last executing test programs: 2m48.612698763s ago: executing program 3 (id=1794): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 2m48.350208623s ago: executing program 3 (id=1799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 2m48.297253546s ago: executing program 3 (id=1801): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x3, 0x1, 0xd}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x80, 0x380000, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1}, 0x1c) 2m47.390905403s ago: executing program 3 (id=1817): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m47.390657687s ago: executing program 3 (id=1818): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008011}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2m47.042385051s ago: executing program 3 (id=1820): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 2m47.039665371s ago: executing program 32 (id=1820): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 54.152463256s ago: executing program 0 (id=3873): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {0x4, 0x7}, [], {}, {0x20, 0x1}}, 0x24, 0x1) 54.110912962s ago: executing program 0 (id=3874): r0 = socket$unix(0x1, 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 53.895132966s ago: executing program 0 (id=3875): r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x845, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x9) 53.886464916s ago: executing program 0 (id=3877): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) 53.825398453s ago: executing program 0 (id=3878): r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r0, &(0x7f0000000180)='q', 0x1, 0x100004) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r1, r0, 0x0, 0xd39a) 53.820109217s ago: executing program 0 (id=3880): r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000540), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 38.650401277s ago: executing program 33 (id=3880): r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000540), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 3.306548814s ago: executing program 4 (id=4581): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) unlink(&(0x7f0000000200)='./file0/file0\x00') 3.106629064s ago: executing program 5 (id=4584): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r1, &(0x7f0000000e80)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20008000}}, {{&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8804}}], 0x2, 0xfdef) 3.01972618s ago: executing program 5 (id=4585): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xffffffff, 0x0, 0x8000, 0xbbd7, 0x85, "10120dfe0ef7f0220000ff490a0080002a0008"}) 2.999011953s ago: executing program 4 (id=4586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) read$FUSE(r3, &(0x7f0000001440)={0x2020}, 0x2020) 2.838867266s ago: executing program 4 (id=4588): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x80000000, 0x2, 0xc, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x8, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.758016322s ago: executing program 4 (id=4592): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 2.669982906s ago: executing program 4 (id=4593): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000013c0)=@delchain={0x24, 0x65, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x2, 0x8}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x40000091) 2.669775826s ago: executing program 4 (id=4594): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000280)='L', 0x1) 2.149757326s ago: executing program 5 (id=4598): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0xa, 0x5, 0x0, 0x0, 0xe, 0x11, "fee8a2ab78fc179fd1f809000006aca7ca64c6a4b4e00d9683dda1af01000000deff12001000000000000000000000000008000000000100", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0, 0x1]}}) 2.133343365s ago: executing program 5 (id=4599): socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.937849039s ago: executing program 5 (id=4600): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x140301, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000019}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) 1.900067461s ago: executing program 5 (id=4601): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0004}]}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES16], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r1, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d702140", 0x9}], 0x1, 0xfffffffe, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.699627406s ago: executing program 2 (id=4605): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0}, 0x90) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x2, 0x0) 1.65438334s ago: executing program 2 (id=4607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 1.537092095s ago: executing program 2 (id=4612): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x7b1d, 0x693c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x3}, 0x7) 1.237056127s ago: executing program 2 (id=4620): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) 979.852575ms ago: executing program 1 (id=4623): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) setrlimit(0x7, &(0x7f0000000000)={0x0, 0x9}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000540)=0x1) 919.300156ms ago: executing program 1 (id=4624): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xff}, 'port0\x00', 0x3eb, 0x21e3f, 0x10, 0x0, 0x3, 0x5, 0x400, 0x0, 0xa}) openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x4011, 0x0) readv(r0, &(0x7f0000000180), 0x18) 916.409474ms ago: executing program 1 (id=4632): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7fc, 0xa000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x30a000, 0x8}) 397.944263ms ago: executing program 2 (id=4625): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 386.192593ms ago: executing program 1 (id=4634): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x42}, 0x20) madvise(&(0x7f00003f8000/0x3000)=nil, 0x3000, 0x14) 283.223157ms ago: executing program 2 (id=4626): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r1) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x9c, r4, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x9c}}, 0x4) 73.488169ms ago: executing program 1 (id=4627): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c691354115e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0xfffffffffffffffe, 0x5, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=""/253, 0xfd) 0s ago: executing program 1 (id=4628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4b9dde6afd5b000000230b82a70008000300", @ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) kernel console output (not intermixed with test programs): ttributes in process `syz.4.2673'. [ 179.673982][ T5751] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 179.852462][T12036] netlink: 'syz.4.2697': attribute type 9 has an invalid length. [ 180.205564][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2715'. [ 180.340442][T12085] o2cb: This node has not been configured. [ 180.344103][T12085] o2cb: Cluster check failed. Fix errors before retrying. [ 180.346635][T12085] (syz.2.2719,12085,2):user_dlm_register:674 ERROR: status = -22 [ 180.349141][T12085] (syz.2.2719,12085,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 180.658282][T12113] trusted_key: encrypted_key: keyword 'upw' not recognized [ 180.802867][ T843] kernel write not supported for file /snd/seq (pid: 843 comm: kworker/3:2) [ 180.843650][T12127] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 180.850396][T12127] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 180.868482][T12127] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 180.873729][T12127] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.875687][T12127] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 180.879958][T12127] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 180.886160][T12127] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 180.888978][T12127] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 180.901355][T12127] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 181.044134][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2754'. [ 181.212490][T12173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2761'. [ 181.335028][T12187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2767'. [ 182.341680][T12265] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2803'. [ 182.372086][T12265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.381967][T12265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.393426][T12265] bond0 (unregistering): (slave bond2): Releasing backup interface [ 182.403148][T12265] bond0 (unregistering): Released all slaves [ 182.422760][T12267] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 182.426499][ T1261] Bluetooth: hci4: Frame reassembly failed (-84) [ 182.786535][T12293] nr0: tun_chr_ioctl cmd 21731 [ 182.910546][ T5751] Bluetooth: hci2: command 0x0406 tx timeout [ 182.912690][ T5753] Bluetooth: hci1: command 0x0405 tx timeout [ 182.913039][ T5751] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.954707][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'. [ 183.028881][T12318] input: syz0 as /devices/virtual/input/input24 [ 184.110451][ T843] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 184.264811][ T843] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 184.268618][ T843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.273862][ T843] usb 6-1: Product: syz [ 184.275697][ T843] usb 6-1: Manufacturer: syz [ 184.277646][ T843] usb 6-1: SerialNumber: syz [ 184.342459][T12376] block nbd4: shutting down sockets [ 184.432172][ T5748] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 184.519585][ T843] rtl8150 6-1:1.0: couldn't reset the device [ 184.522279][ T843] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 184.527092][ T843] usb 6-1: USB disconnect, device number 22 [ 184.950410][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 184.950428][ T40] audit: type=1326 audit(1778961563.602:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.4.2875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 184.963662][ T40] audit: type=1326 audit(1778961563.602:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.4.2875" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 184.971937][ T40] audit: type=1326 audit(1778961563.602:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.4.2875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 184.981485][ T40] audit: type=1326 audit(1778961563.602:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.4.2875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 184.988245][ T40] audit: type=1326 audit(1778961563.602:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.4.2875" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 184.990487][ T5748] Bluetooth: hci1: command 0x0405 tx timeout [ 184.995155][ T5757] Bluetooth: hci2: command 0x0406 tx timeout [ 184.996872][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.000730][ T40] audit: type=1326 audit(1778961563.602:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.4.2875" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 185.000755][ T40] audit: type=1326 audit(1778961563.602:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.4.2875" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 185.000895][ T40] audit: type=1326 audit(1778961563.602:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.4.2875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 185.000934][ T40] audit: type=1326 audit(1778961563.602:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.4.2875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 185.000970][ T40] audit: type=1326 audit(1778961563.602:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.4.2875" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 185.680513][ T1487] kernel read not supported for file /dsp1 (pid: 1487 comm: kworker/1:2) [ 185.736945][T12471] vxcan0: tx address claim with dlc 0 [ 186.771681][T12513] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2915'. [ 186.801815][T12517] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 186.805446][T12517] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 187.070470][ T5748] Bluetooth: hci2: command 0x0406 tx timeout [ 187.070606][ T5757] Bluetooth: hci1: command 0x0405 tx timeout [ 187.081712][ T5757] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.450683][ T1038] kernel read not supported for file /dsp1 (pid: 1038 comm: kworker/2:3) [ 187.496671][T12576] input: syz0 as /devices/virtual/input/input25 [ 188.130597][T12600] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.132916][T12600] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.135001][T12600] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.192030][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2957'. [ 188.988253][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2981'. [ 189.148367][T12681] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 189.152984][T12681] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 189.966943][ T1298] block nbd0: Possible stuck request ffff888027f75080: control (read@0,1024B). Runtime 90 seconds [ 189.970266][ T1298] block nbd0: Possible stuck request ffff888027f75240: control (read@1024,1024B). Runtime 90 seconds [ 189.973920][ T1298] block nbd0: Possible stuck request ffff888027f75400: control (read@2048,1024B). Runtime 90 seconds [ 189.977258][ T1298] block nbd0: Possible stuck request ffff888027f755c0: control (read@3072,1024B). Runtime 90 seconds [ 190.121766][T12764] program syz.2.3029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.190540][ T5757] Bluetooth: hci2: command 0x0406 tx timeout [ 190.190560][ T5748] Bluetooth: hci1: command 0x0405 tx timeout [ 190.190586][ T5751] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.231223][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3031'. [ 190.972505][T12802] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 190.975730][ T1228] Bluetooth: hci4: Frame reassembly failed (-84) [ 191.130419][ T5840] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 191.211903][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3047'. [ 191.292963][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.296936][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 191.302056][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 191.307807][ T5840] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 191.311207][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.313834][ T5840] usb 5-1: Product: syz [ 191.315156][ T5840] usb 5-1: Manufacturer: syz [ 191.316692][ T5840] usb 5-1: SerialNumber: syz [ 191.320501][ T5840] usb 5-1: config 0 descriptor?? [ 191.322890][T12800] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.356052][T12825] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 191.359500][T12825] block device autoloading is deprecated and will be removed. [ 191.390516][ T5840] rc_core: IR keymap rc-streamzap not found [ 191.392784][ T5840] Registered IR keymap rc-empty [ 191.395573][ T5840] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 191.400085][ T5840] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 191.405051][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3054'. [ 191.532017][ T29] usb 5-1: USB disconnect, device number 17 [ 191.900771][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 192.053453][ T24] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 192.056055][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 192.056072][ T40] audit: type=1326 audit(1778961570.712:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.2.3063" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 192.057860][ T24] usb 6-1: config 1 has no interface number 0 [ 192.062991][ T40] audit: type=1326 audit(1778961570.712:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.2.3063" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 192.068232][ T24] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0xE has invalid maxpacket 8297, setting to 1024 [ 192.071839][ T40] audit: type=1326 audit(1778961570.712:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.2.3063" exe="/syz-executor" sig=0 arch=40000003 syscall=38 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 192.079671][ T24] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 192.085188][ T40] audit: type=1326 audit(1778961570.722:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.2.3063" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 192.096338][ T24] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 192.098956][ T40] audit: type=1326 audit(1778961570.722:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.2.3063" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 192.109723][ T24] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 192.128237][ T24] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 192.132573][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.135121][ T24] usb 6-1: Product: syz [ 192.136424][ T24] usb 6-1: Manufacturer: syz [ 192.138232][ T24] usb 6-1: SerialNumber: syz [ 192.142662][T12835] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 192.146216][T12835] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 192.151420][ T24] usb 6-1: Error in usbnet_get_endpoints (-22) [ 192.354244][ T843] usb 6-1: USB disconnect, device number 23 [ 192.990504][ T5757] Bluetooth: hci4: command 0x1003 tx timeout [ 192.992102][ T5751] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 193.056992][T12865] sctp: [Deprecated]: syz.0.3069 (pid 12865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.056992][T12865] Use struct sctp_sack_info instead [ 193.393154][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 193.404724][T12906] overlayfs: upper fs does not support file handles, falling back to index=off. [ 193.408162][T12906] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 193.453731][T12909] block nbd1: Unsupported socket: should be TCP or UNIX. [ 198.913227][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.915164][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.998446][T12961] netlink: 'syz.0.3101': attribute type 3 has an invalid length. [ 204.001623][T12961] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3101'. [ 204.003171][T12947] kAFS: unable to lookup cell '(' [ 204.151272][T12972] hub 1-0:1.0: USB hub found [ 204.154054][T12972] hub 1-0:1.0: 2 ports detected [ 205.231850][T13046] netlink: 'syz.4.3139': attribute type 14 has an invalid length. [ 205.261243][ T1228] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 205.998880][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'. [ 206.010100][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'. [ 206.093397][ T5751] block nbd1: Receive control failed (result -32) [ 206.440851][ T10] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 206.593142][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 206.597608][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 206.603102][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 206.609025][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 206.613137][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 206.616510][ T10] usb 9-1: Product: syz [ 206.618246][ T10] usb 9-1: Manufacturer: syz [ 206.620172][ T10] usb 9-1: SerialNumber: syz [ 206.625170][ T10] usb 9-1: config 0 descriptor?? [ 206.632028][ T10] usb 9-1: selecting invalid altsetting 0 [ 206.839047][ T10] usb 9-1: USB disconnect, device number 8 [ 206.891854][ T40] audit: type=1326 audit(1778961585.552:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.0.3196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fcc code=0x7ffc0000 [ 206.906304][ T40] audit: type=1326 audit(1778961585.552:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.0.3196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fcc code=0x7ffc0000 [ 206.916786][ T40] audit: type=1326 audit(1778961585.552:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.0.3196" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7ff7fcc code=0x7ffc0000 [ 206.926830][ T40] audit: type=1326 audit(1778961585.552:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.0.3196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fcc code=0x7ffc0000 [ 206.936283][ T40] audit: type=1326 audit(1778961585.552:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.0.3196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fcc code=0x7ffc0000 [ 206.945833][ T40] audit: type=1326 audit(1778961585.552:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.0.3196" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7ff7fcc code=0x7ffc0000 [ 206.955118][ T40] audit: type=1326 audit(1778961585.552:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.0.3196" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff7fe8 code=0x7ffc0000 [ 206.964519][ T40] audit: type=1326 audit(1778961585.552:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.0.3196" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff7fe8 code=0x7ffc0000 [ 206.975179][ T40] audit: type=1326 audit(1778961585.552:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.0.3196" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff7fe8 code=0x7ffc0000 [ 206.984510][ T40] audit: type=1326 audit(1778961585.552:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.0.3196" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff7fe8 code=0x7ffc0000 [ 207.053699][T13176] tmpfs: Cannot retroactively limit size [ 208.144819][T13235] netlink: 'syz.4.3225': attribute type 5 has an invalid length. [ 209.324245][ T6431] hid_parser_main: 70 callbacks suppressed [ 209.324260][ T6431] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 209.332598][ T6431] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 209.336522][ T6431] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 209.338985][ T6431] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 209.341885][ T6431] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 209.344288][ T6431] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 209.346759][ T6431] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 209.349161][ T6431] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 209.352423][ T6431] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 209.354950][ T6431] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 209.361544][ T6431] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 209.361544][ T6431] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 209.395867][T13309] fido_id[13309]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 210.132100][T13389] support for the xor transformation has been removed. [ 210.219311][T13403] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 210.474967][T13419] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.477284][T13419] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.443857][T13456] dummy0: entered allmulticast mode [ 211.446650][T13455] dummy0: left allmulticast mode [ 212.449064][ T5751] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 212.860458][ T6431] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 213.010454][ T6431] usb 9-1: Using ep0 maxpacket: 16 [ 213.013298][ T6431] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.016491][ T6431] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.019362][ T6431] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 213.025079][ T6431] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 213.029123][ T6431] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.034312][ T6431] usb 9-1: config 0 descriptor?? [ 213.316370][T13570] batadv_slave_1: entered promiscuous mode [ 213.321183][T13569] batadv_slave_1: left promiscuous mode [ 213.359678][T13575] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3379'. [ 213.472645][ T6431] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.0006/input/input27 [ 213.595752][ T6431] microsoft 0003:045E:07DA.0006: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 213.617187][ T40] kauditd_printk_skb: 91 callbacks suppressed [ 213.617199][ T40] audit: type=1326 audit(1778961592.272:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.2.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 213.631835][ T40] audit: type=1326 audit(1778961592.272:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.2.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 213.638834][ T40] audit: type=1326 audit(1778961592.272:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.2.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 213.646421][ T40] audit: type=1326 audit(1778961592.272:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.2.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 213.654383][ T40] audit: type=1326 audit(1778961592.272:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.2.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 213.661470][ T40] audit: type=1326 audit(1778961592.272:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.2.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 213.661911][ T24] usb 9-1: USB disconnect, device number 9 [ 213.668091][ T40] audit: type=1326 audit(1778961592.272:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.2.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 213.678164][ T40] audit: type=1326 audit(1778961592.272:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.2.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 213.685504][ T40] audit: type=1326 audit(1778961592.272:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.2.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 213.693203][ T40] audit: type=1326 audit(1778961592.272:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.2.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fcc code=0x7ffc0000 [ 213.700423][ T29] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 213.872331][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 213.876062][ T29] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 213.879161][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.885002][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 213.887823][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 213.891376][ T29] usb 5-1: Product: syz [ 213.892714][ T29] usb 5-1: Manufacturer: syz [ 213.894040][ T29] usb 5-1: SerialNumber: syz [ 213.961944][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'. [ 214.108892][ T29] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 214.316567][ T6431] usb 5-1: USB disconnect, device number 18 [ 214.322791][ T6431] usblp0: removed [ 215.018381][T13659] batadv0: entered promiscuous mode [ 215.021404][T13659] batadv0: left promiscuous mode [ 215.146911][T13673] input: syz1 as /devices/virtual/input/input28 [ 215.330491][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 215.339116][T13691] loop4: detected capacity change from 0 to 7 [ 215.344770][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.347705][ C1] buffer_io_error: 25 callbacks suppressed [ 215.347714][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.352350][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.355248][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.358014][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.361838][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.365309][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.368849][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.373056][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.376118][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.379204][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.382100][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.385454][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.388198][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.392066][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.395725][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.399366][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.402270][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.405182][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.408005][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.410743][T13691] ldm_validate_partition_table(): Disk read failed. [ 215.413140][T13691] Dev loop4: unable to read RDB block 0 [ 215.415170][T13691] loop4: unable to read partition table [ 215.417050][T13691] loop4: partition table beyond EOD, truncated [ 215.420655][T13691] loop_reread_partitions: partition scan of loop4 (Cj̖P= ) failed (rc=-5) [ 215.492041][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 215.499169][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 215.505525][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.508654][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.512635][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.516646][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.520838][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 215.523767][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.581527][T13708] can0: slcan on ttyS3. [ 215.661131][T13708] can0 (unregistered): slcan off ttyS3. [ 216.299116][T13758] usbtmc 6-1:16.0: simple usb_control_msg failed -32 [ 216.303907][ T10] usb 6-1: USB disconnect, device number 24 [ 216.488487][T13766] Invalid source name [ 216.489754][T13766] UBIFS error (pid: 13766): cannot open "./file0", error -22 [ 216.700442][ T5840] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 216.837196][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3466'. [ 216.861513][ T5840] usb 7-1: Using ep0 maxpacket: 32 [ 216.869445][ T5840] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 216.872542][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.877430][ T5840] usb 7-1: config 0 descriptor?? [ 216.883002][ T5840] as10x_usb: device has been detected [ 216.885628][ T5840] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 216.898895][ T5840] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 216.928870][ T5840] as10x_usb: error during firmware upload part1 [ 216.931238][ T5840] Registered device nBox DVB-T Dongle [ 217.085686][ T5840] usb 7-1: USB disconnect, device number 11 [ 217.171687][ T5840] Unregistered device nBox DVB-T Dongle [ 217.172871][ T5840] as10x_usb: device has been disconnected [ 217.340123][T13809] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3479'. [ 217.874711][T13857] loop4: detected capacity change from 0 to 7 [ 217.877950][T13857] ldm_validate_partition_table(): Disk read failed. [ 217.881421][T13857] Dev loop4: unable to read RDB block 0 [ 217.883502][T13857] loop4: unable to read partition table [ 217.885359][T13857] loop4: partition table beyond EOD, truncated [ 217.890076][T13857] loop_reread_partitions: partition scan of loop4 (Cj̖P= ) failed (rc=-5) [ 217.974516][ T5153] ldm_validate_partition_table(): Disk read failed. [ 217.978196][ T5153] Dev loop4: unable to read RDB block 0 [ 217.980841][ T5153] loop4: unable to read partition table [ 217.983505][ T5153] loop4: partition table beyond EOD, truncated [ 218.053644][T13867] input: syz1 as /devices/virtual/input/input29 [ 218.864568][T13891] loop4: detected capacity change from 0 to 7 [ 218.869735][T13891] ldm_validate_partition_table(): Disk read failed. [ 218.879646][T13891] Dev loop4: unable to read RDB block 0 [ 218.883135][T13891] loop4: unable to read partition table [ 218.885438][T13891] loop4: partition table beyond EOD, truncated [ 218.887534][T13891] loop_reread_partitions: partition scan of loop4 (Cj̖P= ) failed (rc=-5) [ 218.983901][T13895] Invalid ELF header len 8 [ 219.085621][T13899] loop9: detected capacity change from 0 to 7 [ 219.088904][T13899] ldm_validate_partition_table(): Disk read failed. [ 219.092511][T13899] Dev loop9: unable to read RDB block 0 [ 219.094913][T13899] loop9: unable to read partition table [ 219.096877][T13899] loop9: partition table beyond EOD, truncated [ 219.098978][T13899] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 219.294527][T13909] erspan0: entered promiscuous mode [ 219.303023][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3520'. [ 219.557640][T13931] Invalid argument reading file caps for ./file0 [ 219.624928][ T40] kauditd_printk_skb: 396 callbacks suppressed [ 219.624940][ T40] audit: type=1326 audit(1778961598.282:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="syz.1.3534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 219.637488][ T40] audit: type=1326 audit(1778961598.282:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="syz.1.3534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 219.646065][ T40] audit: type=1326 audit(1778961598.282:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="syz.1.3534" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 219.655328][ T40] audit: type=1326 audit(1778961598.282:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="syz.1.3534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 219.663638][ T40] audit: type=1326 audit(1778961598.282:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="syz.1.3534" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 219.671296][ T40] audit: type=1326 audit(1778961598.292:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="syz.1.3534" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 219.678044][ T40] audit: type=1326 audit(1778961598.292:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="syz.1.3534" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 219.684920][ T40] audit: type=1326 audit(1778961598.292:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="syz.1.3534" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 219.691987][ T40] audit: type=1326 audit(1778961598.292:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="syz.1.3534" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 219.698951][ T40] audit: type=1326 audit(1778961598.292:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="syz.1.3534" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 219.905915][T13957] netlink: 'syz.0.3542': attribute type 5 has an invalid length. [ 220.042982][ T1298] block nbd0: Possible stuck request ffff888027f75080: control (read@0,1024B). Runtime 120 seconds [ 220.047282][ T1298] block nbd0: Possible stuck request ffff888027f75240: control (read@1024,1024B). Runtime 120 seconds [ 220.051774][ T1298] block nbd0: Possible stuck request ffff888027f75400: control (read@2048,1024B). Runtime 120 seconds [ 220.056033][ T1298] block nbd0: Possible stuck request ffff888027f755c0: control (read@3072,1024B). Runtime 120 seconds [ 220.110091][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3550'. [ 220.911192][ T5751] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 221.427935][T14074] vlan2: entered allmulticast mode [ 221.430607][T14074] gretap0: entered allmulticast mode [ 221.436487][T14076] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3596'. [ 221.475532][T14078] syzkaller1: entered promiscuous mode [ 221.477357][T14078] syzkaller1: entered allmulticast mode [ 221.620852][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 221.760825][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 222.803018][T14112] Bluetooth: hci5: Frame reassembly failed (-84) [ 222.805962][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 223.873944][ T5751] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 223.874723][ T5748] Bluetooth: hci4: command 0x1003 tx timeout [ 224.021014][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 224.074715][T14152] vivid-000: disconnect [ 224.078810][T14151] vivid-000: reconnect [ 224.830678][ T5751] Bluetooth: hci5: command 0xfc11 tx timeout [ 224.833756][ T5757] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 235.030409][ T29] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 235.180405][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 235.188825][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.193490][ T29] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 235.196122][ T29] usb 5-1: can't read configurations, error -71 [ 235.500425][ T1487] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 235.697998][ T1487] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.701940][ T1487] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.705177][ T1487] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.720430][ T1487] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.723317][ T1487] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.727633][ T1487] usb 7-1: config 0 descriptor?? [ 235.803539][ T40] kauditd_printk_skb: 235 callbacks suppressed [ 235.803553][ T40] audit: type=1326 audit(1778961614.442:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14258 comm="syz.1.3661" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x0 [ 235.966815][T14274] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 236.009859][T14277] loop5: detected capacity change from 0 to 7 [ 236.016321][T14277] Dev loop5: unable to read RDB block 7 [ 236.018159][T14277] loop5: AHDI p1 [ 236.019399][T14277] loop5: partition table partially beyond EOD, truncated [ 236.154510][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3669'. [ 236.158949][T14285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3669'. [ 236.174277][ T1487] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 236.643630][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3682'. [ 236.646459][T14314] netlink: 'syz.4.3682': attribute type 30 has an invalid length. [ 236.660677][ T1228] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.663364][ T1228] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.666075][ T1228] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.668639][ T1228] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.669305][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3682'. [ 236.678439][T14314] netlink: 'syz.4.3682': attribute type 30 has an invalid length. [ 236.741384][T14318] loop7: detected capacity change from 0 to 7 [ 236.791204][T14318] Dev loop7: unable to read RDB block 7 [ 236.793416][T14318] loop7: unable to read partition table [ 236.795442][T14318] loop7: partition table beyond EOD, truncated [ 236.798602][T14318] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 236.798695][ C1] blk_print_req_error: 70 callbacks suppressed [ 236.798707][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 236.808068][ C1] buffer_io_error: 84 callbacks suppressed [ 236.808078][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 236.816399][ C3] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 236.819458][ C3] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 237.394895][T14364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3703'. [ 237.398013][T14364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3703'. [ 237.465326][ C0] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 237.713402][T14387] trusted_key: syz.0.3715 sent an empty control message without MSG_MORE. [ 238.110789][T14415] input: syz0 as /devices/virtual/input/input32 [ 238.258501][ T6431] usb 7-1: USB disconnect, device number 12 [ 238.802201][ T5840] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 238.951298][ T5840] usb 6-1: Using ep0 maxpacket: 16 [ 238.958852][ T5840] usb 6-1: config 0 has no interfaces? [ 238.972453][ T5840] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 238.976166][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.979638][ T5840] usb 6-1: Product: syz [ 238.982880][ T5840] usb 6-1: Manufacturer: syz [ 238.984883][ T5840] usb 6-1: SerialNumber: syz [ 238.989504][ T5840] usb 6-1: config 0 descriptor?? [ 239.203464][ T5840] usb 6-1: USB disconnect, device number 25 [ 239.219462][T14495] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3766'. [ 239.425938][T14509] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3772'. [ 239.431500][T14509] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3772'. [ 239.553053][ T5757] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 239.553068][ T5751] Bluetooth: hci4: command 0x1003 tx timeout [ 239.838224][T14536] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.3786'. [ 239.906156][T14544] netlink: 'syz.2.3790': attribute type 12 has an invalid length. [ 239.908807][T14544] netlink: 'syz.2.3790': attribute type 29 has an invalid length. [ 239.912284][T14544] netlink: 'syz.2.3790': attribute type 3 has an invalid length. [ 239.914760][T14544] netlink: 'syz.2.3790': attribute type 2 has an invalid length. [ 240.105273][T14562] binder: 14555:14562 ioctl 4018620d 0 returned -22 [ 240.599091][T14594] loop9: detected capacity change from 0 to 7 [ 240.603566][T14594] Dev loop9: unable to read RDB block 7 [ 240.605834][T14594] loop9: unable to read partition table [ 240.607721][T14594] loop9: partition table beyond EOD, truncated [ 240.612469][T14594] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 240.913111][T14609] syzkaller1: entered promiscuous mode [ 240.915427][T14609] syzkaller1: entered allmulticast mode [ 240.922155][T14609] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 22 [ 242.530191][T14692] loop3: detected capacity change from 0 to 7 [ 242.540165][T14692] Dev loop3: unable to read RDB block 7 [ 242.542183][T14692] loop3: AHDI p3 p4 [ 242.543725][T14692] loop3: partition table partially beyond EOD, truncated [ 242.546797][T14692] loop3: p3 start 1702000233 is beyond EOD, truncated [ 242.834711][T14714] Bluetooth: MGMT ver 1.23 [ 242.907601][T14720] netlink: 'syz.4.3869': attribute type 13 has an invalid length. [ 243.039088][ T843] kernel read not supported for file /dsp (pid: 843 comm: kworker/3:2) [ 243.606180][ T40] audit: type=1326 audit(1778961622.262:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz.2.3881" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f88fcc code=0x0 [ 244.343728][T14768] __nla_validate_parse: 4 callbacks suppressed [ 244.343740][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3890'. [ 244.612579][T14783] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3897'. [ 244.795417][T14798] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3904'. [ 244.809643][T14798] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3904'. [ 244.964650][ T40] audit: type=1326 audit(1778961623.622:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.1.3908" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x0 [ 245.279065][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3916'. [ 245.594847][T14792] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 245.640466][T14836] input: syz1 as /devices/virtual/input/input33 [ 245.880722][ T1038] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 245.990460][ T1487] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 246.050502][ T1038] usb 9-1: Using ep0 maxpacket: 32 [ 246.054326][ T1038] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 246.059796][ T1038] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 246.070519][ T1038] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 246.078013][ T1038] usb 9-1: Product: syz [ 246.079728][ T1038] usb 9-1: Manufacturer: syz [ 246.081984][ T1038] usb 9-1: SerialNumber: syz [ 246.086056][ T1038] usb 9-1: config 0 descriptor?? [ 246.089313][T14835] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.095345][ T1038] hub 9-1:0.0: bad descriptor, ignoring hub [ 246.097906][ T1038] hub 9-1:0.0: probe with driver hub failed with error -5 [ 246.174396][ T1487] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 246.178629][ T1487] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 246.182999][ T1487] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 246.186705][ T1487] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.193301][T14842] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 246.198852][ T1487] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.442934][ T6431] usb 7-1: USB disconnect, device number 13 [ 246.561330][ T5840] usb 9-1: reset high-speed USB device number 10 using dummy_hcd [ 246.715125][ T5840] usb 9-1: device firmware changed [ 246.723240][ T5840] usb 9-1: USB disconnect, device number 10 [ 246.800575][ T1487] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 246.960437][ T1487] usb 6-1: Using ep0 maxpacket: 8 [ 246.963421][ T1487] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.967014][ T1487] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.970120][ T1487] usb 6-1: config 0 interface 0 has no altsetting 0 [ 246.972515][ T1487] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 246.975448][ T1487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.982316][ T1487] usb 6-1: config 0 descriptor?? [ 247.043563][ T5840] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 247.190492][ T5840] usb 9-1: Using ep0 maxpacket: 32 [ 247.193726][ T5840] usb 9-1: config 0 has no interfaces? [ 247.197390][ T5840] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 247.200211][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.202740][ T5840] usb 9-1: Product: syz [ 247.204184][ T5840] usb 9-1: Manufacturer: syz [ 247.205671][ T5840] usb 9-1: SerialNumber: syz [ 247.208852][ T5840] usb 9-1: config 0 descriptor?? [ 247.393370][ T1487] hid_parser_main: 6 callbacks suppressed [ 247.393385][ T1487] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 247.397622][ T1487] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 247.399854][ T1487] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 247.402391][ T1487] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 247.404690][ T1487] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 247.407135][ T1487] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 247.418505][ T6431] usb 9-1: USB disconnect, device number 11 [ 247.596266][ T5840] usb 6-1: USB disconnect, device number 26 [ 249.280078][T14894] tipc: Enabling of bearer rejected, already enabled [ 249.464316][T14900] netlink: 'syz.1.3947': attribute type 1 has an invalid length. [ 249.467576][T14900] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3947'. [ 249.471382][ T5840] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 249.474558][T14900] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3947'. [ 249.478221][T14900] netlink: 'syz.1.3947': attribute type 1 has an invalid length. [ 249.481204][T14900] netlink: 634 bytes leftover after parsing attributes in process `syz.1.3947'. [ 249.523413][T14902] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 88 [ 249.651832][ T5840] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.655412][ T5840] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 249.658575][ T5840] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.661660][ T5840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.666335][T14891] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 249.673467][ T5840] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.750509][T14909] netlink: 'syz.1.3952': attribute type 13 has an invalid length. [ 249.917918][ T5840] usb 9-1: USB disconnect, device number 12 [ 250.110845][ T1298] block nbd0: Possible stuck request ffff888027f75080: control (read@0,1024B). Runtime 150 seconds [ 250.114328][ T1298] block nbd0: Possible stuck request ffff888027f75240: control (read@1024,1024B). Runtime 150 seconds [ 250.118568][ T1298] block nbd0: Possible stuck request ffff888027f75400: control (read@2048,1024B). Runtime 150 seconds [ 250.123108][ T1298] block nbd0: Possible stuck request ffff888027f755c0: control (read@3072,1024B). Runtime 150 seconds [ 250.960498][ T5840] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 251.132125][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.135567][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.138768][ T5840] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 251.141746][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.145832][ T5840] usb 7-1: config 0 descriptor?? [ 251.378435][T14943] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 251.559843][ T5840] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 251.562367][ T5840] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 251.566708][ T5840] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0009/input/input34 [ 251.584010][ T5840] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 251.768246][ T5840] usb 7-1: USB disconnect, device number 14 [ 252.310597][T14952] syzkaller1: entered promiscuous mode [ 252.313048][T14952] syzkaller1: entered allmulticast mode [ 252.313580][T14956] netlink: 'syz.2.3970': attribute type 13 has an invalid length. [ 252.918077][T14994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3991'. [ 253.303357][T15014] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.306147][T15014] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.743864][T15037] bridge_slave_1: Caught tx_queue_len zero misconfig [ 258.842435][ T5751] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 258.849244][ T5751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.858645][ T5751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.870074][ T5751] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.873967][ T5751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.896348][T15052] tunl0: Caught tx_queue_len zero misconfig [ 259.092812][T15083] syz_tun: entered allmulticast mode [ 259.103994][T15083] syz_tun: left allmulticast mode [ 259.257746][T15042] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.260140][T15042] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.262734][T15042] bridge_slave_0: entered allmulticast mode [ 259.266533][T15042] bridge_slave_0: entered promiscuous mode [ 259.270464][ T1487] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 259.271521][T15042] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.276005][T15042] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.279157][T15042] bridge_slave_1: entered allmulticast mode [ 259.283874][T15042] bridge_slave_1: entered promiscuous mode [ 259.303104][T15042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.309619][T15042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.329022][T15042] team0: Port device team_slave_0 added [ 259.332338][T15042] team0: Port device team_slave_1 added [ 259.348167][T15042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.350756][T15042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.358857][T15042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.363526][T15042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.366590][T15042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.374990][T15042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.399809][T15042] hsr_slave_0: entered promiscuous mode [ 259.402411][T15042] hsr_slave_1: entered promiscuous mode [ 259.404651][T15042] debugfs: 'hsr0' already exists in 'hsr' [ 259.406429][T15042] Cannot create hsr debugfs directory [ 259.440979][ T1487] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 259.446920][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.452498][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.455967][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 259.458802][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.462107][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.465458][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 259.468249][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.471208][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.474473][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 259.479878][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.483057][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.486422][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 259.489032][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.492261][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.495593][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 259.498384][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.501425][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.505558][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 259.508450][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.511958][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.515365][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 259.518702][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.521829][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.525217][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 259.528781][ T1487] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 259.531968][ T1487] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 259.534648][ T1487] usb 9-1: Product: syz [ 259.535987][ T1487] usb 9-1: Manufacturer: syz [ 259.537413][ T1487] usb 9-1: SerialNumber: syz [ 259.545159][ T1487] usb 9-1: config 0 descriptor?? [ 259.554495][ T1487] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 259.570270][T15042] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 259.577623][T15042] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 259.581219][T15042] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 259.585001][T15042] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 259.587704][T15042] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 259.592290][T15042] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 259.595033][T15042] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 259.598724][T15042] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 259.612002][T15042] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.614330][T15042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.616729][T15042] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.618976][T15042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.652493][T15042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.664010][ T202] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.667465][ T202] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.678651][T15042] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.691383][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.694120][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.703526][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.705855][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.765453][ T843] usb 9-1: USB disconnect, device number 13 [ 259.773868][ T843] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 259.975502][T15042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.144774][T15042] veth0_vlan: entered promiscuous mode [ 260.156389][T15042] veth1_vlan: entered promiscuous mode [ 260.176590][T15042] veth0_macvtap: entered promiscuous mode [ 260.181092][T15042] veth1_macvtap: entered promiscuous mode [ 260.193053][T15042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.202232][T15042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.210638][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.214466][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.218840][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.223442][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.315634][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.325287][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.342620][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.345833][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.353453][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.356231][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.433942][T15139] netlink: 'syz.5.4008': attribute type 13 has an invalid length. [ 260.663296][T15156] bridge_slave_0: Caught tx_queue_len zero misconfig [ 260.920472][ T5751] Bluetooth: hci4: command tx timeout [ 261.351665][ T40] audit: type=1800 audit(1778961640.002:3688): pid=15164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4054" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 261.393836][ T5757] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 261.397190][ T5751] Bluetooth: hci5: command 0xfc11 tx timeout [ 261.950982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.282151][T15210] syzkaller1: entered promiscuous mode [ 262.284486][T15210] syzkaller1: entered allmulticast mode [ 262.413049][T15212] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4075'. [ 262.498788][T15216] serio: Serial port ptm0 [ 262.930909][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 262.990509][ T5757] Bluetooth: hci4: command tx timeout [ 263.044760][T15243] overlay: Unknown parameter '/' [ 263.046960][T15243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4088'. [ 263.091965][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 263.099512][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 263.111002][ T9] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 263.116657][ T9] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 263.124700][ T9] usb 10-1: Product: syz [ 263.126415][ T9] usb 10-1: Manufacturer: syz [ 263.128275][ T9] usb 10-1: SerialNumber: syz [ 263.132907][ T9] usb 10-1: config 0 descriptor?? [ 263.138859][T15227] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 263.144786][ T9] hub 10-1:0.0: bad descriptor, ignoring hub [ 263.146862][ T9] hub 10-1:0.0: probe with driver hub failed with error -5 [ 263.187725][ T5757] Bluetooth: hci3: Invalid handle: 0xffff > 0x0eff [ 263.501385][T15225] Process accounting resumed [ 263.630966][ T9] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 263.774708][T15266] netlink: 'syz.1.4098': attribute type 13 has an invalid length. [ 263.814284][ T9] usb 10-1: device firmware changed [ 263.818160][ T9] usb 10-1: USB disconnect, device number 2 [ 264.140837][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 264.310457][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 264.314627][ T9] usb 10-1: config 0 has no interfaces? [ 264.319228][ T9] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 264.323120][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.326357][ T9] usb 10-1: Product: syz [ 264.328294][ T9] usb 10-1: Manufacturer: syz [ 264.330242][ T9] usb 10-1: SerialNumber: syz [ 264.335272][ T9] usb 10-1: config 0 descriptor?? [ 264.480511][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 264.546089][ T29] usb 10-1: USB disconnect, device number 3 [ 264.631046][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 264.635037][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 264.639375][ T10] usb 9-1: config 8 has an invalid interface number: 188 but max is 0 [ 264.642687][ T10] usb 9-1: config 8 has no interface number 0 [ 264.645905][ T10] usb 9-1: config 8 interface 188 has no altsetting 0 [ 264.652093][ T10] usb 9-1: string descriptor 0 read error: -22 [ 264.655021][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 264.658505][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.670531][T15282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4106'. [ 264.672974][ T10] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 264.676921][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 264.680213][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 264.690056][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 264.694653][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 264.697789][ T10] usb 9-1: media controller created [ 264.700094][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 264.703068][ T10] dw2102: i2c transfer failed. [ 264.705269][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 264.707096][ T10] dw2102: i2c transfer failed. [ 264.709106][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 264.715331][ T10] dw2102: i2c transfer failed. [ 264.718053][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 264.719932][ T10] dw2102: i2c transfer failed. [ 264.724236][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 264.726465][ T10] dw2102: i2c transfer failed. [ 264.727988][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 264.730245][ T10] dw2102: i2c transfer failed. [ 264.732527][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 264.742741][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.755999][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 264.759573][ T10] dw2102: command 0x0e transfer failed. [ 264.769745][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 264.771922][ T10] dw2102: command 0x0e transfer failed. [ 264.855839][T15293] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.858934][T15293] bridge0: port 2(bridge_slave_1) entered listening state [ 264.862273][T15293] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.865247][T15293] bridge0: port 1(bridge_slave_0) entered listening state [ 265.071168][ T5751] Bluetooth: hci4: command tx timeout [ 265.090479][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 265.092899][ T10] dw2102: command 0x0e transfer failed. [ 265.097012][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 265.099497][ T10] dw2102: command 0x0e transfer failed. [ 265.102155][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 265.104601][ T10] dw2102: command 0x51 transfer failed. [ 265.137123][ T10] DVB: Unable to find symbol ds3000_attach() [ 265.139374][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 265.180471][ T6431] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 265.200599][ T10] rc_core: IR keymap rc-su3000 not found [ 265.203248][ T10] Registered IR keymap rc-empty [ 265.207637][ T10] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 265.213752][ T10] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input35 [ 265.222036][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 265.225449][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 265.228778][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 265.237000][ T10] usb 9-1: USB disconnect, device number 14 [ 265.296888][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 265.363135][ T6431] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.367934][ T6431] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.372154][ T6431] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.377401][ T6431] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.382347][ T6431] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.389363][ T6431] usb 7-1: config 0 descriptor?? [ 265.473354][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.476570][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.481485][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.486625][ T1487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.491210][ T7042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.497796][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.501296][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.505406][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.522912][T15305] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4115'. [ 265.528568][T15305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.753011][T15321] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input36 [ 265.817161][ T6431] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 265.827852][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4124'. [ 265.832368][T15325] veth0_macvtap: Caught tx_queue_len zero misconfig [ 265.884621][T15331] /dev/nullb0: Can't open blockdev [ 266.012614][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4132'. [ 266.218366][T15353] team_slave_1: Caught tx_queue_len zero misconfig [ 266.570561][ T6431] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 266.686471][T15363] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4141'. [ 266.722565][ T6431] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.725691][ T6431] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.729707][ T6431] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.733122][ T6431] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.826453][T15370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4142'. [ 266.942207][ T6431] usb 9-1: usb_control_msg returned -32 [ 266.944043][ T6431] usbtmc 9-1:16.0: can't read capabilities [ 267.100451][ T843] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 267.150462][ T5751] Bluetooth: hci4: command tx timeout [ 267.251820][ T843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.255357][ T843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.258462][ T843] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 267.261688][ T843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.266132][ T843] usb 6-1: config 0 descriptor?? [ 267.550642][ T7042] net_ratelimit: 1 callbacks suppressed [ 267.550658][ T7042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.676890][ T843] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 267.682043][ T843] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 267.694474][ T843] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.000B/input/input38 [ 267.718934][ T843] cm6533_jd 0003:0D8C:0022.000B: input,hiddev2,hidraw2: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 267.884532][ T7042] usb 6-1: USB disconnect, device number 27 [ 267.985232][T15393] hsr0: entered promiscuous mode [ 267.988028][T15393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4152'. [ 267.991334][T15393] hsr_slave_0: left promiscuous mode [ 267.993780][T15393] hsr_slave_1: left promiscuous mode [ 268.000206][T15393] hsr0 (unregistering): left promiscuous mode [ 268.040438][ T34] usb 7-1: reset high-speed USB device number 15 using dummy_hcd [ 268.194870][ T34] usb 7-1: device firmware changed [ 268.198178][ T6431] usb 7-1: USB disconnect, device number 15 [ 268.340505][ T6431] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 268.494213][ T6431] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.497923][ T6431] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.502005][ T6431] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 268.505258][ T6431] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 268.509416][ T6431] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.513032][ T6431] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.517274][ T6431] usb 7-1: config 0 descriptor?? [ 268.520825][ T1038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.590804][ T7042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.660496][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 268.810534][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 268.813672][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.816963][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.820116][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.823243][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.827560][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.830913][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.932916][ T6431] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 268.935951][ T6431] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 268.938925][ T6431] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 268.942240][ T6431] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 268.945465][ T6431] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 268.948552][ T6431] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 268.951813][ T6431] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 268.954840][ T6431] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 268.965512][ T6431] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 269.042261][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 269.044296][ T10] usbtmc 6-1:16.0: can't read capabilities [ 269.194941][ T1038] usb 7-1: USB disconnect, device number 16 [ 269.248034][ T10] usb 6-1: USB disconnect, device number 28 [ 269.346022][ T24] usb 9-1: USB disconnect, device number 15 [ 269.631770][ T7042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.804772][T15454] netlink: 'syz.1.4179': attribute type 5 has an invalid length. [ 269.808430][T15454] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4179'. [ 269.850889][T15457] netlink: 'syz.5.4182': attribute type 1 has an invalid length. [ 269.855257][T15457] netlink: 'syz.5.4182': attribute type 1 has an invalid length. [ 269.969889][T15473] sit0: entered promiscuous mode [ 269.982378][T15473] netlink: 'syz.1.4187': attribute type 1 has an invalid length. [ 269.987616][T15473] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4187'. [ 270.111272][T15484] block nbd4: NBD_DISCONNECT [ 270.115629][T15484] block nbd4: Send disconnect failed -32 [ 270.119537][T15478] block nbd4: Disconnected due to user request. [ 270.123751][T15478] block nbd4: shutting down sockets [ 270.680525][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.810448][ T24] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 270.963054][ T24] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 270.966708][ T24] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 270.970721][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.974530][ T24] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 270.978424][ T24] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.986042][ T24] usb 9-1: New USB device found, idVendor=0499, idProduct=102e, bcdDevice= 0.40 [ 270.988953][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.992325][ T24] usb 9-1: Product: syz [ 270.994730][ T24] usb 9-1: Manufacturer: syz [ 270.996269][ T24] usb 9-1: SerialNumber: syz [ 271.177873][T15521] evm: overlay not supported [ 271.188719][T15523] syzkaller1: entered promiscuous mode [ 271.200438][T15523] syzkaller1: entered allmulticast mode [ 271.248780][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.281982][ T24] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 271.286389][ T24] usb 9-1: USB disconnect, device number 16 [ 271.299467][ T8264] udevd[8264]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.353247][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4213'. [ 271.356159][T15531] netlink: 'syz.2.4213': attribute type 4 has an invalid length. [ 271.510494][ T5840] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 271.511684][ T1487] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 271.560694][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.672121][ T5840] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 271.672605][ T1487] usb 6-1: Using ep0 maxpacket: 16 [ 271.676994][ T5840] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 271.683154][ T5840] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 271.685547][ T1487] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.686955][ T5840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.691140][ T1487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 271.697554][T15527] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 271.698311][ T1487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 271.705213][ T1487] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 271.708212][ T5840] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.710097][ T1487] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.717342][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.723417][ T1487] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 271.727819][ T1487] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 271.732003][ T1487] usb 6-1: Manufacturer: syz [ 271.754145][ T1487] usb 6-1: config 0 descriptor?? [ 271.790209][T15546] dummy0: entered promiscuous mode [ 271.798856][T15546] macvlan3: entered promiscuous mode [ 271.803587][T15546] dummy0: left promiscuous mode [ 271.998694][ T29] usb 10-1: USB disconnect, device number 4 [ 272.030987][ T1487] rc_core: IR keymap rc-hauppauge not found [ 272.035696][ T1487] Registered IR keymap rc-empty [ 272.039501][ T1487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.062585][ T1487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.081806][ T1487] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 272.089009][ T1487] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input39 [ 272.098410][ T1487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.130873][ T1487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.151195][ T1487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.170825][ T1487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.200659][ T1487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.220633][ T1487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.240502][ T1487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.271169][ T1487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.300557][ T1487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.320518][ T1487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.351893][ T1487] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 272.354955][ T1487] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 272.361208][ T1487] usb 6-1: USB disconnect, device number 29 [ 272.410057][T15571] syzkaller1: entered promiscuous mode [ 272.413087][T15571] syzkaller1: entered allmulticast mode [ 272.547085][T15574] dummy0: entered promiscuous mode [ 272.552912][T15574] macvlan2: entered promiscuous mode [ 272.556863][T15574] dummy0: left promiscuous mode [ 272.710966][T15583] bridge_slave_0: Caught tx_queue_len zero misconfig [ 272.713936][T15583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4233'. [ 272.751649][ T7042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.840549][ T6431] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 272.932649][ T29] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 272.990644][ T6431] usb 10-1: Using ep0 maxpacket: 8 [ 273.004870][ T6431] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 273.008258][ T6431] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.013641][ T6431] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.017474][ T6431] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.021678][ T6431] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.026932][ T6431] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.031129][ T6431] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.093539][ T29] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.098028][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 273.103227][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 273.107189][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.112461][ T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.116472][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.121678][ T29] usb 9-1: config 0 descriptor?? [ 273.142775][T15614] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4247'. [ 273.552192][ T29] hid_parser_main: 7 callbacks suppressed [ 273.552207][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 273.557875][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 273.563010][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 273.567438][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 273.571046][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 273.574244][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 273.577428][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 273.582581][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 273.585742][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 273.588890][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 273.601507][ T29] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 273.674489][T15627] syzkaller1: entered promiscuous mode [ 273.676621][T15627] syzkaller1: entered allmulticast mode [ 273.749654][ T6431] usb 9-1: USB disconnect, device number 17 [ 273.799207][ T40] audit: type=1326 audit(1778961652.452:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 273.800907][ T7042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.803421][T15632] usbtmc 10-1:16.0: simple usb_control_msg failed -32 [ 273.810000][ T40] audit: type=1326 audit(1778961652.452:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 273.814406][ T24] usb 10-1: USB disconnect, device number 5 [ 273.815621][ T40] audit: type=1326 audit(1778961652.452:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 273.835329][ T40] audit: type=1326 audit(1778961652.452:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 273.844263][ T40] audit: type=1326 audit(1778961652.452:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 273.853601][ T40] audit: type=1326 audit(1778961652.452:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 273.862341][ T40] audit: type=1326 audit(1778961652.452:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 273.873422][ T40] audit: type=1326 audit(1778961652.452:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 273.882487][ T40] audit: type=1326 audit(1778961652.452:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 273.891470][ T40] audit: type=1326 audit(1778961652.452:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.4254" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 273.960531][ T5840] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 274.074651][T15634] hsr0: entered promiscuous mode [ 274.077474][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4255'. [ 274.080650][T15634] hsr_slave_0: left promiscuous mode [ 274.083280][T15634] hsr_slave_1: left promiscuous mode [ 274.088257][T15634] hsr0 (unregistering): left promiscuous mode [ 274.110575][ T5840] usb 7-1: Using ep0 maxpacket: 16 [ 274.115776][ T5840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.119092][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.122562][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.125449][ T5840] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 274.128712][ T5840] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.133669][ T5840] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 274.136586][ T5840] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 274.139218][ T5840] usb 7-1: Manufacturer: syz [ 274.142544][ T5840] usb 7-1: config 0 descriptor?? [ 274.430967][ T5840] rc_core: IR keymap rc-hauppauge not found [ 274.433453][ T5840] Registered IR keymap rc-empty [ 274.435193][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 274.450870][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 274.472896][ T5840] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 274.477845][ T5840] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input40 [ 274.484849][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 274.502351][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 274.520835][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 274.542509][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 274.571996][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 274.590692][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.600714][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 274.620501][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 274.640616][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 274.660514][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 274.680576][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 274.702062][ T5840] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 274.706262][ T5840] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 274.712765][ T5840] usb 7-1: USB disconnect, device number 17 [ 274.840651][ T7042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.091913][T15666] hsr0: entered promiscuous mode [ 275.096525][T15666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4264'. [ 275.099737][T15666] hsr_slave_0: left promiscuous mode [ 275.103199][T15666] hsr_slave_1: left promiscuous mode [ 275.112639][T15666] hsr0 (unregistering): left promiscuous mode [ 275.166295][T15671] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4276'. [ 275.384333][T15686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.389087][T15686] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.397658][T15686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.444199][T15686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.448138][T15686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.453750][T15686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.457168][T15686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.466682][T15686] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 275.470244][T15686] veth1_vlan: left promiscuous mode [ 275.473038][T15686] veth0_vlan: left promiscuous mode [ 275.475472][T15686] veth0_vlan: entered promiscuous mode [ 275.481985][T15686] veth1_vlan: entered promiscuous mode [ 275.489735][T15686] veth1_macvtap: left promiscuous mode [ 275.492496][T15686] veth0_macvtap: left promiscuous mode [ 275.495015][T15686] veth0_macvtap: entered promiscuous mode [ 275.497541][T15686] veth1_macvtap: entered promiscuous mode [ 275.506317][T15686] netdevsim netdevsim4 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 275.509796][T15686] 8021q: adding VLAN 0 to HW filter on device eth0 [ 275.514149][T15686] netdevsim netdevsim4 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 275.518149][T15686] 8021q: adding VLAN 0 to HW filter on device eth1 [ 275.521878][T15686] netdevsim netdevsim4 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 275.525566][T15686] 8021q: adding VLAN 0 to HW filter on device eth2 [ 275.529040][T15686] netdevsim netdevsim4 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 275.533653][T15686] 8021q: adding VLAN 0 to HW filter on device eth3 [ 275.536343][T15686] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 275.551400][ T202] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.553723][ T202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.557125][ T202] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.559399][ T202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.597429][ T1228] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.604631][ T1228] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.611218][ T1228] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.616221][ T1228] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.636209][T15693] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4278'. [ 275.826497][T15708] netlink: 'syz.4.4285': attribute type 12 has an invalid length. [ 275.829619][T15708] netlink: 'syz.4.4285': attribute type 29 has an invalid length. [ 275.832950][T15708] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4285'. [ 275.836471][T15708] netlink: 'syz.4.4285': attribute type 1 has an invalid length. [ 275.839403][T15708] netlink: 'syz.4.4285': attribute type 2 has an invalid length. [ 275.842569][T15708] netlink: 15 bytes leftover after parsing attributes in process `syz.4.4285'. [ 275.870839][ T7042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.880632][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 275.955232][T15706] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4284'. [ 275.961791][T15706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.008401][T15719] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 276.043309][ T10] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 276.050465][ T10] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 276.060465][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 276.064299][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 276.068800][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 276.071744][ T10] usb 6-1: Product: syz [ 276.073048][ T10] usb 6-1: Manufacturer: syz [ 276.074527][ T10] usb 6-1: SerialNumber: syz [ 276.077280][ T10] usb 6-1: config 0 descriptor?? [ 276.080227][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 276.082848][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 276.086654][ T10] usb 6-1: selecting invalid altsetting 0 [ 276.380467][ T7042] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 276.540431][ T7042] usb 7-1: Using ep0 maxpacket: 8 [ 276.543848][ T7042] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.548663][ T7042] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.552935][ T7042] usb 7-1: config 0 interface 0 has no altsetting 0 [ 276.555695][ T7042] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 276.559604][ T7042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.565026][ T7042] usb 7-1: config 0 descriptor?? [ 276.692503][T15695] usb 6-1: reset high-speed USB device number 30 using dummy_hcd [ 276.910826][ T1487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.975800][ T7042] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 277.020524][ T29] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 277.052551][T15695] usb 6-1: failed to restore interface 0 altsetting 251 (error=-71) [ 277.060018][ T10] usb 6-1: USB disconnect, device number 30 [ 277.171668][ T29] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 277.173095][ T843] usb 7-1: USB disconnect, device number 18 [ 277.175146][ T29] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 277.180144][ T29] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 277.183359][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.187608][T15734] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 277.193626][ T29] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.314424][T15742] tipc: Started in network mode [ 277.316047][T15742] tipc: Node identity ac14142f, cluster identity 4711 [ 277.318255][T15742] tipc: New replicast peer: 0.0.0.0 [ 277.322466][T15742] tipc: Enabled bearer , priority 10 [ 277.478845][T15751] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4309'. [ 277.497721][ T29] usb 9-1: USB disconnect, device number 18 [ 277.630889][ T1038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.782969][T15755] serio: Serial port ttyprintk [ 277.960667][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.018284][T15757] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4302'. [ 278.022678][T15757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.290503][ T5840] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 278.440649][ T5840] usb 9-1: Using ep0 maxpacket: 16 [ 278.442424][ T9] tipc: Node number set to 2886997039 [ 278.447857][ T5840] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 278.450949][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.453537][ T5840] usb 9-1: Product: syz [ 278.454877][ T5840] usb 9-1: Manufacturer: syz [ 278.456333][ T5840] usb 9-1: SerialNumber: syz [ 278.459027][ T5840] usb 9-1: config 0 descriptor?? [ 278.470485][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 278.622060][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 278.627194][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 278.631152][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.638405][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 278.642305][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 278.645616][ T10] usb 6-1: Product: syz [ 278.647151][ T10] usb 6-1: Manufacturer: syz [ 278.648776][ T10] usb 6-1: SerialNumber: syz [ 278.865448][ T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 278.874512][ T5840] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 278.880023][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.883598][ T5840] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 278.886285][ T5840] usb 9-1: media controller created [ 278.893460][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.000644][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.068513][ T10] usb 6-1: USB disconnect, device number 31 [ 279.073547][ T10] usblp0: removed [ 279.140994][T15787] serio: Serial port ptm0 [ 279.433586][ T5840] zl10353_read_register: readreg error (reg=127, ret==0) [ 279.433615][T15770] dtv5100: wlen = 0, aborting. [ 279.435903][ T5840] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 279.435915][ T5840] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 279.451518][ T29] usb 9-1: USB disconnect, device number 19 [ 279.469898][ T29] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 279.990630][T15796] geneve2: entered promiscuous mode [ 280.034692][ T40] kauditd_printk_skb: 648 callbacks suppressed [ 280.034704][ T40] audit: type=1800 audit(1778961658.692:4347): pid=15803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4323" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 280.040771][ T7042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.132956][T15799] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4319'. [ 280.137766][T15799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.192254][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 280.195126][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 280.202431][ T5152] block nbd0: Possible stuck request ffff888027f75080: control (read@0,1024B). Runtime 180 seconds [ 280.205805][ T5152] block nbd0: Possible stuck request ffff888027f75240: control (read@1024,1024B). Runtime 180 seconds [ 280.209254][ T5152] block nbd0: Possible stuck request ffff888027f75400: control (read@2048,1024B). Runtime 180 seconds [ 280.215013][ T5152] block nbd0: Possible stuck request ffff888027f755c0: control (read@3072,1024B). Runtime 180 seconds [ 280.387606][T15818] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 280.670623][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.720425][ T5840] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 280.895093][ T5840] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.900196][T15826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4342'. [ 280.900427][ T5840] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.916101][ T5840] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.919841][ T5840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.088862][ T7042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.132864][ T5840] usb 10-1: usb_control_msg returned -32 [ 281.134671][ T5840] usbtmc 10-1:16.0: can't read capabilities [ 281.156566][ T40] audit: type=1800 audit(1778961659.812:4348): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4335" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 281.157443][T15838] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4346'. [ 281.167692][T15838] gretap0: entered promiscuous mode [ 281.189470][T15838] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4346'. [ 281.192597][T15838] 0{X: renamed from gretap0 [ 281.196981][T15838] 0{X: left promiscuous mode [ 281.198604][T15838] 0{X: entered allmulticast mode [ 281.201529][T15838] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 281.269379][T15844] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.271773][T15844] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.277866][T15847] serio: Serial port ptm0 [ 281.308374][T15844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.313702][T15844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.358541][ T1261] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.361948][ T1261] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.364728][ T1261] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.367254][ T1261] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.369988][ T1261] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.373028][ T1261] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.376077][ T1261] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.378690][ T1261] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.430437][ T34] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 281.488183][T15857] usbtmc 10-1:16.0: INDICATOR_PULSE returned 0 [ 281.582629][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.588893][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.592270][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.596350][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.599201][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.604401][ T34] usb 9-1: config 0 descriptor?? [ 281.688934][ T24] usb 10-1: USB disconnect, device number 6 [ 281.740536][ T5840] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 281.748110][ T40] audit: type=1800 audit(1778961660.402:4349): pid=15863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4351" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 281.878441][T15867] pim6reg1: entered promiscuous mode [ 281.880145][T15867] pim6reg1: entered allmulticast mode [ 281.902078][ T5840] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.906263][ T5840] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 281.909889][ T5840] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.913244][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.918403][T15859] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 281.922824][ T5840] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.031275][ T34] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 282.217002][ T7042] usb 7-1: USB disconnect, device number 19 [ 282.561028][T15892] sctp: [Deprecated]: syz.1.4364 (pid 15892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.561028][T15892] Use struct sctp_sack_info instead [ 282.603340][T15894] team0 (unregistering): Port device team_slave_0 removed [ 282.609830][T15894] team0 (unregistering): Port device team_slave_1 removed [ 282.665790][ T40] audit: type=1800 audit(1778961661.322:4350): pid=15900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4368" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 283.060481][ T5840] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 283.212220][ T5840] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.216534][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 283.220164][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 283.223439][ T5840] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.227534][ T5840] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.230557][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.234722][ T5840] usb 6-1: config 0 descriptor?? [ 283.307222][ T40] audit: type=1800 audit(1778961661.962:4351): pid=15932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4381" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 283.332008][T15922] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4378'. [ 283.336083][T15922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.409064][ T1487] hid_parser_main: 10 callbacks suppressed [ 283.409079][ T1487] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 283.413684][ T1487] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 283.416114][ T1487] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 283.418399][ T1487] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 283.422434][ T1487] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 283.425012][ T1487] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 283.427387][ T1487] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 283.429680][ T1487] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 283.432247][ T1487] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 283.434569][ T1487] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 283.449295][ T1487] hid-generic 0080:0008:0000.0010: hidraw2: HID v0.00 Device [syz0] on syz0 [ 283.495118][T15938] fido_id[15938]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 283.664314][ T5840] plantronics 0003:047F:FFFF.0011: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 283.922972][ T5840] usb 6-1: USB disconnect, device number 32 [ 284.091045][T15964] loop9: detected capacity change from 0 to 524287936 [ 284.122819][ T843] usb 9-1: USB disconnect, device number 20 [ 284.558338][T15986] tunl0: Caught tx_queue_len zero misconfig [ 284.670504][T15989] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 284.690463][ T7042] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 284.710404][ T1038] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 284.850458][ T7042] usb 10-1: Using ep0 maxpacket: 8 [ 284.856235][ T7042] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 284.860194][ T7042] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.864707][ T7042] usb 10-1: Product: syz [ 284.866574][ T7042] usb 10-1: Manufacturer: syz [ 284.868602][ T7042] usb 10-1: SerialNumber: syz [ 284.872260][ T7042] usb 10-1: config 0 descriptor?? [ 284.886209][ T1038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.889724][ T1038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.892910][ T1038] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.897124][ T1038] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.900724][ T1038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.905024][ T1038] usb 6-1: config 0 descriptor?? [ 284.910484][ T5840] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 284.992495][ T40] audit: type=1326 audit(1778961663.652:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16012 comm="syz.4.4413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 284.999514][ T40] audit: type=1326 audit(1778961663.652:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16012 comm="syz.4.4413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 285.006558][ T40] audit: type=1326 audit(1778961663.652:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16012 comm="syz.4.4413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 285.013548][ T40] audit: type=1326 audit(1778961663.652:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16012 comm="syz.4.4413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 285.021389][ T40] audit: type=1326 audit(1778961663.652:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16012 comm="syz.4.4413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 285.061712][ T5840] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.071185][ T5840] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.076023][ T5840] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 285.080405][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.085062][ T7042] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 285.090088][ T7042] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 285.095812][ T7042] usb 10-1: USB disconnect, device number 7 [ 285.300433][ T5840] usb 7-1: usb_control_msg returned -32 [ 285.302898][ T5840] usbtmc 7-1:16.0: can't read capabilities [ 285.322699][ T1038] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 285.519958][ T5840] usb 6-1: USB disconnect, device number 33 [ 285.857779][ T1038] usb 7-1: USB disconnect, device number 20 [ 286.066072][T16037] lo: Caught tx_queue_len zero misconfig [ 286.603853][T16078] kvm: user requested TSC rate below hardware speed [ 286.896720][T16091] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 286.957502][T16095] team_slave_1: Caught tx_queue_len zero misconfig [ 286.974162][T16097] team_slave_0: Caught tx_queue_len zero misconfig [ 287.008509][T16100] team_slave_0: Caught tx_queue_len zero misconfig [ 287.106308][T16112] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 287.112106][T16112] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 287.116012][T16112] block nbd1: shutting down sockets [ 287.226952][T16122] lo: Caught tx_queue_len zero misconfig [ 287.787835][ T10] kernel read not supported for file /video37 (pid: 10 comm: kworker/0:1) [ 288.206975][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4492'. [ 288.209785][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4492'. [ 288.213314][T16198] netlink: 'syz.4.4492': attribute type 15 has an invalid length. [ 288.303418][T16204] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 288.860427][ T6431] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 288.922408][T16239] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 288.933494][T16239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.937974][T16239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.944932][T16239] netdevsim netdevsim1 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 288.948521][T16239] 8021q: adding VLAN 0 to HW filter on device eth0 [ 288.953592][T16239] netdevsim netdevsim1 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 288.957141][T16239] 8021q: adding VLAN 0 to HW filter on device eth1 [ 288.959960][T16239] netdevsim netdevsim1 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 288.964605][T16239] 8021q: adding VLAN 0 to HW filter on device eth2 [ 288.967622][T16239] netdevsim netdevsim1 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 288.971169][T16239] 8021q: adding VLAN 0 to HW filter on device eth3 [ 288.973918][T16239] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 288.980013][ T1261] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 288.986205][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.988625][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.994937][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.998223][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.002370][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.009029][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.023378][ T6431] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.028113][ T6431] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.032325][ T6431] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 289.037396][ T6431] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.043249][ T6431] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.051430][ T6431] usb 7-1: config 0 descriptor?? [ 289.463159][ T6431] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 289.720501][ T843] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 289.892155][ T843] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.895852][ T843] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.899081][ T843] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 289.903727][ T843] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.906684][ T843] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.913226][ T843] usb 10-1: config 0 descriptor?? [ 290.183053][T16277] input: syz1 as /devices/virtual/input/input41 [ 290.310546][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 290.331446][ T843] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 290.462440][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.465953][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.469228][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.474583][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.477453][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.482257][ T10] usb 6-1: config 0 descriptor?? [ 290.498956][T16288] input: syz0 as /devices/virtual/input/input42 [ 290.564974][T16290] 9p: Unknown uid 00000000004294967295 [ 290.764746][ T5840] usb 10-1: USB disconnect, device number 8 [ 290.899379][ T10] hid_parser_main: 48 callbacks suppressed [ 290.899394][ T10] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 290.904309][ T10] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 290.906865][ T10] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 290.909253][ T10] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 290.912865][ T10] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 290.916420][ T10] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 290.919221][ T10] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 290.921849][ T10] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 290.924161][ T10] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 290.926423][ T10] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 290.937258][ T10] plantronics 0003:047F:FFFF.0015: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 291.153306][ T5840] usb 6-1: USB disconnect, device number 34 [ 291.476021][ T5840] IPVS: starting estimator thread 0... [ 291.533730][ T1348] usb 7-1: USB disconnect, device number 21 [ 291.561879][T16334] IPVS: using max 43 ests per chain, 103200 per kthread [ 291.973861][T16374] veth0_to_bond: Caught tx_queue_len zero misconfig [ 292.794958][T16400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4577'. [ 292.798818][T16400] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 292.830532][ C3] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 292.900938][ T6431] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 293.073393][ T6431] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 293.076260][ T6431] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 293.079405][ T6431] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 293.082642][ T6431] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 293.086056][ T6431] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 293.091715][ T6431] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 293.094534][ T6431] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.097014][ T6431] usb 9-1: Product: syz [ 293.098328][ T6431] usb 9-1: Manufacturer: syz [ 293.102690][ T6431] cdc_wdm 9-1:1.0: skipping garbage [ 293.104379][ T6431] cdc_wdm 9-1:1.0: skipping garbage [ 293.107027][ T6431] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 293.108918][ T6431] cdc_wdm 9-1:1.0: Unknown control protocol [ 293.160428][ T1348] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 293.322908][ T1348] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.330398][ T1348] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.334337][ T1348] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.339636][ T1348] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.343641][ T1348] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.349905][ T1348] usb 7-1: config 0 descriptor?? [ 293.532511][ T9] usb 9-1: USB disconnect, device number 21 [ 293.772788][ T1348] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 293.786760][ T1348] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 293.879674][T16364] syz.2.4555 (16364) used greatest stack depth: 19520 bytes left [ 294.042885][ T7042] usb 7-1: USB disconnect, device number 22 [ 294.930418][ T1487] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 295.081058][ T1487] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 295.082434][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.088180][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.088205][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 295.089583][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.099444][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.099471][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 295.104263][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.109683][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.109700][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 295.110806][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.118828][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.118845][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 295.119628][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.128659][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.128678][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 295.129487][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.137877][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.137895][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 295.138882][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.147560][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.147589][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 295.148451][ T1487] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.157373][ T1487] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.162109][ T1487] usb 9-1: config 0 interface 0 has no altsetting 0 [ 295.167251][ T1487] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 295.171189][ T1487] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 295.173953][ T1487] usb 9-1: Product: syz [ 295.175356][ T1487] usb 9-1: Manufacturer: syz [ 295.177013][ T1487] usb 9-1: SerialNumber: syz [ 295.181450][ T1487] usb 9-1: config 0 descriptor?? [ 295.191635][ T1487] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 295.407069][ T1487] usb 9-1: USB disconnect, device number 22 [ 295.433281][ T1487] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 295.495387][T16466] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4602'. [ 295.700435][ T29] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 295.851745][ T29] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 295.855450][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 295.859837][ T29] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.865316][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 295.869874][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 295.874648][ T29] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 295.877194][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 295.880943][ T29] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.885677][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 295.890282][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 295.896031][ T29] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 295.899351][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 295.905793][ T29] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.909888][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 295.913781][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 295.919213][ T29] usb 10-1: string descriptor 0 read error: -22 [ 295.921868][ T29] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 295.925327][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.939161][ T29] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 296.017021][T16500] team_slave_1: Caught tx_queue_len zero misconfig [ 296.195346][ T6431] usb 10-1: USB disconnect, device number 9 [ 297.601794][T16529] [ 297.602656][T16529] ====================================================== [ 297.604881][T16529] WARNING: possible circular locking dependency detected [ 297.607256][T16529] syzkaller #0 Tainted: G L [ 297.609390][T16529] ------------------------------------------------------ [ 297.611667][T16529] syz.2.4626/16529 is trying to acquire lock: [ 297.613620][T16529] ffff888020a6c998 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x1c/0x300 [ 297.616486][T16529] [ 297.616486][T16529] but task is already holding lock: [ 297.618987][T16529] ffff8880260ebd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 297.622033][T16529] [ 297.622033][T16529] which lock already depends on the new lock. [ 297.622033][T16529] [ 297.625268][T16529] [ 297.625268][T16529] the existing dependency chain (in reverse order) is: [ 297.628010][T16529] [ 297.628010][T16529] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 297.630600][T16529] __mutex_lock+0x1a4/0x1b10 [ 297.632224][T16529] elevator_change+0x1bc/0x530 [ 297.633881][T16529] elevator_set_none+0x92/0xf0 [ 297.635670][T16529] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 297.637716][T16529] nbd_start_device+0x1a6/0xbd0 [ 297.639536][T16529] nbd_genl_connect+0xff2/0x1a40 [ 297.641307][T16529] genl_family_rcv_msg_doit+0x214/0x300 [ 297.643298][T16529] genl_rcv_msg+0x560/0x800 [ 297.644920][T16529] netlink_rcv_skb+0x159/0x420 [ 297.646592][T16529] genl_rcv+0x28/0x40 [ 297.648161][T16529] netlink_unicast+0x585/0x850 [ 297.649914][T16529] netlink_sendmsg+0x8b0/0xda0 [ 297.651670][T16529] ____sys_sendmsg+0x9e1/0xb70 [ 297.653373][T16529] ___sys_sendmsg+0x190/0x1e0 [ 297.655059][T16529] __sys_sendmsg+0x170/0x220 [ 297.656696][T16529] __do_fast_syscall_32+0xe7/0x950 [ 297.658568][T16529] do_fast_syscall_32+0x32/0x70 [ 297.660872][T16529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.663358][T16529] [ 297.663358][T16529] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 297.666102][T16529] blk_alloc_queue+0x610/0x790 [ 297.667815][T16529] blk_mq_alloc_queue+0x174/0x290 [ 297.669854][T16529] __blk_mq_alloc_disk+0x29/0x120 [ 297.672141][T16529] nbd_dev_add+0x492/0xb10 [ 297.674021][T16529] nbd_init+0x291/0x2b0 [ 297.675510][T16529] do_one_initcall+0x121/0x750 [ 297.677183][T16529] kernel_init_freeable+0x6ea/0x7b0 [ 297.678942][T16529] kernel_init+0x1f/0x1e0 [ 297.680482][T16529] ret_from_fork+0x72b/0xd50 [ 297.682090][T16529] ret_from_fork_asm+0x1a/0x30 [ 297.683753][T16529] [ 297.683753][T16529] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 297.685998][T16529] fs_reclaim_acquire+0xc4/0x100 [ 297.687747][T16529] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 297.689983][T16529] __alloc_skb+0x140/0x710 [ 297.691789][T16529] tcp_stream_alloc_skb+0x34/0x660 [ 297.693514][T16529] tcp_sendmsg_locked+0x13cd/0x4500 [ 297.695335][T16529] tcp_sendmsg+0x2e/0x50 [ 297.696823][T16529] inet_sendmsg+0xb9/0x140 [ 297.698497][T16529] sock_write_iter+0x4ea/0x5a0 [ 297.700255][T16529] vfs_write+0x6ac/0x1070 [ 297.702046][T16529] ksys_write+0x1f8/0x250 [ 297.703968][T16529] do_syscall_64+0x10b/0xf80 [ 297.705601][T16529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.707634][T16529] [ 297.707634][T16529] -> #3 (sk_lock-AF_INET){+.+.}-{0:0}: [ 297.710478][T16529] lock_sock_nested+0x41/0xf0 [ 297.712246][T16529] tcp_sendmsg+0x20/0x50 [ 297.713738][T16529] inet_sendmsg+0xb9/0x140 [ 297.715341][T16529] sock_sendmsg+0x337/0x3d0 [ 297.716907][T16529] __sock_xmit+0x26e/0x540 [ 297.718707][T16529] nbd_disconnect.isra.0+0x329/0x401 [ 297.720589][T16529] nbd_ioctl.cold+0xd/0xbf [ 297.722173][T16529] compat_blkdev_ioctl+0x682/0x7b0 [ 297.723893][T16529] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 297.725855][T16529] __do_fast_syscall_32+0xe7/0x950 [ 297.727909][T16529] do_fast_syscall_32+0x32/0x70 [ 297.729567][T16529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.731795][T16529] [ 297.731795][T16529] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 297.734049][T16529] __mutex_lock+0x1a4/0x1b10 [ 297.735715][T16529] nbd_queue_rq+0x428/0x1080 [ 297.737443][T16529] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 297.739469][T16529] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 297.741672][T16529] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 297.743721][T16529] blk_mq_run_hw_queue+0x23c/0x670 [ 297.745506][T16529] blk_mq_dispatch_list+0x51d/0x1360 [ 297.747443][T16529] blk_mq_flush_plug_list+0x130/0x600 [ 297.749327][T16529] __blk_flush_plug+0x2c4/0x4b0 [ 297.751069][T16529] __submit_bio+0x584/0x6c0 [ 297.752732][T16529] submit_bio_noacct_nocheck+0x543/0xbf0 [ 297.754661][T16529] submit_bio_noacct+0xd18/0x2000 [ 297.756417][T16529] submit_bh_wbc+0x681/0x890 [ 297.758104][T16529] block_read_full_folio+0x264/0x8e0 [ 297.759942][T16529] filemap_read_folio+0xfc/0x3b0 [ 297.761704][T16529] do_read_cache_folio+0x2d7/0x6b0 [ 297.764529][T16529] read_part_sector+0xd1/0x370 [ 297.766733][T16529] adfspart_check_ICS+0x91/0x7d0 [ 297.768982][T16529] bdev_disk_changed+0x7a3/0x1250 [ 297.771343][T16529] blkdev_get_whole+0x187/0x290 [ 297.773597][T16529] bdev_open+0x2c7/0xe40 [ 297.775609][T16529] blkdev_open+0x34e/0x4f0 [ 297.777680][T16529] do_dentry_open+0x6d8/0x1660 [ 297.779904][T16529] vfs_open+0x82/0x3f0 [ 297.781893][T16529] path_openat+0x208c/0x31a0 [ 297.784033][T16529] do_file_open+0x20e/0x430 [ 297.785736][T16529] do_sys_openat2+0x10d/0x1e0 [ 297.787465][T16529] __x64_sys_openat+0x12d/0x210 [ 297.789349][T16529] do_syscall_64+0x10b/0xf80 [ 297.789607][T16537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4629'. [ 297.791354][T16529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.791385][T16529] [ 297.791385][T16529] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 297.791415][T16529] __mutex_lock+0x1a4/0x1b10 [ 297.791432][T16529] nbd_queue_rq+0xba/0x1080 [ 297.794520][T16537] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 297.797006][T16529] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 297.797041][T16529] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 297.797064][T16529] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 297.815513][T16529] blk_mq_run_hw_queue+0x23c/0x670 [ 297.817848][T16529] blk_mq_dispatch_list+0x51d/0x1360 [ 297.820314][T16529] blk_mq_flush_plug_list+0x130/0x600 [ 297.822729][T16529] __blk_flush_plug+0x2c4/0x4b0 [ 297.824975][T16529] __submit_bio+0x584/0x6c0 [ 297.827047][T16529] submit_bio_noacct_nocheck+0x543/0xbf0 [ 297.829623][T16529] submit_bio_noacct+0xd18/0x2000 [ 297.832009][T16529] submit_bh_wbc+0x681/0x890 [ 297.834164][T16529] block_read_full_folio+0x264/0x8e0 [ 297.836610][T16529] filemap_read_folio+0xfc/0x3b0 [ 297.838922][T16529] do_read_cache_folio+0x2d7/0x6b0 [ 297.841277][T16529] read_part_sector+0xd1/0x370 [ 297.843508][T16529] adfspart_check_ICS+0x91/0x7d0 [ 297.845785][T16529] bdev_disk_changed+0x7a3/0x1250 [ 297.847841][T16529] blkdev_get_whole+0x187/0x290 [ 297.849869][T16529] bdev_open+0x2c7/0xe40 [ 297.851877][T16529] blkdev_open+0x34e/0x4f0 [ 297.853981][T16529] do_dentry_open+0x6d8/0x1660 [ 297.855803][T16529] vfs_open+0x82/0x3f0 [ 297.857316][T16529] path_openat+0x208c/0x31a0 [ 297.859036][T16529] do_file_open+0x20e/0x430 [ 297.860683][T16529] do_sys_openat2+0x10d/0x1e0 [ 297.862286][T16529] __x64_sys_openat+0x12d/0x210 [ 297.864012][T16529] do_syscall_64+0x10b/0xf80 [ 297.865630][T16529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.868100][T16529] [ 297.868100][T16529] -> #0 (set->srcu){.+.+}-{0:0}: [ 297.870922][T16529] __lock_acquire+0x14b8/0x2630 [ 297.873130][T16529] lock_sync+0x9d/0x110 [ 297.875018][T16529] __synchronize_srcu+0xa2/0x300 [ 297.877252][T16529] blk_mq_quiesce_queue+0x149/0x1c0 [ 297.879713][T16529] elevator_switch+0x353/0x7e0 [ 297.882001][T16529] elevator_change+0x352/0x530 [ 297.884227][T16529] elevator_set_none+0x92/0xf0 [ 297.886421][T16529] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 297.888909][T16529] nbd_start_device+0x1a6/0xbd0 [ 297.891136][T16529] nbd_genl_connect+0xff2/0x1a40 [ 297.893382][T16529] genl_family_rcv_msg_doit+0x214/0x300 [ 297.895850][T16529] genl_rcv_msg+0x560/0x800 [ 297.897894][T16529] netlink_rcv_skb+0x159/0x420 [ 297.900129][T16529] genl_rcv+0x28/0x40 [ 297.901994][T16529] netlink_unicast+0x585/0x850 [ 297.904171][T16529] netlink_sendmsg+0x8b0/0xda0 [ 297.906405][T16529] ____sys_sendmsg+0x9e1/0xb70 [ 297.908499][T16529] ___sys_sendmsg+0x190/0x1e0 [ 297.910463][T16529] __sys_sendmsg+0x170/0x220 [ 297.912542][T16529] __do_fast_syscall_32+0xe7/0x950 [ 297.914912][T16529] do_fast_syscall_32+0x32/0x70 [ 297.917151][T16529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.919985][T16529] [ 297.919985][T16529] other info that might help us debug this: [ 297.919985][T16529] [ 297.924137][T16529] Chain exists of: [ 297.924137][T16529] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 297.924137][T16529] [ 297.929653][T16529] Possible unsafe locking scenario: [ 297.929653][T16529] [ 297.932762][T16529] CPU0 CPU1 [ 297.934955][T16529] ---- ---- [ 297.937068][T16529] lock(&q->elevator_lock); [ 297.938584][T16529] lock(&q->q_usage_counter(io)#50); [ 297.941170][T16529] lock(&q->elevator_lock); [ 297.943917][T16529] sync(set->srcu); [ 297.945525][T16529] [ 297.945525][T16529] *** DEADLOCK *** [ 297.945525][T16529] [ 297.948816][T16529] 7 locks held by syz.2.4626/16529: [ 297.950995][T16529] #0: ffffffff906bea48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.954435][T16529] #1: ffffffff906beb00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 297.958220][T16529] #2: ffff88801c7329c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x9d/0x15f0 [ 297.962992][T16529] #3: ffff88801c7328d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb0/0x15f0 [ 297.967533][T16529] #4: ffff8880260eb840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 297.972329][T16529] #5: ffff8880260eb878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 297.977191][T16529] #6: ffff8880260ebd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 297.980904][T16529] [ 297.980904][T16529] stack backtrace: [ 297.982769][T16529] CPU: 2 UID: 0 PID: 16529 Comm: syz.2.4626 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.982797][T16529] Tainted: [L]=SOFTLOCKUP [ 297.982803][T16529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.982814][T16529] Call Trace: [ 297.982823][T16529] [ 297.982832][T16529] dump_stack_lvl+0x100/0x190 [ 297.982858][T16529] print_circular_bug.cold+0x178/0x1c7 [ 297.982889][T16529] check_noncircular+0x146/0x160 [ 297.982921][T16529] __lock_acquire+0x14b8/0x2630 [ 297.982943][T16529] ? __synchronize_srcu+0x1c/0x300 [ 297.982962][T16529] lock_sync+0x9d/0x110 [ 297.982978][T16529] ? __synchronize_srcu+0x1c/0x300 [ 297.982998][T16529] __synchronize_srcu+0xa2/0x300 [ 297.983016][T16529] ? __pfx___synchronize_srcu+0x10/0x10 [ 297.983043][T16529] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 297.983073][T16529] ? synchronize_srcu+0xa8/0x380 [ 297.983115][T16529] blk_mq_quiesce_queue+0x149/0x1c0 [ 297.983145][T16529] elevator_switch+0x353/0x7e0 [ 297.983163][T16529] elevator_change+0x352/0x530 [ 297.983178][T16529] elevator_set_none+0x92/0xf0 [ 297.983196][T16529] ? __pfx_elevator_set_none+0x10/0x10 [ 297.983214][T16529] ? blk_mq_unregister_hctx.part.0+0x1ba/0x230 [ 297.983238][T16529] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 297.983262][T16529] ? nbd_start_device+0xc7/0xbd0 [ 297.983288][T16529] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 297.983318][T16529] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 297.983344][T16529] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 297.983366][T16529] nbd_start_device+0x1a6/0xbd0 [ 297.983391][T16529] nbd_genl_connect+0xff2/0x1a40 [ 297.983414][T16529] ? __pfx_nbd_genl_connect+0x10/0x10 [ 297.983435][T16529] ? __nla_parse+0x40/0x60 [ 297.983462][T16529] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 297.983492][T16529] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 297.983524][T16529] genl_family_rcv_msg_doit+0x214/0x300 [ 297.983542][T16529] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 297.983560][T16529] ? genl_get_cmd+0x3e7/0x760 [ 297.983589][T16529] ? __alloc_skb+0x185/0x710 [ 297.983608][T16529] ? netlink_alloc_large_skb+0x69/0x150 [ 297.983634][T16529] ? __radix_tree_lookup+0x217/0x2b0 [ 297.983662][T16529] genl_rcv_msg+0x560/0x800 [ 297.983680][T16529] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.983697][T16529] ? __pfx_nbd_genl_connect+0x10/0x10 [ 297.983721][T16529] ? __lock_acquire+0x4a5/0x2630 [ 297.983738][T16529] netlink_rcv_skb+0x159/0x420 [ 297.983763][T16529] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.983780][T16529] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.983811][T16529] ? netlink_deliver_tap+0x1ae/0xcc0 [ 297.983837][T16529] genl_rcv+0x28/0x40 [ 297.983863][T16529] netlink_unicast+0x585/0x850 [ 297.983890][T16529] ? __pfx_netlink_unicast+0x10/0x10 [ 297.983918][T16529] netlink_sendmsg+0x8b0/0xda0 [ 297.983945][T16529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.983971][T16529] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 297.984001][T16529] ____sys_sendmsg+0x9e1/0xb70 [ 297.984022][T16529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.984054][T16529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.984080][T16529] ? try_to_wake_up+0x5f6/0x1900 [ 297.984105][T16529] ___sys_sendmsg+0x190/0x1e0 [ 297.984131][T16529] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.984156][T16529] ? futex_private_hash_put+0x107/0x1c0 [ 297.984179][T16529] ? find_held_lock+0x2b/0x80 [ 297.984209][T16529] __sys_sendmsg+0x170/0x220 [ 297.984228][T16529] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.984254][T16529] ? rcu_is_watching+0x12/0xc0 [ 297.984276][T16529] __do_fast_syscall_32+0xe7/0x950 [ 297.984294][T16529] ? lockdep_hardirqs_on+0x78/0x100 [ 297.984320][T16529] do_fast_syscall_32+0x32/0x70 [ 297.984337][T16529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.984359][T16529] RIP: 0023:0xf7f88fcc [ 297.984375][T16529] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 297.984393][T16529] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 297.984411][T16529] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001ac0 [ 297.984423][T16529] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.984433][T16529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.984443][T16529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.984453][T16529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.984469][T16529] [ 298.528284][ T59] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.532939][ T59] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 298.694745][ T59] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.698206][ T59] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.754309][ T59] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.758530][ T59] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.843547][ T59] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.846591][ T59] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.931761][ T59] bridge_slave_1: left promiscuous mode [ 298.933680][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.936832][ T59] bridge_slave_0: left allmulticast mode [ 298.938762][ T59] bridge_slave_0: left promiscuous mode [ 298.940964][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.066384][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.070434][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.073965][ T59] bond0 (unregistering): Released all slaves [ 299.195782][ T5456] 8021q: adding VLAN 0 to HW filter on device eth6 [ 299.292633][ T5456] 8021q: adding VLAN 0 to HW filter on device eth7 [ 299.324831][ T59] hsr_slave_0: left promiscuous mode [ 299.326896][ T59] hsr_slave_1: left promiscuous mode [ 299.328840][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.331791][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.334935][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.337351][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.342972][ T59] veth1_macvtap: left promiscuous mode [ 299.344819][ T59] veth0_macvtap: left promiscuous mode [ 299.346555][ T59] veth1_vlan: left promiscuous mode [ 299.348388][ T59] veth0_vlan: left promiscuous mode [ 299.452602][ T59] team0 (unregistering): Port device team_slave_1 removed [ 299.457615][ T59] team0 (unregistering): Port device team_slave_0 removed [ 299.515503][ T5456] 8021q: adding VLAN 0 to HW filter on device eth8 [ 299.618851][ T5456] 8021q: adding VLAN 0 to HW filter on device eth9 [ 300.054967][ T59] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.059132][ T59] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.114873][ T59] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.119006][ T59] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.184267][ T59] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.187822][ T59] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.254683][ T59] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.258379][ T59] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.348838][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.412410][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.447759][ T5456] 8021q: adding VLAN 0 to HW filter on device eth10 [ 300.473252][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.531327][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.557826][ T5456] 8021q: adding VLAN 0 to HW filter on device eth11 [ 300.640988][ T59] bridge_slave_1: left allmulticast mode [ 300.643579][ T59] bridge_slave_1: left promiscuous mode [ 300.645861][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.650157][ T59] bridge_slave_0: left allmulticast mode [ 300.652598][ T59] bridge_slave_0: left promiscuous mode [ 300.654950][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.665258][ T59] bridge_slave_1: left allmulticast mode [ 300.667519][ T59] bridge_slave_1: left promiscuous mode [ 300.669973][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.675995][ T59] bridge_slave_0: left allmulticast mode [ 300.678382][ T59] bridge_slave_0: left promiscuous mode [ 300.680687][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.686045][ T59] batman_adv: batadv0: Interface deactivated: gretap2 [ 300.801846][ T59] batman_adv: batadv0: Removing interface: gretap2 [ 300.865475][ T59] bond1 (unregistering): Released all slaves [ 300.870908][ T59] bond2 (unregistering): Released all slaves [ 301.072627][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.076531][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.080072][ T59] bond0 (unregistering): Released all slaves [ 301.083835][ T5456] 8021q: adding VLAN 0 to HW filter on device eth12 [ 301.187247][ T59] tipc: Disabling bearer [ 301.189491][ T59] tipc: Left network mode [ 301.206890][ T59] tipc: Disabling bearer [ 301.209349][ T59] tipc: Left network mode [ 301.209881][ T5456] 8021q: adding VLAN 0 to HW filter on device eth13 [ 301.373473][ T5456] 8021q: adding VLAN 0 to HW filter on device eth14 [ 301.416411][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.418635][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.421306][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.423604][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.427501][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.429654][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.432423][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.435086][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.440734][ T59] veth0_macvtap: left promiscuous mode [ 301.443070][ T59] veth0_vlan: left promiscuous mode [ 301.446093][ T59] veth1_macvtap: left promiscuous mode [ 301.448407][ T59] veth0_macvtap: left promiscuous mode [ 301.450864][ T59] veth1_vlan: left promiscuous mode [ 301.453089][ T59] veth0_vlan: left promiscuous mode [ 301.654262][ T59] team0 (unregistering): Port device team_slave_1 removed [ 301.666692][ T59] team0 (unregistering): Port device team_slave_0 removed [ 301.791815][ T5456] 8021q: adding VLAN 0 to HW filter on device eth15 [ 301.928981][ T5456] 8021q: adding VLAN 0 to HW filter on device eth16 [ 302.033139][ T5456] 8021q: adding VLAN 0 to HW filter on device eth17 [ 302.411356][ T59] IPVS: stop unused estimator thread 0... [ 305.606467][ T5153] udevd[5153]: worker [5747] /devices/virtual/block/nbd0 timeout; kill it [ 305.609223][ T5153] udevd[5153]: seq 12559 '/devices/virtual/block/nbd0' killed