last executing test programs: 2m26.71054548s ago: executing program 3 (id=344): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 2m26.631076641s ago: executing program 3 (id=345): mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = eventfd(0x0) io_setup(0xc, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffff, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 2m26.490168647s ago: executing program 3 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 2m26.489883287s ago: executing program 3 (id=347): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x18d883, 0x0) 2m26.419391164s ago: executing program 3 (id=349): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) read$FUSE(r0, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x28, 0x0, 0x8000, 0x800, 0x0, 0x1}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) 2m26.220614939s ago: executing program 3 (id=353): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m26.128729455s ago: executing program 32 (id=353): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m16.580333119s ago: executing program 4 (id=492): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m6.278305678s ago: executing program 4 (id=495): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open(0x0, 0x80242, 0x1df2a23c5997fa5f) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) 2m6.273289601s ago: executing program 4 (id=497): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0xa, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000840)=0x4f2c, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x75}], 0x1, 0x2100, 0x0) 2m6.269740327s ago: executing program 4 (id=498): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) 2m6.248188837s ago: executing program 4 (id=499): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="35fc3a12f45d48e3120ec76bfe8d5ba7449af3c59c81f374329851daf843e48e30428c737ad0d7b957d1ab7dba23ca87748421", 0x33) 2m6.242418192s ago: executing program 4 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2m0.601455737s ago: executing program 33 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1m40.917496232s ago: executing program 0 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x3, [{0xd, 0x5}]}]}, {0x0, [0x0]}}, 0x0, 0x2f}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m40.822871307s ago: executing program 0 (id=811): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) 1m40.716819467s ago: executing program 0 (id=815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m40.514689137s ago: executing program 0 (id=820): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m40.436741851s ago: executing program 0 (id=821): openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m40.179156203s ago: executing program 0 (id=829): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x0, 0x1000, 0x1000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xe000, 0x112000, 0x8}) 1m40.144717286s ago: executing program 34 (id=829): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x0, 0x1000, 0x1000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xe000, 0x112000, 0x8}) 1m35.260220129s ago: executing program 1 (id=907): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='3', 0x1) 1m35.160452725s ago: executing program 1 (id=911): creat(&(0x7f0000000000)='./file1\x00', 0xd931d3864d39dcdb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x1ff) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000800)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe7, '\x00', "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"}}, 0xfffffea3) lremovexattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x109242, 0x0) 1m34.859496896s ago: executing program 1 (id=919): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 1m34.858998647s ago: executing program 1 (id=921): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0\x00') 1m34.760709791s ago: executing program 1 (id=924): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m34.554197058s ago: executing program 1 (id=929): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xd759) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 1m34.418892705s ago: executing program 35 (id=929): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xd759) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 33.240277757s ago: executing program 5 (id=1771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x11, 0x10, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x3a, 0x1c9, '\x00', [@generic={0x12, 0xe47, "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"}]}], "ab00204cf3b5df7b000000000000000000000027f3075f84cad8be538e28acd24184307d343e5ab1044a798cd61b0210f9ba068bc128235e47de0a4044027444dbfa69f591578171c6ef1441997a89878970ab74bd4396e0d599d725fae76f74447a5b278e1e9465b46d8799331429de1d5c66e585dfb7cd62166049037eb70c"}}}}}}, 0xfce) 33.114903494s ago: executing program 5 (id=1775): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 32.722070721s ago: executing program 5 (id=1792): mount(0x0, &(0x7f0000000c00)='./debug\x00', 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r1, r0, &(0x7f00000001c0)=0x1, 0x8) openat(r0, &(0x7f0000000140)='./debug\x00', 0x32da01, 0x1b7) 32.638295067s ago: executing program 5 (id=1795): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000680)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0}, {0x0, 0xfff1}, {0x7, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xe13c7cb5123b5c20, 0xfff1}}, @TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x4, 0x101, 0x5, 0x100, 0x0, [{0x2, 0x8514, 0x7, 0x1ff}, {0x401, 0x0, 0x93d, 0x5}, {0x8000, 0x9, 0xffff, 0x8}, {0xb, 0x1, 0x10, 0x3}, {0x2, 0xd, 0xfffffffe, 0x1}, {0x0, 0x3, 0x8, 0x5}]}}]}}]}, 0xac}}, 0x24040084) 32.528410422s ago: executing program 5 (id=1798): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)="2a20000000df", 0x6) 32.527589878s ago: executing program 5 (id=1800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000009c0)={@val={0x8, 0x800}, @val={0x2, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x7, 0x4, 0x1, 0x22, 0xfc0, 0x69, 0x0, 0x60, 0x6c, 0x0, @empty, @broadcast, {[@generic={0x9, 0x2}, @generic={0x94, 0x4, "d507"}]}}, "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"}}, 0xfce) 17.345851631s ago: executing program 36 (id=1800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000009c0)={@val={0x8, 0x800}, @val={0x2, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x7, 0x4, 0x1, 0x22, 0xfc0, 0x69, 0x0, 0x60, 0x6c, 0x0, @empty, @broadcast, {[@generic={0x9, 0x2}, @generic={0x94, 0x4, "d507"}]}}, "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"}}, 0xfce) 2.67974247s ago: executing program 2 (id=2266): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000280)='/sys/power/hibernate_compression_threads', 0x0, 0x10) openat$cuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r2, r0]}}], 0x14, 0x80}}], 0x1, 0x0) 2.677549179s ago: executing program 2 (id=2267): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x40080) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.590053761s ago: executing program 2 (id=2268): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.918648704s ago: executing program 2 (id=2270): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 1.849375248s ago: executing program 2 (id=2272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48c, 0x0, 0xfffffffffffffffb}]}) 1.703867022s ago: executing program 2 (id=2279): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11) 1.408158788s ago: executing program 7 (id=2287): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffd, 0x800fe, {{@in=@multicast2, @in=@broadcast, 0x3, 0x794, 0x4e23, 0x20, 0x2, 0x0, 0x0, 0x3c}, {@in=@loopback, 0x4d6, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, {0x4, 0x9, 0x6, 0xffff, 0x8251c, 0x1, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2c, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d3, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.301404985s ago: executing program 7 (id=2289): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x7c1301, 0x2) umount2(&(0x7f0000000000)='./file0\x00', 0x1) utime(&(0x7f0000000000)='./file0\x00', 0x0) 1.145232962s ago: executing program 7 (id=2293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r1, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) 1.074312379s ago: executing program 6 (id=2295): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f00000003c0)={0x24, 0x3c, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@typed={0xc, 0x3d, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x52, 0x0, 0x0, @fd=r0}]}, 0x24}, {&(0x7f0000005dc0)={0x10, 0x3a, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x10}], 0x2, 0x0, 0x0, 0x44011}, 0x40830) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.000281932s ago: executing program 6 (id=2296): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x41, 0x0}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0xaf, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc8, 0x0, 0x6}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.000087491s ago: executing program 6 (id=2297): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000580)='4(', 0x2}], 0x1}, 0x20000011) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 720.485737ms ago: executing program 7 (id=2301): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) 720.208326ms ago: executing program 8 (id=2302): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 627.378946ms ago: executing program 7 (id=2303): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000003c0)={0x2c, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x2c}}, 0x810) 627.221905ms ago: executing program 7 (id=2304): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000340)="2f13", 0x2) 540.503659ms ago: executing program 8 (id=2305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xfffffff0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x6, 0x2000, 0x4, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0x0, r2}) 401.604214ms ago: executing program 8 (id=2306): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 337.398918ms ago: executing program 8 (id=2307): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xffe8}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) 290.249269ms ago: executing program 8 (id=2308): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='p:mygrou-/myevent ./dummy:0', 0x1b) 219.081091ms ago: executing program 8 (id=2309): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) 66.804035ms ago: executing program 6 (id=2310): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='9', 0x1) 66.394948ms ago: executing program 6 (id=2311): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') setns(r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00') readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) 0s ago: executing program 6 (id=2312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) kernel console output (not intermixed with test programs): er [ 84.286955][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 84.290981][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.294217][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.298213][ T34] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 84.301989][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 84.305814][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 84.310411][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.315590][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.319400][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.533161][ T34] usb 5-1: GET_CAPABILITIES returned 0 [ 84.535475][ T34] usbtmc 5-1:16.0: can't read capabilities [ 84.577472][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.579949][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.650506][ T7165] CIFS: Attempting to mount //127.0.0.1/share [ 84.656974][ T64] Bluetooth: hci0: command 0x0419 tx timeout [ 84.738163][ T34] usb 5-1: USB disconnect, device number 6 [ 85.488792][ T7165] CIFS: VFS: cifs_mount failed w/return code = -112 [ 86.338774][ T9] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 86.656988][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.658380][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.737054][ T5745] Bluetooth: hci0: command 0x0419 tx timeout [ 88.816995][ T5745] Bluetooth: hci0: command 0x0419 tx timeout [ 94.481729][ T7231] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 94.489695][ T7231] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 94.575149][ T7235] netlink: 32 bytes leftover after parsing attributes in process `syz.1.508'. [ 94.745691][ T7248] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 94.760079][ T7248] lpc_ich 0000:00:00.0: No MFD cells added [ 95.331853][ T7279] capability: warning: `syz.1.528' uses deprecated v2 capabilities in a way that may be insecure [ 95.391821][ T42] audit: type=1326 audit(1786148164.263:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.0.529" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f34fec code=0x0 [ 97.891656][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 97.897076][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 97.901225][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 98.839859][ T7381] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 99.375497][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 99.485045][ T7417] jffs2: notice: (7417) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 99.555419][ T7420] device-mapper: ioctl: Invalid ioctl structure: name m, dev f802 [ 99.993316][ T7444] tipc: Started in network mode [ 99.996956][ T7444] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 100.000292][ T7444] tipc: Enabled bearer , priority 0 [ 100.149967][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.157173][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.162289][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.168149][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.171909][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.282028][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 100.285723][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 100.289792][ T7463] netlink: 'syz.2.602': attribute type 15 has an invalid length. [ 100.447826][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.499890][ T7479] gretap0: Device is already in use. [ 100.584434][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.643937][ T7487] netlink: 'syz.2.609': attribute type 11 has an invalid length. [ 100.652331][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 100.663550][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.610'. [ 100.729446][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.821026][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.838964][ T7504] syzkaller1: entered promiscuous mode [ 100.841082][ T7504] syzkaller1: entered allmulticast mode [ 100.940557][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.943716][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.947026][ T7454] bridge_slave_0: entered allmulticast mode [ 100.951075][ T7454] bridge_slave_0: entered promiscuous mode [ 100.956079][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.959291][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.962411][ T7454] bridge_slave_1: entered allmulticast mode [ 100.966442][ T7454] bridge_slave_1: entered promiscuous mode [ 101.026785][ T7454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.058497][ T7454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.091503][ T7454] team0: Port device team_slave_0 added [ 101.100037][ T12] bridge_slave_1: left allmulticast mode [ 101.101890][ T12] bridge_slave_1: left promiscuous mode [ 101.104583][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.111120][ T12] bridge_slave_0: left allmulticast mode [ 101.112970][ T12] bridge_slave_0: left promiscuous mode [ 101.114895][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.164185][ T7521] binder: 7520:7521 ioctl c0306201 800003c0 returned -14 [ 101.284426][ T7529] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.292278][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.298405][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.304882][ T12] bond0 (unregistering): Released all slaves [ 101.310956][ T7454] team0: Port device team_slave_1 added [ 101.313229][ T5793] tipc: Node number set to 43690 [ 101.396080][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.399376][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.408068][ T7454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.413667][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.416011][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.426603][ T7454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.473849][ T7454] hsr_slave_0: entered promiscuous mode [ 101.481294][ T7454] hsr_slave_1: entered promiscuous mode [ 101.489184][ T7454] debugfs: 'hsr0' already exists in 'hsr' [ 101.491686][ T7454] Cannot create hsr debugfs directory [ 101.591557][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 101.721229][ T7454] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.727682][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.730550][ T7454] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.734519][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.739857][ T7454] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.745810][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.748634][ T7454] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.755261][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.783481][ T12] hsr_slave_0: left promiscuous mode [ 101.785868][ T12] hsr_slave_1: left promiscuous mode [ 101.789238][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.791927][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.796108][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.799127][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.812823][ T12] veth1_macvtap: left promiscuous mode [ 101.815037][ T12] veth0_macvtap: left promiscuous mode [ 101.817019][ T12] veth1_vlan: left promiscuous mode [ 101.819384][ T12] veth0_vlan: left promiscuous mode [ 101.995280][ T12] team0 (unregistering): Port device team_slave_1 removed [ 102.008652][ T12] team0 (unregistering): Port device team_slave_0 removed [ 102.135206][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 102.218451][ T7454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.229673][ T7454] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.241338][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.243462][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.252725][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.255284][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.267541][ T5745] Bluetooth: hci4: command tx timeout [ 102.310348][ T7454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.405052][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 102.620093][ T7454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.637595][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 102.654315][ T7613] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 102.654315][ T7613] [ 102.660464][ T7613] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 102.664204][ T7613] CIFS: Attempting to mount //127.0.0.1/share [ 102.817690][ T7454] veth0_vlan: entered promiscuous mode [ 102.827566][ T7454] veth1_vlan: entered promiscuous mode [ 102.851392][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 102.852879][ T7454] veth0_macvtap: entered promiscuous mode [ 102.862604][ T7454] veth1_macvtap: entered promiscuous mode [ 102.874531][ T7454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.883648][ T7454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.907947][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.941059][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.948403][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.967027][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.971943][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.975539][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.001970][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.005548][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.005684][ T7630] netlink: 'syz.2.650': attribute type 11 has an invalid length. [ 103.282709][ T7653] netlink: 'syz.5.660': attribute type 1 has an invalid length. [ 103.364197][ T7661] overlayfs: failed to verify upper root origin [ 103.490395][ T7613] CIFS: VFS: cifs_mount failed w/return code = -512 [ 103.856140][ T7708] could not open pipe file descriptor [ 104.036020][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'. [ 104.077539][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.083085][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.096914][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.099975][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.349307][ T5745] Bluetooth: hci4: command tx timeout [ 104.375398][ T7753] syzkaller1: entered promiscuous mode [ 104.379827][ T7753] syzkaller1: entered allmulticast mode [ 104.390148][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 104.394021][ T7755] netlink: 'syz.1.705': attribute type 20 has an invalid length. [ 104.398062][ T7755] netlink: 'syz.1.705': attribute type 21 has an invalid length. [ 104.533757][ T5745] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 104.769008][ T7778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.194889][ T7796] mtrr: base(0x61616161000) is not aligned on a size(0x61616161000) boundary [ 105.836356][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.5.736'. [ 106.417472][ T5745] Bluetooth: hci4: command tx timeout [ 107.618715][ T851] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 108.497041][ T5745] Bluetooth: hci4: command tx timeout [ 115.903138][ T7899] IPv6: A: Disabled Multicast RS [ 115.908158][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.740'. [ 115.911744][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.740'. [ 116.040582][ T7908] jffs2: notice: (7908) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 116.096578][ T7914] netlink: 'syz.5.751': attribute type 14 has an invalid length. [ 116.099237][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.751'. [ 116.101264][ T42] audit: type=1800 audit(1786148184.973:8): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.749" name="control" dev="configfs" ino=19899 res=0 errno=0 [ 116.120677][ T7914] netlink: 'syz.5.751': attribute type 14 has an invalid length. [ 116.124070][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.751'. [ 116.128596][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.135692][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.140446][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.144442][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.233019][ T42] audit: type=1800 audit(1786148185.103:9): pid=7926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.755" name="p_srate" dev="configfs" ino=21850 res=0 errno=0 [ 116.328962][ T7939] loop6: detected capacity change from 0 to 2640 [ 116.333254][ T7939] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.335807][ T7939] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.343515][ T7939] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.346582][ T7939] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.349644][ T7939] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.352696][ T7939] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.355664][ T7939] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.359270][ T7939] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.362386][ T7939] ldm_validate_partition_table(): Disk read failed. [ 116.364820][ T7939] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.370818][ T7939] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.374015][ T7939] Dev loop6: unable to read RDB block 0 [ 116.376471][ T7939] loop6: unable to read partition table [ 116.379617][ T7939] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 116.980671][ T7973] process 'syz.2.773' launched './file2' with NULL argv: empty string added [ 117.883364][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.788'. [ 118.069966][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.793'. [ 118.073269][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.793'. [ 118.108872][ T34] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 118.270461][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.273871][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.277097][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.281331][ T34] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.284231][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.290825][ T34] usb 5-1: config 0 descriptor?? [ 118.347048][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 118.499076][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 118.502803][ T9] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 118.506754][ T9] usb 10-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 118.510737][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.520241][ T8021] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 118.525786][ T9] spcp8x5 10-1:1.0: SPCP8x5 converter detected [ 118.539081][ T9] usb 10-1: SPCP8x5 converter now attached to ttyUSB0 [ 118.703485][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.706608][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.713015][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.718297][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.721758][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.731780][ T34] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 118.889077][ T8021] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 118.893137][ T8021] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 118.898060][ T8021] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 118.958580][ T34] usb 5-1: USB disconnect, device number 7 [ 119.010540][ T8021] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 119.017469][ T5844] usb 10-1: USB disconnect, device number 2 [ 119.023696][ T5844] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 119.028795][ T5844] spcp8x5 10-1:1.0: device disconnected [ 119.580405][ T8048] jffs2: notice: (8048) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.928408][ T8072] netlink: 32 bytes leftover after parsing attributes in process `syz.1.816'. [ 120.384361][ T5780] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.491697][ T5780] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.559121][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.568007][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.573733][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.586937][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.600238][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.604889][ T5780] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.726995][ T5780] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.887452][ T5880] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 120.902837][ T5780] bridge_slave_1: left allmulticast mode [ 120.904946][ T5780] bridge_slave_1: left promiscuous mode [ 120.908046][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.915430][ T5780] bridge_slave_0: left allmulticast mode [ 120.919069][ T5780] bridge_slave_0: left promiscuous mode [ 120.920959][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.001852][ T8129] 9pnet_virtio: no channels available for device 127.0.0.1 [ 121.029650][ T5780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.034894][ T5780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.042524][ T5780] bond0 (unregistering): Released all slaves [ 121.046149][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 121.058899][ T5880] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.064171][ T5880] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.069830][ T5880] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.077040][ T5880] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.080306][ T5880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.089129][ T5880] usb 10-1: config 0 descriptor?? [ 121.335799][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10 [ 121.425209][ T5780] hsr_slave_0: left promiscuous mode [ 121.432455][ T5780] hsr_slave_1: left promiscuous mode [ 121.435654][ T5780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.440046][ T5780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.444007][ T5780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.447342][ T5780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.459567][ T5780] veth1_macvtap: left promiscuous mode [ 121.462017][ T5780] veth0_macvtap: left promiscuous mode [ 121.464439][ T5780] veth1_vlan: left promiscuous mode [ 121.466689][ T5780] veth0_vlan: left promiscuous mode [ 121.561070][ T5880] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 121.733594][ T5780] team0 (unregistering): Port device team_slave_1 removed [ 121.753994][ T5780] team0 (unregistering): Port device team_slave_0 removed [ 121.778729][ T9] usb 10-1: USB disconnect, device number 3 [ 121.860131][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11 [ 121.893850][ T8104] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.896606][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.899954][ T8104] bridge_slave_0: entered allmulticast mode [ 121.902749][ T8104] bridge_slave_0: entered promiscuous mode [ 121.906337][ T8104] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.909373][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.912390][ T8104] bridge_slave_1: entered allmulticast mode [ 121.916209][ T8104] bridge_slave_1: entered promiscuous mode [ 121.950816][ T8104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.955961][ T8104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.972336][ T8104] team0: Port device team_slave_0 added [ 121.976532][ T8104] team0: Port device team_slave_1 added [ 121.993429][ T8104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.995695][ T8104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.004355][ T8104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.009266][ T8104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.011630][ T8104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.020820][ T8104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.050923][ T8104] hsr_slave_0: entered promiscuous mode [ 122.053334][ T8104] hsr_slave_1: entered promiscuous mode [ 122.055623][ T8104] debugfs: 'hsr0' already exists in 'hsr' [ 122.057509][ T8104] Cannot create hsr debugfs directory [ 122.103074][ T5444] 8021q: adding VLAN 0 to HW filter on device eth12 [ 122.191002][ T8104] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 122.202113][ T8104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.205175][ T8104] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 122.210250][ T8104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.213201][ T8104] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 122.217752][ T8104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.220977][ T8104] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 122.225079][ T8104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.247582][ T8104] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.250659][ T8104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.255527][ T8104] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.258520][ T8104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.342005][ T8104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.369646][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.391044][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.411741][ T8104] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.416016][ T5444] 8021q: adding VLAN 0 to HW filter on device eth13 [ 122.427704][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.430663][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.450986][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.453692][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.657092][ T5745] Bluetooth: hci0: command tx timeout [ 122.683975][ T8208] netlink: 40 bytes leftover after parsing attributes in process `syz.5.853'. [ 122.894925][ T8104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.070810][ T8104] veth0_vlan: entered promiscuous mode [ 123.078888][ T8104] veth1_vlan: entered promiscuous mode [ 123.096927][ T8104] veth0_macvtap: entered promiscuous mode [ 123.101896][ T8104] veth1_macvtap: entered promiscuous mode [ 123.114679][ T8104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.121916][ T8104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.171878][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.174508][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.177015][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.194400][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.198153][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.207742][ T5780] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.211476][ T5780] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.214471][ T5780] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.262340][ T8243] netlink: 68 bytes leftover after parsing attributes in process `syz.5.871'. [ 123.266497][ T8243] netlink: 16 bytes leftover after parsing attributes in process `syz.5.871'. [ 123.272786][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.871'. [ 124.032396][ T8257] CIFS: Attempting to mount //127.0.0.1/share [ 124.042603][ T8259] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 124.235524][ T8268] netlink: 'syz.6.875': attribute type 4 has an invalid length. [ 124.273033][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.868'. [ 124.389809][ T8283] netlink: 'syz.5.881': attribute type 12 has an invalid length. [ 124.393055][ T8283] netlink: 'syz.5.881': attribute type 29 has an invalid length. [ 124.396416][ T8283] netlink: 148 bytes leftover after parsing attributes in process `syz.5.881'. [ 124.403536][ T8283] netlink: 'syz.5.881': attribute type 1 has an invalid length. [ 124.408253][ T8283] netlink: 'syz.5.881': attribute type 2 has an invalid length. [ 124.411865][ T8283] netlink: 15 bytes leftover after parsing attributes in process `syz.5.881'. [ 124.570362][ T8295] kvm: apic: phys broadcast and lowest prio [ 124.747369][ T5745] Bluetooth: hci0: command tx timeout [ 124.864691][ T8257] CIFS: VFS: Error connecting to socket. Aborting operation. [ 124.867944][ T8257] CIFS: VFS: cifs_mount failed w/return code = -4 [ 125.340756][ T8341] netlink: 428 bytes leftover after parsing attributes in process `syz.5.906'. [ 125.344419][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.906'. [ 125.382396][ T8345] bridge0: port 3(netdevsim0) entered blocking state [ 125.392997][ T8345] bridge0: port 3(netdevsim0) entered disabled state [ 125.396058][ T8345] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 125.406283][ T8345] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 125.413959][ T8345] bridge0: port 3(netdevsim0) entered blocking state [ 125.417121][ T8345] bridge0: port 3(netdevsim0) entered forwarding state [ 125.431110][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.864535][ T5742] tipc: Resetting bearer [ 125.889105][ T5742] tipc: Disabling bearer [ 126.021811][ T8387] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22) [ 126.175057][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.184775][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.303928][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.308133][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.309350][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.315142][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.320875][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.325998][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.329741][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.457151][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.462718][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.552322][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.556627][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.754711][ T12] bridge_slave_1: left allmulticast mode [ 126.757205][ T12] bridge_slave_1: left promiscuous mode [ 126.759676][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.765498][ T12] bridge_slave_0: left allmulticast mode [ 126.768622][ T12] bridge_slave_0: left promiscuous mode [ 126.771308][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.827022][ T5745] Bluetooth: hci0: command tx timeout [ 126.927103][ T9] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 126.949298][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.955609][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.961125][ T12] bond0 (unregistering): Released all slaves [ 127.066469][ T12] tipc: Left network mode [ 127.088622][ T9] usb 11-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.097376][ T9] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 127.105343][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 127.116163][ T9] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 127.125986][ T9] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 127.140397][ T9] usb 11-1: Product: syz [ 127.141804][ T9] usb 11-1: Manufacturer: syz [ 127.143747][ T9] usb 11-1: SerialNumber: syz [ 127.161021][ T9] usb 11-1: config 0 descriptor?? [ 127.190201][ T9] usb 11-1: selecting invalid altsetting 0 [ 127.333250][ T8399] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.337667][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.340360][ T8399] bridge_slave_0: entered allmulticast mode [ 127.343564][ T8399] bridge_slave_0: entered promiscuous mode [ 127.359161][ T5444] 8021q: adding VLAN 0 to HW filter on device eth14 [ 127.361664][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.364044][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.366228][ T8399] bridge_slave_1: entered allmulticast mode [ 127.369625][ T8399] bridge_slave_1: entered promiscuous mode [ 127.417789][ T9] usb 11-1: USB disconnect, device number 2 [ 127.417883][ T8399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.472129][ T8399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.509987][ T8399] team0: Port device team_slave_0 added [ 127.514883][ T8399] team0: Port device team_slave_1 added [ 127.577803][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.580570][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.594500][ T8399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.618860][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.621848][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.632714][ T8399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.672442][ T8399] hsr_slave_0: entered promiscuous mode [ 127.675257][ T8399] hsr_slave_1: entered promiscuous mode [ 127.678853][ T8399] debugfs: 'hsr0' already exists in 'hsr' [ 127.681304][ T8399] Cannot create hsr debugfs directory [ 127.708384][ T12] hsr_slave_0: left promiscuous mode [ 127.711431][ T12] hsr_slave_1: left promiscuous mode [ 127.714336][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.717643][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.721390][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.724252][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.743206][ T12] veth1_macvtap: left promiscuous mode [ 127.745111][ T12] veth0_macvtap: left promiscuous mode [ 127.748913][ T12] veth1_vlan: left promiscuous mode [ 127.751309][ T12] veth0_vlan: left promiscuous mode [ 127.973652][ T12] team0 (unregistering): Port device team_slave_1 removed [ 127.982212][ T12] team0 (unregistering): Port device team_slave_0 removed [ 128.110565][ T8466] __nla_validate_parse: 1 callbacks suppressed [ 128.110583][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.951'. [ 128.147129][ T5444] 8021q: adding VLAN 0 to HW filter on device eth15 [ 128.417386][ T5745] Bluetooth: hci2: command tx timeout [ 128.463132][ T5444] 8021q: adding VLAN 0 to HW filter on device eth16 [ 128.518282][ T8399] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 128.534982][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.541419][ T8399] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 128.557848][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.569630][ T8399] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 128.572587][ T12] IPVS: stop unused estimator thread 0... [ 128.588448][ T50] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 128.591719][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.641350][ T8399] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 128.666200][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.757319][ T50] usb 11-1: Using ep0 maxpacket: 8 [ 128.761266][ T50] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 128.766133][ T50] usb 11-1: config 0 has no interface number 0 [ 128.776596][ T50] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.784713][ T50] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 128.799350][ T50] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.807828][ T50] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 128.821044][ T50] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 128.826981][ T50] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.837937][ T50] usb 11-1: config 0 descriptor?? [ 128.842331][ T8399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.864570][ T50] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 128.869735][ T8399] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.884756][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.887539][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.897565][ T5745] Bluetooth: hci0: command tx timeout [ 128.902876][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.905555][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.929864][ T5444] 8021q: adding VLAN 0 to HW filter on device eth17 [ 129.122030][ T1349] usb 11-1: USB disconnect, device number 3 [ 129.123557][ C2] ldusb 11-1:0.55: usb_submit_urb failed (-19) [ 129.129246][ T8474] ldusb 11-1:0.55: Couldn't submit interrupt_out_urb -19 [ 129.141939][ T1349] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 129.292743][ T8399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.474027][ T8399] veth0_vlan: entered promiscuous mode [ 129.490152][ T8399] veth1_vlan: entered promiscuous mode [ 129.519166][ T8399] veth0_macvtap: entered promiscuous mode [ 129.525561][ T8399] veth1_macvtap: entered promiscuous mode [ 129.542964][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.552400][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.617337][ T5816] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.657247][ T5816] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.660562][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.666098][ T5816] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.672233][ T5816] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.674017][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.726443][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.729379][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.998904][ T5844] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 130.148713][ T5844] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.155821][ T5844] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 130.167048][ T5844] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.170525][ T5844] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 130.175035][ T5844] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 130.188832][ T5844] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.194264][ T5844] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.198712][ T5844] usb 11-1: Product: syz [ 130.200600][ T5844] usb 11-1: Manufacturer: syz [ 130.211194][ T5844] cdc_wdm 11-1:1.0: skipping garbage [ 130.213424][ T5844] cdc_wdm 11-1:1.0: skipping garbage [ 130.217057][ T5844] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 130.219624][ T5844] cdc_wdm 11-1:1.0: Unknown control protocol [ 130.507076][ T5745] Bluetooth: hci2: command tx timeout [ 131.199512][ T50] usb 11-1: USB disconnect, device number 4 [ 131.528474][ T8622] loop8: detected capacity change from 0 to 7 [ 131.538437][ T8622] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 131.544438][ T8622] loop8: partition table partially beyond EOD, truncated [ 131.552060][ T8622] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 131.559229][ T8622] loop8: p2 start 121280928 is beyond EOD, truncated [ 131.603871][ T8406] udevd[8406]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 131.636009][ T8624] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 132.422050][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.424819][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.536975][ T1349] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 132.587005][ T64] Bluetooth: hci2: command tx timeout [ 132.710005][ T1349] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 132.715405][ T1349] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 132.720138][ T1349] usb 11-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 132.724016][ T1349] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.735873][ T8643] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 132.751937][ T1349] spcp8x5 11-1:1.0: SPCP8x5 converter detected [ 132.767429][ T1349] usb 11-1: SPCP8x5 converter now attached to ttyUSB0 [ 133.129594][ T8643] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 133.133394][ T8643] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 133.137367][ T8643] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 133.249038][ T8643] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 133.267173][ T5824] usb 11-1: USB disconnect, device number 5 [ 133.290644][ T5824] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 133.294691][ T5824] spcp8x5 11-1:1.0: device disconnected [ 133.403013][ T42] audit: type=1326 audit(1786148202.273:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 133.411868][ T42] audit: type=1326 audit(1786148202.273:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 133.421514][ T42] audit: type=1326 audit(1786148202.273:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 133.430132][ T42] audit: type=1326 audit(1786148202.273:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 133.438256][ T42] audit: type=1326 audit(1786148202.273:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 133.446627][ T42] audit: type=1326 audit(1786148202.273:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 133.455595][ T42] audit: type=1326 audit(1786148202.273:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 133.459806][ T5745] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 133.464869][ T42] audit: type=1326 audit(1786148202.273:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 133.475554][ T42] audit: type=1326 audit(1786148202.273:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 133.484777][ T42] audit: type=1326 audit(1786148202.273:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.1026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 134.184060][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.261402][ T8743] loop5: detected capacity change from 0 to 6 [ 134.282088][ T8743] Dev loop5: unable to read RDB block 6 [ 134.284034][ T8743] loop5: unable to read partition table [ 134.285982][ T8743] loop5: partition table beyond EOD, truncated [ 134.289176][ T8743] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 134.336420][ T8750] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 134.343325][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.396043][ T8755] netlink: 272 bytes leftover after parsing attributes in process `syz.5.1048'. [ 134.490889][ T8766] pim6reg1: entered promiscuous mode [ 134.493846][ T8766] pim6reg1: entered allmulticast mode [ 134.497349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.502616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.657135][ T5745] Bluetooth: hci2: command tx timeout [ 134.682542][ T2316] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 134.847508][ T2316] usb 11-1: Using ep0 maxpacket: 8 [ 134.857617][ T2316] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.861964][ T2316] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 134.867010][ T2316] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.874149][ T2316] usb 11-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 134.878431][ T2316] usb 11-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 134.882000][ T2316] usb 11-1: Product: syz [ 134.883801][ T2316] usb 11-1: Manufacturer: syz [ 134.886077][ T2316] usb 11-1: SerialNumber: syz [ 134.891506][ T2316] usb 11-1: config 0 descriptor?? [ 134.957419][ T2316] rc_core: IR keymap rc-imon-rsc not found [ 134.960741][ T2316] Registered IR keymap rc-empty [ 134.972148][ T2316] rc rc0: iMON Station as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 134.977527][ T2316] input: iMON Station as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input17 [ 134.997969][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.223827][ T8804] IPv6: A: Disabled Multicast RS [ 135.227936][ T8273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.265900][ T8273] usb 11-1: USB disconnect, device number 6 [ 135.352716][ T8807] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22) [ 135.589537][ T8822] o2cb: This node has not been configured. [ 135.594369][ T8822] o2cb: Cluster check failed. Fix errors before retrying. [ 135.599439][ T8822] (syz.5.1082,8822,3):user_dlm_register:674 ERROR: status = -22 [ 135.602889][ T8822] (syz.5.1082,8822,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 135.695581][ T8826] syzkaller1: entered promiscuous mode [ 135.698003][ T8826] syzkaller1: entered allmulticast mode [ 135.879961][ T8832] IPv6: A: Disabled Multicast RS [ 135.905214][ T8834] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22) [ 136.097252][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.261530][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.402469][ T5745] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 137.307227][ T8273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.339644][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.379211][ T5817] net_ratelimit: 1 callbacks suppressed [ 139.379231][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.419204][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.470461][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.177262][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.497567][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.298576][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.547236][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.937668][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.578453][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.587136][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.295832][ T8932] ublk1: read batch cmd buffer failed [ 145.307067][ T8932] ublk1: read batch cmd buffer failed [ 145.489149][ T8952] macvtap1: entered promiscuous mode [ 145.501645][ T8952] macvtap1: entered allmulticast mode [ 145.547856][ T8958] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 145.551648][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.562139][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.566045][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.569271][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.609074][ T8962] input: syz1 as /devices/virtual/input/input20 [ 145.619457][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.144138][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 146.337923][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.408669][ T9006] IPVS: You probably need to specify IP address on multicast interface. [ 146.413513][ T9006] IPVS: Error connecting to the multicast addr [ 146.658063][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.791895][ T9021] syzkaller1: entered promiscuous mode [ 146.794357][ T9021] syzkaller1: entered allmulticast mode [ 147.070925][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1157'. [ 147.271230][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1164'. [ 147.350604][ T9067] Bluetooth: MGMT ver 1.23 [ 147.708209][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.812746][ T9100] batadv_slave_1: entered promiscuous mode [ 147.815384][ T9099] batadv_slave_1: left promiscuous mode [ 149.299366][ T9167] input: syz0 as /devices/virtual/input/input21 [ 149.655751][ T9205] jffs2: notice: (9205) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 149.727554][ T9] net_ratelimit: 3 callbacks suppressed [ 149.727575][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.778070][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.816973][ T5815] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 149.974334][ T5815] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 149.978263][ T5815] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 149.981267][ T5815] usb 11-1: Product: syz [ 149.982612][ T5815] usb 11-1: Manufacturer: syz [ 149.984721][ T5815] usb 11-1: SerialNumber: syz [ 149.989151][ T5815] usb 11-1: config 0 descriptor?? [ 149.994801][ T5815] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 149.999158][ T5815] dvb-usb: bulk message failed: -22 (2/0) [ 150.011067][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.015454][ T5815] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 150.019142][ T5815] usb 11-1: media controller created [ 150.032385][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.194819][ T9199] cxusb: i2c wr: len=80 is too big! [ 150.194819][ T9199] [ 150.199794][ T5815] cxusb: set interface failed [ 150.201938][ T5815] dvb-usb: bulk message failed: -22 (1/0) [ 150.233055][ T5815] DVB: Unable to find symbol mt352_attach() [ 150.237140][ T5815] dvb-usb: bulk message failed: -22 (5/0) [ 150.240549][ T5815] zl10353_read_register: readreg error (reg=127, ret==-121) [ 150.242912][ T5815] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 150.297807][ T5815] rc_core: IR keymap rc-dvico-mce not found [ 150.299778][ T5815] Registered IR keymap rc-empty [ 150.301888][ T5815] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 150.305819][ T5815] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input22 [ 150.313972][ T5815] dvb-usb: schedule remote query interval to 100 msecs. [ 150.316184][ T5815] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 150.321302][ T5815] usb 11-1: USB disconnect, device number 7 [ 150.392169][ T5815] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 150.819295][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.879891][ T9228] mac80211_hwsim hwsim18 syzkaller1: entered promiscuous mode [ 150.882860][ T9228] mac80211_hwsim hwsim18 syzkaller1: entered allmulticast mode [ 150.907494][ T9232] syzkaller1: entered promiscuous mode [ 150.910197][ T9232] syzkaller1: entered allmulticast mode [ 151.025639][ T9242] netlink: 'syz.7.1247': attribute type 4 has an invalid length. [ 151.209355][ T9261] sctp: [Deprecated]: syz.2.1251 (pid 9261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.209355][ T9261] Use struct sctp_sack_info instead [ 151.376993][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 151.377090][ T5745] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.382355][ T5844] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 151.386420][ T5844] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 151.539207][ T24] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 151.541977][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.545538][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.549075][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.553046][ T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.556010][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.562541][ T24] usb 10-1: config 0 descriptor?? [ 151.816090][ T9280] IPVS: You probably need to specify IP address on multicast interface. [ 151.819313][ T9280] IPVS: Error connecting to the multicast addr [ 151.857816][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.979928][ T24] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 152.020720][ T24] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 152.020742][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 152.044447][ T9286] netlink: 'syz.2.1267': attribute type 2 has an invalid length. [ 152.220471][ T9293] ip6erspan0: entered allmulticast mode [ 152.241008][ T5815] usb 10-1: USB disconnect, device number 4 [ 152.275508][ T9296] i2c i2c-0: delete_device: Can't parse I2C address [ 152.427320][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.525080][ T42] kauditd_printk_skb: 494 callbacks suppressed [ 152.525093][ T42] audit: type=1800 audit(1786148221.393:514): pid=9317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1281" name="num" dev="configfs" ino=28960 res=0 errno=0 [ 152.557653][ T9320] input: syz0 as /devices/virtual/input/input24 [ 152.909214][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.257134][ T5815] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 153.417862][ T5815] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 153.422488][ T5815] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.426350][ T5815] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.430885][ T5815] usb 12-1: config 0 interface 0 has no altsetting 0 [ 153.438460][ T5815] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.446927][ T5815] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.451390][ T9350] netlink: 83 bytes leftover after parsing attributes in process `syz.2.1295'. [ 153.455037][ T5815] usb 12-1: config 0 interface 0 has no altsetting 0 [ 153.458033][ T5745] Bluetooth: hci4: command 0x0c1a tx timeout [ 153.461061][ T5844] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 153.464842][ T5844] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 153.471179][ T5815] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.477321][ T5815] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.484426][ T5815] usb 12-1: config 0 interface 0 has no altsetting 0 [ 153.490459][ T5815] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.497803][ T5815] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.504961][ T5815] usb 12-1: config 0 interface 0 has no altsetting 0 [ 153.508594][ T5815] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.517020][ T5815] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.525218][ T5815] usb 12-1: config 0 interface 0 has no altsetting 0 [ 153.533206][ T5815] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.536400][ T5815] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.543639][ T5815] usb 12-1: config 0 interface 0 has no altsetting 0 [ 153.547571][ T5815] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.550829][ T5815] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.557853][ T5815] usb 12-1: config 0 interface 0 has no altsetting 0 [ 153.567779][ T5815] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.571618][ T5815] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.575155][ T5815] usb 12-1: config 0 interface 0 has no altsetting 0 [ 153.575367][ T42] audit: type=1800 audit(1786148222.443:515): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1298" name="c_mute_present" dev="configfs" ino=29063 res=0 errno=0 [ 153.580150][ T5815] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 153.601090][ T5815] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 153.603906][ T5815] usb 12-1: Product: syz [ 153.608923][ T5815] usb 12-1: Manufacturer: syz [ 153.613162][ T5815] usb 12-1: SerialNumber: syz [ 153.642753][ T5815] usb 12-1: config 0 descriptor?? [ 153.662812][ T5815] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 153.868958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.873493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.875941][ T5817] usb 12-1: USB disconnect, device number 2 [ 153.886538][ T5817] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 153.939623][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.956150][ T9383] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1308'. [ 154.187209][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.317485][ T9395] overlayfs: failed lookup in lower (newroot/372, name='file0', err=-40): overlapping layers [ 154.705234][ T9419] gtp0: entered promiscuous mode [ 154.711936][ T9419] gtp0: entered allmulticast mode [ 154.716312][ T9419] team0: Device gtp0 is of different type [ 154.979345][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.065091][ T42] audit: type=1326 audit(1786148223.933:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.7.1334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7fc00000 [ 155.089085][ T42] audit: type=1326 audit(1786148223.933:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.7.1334" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708efec code=0x7fc00000 [ 155.099452][ T42] audit: type=1326 audit(1786148223.933:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.7.1334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7fc00000 [ 155.107310][ T42] audit: type=1326 audit(1786148223.933:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.7.1334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7fc00000 [ 155.115633][ T42] audit: type=1326 audit(1786148223.933:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.7.1334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7fc00000 [ 155.125823][ T42] audit: type=1326 audit(1786148223.933:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.7.1334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7fc00000 [ 155.142386][ T42] audit: type=1326 audit(1786148223.933:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.7.1334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7fc00000 [ 155.151603][ T42] audit: type=1326 audit(1786148223.933:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.7.1334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7fc00000 [ 155.456245][ T9488] input: syz1 as /devices/virtual/input/input25 [ 155.458172][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.708241][ T5745] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.709108][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 155.715735][ T5844] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 156.017398][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.216484][ T9521] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 156.230996][ T9521] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 156.239690][ T9521] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 156.254361][ T9521] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.280538][ T9521] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 156.415604][ T1155] smbdirect: ib_dev[syz2] removed [ 156.588746][ T9534] syzkaller1: entered promiscuous mode [ 156.592471][ T9534] syzkaller1: entered allmulticast mode [ 156.761835][ T9547] jffs2: notice: (9547) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 156.828081][ T9] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 156.923150][ T9563] overlayfs: failed lookup in lower (newroot/181, name='file0', err=-40): overlapping layers [ 156.991117][ T9] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 156.994510][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.998279][ T9] usb 11-1: Product: syz [ 156.999660][ T9] usb 11-1: Manufacturer: syz [ 157.001241][ T9] usb 11-1: SerialNumber: syz [ 157.007349][ T9] usb 11-1: config 0 descriptor?? [ 157.057164][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.217361][ T5838] usb 11-1: USB disconnect, device number 8 [ 157.857086][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.860727][ T5844] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 157.863528][ T5844] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 157.961026][ T9584] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 158.097723][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.490816][ T9611] netlink: 'syz.7.1408': attribute type 83 has an invalid length. [ 158.498238][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.676174][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1412'. [ 158.681382][ T9619] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1412'. [ 159.137185][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.742680][ T9656] netlink: 'syz.7.1426': attribute type 4 has an invalid length. [ 159.837974][ T5838] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 160.017215][ T64] Bluetooth: hci3: command 0x1003 tx timeout [ 160.021201][ T5745] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 160.086085][ T9672] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 160.096575][ T9672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.128374][ T9674] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1431'. [ 160.135569][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1431'. [ 160.177162][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.217300][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.537471][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.257209][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.309222][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.777977][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.337978][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.577246][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.377238][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.417159][ T8273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.457840][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.617875][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.497448][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.537635][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.335888][ T9713] batadv_slave_1: entered promiscuous mode [ 170.339068][ T9712] batadv_slave_1: left promiscuous mode [ 170.534304][ T9739] program syz.5.1449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.578889][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.658248][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.808114][ T9758] jffs2: notice: (9758) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 170.990141][ T9775] syzkaller1: entered promiscuous mode [ 170.991972][ T9775] syzkaller1: entered allmulticast mode [ 171.254873][ T9792] loop5: detected capacity change from 0 to 7 [ 171.260257][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.264864][ C3] buffer_io_error: 11 callbacks suppressed [ 171.264881][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 171.270976][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.275014][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 171.278660][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.282471][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 171.285864][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.289942][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 171.294052][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.298108][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 171.302257][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.305700][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 171.308455][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.312762][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 171.316881][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.322164][ T9792] ldm_validate_partition_table(): Disk read failed. [ 171.324470][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.328330][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 171.331764][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.335547][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 171.340144][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 171.343400][ T9792] Dev loop5: unable to read RDB block 0 [ 171.345955][ T9792] loop5: unable to read partition table [ 171.348517][ T9792] loop5: partition table beyond EOD, truncated [ 171.351013][ T9792] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 171.592050][ T9820] input: syz1 as /devices/virtual/input/input26 [ 171.619604][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.661586][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'. [ 171.705999][ T9829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.711055][ T9829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.713955][ T9829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.720084][ T9829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.723331][ T9829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.741722][ T9831] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 171.781745][ T9834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.789639][ T9834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.827396][ T5844] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 171.999318][ T5844] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 172.003856][ T5844] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.014157][ T5844] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.023851][ T5844] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 172.030681][ T5844] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 172.034420][ T5844] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 172.038183][ T5844] usb 11-1: Manufacturer: syz [ 172.042032][ T5844] usb 11-1: config 0 descriptor?? [ 172.045211][ T9839] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1493'. [ 172.280182][ T5824] libceph: mon0 (1)[c::]:6789 socket error on write [ 172.299879][ T2316] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 172.303562][ T9851] ceph: No mds server is up or the cluster is laggy [ 172.342305][ T9856] netlink: 'syz.5.1499': attribute type 5 has an invalid length. [ 172.345977][ T9856] netlink: 'syz.5.1499': attribute type 5 has an invalid length. [ 172.401777][ T9858] pim6reg: entered allmulticast mode [ 172.418811][ T9860] bridge_slave_0: left allmulticast mode [ 172.421356][ T9860] bridge_slave_0: left promiscuous mode [ 172.423732][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.433926][ T9860] bridge_slave_1: left allmulticast mode [ 172.436225][ T9860] bridge_slave_1: left promiscuous mode [ 172.440702][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.448698][ T9860] bond0: (slave bond_slave_0): Releasing backup interface [ 172.453910][ T9860] bond0: (slave bond_slave_1): Releasing backup interface [ 172.468830][ T9860] team0: Port device team_slave_0 removed [ 172.469657][ T5844] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 172.481715][ T5844] appleir 0003:05AC:8243.000C: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 172.486660][ T9860] team0: Port device team_slave_1 removed [ 172.491479][ T9860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.494895][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.503108][ T9860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.505763][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.509939][ T9858] pim6reg: left allmulticast mode [ 172.612042][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1502'. [ 172.719355][ T5824] usb 11-1: USB disconnect, device number 9 [ 173.155187][ T9888] bridge_slave_0: left allmulticast mode [ 173.157601][ T9888] bridge_slave_0: left promiscuous mode [ 173.162082][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.180362][ T9888] bridge_slave_1: left allmulticast mode [ 173.187320][ T9888] bridge_slave_1: left promiscuous mode [ 173.190039][ T9888] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.204572][ T9888] bond0: (slave bond_slave_0): Releasing backup interface [ 173.213144][ T9888] bond0: (slave bond_slave_1): Releasing backup interface [ 173.224131][ T9888] team0: Port device team_slave_0 removed [ 173.239011][ T9888] team0: Port device team_slave_1 removed [ 173.245086][ T9888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.248919][ T9888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.253755][ T9888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.259457][ T9888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.293290][ T9894] vlan2: entered allmulticast mode [ 173.299834][ T9894] bond0: entered allmulticast mode [ 173.301902][ T9894] bond_slave_0: entered allmulticast mode [ 173.306584][ T9894] bond_slave_1: entered allmulticast mode [ 173.327555][ T9894] bridge0: port 3(vlan2) entered blocking state [ 173.330104][ T9894] bridge0: port 3(vlan2) entered disabled state [ 173.338240][ T9894] vlan2: entered promiscuous mode [ 173.343522][ T9894] bond0: entered promiscuous mode [ 173.345567][ T9894] bond_slave_0: entered promiscuous mode [ 173.355046][ T9894] bond_slave_1: entered promiscuous mode [ 173.362993][ T9894] bridge0: port 3(vlan2) entered blocking state [ 173.367783][ T9894] bridge0: port 3(vlan2) entered forwarding state [ 173.610924][ T9909] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 173.825244][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1530'. [ 173.850048][ T9929] pim6reg: entered allmulticast mode [ 173.862945][ T9929] pim6reg: left allmulticast mode [ 173.878685][ T50] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 173.883314][ T9937] loop5: detected capacity change from 0 to 7 [ 173.884286][ T9935] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 173.887568][ T9937] ldm_validate_partition_table(): Disk read failed. [ 173.892473][ T9937] Dev loop5: unable to read RDB block 0 [ 173.895316][ T9937] loop5: unable to read partition table [ 173.898058][ T9937] loop5: partition table beyond EOD, truncated [ 173.900587][ T9937] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 173.909628][ T9931] ceph: No mds server is up or the cluster is laggy [ 174.000677][ T9940] input: syz0 as /devices/virtual/input/input27 [ 174.206208][ T50] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 174.218576][ T9958] ceph: No mds server is up or the cluster is laggy [ 174.427103][ T29] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 174.579267][ T29] usb 11-1: Using ep0 maxpacket: 8 [ 174.586043][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1562'. [ 174.586339][ T29] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.593853][ T29] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.597512][ T29] usb 11-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 174.602409][ T29] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 174.608108][ T29] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 174.612010][ T29] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.627249][ T29] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.633317][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.709665][T10014] input: syz1 as /devices/virtual/input/input28 [ 174.851544][ T29] usb 11-1: GET_CAPABILITIES returned 0 [ 174.854583][ T29] usbtmc 11-1:16.0: can't read capabilities [ 175.036949][ T5793] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 175.052868][ T29] usb 11-1: USB disconnect, device number 10 [ 175.211090][ T5793] usb 7-1: not running at top speed; connect to a high speed hub [ 175.217169][ T5793] usb 7-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 175.220696][ T5793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.223405][ T5793] usb 7-1: Product: syz [ 175.224995][ T5793] usb 7-1: Manufacturer: syz [ 175.226623][ T5793] usb 7-1: SerialNumber: syz [ 175.777222][ T1349] net_ratelimit: 8 callbacks suppressed [ 175.777270][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.184581][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.189142][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.192729][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.196711][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.200212][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.203038][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.207028][ T2316] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 176.211466][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.267480][ C3] usb 7-1: received EP1 urb->status = -2 [ 176.269753][ T5793] usb 7-1: unable to init card! (ret=-110) [ 176.272303][ T5793] snd-usb-caiaq 7-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 176.391712][ T2316] usb 11-1: config 0 has no interfaces? [ 176.397222][ T2316] usb 11-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 176.400854][ T2316] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 176.403302][ T2316] usb 11-1: SerialNumber: syz [ 176.413992][ T2316] usb 11-1: config 0 descriptor?? [ 176.733131][ T9] usb 11-1: USB disconnect, device number 11 [ 176.739548][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.820929][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.093484][T10104] loop5: detected capacity change from 0 to 11351 [ 177.105118][T10104] loop5: detected capacity change from 11351 to 13927 [ 177.141390][ T9849] buffer_io_error: 30 callbacks suppressed [ 177.141403][ T9849] Buffer I/O error on dev loop5, logical block 1740, async page read [ 177.200072][ T29] usb 7-1: USB disconnect, device number 4 [ 177.323350][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1606'. [ 177.538963][T10118] ima: policy update failed [ 177.541252][ T42] kauditd_printk_skb: 60 callbacks suppressed [ 177.541266][ T42] audit: type=1802 audit(1786148246.413:584): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1612" res=0 errno=0 [ 177.937500][ T1349] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 178.097014][ T1349] usb 11-1: Using ep0 maxpacket: 8 [ 178.100048][ T1349] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.103388][ T1349] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.107017][ T1349] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.110347][ T1349] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.114753][ T1349] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.117999][ T1349] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.317026][ T5793] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 178.328299][ T1349] usb 11-1: GET_CAPABILITIES returned 0 [ 178.330563][ T1349] usbtmc 11-1:16.0: can't read capabilities [ 178.477094][ T5793] usb 10-1: Using ep0 maxpacket: 8 [ 178.481306][ T5793] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 178.484583][ T5793] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.488653][ T5793] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.492604][ T5793] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.496284][ T5793] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.502263][ T5793] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 178.510432][ T5793] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.530880][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.534282][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.537619][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.540398][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.545102][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.548853][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.552612][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.556628][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.560340][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.563927][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.567919][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.571681][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.574839][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.578154][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.581346][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.584921][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.592327][ T1349] usb 11-1: USB disconnect, device number 12 [ 178.722225][ T5793] usb 10-1: usb_control_msg returned -32 [ 178.724320][ T5793] usbtmc 10-1:16.0: can't read capabilities [ 178.771280][T10164] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 178.774251][T10164] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 179.074939][T10175] usbtmc 10-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 179.280801][ T29] usb 10-1: USB disconnect, device number 5 [ 179.873439][T10227] type: 762539881 invalid [ 179.925624][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1662'. [ 179.954763][T10231] batman_adv: batadv0: Adding interface: macsec1 [ 179.960259][T10231] batman_adv: batadv0: The MTU of interface macsec1 is too small (1418) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.971677][T10231] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 180.033851][T10241] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1665'. [ 180.044169][T10241] bridge0: port 3(vlan2) entered disabled state [ 180.046460][T10241] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.050269][T10241] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.076581][T10241] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1665'. [ 180.109655][T10249] device-mapper: ioctl: Unable to rename non-existent device, to j f [ 180.488157][ T64] Bluetooth: hci3: sending frame failed (-49) [ 180.491863][ T5745] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 180.707264][ T9] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 180.715626][T10295] jffs2: notice: (10295) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 180.862061][ T9] usb 12-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 180.865831][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.869941][ T9] usb 12-1: Product: syz [ 180.871687][ T9] usb 12-1: Manufacturer: syz [ 180.873963][ T9] usb 12-1: SerialNumber: syz [ 180.882810][ T9] ums-karma 12-1:1.0: USB Mass Storage device detected [ 180.897617][ T9] ums-karma 12-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 180.897617][ T9] Please send a copy of this message to and [ 180.979240][ T1349] net_ratelimit: 6 callbacks suppressed [ 180.979261][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.237181][ T42] audit: type=1800 audit(1786148250.103:585): pid=10314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1700" name="nullb0" dev="tmpfs" ino=1037 res=0 errno=0 [ 181.251784][T10316] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1701'. [ 181.256456][T10316] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1701'. [ 181.341964][ T9] ums-karma 12-1:1.0: probe with driver ums-karma failed with error -5 [ 181.487037][ T50] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 181.499238][ T9] usb 12-1: USB disconnect, device number 3 [ 181.647214][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 181.651399][ T50] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.655063][ T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.658825][ T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.662512][ T50] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.667751][ T50] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.670852][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.880110][ T50] usb 7-1: GET_CAPABILITIES returned 0 [ 181.881969][ T50] usbtmc 7-1:16.0: can't read capabilities [ 182.017142][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.082230][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.085145][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.088019][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.090826][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.093973][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.096706][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.099704][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.102458][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.109086][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.111964][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.114817][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.117614][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.120426][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.123235][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.126088][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.128901][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.138990][ T1035] usb 7-1: USB disconnect, device number 5 [ 182.359421][T10363] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1722'. [ 182.362327][T10363] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1722'. [ 182.557078][ T29] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 182.720105][ T29] usb 12-1: config 0 has no interfaces? [ 182.722880][ T29] usb 12-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 182.725911][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 182.731206][ T29] usb 12-1: SerialNumber: syz [ 182.734657][ T29] usb 12-1: config 0 descriptor?? [ 182.817206][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.977176][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.985215][ T5793] usb 12-1: USB disconnect, device number 4 [ 183.059639][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.605110][T10375] veth0: entered promiscuous mode [ 183.608295][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1734'. [ 184.102376][T10395] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 184.111145][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.507565][ T5838] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 184.681227][ T5838] usb 10-1: config 0 has no interfaces? [ 184.688164][ T5838] usb 10-1: New USB device found, idVendor=0425, idProduct=a4a1, bcdDevice= 0.40 [ 184.697046][ T5838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 184.702728][ T5838] usb 10-1: SerialNumber: syz [ 184.723003][ T5838] usb 10-1: config 0 descriptor?? [ 184.971763][ T5793] usb 10-1: USB disconnect, device number 6 [ 185.137215][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.157081][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 185.317049][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 185.321741][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 185.324968][ T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 185.329711][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 185.334062][ T9] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.338940][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 185.343453][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 185.348469][ T9] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 185.354057][ T9] usb 7-1: config 168 interface 0 has no altsetting 0 [ 185.358511][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 185.361653][ T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 185.366398][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 185.372101][ T9] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.377530][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 185.382137][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 185.386435][ T9] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 185.391935][ T9] usb 7-1: config 168 interface 0 has no altsetting 0 [ 185.395512][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 185.398965][ T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 185.403523][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 185.408739][ T9] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.413716][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 185.418899][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 185.423660][ T9] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 185.429640][ T9] usb 7-1: config 168 interface 0 has no altsetting 0 [ 185.436245][ T9] usb 7-1: string descriptor 0 read error: -22 [ 185.440032][ T9] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 185.444065][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.458122][ T9] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 185.603304][T10446] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 185.620242][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1755'. [ 185.769207][ T5793] usb 7-1: USB disconnect, device number 6 [ 186.624622][T10479] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1766'. [ 186.740787][ T5745] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 186.741094][ T64] Bluetooth: hci3: command 0x1003 tx timeout [ 187.804423][T10528] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1787'. [ 188.156995][T10562] device-mapper: ioctl: Invalid target message parameters. [ 188.275240][T10569] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1805'. [ 188.630303][T10585] gadgetfs: bound to dummy_udc driver [ 188.752688][T10589] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 188.852405][T10595] bridge0: port 3(vlan2) entered blocking state [ 188.855341][T10595] bridge0: port 3(vlan2) entered listening state [ 188.858416][T10595] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.861349][T10595] bridge0: port 2(bridge_slave_1) entered listening state [ 188.864596][T10595] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.867868][T10595] bridge0: port 1(bridge_slave_0) entered listening state [ 188.900723][T10595] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 189.207881][ T1035] libceph: connect (2)127.0.0.1:6789 error -101 [ 189.210254][ T1035] libceph: ceph_tcp_connect failed: -101 [ 189.212185][ T1035] libceph: mon0 (2)127.0.0.1:6789 connect error [ 189.447028][ T50] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 189.469260][ T5815] libceph: connect (2)127.0.0.1:6789 error -101 [ 189.471926][ T5815] libceph: ceph_tcp_connect failed: -101 [ 189.473895][ T5815] libceph: mon0 (2)127.0.0.1:6789 connect error [ 189.601081][ T50] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.608510][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 189.618612][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 189.622681][ T50] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.627897][ T50] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.631402][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.637543][ T50] usb 7-1: config 0 descriptor?? [ 189.981344][ T1035] libceph: connect (2)127.0.0.1:6789 error -101 [ 189.998229][ T1035] libceph: ceph_tcp_connect failed: -101 [ 190.000731][ T1035] libceph: mon0 (2)127.0.0.1:6789 connect error [ 190.031442][T10614] ceph: No mds server is up or the cluster is laggy [ 190.071263][ T50] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 190.112226][ T50] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 192.059932][ T5838] usb 7-1: USB disconnect, device number 7 [ 192.164359][T10662] netlink: 'syz.2.1845': attribute type 2 has an invalid length. [ 192.532802][ T5815] IPVS: starting estimator thread 0... [ 192.628021][T10685] IPVS: using max 43 ests per chain, 103200 per kthread [ 192.685617][T10694] device-mapper: ioctl: Invalid target message parameters. [ 192.923113][ T42] audit: type=1326 audit(1786148261.793:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 192.938480][ T42] audit: type=1326 audit(1786148261.793:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 192.947602][ T42] audit: type=1326 audit(1786148261.803:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1864" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 192.980392][ T42] audit: type=1326 audit(1786148261.803:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 192.990775][ T42] audit: type=1326 audit(1786148261.803:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 193.000722][ T42] audit: type=1326 audit(1786148261.813:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1864" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 193.012442][ T42] audit: type=1326 audit(1786148261.813:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 193.022249][ T42] audit: type=1326 audit(1786148261.813:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 193.030592][ T5838] libceph: connect (2)127.0.0.1:6789 error -101 [ 193.032777][ T42] audit: type=1326 audit(1786148261.813:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1864" exe="/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 193.033689][ T5838] libceph: ceph_tcp_connect failed: -101 [ 193.042473][ T42] audit: type=1326 audit(1786148261.813:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 193.046228][ T5838] libceph: mon0 (2)127.0.0.1:6789 connect error [ 193.050490][T10720] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 193.176987][T10732] mac80211_hwsim hwsim18 syzkaller1: left promiscuous mode [ 193.179930][T10732] mac80211_hwsim hwsim18 syzkaller1: left allmulticast mode [ 193.328684][ T2316] libceph: connect (2)127.0.0.1:6789 error -101 [ 193.331499][ T2316] libceph: ceph_tcp_connect failed: -101 [ 193.333963][ T2316] libceph: mon0 (2)127.0.0.1:6789 connect error [ 193.838563][ T50] libceph: connect (2)127.0.0.1:6789 error -101 [ 193.841333][ T50] libceph: ceph_tcp_connect failed: -101 [ 193.843711][ T50] libceph: mon0 (2)127.0.0.1:6789 connect error [ 193.850608][T10715] ceph: No mds server is up or the cluster is laggy [ 193.859333][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.861844][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.095209][T10767] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 194.569645][T10790] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 194.599526][T10792] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1900'. [ 195.075071][T10811] netlink: 'syz.7.1908': attribute type 8 has an invalid length. [ 195.078468][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1908'. [ 195.169725][T10815] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 195.839442][ T5838] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 195.997040][ T5838] usb 7-1: Using ep0 maxpacket: 8 [ 196.002213][ T5838] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.004873][ T5838] usb 7-1: config 0 has no interface number 0 [ 196.007208][ T5838] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.010711][ T5838] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 196.013723][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.017996][ T5838] usb 7-1: config 0 descriptor?? [ 196.023077][ T5838] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 196.187683][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1922'. [ 196.247664][ T5815] usb 7-1: USB disconnect, device number 8 [ 196.430665][T10856] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1927'. [ 196.433552][T10856] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1927'. [ 196.620257][T10866] netlink: 'syz.6.1932': attribute type 12 has an invalid length. [ 196.623517][T10866] netlink: 'syz.6.1932': attribute type 29 has an invalid length. [ 196.626549][T10866] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1932'. [ 196.630396][T10866] netlink: 'syz.6.1932': attribute type 1 has an invalid length. [ 196.633683][T10866] netlink: 'syz.6.1932': attribute type 2 has an invalid length. [ 196.842361][T10881] overlayfs: failed to clone lowerpath [ 197.633211][T10918] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 198.586831][ T1035] libceph: connect (1)[c::]:6789 error -101 [ 198.591458][ T1035] libceph: mon0 (1)[c::]:6789 connect error [ 198.606609][T10970] ceph: No mds server is up or the cluster is laggy [ 198.777144][T10976] smpboot: CPU 1 is now offline [ 198.881203][T10976] smpboot: CPU 3 is now offline [ 200.140164][T11007] ip6gretap1: entered allmulticast mode [ 200.152934][T11007] batman_adv: batadv0: Adding interface: ip6gretap1 [ 200.159619][T11007] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.184484][T11007] batman_adv: batadv0: Interface activated: ip6gretap1 [ 200.206329][T11015] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1995'. [ 200.245873][T11017] loop9: detected capacity change from 0 to 255852544 [ 201.787112][ T5838] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 201.839149][T11056] netlink: 'syz.6.2014': attribute type 5 has an invalid length. [ 201.841631][T11056] netlink: 'syz.6.2014': attribute type 9 has an invalid length. [ 201.844067][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2014'. [ 201.960232][ T5838] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.963804][ T5838] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.968726][ T5838] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.969993][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'. [ 201.974765][ T5838] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.980041][ T5838] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.991304][ T5838] usb 12-1: config 0 descriptor?? [ 202.006449][T11066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2019'. [ 202.447370][ T5838] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 202.584497][T11086] mac80211_hwsim hwsim18 syzkaller1: entered promiscuous mode [ 202.594180][T11086] mac80211_hwsim hwsim18 syzkaller1: entered allmulticast mode [ 202.610687][T11088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.614915][T11088] IPv6: NLM_F_CREATE should be set when creating new route [ 203.341072][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.349058][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.354520][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.358266][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.363175][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.393715][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.399703][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.405933][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.410925][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.416390][ T5745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.719850][ T5780] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.723815][ T5780] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.855168][ T5780] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.859901][ T5780] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.001098][ T5780] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.004725][ T5780] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.024518][T11094] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.027566][T11094] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.030355][T11094] bridge_slave_0: entered allmulticast mode [ 204.033830][T11094] bridge_slave_0: entered promiscuous mode [ 204.040019][T11094] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.042669][T11094] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.045024][T11094] bridge_slave_1: entered allmulticast mode [ 204.047949][T11094] bridge_slave_1: entered promiscuous mode [ 204.084403][T11094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.110949][ C0] bridge0: port 3(vlan2) entered learning state [ 204.115489][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 204.118761][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 204.123098][ T5780] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.127441][ T5780] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.139616][T11094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.165290][T11094] team0: Port device team_slave_0 added [ 204.170814][T11094] team0: Port device team_slave_1 added [ 204.201622][T11094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.206010][T11094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.218461][T11094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.225593][T11094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.229097][T11094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.239755][T11094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.349087][T11094] hsr_slave_0: entered promiscuous mode [ 204.352551][T11094] hsr_slave_1: entered promiscuous mode [ 204.355681][T11094] debugfs: 'hsr0' already exists in 'hsr' [ 204.361034][T11094] Cannot create hsr debugfs directory [ 204.485915][ T9] usb 12-1: USB disconnect, device number 5 [ 204.659283][ T5780] bridge_slave_1: left allmulticast mode [ 204.666929][ T5780] bridge_slave_1: left promiscuous mode [ 204.668890][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.676011][ T5780] bridge_slave_0: left allmulticast mode [ 204.680473][ T5780] bridge_slave_0: left promiscuous mode [ 204.683633][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.900208][ T5780] batman_adv: batadv0: Removing interface: macsec1 [ 204.933931][ T5780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.944007][ T5780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.953290][ T5780] bond0 (unregistering): Released all slaves [ 205.458681][ T64] Bluetooth: hci3: command tx timeout [ 205.744131][ T5780] hsr_slave_0: left promiscuous mode [ 205.752080][ T5780] hsr_slave_1: left promiscuous mode [ 205.756653][ T5780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.761080][ T5780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.765761][ T5780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.774642][ T5780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.803832][ T5780] veth1_macvtap: left promiscuous mode [ 205.808509][ T5780] veth0_macvtap: left promiscuous mode [ 205.815927][ T5780] veth1_vlan: left promiscuous mode [ 205.818270][ T5780] veth0_vlan: left promiscuous mode [ 206.222549][ T5780] team0 (unregistering): Port device team_slave_1 removed [ 206.230787][ T5780] team0 (unregistering): Port device team_slave_0 removed [ 206.431923][ T5444] 8021q: adding VLAN 0 to HW filter on device eth18 [ 206.460507][T11194] netlink: 'syz.6.2064': attribute type 3 has an invalid length. [ 206.532838][T11094] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 206.550855][T11094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 206.556642][T11094] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 206.574157][T11094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.589929][T11094] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 206.601979][T11094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 206.628605][T11094] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 206.658714][T11094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 206.931354][T11094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.996485][T11094] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.003901][ T5444] 8021q: adding VLAN 0 to HW filter on device eth19 [ 207.050072][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.052809][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.083905][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.086079][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.391056][T11257] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 207.461569][T11257] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 207.539512][ T64] Bluetooth: hci3: command tx timeout [ 207.549270][ T5444] 8021q: adding VLAN 0 to HW filter on device eth20 [ 207.636812][T11094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.825439][ T5444] 8021q: adding VLAN 0 to HW filter on device eth21 [ 207.952098][T11094] veth0_vlan: entered promiscuous mode [ 207.963069][T11094] veth1_vlan: entered promiscuous mode [ 207.985715][T11094] veth0_macvtap: entered promiscuous mode [ 207.999062][T11094] veth1_macvtap: entered promiscuous mode [ 208.045843][T11094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.057863][T11094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.128217][ T5816] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.143480][ T5816] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.170297][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.179139][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.187230][ T5816] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.195088][ T5816] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.224317][ T241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.227001][ T241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.331392][T11340] syzkaller1: entered promiscuous mode [ 208.333811][T11340] syzkaller1: entered allmulticast mode [ 208.397700][T11346] overlayfs: failed to clone lowerpath [ 208.500312][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 208.500330][ T42] audit: type=1326 audit(1786148277.373:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.7.2115" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 208.607688][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2120'. [ 208.692946][T11369] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2122'. [ 209.188562][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2132'. [ 209.226969][ T5815] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 209.386944][ T5815] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.400939][ T5815] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 209.406578][ T5815] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.410290][ T5815] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 209.414553][ T5815] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 209.420170][ T5815] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.424306][ T5815] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.429222][ T5815] usb 13-1: Product: syz [ 209.430614][ T5815] usb 13-1: Manufacturer: syz [ 209.441789][ T5815] cdc_wdm 13-1:1.0: skipping garbage [ 209.445745][ T5815] cdc_wdm 13-1:1.0: skipping garbage [ 209.462930][ T5815] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 209.465222][ T5815] cdc_wdm 13-1:1.0: Unknown control protocol [ 209.500843][T11406] can0: slcan on ptm0. [ 209.617205][ T64] Bluetooth: hci3: command tx timeout [ 209.618731][T11402] can0 (unregistered): slcan off ptm0. [ 209.741092][T11429] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 210.005484][T11443] netlink: 'syz.7.2150': attribute type 1 has an invalid length. [ 210.008295][T11443] netlink: 193500 bytes leftover after parsing attributes in process `syz.7.2150'. [ 210.011490][T11443] netlink: 'syz.7.2150': attribute type 1 has an invalid length. [ 210.014197][T11443] netlink: 2016 bytes leftover after parsing attributes in process `syz.7.2150'. [ 210.058965][T11445] comedi comedi0: no devices specified [ 210.404540][ T2316] usb 13-1: USB disconnect, device number 2 [ 210.522143][T11471] netlink: 'syz.7.2162': attribute type 10 has an invalid length. [ 210.525999][T11471] syz_tun: entered promiscuous mode [ 210.536517][T11471] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 210.551384][T11471] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 211.697083][ T64] Bluetooth: hci3: command tx timeout [ 214.706030][T11532] syzkaller1: entered promiscuous mode [ 214.708282][T11532] syzkaller1: entered allmulticast mode [ 215.017756][T11561] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 215.073242][T11551] syz.7.2196 (11551) used greatest stack depth: 16776 bytes left [ 215.471136][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2212'. [ 215.511222][T11587] bond1: Invalid ad_actor_system MAC address. [ 215.513515][T11587] bond1: option ad_actor_system: invalid value (5) [ 215.517935][T11587] bond1 (unregistering): Released all slaves [ 216.274139][T11624] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2226'. [ 216.599654][T11652] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 216.768020][ T10] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 216.875557][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2248'. [ 216.882051][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2248'. [ 216.927231][ T10] usb 13-1: Using ep0 maxpacket: 32 [ 216.931853][ T10] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 216.935651][ T10] usb 13-1: config 0 has no interface number 0 [ 216.940715][ T10] usb 13-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 216.944076][ T10] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.947535][ T10] usb 13-1: Product: syz [ 216.949459][ T10] usb 13-1: Manufacturer: syz [ 216.951471][ T10] usb 13-1: SerialNumber: syz [ 216.956655][ T10] usb 13-1: config 0 descriptor?? [ 216.965957][ T10] usb 13-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 216.969978][ T10] usb 13-1: selecting invalid altsetting 1 [ 216.972549][ T10] usb 13-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 216.984614][ T10] usb 13-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 216.989233][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 216.993904][ T10] usb 13-1: media controller created [ 217.009413][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.360347][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2254'. [ 217.998642][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 218.002436][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2268'. [ 218.097526][ T10] usb 13-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 218.104243][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 218.104402][T11643] usb 13-1: dvb_usb_ce6230: I2C read not implemented [ 218.110080][T11643] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -95 [ 218.114597][T11643] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -95 [ 218.120210][T11643] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 218.147680][ T8273] usb 13-1: USB disconnect, device number 3 [ 219.167644][ T5880] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 219.182673][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2287'. [ 219.346933][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 219.352698][ T5880] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.366648][ T5880] usb 7-1: config 0 has no interface number 0 [ 219.391068][ T5880] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 219.396983][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.404297][ T5880] usb 7-1: Product: syz [ 219.406029][ T5880] usb 7-1: Manufacturer: syz [ 219.410304][ T5880] usb 7-1: SerialNumber: syz [ 219.419052][ T5880] usb 7-1: config 0 descriptor?? [ 219.428616][ T5880] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 219.431944][ T5880] usb 7-1: selecting invalid altsetting 1 [ 219.433770][ T5880] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 219.441274][ T5880] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 219.445636][ T5880] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 219.449198][ T5880] usb 7-1: media controller created [ 219.458860][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.461267][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.461998][ C0] bridge0: topology change detected, propagating [ 219.468082][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.471721][ C0] bridge0: topology change detected, propagating [ 219.474681][ C0] bridge0: port 3(vlan2) entered forwarding state [ 219.477184][ C0] bridge0: topology change detected, propagating [ 219.661477][T11820] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 219.702758][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2299'. [ 219.783348][T11824] retu-mfd 0-0001: could not read Retu revision: -6 [ 219.793954][T11824] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 219.807745][T11824] retu-mfd 0-0002: could not read Tahvo revision: -6 [ 219.815190][T11824] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 220.588282][ T5880] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 220.590715][ T5880] zl10353_read_register: readreg error (reg=127, ret==-110) [ 220.591188][T11762] usb 7-1: dvb_usb_ce6230: I2C read not implemented [ 220.593471][T11852] mac80211_hwsim hwsim18 syzkaller1: left promiscuous mode [ 220.597007][ T5824] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 220.601565][T11852] mac80211_hwsim hwsim18 syzkaller1: left allmulticast mode [ 220.601659][T11762] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -95 [ 220.616273][T11762] ------------[ cut here ]------------ [ 220.618790][T11762] inode->i_nlink == 0 [ 220.618809][T11762] WARNING: fs/inode.c:408 at drop_nlink+0xb6/0xe0, CPU#1: syz.2.2279/11762 [ 220.624070][T11762] Modules linked in: [ 220.625873][T11762] CPU: 1 UID: 0 PID: 11762 Comm: syz.2.2279 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.630419][T11762] Tainted: [L]=SOFTLOCKUP [ 220.631943][T11762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 220.635594][T11762] RIP: 0010:drop_nlink+0xb6/0xe0 [ 220.639224][T11762] Code: 08 00 00 00 48 8d bb 98 07 00 00 e8 84 84 e3 ff f0 48 ff 83 98 07 00 00 e8 97 ea 73 ff 5b 5d c3 cc cc cc cc e8 8b ea 73 ff 90 <0f> 0b 90 c7 45 48 ff ff ff ff e8 7b ea 73 ff 5b 5d e9 d4 6d 25 09 [ 220.645810][T11762] RSP: 0000:ffffc90003717628 EFLAGS: 00010287 [ 220.647981][T11762] RAX: 000000000002bea5 RBX: 0000000000000000 RCX: ffffc90025c91000 [ 220.650536][T11762] RDX: 0000000000080000 RSI: ffffffff8295d675 RDI: ffff888025cd2540 [ 220.653061][T11762] RBP: ffff88804e9fcd00 R08: 0000000000000005 R09: 0000000000000000 [ 220.655578][T11762] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804e9fcd00 [ 220.658278][T11762] R13: dffffc0000000000 R14: ffff888012d40000 R15: ffff88804eb86938 [ 220.661004][T11762] FS: 0000000000000000(0000) GS:ffff888096cf3000(0063) knlGS:00000000f549db40 [ 220.664234][T11762] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 220.666892][T11762] CR2: 00000000ffc68f9c CR3: 000000006d3af000 CR4: 0000000000352ef0 [ 220.670243][T11762] Call Trace: [ 220.671904][T11762] [ 220.673095][T11762] __simple_recursive_removal+0x4c2/0x5c0 [ 220.675589][T11762] ? __pfx_remove_one+0x10/0x10 [ 220.677772][T11762] ? mntput+0x70/0xa0 [ 220.679856][T11762] debugfs_remove+0x5d/0x80 [ 220.681829][T11762] i2c_device_probe+0x6e2/0xd10 [ 220.683883][T11762] ? kernfs_put+0x3f/0x60 [ 220.685749][T11762] ? __pfx_i2c_device_probe+0x10/0x10 [ 220.688162][T11762] ? sysfs_create_link+0x68/0xc0 [ 220.690202][T11762] ? __pfx_i2c_device_probe+0x10/0x10 [ 220.692436][T11762] really_probe+0x241/0xa60 [ 220.694298][T11762] __driver_probe_device+0x20e/0x450 [ 220.696541][T11762] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.699011][T11762] driver_probe_device+0x4a/0x140 [ 220.700903][T11762] __device_attach_driver+0x1df/0x320 [ 220.702918][T11762] ? __pfx___device_attach_driver+0x10/0x10 [ 220.705291][T11762] bus_for_each_drv+0x159/0x1e0 [ 220.707388][T11762] ? __pfx_bus_for_each_drv+0x10/0x10 [ 220.709679][T11762] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 220.711994][T11762] __device_attach+0x1e4/0x4d0 [ 220.713952][T11762] ? __pfx___device_attach+0x10/0x10 [ 220.716192][T11762] ? do_raw_spin_unlock+0x145/0x1e0 [ 220.718506][T11762] device_initial_probe+0xaf/0xd0 [ 220.720413][T11762] bus_probe_device+0x64/0x160 [ 220.722366][T11762] device_add+0x121d/0x1970 [ 220.724293][T11762] ? __pfx_device_add+0x10/0x10 [ 220.726334][T11762] ? lockdep_init_map_type+0x5c/0x250 [ 220.728704][T11762] ? __init_waitqueue_head+0xca/0x150 [ 220.731008][T11762] i2c_new_client_device+0x660/0xd30 [ 220.733237][T11762] new_device_store+0x20f/0x420 [ 220.735421][T11762] ? __lock_acquire+0x49f/0x1a40 [ 220.739506][T11762] ? __pfx_new_device_store+0x10/0x10 [ 220.741692][T11762] ? find_held_lock+0x2b/0x80 [ 220.743761][T11762] ? sysfs_file_kobj+0xe4/0x290 [ 220.745735][T11762] ? sysfs_file_kobj+0xe4/0x290 [ 220.748452][T11762] ? __pfx_new_device_store+0x10/0x10 [ 220.750730][T11762] dev_attr_store+0x58/0x80 [ 220.752655][T11762] ? __pfx_dev_attr_store+0x10/0x10 [ 220.754888][T11762] sysfs_kf_write+0xf2/0x150 [ 220.756934][T11762] kernfs_fop_write_iter+0x3e0/0x5f0 [ 220.759096][T11762] ? __pfx_sysfs_kf_write+0x10/0x10 [ 220.761115][T11762] vfs_write+0x6ac/0x1050 [ 220.762869][T11762] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 220.765233][T11762] ? __pfx_vfs_write+0x10/0x10 [ 220.767494][T11762] ? find_held_lock+0x2b/0x80 [ 220.769465][T11762] ksys_write+0x12a/0x250 [ 220.771237][T11762] ? __pfx_ksys_write+0x10/0x10 [ 220.773062][T11762] __do_fast_syscall_32+0xe7/0x970 [ 220.774990][T11762] ? lockdep_hardirqs_on+0x78/0x100 [ 220.776958][T11762] do_fast_syscall_32+0x32/0x70 [ 220.778615][T11762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.780946][T11762] RIP: 0023:0xf70aefec [ 220.782489][T11762] Code: Unable to access opcode bytes at 0xf70aefc2. [ 220.784659][T11762] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 220.787675][T11762] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000a00 [ 220.790486][T11762] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.793490][T11762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.796564][T11762] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 220.799989][T11762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.802451][T11762] [ 220.803513][T11762] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 220.806120][T11762] CPU: 1 UID: 0 PID: 11762 Comm: syz.2.2279 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.809932][T11762] Tainted: [L]=SOFTLOCKUP [ 220.811322][T11762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.814429][T11762] Call Trace: [ 220.815494][T11762] [ 220.816441][T11762] dump_stack_lvl+0x100/0x190 [ 220.817928][T11762] vpanic+0x552/0x970 [ 220.819551][T11762] ? __pfx_vpanic+0x10/0x10 [ 220.821079][T11762] panic+0xd1/0xe0 [ 220.822523][T11762] ? __pfx_panic+0x10/0x10 [ 220.824405][T11762] check_panic_on_warn.cold+0x19/0x34 [ 220.826585][T11762] ? drop_nlink+0xb6/0xe0 [ 220.828033][T11762] __warn.cold+0x191/0x318 [ 220.829574][T11762] __report_bug+0x30f/0x440 [ 220.831127][T11762] ? drop_nlink+0xb6/0xe0 [ 220.832546][T11762] ? __pfx___report_bug+0x10/0x10 [ 220.834216][T11762] ? find_held_lock+0x2b/0x80 [ 220.835811][T11762] ? set_normalized_timespec64+0x69/0xc0 [ 220.837671][T11762] ? inode_set_ctime_to_ts+0x131/0x3e0 [ 220.839525][T11762] ? drop_nlink+0xb6/0xe0 [ 220.840936][T11762] report_bug+0xb2/0x220 [ 220.842369][T11762] ? drop_nlink+0xb6/0xe0 [ 220.843915][T11762] handle_bug+0x16a/0x2a0 [ 220.845346][T11762] exc_invalid_op+0x17/0x50 [ 220.846876][T11762] asm_exc_invalid_op+0x1a/0x20 [ 220.848564][T11762] RIP: 0010:drop_nlink+0xb6/0xe0 [ 220.850152][T11762] Code: 08 00 00 00 48 8d bb 98 07 00 00 e8 84 84 e3 ff f0 48 ff 83 98 07 00 00 e8 97 ea 73 ff 5b 5d c3 cc cc cc cc e8 8b ea 73 ff 90 <0f> 0b 90 c7 45 48 ff ff ff ff e8 7b ea 73 ff 5b 5d e9 d4 6d 25 09 [ 220.856269][T11762] RSP: 0000:ffffc90003717628 EFLAGS: 00010287 [ 220.858227][T11762] RAX: 000000000002bea5 RBX: 0000000000000000 RCX: ffffc90025c91000 [ 220.860987][T11762] RDX: 0000000000080000 RSI: ffffffff8295d675 RDI: ffff888025cd2540 [ 220.863511][T11762] RBP: ffff88804e9fcd00 R08: 0000000000000005 R09: 0000000000000000 [ 220.866074][T11762] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804e9fcd00 [ 220.868700][T11762] R13: dffffc0000000000 R14: ffff888012d40000 R15: ffff88804eb86938 [ 220.871260][T11762] ? drop_nlink+0xb5/0xe0 [ 220.872662][T11762] ? drop_nlink+0xb5/0xe0 [ 220.874042][T11762] __simple_recursive_removal+0x4c2/0x5c0 [ 220.876041][T11762] ? __pfx_remove_one+0x10/0x10 [ 220.877610][T11762] ? mntput+0x70/0xa0 [ 220.879007][T11762] debugfs_remove+0x5d/0x80 [ 220.880482][T11762] i2c_device_probe+0x6e2/0xd10 [ 220.882082][T11762] ? kernfs_put+0x3f/0x60 [ 220.883509][T11762] ? __pfx_i2c_device_probe+0x10/0x10 [ 220.885270][T11762] ? sysfs_create_link+0x68/0xc0 [ 220.886898][T11762] ? __pfx_i2c_device_probe+0x10/0x10 [ 220.888655][T11762] really_probe+0x241/0xa60 [ 220.890155][T11762] __driver_probe_device+0x20e/0x450 [ 220.891847][T11762] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.893776][T11762] driver_probe_device+0x4a/0x140 [ 220.895353][T11762] __device_attach_driver+0x1df/0x320 [ 220.897010][T11762] ? __pfx___device_attach_driver+0x10/0x10 [ 220.898941][T11762] bus_for_each_drv+0x159/0x1e0 [ 220.900547][T11762] ? __pfx_bus_for_each_drv+0x10/0x10 [ 220.902259][T11762] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 220.904185][T11762] __device_attach+0x1e4/0x4d0 [ 220.905996][T11762] ? __pfx___device_attach+0x10/0x10 [ 220.908323][T11762] ? do_raw_spin_unlock+0x145/0x1e0 [ 220.910485][T11762] device_initial_probe+0xaf/0xd0 [ 220.912643][T11762] bus_probe_device+0x64/0x160 [ 220.914671][T11762] device_add+0x121d/0x1970 [ 220.916603][T11762] ? __pfx_device_add+0x10/0x10 [ 220.918299][T11762] ? lockdep_init_map_type+0x5c/0x250 [ 220.920128][T11762] ? __init_waitqueue_head+0xca/0x150 [ 220.922008][T11762] i2c_new_client_device+0x660/0xd30 [ 220.923856][T11762] new_device_store+0x20f/0x420 [ 220.925569][T11762] ? __lock_acquire+0x49f/0x1a40 [ 220.927261][T11762] ? __pfx_new_device_store+0x10/0x10 [ 220.929246][T11762] ? find_held_lock+0x2b/0x80 [ 220.931149][T11762] ? sysfs_file_kobj+0xe4/0x290 [ 220.933073][T11762] ? sysfs_file_kobj+0xe4/0x290 [ 220.935084][T11762] ? __pfx_new_device_store+0x10/0x10 [ 220.937260][T11762] dev_attr_store+0x58/0x80 [ 220.938897][T11762] ? __pfx_dev_attr_store+0x10/0x10 [ 220.941008][T11762] sysfs_kf_write+0xf2/0x150 [ 220.942980][T11762] kernfs_fop_write_iter+0x3e0/0x5f0 [ 220.945253][T11762] ? __pfx_sysfs_kf_write+0x10/0x10 [ 220.947511][T11762] vfs_write+0x6ac/0x1050 [ 220.949298][T11762] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 220.951651][T11762] ? __pfx_vfs_write+0x10/0x10 [ 220.953592][T11762] ? find_held_lock+0x2b/0x80 [ 220.955306][T11762] ksys_write+0x12a/0x250 [ 220.956751][T11762] ? __pfx_ksys_write+0x10/0x10 [ 220.958378][T11762] __do_fast_syscall_32+0xe7/0x970 [ 220.960147][T11762] ? lockdep_hardirqs_on+0x78/0x100 [ 220.961782][T11762] do_fast_syscall_32+0x32/0x70 [ 220.963451][T11762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.965729][T11762] RIP: 0023:0xf70aefec [ 220.967063][T11762] Code: Unable to access opcode bytes at 0xf70aefc2. [ 220.969238][T11762] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 220.971890][T11762] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000a00 [ 220.974388][T11762] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.976942][T11762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.979622][T11762] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 220.982486][T11762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.985196][T11762] [ 220.987043][T11762] Kernel Offset: disabled [ 220.988482][T11762] Rebooting in 86400 seconds..