613582][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.619297][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 759.625539][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.630981][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.637439][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 759.642954][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.648369][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.933946][T23266] nbd2: detected capacity change from 0 to 128 [ 759.954131][T17481] block nbd2: Receive control failed (result -104) [ 759.954241][ T5984] block nbd2: Receive control failed (result -32) [ 759.957095][T23286] mkiss: ax0: crc mode is auto. [ 760.061045][T23293] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7317'. [ 760.261340][T23310] loop4: detected capacity change from 0 to 524287936 [ 760.303333][T23312] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7328'. [ 760.307902][T23312] netlink: 'syz.1.7328': attribute type 2 has an invalid length. [ 760.521004][T23324] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 761.213697][ T40] audit: type=1326 audit(2000000557.278:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23357 comm="syz.4.7343" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70befcc code=0x0 [ 761.383206][T10866] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 761.536582][T10866] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 761.543590][T10866] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 761.548561][T10866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.553636][T10866] usb 6-1: Product: syz [ 761.555585][T10866] usb 6-1: Manufacturer: syz [ 761.557698][T10866] usb 6-1: SerialNumber: syz [ 761.566581][T23339] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 761.570042][T23339] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 761.788800][T10866] usb 6-1: USB disconnect, device number 28 [ 762.139370][T23378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7354'. [ 762.339819][T23392] kernel read not supported for file /:){{:, (pid: 23392 comm: syz.4.7360) [ 762.345697][ T40] audit: type=1800 audit(2000000558.408:6967): pid=23392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7360" name=":){{:," dev="mqueue" ino=91990 res=0 errno=0 [ 762.744234][T23418] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7374'. [ 762.755564][T23418] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7374'. [ 762.759407][T23418] netlink: 'syz.9.7374': attribute type 13 has an invalid length. [ 762.762394][T23418] netlink: 'syz.9.7374': attribute type 14 has an invalid length. [ 763.878597][T23485] overlayfs: invalid origin (0000) [ 763.967921][T23494] netlink: 'syz.4.7407': attribute type 39 has an invalid length. [ 764.117375][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 764.122212][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 764.602993][ C1] net_ratelimit: 25000 callbacks suppressed [ 764.603016][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.610425][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.616024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 764.620774][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.626513][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.631727][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 764.637340][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.643117][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.649066][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 764.654484][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.018099][T23558] vlan0: entered allmulticast mode [ 765.020620][T23558] veth0_to_bond: entered allmulticast mode [ 765.257817][ T40] audit: type=1326 audit(2000000817.317:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23570 comm="syz.9.7441" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 765.276624][ T40] audit: type=1326 audit(2000000817.317:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23570 comm="syz.9.7441" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 765.291724][ T40] audit: type=1326 audit(2000000817.317:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23570 comm="syz.9.7441" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 765.311200][ T40] audit: type=1326 audit(2000000817.317:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23570 comm="syz.9.7441" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 765.326853][ T40] audit: type=1326 audit(2000000817.317:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23570 comm="syz.9.7441" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 765.336794][ T40] audit: type=1326 audit(2000000817.317:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23570 comm="syz.9.7441" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 765.347821][ T40] audit: type=1326 audit(2000000817.317:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23570 comm="syz.9.7441" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 765.358247][ T40] audit: type=1326 audit(2000000817.317:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23570 comm="syz.9.7441" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 765.367807][ T40] audit: type=1326 audit(2000000817.317:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23570 comm="syz.9.7441" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703efe8 code=0x7ffc0000 [ 766.686243][T23629] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 766.689753][T23629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 766.695580][T23629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 766.698412][T23629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 767.529960][T23663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7475'. [ 767.534598][T23663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7475'. [ 767.671050][T23671] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 767.675687][T23671] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 767.899288][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 767.899307][ T40] audit: type=1326 audit(2000000819.957:7053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23668 comm="syz.1.7478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 767.912573][ T40] audit: type=1326 audit(2000000819.957:7054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23668 comm="syz.1.7478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 767.923239][ T40] audit: type=1326 audit(2000000819.957:7055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23668 comm="syz.1.7478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 767.931834][ T40] audit: type=1326 audit(2000000819.957:7056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23668 comm="syz.1.7478" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 767.951068][ T40] audit: type=1326 audit(2000000819.957:7057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23668 comm="syz.1.7478" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7ff5fcc code=0x7ffc0000 [ 768.041752][ T74] Bluetooth: hci3: Frame reassembly failed (-84) [ 768.102923][T18757] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 768.285035][T18757] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 768.292887][T18757] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 768.303080][T18757] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 768.312917][T18757] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 768.319357][T18757] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 768.331113][T18757] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 768.334491][T18757] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 768.337673][T18757] usb 8-1: Product: syz [ 768.339676][T18757] usb 8-1: Manufacturer: syz [ 768.351020][T18757] cdc_wdm 8-1:1.0: skipping garbage [ 768.355312][T18757] cdc_wdm 8-1:1.0: skipping garbage [ 768.360506][T18757] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 768.364316][T18757] cdc_wdm 8-1:1.0: Unknown control protocol [ 768.557888][T17778] usb 8-1: USB disconnect, device number 25 [ 768.753854][ T5988] Bluetooth: hci1: command 0x0c1a tx timeout [ 768.755919][ T5988] Bluetooth: hci0: command 0x0c1a tx timeout [ 768.758924][ T5984] Bluetooth: hci2: command 0x0c1a tx timeout [ 768.761446][ T5988] Bluetooth: hci7: command 0x0c1a tx timeout [ 769.612952][ C1] net_ratelimit: 23418 callbacks suppressed [ 769.612970][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.620579][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.624963][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 769.630592][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.637867][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.642077][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 769.646886][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.651090][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.656022][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 769.661373][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.002916][T17778] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 770.102974][T17346] Bluetooth: hci3: command 0x1003 tx timeout [ 770.107749][T17481] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 770.175610][T17778] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 770.183074][T17778] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 770.190811][T17778] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 770.196355][T17778] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 770.201034][T17778] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 770.209006][T17778] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 770.216084][T17778] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 770.219585][T17778] usb 6-1: Product: syz [ 770.221399][T17778] usb 6-1: Manufacturer: syz [ 770.241787][T17778] cdc_wdm 6-1:1.0: skipping garbage [ 770.251162][T17778] cdc_wdm 6-1:1.0: skipping garbage [ 770.260486][T17778] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 770.267717][T17778] cdc_wdm 6-1:1.0: Unknown control protocol [ 770.454548][T18757] usb 6-1: USB disconnect, device number 29 [ 770.604552][T23792] syzkaller1: tun_chr_ioctl cmd 35108 [ 770.767129][T23798] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7535'. [ 771.332552][T23839] bridge0: entered promiscuous mode [ 771.343441][T23839] macvlan3: entered promiscuous mode [ 771.472925][T17778] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 771.632922][T17778] usb 6-1: Using ep0 maxpacket: 8 [ 771.636121][T17778] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 771.639804][T17778] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 771.644081][T17778] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 771.647894][T17778] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 771.652337][T17778] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 771.658290][T17778] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.877587][T17778] usb 6-1: GET_CAPABILITIES returned 0 [ 771.879530][T17778] usbtmc 6-1:16.0: can't read capabilities [ 772.085159][ T10] usb 6-1: USB disconnect, device number 30 [ 772.481098][T23875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7570'. [ 772.484710][T23875] netlink: 'syz.4.7570': attribute type 30 has an invalid length. [ 772.501145][ T53] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.506398][ T53] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.509725][T23875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7570'. [ 772.511918][ T53] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.512695][T23875] netlink: 'syz.4.7570': attribute type 30 has an invalid length. [ 772.519514][ T53] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.699428][T23891] blkio.reset_stats is deprecated [ 772.828421][T23900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7583'. [ 772.868436][T23905] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7586'. [ 772.871597][T23905] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7586'. [ 773.190158][T23929] syz_tun: entered allmulticast mode [ 773.196829][T23927] syz_tun: left allmulticast mode [ 773.409378][T23953] sp0: Synchronizing with TNC [ 773.462962][T17778] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 773.613055][T17778] usb 9-1: Using ep0 maxpacket: 8 [ 773.618403][T17778] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 773.622229][T17778] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 773.625950][T17778] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 773.629569][T17778] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.635272][T17778] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 773.638468][T17778] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.802669][T23961] kvm: user requested TSC rate below hardware speed [ 773.851744][T17778] usb 9-1: GET_CAPABILITIES returned 0 [ 773.855959][T17778] usbtmc 9-1:16.0: can't read capabilities [ 773.863084][T17346] Bluetooth: hci3: command 0x1003 tx timeout [ 773.863137][T17481] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 774.055403][T17778] usb 9-1: USB disconnect, device number 12 [ 774.107544][T23977] 9p: Invalid uid '0x00000000ffffffff' [ 774.241192][T23986] [ 774.242033][T23986] ====================================================== [ 774.244271][T23986] WARNING: possible circular locking dependency detected [ 774.246526][T23986] syzkaller #0 Tainted: G L [ 774.248511][T23986] ------------------------------------------------------ [ 774.250757][T23986] syz.3.7623/23986 is trying to acquire lock: [ 774.252707][T23986] ffffffff8e9b0700 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 774.256148][T23986] [ 774.256148][T23986] but task is already holding lock: [ 774.258631][T23986] ffffffff8e97e080 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 774.261620][T23986] [ 774.261620][T23986] which lock already depends on the new lock. [ 774.261620][T23986] [ 774.264983][T23986] [ 774.264983][T23986] the existing dependency chain (in reverse order) is: [ 774.267822][T23986] [ 774.267822][T23986] -> #8 (slab_mutex){+.+.}-{4:4}: [ 774.270167][T23986] __mutex_lock+0x1a4/0x1b10 [ 774.271876][T23986] kmem_cache_destroy+0x59/0x180 [ 774.273823][T23986] p9_client_destroy+0x20c/0x3a0 [ 774.275903][T23986] v9fs_session_close+0x49/0x2d0 [ 774.277706][T23986] v9fs_kill_super+0x4d/0xa0 [ 774.279329][T23986] deactivate_locked_super+0xc1/0x1b0 [ 774.281290][T23986] deactivate_super+0xe7/0x110 [ 774.283077][T23986] cleanup_mnt+0x21f/0x450 [ 774.284643][T23986] task_work_run+0x150/0x240 [ 774.286437][T23986] exit_to_user_mode_loop+0x100/0x4a0 [ 774.288495][T23986] __do_fast_syscall_32+0x608/0x950 [ 774.290637][T23986] do_fast_syscall_32+0x32/0x70 [ 774.292482][T23986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 774.294714][T23986] [ 774.294714][T23986] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 774.297191][T23986] cpus_read_lock+0x42/0x170 [ 774.298903][T23986] static_key_slow_inc+0x12/0x30 [ 774.300943][T23986] udp_lib_setsockopt+0x7ca/0x890 [ 774.303011][T23986] udpv6_setsockopt+0xa3/0xb0 [ 774.304891][T23986] do_sock_setsockopt+0xf3/0x1d0 [ 774.306795][T23986] __sys_setsockopt+0x119/0x190 [ 774.308591][T23986] __ia32_sys_setsockopt+0xbc/0x160 [ 774.310576][T23986] __do_fast_syscall_32+0xe7/0x950 [ 774.312379][T23986] do_fast_syscall_32+0x32/0x70 [ 774.314154][T23986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 774.316588][T23986] [ 774.316588][T23986] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 774.319545][T23986] lock_sock_nested+0x41/0xf0 [ 774.321424][T23986] inet_shutdown+0x67/0x410 [ 774.323087][T23986] nbd_mark_nsock_dead+0xae/0x5c0 [ 774.324839][T23986] sock_shutdown+0x16b/0x200 [ 774.326522][T23986] nbd_config_put+0x1eb/0x750 [ 774.328160][T23986] nbd_genl_connect+0xaf8/0x1a40 [ 774.329898][T23986] genl_family_rcv_msg_doit+0x214/0x300 [ 774.331946][T23986] genl_rcv_msg+0x560/0x800 [ 774.333691][T23986] netlink_rcv_skb+0x159/0x420 [ 774.335556][T23986] genl_rcv+0x28/0x40 [ 774.337173][T23986] netlink_unicast+0x585/0x850 [ 774.339026][T23986] netlink_sendmsg+0x8b0/0xda0 [ 774.340723][T23986] ____sys_sendmsg+0x9e1/0xb70 [ 774.342400][T23986] ___sys_sendmsg+0x190/0x1e0 [ 774.344052][T23986] __sys_sendmsg+0x170/0x220 [ 774.345664][T23986] __do_fast_syscall_32+0xe7/0x950 [ 774.347492][T23986] do_fast_syscall_32+0x32/0x70 [ 774.349184][T23986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 774.351454][T23986] [ 774.351454][T23986] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 774.354464][T23986] __mutex_lock+0x1a4/0x1b10 [ 774.356442][T23986] nbd_queue_rq+0x428/0x1080 [ 774.358325][T23986] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 774.360242][T23986] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 774.362466][T23986] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 774.364818][T23986] blk_mq_run_hw_queue+0x23c/0x670 [ 774.366678][T23986] blk_mq_dispatch_list+0x51d/0x1360 [ 774.368549][T23986] blk_mq_flush_plug_list+0x130/0x600 [ 774.370411][T23986] __blk_flush_plug+0x2c4/0x4b0 [ 774.372137][T23986] __submit_bio+0x584/0x6c0 [ 774.373740][T23986] submit_bio_noacct_nocheck+0x543/0xbf0 [ 774.375980][T23986] submit_bio_noacct+0xd18/0x2000 [ 774.378187][T23986] submit_bh_wbc+0x681/0x890 [ 774.379963][T23986] block_read_full_folio+0x4c8/0x8e0 [ 774.381827][T23986] filemap_read_folio+0xfc/0x3b0 [ 774.383630][T23986] do_read_cache_folio+0x2d7/0x6b0 [ 774.385412][T23986] read_part_sector+0xd1/0x370 [ 774.387113][T23986] adfspart_check_ICS+0x91/0x7d0 [ 774.388860][T23986] bdev_disk_changed+0x7a3/0x1250 [ 774.390757][T23986] blkdev_get_whole+0x187/0x290 [ 774.392639][T23986] bdev_open+0x2c7/0xe40 [ 774.394479][T23986] blkdev_open+0x34e/0x4f0 [ 774.396491][T23986] do_dentry_open+0x6d8/0x1660 [ 774.398393][T23986] vfs_open+0x82/0x3f0 [ 774.399904][T23986] path_openat+0x208c/0x31a0 [ 774.401525][T23986] do_file_open+0x20e/0x430 [ 774.403209][T23986] do_sys_openat2+0x10d/0x1e0 [ 774.404889][T23986] __x64_sys_openat+0x12d/0x210 [ 774.406997][T23986] do_syscall_64+0x10b/0xf80 [ 774.408722][T23986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.410937][T23986] [ 774.410937][T23986] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 774.413735][T23986] __mutex_lock+0x1a4/0x1b10 [ 774.415895][T23986] nbd_queue_rq+0xba/0x1080 [ 774.417764][T23986] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 774.419795][T23986] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 774.421952][T23986] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 774.423982][T23986] blk_mq_run_hw_queue+0x23c/0x670 [ 774.425799][T23986] blk_mq_dispatch_list+0x51d/0x1360 [ 774.427669][T23986] blk_mq_flush_plug_list+0x130/0x600 [ 774.429703][T23986] __blk_flush_plug+0x2c4/0x4b0 [ 774.431743][T23986] __submit_bio+0x584/0x6c0 [ 774.433734][T23986] submit_bio_noacct_nocheck+0x543/0xbf0 [ 774.436146][T23986] submit_bio_noacct+0xd18/0x2000 [ 774.437951][T23986] submit_bh_wbc+0x681/0x890 [ 774.439606][T23986] block_read_full_folio+0x4c8/0x8e0 [ 774.441439][T23986] filemap_read_folio+0xfc/0x3b0 [ 774.443164][T23986] do_read_cache_folio+0x2d7/0x6b0 [ 774.445465][T23986] read_part_sector+0xd1/0x370 [ 774.448131][T23986] adfspart_check_ICS+0x91/0x7d0 [ 774.450669][T23986] bdev_disk_changed+0x7a3/0x1250 [ 774.452875][T23986] blkdev_get_whole+0x187/0x290 [ 774.454653][T23986] bdev_open+0x2c7/0xe40 [ 774.456225][T23986] blkdev_open+0x34e/0x4f0 [ 774.457797][T23986] do_dentry_open+0x6d8/0x1660 [ 774.459453][T23986] vfs_open+0x82/0x3f0 [ 774.460873][T23986] path_openat+0x208c/0x31a0 [ 774.462475][T23986] do_file_open+0x20e/0x430 [ 774.464017][T23986] do_sys_openat2+0x10d/0x1e0 [ 774.465590][T23986] __x64_sys_openat+0x12d/0x210 [ 774.467324][T23986] do_syscall_64+0x10b/0xf80 [ 774.469024][T23986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.471285][T23986] [ 774.471285][T23986] -> #3 (set->srcu){.+.+}-{0:0}: [ 774.473711][T23986] __synchronize_srcu+0xa2/0x300 [ 774.475509][T23986] blk_mq_quiesce_queue+0x149/0x1c0 [ 774.477368][T23986] elevator_switch+0x17b/0x7e0 [ 774.479014][T23986] elevator_change+0x352/0x530 [ 774.480598][T23986] elevator_set_default+0x29e/0x360 [ 774.482340][T23986] blk_register_queue+0x48e/0x630 [ 774.484088][T23986] __add_disk+0x73f/0xe40 [ 774.485749][T23986] add_disk_fwnode+0x118/0x5c0 [ 774.487601][T23986] nbd_dev_add+0x77a/0xb10 [ 774.489278][T23986] nbd_init+0x291/0x2b0 [ 774.491017][T23986] do_one_initcall+0x121/0x750 [ 774.492821][T23986] kernel_init_freeable+0x6ea/0x7b0 [ 774.494558][T23986] kernel_init+0x1f/0x1e0 [ 774.496220][T23986] ret_from_fork+0x72b/0xd50 [ 774.497788][T23986] ret_from_fork_asm+0x1a/0x30 [ 774.499475][T23986] [ 774.499475][T23986] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 774.502039][T23986] __mutex_lock+0x1a4/0x1b10 [ 774.504045][T23986] elevator_change+0x1bc/0x530 [ 774.506069][T23986] elevator_set_none+0x92/0xf0 [ 774.507904][T23986] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 774.509931][T23986] nbd_start_device+0x1a6/0xbd0 [ 774.511645][T23986] nbd_genl_connect+0xff2/0x1a40 [ 774.513380][T23986] genl_family_rcv_msg_doit+0x214/0x300 [ 774.515523][T23986] genl_rcv_msg+0x560/0x800 [ 774.517194][T23986] netlink_rcv_skb+0x159/0x420 [ 774.518929][T23986] genl_rcv+0x28/0x40 [ 774.520518][T23986] netlink_unicast+0x585/0x850 [ 774.522514][T23986] netlink_sendmsg+0x8b0/0xda0 [ 774.524538][T23986] ____sys_sendmsg+0x9e1/0xb70 [ 774.526304][T23986] ___sys_sendmsg+0x190/0x1e0 [ 774.527956][T23986] __sys_sendmsg+0x170/0x220 [ 774.529601][T23986] __do_fast_syscall_32+0xe7/0x950 [ 774.531381][T23986] do_fast_syscall_32+0x32/0x70 [ 774.533080][T23986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 774.535348][T23986] [ 774.535348][T23986] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 774.538363][T23986] blk_alloc_queue+0x610/0x790 [ 774.540156][T23986] blk_mq_alloc_queue+0x174/0x290 [ 774.541921][T23986] __blk_mq_alloc_disk+0x29/0x120 [ 774.543672][T23986] nbd_dev_add+0x492/0xb10 [ 774.545313][T23986] nbd_init+0x291/0x2b0 [ 774.547036][T23986] do_one_initcall+0x121/0x750 [ 774.548904][T23986] kernel_init_freeable+0x6ea/0x7b0 [ 774.550832][T23986] kernel_init+0x1f/0x1e0 [ 774.552396][T23986] ret_from_fork+0x72b/0xd50 [ 774.554075][T23986] ret_from_fork_asm+0x1a/0x30 [ 774.555758][T23986] [ 774.555758][T23986] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 774.558215][T23986] __lock_acquire+0x14b8/0x2630 [ 774.560135][T23986] lock_acquire+0x1b1/0x370 [ 774.562277][T23986] fs_reclaim_acquire+0xc4/0x100 [ 774.564022][T23986] __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 774.566194][T23986] kstrdup+0x51/0xe0 [ 774.567663][T23986] kstrdup_const+0x63/0x80 [ 774.569429][T23986] __kmem_cache_create_args+0x118/0x420 [ 774.571715][T23986] bioset_init+0x5ee/0x8a0 [ 774.573416][T23986] mddev_init+0x17c/0x820 [ 774.575249][T23986] md_alloc+0xc7/0x10a0 [ 774.576795][T23986] md_probe+0x73/0xf0 [ 774.578254][T23986] blk_probe_dev+0x149/0x1e0 [ 774.579995][T23986] blk_request_module+0x16/0xc0 [ 774.581964][T23986] blkdev_get_no_open+0x9b/0xf0 [ 774.584070][T23986] bdev_file_open_by_dev+0x70/0x210 [ 774.586154][T23986] swsusp_check+0x72/0x470 [ 774.587848][T23986] software_resume+0x6f/0x330 [ 774.589643][T23986] resume_store+0x248/0x460 [ 774.591213][T23986] kobj_attr_store+0x58/0x80 [ 774.592846][T23986] sysfs_kf_write+0xf2/0x150 [ 774.594822][T23986] kernfs_fop_write_iter+0x3e0/0x5f0 [ 774.597233][T23986] vfs_write+0x6ac/0x1070 [ 774.599393][T23986] ksys_write+0x12a/0x250 [ 774.601695][T23986] __do_fast_syscall_32+0xe7/0x950 [ 774.604270][T23986] do_fast_syscall_32+0x32/0x70 [ 774.606589][T23986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 774.609539][T23986] [ 774.609539][T23986] other info that might help us debug this: [ 774.609539][T23986] [ 774.613796][T23986] Chain exists of: [ 774.613796][T23986] fs_reclaim --> cpu_hotplug_lock --> slab_mutex [ 774.613796][T23986] [ 774.619423][T23986] Possible unsafe locking scenario: [ 774.619423][T23986] [ 774.622776][T23986] CPU0 CPU1 [ 774.622773][ C1] net_ratelimit: 18894 callbacks suppressed [ 774.622789][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.625062][T23986] ---- ---- [ 774.626978][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.632050][T23986] lock(slab_mutex [ 774.634365][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 774.639428][T23986] ); [ 774.640901][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.645256][T23986] lock(cpu_hotplug_lock); [ 774.645279][T23986] lock(slab_mutex); [ 774.645290][T23986] lock(fs_reclaim); [ 774.645302][T23986] [ 774.645302][T23986] *** DEADLOCK *** [ 774.645302][T23986] [ 774.646254][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.651420][T23986] 9 locks held by syz.3.7623/23986: [ 774.654073][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 774.656795][T23986] #0: [ 774.658314][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.661417][T23986] ffff8880251bb5f0 [ 774.665167][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.667353][T23986] ( [ 774.671370][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 774.672598][T23986] &f->f_pos_lock){+.+.}-{4:4} [ 774.676756][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.677978][T23986] , at: fdget_pos+0x2aa/0x380 [ 774.697160][T23986] #1: ffff88802956c410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 774.701376][T23986] #2: ffff888076410c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 774.706270][T23986] #3: ffff88801cbfc0f8 (kn->active#78){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 774.710454][T23986] #4: ffffffff8e6a1ec0 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x330 [ 774.714713][T23986] #5: ffffffff8f311ee0 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 774.719299][T23986] #6: ffffffff90160460 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x10a0 [ 774.723327][T23986] #7: ffffffff8f2f8dc0 (bio_slab_lock){+.+.}-{4:4}, at: bioset_init+0x2ad/0x8a0 [ 774.727123][T23986] #8: ffffffff8e97e080 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 774.731194][T23986] [ 774.731194][T23986] stack backtrace: [ 774.733765][T23986] CPU: 2 UID: 0 PID: 23986 Comm: syz.3.7623 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.733793][T23986] Tainted: [L]=SOFTLOCKUP [ 774.733802][T23986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 774.733817][T23986] Call Trace: [ 774.733828][T23986] [ 774.733838][T23986] dump_stack_lvl+0x100/0x190 [ 774.733864][T23986] print_circular_bug.cold+0x178/0x1c7 [ 774.733898][T23986] check_noncircular+0x146/0x160 [ 774.733931][T23986] __lock_acquire+0x14b8/0x2630 [ 774.733953][T23986] lock_acquire+0x1b1/0x370 [ 774.733974][T23986] ? __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 774.733999][T23986] ? __pfx___mutex_lock+0x10/0x10 [ 774.734033][T23986] fs_reclaim_acquire+0xc4/0x100 [ 774.734056][T23986] ? __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 774.734075][T23986] __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 774.734093][T23986] ? kstrdup_const+0x63/0x80 [ 774.734135][T23986] ? __pfx_snprintf+0x10/0x10 [ 774.734167][T23986] kstrdup+0x51/0xe0 [ 774.734187][T23986] kstrdup_const+0x63/0x80 [ 774.734206][T23986] __kmem_cache_create_args+0x118/0x420 [ 774.734236][T23986] bioset_init+0x5ee/0x8a0 [ 774.734260][T23986] ? __pfx_bioset_init+0x10/0x10 [ 774.734283][T23986] ? kasan_save_track+0x14/0x30 [ 774.734305][T23986] ? __kasan_kmalloc+0xaa/0xb0 [ 774.734327][T23986] ? percpu_ref_init+0x244/0x3f0 [ 774.734351][T23986] mddev_init+0x17c/0x820 [ 774.734381][T23986] md_alloc+0xc7/0x10a0 [ 774.734402][T23986] md_probe+0x73/0xf0 [ 774.734421][T23986] ? __pfx_md_probe+0x10/0x10 [ 774.734438][T23986] blk_probe_dev+0x149/0x1e0 [ 774.734461][T23986] blk_request_module+0x16/0xc0 [ 774.734487][T23986] blkdev_get_no_open+0x9b/0xf0 [ 774.734519][T23986] bdev_file_open_by_dev+0x70/0x210 [ 774.734549][T23986] swsusp_check+0x72/0x470 [ 774.734576][T23986] software_resume+0x6f/0x330 [ 774.734598][T23986] resume_store+0x248/0x460 [ 774.734622][T23986] ? __pfx_resume_store+0x10/0x10 [ 774.734651][T23986] ? find_held_lock+0x2b/0x80 [ 774.734675][T23986] ? sysfs_file_kobj+0xe4/0x290 [ 774.734709][T23986] ? sysfs_file_kobj+0xe4/0x290 [ 774.734737][T23986] ? __pfx_resume_store+0x10/0x10 [ 774.734757][T23986] kobj_attr_store+0x58/0x80 [ 774.734779][T23986] ? __pfx_kobj_attr_store+0x10/0x10 [ 774.734801][T23986] sysfs_kf_write+0xf2/0x150 [ 774.734832][T23986] kernfs_fop_write_iter+0x3e0/0x5f0 [ 774.734856][T23986] ? __pfx_sysfs_kf_write+0x10/0x10 [ 774.734885][T23986] vfs_write+0x6ac/0x1070 [ 774.734906][T23986] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 774.734934][T23986] ? __pfx_vfs_write+0x10/0x10 [ 774.734956][T23986] ? find_held_lock+0x2b/0x80 [ 774.734989][T23986] ksys_write+0x12a/0x250 [ 774.735008][T23986] ? __pfx_ksys_write+0x10/0x10 [ 774.735029][T23986] ? rcu_is_watching+0x12/0xc0 [ 774.735052][T23986] __do_fast_syscall_32+0xe7/0x950 [ 774.735069][T23986] ? lockdep_hardirqs_on+0x78/0x100 [ 774.735100][T23986] do_fast_syscall_32+0x32/0x70 [ 774.735121][T23986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 774.735148][T23986] RIP: 0023:0xf703efcc [ 774.735164][T23986] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 774.735183][T23986] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 774.735201][T23986] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 774.735213][T23986] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 774.735225][T23986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 774.735237][T23986] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 774.735250][T23986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 774.735270][T23986] [ 774.906529][T23986] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 774.913081][T23986] block device autoloading is deprecated and will be removed. [ 774.916908][T23986] PM: Image not found (code -5) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 775.289492][T20763] syz_tun (unregistering): left allmulticast mode [ 775.294057][T20763] syz_tun (unregistering): left promiscuous mode [ 775.297153][T20763] bridge0: port 3(syz_tun) entered disabled state [ 775.373495][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.500609][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.577753][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.654665][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.783796][ T53] dummy0: left allmulticast mode [ 775.786276][ T53] bridge0: port 3(dummy0) entered disabled state [ 775.800076][ T53] bridge_slave_1: left promiscuous mode [ 775.803107][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.813551][ T53] bridge_slave_0: left allmulticast mode [ 775.816698][ T53] bridge_slave_0: left promiscuous mode [ 775.820001][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.136481][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.146766][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.153099][ T53] bond0 (unregistering): Released all slaves [ 776.219751][ T53] tipc: Disabling bearer [ 776.221584][ T53] tipc: Left network mode [ 776.264378][ T53] IPVS: stopping backup sync thread 21390 ... [ 776.330597][ T5673] 8021q: adding VLAN 0 to HW filter on device eth26 [ 776.395847][ T53] hsr_slave_0: left promiscuous mode [ 776.403767][ T53] hsr_slave_1: left promiscuous mode [ 776.406361][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.409336][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.416380][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.419026][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.427458][ T53] veth1_macvtap: left promiscuous mode [ 776.429695][ T53] veth0_macvtap: left promiscuous mode [ 776.431853][ T53] veth1_vlan: left promiscuous mode [ 776.433856][ T53] veth0_vlan: left promiscuous mode [ 776.594836][ T53] team0 (unregistering): Port device team_slave_1 removed [ 776.603678][ T53] team0 (unregistering): Port device team_slave_0 removed [ 776.660283][ T5673] 8021q: adding VLAN 0 to HW filter on device eth27 [ 776.800715][ T5673] 8021q: adding VLAN 0 to HW filter on device eth28 [ 776.954769][ T5673] 8021q: adding VLAN 0 to HW filter on device eth29 [ 779.632849][ C1] net_ratelimit: 28640 callbacks suppressed [ 779.632866][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.638913][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.643962][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 779.648512][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.652939][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.657332][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 779.661812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.674607][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.680618][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 779.686731][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)