last executing test programs: 37.532345279s ago: executing program 2 (id=887): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x50, r2, 0x852dd6c070cd7e4d, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x50}, 0x4, 0x700000002000000}, 0x0) 37.400386181s ago: executing program 2 (id=888): ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_overlay={0x9, 0xa, 0x4, 0x40, 0x2, {0x0, 0x2710}, {0x3, 0x0, 0x8, 0x1, 0x9, 0x1, "a3df36fd"}, 0x1, 0x3, {0x0}, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000"]) 37.149454325s ago: executing program 2 (id=892): syz_usb_connect(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 33.756908608s ago: executing program 2 (id=908): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x13e) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) 33.543601721s ago: executing program 2 (id=911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 32.787707513s ago: executing program 2 (id=913): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 32.268339931s ago: executing program 32 (id=913): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6.010624657s ago: executing program 4 (id=1126): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x14}], 0x1, 0x0, 0x0, 0x0) 4.204662465s ago: executing program 0 (id=1132): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c0"], 0x398}}, 0x0) 4.024440398s ago: executing program 0 (id=1133): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 3.837166391s ago: executing program 0 (id=1136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) 3.670472933s ago: executing program 3 (id=1137): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x50, r1, 0x852dd6c070cd7e4d, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x50}, 0x4, 0x700000002000000}, 0x0) 3.611675064s ago: executing program 3 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 3.584068215s ago: executing program 0 (id=1139): syz_usb_connect(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 3.462198287s ago: executing program 3 (id=1140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 3.157676172s ago: executing program 3 (id=1142): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x13e) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x10000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) 2.982785204s ago: executing program 3 (id=1144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dy']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/192, 0xc0) 2.658554869s ago: executing program 4 (id=1145): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 1.918479941s ago: executing program 4 (id=1148): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mount$9p_xen(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x1002000, &(0x7f0000000340)={'trans=xen,', {[{}, {@cache_fscache}], [{@fowner_eq}]}}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x67) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) gettid() timer_create(0x9, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="18020000000000000000000000008000850000006100000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r5, &(0x7f0000000000)=0xfe8e, 0x12) accept4$rose(r5, 0x0, &(0x7f0000000100), 0x80800) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x100}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f0000006680)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/174) 1.718555774s ago: executing program 3 (id=1151): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c0"], 0x398}}, 0x0) 1.623275315s ago: executing program 4 (id=1152): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x13e) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x10000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) 1.272747301s ago: executing program 33 (id=1151): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c0"], 0x398}}, 0x0) 1.247423501s ago: executing program 4 (id=1155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r3, &(0x7f0000000100)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) shutdown(r3, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r4 = userfaultfd(0x801) r5 = socket(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) setreuid(0xee01, 0xee01) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) 1.176847962s ago: executing program 1 (id=1156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x6) 1.046308384s ago: executing program 1 (id=1157): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 874.577347ms ago: executing program 4 (id=1158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) 862.930947ms ago: executing program 1 (id=1159): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dy']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/192, 0xc0) 432.312914ms ago: executing program 34 (id=1158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) 393.933444ms ago: executing program 1 (id=1161): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="01000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 240.530647ms ago: executing program 0 (id=1162): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x13e) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x10000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) 231.265807ms ago: executing program 1 (id=1163): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x50, r1, 0x852dd6c070cd7e4d, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x50}, 0x4, 0x700000002000000}, 0x0) 2.74418ms ago: executing program 0 (id=1164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x6) 0s ago: executing program 1 (id=1165): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r3, &(0x7f0000000100)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) shutdown(r3, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r4 = userfaultfd(0x801) r5 = socket(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) setreuid(0xee01, 0xee01) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) kernel console output (not intermixed with test programs): ength: 249 > 3 [ 86.408651][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.416639][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.418220][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.425104][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.432621][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.446173][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.455261][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.462778][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.470085][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.479027][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.487466][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.492255][ T5088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.496102][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.503852][ T5088] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.511852][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.517568][ T5088] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.530268][ T5088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.117937][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 87.176570][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 87.236301][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 87.328237][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 87.341144][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.349945][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.357536][ T5773] bridge_slave_0: entered allmulticast mode [ 87.365226][ T5773] bridge_slave_0: entered promiscuous mode [ 87.398579][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.406322][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.414020][ T5773] bridge_slave_1: entered allmulticast mode [ 87.421467][ T5773] bridge_slave_1: entered promiscuous mode [ 87.490727][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.541831][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.690691][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.698134][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.705500][ T5772] bridge_slave_0: entered allmulticast mode [ 87.713019][ T5772] bridge_slave_0: entered promiscuous mode [ 87.736722][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.744166][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.751370][ T5770] bridge_slave_0: entered allmulticast mode [ 87.758871][ T5770] bridge_slave_0: entered promiscuous mode [ 87.768194][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.775433][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.782633][ T5770] bridge_slave_1: entered allmulticast mode [ 87.790060][ T5770] bridge_slave_1: entered promiscuous mode [ 87.800232][ T5773] team0: Port device team_slave_0 added [ 87.807169][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.816150][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.823407][ T5772] bridge_slave_1: entered allmulticast mode [ 87.830978][ T5772] bridge_slave_1: entered promiscuous mode [ 87.864575][ T5773] team0: Port device team_slave_1 added [ 87.910770][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.949420][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.958759][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.966618][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.974476][ T5771] bridge_slave_0: entered allmulticast mode [ 87.981459][ T5771] bridge_slave_0: entered promiscuous mode [ 87.991242][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.020395][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.043531][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.050772][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.058306][ T5771] bridge_slave_1: entered allmulticast mode [ 88.066876][ T5771] bridge_slave_1: entered promiscuous mode [ 88.098614][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.106067][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.132307][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.173620][ T5770] team0: Port device team_slave_0 added [ 88.181096][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.188800][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.215136][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.239496][ T5772] team0: Port device team_slave_0 added [ 88.260868][ T5770] team0: Port device team_slave_1 added [ 88.294805][ T5772] team0: Port device team_slave_1 added [ 88.301328][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.308380][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.334488][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.348691][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.360878][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.398323][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.405516][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.431973][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.488201][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.495400][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.521902][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.554847][ T5787] Bluetooth: hci0: command tx timeout [ 88.554945][ T5088] Bluetooth: hci3: command tx timeout [ 88.560629][ T5787] Bluetooth: hci2: command tx timeout [ 88.566137][ T5777] Bluetooth: hci1: command tx timeout [ 88.585547][ T5773] hsr_slave_0: entered promiscuous mode [ 88.592245][ T5773] hsr_slave_1: entered promiscuous mode [ 88.602750][ T5771] team0: Port device team_slave_0 added [ 88.609645][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.616777][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.643032][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.685763][ T5770] hsr_slave_0: entered promiscuous mode [ 88.692339][ T5770] hsr_slave_1: entered promiscuous mode [ 88.698790][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.707209][ T5770] Cannot create hsr debugfs directory [ 88.716189][ T5771] team0: Port device team_slave_1 added [ 88.748571][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.755690][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.781775][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.827461][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.834890][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.861459][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.980576][ T5772] hsr_slave_0: entered promiscuous mode [ 88.987571][ T5772] hsr_slave_1: entered promiscuous mode [ 88.994012][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.001602][ T5772] Cannot create hsr debugfs directory [ 89.087300][ T5771] hsr_slave_0: entered promiscuous mode [ 89.093988][ T5771] hsr_slave_1: entered promiscuous mode [ 89.100302][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.108641][ T5771] Cannot create hsr debugfs directory [ 89.422037][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.435586][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.450026][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.460748][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.535380][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.547095][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.565736][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.576435][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.650794][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.665205][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.679468][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.690582][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.779908][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.790584][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.802723][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.833344][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.899106][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.976056][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.991263][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.998698][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.035774][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.042905][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.068639][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.138677][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.162832][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.170013][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.182719][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.209143][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.216371][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.231275][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.297585][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.317901][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.325136][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.342712][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.367328][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.374548][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.389170][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.396390][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.428196][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.435433][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.635866][ T5088] Bluetooth: hci0: command tx timeout [ 90.635885][ T5787] Bluetooth: hci1: command tx timeout [ 90.635920][ T5787] Bluetooth: hci3: command tx timeout [ 90.641436][ T5777] Bluetooth: hci2: command tx timeout [ 90.859914][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.009964][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.022666][ T5770] veth0_vlan: entered promiscuous mode [ 91.054766][ T5770] veth1_vlan: entered promiscuous mode [ 91.077554][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.169264][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.179807][ T5771] veth0_vlan: entered promiscuous mode [ 91.210336][ T5771] veth1_vlan: entered promiscuous mode [ 91.231484][ T5770] veth0_macvtap: entered promiscuous mode [ 91.260873][ T5773] veth0_vlan: entered promiscuous mode [ 91.286017][ T5770] veth1_macvtap: entered promiscuous mode [ 91.311252][ T5773] veth1_vlan: entered promiscuous mode [ 91.330003][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.369517][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.398810][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.409559][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.418775][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.427830][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.449644][ T5772] veth0_vlan: entered promiscuous mode [ 91.460153][ T5771] veth0_macvtap: entered promiscuous mode [ 91.485765][ T5773] veth0_macvtap: entered promiscuous mode [ 91.495505][ T5771] veth1_macvtap: entered promiscuous mode [ 91.520905][ T5773] veth1_macvtap: entered promiscuous mode [ 91.537248][ T5772] veth1_vlan: entered promiscuous mode [ 91.582184][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.598356][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.615849][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.649869][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.660619][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.670714][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.682456][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.695440][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.722578][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.735017][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.747864][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.763579][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.773207][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.782299][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.791304][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.828419][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.839679][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.851603][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.862293][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.877308][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.919096][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.938479][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.952380][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.962723][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.971768][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.981175][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.011213][ T5772] veth0_macvtap: entered promiscuous mode [ 92.065058][ T5772] veth1_macvtap: entered promiscuous mode [ 92.101860][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.111502][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.122783][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.132893][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.228232][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.253470][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.262350][ T55] cfg80211: failed to load regulatory.db [ 92.268617][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.285432][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.303967][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.315994][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.327264][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.337986][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.350125][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.413149][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.441861][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.454506][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.465150][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.475770][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.494230][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.511624][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.525210][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.535843][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.571474][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.590449][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.600757][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.610389][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.714821][ T5787] Bluetooth: hci0: command tx timeout [ 92.720380][ T50] Bluetooth: hci1: command tx timeout [ 92.727983][ T50] Bluetooth: hci3: command tx timeout [ 92.733567][ T5777] Bluetooth: hci2: command tx timeout [ 92.736698][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.774547][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.779695][ T5846] process 'syz.1.2' launched './file1' with NULL argv: empty string added [ 92.785606][ T5848] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.926341][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.974832][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.115099][ T5853] syz.0.1[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.140807][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.161885][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.248952][ T5856] nbd3: detected capacity change from 0 to 1073741828 [ 93.302447][ T54] block nbd3: Send control failed (result -89) [ 93.309694][ T54] block nbd3: Request send failed, requeueing [ 93.321913][ T5777] block nbd3: Receive control failed (result -32) [ 93.322379][ T54] block nbd3: Dead connection, failed to find a fallback [ 93.336785][ T54] block nbd3: shutting down sockets [ 93.342863][ T54] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.352745][ T54] Buffer I/O error on dev nbd3, logical block 0, async page read [ 93.362713][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.372267][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 93.381707][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.391146][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 93.399962][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.411973][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 93.421263][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.433140][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 93.444097][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.453349][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 93.461547][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.471239][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 93.479423][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.490717][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 93.498914][ T5774] ldm_validate_partition_table(): Disk read failed. [ 93.506532][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.516876][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 93.528863][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.538318][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 93.547483][ T5774] Dev nbd3: unable to read RDB block 0 [ 93.573444][ T5774] nbd3: unable to read partition table [ 93.649418][ T5859] ldm_validate_partition_table(): Disk read failed. [ 93.659350][ T5859] Dev nbd3: unable to read RDB block 0 [ 93.668279][ T5859] nbd3: unable to read partition table [ 93.685652][ T5774] ldm_validate_partition_table(): Disk read failed. [ 93.692983][ T5774] Dev nbd3: unable to read RDB block 0 [ 93.701519][ T5774] nbd3: unable to read partition table [ 93.909882][ T5863] loop2: detected capacity change from 0 to 2048 [ 94.101308][ T5864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.316714][ T5863] loop2: p1 < > p3 [ 94.371189][ T5863] loop2: p3 size 134217728 extends beyond EOD, truncated [ 94.615627][ T5774] udevd[5774]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 94.631341][ T5784] udevd[5784]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 94.643453][ T5866] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.679903][ T5784] udevd[5784]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 94.694421][ T5774] udevd[5774]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 94.764537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.794695][ T5787] Bluetooth: hci1: command tx timeout [ 94.800519][ T50] Bluetooth: hci0: command tx timeout [ 94.800563][ T5088] Bluetooth: hci3: command tx timeout [ 94.806932][ T5777] Bluetooth: hci2: command tx timeout [ 95.356087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.735177][ T5853] loop0: detected capacity change from 0 to 32768 [ 95.970823][ T5853] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 96.019121][ T5882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 96.096116][ T5853] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR [ 96.099631][ T5853] XFS (loop0): log mount failed [ 96.324892][ T5875] loop3: detected capacity change from 0 to 32768 [ 96.504401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 96.526409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 96.573679][ T5875] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 96.597933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.606979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.637122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 96.674222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.683033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.700283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.426240][ T5875] XFS (loop3): Starting recovery (logdev: internal) [ 97.493902][ T5875] XFS (loop3): Ending recovery (logdev: internal) [ 97.734542][ T5770] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 97.860844][ T5897] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.894229][ T5897] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.968493][ T5897] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.009374][ T5897] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.025657][ T5897] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.081859][ T5897] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.096476][ T5897] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.111448][ T5897] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.126706][ T5904] fuse: Bad value for 'fd' [ 98.138091][ T5897] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.158473][ T5897] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.186406][ T5897] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.207191][ T5897] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.697292][ T5918] loop3: detected capacity change from 0 to 128 [ 99.833960][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.867255][ T5922] loop1: detected capacity change from 0 to 2048 [ 99.891702][ T5918] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.938308][ T5918] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.340761][ T5930] netlink: 68 bytes leftover after parsing attributes in process `syz.2.20'. [ 100.389400][ T5930] Zero length message leads to an empty skb [ 100.400546][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.406938][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.413263][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 100.802625][ T5922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.817276][ T5922] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.867771][ T5929] netlink: 'syz.0.22': attribute type 2 has an invalid length. [ 100.876707][ T5929] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.22'. [ 101.913958][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.474986][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 102.481195][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.487388][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.568110][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.811084][ T5939] loop0: detected capacity change from 0 to 32768 [ 103.903735][ T5939] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 103.994002][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.693699][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.700117][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 104.707266][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.907782][ T5939] XFS (loop0): Starting recovery (logdev: internal) [ 104.987833][ T5939] XFS (loop0): Ending recovery (logdev: internal) [ 105.190751][ T5939] syz.0.25 (5939) used greatest stack depth: 20208 bytes left [ 105.210220][ T5771] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 105.379950][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.608080][ T5969] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.615085][ T5969] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.621751][ T5969] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.628942][ T5969] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.874166][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.678319][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 107.684736][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.689173][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.939939][ T6000] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.946313][ T6000] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.952912][ T6000] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.959211][ T6000] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.097088][ T6020] input: syz0 as /devices/virtual/input/input5 [ 108.805156][ T6041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.060324][ T6043] dummy0: entered promiscuous mode [ 109.417565][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.003912][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 110.010182][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.016820][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.656522][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 112.074058][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 112.336383][ T6104] loop3: detected capacity change from 0 to 2048 [ 112.609346][ T6104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.847692][ T6104] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.344614][ T6113] fuse: Unknown parameter 'user_i00000000000000000000' [ 113.514448][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 114.160100][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 116.253854][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 116.546369][ T5842] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.616036][ T6152] block nbd1: shutting down sockets [ 116.634247][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.795525][ T5842] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.838952][ T5842] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 116.966613][ T5842] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.090285][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.086630][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.93'. [ 120.279296][ T6191] loop2: detected capacity change from 0 to 2048 [ 120.465199][ T6191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.511005][ T6191] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.813869][ T5842] usb 1-1: can't set config #27, error -71 [ 120.864450][ T5842] usb 1-1: USB disconnect, device number 2 [ 121.040244][ T6208] netlink: 'syz.1.97': attribute type 10 has an invalid length. [ 121.183305][ T6208] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 121.542877][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 124.015457][ T6226] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.376892][ T6226] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.425181][ T6226] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.431727][ T6226] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.461482][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.952820][ T6241] loop3: detected capacity change from 0 to 32768 [ 125.039707][ T6241] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 125.360237][ T6248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.373387][ T6248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.386779][ T6248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.393406][ T6248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.677401][ T6241] XFS (loop3): Starting recovery (logdev: internal) [ 125.734561][ T6241] XFS (loop3): Ending recovery (logdev: internal) [ 126.170962][ T5770] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 126.519444][ T6264] netlink: 'syz.0.116': attribute type 10 has an invalid length. [ 127.103366][ T6264] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.144134][ T6264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.272934][ T6273] fuse: Unknown parameter 'user_id00000000000000000000' [ 127.280046][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.434585][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 127.434606][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.440834][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.524734][ T6282] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.534349][ T6282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.574114][ T6282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.594264][ T6282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.926668][ T6303] fuse: Bad value for 'fd' [ 130.009607][ T6310] netlink: 'syz.0.130': attribute type 10 has an invalid length. [ 130.070441][ T6308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.293956][ T5762] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 130.553899][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.560129][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.634029][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.640188][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 131.375883][ T5762] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.404004][ T5762] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 131.724142][ T5762] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.743366][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.765207][ T6307] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.789533][ T5762] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 131.963960][ T6334] loop0: detected capacity change from 0 to 2048 [ 131.984837][ T3364] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.042309][ T6334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.055054][ T6334] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.446647][ T3364] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.460653][ T3364] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 132.471239][ T3364] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.584466][ T3364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.667257][ T6332] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 132.714143][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 132.792289][ T3364] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 132.938725][ T5762] usb 4-1: USB disconnect, device number 2 [ 133.200283][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.498082][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.657097][ T6350] loop0: detected capacity change from 0 to 128 [ 133.677076][ T6350] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.696757][ T5824] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.895084][ T6350] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.030452][ T6353] loop3: detected capacity change from 0 to 2048 [ 134.068660][ T6353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.100205][ T6353] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.182035][ T5824] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.258797][ T5824] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 134.351740][ T5824] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.440641][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.542150][ T6348] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.572982][ T5824] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 134.794149][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 135.486509][ T5775] usb 3-1: USB disconnect, device number 2 [ 136.892949][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 136.961788][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.992668][ T6366] netlink: 'syz.2.143': attribute type 10 has an invalid length. [ 137.135001][ T6366] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 137.147055][ T6365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.157085][ T5775] usb 2-1: USB disconnect, device number 2 [ 137.538412][ T6371] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.559538][ T6371] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.604128][ T6371] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.622892][ T6371] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.699780][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.000189][ T6382] loop0: detected capacity change from 0 to 2048 [ 138.043225][ T6382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.065391][ T6382] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.454623][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.594002][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.674122][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 139.680448][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.482436][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.587410][ T6402] loop3: detected capacity change from 0 to 2048 [ 141.757040][ T6402] loop3: p1 < > p3 [ 141.772597][ T6402] loop3: p3 size 134217728 extends beyond EOD, truncated [ 142.454848][ T6406] loop0: detected capacity change from 0 to 128 [ 142.527825][ T6406] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.540761][ T6410] netlink: 'syz.1.157': attribute type 10 has an invalid length. [ 142.562130][ T6409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.572283][ T6406] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.872525][ T6398] loop2: detected capacity change from 0 to 32768 [ 142.906757][ T6398] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 143.008323][ T6398] XFS (loop2): Starting recovery (logdev: internal) [ 143.049786][ T6398] XFS (loop2): Ending recovery (logdev: internal) [ 143.116729][ T5772] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 143.654128][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.432305][ T6438] loop3: detected capacity change from 0 to 2048 [ 145.542035][ T6438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.608929][ T6438] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.687796][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.800306][ T6451] loop2: detected capacity change from 0 to 2048 [ 146.866314][ T6451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.894666][ T6451] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.456451][ T6464] loop0: detected capacity change from 0 to 32768 [ 148.576067][ T6464] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 148.618965][ T3364] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 148.680839][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.787257][ T6464] XFS (loop0): Starting recovery (logdev: internal) [ 148.856568][ T3364] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.867893][ T6464] XFS (loop0): Ending recovery (logdev: internal) [ 148.888370][ T3364] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 148.914066][ T3364] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.947595][ T3364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.000331][ T6463] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.030529][ T3364] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 149.094032][ T5771] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 149.213593][ T6479] loop1: detected capacity change from 0 to 2048 [ 149.388398][ T6479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.422792][ T6479] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.523195][ T6481] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.526125][ T3364] usb 4-1: USB disconnect, device number 3 [ 149.558143][ T6481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.576302][ T6481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.687801][ T6481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.462221][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.727058][ T6503] fuse: Unknown parameter 'fd0x0000000000000003' [ 150.746838][ T6500] loop2: detected capacity change from 0 to 2048 [ 150.838647][ T6500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.906131][ T6500] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.125787][ T6509] loop1: detected capacity change from 0 to 32768 [ 151.253685][ T6509] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 151.594067][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.600277][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.895275][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 151.964655][ T6509] XFS (loop1): Starting recovery (logdev: internal) [ 151.992794][ T6509] XFS (loop1): Ending recovery (logdev: internal) [ 152.128617][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.163688][ T5773] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 152.312512][ T6524] loop0: detected capacity change from 0 to 2048 [ 152.370260][ T6524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.422063][ T6524] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.454274][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 152.953964][ T6505] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 153.039825][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.285839][ T6543] netlink: 'syz.2.195': attribute type 10 has an invalid length. [ 153.317438][ T6542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.724040][ T6505] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.730788][ T6505] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.738777][ T6505] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.884640][ T6545] block nbd3: shutting down sockets [ 153.967675][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.016005][ T6548] loop2: detected capacity change from 0 to 2048 [ 154.087968][ T6548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.106633][ T6548] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.796675][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.200'. [ 155.038521][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.047214][ T6561] nbd1: detected capacity change from 0 to 1073741828 [ 155.170760][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.182936][ T54] block nbd1: Send control failed (result -89) [ 155.189932][ T54] block nbd1: Request send failed, requeueing [ 155.196850][ T50] block nbd1: Receive control failed (result -32) [ 155.196905][ T54] block nbd1: Dead connection, failed to find a fallback [ 155.196924][ T54] block nbd1: shutting down sockets [ 155.224509][ T54] blk_print_req_error: 40 callbacks suppressed [ 155.224526][ T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.241037][ T54] buffer_io_error: 39 callbacks suppressed [ 155.241051][ T54] Buffer I/O error on dev nbd1, logical block 0, async page read [ 155.255003][ T5871] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.264219][ T5871] Buffer I/O error on dev nbd1, logical block 0, async page read [ 155.272140][ T5871] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.284247][ T5871] Buffer I/O error on dev nbd1, logical block 0, async page read [ 155.292233][ T5871] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.301436][ T5871] Buffer I/O error on dev nbd1, logical block 0, async page read [ 155.309384][ T5871] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.318530][ T5871] Buffer I/O error on dev nbd1, logical block 0, async page read [ 155.326487][ T5871] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.335632][ T5871] Buffer I/O error on dev nbd1, logical block 0, async page read [ 155.343529][ T5871] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.352628][ T5871] Buffer I/O error on dev nbd1, logical block 0, async page read [ 155.360723][ T5871] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.369798][ T5871] Buffer I/O error on dev nbd1, logical block 0, async page read [ 155.377992][ T5774] ldm_validate_partition_table(): Disk read failed. [ 155.384932][ T5871] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.394440][ T5871] Buffer I/O error on dev nbd1, logical block 0, async page read [ 155.402328][ T5871] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.411417][ T5871] Buffer I/O error on dev nbd1, logical block 0, async page read [ 155.419518][ T5774] Dev nbd1: unable to read RDB block 0 [ 155.425658][ T5774] nbd1: unable to read partition table [ 155.436830][ T5774] ldm_validate_partition_table(): Disk read failed. [ 155.444089][ T5774] Dev nbd1: unable to read RDB block 0 [ 155.454464][ T5774] nbd1: unable to read partition table [ 155.754013][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 155.760208][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.844737][ T6576] netlink: 'syz.0.207': attribute type 10 has an invalid length. [ 155.853091][ T6575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.169890][ T6565] loop3: detected capacity change from 0 to 32768 [ 156.224071][ T6565] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 156.392786][ T6565] XFS (loop3): Starting recovery (logdev: internal) [ 156.492979][ T6565] XFS (loop3): Ending recovery (logdev: internal) [ 156.631389][ T5770] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 157.834193][ T6572] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 157.840705][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.846961][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 157.851566][ T6593] loop0: detected capacity change from 0 to 32768 [ 157.908860][ T6599] loop3: detected capacity change from 0 to 2048 [ 157.912067][ T6593] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 157.948440][ T6599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.981216][ T6599] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.033685][ T6593] XFS (loop0): Starting recovery (logdev: internal) [ 158.061831][ T6593] XFS (loop0): Ending recovery (logdev: internal) [ 158.263728][ T5771] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 158.651482][ T6572] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.673567][ T6572] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.703197][ T6572] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.924293][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.713929][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 160.720144][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.400349][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.483125][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'. [ 161.557501][ T6627] loop0: detected capacity change from 0 to 32768 [ 161.674066][ T5824] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 161.702960][ T6627] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 161.915191][ T6647] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.958665][ T6647] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.967695][ T6647] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.975436][ T6647] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.990847][ T5824] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.030216][ T5824] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.051345][ T6627] XFS (loop0): Starting recovery (logdev: internal) [ 162.079606][ T6627] XFS (loop0): Ending recovery (logdev: internal) [ 162.110382][ T5824] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.171177][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.228039][ T5771] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 162.284162][ T6643] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.373495][ T5824] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 162.766966][ T6666] nbd3: detected capacity change from 0 to 1073741828 [ 162.928632][ T5861] block nbd3: Send control failed (result -89) [ 162.935549][ T5861] block nbd3: Request send failed, requeueing [ 162.941959][ T5088] block nbd3: Receive control failed (result -32) [ 162.942038][ T5861] block nbd3: Dead connection, failed to find a fallback [ 162.956370][ T5861] block nbd3: shutting down sockets [ 162.962207][ T5861] blk_print_req_error: 24 callbacks suppressed [ 162.962221][ T5861] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.984761][ T5861] buffer_io_error: 23 callbacks suppressed [ 162.984776][ T5861] Buffer I/O error on dev nbd3, logical block 0, async page read [ 162.998915][ T5861] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.008209][ T5861] Buffer I/O error on dev nbd3, logical block 0, async page read [ 163.018565][ T5861] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.027955][ T5861] Buffer I/O error on dev nbd3, logical block 0, async page read [ 163.036241][ T5861] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.045447][ T5861] Buffer I/O error on dev nbd3, logical block 0, async page read [ 163.053444][ T5861] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.062889][ T5861] Buffer I/O error on dev nbd3, logical block 0, async page read [ 163.070897][ T5861] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.080034][ T5861] Buffer I/O error on dev nbd3, logical block 0, async page read [ 163.088193][ T5861] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.097378][ T5861] Buffer I/O error on dev nbd3, logical block 0, async page read [ 163.105393][ T5861] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.114712][ T5861] Buffer I/O error on dev nbd3, logical block 0, async page read [ 163.122500][ T5774] ldm_validate_partition_table(): Disk read failed. [ 163.130659][ T5861] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.139893][ T5861] Buffer I/O error on dev nbd3, logical block 0, async page read [ 163.148040][ T5861] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.157721][ T5861] Buffer I/O error on dev nbd3, logical block 0, async page read [ 163.167441][ T5774] Dev nbd3: unable to read RDB block 0 [ 163.174144][ T5774] nbd3: unable to read partition table [ 163.184714][ T5774] ldm_validate_partition_table(): Disk read failed. [ 163.192044][ T5774] Dev nbd3: unable to read RDB block 0 [ 163.199836][ T5774] nbd3: unable to read partition table [ 163.960059][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.044071][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 164.050334][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.056776][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.192708][ T6680] loop3: detected capacity change from 0 to 2048 [ 164.309319][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'. [ 164.345210][ T6680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.444618][ T6680] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.079821][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 166.846145][ T5824] usb 2-1: USB disconnect, device number 3 [ 166.908461][ T6710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.969616][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 167.143980][ T8] usb 3-1: device descriptor read/64, error -71 [ 167.426960][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.454022][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 167.593398][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.245'. [ 167.623942][ T8] usb 3-1: device descriptor read/64, error -71 [ 167.633939][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 167.764148][ T8] usb usb3-port1: attempt power cycle [ 167.880949][ T27] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.901732][ T27] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.938857][ T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.996211][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.163946][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 168.193903][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.758765][ T6715] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.787039][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 168.787417][ T8] usb 3-1: device descriptor read/8, error -71 [ 169.074514][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.134991][ T8] usb 3-1: device descriptor read/8, error -71 [ 169.268927][ T6740] loop3: detected capacity change from 0 to 2048 [ 169.294225][ T8] usb usb3-port1: unable to enumerate USB device [ 169.337151][ T6740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.356204][ T6740] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.603921][ T3364] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 169.836335][ T3364] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.869765][ T3364] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 169.902043][ T3364] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.912371][ T3364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.942396][ T6744] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 169.960561][ T6746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.982868][ T3364] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 170.234157][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 170.297755][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.621463][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'. [ 171.118258][ T5775] usb 2-1: USB disconnect, device number 4 [ 172.315761][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 172.337646][ T6768] loop2: detected capacity change from 0 to 2048 [ 172.418708][ T6768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.536754][ T6768] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.874409][ T5775] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.920432][ T6777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.104168][ T5775] usb 2-1: device descriptor read/64, error -71 [ 173.374002][ T5775] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 173.429166][ T5824] usb 1-1: USB disconnect, device number 3 [ 173.548043][ T5775] usb 2-1: device descriptor read/64, error -71 [ 173.623572][ T6780] loop0: detected capacity change from 0 to 2048 [ 173.674847][ T5775] usb usb2-port1: attempt power cycle [ 173.686373][ T6780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.699757][ T6780] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.167626][ T5775] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 174.264745][ T5775] usb 2-1: device descriptor read/8, error -71 [ 174.543874][ T5775] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 174.572818][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.607372][ T5775] usb 2-1: device descriptor read/8, error -71 [ 174.744366][ T5775] usb usb2-port1: unable to enumerate USB device [ 174.782396][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.683882][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 175.754005][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.760363][ T6782] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 176.632906][ T6782] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.654487][ T6782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.668085][ T6782] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.974220][ T5842] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 177.851742][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.869396][ T6822] loop1: detected capacity change from 0 to 2048 [ 177.978694][ T6823] loop2: detected capacity change from 0 to 2048 [ 178.010733][ T6822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.087831][ T6823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.104071][ T6822] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.143959][ T6823] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.691720][ T5842] usb 1-1: device descriptor read/all, error -71 [ 178.725858][ T6811] loop3: detected capacity change from 0 to 32768 [ 178.731099][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 178.736854][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.807791][ T6811] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 178.939410][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.215353][ T6846] binder: 6845:6846 ioctl c0306201 0 returned -14 [ 179.247854][ T6811] XFS (loop3): Starting recovery (logdev: internal) [ 179.318030][ T6811] XFS (loop3): Ending recovery (logdev: internal) [ 179.553902][ T3364] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 179.601076][ T5770] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 179.651667][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.744273][ T3364] usb 2-1: device descriptor read/64, error -71 [ 180.023986][ T3364] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 180.190316][ T3364] usb 2-1: device descriptor read/64, error -71 [ 180.331168][ T3364] usb usb2-port1: attempt power cycle [ 181.048084][ T3364] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 181.274542][ T3364] usb 2-1: device descriptor read/8, error -71 [ 181.314246][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 181.553914][ T3364] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 181.594633][ T3364] usb 2-1: device descriptor read/8, error -71 [ 181.734225][ T3364] usb usb2-port1: unable to enumerate USB device [ 182.167870][ T6879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.214042][ T6879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 182.223354][ T6879] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.255858][ T6879] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.574071][ T5842] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 182.585953][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 182.939050][ T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.961762][ T5842] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.983353][ T8] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 182.993640][ T5842] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 183.009170][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.021827][ T5842] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.037353][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.049895][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.062286][ T6889] loop0: detected capacity change from 0 to 2048 [ 183.078167][ T6884] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 183.087301][ T6886] block nbd1: shutting down sockets [ 183.097117][ T6882] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 183.190904][ T6889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.205794][ T8] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 183.212099][ T6889] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.791839][ T5842] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 183.994282][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.234049][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.234167][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.314071][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 184.987662][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.411379][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 186.599830][ T5842] usb 4-1: USB disconnect, device number 4 [ 186.943908][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 187.093961][ T27] usb 1-1: device descriptor read/64, error -71 [ 187.263950][ T6925] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.318844][ T5841] usb 3-1: USB disconnect, device number 7 [ 187.337358][ T6925] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.367754][ T6925] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.400453][ T6925] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.405237][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 187.574087][ T27] usb 1-1: device descriptor read/64, error -71 [ 187.694703][ T27] usb usb1-port1: attempt power cycle [ 188.114132][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 188.174321][ T27] usb 1-1: device descriptor read/8, error -71 [ 188.474820][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 188.480881][ T6934] loop2: detected capacity change from 0 to 2048 [ 188.536710][ T27] usb 1-1: device descriptor read/8, error -71 [ 188.559684][ T6934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.608907][ T6934] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.654106][ T27] usb usb1-port1: unable to enumerate USB device [ 189.033925][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.358361][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.445142][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.451298][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 190.392557][ T6951] netlink: 'syz.3.308': attribute type 2 has an invalid length. [ 190.442719][ T6951] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.308'. [ 191.107031][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 191.399317][ T27] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.416668][ T27] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.444471][ T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.464029][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.507057][ T6956] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.516501][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 191.555779][ T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 191.866463][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.881258][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 193.044645][ T8] usb 2-1: device descriptor read/64, error -71 [ 193.397125][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 193.593964][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 193.691025][ T8] usb 2-1: device descriptor read/64, error -71 [ 193.844979][ T8] usb usb2-port1: attempt power cycle [ 193.952709][ T5762] usb 1-1: USB disconnect, device number 10 [ 193.998224][ T6990] loop3: detected capacity change from 0 to 2048 [ 194.073137][ T6990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.145462][ T6990] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.387474][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 194.618323][ T8] usb 2-1: device descriptor read/8, error -71 [ 194.644359][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.814690][ T6996] block nbd0: shutting down sockets [ 194.934248][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 194.998162][ T8] usb 2-1: device descriptor read/8, error -71 [ 195.144206][ T8] usb usb2-port1: unable to enumerate USB device [ 195.622274][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.673953][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 197.024021][ T5762] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 197.193194][ T7036] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 197.207876][ T7036] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.214273][ T7036] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.234018][ T7036] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.311993][ T5762] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.428854][ T7040] loop3: detected capacity change from 0 to 2048 [ 197.509944][ T7040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.523787][ T5762] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 197.549196][ T5762] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 197.562742][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.574894][ T7040] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.609650][ T7030] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 197.702764][ T5762] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 198.673884][ T5762] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 198.884131][ T5762] usb 3-1: device descriptor read/64, error -71 [ 199.123954][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.168526][ T5762] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 199.284268][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.290548][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.296689][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 199.348168][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.374066][ T5762] usb 3-1: device descriptor read/64, error -71 [ 199.563632][ T5762] usb usb3-port1: attempt power cycle [ 200.070703][ T5762] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 200.166639][ T5762] usb 3-1: device descriptor read/8, error -71 [ 200.473943][ T5762] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 200.555055][ T5762] usb 3-1: device descriptor read/8, error -71 [ 200.694166][ T5762] usb usb3-port1: unable to enumerate USB device [ 200.795783][ T5821] usb 1-1: USB disconnect, device number 11 [ 200.929416][ T7065] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.952219][ T7065] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.965747][ T7065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.035906][ T7065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.111595][ T7063] loop3: detected capacity change from 0 to 32768 [ 201.151785][ T7063] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 201.455156][ T7063] XFS (loop3): Starting recovery (logdev: internal) [ 201.707087][ T7063] XFS (loop3): Ending recovery (logdev: internal) [ 201.993167][ T5770] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 202.873895][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.913415][ T7093] binder: 7092:7093 ioctl c0306201 0 returned -14 [ 202.961447][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.034015][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.134155][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 203.597346][ T5762] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 203.920798][ T5762] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 203.932847][ T5762] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 203.953191][ T5762] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 203.962846][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.010437][ T7107] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 204.017990][ T7107] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.029573][ T7107] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.036257][ T7107] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.197249][ T5821] usb 3-1: USB disconnect, device number 12 [ 204.351841][ T7115] loop3: detected capacity change from 0 to 32768 [ 204.381175][ T7115] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 204.457645][ T7115] XFS (loop3): Starting recovery (logdev: internal) [ 204.481849][ T7115] XFS (loop3): Ending recovery (logdev: internal) [ 204.572217][ T5770] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 204.871327][ T7127] binder: 7126:7127 ioctl c0306201 0 returned -14 [ 204.991004][ T7131] loop3: detected capacity change from 0 to 2048 [ 205.036239][ T7131] loop3: p1 < > p3 [ 205.045214][ T7131] loop3: p3 size 134217728 extends beyond EOD, truncated [ 205.914049][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.971882][ T5770] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 205.982653][ T5774] blk_print_req_error: 24 callbacks suppressed [ 205.982704][ T5774] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.983910][ T5784] I/O error, dev loop3, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.989683][ T5774] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.013177][ T5784] I/O error, dev loop3, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.202104][ T5774] buffer_io_error: 23 callbacks suppressed [ 206.202120][ T5774] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 206.203995][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 206.213858][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.216188][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.254402][ T5784] Buffer I/O error on dev loop3p3, logical block 8, async page read [ 206.273643][ T5774] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.283063][ T5784] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.300384][ T5774] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 206.308622][ T5784] Buffer I/O error on dev loop3p3, logical block 9, async page read [ 206.316800][ T5784] I/O error, dev loop3, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.327201][ T5784] Buffer I/O error on dev loop3p3, logical block 10, async page read [ 206.336171][ T5784] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.338337][ T5774] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.359917][ T5784] Buffer I/O error on dev loop3p3, logical block 11, async page read [ 206.368471][ T5774] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 206.383916][ T5784] I/O error, dev loop3, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.393381][ T5784] Buffer I/O error on dev loop3p3, logical block 12, async page read [ 206.401684][ T5784] Buffer I/O error on dev loop3p3, logical block 13, async page read [ 206.410923][ T5784] Buffer I/O error on dev loop3p3, logical block 14, async page read [ 206.668519][ T5774] udevd[5774]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 206.701626][ T5784] udevd[5784]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 207.088372][ T7157] loop2: detected capacity change from 0 to 2048 [ 207.115373][ T7157] loop2: p1 < > p3 [ 207.120728][ T7157] loop2: p3 size 134217728 extends beyond EOD, truncated [ 207.153864][ T5821] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 207.211341][ T7144] loop1: detected capacity change from 0 to 32768 [ 207.237679][ T7144] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 207.307437][ T7144] XFS (loop1): Starting recovery (logdev: internal) [ 207.339648][ T7144] XFS (loop1): Ending recovery (logdev: internal) [ 207.377748][ T5821] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 207.413813][ T5821] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 207.440628][ T5821] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.474910][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.499658][ T5773] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 207.932259][ T8] usb 1-1: USB disconnect, device number 12 [ 208.234012][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 209.369667][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.385'. [ 209.669479][ T7192] loop3: detected capacity change from 0 to 2048 [ 209.716377][ T7192] loop3: p1 < > p3 [ 209.721855][ T7192] loop3: p3 size 134217728 extends beyond EOD, truncated [ 210.314864][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 211.201429][ T7214] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 211.218293][ T7214] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 211.231378][ T7214] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.243526][ T7214] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.520818][ T7229] loop2: detected capacity change from 0 to 2048 [ 212.587795][ T7229] loop2: p1 < > p3 [ 212.595172][ T7229] loop2: p3 size 134217728 extends beyond EOD, truncated [ 212.745962][ T5774] udevd[5774]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 212.745964][ T5784] udevd[5784]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 213.113873][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.132558][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 213.273965][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 213.274752][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.280187][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.784143][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 214.209736][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.224205][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 214.348947][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.372449][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.394347][ T7248] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.412160][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 214.610286][ T7250] loop3: detected capacity change from 0 to 32768 [ 214.634805][ T8] usb 2-1: USB disconnect, device number 17 [ 214.712945][ T7250] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 214.922454][ T7250] XFS (loop3): Starting recovery (logdev: internal) [ 214.953481][ T7250] XFS (loop3): Ending recovery (logdev: internal) [ 215.012104][ T5770] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 215.126640][ T55] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 215.316752][ T55] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 215.327322][ T55] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 215.338440][ T55] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.352116][ T55] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.361491][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 215.367747][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.387454][ T55] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 215.451905][ T55] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 215.479406][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.564647][ T7283] input: syz0 as /devices/virtual/input/input18 [ 215.655615][ T27] usb 1-1: USB disconnect, device number 13 [ 216.068656][ T7289] loop1: detected capacity change from 0 to 2048 [ 216.140980][ T7289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.156434][ T7289] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.433917][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 218.319741][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.474177][ T7311] loop1: detected capacity change from 0 to 2048 [ 218.506157][ T7311] loop1: p1 < > p3 [ 218.512226][ T7311] loop1: p3 size 134217728 extends beyond EOD, truncated [ 218.624251][ T7304] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 218.642148][ T7304] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 218.650112][ T7304] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.660908][ T7304] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.715904][ T5774] udevd[5774]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 218.807314][ T5774] udevd[5774]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 219.492400][ T7332] loop3: detected capacity change from 0 to 2048 [ 220.553832][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 220.713914][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 220.720033][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 220.726149][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 221.655210][ T7332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.707426][ T7332] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.479300][ T7351] input: syz0 as /devices/virtual/input/input20 [ 222.781129][ T7349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 222.800601][ T7349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 222.814118][ T7349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 222.828534][ T7349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.284096][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.703564][ T7392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'. [ 224.714128][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 224.737189][ T7390] loop0: detected capacity change from 0 to 2048 [ 224.790395][ T7390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.803315][ T7390] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.886491][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.893388][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 224.899574][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 225.286593][ T7391] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 225.311517][ T7391] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.319889][ T7391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.330139][ T7391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.004809][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.981431][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 227.124132][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.464'. [ 227.353912][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 227.360050][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 227.366783][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 228.560309][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'. [ 228.763920][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 229.274640][ T7465] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 229.300701][ T7465] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 229.328155][ T7465] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 229.344864][ T7465] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.095305][ T7480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.487'. [ 230.282882][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 231.034017][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 231.357749][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 231.365660][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 231.371783][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 231.559366][ T7516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.500'. [ 231.592674][ T7512] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.602730][ T7512] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.616261][ T7512] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.622509][ T7512] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.703135][ T7517] block nbd2: shutting down sockets [ 231.828881][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 233.147197][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.509'. [ 233.523862][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 233.629478][ T7545] block nbd0: shutting down sockets [ 233.677458][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 233.677478][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 233.677518][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.260964][ T7564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.518'. [ 234.344033][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 234.436915][ T7566] block nbd1: shutting down sockets [ 234.549762][ T27] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 234.560692][ T27] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 234.603615][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 234.662295][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 234.729282][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 234.846758][ T27] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 234.902405][ T27] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.041037][ T27] usb 1-1: Product: syz [ 235.051173][ T27] usb 1-1: Manufacturer: syz [ 235.077309][ T27] cdc_wdm 1-1:1.0: skipping garbage [ 235.093190][ T27] cdc_wdm 1-1:1.0: skipping garbage [ 235.106406][ T27] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 235.117272][ T27] cdc_wdm 1-1:1.0: Unknown control protocol [ 235.312542][ T27] usb 1-1: USB disconnect, device number 14 [ 235.753827][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 236.500275][ T7591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.528'. [ 237.843979][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 238.292967][ T7613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'. [ 239.914132][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 240.186200][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 241.941032][ T7670] loop0: detected capacity change from 0 to 2048 [ 241.944814][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 242.005103][ T7670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.028212][ T7670] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.311050][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.548447][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'. [ 244.702774][ T7707] loop0: detected capacity change from 0 to 2048 [ 244.728327][ T7707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.751385][ T7707] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.113372][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.332677][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 246.724138][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 246.794010][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 247.694870][ T7745] loop0: detected capacity change from 0 to 2048 [ 247.767041][ T7745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.793961][ T7745] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.145637][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.582'. [ 248.298788][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.561450][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 249.693116][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 249.929720][ T7792] loop2: detected capacity change from 0 to 2048 [ 249.995068][ T7792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.040488][ T7792] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.313530][ T5841] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 250.750167][ T5841] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 250.799832][ T5841] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 250.812983][ T5841] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 250.825119][ T5841] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.848340][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.416923][ T5841] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 251.436056][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.591196][ T5841] snd-usb-audio: probe of 1-1:27.0 failed with error -12 [ 251.673145][ T5841] usb 1-1: USB disconnect, device number 15 [ 251.929566][ T7821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.603'. [ 253.872581][ T7850] input: syz0 as /devices/virtual/input/input24 [ 254.553185][ T50] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 255.380039][ T7874] input: syz0 as /devices/virtual/input/input25 [ 256.081489][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.157703][ T7892] warning: `syz.3.626' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 256.389143][ T7894] loop1: detected capacity change from 0 to 2048 [ 256.540030][ T7894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.574761][ T7894] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.077131][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.706855][ T7910] input: syz0 as /devices/virtual/input/input26 [ 259.361177][ T50] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 259.866136][ T7934] input: syz0 as /devices/virtual/input/input27 [ 259.883874][ T5824] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 260.062740][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 260.113683][ T5824] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.160995][ T5824] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 260.200923][ T5824] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 260.310167][ T5824] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.400563][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.622814][ T5824] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 261.296019][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.579677][ T5824] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 261.606548][ T5824] usb 3-1: USB disconnect, device number 13 [ 262.288409][ T7961] loop1: detected capacity change from 0 to 2048 [ 262.346318][ T7961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.359642][ T7961] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.014174][ T5824] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 264.146583][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.225760][ T5824] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.261300][ T5824] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 264.293833][ T5824] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.313194][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.344831][ T7975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 264.357434][ T5824] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 264.727489][ T5824] usb 4-1: USB disconnect, device number 5 [ 264.934912][ T7995] loop1: detected capacity change from 0 to 2048 [ 265.029638][ T7995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.060271][ T7995] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.503849][ T5088] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 266.701421][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.049585][ T8014] 9pnet_virtio: no channels available for device syz [ 268.626974][ T8033] loop1: detected capacity change from 0 to 2048 [ 268.750382][ T8033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.809229][ T8033] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.834430][ T5824] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 269.041637][ T5824] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.078482][ T5824] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 269.113887][ T5824] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.136304][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.184641][ T8029] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 269.198167][ T5824] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 270.520741][ T3364] usb 1-1: USB disconnect, device number 16 [ 271.757599][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.440883][ T8069] kvm: emulating exchange as write [ 274.394312][ T27] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 274.607875][ T27] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.627544][ T27] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 274.658874][ T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.682917][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.702959][ T8082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 274.735114][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 275.056092][ T3364] usb 2-1: USB disconnect, device number 18 [ 277.204469][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 277.299263][ T5088] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 279.284049][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 279.674229][ T8183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.733'. [ 279.754838][ T8182] syz.0.732 uses obsolete (PF_INET,SOCK_PACKET) [ 281.302737][ T8208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.743'. [ 282.075421][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 282.086476][ T8238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.754'. [ 283.624897][ T8267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.765'. [ 284.153820][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 285.516485][ T8285] overlayfs: overlapping lowerdir path [ 285.792674][ T8296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.774'. [ 286.234626][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 287.730127][ T8316] overlayfs: overlapping lowerdir path [ 288.026438][ T8327] netlink: 28 bytes leftover after parsing attributes in process `syz.0.787'. [ 288.455540][ T5088] Bluetooth: hci3: command 0x0405 tx timeout [ 290.104171][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 290.181966][ T8358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.796'. [ 291.033917][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 291.758230][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 291.845713][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.806'. [ 293.430047][ T5088] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 293.573329][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.816'. [ 295.281269][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.826'. [ 295.353981][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 295.497244][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 296.785966][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.839'. [ 296.915834][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 298.548563][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 298.592789][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 300.522326][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.865'. [ 302.044591][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'. [ 304.884798][ T5824] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 305.128733][ T5824] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.175987][ T5824] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 305.236089][ T5824] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.292253][ T5824] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 305.359803][ T5824] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 305.654870][ T5824] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.709015][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.761116][ T5824] usb 4-1: Product: syz [ 305.785641][ T5824] usb 4-1: Manufacturer: syz [ 305.842371][ T5824] cdc_wdm 4-1:1.0: skipping garbage [ 305.851468][ T5824] cdc_wdm 4-1:1.0: skipping garbage [ 305.868935][ T5824] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 305.878030][ T5824] cdc_wdm 4-1:1.0: Unknown control protocol [ 306.836162][ T27] usb 4-1: USB disconnect, device number 6 [ 308.019450][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 309.484502][ T3447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.712413][ T3447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.838319][ T3447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.040897][ T3447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.438792][ T5841] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 310.588061][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.597280][ T5088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.618298][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.629152][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.642537][ T5088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 310.644560][ T5841] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 310.668469][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.699394][ T5841] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 310.733655][ T5841] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 310.747617][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.181210][ T8694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 311.207643][ T5841] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 311.985468][ T8701] chnl_net:caif_netlink_parms(): no params data found [ 312.041009][ T3447] bond0: (slave wlan1): Releasing backup interface [ 312.282674][ T8701] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.292857][ T8701] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.313437][ T8701] bridge_slave_0: entered allmulticast mode [ 312.329997][ T8701] bridge_slave_0: entered promiscuous mode [ 312.351462][ T8701] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.360419][ T8701] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.368405][ T8701] bridge_slave_1: entered allmulticast mode [ 312.376646][ T8701] bridge_slave_1: entered promiscuous mode [ 312.440646][ T8701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.478883][ T3447] hsr_slave_0: left promiscuous mode [ 312.489044][ T3447] hsr_slave_1: left promiscuous mode [ 312.517178][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.527796][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.539152][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.549667][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.561441][ T3447] bridge_slave_1: left allmulticast mode [ 312.576846][ T3447] bridge_slave_1: left promiscuous mode [ 312.593357][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.633590][ T3447] bridge_slave_0: left allmulticast mode [ 312.642017][ T3447] bridge_slave_0: left promiscuous mode [ 312.658925][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.714114][ T5088] Bluetooth: hci1: command tx timeout [ 312.786323][ T3447] veth1_macvtap: left promiscuous mode [ 312.793733][ T3447] veth0_macvtap: left promiscuous mode [ 312.810551][ T3447] veth1_vlan: left promiscuous mode [ 312.817588][ T3447] veth0_vlan: left promiscuous mode [ 312.943906][ T5841] usb 2-1: USB disconnect, device number 19 [ 314.104634][ T3447] team0 (unregistering): Port device team_slave_1 removed [ 314.159347][ T3447] team0 (unregistering): Port device team_slave_0 removed [ 314.202039][ T3447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.248753][ T3447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.694671][ T3447] bond0 (unregistering): Released all slaves [ 314.790165][ T8701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.799553][ T5088] Bluetooth: hci1: command tx timeout [ 314.857588][ T8750] bridge0: entered allmulticast mode [ 314.900673][ T8753] pim6reg: entered allmulticast mode [ 314.906545][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 314.917202][ T8756] bridge_slave_1: left allmulticast mode [ 314.922896][ T8756] bridge_slave_1: left promiscuous mode [ 314.929571][ T8756] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.960678][ T8756] bridge_slave_0: left allmulticast mode [ 314.966496][ T8756] bridge_slave_0: left promiscuous mode [ 314.972321][ T8756] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.044368][ T8756] bridge0 (unregistering): left allmulticast mode [ 315.109720][ T8701] team0: Port device team_slave_0 added [ 315.120913][ T8701] team0: Port device team_slave_1 added [ 315.229737][ T8701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.271918][ T8701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.309645][ T8701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.329616][ T8701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.339513][ T8701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.372252][ T8701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.535830][ T8701] hsr_slave_0: entered promiscuous mode [ 315.551644][ T8701] hsr_slave_1: entered promiscuous mode [ 315.558599][ T8701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.573814][ T8701] Cannot create hsr debugfs directory [ 315.776619][ T8789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.931'. [ 316.075309][ T8797] kAFS: No cell specified [ 316.084856][ T8797] overlayfs: overlapping lowerdir path [ 316.105043][ T8701] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 316.146036][ T8701] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 316.171235][ T8701] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 316.196699][ T8701] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 316.204272][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.935'. [ 316.386631][ T8701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.419235][ T8701] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.451736][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.459024][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.515722][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.523001][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.562802][ T8809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.940'. [ 316.885488][ T5088] Bluetooth: hci1: command tx timeout [ 316.905063][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 316.919097][ T8821] kAFS: No cell specified [ 316.955500][ T8821] overlayfs: overlapping lowerdir path [ 317.190146][ T8701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.209721][ T8831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.949'. [ 317.519135][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.530869][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 318.066181][ T8701] veth0_vlan: entered promiscuous mode [ 318.085528][ T8860] overlayfs: overlapping lowerdir path [ 318.107257][ T8858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.959'. [ 318.146911][ T8701] veth1_vlan: entered promiscuous mode [ 318.227976][ T8701] veth0_macvtap: entered promiscuous mode [ 318.270320][ T8701] veth1_macvtap: entered promiscuous mode [ 318.318527][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.337789][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.350039][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.362465][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.374931][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.385863][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.398726][ T8701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.444407][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.468143][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.484569][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 318.487172][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.512554][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.522608][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.538135][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.551201][ T8701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.571869][ T8701] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.593144][ T8701] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.604126][ T8701] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.612885][ T8701] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.621795][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 318.802350][ T27] usb 4-1: device descriptor read/64, error -71 [ 318.836674][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.848673][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.913619][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.928443][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.956085][ T5088] Bluetooth: hci1: command tx timeout [ 319.114323][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 319.123886][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.971'. [ 319.308535][ T27] usb 4-1: device descriptor read/64, error -71 [ 319.435656][ T27] usb usb4-port1: attempt power cycle [ 319.863954][ T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 319.904493][ T27] usb 4-1: device descriptor read/8, error -71 [ 319.922127][ T8916] __nla_validate_parse: 4 callbacks suppressed [ 319.922142][ T8916] netlink: 892 bytes leftover after parsing attributes in process `syz.4.988'. [ 320.008714][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 320.157661][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 320.175604][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 320.244906][ T27] usb 4-1: device descriptor read/8, error -71 [ 320.385038][ T27] usb usb4-port1: unable to enumerate USB device [ 320.491630][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.997'. [ 320.626210][ T8942] netlink: 892 bytes leftover after parsing attributes in process `syz.4.998'. [ 320.691922][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'. [ 320.908577][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1003'. [ 320.974807][ T5842] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 321.001297][ T8955] overlayfs: overlapping lowerdir path [ 321.136468][ T8961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1007'. [ 321.177163][ T5842] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 321.204050][ T5842] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 321.225330][ T5842] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 321.253500][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.277195][ T8940] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 321.294693][ T8963] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1008'. [ 321.295352][ T5842] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 321.343573][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 321.842669][ T8979] overlayfs: overlapping lowerdir path [ 321.915365][ T8984] kAFS: No cell specified [ 321.928482][ T8984] overlayfs: overlapping lowerdir path [ 322.103307][ T5088] Bluetooth: hci1: Invalid handle: 0xffc9 > 0x0eff [ 323.472255][ T9009] overlayfs: overlapping lowerdir path [ 323.553908][ T5824] usb 2-1: USB disconnect, device number 20 [ 323.783879][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 324.999764][ T9034] __nla_validate_parse: 4 callbacks suppressed [ 324.999780][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1036'. [ 325.177909][ T9043] overlayfs: overlapping lowerdir path [ 325.389531][ T50] Bluetooth: hci1: Invalid handle: 0xffc9 > 0x0eff [ 325.564171][ T5821] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 325.629247][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 325.785932][ T5821] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 325.804561][ T5821] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 325.822018][ T5821] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 325.912674][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.008223][ T9042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.363084][ T5821] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 326.808055][ T9072] kAFS: No cell specified [ 326.837888][ T9072] overlayfs: overlapping lowerdir path [ 327.075119][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 327.632686][ T9099] netlink: 868 bytes leftover after parsing attributes in process `syz.4.1062'. [ 327.749934][ T9101] kAFS: No cell specified [ 327.772060][ T9101] overlayfs: overlapping lowerdir path [ 328.010959][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 328.122679][ T5842] usb 2-1: USB disconnect, device number 21 [ 328.305437][ T9120] netlink: 868 bytes leftover after parsing attributes in process `syz.4.1071'. [ 328.543411][ T9127] kAFS: No cell specified [ 328.555471][ T9127] overlayfs: overlapping lowerdir path [ 328.814060][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 329.082911][ T9146] netlink: 868 bytes leftover after parsing attributes in process `syz.0.1081'. [ 329.283988][ T9156] kAFS: No cell specified [ 329.295537][ T9156] overlayfs: overlapping lowerdir path [ 329.324137][ T5821] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 329.518503][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1087'. [ 329.547076][ T5821] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 329.565775][ T5821] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 329.579248][ T5821] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 329.605947][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.657523][ T9139] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 329.724900][ T5821] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 330.049510][ T9172] loop0: detected capacity change from 0 to 2048 [ 330.100377][ T9172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.126883][ T9172] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.857374][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1093'. [ 331.029930][ T9184] kAFS: No cell specified [ 331.036765][ T9184] overlayfs: overlapping lowerdir path [ 331.132614][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.362679][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1097'. [ 331.709458][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 331.782687][ T9205] kAFS: No cell specified [ 331.790093][ T9205] overlayfs: overlapping lowerdir path [ 331.854585][ T5821] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 331.893806][ T5775] usb 4-1: USB disconnect, device number 11 [ 332.061864][ T9210] loop3: detected capacity change from 0 to 2048 [ 332.083304][ T5821] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 332.103270][ T5821] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.124127][ T5821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 332.129856][ T9210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.133236][ T5821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.133267][ T5821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.209693][ T9210] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.278042][ T5821] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 332.294575][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 332.302635][ T5821] usb 1-1: Product: syz [ 332.309491][ T5821] usb 1-1: Manufacturer: syz [ 332.322665][ T5821] cdc_wdm 1-1:1.0: skipping garbage [ 332.329750][ T5821] cdc_wdm 1-1:1.0: skipping garbage [ 332.342322][ T5821] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 332.350141][ T5821] cdc_wdm 1-1:1.0: Unknown control protocol [ 332.696355][ T9199] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 332.862125][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 333.701335][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.838256][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 333.867477][ T9236] kAFS: No cell specified [ 333.875221][ T9236] overlayfs: overlapping lowerdir path [ 334.152917][ T9243] loop1: detected capacity change from 0 to 2048 [ 334.220804][ T9243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.254361][ T9243] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.019348][ T3364] usb 1-1: USB disconnect, device number 17 [ 335.279570][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.419443][ T9260] loop1: detected capacity change from 0 to 2048 [ 335.463437][ T9260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.499239][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1122'. [ 335.515485][ T9260] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.939506][ T9271] kAFS: No cell specified [ 335.946681][ T9271] overlayfs: overlapping lowerdir path [ 336.293778][ T5762] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 336.578824][ T5762] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.611728][ T5762] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.638124][ T5762] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.649190][ T5762] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.662161][ T5762] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.666147][ T5762] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 336.682542][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 336.693249][ T5762] usb 5-1: Product: syz [ 336.701159][ T5762] usb 5-1: Manufacturer: syz [ 336.712410][ T5762] cdc_wdm 5-1:1.0: skipping garbage [ 336.724984][ T5762] cdc_wdm 5-1:1.0: skipping garbage [ 336.736306][ T5762] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 336.742401][ T5762] cdc_wdm 5-1:1.0: Unknown control protocol [ 336.869805][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.958202][ T9273] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 337.017918][ T9288] loop1: detected capacity change from 0 to 2048 [ 337.063854][ T9288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.093967][ T9288] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.924510][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'. [ 338.122769][ T9299] kAFS: No cell specified [ 338.133551][ T9299] overlayfs: overlapping lowerdir path [ 338.729525][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.861937][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 339.371091][ T5775] usb 5-1: USB disconnect, device number 2 [ 340.518073][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.669162][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.786720][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.950600][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.344437][ T9349] afs: Unknown parameter 'dy' [ 341.362403][ T9349] overlayfs: overlapping lowerdir path [ 341.385275][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.412284][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.423310][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.442045][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.450063][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.458742][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.131647][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.141307][ T5088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.149674][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.190522][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.201232][ T5088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.209754][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.257012][ T9360] ================================================================== [ 342.265145][ T9360] BUG: KASAN: slab-out-of-bounds in __list_del_entry_valid_or_report+0x84/0x130 [ 342.274234][ T9360] Read of size 8 at addr ffff88807c65e510 by task syz.0.1162/9360 [ 342.282064][ T9360] [ 342.284400][ T9360] CPU: 0 PID: 9360 Comm: syz.0.1162 Not tainted 6.6.93-syzkaller #0 [ 342.292385][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.302448][ T9360] Call Trace: [ 342.305726][ T9360] [ 342.308663][ T9360] dump_stack_lvl+0x16c/0x230 [ 342.313353][ T9360] ? __lock_acquire+0x7c80/0x7c80 [ 342.318381][ T9360] ? show_regs_print_info+0x20/0x20 [ 342.323589][ T9360] ? load_image+0x3b0/0x3b0 [ 342.328102][ T9360] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 342.333497][ T9360] ? __virt_addr_valid+0x18c/0x540 [ 342.338618][ T9360] ? __virt_addr_valid+0x469/0x540 [ 342.343746][ T9360] print_report+0xac/0x230 [ 342.348192][ T9360] kasan_report+0x151/0x180 [ 342.352726][ T9360] ? __list_del_entry_valid_or_report+0x84/0x130 [ 342.359069][ T9360] __list_del_entry_valid_or_report+0x84/0x130 [ 342.365244][ T9360] bt_accept_unlink+0x39/0x230 [ 342.370024][ T9360] l2cap_sock_teardown_cb+0x17e/0x450 [ 342.375407][ T9360] l2cap_chan_del+0xaf/0x5e0 [ 342.380007][ T9360] l2cap_conn_del+0x380/0x660 [ 342.384702][ T9360] ? l2cap_connect_cfm+0x1030/0x1030 [ 342.390022][ T9360] hci_conn_hash_flush+0x107/0x220 [ 342.395161][ T9360] hci_dev_close_sync+0x962/0xfb0 [ 342.400212][ T9360] ? hci_unregister_dev+0x1fe/0x500 [ 342.405437][ T9360] ? hci_dev_open_sync+0x2b50/0x2b50 [ 342.410729][ T9360] ? up_write+0x1c3/0x410 [ 342.415061][ T9360] hci_unregister_dev+0x206/0x500 [ 342.420093][ T9360] vhci_release+0x83/0xd0 [ 342.424431][ T9360] ? vhci_open+0x360/0x360 [ 342.428851][ T9360] __fput+0x234/0x970 [ 342.432837][ T9360] task_work_run+0x1ce/0x250 [ 342.437451][ T9360] ? task_work_cancel+0x240/0x240 [ 342.442478][ T9360] ? do_exit+0x8fe/0x23c0 [ 342.446841][ T9360] ? kmem_cache_free+0xf8/0x280 [ 342.451719][ T9360] do_exit+0x903/0x23c0 [ 342.455922][ T9360] ? put_task_struct+0xc0/0xc0 [ 342.460712][ T9360] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 342.466698][ T9360] ? get_signal+0x1068/0x1400 [ 342.471389][ T9360] ? lock_chain_count+0x20/0x20 [ 342.476304][ T9360] ? _raw_spin_lock_irq+0xaf/0xe0 [ 342.481345][ T9360] do_group_exit+0x21b/0x2d0 [ 342.485952][ T9360] ? lockdep_hardirqs_on+0x98/0x150 [ 342.491159][ T9360] get_signal+0x12fc/0x1400 [ 342.495691][ T9360] arch_do_signal_or_restart+0x96/0x780 [ 342.501257][ T9360] ? __remove_hrtimer+0x470/0x470 [ 342.506296][ T9360] ? get_sigframe_size+0x20/0x20 [ 342.511277][ T9360] ? __se_sys_clock_nanosleep+0x2ea/0x370 [ 342.517020][ T9360] ? exit_to_user_mode_loop+0x3b/0x110 [ 342.522578][ T9360] exit_to_user_mode_loop+0x70/0x110 [ 342.527872][ T9360] exit_to_user_mode_prepare+0xb1/0x140 [ 342.533425][ T9360] syscall_exit_to_user_mode+0x1a/0x50 [ 342.538899][ T9360] do_syscall_64+0x61/0xb0 [ 342.543323][ T9360] ? clear_bhb_loop+0x40/0x90 [ 342.548013][ T9360] ? clear_bhb_loop+0x40/0x90 [ 342.552694][ T9360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.558600][ T9360] RIP: 0033:0x7fb2df3c11e5 [ 342.563033][ T9360] Code: Unable to access opcode bytes at 0x7fb2df3c11bb. [ 342.570060][ T9360] RSP: 002b:00007fb2e02d5f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 342.578497][ T9360] RAX: 0000000000000000 RBX: 00007fb2df5b5fa0 RCX: 00007fb2df3c11e5 [ 342.586470][ T9360] RDX: 00007fb2e02d5fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.594442][ T9360] RBP: 00007fb2df410b39 R08: 0000000000000000 R09: 0000000000000000 [ 342.602447][ T9360] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 342.610433][ T9360] R13: 0000000000000000 R14: 00007fb2df5b5fa0 R15: 00007ffd9d563668 [ 342.618418][ T9360] [ 342.621437][ T9360] [ 342.623776][ T9360] Allocated by task 9350: [ 342.628133][ T9360] kasan_set_track+0x4e/0x70 [ 342.632760][ T9360] __kasan_kmalloc+0x8f/0xa0 [ 342.637383][ T9360] __kmalloc+0xb4/0x240 [ 342.641557][ T9360] ops_init+0x8b/0x640 [ 342.645634][ T9360] setup_net+0x3a5/0xa00 [ 342.649881][ T9360] copy_net_ns+0x36d/0x5e0 [ 342.654306][ T9360] create_new_namespaces+0x3d3/0x6f0 [ 342.659589][ T9360] unshare_nsproxy_namespaces+0x11a/0x160 [ 342.665326][ T9360] ksys_unshare+0x4c0/0x890 [ 342.669860][ T9360] __x64_sys_unshare+0x38/0x40 [ 342.674653][ T9360] do_syscall_64+0x55/0xb0 [ 342.679115][ T9360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.685065][ T9360] [ 342.687415][ T9360] Last potentially related work creation: [ 342.693148][ T9360] kasan_save_stack+0x3e/0x60 [ 342.697861][ T9360] __kasan_record_aux_stack+0xaf/0xc0 [ 342.703272][ T9360] call_rcu+0x14f/0x920 [ 342.707466][ T9360] netlink_release+0x16d8/0x1ad0 [ 342.712438][ T9360] sock_close+0xbd/0x230 [ 342.716708][ T9360] __fput+0x234/0x970 [ 342.720719][ T9360] task_work_run+0x1ce/0x250 [ 342.725343][ T9360] exit_to_user_mode_loop+0xe6/0x110 [ 342.730667][ T9360] exit_to_user_mode_prepare+0xb1/0x140 [ 342.736244][ T9360] syscall_exit_to_user_mode+0x1a/0x50 [ 342.741731][ T9360] do_syscall_64+0x61/0xb0 [ 342.746180][ T9360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.752120][ T9360] [ 342.754461][ T9360] Second to last potentially related work creation: [ 342.761074][ T9360] kasan_save_stack+0x3e/0x60 [ 342.765791][ T9360] __kasan_record_aux_stack+0xaf/0xc0 [ 342.771198][ T9360] call_rcu+0x14f/0x920 [ 342.775387][ T9360] netlink_release+0x16d8/0x1ad0 [ 342.780367][ T9360] sock_close+0xbd/0x230 [ 342.784635][ T9360] __fput+0x234/0x970 [ 342.788643][ T9360] task_work_run+0x1ce/0x250 [ 342.793265][ T9360] exit_to_user_mode_loop+0xe6/0x110 [ 342.798594][ T9360] exit_to_user_mode_prepare+0xb1/0x140 [ 342.804186][ T9360] syscall_exit_to_user_mode+0x1a/0x50 [ 342.809680][ T9360] do_syscall_64+0x61/0xb0 [ 342.814211][ T9360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.820152][ T9360] [ 342.822494][ T9360] The buggy address belongs to the object at ffff88807c65e000 [ 342.822494][ T9360] which belongs to the cache kmalloc-2k of size 2048 [ 342.836579][ T9360] The buggy address is located 248 bytes to the right of [ 342.836579][ T9360] allocated 1048-byte region [ffff88807c65e000, ffff88807c65e418) [ 342.851359][ T9360] [ 342.853745][ T9360] The buggy address belongs to the physical page: [ 342.860197][ T9360] page:ffffea0001f19600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c658 [ 342.870381][ T9360] head:ffffea0001f19600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 342.879777][ T9360] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 342.888236][ T9360] page_type: 0xffffffff() [ 342.892593][ T9360] raw: 00fff00000000840 ffff888017842000 0000000000000000 dead000000000001 [ 342.901203][ T9360] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 342.909804][ T9360] page dumped because: kasan: bad access detected [ 342.916271][ T9360] page_owner tracks the page as allocated [ 342.922003][ T9360] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5771, tgid 5771 (syz-executor), ts 92244557503, free_ts 92224799698 [ 342.943397][ T9360] post_alloc_hook+0x1cd/0x210 [ 342.948193][ T9360] get_page_from_freelist+0x195c/0x19f0 [ 342.953767][ T9360] __alloc_pages+0x1e3/0x460 [ 342.958382][ T9360] alloc_slab_page+0x5d/0x170 [ 342.963086][ T9360] new_slab+0x87/0x2e0 [ 342.967186][ T9360] ___slab_alloc+0xc6d/0x12f0 [ 342.971889][ T9360] __kmem_cache_alloc_node+0x1a2/0x260 [ 342.977374][ T9360] __kmalloc+0xa4/0x240 [ 342.981554][ T9360] rfkill_alloc+0xb1/0x2d0 [ 342.985991][ T9360] wiphy_new_nm+0x107b/0x1990 [ 342.990690][ T9360] ieee80211_alloc_hw_nm+0x3c8/0x1ee0 [ 342.996092][ T9360] mac80211_hwsim_new_radio+0x1e0/0x4cf0 [ 343.001756][ T9360] hwsim_new_radio_nl+0xd78/0x19d0 [ 343.006889][ T9360] genl_family_rcv_msg_doit+0x209/0x2f0 [ 343.012459][ T9360] genl_rcv_msg+0x60b/0x790 [ 343.017004][ T9360] netlink_rcv_skb+0x216/0x480 [ 343.021800][ T9360] page last free stack trace: [ 343.026497][ T9360] free_unref_page_prepare+0x7ce/0x8e0 [ 343.031983][ T9360] free_unref_page+0x32/0x2e0 [ 343.036682][ T9360] __unfreeze_partials+0x1cf/0x210 [ 343.041999][ T9360] put_cpu_partial+0x17c/0x250 [ 343.046792][ T9360] __slab_free+0x31d/0x410 [ 343.051238][ T9360] qlist_free_all+0x75/0xe0 [ 343.055781][ T9360] kasan_quarantine_reduce+0x143/0x160 [ 343.061269][ T9360] __kasan_slab_alloc+0x22/0x80 [ 343.066152][ T9360] slab_post_alloc_hook+0x6e/0x4d0 [ 343.071286][ T9360] kmem_cache_alloc_node+0x150/0x330 [ 343.076603][ T9360] __alloc_skb+0x108/0x2c0 [ 343.081042][ T9360] netlink_ack+0x376/0x1110 [ 343.085597][ T9360] netlink_rcv_skb+0x29a/0x480 [ 343.090395][ T9360] genl_rcv+0x28/0x40 [ 343.094400][ T9360] netlink_unicast+0x750/0x8c0 [ 343.099212][ T9360] netlink_sendmsg+0x8c1/0xbe0 [ 343.104013][ T9360] [ 343.106350][ T9360] Memory state around the buggy address: [ 343.112003][ T9360] ffff88807c65e400: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 343.120098][ T9360] ffff88807c65e480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 343.128202][ T9360] >ffff88807c65e500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 343.136292][ T9360] ^ [ 343.140901][ T9360] ffff88807c65e580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 343.148982][ T9360] ffff88807c65e600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 343.157066][ T9360] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 343.258707][ T9360] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 343.266048][ T9360] CPU: 1 PID: 9360 Comm: syz.0.1162 Not tainted 6.6.93-syzkaller #0 [ 343.274070][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.284129][ T9360] Call Trace: [ 343.287428][ T9360] [ 343.290357][ T9360] dump_stack_lvl+0x16c/0x230 [ 343.295051][ T9360] ? show_regs_print_info+0x20/0x20 [ 343.300261][ T9360] ? load_image+0x3b0/0x3b0 [ 343.304772][ T9360] panic+0x2c0/0x710 [ 343.308670][ T9360] ? bpf_jit_dump+0xd0/0xd0 [ 343.313178][ T9360] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 343.319089][ T9360] ? _raw_spin_unlock+0x40/0x40 [ 343.323967][ T9360] ? print_memory_metadata+0x314/0x400 [ 343.329449][ T9360] check_panic_on_warn+0x84/0xa0 [ 343.334391][ T9360] end_report+0x6f/0x140 [ 343.338637][ T9360] kasan_report+0x160/0x180 [ 343.343166][ T9360] ? __list_del_entry_valid_or_report+0x84/0x130 [ 343.349518][ T9360] __list_del_entry_valid_or_report+0x84/0x130 [ 343.355679][ T9360] bt_accept_unlink+0x39/0x230 [ 343.360448][ T9360] l2cap_sock_teardown_cb+0x17e/0x450 [ 343.365849][ T9360] l2cap_chan_del+0xaf/0x5e0 [ 343.370482][ T9360] l2cap_conn_del+0x380/0x660 [ 343.375213][ T9360] ? l2cap_connect_cfm+0x1030/0x1030 [ 343.380541][ T9360] hci_conn_hash_flush+0x107/0x220 [ 343.385686][ T9360] hci_dev_close_sync+0x962/0xfb0 [ 343.390719][ T9360] ? hci_unregister_dev+0x1fe/0x500 [ 343.395928][ T9360] ? hci_dev_open_sync+0x2b50/0x2b50 [ 343.401221][ T9360] ? up_write+0x1c3/0x410 [ 343.405553][ T9360] hci_unregister_dev+0x206/0x500 [ 343.410620][ T9360] vhci_release+0x83/0xd0 [ 343.414960][ T9360] ? vhci_open+0x360/0x360 [ 343.419381][ T9360] __fput+0x234/0x970 [ 343.423365][ T9360] task_work_run+0x1ce/0x250 [ 343.427960][ T9360] ? task_work_cancel+0x240/0x240 [ 343.432988][ T9360] ? do_exit+0x8fe/0x23c0 [ 343.437328][ T9360] ? kmem_cache_free+0xf8/0x280 [ 343.442179][ T9360] do_exit+0x903/0x23c0 [ 343.446368][ T9360] ? put_task_struct+0xc0/0xc0 [ 343.451139][ T9360] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 343.457121][ T9360] ? get_signal+0x1068/0x1400 [ 343.461809][ T9360] ? lock_chain_count+0x20/0x20 [ 343.466661][ T9360] ? _raw_spin_lock_irq+0xaf/0xe0 [ 343.471696][ T9360] do_group_exit+0x21b/0x2d0 [ 343.476295][ T9360] ? lockdep_hardirqs_on+0x98/0x150 [ 343.481493][ T9360] get_signal+0x12fc/0x1400 [ 343.486016][ T9360] arch_do_signal_or_restart+0x96/0x780 [ 343.491574][ T9360] ? __remove_hrtimer+0x470/0x470 [ 343.496600][ T9360] ? get_sigframe_size+0x20/0x20 [ 343.501559][ T9360] ? __se_sys_clock_nanosleep+0x2ea/0x370 [ 343.507294][ T9360] ? exit_to_user_mode_loop+0x3b/0x110 [ 343.512772][ T9360] exit_to_user_mode_loop+0x70/0x110 [ 343.518091][ T9360] exit_to_user_mode_prepare+0xb1/0x140 [ 343.523644][ T9360] syscall_exit_to_user_mode+0x1a/0x50 [ 343.529120][ T9360] do_syscall_64+0x61/0xb0 [ 343.533542][ T9360] ? clear_bhb_loop+0x40/0x90 [ 343.538219][ T9360] ? clear_bhb_loop+0x40/0x90 [ 343.542895][ T9360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.548793][ T9360] RIP: 0033:0x7fb2df3c11e5 [ 343.553208][ T9360] Code: Unable to access opcode bytes at 0x7fb2df3c11bb. [ 343.560218][ T9360] RSP: 002b:00007fb2e02d5f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 343.568636][ T9360] RAX: 0000000000000000 RBX: 00007fb2df5b5fa0 RCX: 00007fb2df3c11e5 [ 343.576605][ T9360] RDX: 00007fb2e02d5fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.584570][ T9360] RBP: 00007fb2df410b39 R08: 0000000000000000 R09: 0000000000000000 [ 343.592544][ T9360] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 343.600516][ T9360] R13: 0000000000000000 R14: 00007fb2df5b5fa0 R15: 00007ffd9d563668 [ 343.608491][ T9360] [ 343.611843][ T9360] Kernel Offset: disabled [ 343.616167][ T9360] Rebooting in 86400 seconds..