last executing test programs: 1.932782408s ago: executing program 3 (id=9812): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f0000000180)='no\'\x91\x03a\x8f\xa3N\xf0[\x1dG\xb6zob,,er\xe8\xe8\xb5;%j\xb8\xbc\n\x87\xfc\x03z\xe6,,\x80@q\xac\x14\xda\xf7\x1d\b\xf4\x0f\xd0\x13\xe5\xe9J#\xb3\"\x8e\xda\x04h/\x15.\x9dW1\x15\xc8\xb1\xa8n\aNC\xba\x12\"\x86C\xd9\xd7\x88\xa1E)\xd08+\x80\xee\xb6\xe1\xf7\x00\xbf1\xae\xf0\xda<\x93\x99+`#\xa0\xf7\x8e\xa2k\xb2\x96=ed\x1f\xca\xa3\xa3\xa28\xee\xc3\n\xbc\x92,H;\xdd\x1b\xb2y\\\xe5\x12\xa9\x9a$\xef\x89\xdb\r\xc8G;Pxi9 h~' [ 399.422039][T21254] ALSA: mixer_oss: invalid OSS volume ' ȪUBFRнEV#d' [ 399.441729][T21254] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 399.460989][T21254] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 399.470545][T21254] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 399.492895][T21254] ALSA: mixer_oss: invalid OSS volume 'udFdsj@Jug0cd' [ 399.511777][T21254] ALSA: mixer_oss: invalid OSS volume 'NW֓YZS%fV' [ 399.540881][T21254] ALSA: mixer_oss: invalid OSS volume ''lȿDTBxN' [ 399.574657][T21254] ALSA: mixer_oss: invalid OSS volume 'y' [ 399.600587][T21254] ALSA: mixer_oss: invalid OSS volume '5y}9r~M+3' [ 399.612802][T21254] ALSA: mixer_oss: invalid OSS volume '϶*kC9d7띦2;"' [ 399.621781][T21254] ALSA: mixer_oss: invalid OSS volume '*ndV8mE5:4' [ 399.632948][T21254] ALSA: mixer_oss: invalid OSS volume 'PKڵ1} {N&Ia 8*ʇ' [ 399.641752][T21254] ALSA: mixer_oss: invalid OSS volume 'OC"['m/AO^G&-' [ 399.651376][T21254] ALSA: mixer_oss: invalid OSS volume '' [ 399.658184][T21254] ALSA: mixer_oss: invalid OSS volume '@HV-=f#o)U.N' [ 399.685754][ T4179] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 399.723226][T21275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8024'. [ 399.765873][ T5677] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 399.946948][ T4179] usb 5-1: Using ep0 maxpacket: 16 [ 400.053506][T21297] loop3: detected capacity change from 0 to 1024 [ 400.076116][ T4179] usb 5-1: config 8 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 400.094710][ T4179] usb 5-1: config 8 interface 0 has no altsetting 0 [ 400.175898][ T4179] usb 5-1: New USB device found, idVendor=046d, idProduct=c14f, bcdDevice=ff.ff [ 400.186201][ T5677] usb 3-1: unable to get BOS descriptor or descriptor too short [ 400.208359][ T4179] usb 5-1: New USB device strings: Mfr=230, Product=0, SerialNumber=0 [ 400.218409][T21297] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback. [ 400.262388][ T4179] usb 5-1: Manufacturer: syz [ 400.281017][ T5677] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.312686][ T5677] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 400.354586][ T5677] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.434183][T21320] netlink: 'syz.1.8046': attribute type 32 has an invalid length. [ 400.546055][ T5677] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 400.575807][ T5677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.580829][ T4237] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 400.592623][ T5677] usb 3-1: Product: syz [ 400.606530][ T5677] usb 3-1: Manufacturer: syz [ 400.615897][ T5677] usb 3-1: SerialNumber: syz [ 400.635838][ T4179] usb 5-1: USB disconnect, device number 22 [ 400.694672][T21328] loop3: detected capacity change from 0 to 4096 [ 400.796190][T21328] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 400.860088][ T1278] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 400.868669][ T4192] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 400.880314][ T4192] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 400.898144][ T4192] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 400.915480][ T1183] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 400.934009][ T4192] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 401.003735][ T5677] usb 3-1: USB disconnect, device number 34 [ 401.232278][ T4237] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 401.285465][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.293907][ T4237] usb 1-1: Product: syz [ 401.304049][ T4237] usb 1-1: Manufacturer: syz [ 401.308525][T21355] netlink: 'syz.1.8061': attribute type 1 has an invalid length. [ 401.320835][ T7385] udevd[7385]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.340268][ T4237] usb 1-1: SerialNumber: syz [ 401.396944][ T4237] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 401.482439][T21363] program syz.3.8065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.012943][T21400] x_tables: unsorted entry at hook 3 [ 402.018403][T21401] comedi comedi0: aio_iiro_16: I/O port conflict (0x1c,8) [ 402.076037][ T4237] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 402.355786][ C1] usb 1-1: ath9k_htc: invalid pkt_len (fefd) [ 402.564233][ T1107] usb 1-1: USB disconnect, device number 35 [ 402.774623][T21451] netlink: 'syz.3.8109': attribute type 1 has an invalid length. [ 403.075945][T21470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8119'. [ 403.097414][T21472] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 403.156007][ T4237] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 403.163644][ T4237] ath9k_htc: Failed to initialize the device [ 403.203721][ T1107] usb 1-1: ath9k_htc: USB layer deinitialized [ 403.254841][T21477] loop3: detected capacity change from 0 to 2048 [ 403.337055][T21477] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.522157][T21500] netlink: 'syz.0.8135': attribute type 1 has an invalid length. [ 403.597865][T21504] netlink: 'syz.4.8136': attribute type 30 has an invalid length. [ 404.304777][T21556] netlink: 'syz.4.8162': attribute type 1 has an invalid length. [ 404.331890][T21556] netlink: 200 bytes leftover after parsing attributes in process `syz.4.8162'. [ 404.584984][T21568] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8168'. [ 404.885744][ T4237] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 405.327361][ T4237] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 405.375767][ T4237] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 405.425387][ T4237] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 405.577378][ T4237] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 405.608440][ T4237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 405.634416][ T4237] usb 1-1: SerialNumber: syz [ 405.957403][ T4237] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 405.963851][ T4237] usbtest: probe of 1-1:1.0 failed with error -22 [ 406.020139][ T4237] usb 1-1: USB disconnect, device number 36 [ 406.027317][T21647] netlink: 800 bytes leftover after parsing attributes in process `syz.1.8206'. [ 406.079295][T21647] netlink: 1301 bytes leftover after parsing attributes in process `syz.1.8206'. [ 406.334840][T21666] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 406.364955][T21669] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8216'. [ 406.612956][T21684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8225'. [ 406.977649][T21709] tmpfs: Bad value for 'mpol' [ 407.182016][T21719] overlayfs: unrecognized mount option "fsname=\(([\," or missing value [ 407.773480][T21731] QAT: Device 1 not found [ 408.322906][T21769] loop4: detected capacity change from 0 to 512 [ 408.474555][T21769] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,grpquota,,errors=continue. Quota mode: writeback. [ 408.525831][T21769] ext4 filesystem being mounted at /1568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.530658][ T2288] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 408.718174][T21796] openvswitch: netlink: Missing key (keys=40, expected=80) [ 408.845984][ T2288] usb 2-1: Using ep0 maxpacket: 32 [ 408.850396][T21805] loop3: detected capacity change from 0 to 64 [ 408.957714][T21805] hfs: dir_umask requires a value [ 408.963596][T21805] hfs: unable to parse mount options [ 408.985060][ T2288] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 409.009775][T21816] loop4: detected capacity change from 0 to 64 [ 409.016027][ T2288] usb 2-1: config 0 has no interface number 0 [ 409.025549][ T2288] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 409.056314][ T2288] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 409.080878][ T2288] usb 2-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 409.214550][T21822] x_tables: duplicate underflow at hook 3 [ 409.285829][ T2288] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 409.318975][ T2288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.344050][ T2288] usb 2-1: Product: syz [ 409.365772][ T2288] usb 2-1: Manufacturer: syz [ 409.396088][ T2288] usb 2-1: SerialNumber: syz [ 409.419406][ T2288] usb 2-1: config 0 descriptor?? [ 409.487995][ T2288] redrat3 2-1:0.83: Couldn't find all endpoints [ 409.777499][ T2288] usb 2-1: USB disconnect, device number 38 [ 410.075828][ T5682] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 410.448310][ T5682] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 410.459613][T21891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 410.482252][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.514471][ T5682] usb 4-1: config 0 descriptor?? [ 410.614073][T21899] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8328'. [ 410.785830][ T5682] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0e [ 410.801683][ T5682] hackrf 4-1:0.0: Could not detect board [ 410.813079][ T5682] hackrf: probe of 4-1:0.0 failed with error -71 [ 410.828532][ T5682] usb 4-1: USB disconnect, device number 32 [ 411.199943][T21929] ieee802154 phy1 wpan1: encryption failed: -22 [ 411.626536][T21946] PKCS8: Unsupported PKCS#8 version [ 411.903219][T21963] loop1: detected capacity change from 0 to 256 [ 412.042628][T21971] netlink: 'syz.2.8363': attribute type 3 has an invalid length. [ 412.069298][T21971] netlink: 'syz.2.8363': attribute type 1 has an invalid length. [ 412.285228][T21984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8369'. [ 412.355117][T21984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.543695][T21997] nfs4: Bad value for 'source' [ 412.608849][T21999] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 413.021926][T22031] sock: sock_timestamping_bind_phc: sock not bind to device [ 413.094558][T22035] netlink: 'syz.2.8394': attribute type 2 has an invalid length. [ 413.114729][T22034] loop1: detected capacity change from 0 to 1024 [ 413.145855][T22035] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8394'. [ 413.164011][T22034] EXT4-fs (loop1): #clusters per group too big: 24576 [ 413.289370][T22043] loop4: detected capacity change from 0 to 64 [ 413.322899][T22050] overlayfs: missing 'workdir' [ 413.468402][T22057] sctp: [Deprecated]: syz.0.8405 (pid 22057) Use of int in max_burst socket option. [ 413.468402][T22057] Use struct sctp_assoc_value instead [ 413.645964][T22046] loop1: detected capacity change from 0 to 4096 [ 413.702842][T22046] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 413.814507][T22069] autofs4:pid:22069:autofs_fill_super: called with bogus options [ 413.823748][T22046] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 414.026117][T22078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8416'. [ 414.054484][ T1278] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 414.073974][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8416'. [ 414.077127][ T4191] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 414.142340][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8416'. [ 414.150184][ T4191] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 414.196121][T22085] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8420'. [ 414.215687][ T4191] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 414.226391][ T4318] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 414.254160][ T4191] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 414.325523][ T26] audit: type=1400 audit(1777603850.830:43): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=22090 comm="syz.3.8423" [ 414.500781][T22103] loop4: detected capacity change from 0 to 512 [ 414.567431][T22103] EXT4-fs (loop4): Ignoring removed bh option [ 414.574149][T22103] EXT4-fs (loop4): Ignoring removed oldalloc option [ 414.625678][ T5682] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 414.643876][T22103] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 414.748413][T22103] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 414.791287][T22122] netlink: ct family unspecified [ 414.797097][T22122] openvswitch: netlink: Actions may not be safe on all matching packets [ 414.806077][T22103] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.8428: bg 0: block 248: padding at end of block bitmap is not set [ 414.831519][T22103] Quota error (device loop4): write_blk: dquota write failed [ 414.845882][T22103] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 414.871013][T22103] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.8428: Failed to acquire dquot type 1 [ 414.896576][T22103] EXT4-fs (loop4): 1 truncate cleaned up [ 414.902875][T22103] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,oldalloc,grpjquota=,,errors=continue. Quota mode: writeback. [ 414.917667][ T5682] usb 1-1: Using ep0 maxpacket: 32 [ 415.079936][ T5682] usb 1-1: unable to get BOS descriptor or descriptor too short [ 415.175911][ T5682] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 415.263928][T22134] loop1: detected capacity change from 0 to 4096 [ 415.376013][ T5682] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 415.399359][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.413022][T22149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8449'. [ 415.424982][T22150] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 415.425309][ T5682] usb 1-1: Product: syz [ 415.446001][T22149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8449'. [ 415.483754][ T5682] usb 1-1: Manufacturer: syz [ 415.534933][ T5682] usb 1-1: SerialNumber: syz [ 415.945888][ T5682] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 415.975834][ T5682] usb 1-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8215 device_setup=1 to enable and report any issues to g@b4.vu [ 416.058435][ T5682] usb 1-1: USB disconnect, device number 37 [ 416.317383][ T5442] udevd[5442]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.519423][T22157] loop4: detected capacity change from 0 to 32768 [ 416.821600][T22211] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 416.978598][T22157] XFS (loop4): Mounting V5 Filesystem [ 417.132747][T22241] Timeout policy `syz1' can only be used by L3 protocol number 32907 [ 417.173079][T22157] XFS (loop4): Ending clean mount [ 417.377490][ T4194] XFS (loop4): Unmounting Filesystem [ 417.590017][T22262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8501'. [ 417.643380][T22264] netlink: 209772 bytes leftover after parsing attributes in process `syz.1.8503'. [ 417.657825][T22264] openvswitch: netlink: Message has 80 unknown bytes. [ 417.921942][T22280] ksmbd: Unknown IPC event: 10, ignore. [ 418.119342][T22292] tmpfs: Bad value for 'mpol' [ 418.318921][T22306] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 418.354825][T22311] SET target dimension over the limit! [ 418.600069][T22329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8535'. [ 418.661345][T22332] netlink: 'syz.0.8533': attribute type 27 has an invalid length. [ 418.696227][T22332] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 418.876769][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8542'. [ 419.013321][T22354] /dev/loop2: Can't open blockdev [ 419.463174][T22384] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.8559'. [ 419.765464][T22407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8573'. [ 420.039365][T22423] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 420.105943][T22423] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 420.174335][T22433] netlink: 22 bytes leftover after parsing attributes in process `syz.4.8586'. [ 420.192467][T22433] netlink: 22 bytes leftover after parsing attributes in process `syz.4.8586'. [ 420.208777][T22433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8586'. [ 420.269298][T22440] rdma_rxe: ignoring netdev event = 23 for lo [ 420.298171][T22440] rdma_rxe: lo changed mtu to 67 [ 420.303431][T22440] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8588'. [ 420.329439][T22440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.366636][T22435] netlink: 'syz.2.8585': attribute type 21 has an invalid length. [ 420.411731][T22435] IPv6: NLM_F_CREATE should be specified when creating new route [ 420.849112][T22484] loop4: detected capacity change from 0 to 64 [ 421.152734][T22509] netlink: 'syz.2.8623': attribute type 10 has an invalid length. [ 421.206201][T22509] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.216349][T22509] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.305927][T22509] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.315155][T22509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.326534][T22509] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.334538][T22509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.507348][T22509] team0: Port device bridge0 added [ 421.525698][ T5685] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 421.718753][ T5677] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 421.758442][T22526] loop1: detected capacity change from 0 to 8192 [ 421.805746][ T4179] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 421.830070][T22526] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 421.843155][T22526] FAT-fs (loop1): Filesystem has been set read-only [ 421.975699][ T5677] usb 4-1: Using ep0 maxpacket: 16 [ 421.985921][ T5685] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 422.005803][ T5685] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 422.025652][ T5685] usb 5-1: Manufacturer: syz [ 422.056863][ T5685] usb 5-1: config 0 descriptor?? [ 422.057961][T22543] loop1: detected capacity change from 0 to 164 [ 422.082620][T22543] Unable to read rock-ridge attributes [ 422.097069][ T5677] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 422.126038][T22543] Unable to read rock-ridge attributes [ 422.171714][T22543] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 422.266206][ T5677] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 422.285952][ T5677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.302330][ T5677] usb 4-1: Product: syz [ 422.316894][T22547] program syz.1.8641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 422.329509][ T5677] usb 4-1: Manufacturer: syz [ 422.334700][ T5677] usb 4-1: SerialNumber: syz [ 422.347316][ T5685] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 422.357252][ T5677] r8152-cfgselector 4-1: config 0 descriptor?? [ 422.366293][ T4179] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 422.385805][ T5685] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22 [ 422.393419][ T4179] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.416172][ T4179] usb 1-1: Product: syz [ 422.421042][ T4179] usb 1-1: Manufacturer: syz [ 422.427123][ T5685] usb 5-1: USB disconnect, device number 23 [ 422.461019][ T4179] usb 1-1: SerialNumber: syz [ 422.492806][ T4179] usb 1-1: config 0 descriptor?? [ 422.575023][T22556] loop1: detected capacity change from 0 to 512 [ 422.630654][T22556] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 422.652605][T22556] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.8644: invalid indirect mapped block 83886080 (level 1) [ 422.672058][T22556] EXT4-fs (loop1): Remounting filesystem read-only [ 422.680331][T22556] EXT4-fs (loop1): 1 orphan inode deleted [ 422.686845][T22556] EXT4-fs (loop1): 1 truncate cleaned up [ 422.693537][T22556] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000000,grpquota,errors=remount-ro,. Quota mode: writeback. [ 422.733782][T22556] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.8644: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=1804, size=1024 fake=1 [ 422.776054][T22556] EXT4-fs (loop1): Remounting filesystem read-only [ 422.795741][ T5682] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 422.836348][ T5677] r8152-cfgselector 4-1: Unknown version 0x0000 [ 422.843507][ T5677] r8152-cfgselector 4-1: bad CDC descriptors [ 422.855784][ T4179] mos7840 1-1:0.0: required endpoints missing [ 422.876504][ T4179] usb 1-1: USB disconnect, device number 38 [ 422.916930][ T5677] r8152-cfgselector 4-1: Unknown version 0x0000 [ 422.961637][ T5677] r8152-cfgselector 4-1: USB disconnect, device number 33 [ 423.094424][T22568] Process accounting resumed [ 423.186595][ T5682] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 423.211553][ T5682] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 423.231827][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.288026][ T5682] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 423.602579][T22602] i2c i2c-0: Invalid block write size 33 [ 423.896040][T22623] __nla_validate_parse: 1 callbacks suppressed [ 423.896060][T22623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8676'. [ 424.169430][T22641] netlink: 'syz.3.8685': attribute type 1 has an invalid length. [ 424.204207][T22641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8685'. [ 424.241975][ T4237] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 424.309665][T22652] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8691'. [ 424.322611][T22652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.400692][ T5682] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 424.423293][T22660] SET target dimension over the limit! [ 424.480343][T22662] Scaler: ================= START STATUS ================= [ 424.508254][T22662] Scaler: ================== END STATUS ================== [ 424.615766][ T5682] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 424.624534][ T5682] stv0680 3-1:4.0: last error: 249, command = 0xaf [ 424.655386][ T5682] usb 3-1: USB disconnect, device number 35 [ 424.690202][ T4237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 424.694343][T22677] netlink: 'syz.4.8703': attribute type 13 has an invalid length. [ 424.721214][ T4237] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 424.751949][T22677] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8703'. [ 424.763814][ T4237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 424.775424][T22677] syz_tun: refused to change device tx_queue_len [ 424.795298][ T4237] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 424.812637][T22680] loop3: detected capacity change from 0 to 1764 [ 424.813894][ T4237] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 424.837563][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.860385][ T4237] usb 2-1: config 0 descriptor?? [ 424.943217][T22680] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 425.118211][ T4237] hdpvr 2-1:0.0: firmware version 0x0 dated [ 425.145408][T22700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8715'. [ 425.166103][ T4237] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 425.210732][T22700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8715'. [ 425.223553][T22700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8715'. [ 425.360458][ T4237] hdpvr 2-1:0.0: device init failed [ 425.375976][ T4237] hdpvr: probe of 2-1:0.0 failed with error -12 [ 425.393329][ T4237] usb 2-1: USB disconnect, device number 39 [ 426.438664][T22773] device bridge2 entered promiscuous mode [ 426.841926][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8759'. [ 427.683001][T22829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8776'. [ 427.744446][T22829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.124818][T22860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8787'. [ 428.585914][ T4237] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 428.879933][T22900] loop3: detected capacity change from 0 to 4096 [ 428.988215][T22913] loop4: detected capacity change from 0 to 8 [ 429.014989][T22900] ntfs3: loop3: ino=3, Correct links count -> 2. [ 429.050609][ T263] nbd_handle_cmd: 2 callbacks suppressed [ 429.050642][ T263] block nbd2: Attempted send on invalid socket [ 429.063444][ T263] print_req_error: 2 callbacks suppressed [ 429.063464][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.105100][T22900] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 429.180740][T22913] SQUASHFS error: Failed to read block 0x6fc: -5 [ 429.195985][ T4237] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 429.205173][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.231341][T22913] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 429.234662][ T4237] usb 2-1: Product: syz [ 429.244017][ T4237] usb 2-1: Manufacturer: syz [ 429.249397][ T4237] usb 2-1: SerialNumber: syz [ 429.266629][ T4237] usb 2-1: config 0 descriptor?? [ 429.328158][ T4237] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 429.757973][ T4237] gspca_sunplus: reg_w_riv err -71 [ 429.778471][ T4237] sunplus: probe of 2-1:0.0 failed with error -71 [ 429.818678][ T4237] usb 2-1: USB disconnect, device number 40 [ 429.823232][T22946] netlink: 'syz.3.8830': attribute type 4 has an invalid length. [ 429.968399][T22954] __nla_validate_parse: 1 callbacks suppressed [ 429.968418][T22954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8833'. [ 430.158134][ T5682] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 430.325914][ T4236] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 430.525918][ T5682] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 430.541115][ T5682] usb 5-1: config 0 has no interface number 0 [ 430.557995][ T5682] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 430.584140][ T5682] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 430.635742][ T4236] usb 1-1: Using ep0 maxpacket: 16 [ 430.701571][T22962] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.709044][T22962] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.766069][ T4236] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 430.780501][ T5682] usb 5-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 430.785493][ T4236] usb 1-1: config 0 has no interface number 0 [ 430.794562][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.804552][ T5682] usb 5-1: Product: syz [ 430.814279][ T5682] usb 5-1: Manufacturer: syz [ 430.819713][ T5682] usb 5-1: SerialNumber: syz [ 430.832460][ T5682] usb 5-1: config 0 descriptor?? [ 430.837594][ T4236] usb 1-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 87 [ 430.909726][ T5682] vmk80xx 5-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 430.928349][ T5682] vmk80xx: probe of 5-1:0.255 failed with error -22 [ 431.020632][ T4236] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 431.040417][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.055741][ T4236] usb 1-1: Product: syz [ 431.066001][ T4236] usb 1-1: Manufacturer: syz [ 431.076195][ T4236] usb 1-1: SerialNumber: syz [ 431.101022][ T4236] usb 1-1: config 0 descriptor?? [ 431.126105][T22958] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 431.145163][ T4179] usb 5-1: USB disconnect, device number 24 [ 431.201201][ T4236] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 431.391142][ T4236] usb 1-1: USB disconnect, device number 39 [ 431.405999][ T1278] usb 1-1: Failed to submit usb control message: -71 [ 431.419506][ T1278] usb 1-1: unable to send the bmi data to the device: -71 [ 431.427787][ T1278] usb 1-1: unable to get target info from device [ 431.434704][ T1278] usb 1-1: could not get target info (-71) [ 431.443777][ T1278] usb 1-1: could not probe fw (-71) [ 432.289672][T22962] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.300774][T22962] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.313696][T22962] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.324351][T22962] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.625075][T23034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8872'. [ 432.668133][T23034] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8872'. [ 432.846877][T23047] netlink: 'syz.1.8879': attribute type 2 has an invalid length. [ 432.893890][T23054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8882'. [ 432.920635][T23047] netlink: 'syz.1.8879': attribute type 1 has an invalid length. [ 433.109329][T23067] netlink: 'syz.2.8889': attribute type 1 has an invalid length. [ 433.155676][T23067] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.8889'. [ 433.244531][T23067] netlink: 'syz.2.8889': attribute type 1 has an invalid length. [ 433.794038][T23117] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8914'. [ 433.934784][T23126] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.941986][T23127] x_tables: ip_tables: osf match: only valid for protocol 6 [ 434.126930][T23141] netlink: 'syz.2.8926': attribute type 2 has an invalid length. [ 434.426014][T23160] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 434.666047][T23178] netlink: 'syz.3.8944': attribute type 2 has an invalid length. [ 434.728625][T23181] IPVS: lc: FWM 3 0x00000003 - no destination available [ 434.828591][T23192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8951'. [ 434.866099][T23192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8951'. [ 434.993486][T23204] netlink: 'syz.4.8958': attribute type 21 has an invalid length. [ 435.008918][T23204] netlink: 'syz.4.8958': attribute type 1 has an invalid length. [ 435.055783][ T5685] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 435.125698][ T4179] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 435.245943][ T4236] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 435.298153][T23218] loop1: detected capacity change from 0 to 1764 [ 435.365786][ T4179] usb 3-1: Using ep0 maxpacket: 16 [ 435.403004][T23224] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.8967'. [ 435.426104][ T5685] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 435.438190][ T5685] usb 4-1: config 8 has no interface number 0 [ 435.465135][ T5685] usb 4-1: config 8 interface 188 altsetting 0 has an invalid endpoint with address 0xFD, skipping [ 435.499385][ T4179] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 435.511319][ T4179] usb 3-1: config 0 has no interface number 0 [ 435.646125][ T5685] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 435.663773][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.672794][ T5685] usb 4-1: Product: syz [ 435.683057][ T4179] usb 3-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 435.693113][ T5685] usb 4-1: Manufacturer: syz [ 435.695917][ T4236] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 435.702811][ T4179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.722733][ T5685] usb 4-1: SerialNumber: syz [ 435.728199][ T4236] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 24, changing to 4 [ 435.730337][ T4179] usb 3-1: Product: syz [ 435.749603][T23189] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 435.755240][ T4236] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 435.757005][ T5678] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 435.777860][ T4179] usb 3-1: Manufacturer: syz [ 435.782738][ T4179] usb 3-1: SerialNumber: syz [ 435.790948][ T4179] usb 3-1: config 0 descriptor?? [ 435.839510][ T4179] usb 3-1: bad CDC descriptors [ 435.848091][ T4179] usb 3-1: bad CDC descriptors [ 435.988186][T23253] program syz.1.8981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.042630][ T5678] usb 5-1: Using ep0 maxpacket: 16 [ 436.045780][ T4236] usb 1-1: string descriptor 0 read error: -22 [ 436.055093][ T4236] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 436.056617][ T5685] vmk80xx 4-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 436.067277][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.101074][ T5685] usb 4-1: USB disconnect, device number 34 [ 436.146795][ T4179] usb 3-1: USB disconnect, device number 36 [ 436.202135][ T5678] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 436.221164][ T5678] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.241636][ T5678] usb 5-1: config 0 has no interface number 0 [ 436.356634][ T4236] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 436.415897][ T5678] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 436.428577][ T5678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.438447][ T5678] usb 5-1: Product: syz [ 436.442739][ T5678] usb 5-1: Manufacturer: syz [ 436.449330][ T5678] usb 5-1: SerialNumber: syz [ 436.466703][ T5678] usb 5-1: config 0 descriptor?? [ 436.518226][ T5678] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 436.524998][ T5678] usb 5-1: No valid video chain found. [ 436.661290][ T5678] usb 1-1: USB disconnect, device number 40 [ 436.843876][ T4179] usb 5-1: USB disconnect, device number 25 [ 436.942758][T23292] ALSA: mixer_oss: invalid OSS volume 'u' [ 436.949673][T23295] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 437.105173][T23303] loop1: detected capacity change from 0 to 256 [ 437.317106][T23313] device bridge8 entered promiscuous mode [ 439.209189][T23411] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.9058' sets config #0 [ 439.219948][T23405] loop3: detected capacity change from 0 to 4096 [ 439.293450][T23405] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 439.432967][T23405] ntfs3: loop3: failed to convert "c46c" to iso8859-15 [ 439.523346][T23423] loop4: detected capacity change from 0 to 16 [ 439.548330][T23423] erofs: (device loop4): mounted with root inode @ nid 36. [ 439.663490][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9066'. [ 439.806180][T23436] Sensor A: ================= START STATUS ================= [ 439.871731][T23436] Sensor A: Test Pattern: 75% Colorbar [ 439.906550][T23436] Sensor A: Show Information: All [ 439.911923][T23436] Sensor A: Vertical Flip: true [ 439.925872][T23436] Sensor A: Horizontal Flip: false [ 439.965764][T23436] Sensor A: Brightness: 128 [ 439.965855][T23436] Sensor A: Contrast: 0 [ 439.965881][T23436] Sensor A: Hue: 0 [ 439.965906][T23436] Sensor A: Saturation: 128 [ 439.965931][T23436] Sensor A: ================== END STATUS ================== [ 440.139435][T23454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9078'. [ 440.167836][T23454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9078'. [ 440.272764][T23462] netlink: 'syz.2.9084': attribute type 13 has an invalid length. [ 440.308741][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.339452][ C1] ODEBUG: Out of memory. ODEBUG disabled [ 440.650946][T23485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.666112][ T4179] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 440.744254][T23488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9095'. [ 441.215841][ T4179] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 441.234251][ T4179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.263105][ T4179] usb 4-1: Product: syz [ 441.271179][ T4179] usb 4-1: Manufacturer: syz [ 441.291832][ T4179] usb 4-1: SerialNumber: syz [ 441.305777][ T5678] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 441.336793][ T4179] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 441.446014][ T5685] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 441.474869][T23533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9117'. [ 441.675919][ T5678] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.701828][ T5678] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 441.721818][ T5678] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 441.845900][ T5685] usb 2-1: unable to get BOS descriptor or descriptor too short [ 441.895760][ T5678] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 441.906253][ T4179] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 441.916832][ T5685] usb 2-1: not running at top speed; connect to a high speed hub [ 441.935367][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.956269][ T5678] usb 3-1: Product: syz [ 441.960586][ T5678] usb 3-1: Manufacturer: syz [ 441.985657][ T5678] usb 3-1: SerialNumber: syz [ 441.995784][ T5685] usb 2-1: config 64 has an invalid interface number: 120 but max is 1 [ 442.015488][ T5685] usb 2-1: config 64 has an invalid interface number: 91 but max is 1 [ 442.045304][ T5685] usb 2-1: config 64 has no interface number 0 [ 442.062444][ T5685] usb 2-1: config 64 has no interface number 1 [ 442.085673][ T5685] usb 2-1: config 64 interface 91 has no altsetting 0 [ 442.128137][T23543] loop4: detected capacity change from 0 to 32768 [ 442.155809][T23543] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9122 (23543) [ 442.184622][T23543] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 442.209308][T23543] BTRFS info (device loop4): using free space tree [ 442.217057][T23543] BTRFS info (device loop4): has skinny extents [ 442.281959][T23543] BTRFS info (device loop4): enabling ssd optimizations [ 442.295952][ T5685] usb 2-1: New USB device found, idVendor=1199, idProduct=9012, bcdDevice=f9.4a [ 442.315929][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.324536][ T5685] usb 2-1: Product: syz [ 442.331664][ T5685] usb 2-1: Manufacturer: syz [ 442.345891][ T5678] usb 3-1: 0:2 : does not exist [ 442.352730][ T5685] usb 2-1: SerialNumber: syz [ 442.368894][ T5677] usb 4-1: USB disconnect, device number 35 [ 442.397669][ T5678] usb 3-1: USB disconnect, device number 37 [ 442.525774][ T4236] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 442.674094][ T5442] udevd[5442]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.737185][ T5685] usb 2-1: unknown number of interfaces: 2 [ 442.760377][ T5685] usb 2-1: USB disconnect, device number 41 [ 442.922231][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 442.944671][ T4236] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 442.995788][ T4179] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 443.013656][ T4179] ath9k_htc: Failed to initialize the device [ 443.016185][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 443.022137][T23586] loop4: detected capacity change from 0 to 4096 [ 443.042762][ T4236] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 443.044839][ T5677] usb 4-1: ath9k_htc: USB layer deinitialized [ 443.058668][ T4236] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 443.076330][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.112749][ T4236] usb 1-1: config 0 descriptor?? [ 443.162964][T23586] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 443.263469][T23586] ntfs: volume version 3.1. [ 443.335902][T23612] tmpfs: Bad value for 'mpol' [ 443.395869][ T4236] hdpvr 1-1:0.0: firmware version 0x12 dated [ 443.600528][ T21] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 443.629136][ T4236] hdpvr 1-1:0.0: device init failed [ 443.634739][ T4236] hdpvr: probe of 1-1:0.0 failed with error -12 [ 443.672928][T23632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9155'. [ 443.698884][ T4236] usb 1-1: USB disconnect, device number 41 [ 443.702980][T23636] loop4: detected capacity change from 0 to 512 [ 443.797584][T23639] netlink: 'syz.2.9158': attribute type 49 has an invalid length. [ 443.872952][T23636] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodiscard,grpjquota=,,errors=continue. Quota mode: none. [ 443.971587][T23639] device ip6gretap0 entered promiscuous mode [ 444.026045][ T21] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 444.044750][ T21] usb 2-1: config 0 has no interface number 0 [ 444.074442][ T21] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 444.093339][ T21] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 444.143602][T23656] loop4: detected capacity change from 0 to 128 [ 444.187017][ T21] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 444.396021][ T21] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 444.436607][ T21] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 444.490629][ T21] usb 2-1: Product: syz [ 444.495124][ T21] usb 2-1: Manufacturer: syz [ 444.524229][T23670] dlm: no locking on control device [ 444.535878][ T21] usb 2-1: SerialNumber: syz [ 444.557391][ T21] usb 2-1: config 0 descriptor?? [ 444.629153][ T21] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 444.702257][ T21] xpad: probe of 2-1:0.237 failed with error -5 [ 444.868780][ T21] usb 2-1: USB disconnect, device number 42 [ 445.164140][T23705] loop3: detected capacity change from 0 to 128 [ 445.245185][T23705] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 445.277920][T23705] hpfs: filesystem error: improperly stopped [ 445.304031][T23705] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 445.355762][T23705] hpfs: You really don't want any checks? You are crazy... [ 445.372275][T23705] hpfs: hpfs_map_sector(): read error [ 445.398592][T23705] hpfs: code page support is disabled [ 445.404798][T23705] hpfs: hpfs_map_4sectors(): unaligned read [ 445.462985][T23705] hpfs: hpfs_map_4sectors(): unaligned read [ 445.525681][T23705] hpfs: filesystem error: unable to find root dir [ 445.645730][T23705] hpfs: hpfs_map_4sectors(): unaligned read [ 445.666854][T23705] hpfs: hpfs_map_sector(): read error [ 445.762146][T23741] netlink: 'syz.4.9199': attribute type 49 has an invalid length. [ 445.865985][ T21] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 446.145745][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 446.236384][T23766] overlayfs: missing 'lowerdir' [ 446.292403][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.495770][ T21] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 446.514233][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.532700][ T21] usb 2-1: Product: syz [ 446.542826][ T21] usb 2-1: Manufacturer: syz [ 446.585888][ T21] usb 2-1: SerialNumber: syz [ 446.623063][ T21] usb 2-1: config 0 descriptor?? [ 446.676607][ T21] usb 2-1: bad CDC descriptors [ 446.682407][ T21] usb 2-1: unsupported MDLM descriptors [ 446.813963][T23795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9225'. [ 446.841366][T23795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9225'. [ 446.910566][ T5685] usb 2-1: USB disconnect, device number 43 [ 447.874987][T23864] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 447.953622][T23868] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 448.020765][T23875] netlink: 'syz.0.9263': attribute type 1 has an invalid length. [ 448.162326][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9266'. [ 448.198101][T23882] device netdevsim0 entered promiscuous mode [ 448.245775][T23886] netlink: 'syz.0.9268': attribute type 1 has an invalid length. [ 448.313918][T23886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9268'. [ 448.326830][T23890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9270'. [ 448.618566][T23908] tmpfs: Bad value for 'mpol' [ 448.782554][T23923] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9286'. [ 449.066294][ T4179] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 449.445833][ T4179] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 449.471292][T23972] CIFS mount error: No usable UNC path provided in device string! [ 449.471292][T23972] [ 449.492273][ T4179] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 449.493494][T23972] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 449.542317][ T4179] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 449.557431][T23976] netlink: 'syz.4.9313': attribute type 1 has an invalid length. [ 449.565399][T23976] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.9313'. [ 449.576448][T23978] overlayfs: empty lowerdir [ 449.656022][ T4179] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 449.675923][ T4236] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 449.678288][ T4179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 449.725512][ T4179] usb 4-1: SerialNumber: syz [ 449.939934][T24002] [U]  [ 449.947385][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 449.993652][T24009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9329'. [ 450.007188][ T4179] usbtest 4-1:1.0: Linux user mode ISO test driver [ 450.026361][ T4179] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 450.065114][ T4179] usb 4-1: USB disconnect, device number 36 [ 450.121490][T24011] loop1: detected capacity change from 0 to 1024 [ 450.122023][T24013] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 450.173500][T24013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 450.206464][T24013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 450.220945][T24017] xt_CT: No such helper "syz0" [ 450.242369][T24013] device xfrm0 left promiscuous mode [ 450.263025][T24013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.282734][T24020] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.325983][ T4236] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 450.348100][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.384953][ T4236] usb 3-1: Product: syz [ 450.394829][ T4236] usb 3-1: Manufacturer: syz [ 450.426515][ T4236] usb 3-1: SerialNumber: syz [ 450.466587][ T4236] usb 3-1: config 0 descriptor?? [ 450.746026][ T4236] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 450.753750][ T4236] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 450.965740][ T4237] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 450.967409][ T5685] usb 3-1: USB disconnect, device number 38 [ 451.064926][T24066] loop4: detected capacity change from 0 to 256 [ 451.407426][T24082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9364'. [ 451.433677][T24082] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 451.561895][ T4237] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 451.579003][T24091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9369'. [ 451.594716][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.607286][ T4237] usb 2-1: Product: syz [ 451.612191][ T4237] usb 2-1: Manufacturer: syz [ 451.649299][T24095] netlink: 'syz.4.9370': attribute type 21 has an invalid length. [ 451.649412][ T4237] usb 2-1: SerialNumber: syz [ 451.702878][ T4237] usb 2-1: config 0 descriptor?? [ 451.753794][ T4237] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 452.061436][T24120] __nla_validate_parse: 20 callbacks suppressed [ 452.061459][T24120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9382'. [ 452.112052][T24120] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 452.181999][ T4237] gspca_sunplus: reg_w_riv err -71 [ 452.187383][ T4237] sunplus: probe of 2-1:0.0 failed with error -71 [ 452.233623][T24125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9385'. [ 452.235801][ T4237] usb 2-1: USB disconnect, device number 44 [ 452.482907][T24139] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 452.942452][T24163] loop1: detected capacity change from 0 to 1024 [ 453.040773][T24163] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 453.102926][T24163] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 453.397389][T24189] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9415'. [ 453.704847][T24205] netlink: 'syz.3.9424': attribute type 21 has an invalid length. [ 453.743579][T24205] IPv6: NLM_F_CREATE should be specified when creating new route [ 453.785793][ T5685] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 454.165953][ T5685] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 454.184015][ T5685] usb 5-1: config 0 has no interface number 0 [ 454.201950][ T5685] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 454.313410][T24246] xt_connbytes: Forcing CT accounting to be enabled [ 454.320704][T24243] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9442'. [ 454.377434][ T5685] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 454.399342][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.421072][ T5685] usb 5-1: Product: syz [ 454.433012][ T5685] usb 5-1: Manufacturer: syz [ 454.455757][ T5685] usb 5-1: SerialNumber: syz [ 454.468025][ T5685] usb 5-1: config 0 descriptor?? [ 454.471223][ T4237] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 454.516352][T24195] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 454.548024][T24256] sctp: [Deprecated]: syz.3.9448 (pid 24256) Use of int in max_burst socket option. [ 454.548024][T24256] Use struct sctp_assoc_value instead [ 454.572393][ T5685] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, fe:59:50:78:30:39 [ 454.773611][T24270] lo speed is unknown, defaulting to 1000 [ 454.945810][ T4237] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.945840][ T4237] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 454.945875][ T4237] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.107079][T24293] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9464'. [ 455.135965][ T4237] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 455.169907][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.190963][ T4237] usb 3-1: Product: syz [ 455.201853][ T4237] usb 3-1: Manufacturer: syz [ 455.246345][ T4237] usb 3-1: SerialNumber: syz [ 455.261222][T24301] netlink: 'syz.3.9467': attribute type 1 has an invalid length. [ 455.306940][ T4237] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 455.313990][ T4237] cdc_ncm 3-1:1.0: bind() failure [ 455.551496][ T5685] usb 3-1: USB disconnect, device number 39 [ 455.781358][ T4237] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 455.847794][T24334] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 455.903963][T24334] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 456.008013][ T5685] usb 5-1: USB disconnect, device number 26 [ 456.027193][ T5685] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 456.040810][T24340] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9483'. [ 456.252206][ T4237] usb 1-1: unable to get BOS descriptor or descriptor too short [ 456.412924][T24360] netlink: 'syz.2.9490': attribute type 19 has an invalid length. [ 456.458600][T24360] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9490'. [ 456.473641][T24365] netlink: 124 bytes leftover after parsing attributes in process `syz.1.9492'. [ 456.543850][T24369] netlink: 1076 bytes leftover after parsing attributes in process `syz.3.9493'. [ 456.576016][ T4237] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 456.605754][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.641120][ T4237] usb 1-1: Product: syz [ 456.645349][ T4237] usb 1-1: Manufacturer: syz [ 456.691539][ T4237] usb 1-1: SerialNumber: syz [ 456.748862][ T4237] usb 1-1: selecting invalid altsetting 1 [ 456.755525][ T4237] usb 1-1: unit 6 not found! [ 456.767016][T24381] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9498'. [ 456.785308][T24383] loop4: detected capacity change from 0 to 256 [ 456.785973][ T4237] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 456.828360][ T4237] usb 1-1: selecting invalid altsetting 1 [ 456.855262][ T4237] usb 1-1: unit 6 not found! [ 456.885325][ T4237] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 456.921263][ T4237] usb 1-1: selecting invalid altsetting 1 [ 456.964740][ T4237] usb 1-1: unit 6 not found! [ 456.972578][T24383] FAT-fs (loop4): Directory bread(block 64) failed [ 456.997207][T24383] FAT-fs (loop4): Directory bread(block 65) failed [ 457.004312][T24383] FAT-fs (loop4): Directory bread(block 66) failed [ 457.029740][ T4237] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 457.086159][ T4237] usb 1-1: USB disconnect, device number 42 [ 457.091825][T24383] FAT-fs (loop4): Directory bread(block 67) failed [ 457.143374][T24383] FAT-fs (loop4): Directory bread(block 68) failed [ 457.211643][T24383] FAT-fs (loop4): Directory bread(block 69) failed [ 457.243624][T24383] FAT-fs (loop4): Directory bread(block 70) failed [ 457.275781][T24383] FAT-fs (loop4): Directory bread(block 71) failed [ 457.282506][T24383] FAT-fs (loop4): Directory bread(block 72) failed [ 457.330649][T24383] FAT-fs (loop4): Directory bread(block 73) failed [ 457.376145][ T5442] udevd[5442]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.401105][T24383] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 457.515100][T24419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9513'. [ 457.981793][T24447] netlink: 'syz.2.9525': attribute type 13 has an invalid length. [ 458.085913][ T5677] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 458.106078][T24450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9527'. [ 458.396489][T24465] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 458.445983][ T5677] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 458.635905][ T5677] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 458.666502][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.705210][ T5677] usb 2-1: Product: syz [ 458.735798][ T5677] usb 2-1: Manufacturer: syz [ 458.740641][ T5677] usb 2-1: SerialNumber: syz [ 459.045730][ T5677] usb 2-1: selecting invalid altsetting 1 [ 459.075854][ T5677] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 459.075927][ T5677] dvb_usb_lmedm04: probe of 2-1:2.0 failed with error -22 [ 459.125852][ T5677] usb 2-1: USB disconnect, device number 45 [ 459.504999][T24537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9559'. [ 459.673338][T24543] device vlan0 entered promiscuous mode [ 459.702804][T24550] SET target dimension over the limit! [ 459.740125][T24543] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 459.935749][ T5677] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 459.962646][T24563] loop1: detected capacity change from 0 to 764 [ 460.195669][ T5677] usb 5-1: Using ep0 maxpacket: 8 [ 460.241694][ T4179] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 460.395911][ T5677] usb 5-1: config 6 has an invalid interface number: 85 but max is 0 [ 460.416075][T24593] netlink: 'syz.2.9584': attribute type 2 has an invalid length. [ 460.417046][ T5677] usb 5-1: config 6 has no interface number 0 [ 460.472785][ T5677] usb 5-1: config 6 interface 85 has no altsetting 0 [ 460.515879][ T4179] usb 4-1: Using ep0 maxpacket: 32 [ 460.635816][ T4179] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.667150][ T5677] usb 5-1: New USB device found, idVendor=2ca3, idProduct=0031, bcdDevice=44.be [ 460.685692][ T4179] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.706156][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.735060][ T5677] usb 5-1: Product: syz [ 460.745860][ T5677] usb 5-1: Manufacturer: syz [ 460.761076][ T5677] usb 5-1: SerialNumber: syz [ 460.845924][ T4179] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 460.867905][ T4179] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 460.906820][ T4179] usb 4-1: Product: syz [ 460.911447][ T4179] usb 4-1: Manufacturer: syz [ 460.954133][T24631] netlink: zone id is out of range [ 460.963069][T24631] netlink: zone id is out of range [ 460.985758][T24631] netlink: zone id is out of range [ 460.991404][T24631] netlink: zone id is out of range [ 460.991771][ T4179] hub 4-1:4.0: USB hub found [ 461.012153][T24631] netlink: zone id is out of range [ 461.025601][T24631] netlink: zone id is out of range [ 461.053186][T24631] netlink: zone id is out of range [ 461.093265][T24631] netlink: zone id is out of range [ 461.096333][ T5677] usb-storage 5-1:6.85: USB Mass Storage device detected [ 461.130895][ T5677] usb-storage 5-1:6.85: Quirks match for vid 2ca3 pid 0031: 2000000 [ 461.215712][ T4179] hub 4-1:4.0: 8 ports detected [ 461.235875][ T4179] hub 4-1:4.0: insufficient power available to use all downstream ports [ 461.250408][ T5677] usb 5-1: USB disconnect, device number 27 [ 461.435789][ T4179] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 461.452568][ T4179] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 461.511865][T24662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9609'. [ 461.536467][ T4179] usb 4-1: USB disconnect, device number 37 [ 461.564391][T24662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9609'. [ 461.891674][T24682] netlink: 'syz.2.9617': attribute type 21 has an invalid length. [ 462.143534][T24696] QAT: failed to copy from user cfg_data. [ 462.230517][T24703] x_tables: duplicate underflow at hook 4 [ 462.620852][T24667] loop1: detected capacity change from 0 to 32768 [ 462.794393][T24667] XFS (loop1): Mounting V5 Filesystem [ 463.023387][T24667] XFS (loop1): Ending clean mount [ 463.197483][ T4191] XFS (loop1): Unmounting Filesystem [ 463.331426][T24723] loop3: detected capacity change from 0 to 32768 [ 463.397813][T24758] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9644'. [ 463.551647][T24723] XFS (loop3): Mounting V5 Filesystem [ 463.633862][T24777] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 463.648162][T24777] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 463.824767][T24723] XFS (loop3): Ending clean mount [ 463.927362][T24788] xt_TCPMSS: Only works on TCP SYN packets [ 464.036505][ T4192] XFS (loop3): Unmounting Filesystem [ 464.318019][T24811] netlink: 'syz.2.9663': attribute type 12 has an invalid length. [ 465.061503][T24851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9657'. [ 465.098996][T24855] loop4: detected capacity change from 0 to 256 [ 465.125947][T24851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9657'. [ 465.273142][T24855] FAT-fs (loop4): Directory bread(block 64) failed [ 465.305834][T24855] FAT-fs (loop4): Directory bread(block 65) failed [ 465.312859][T24855] FAT-fs (loop4): Directory bread(block 66) failed [ 465.368477][T24855] FAT-fs (loop4): Directory bread(block 67) failed [ 465.401558][T24855] FAT-fs (loop4): Directory bread(block 68) failed [ 465.415151][T24855] FAT-fs (loop4): Directory bread(block 69) failed [ 465.506114][T24855] FAT-fs (loop4): Directory bread(block 70) failed [ 465.521781][T24855] FAT-fs (loop4): Directory bread(block 71) failed [ 465.553950][T24855] FAT-fs (loop4): Directory bread(block 72) failed [ 465.563213][T24888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9693'. [ 465.580683][T24855] FAT-fs (loop4): Directory bread(block 73) failed [ 465.671272][T24894] xt_ecn: cannot match TCP bits for non-tcp packets [ 465.795743][ T4236] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 466.034558][T24915] netlink: 'syz.4.9702': attribute type 1 has an invalid length. [ 466.073134][T24915] netlink: 'syz.4.9702': attribute type 3 has an invalid length. [ 466.125850][T24915] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9702'. [ 466.155751][T24915] NCSI netlink: No device for ifindex 55159 [ 466.191772][ T4236] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 466.209602][ T4236] usb 3-1: config 0 has no interface number 0 [ 466.222782][ T4236] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 466.246840][T24918] loop3: detected capacity change from 0 to 4096 [ 466.250126][ T4236] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 466.312181][T24930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9711'. [ 466.426006][ T4236] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 466.463520][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 466.463919][T24936] netlink: 'syz.4.9716': attribute type 3 has an invalid length. [ 466.494256][ T4236] usb 3-1: Manufacturer: syz [ 466.534790][ T4236] usb 3-1: SerialNumber: syz [ 466.544521][T24936] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9716'. [ 466.556718][ T4236] usb 3-1: config 0 descriptor?? [ 466.815851][ T4236] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 466.833496][ T4236] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 466.884192][ T4236] usb 3-1: USB disconnect, device number 40 [ 466.961404][T24961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9727'. [ 467.010310][T24967] netlink: 'syz.4.9729': attribute type 1 has an invalid length. [ 467.041304][T24967] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9729'. [ 467.502892][T24991] netlink: 'syz.2.9741': attribute type 1 has an invalid length. [ 467.545703][T24991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9741'. [ 468.279520][T25016] loop1: detected capacity change from 0 to 4096 [ 468.321324][T25032] loop3: detected capacity change from 0 to 512 [ 468.377166][ T5677] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 468.407271][T25016] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 468.432514][T25032] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 468.460395][T25016] ntfs3: loop1: Failed to load $Extend. [ 468.881592][T25058] netlink: 'syz.3.9773': attribute type 1 has an invalid length. [ 468.894124][T25060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9774'. [ 468.935871][ T5677] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 468.956974][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.011136][ T5677] usb 5-1: Product: syz [ 469.040671][ T5677] usb 5-1: Manufacturer: syz [ 469.060449][ T5677] usb 5-1: SerialNumber: syz [ 469.118058][T25070] netlink: 'syz.2.9778': attribute type 5 has an invalid length. [ 469.127237][ T5677] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 469.252531][T25072] IPv6: sit1: Disabled Multicast RS [ 469.725991][ T5677] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 469.755166][T25094] loop1: detected capacity change from 0 to 4096 [ 469.797523][T25105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9796'. [ 469.841026][T25094] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 470.198382][ T5685] usb 5-1: USB disconnect, device number 28 [ 470.381655][T25135] device xfrm0 entered promiscuous mode [ 470.490069][T25143] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 470.490069][T25143] z,@qJ#"h/.W1ȱnNC"C׈E)8+' [ 470.585939][T25148] net_ratelimit: 336 callbacks suppressed [ 470.585957][T25148] openvswitch: netlink: Actions may not be safe on all matching packets [ 470.636127][T25151] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.755740][ T5677] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 470.763092][ T5677] ath9k_htc: Failed to initialize the device [ 470.806225][ T5685] usb 5-1: ath9k_htc: USB layer deinitialized [ 471.197452][T25175] loop3: detected capacity change from 0 to 8192 [ 471.266247][T25196] xt_TPROXY: Can be used only with -p tcp or -p udp [ 471.278446][T25175] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 471.325968][T25175] REISERFS (device loop3): using ordered data mode [ 471.333323][T25175] reiserfs: using flush barriers [ 471.448939][T25175] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 471.546108][T25175] REISERFS (device loop3): checking transaction log (loop3) [ 471.606870][T25217] netlink: 'syz.4.9849': attribute type 1 has an invalid length. [ 471.639620][T25217] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9849'. [ 471.765826][T25226] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9852'. [ 471.839127][T25229] xt_addrtype: ipv6 does not support BROADCAST matching [ 471.850572][T25226] device bond_slave_0 entered promiscuous mode [ 471.857664][T25226] device bond_slave_1 entered promiscuous mode [ 471.925004][T25175] REISERFS (device loop3): Using tea hash to sort names [ 471.963045][T25175] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 472.321314][T25253] [ 472.323699][T25253] ====================================================== [ 472.331090][T25253] WARNING: possible circular locking dependency detected [ 472.338831][T25253] syzkaller #0 Not tainted [ 472.343799][T25253] ------------------------------------------------------ [ 472.352168][T25253] syz.4.9864/25253 is trying to acquire lock: [ 472.358538][T25253] ffff888019fb0c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 472.370306][T25253] [ 472.370306][T25253] but task is already holding lock: [ 472.378876][T25253] ffffffff8d6c5da8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 472.390273][T25253] [ 472.390273][T25253] which lock already depends on the new lock. [ 472.390273][T25253] [ 472.401651][T25253] [ 472.401651][T25253] the existing dependency chain (in reverse order) is: [ 472.411956][T25253] [ 472.411956][T25253] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 472.420332][T25253] __mutex_lock_common+0x1e3/0x2400 [ 472.426658][T25253] mutex_lock_nested+0x17/0x20 [ 472.432409][T25253] rfkill_register+0x33/0x980 [ 472.438448][T25253] hci_register_dev+0x452/0x970 [ 472.444209][T25253] vhci_create_device+0x32c/0x5c0 [ 472.450018][T25253] vhci_write+0x391/0x450 [ 472.454897][T25253] vfs_write+0x745/0xd60 [ 472.459771][T25253] ksys_write+0x152/0x260 [ 472.464870][T25253] do_syscall_64+0x4c/0xa0 [ 472.470373][T25253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 472.476914][T25253] [ 472.476914][T25253] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 472.485714][T25253] __mutex_lock_common+0x1e3/0x2400 [ 472.491654][T25253] mutex_lock_nested+0x17/0x20 [ 472.497380][T25253] vhci_send_frame+0x88/0x100 [ 472.503401][T25253] hci_send_frame+0x1a9/0x2e0 [ 472.508725][T25253] hci_tx_work+0x9f9/0x1710 [ 472.514152][T25253] process_one_work+0x85f/0x1010 [ 472.519848][T25253] worker_thread+0xaa6/0x1290 [ 472.525353][T25253] kthread+0x436/0x520 [ 472.530263][T25253] ret_from_fork+0x1f/0x30 [ 472.535515][T25253] [ 472.535515][T25253] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 472.545616][T25253] __flush_work+0x116/0x210 [ 472.551350][T25253] hci_dev_do_close+0x1e7/0x1030 [ 472.557038][T25253] hci_dev_close+0xd7/0x180 [ 472.562445][T25253] sock_do_ioctl+0xfb/0x320 [ 472.567778][T25253] sock_ioctl+0x4d2/0x710 [ 472.573009][T25253] __se_sys_ioctl+0xfa/0x170 [ 472.578242][T25253] do_syscall_64+0x4c/0xa0 [ 472.583481][T25253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 472.590145][T25253] [ 472.590145][T25253] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 472.598009][T25253] __mutex_lock_common+0x1e3/0x2400 [ 472.604202][T25253] mutex_lock_nested+0x17/0x20 [ 472.609717][T25253] bg_scan_update+0x44/0x3b0 [ 472.614950][T25253] process_one_work+0x85f/0x1010 [ 472.620529][T25253] worker_thread+0xaa6/0x1290 [ 472.626038][T25253] kthread+0x436/0x520 [ 472.630659][T25253] ret_from_fork+0x1f/0x30 [ 472.635729][T25253] [ 472.635729][T25253] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 472.646011][T25253] __lock_acquire+0x2c42/0x7d10 [ 472.652067][T25253] lock_acquire+0x19e/0x400 [ 472.657387][T25253] __flush_work+0x116/0x210 [ 472.662805][T25253] __cancel_work_timer+0x3f4/0x560 [ 472.668738][T25253] hci_request_cancel_all+0xcc/0x300 [ 472.674881][T25253] hci_dev_do_close+0x4e/0x1030 [ 472.680295][T25253] hci_rfkill_set_block+0x10a/0x190 [ 472.686162][T25253] rfkill_set_block+0x1c9/0x3d0 [ 472.691595][T25253] rfkill_fop_write+0x452/0x560 [ 472.697362][T25253] vfs_write+0x30b/0xd60 [ 472.702557][T25253] ksys_write+0x152/0x260 [ 472.707673][T25253] do_syscall_64+0x4c/0xa0 [ 472.712848][T25253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 472.719637][T25253] [ 472.719637][T25253] other info that might help us debug this: [ 472.719637][T25253] [ 472.729999][T25253] Chain exists of: [ 472.729999][T25253] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 472.729999][T25253] [ 472.746638][T25253] Possible unsafe locking scenario: [ 472.746638][T25253] [ 472.754342][T25253] CPU0 CPU1 [ 472.760335][T25253] ---- ---- [ 472.766363][T25253] lock(rfkill_global_mutex); [ 472.771828][T25253] lock(&data->open_mutex); [ 472.779215][T25253] lock(rfkill_global_mutex); [ 472.787159][T25253] lock((work_completion)(&hdev->bg_scan_update)); [ 472.794957][T25253] [ 472.794957][T25253] *** DEADLOCK *** [ 472.794957][T25253] [ 472.803514][T25253] 1 lock held by syz.4.9864/25253: [ 472.808972][T25253] #0: ffffffff8d6c5da8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 472.819342][T25253] [ 472.819342][T25253] stack backtrace: [ 472.825722][T25253] CPU: 0 PID: 25253 Comm: syz.4.9864 Not tainted syzkaller #0 [ 472.833581][T25253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 472.844533][T25253] Call Trace: [ 472.848093][T25253] [ 472.851518][T25253] dump_stack_lvl+0x188/0x250 [ 472.856468][T25253] ? load_image+0x400/0x400 [ 472.861084][T25253] ? show_regs_print_info+0x20/0x20 [ 472.866725][T25253] ? print_circular_bug+0x12b/0x1a0 [ 472.872229][T25253] check_noncircular+0x296/0x330 [ 472.877866][T25253] ? look_up_lock_class+0x71/0x110 [ 472.882988][T25253] ? add_chain_block+0x940/0x940 [ 472.888013][T25253] ? lockdep_lock+0xf1/0x1f0 [ 472.892600][T25253] ? __lock_acquire+0x12e8/0x7d10 [ 472.897788][T25253] ? mark_lock+0x94/0x320 [ 472.902682][T25253] __lock_acquire+0x2c42/0x7d10 [ 472.907948][T25253] ? verify_lock_unused+0x140/0x140 [ 472.913780][T25253] ? register_lock_class+0xc0/0x890 [ 472.919208][T25253] lock_acquire+0x19e/0x400 [ 472.924084][T25253] ? __flush_work+0xfa/0x210 [ 472.928857][T25253] ? __lock_acquire+0x7d10/0x7d10 [ 472.933989][T25253] ? read_lock_is_recursive+0x10/0x10 [ 472.939365][T25253] ? start_flush_work+0x776/0x820 [ 472.944416][T25253] __flush_work+0x116/0x210 [ 472.949015][T25253] ? __flush_work+0xfa/0x210 [ 472.953620][T25253] ? flush_work+0x20/0x20 [ 472.958131][T25253] ? try_to_grab_pending+0xfa/0x7f0 [ 472.963538][T25253] ? mark_lock+0x94/0x320 [ 472.968307][T25253] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 472.975229][T25253] ? lock_chain_count+0x20/0x20 [ 472.980470][T25253] ? mark_lock+0x94/0x320 [ 472.985349][T25253] ? __cancel_work_timer+0x36a/0x560 [ 472.991429][T25253] __cancel_work_timer+0x3f4/0x560 [ 472.996915][T25253] ? cancel_work_sync+0x20/0x20 [ 473.002334][T25253] ? __cancel_work+0x1f9/0x2e0 [ 473.007691][T25253] ? lockdep_hardirqs_on+0x94/0x140 [ 473.013427][T25253] ? __cancel_work+0x27b/0x2e0 [ 473.018485][T25253] ? cancel_work+0x20/0x20 [ 473.023606][T25253] ? lock_chain_count+0x20/0x20 [ 473.029124][T25253] hci_request_cancel_all+0xcc/0x300 [ 473.034954][T25253] hci_dev_do_close+0x4e/0x1030 [ 473.040121][T25253] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 473.046558][T25253] ? _raw_spin_unlock+0x40/0x40 [ 473.052308][T25253] hci_rfkill_set_block+0x10a/0x190 [ 473.058295][T25253] ? rcu_lock_release+0x20/0x20 [ 473.063623][T25253] rfkill_set_block+0x1c9/0x3d0 [ 473.069049][T25253] rfkill_fop_write+0x452/0x560 [ 473.074347][T25253] ? rfkill_fop_read+0x520/0x520 [ 473.079911][T25253] ? common_file_perm+0x140/0x1c0 [ 473.085145][T25253] ? fsnotify_perm+0x5d/0x560 [ 473.090241][T25253] ? security_file_permission+0x75/0xa0 [ 473.096022][T25253] ? rfkill_fop_read+0x520/0x520 [ 473.101219][T25253] vfs_write+0x30b/0xd60 [ 473.105652][T25253] ? file_end_write+0x250/0x250 [ 473.110713][T25253] ? __fget_files+0x40f/0x480 [ 473.116079][T25253] ? __fdget_pos+0x1e2/0x370 [ 473.121207][T25253] ? ksys_write+0x71/0x260 [ 473.125811][T25253] ksys_write+0x152/0x260 [ 473.130567][T25253] ? __ia32_sys_read+0x80/0x80 [ 473.135814][T25253] ? lockdep_hardirqs_on+0x94/0x140 [ 473.141848][T25253] do_syscall_64+0x4c/0xa0 [ 473.146553][T25253] ? clear_bhb_loop+0x30/0x80 [ 473.151371][T25253] ? clear_bhb_loop+0x30/0x80 [ 473.156076][T25253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 473.162274][T25253] RIP: 0033:0x7fd2c96c7dd9 [ 473.166809][T25253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.188733][T25253] RSP: 002b:00007fd2c7921028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 473.198747][T25253] RAX: ffffffffffffffda RBX: 00007fd2c9940fa0 RCX: 00007fd2c96c7dd9 [ 473.207039][T25253] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 473.215644][T25253] RBP: 00007fd2c975dd69 R08: 0000000000000000 R09: 0000000000000000 [ 473.224243][T25253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.233321][T25253] R13: 00007fd2c9941038 R14: 00007fd2c9940fa0 R15: 00007ffe65d31d98 [ 473.241762][T25253] [ 473.319397][T25262] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht'