last executing test programs: 10m45.324984661s ago: executing program 32 (id=15519): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xb, 0x1, 0x0, &(0x7f0000048000), 0x0) 10m14.270635609s ago: executing program 33 (id=15793): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x8522c003fb4c32d8, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) 9m57.594874292s ago: executing program 34 (id=16532): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x100, 0x0, 0x1, 0x7, 0x14, "347ad7da5f3dc570"}) 8m25.29859861s ago: executing program 35 (id=19217): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) writev(r0, &(0x7f00000022c0)=[{&(0x7f0000000fc0)="82", 0x1}], 0x1) 7m59.129795327s ago: executing program 36 (id=19771): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)) 7m25.223747785s ago: executing program 4 (id=20535): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r1, 0x1, 0x70bd2d, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x0) 7m25.138801696s ago: executing program 4 (id=20540): openat$cachefiles(0xffffff9c, &(0x7f0000000040), 0x80400, 0x0) r0 = syz_io_uring_setup(0x1d8c, &(0x7f0000000800)={0x0, 0x6acb, 0x10100, 0xffffffff, 0x1}, &(0x7f0000000300)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 7m25.0491612s ago: executing program 0 (id=20542): syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 7m25.04876025s ago: executing program 4 (id=20543): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000280)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, 0x24) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) 7m25.048557151s ago: executing program 4 (id=20544): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@cache_loose}]}}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)) 7m24.965333436s ago: executing program 4 (id=20545): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000140)={0x84, r1, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x4e, 0x1, '\x03\xdf\xe4\xdd\x9en\xfa\x9er\xe4\x06^\x1d\xd0\xabL?\x17V\x84\x92\xfa\x01\x92%\xf4\xf5W$\xdb\xd9\xd7&H\x80\xef|\xefM\xa0\x8at\xe9G\xa3\x1c\xe6u\x0f\x9a\x05\xe4K\xd9]zn\xda\b;\xb4\x0e\xa3\xd6>\f\x00\x00\xdd\xd4\xa0\xc6\xf5\xe4'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x84}}, 0x0) 7m24.965044222s ago: executing program 0 (id=20546): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') 7m24.963186681s ago: executing program 0 (id=20547): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2}, 0x80) 7m24.883953045s ago: executing program 0 (id=20548): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0) 7m22.905354503s ago: executing program 8 (id=20557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) 7m22.835261695s ago: executing program 8 (id=20558): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x40}, 0x18) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r1, &(0x7f0000000040)={{0x3, @null}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 7m22.811643853s ago: executing program 8 (id=20560): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffe}]}]}]}, 0x44}}, 0x0) 7m22.794228825s ago: executing program 0 (id=20561): unshare(0x20060400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) 7m22.782167243s ago: executing program 4 (id=20562): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=@newtaction={0xbc, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x9, 0x4, 0x5, 0x85a}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) 7m22.693213705s ago: executing program 8 (id=20563): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 7m22.611918725s ago: executing program 8 (id=20564): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)='^', 0x1}]) 7m22.611458473s ago: executing program 0 (id=20565): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd}, 0x14}}, 0x44000000) 7m22.364810715s ago: executing program 8 (id=20568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x2c, r1, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) 7m7.575169798s ago: executing program 37 (id=20565): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd}, 0x14}}, 0x44000000) 7m7.531944346s ago: executing program 38 (id=20562): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=@newtaction={0xbc, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x9, 0x4, 0x5, 0x85a}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) 7m7.082370903s ago: executing program 39 (id=20568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x2c, r1, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) 2m26.432955136s ago: executing program 1 (id=25456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0x2020) 2m26.427595206s ago: executing program 1 (id=25458): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xc92) 2m26.374725764s ago: executing program 1 (id=25460): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 2m26.317132856s ago: executing program 1 (id=25462): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000280)='./file0\x00', 0x0, 0x97801, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x112) 2m26.214551346s ago: executing program 1 (id=25466): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x7f, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000380)={0x80000004, 0xfffffffc, 0x1, 'queue0\x00'}) 2m25.722181396s ago: executing program 1 (id=25480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000180)=""/42) 2m25.634996144s ago: executing program 40 (id=25480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000180)=""/42) 1m26.791730963s ago: executing program 2 (id=26473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m26.682076975s ago: executing program 2 (id=26474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x800000005) 1m26.611989833s ago: executing program 2 (id=26476): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r0) r1 = socket$caif_stream(0x25, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$FUSE_DIRENTPLUS(r0, 0x0, 0x520) 1m25.529011102s ago: executing program 2 (id=26480): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0) 1m25.472289904s ago: executing program 2 (id=26481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x40080) 1m25.27097921s ago: executing program 2 (id=26486): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1m25.224483807s ago: executing program 41 (id=26486): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 51.239493123s ago: executing program 6 (id=26992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) pivot_root(0x0, 0x0) 51.238097507s ago: executing program 6 (id=26993): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) 51.207824279s ago: executing program 6 (id=26994): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kvm_unmap_hva_range\x00', r0, 0x0, 0x2000000000001}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 51.055960242s ago: executing program 6 (id=26999): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0) 51.001312053s ago: executing program 6 (id=27000): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x1, {0x1, 0xf0}, 0xff}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641", 0x3}], 0x1}, 0x4048081) 50.422324494s ago: executing program 6 (id=27005): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 50.351364772s ago: executing program 42 (id=27005): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 3.270940113s ago: executing program 9 (id=27734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 3.208741803s ago: executing program 9 (id=27736): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x300, 0x2000000, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) 2.920903259s ago: executing program 9 (id=27745): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.809749138s ago: executing program 9 (id=27749): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.307604291s ago: executing program 9 (id=27759): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x4, {[@mss={0x2, 0x4, 0x8}]}}}}}}}}, 0x0) 2.22747689s ago: executing program 9 (id=27761): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 809.718079ms ago: executing program 3 (id=27784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000010401010000000000000000090002000500014001"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) 748.793711ms ago: executing program 3 (id=27785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0xf8}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0xfe, 0x0, 0x18}}}}}, 0x36) 416.113757ms ago: executing program 5 (id=27793): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="7a9fec", 0x3) 413.559164ms ago: executing program 5 (id=27795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x4, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 406.955438ms ago: executing program 3 (id=27796): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x5, 0x3, {[0x2, 0x0, 0x0, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) 342.668075ms ago: executing program 5 (id=27798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) 340.476742ms ago: executing program 3 (id=27799): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 270.798375ms ago: executing program 7 (id=27800): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) acct(&(0x7f0000000000)='./file0\x00') 269.266147ms ago: executing program 5 (id=27801): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 268.873793ms ago: executing program 3 (id=27802): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000004a00)={0x2020}, 0xfffffe5b) 208.225415ms ago: executing program 7 (id=27803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001500)={&(0x7f00000014c0)='skb_copy_datagram_iovec\x00', r0, 0x0, 0x8000000000000001}, 0x18) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 189.299629ms ago: executing program 3 (id=27804): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, 0x8000000, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x1000, 0x0, 0x1, r2, 0x5}) 81.065548ms ago: executing program 7 (id=27805): bpf$PROG_LOAD(0x5, &(0x7f00000039c0)={0x1b, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 80.808393ms ago: executing program 7 (id=27806): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000080) 78.633311ms ago: executing program 5 (id=27807): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r0, 0x8000000000000000, 0x0) 360.559µs ago: executing program 7 (id=27808): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x60102, 0xc) fcntl$setstatus(r0, 0x4, 0x6800) write$binfmt_format(r0, &(0x7f0000000040)='0\x00', 0x2) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 201.225µs ago: executing program 5 (id=27809): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$can_raw(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) 0s ago: executing program 7 (id=27810): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_off}]}) kernel console output (not intermixed with test programs): nsistent configuration, please check. [ 815.978715][ T62] usb 14-1: new high-speed USB device number 26 using dummy_hcd [ 816.148616][ T62] usb 14-1: Using ep0 maxpacket: 8 [ 816.151435][ T62] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 816.155835][ T62] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 816.165992][ T62] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 816.169961][ T62] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 816.174246][ T62] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 816.177869][ T62] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.389625][ T62] usb 14-1: usb_control_msg returned -32 [ 816.391466][ T62] usbtmc 14-1:16.0: can't read capabilities [ 816.507481][T29001] bond1: option downdelay: invalid value (18446744073709551615) [ 816.510338][T29001] bond1: option downdelay: allowed values 0 - 2147483647 [ 816.560306][T29001] bond1 (unregistering): Released all slaves [ 816.666984][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.26146'. [ 816.669831][T29009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.26146'. [ 816.676669][ T1143] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.683627][ T1143] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.686233][ T1143] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.689832][ T1143] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.739310][T29013] netlink: 48 bytes leftover after parsing attributes in process `syz.3.26150'. [ 817.668694][ T24] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 817.828666][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 817.831872][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.835288][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.838812][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 817.842845][ T24] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 817.845577][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.849364][ T24] usb 8-1: config 0 descriptor?? [ 818.261550][ T24] hid_parser_main: 20 callbacks suppressed [ 818.261564][ T24] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 818.266907][ T24] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 818.269345][ T24] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 818.271661][ T24] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 818.273908][ T24] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 818.280282][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input93 [ 818.307534][ T24] shield 0003:0955:7214.0015: Registered Thunderstrike controller [ 818.310317][ T24] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 818.459551][ T1151] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 818.460228][T29040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.26164'. [ 818.506909][T16412] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 818.507097][ T62] usb 8-1: USB disconnect, device number 20 [ 818.511823][T16412] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 818.517647][T16412] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 818.527223][T16412] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 818.724260][ T8126] usb 14-1: USB disconnect, device number 26 [ 819.191874][T29062] loop6: detected capacity change from 0 to 7 [ 819.198680][T29062] Dev loop6: unable to read RDB block 7 [ 819.200602][T29062] loop6: unable to read partition table [ 819.206488][T29062] loop6: partition table beyond EOD, truncated [ 819.208964][T15823] libceph: connect (1)[c::]:6789 error -101 [ 819.210975][T15823] libceph: mon0 (1)[c::]:6789 connect error [ 819.216181][T29058] ceph: No mds server is up or the cluster is laggy [ 819.218952][T29062] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 819.410983][T29082] 9pnet_virtio: no channels available for device syz [ 819.508408][T29094] 9pnet_virtio: no channels available for device syz [ 819.519850][T29091] geneve2: entered promiscuous mode [ 819.752634][T29111] tipc: Started in network mode [ 819.755956][T29111] tipc: Node identity ac1414aa, cluster identity 4711 [ 819.759013][T29111] tipc: Enabled bearer , priority 10 [ 819.867715][T29117] 9pnet_virtio: no channels available for device syz [ 820.183237][T29131] netlink: 'syz.9.26204': attribute type 12 has an invalid length. [ 820.185761][T29131] netlink: 'syz.9.26204': attribute type 29 has an invalid length. [ 820.188201][T29131] netlink: 'syz.9.26204': attribute type 1 has an invalid length. [ 820.191037][T29131] netlink: 'syz.9.26204': attribute type 2 has an invalid length. [ 820.193503][T29131] netlink: 'syz.9.26204': attribute type 1 has an invalid length. [ 820.195961][T29131] netlink: 228 bytes leftover after parsing attributes in process `syz.9.26204'. [ 820.310756][T29138] atomic_op ffff888040ace198 conn xmit_atomic 0000000000000000 [ 820.520879][T29152] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 820.576537][T29156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26215'. [ 820.680415][ T40] audit: type=1326 audit(1768333856.796:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.9.26218" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f84579 code=0x0 [ 820.732007][ T40] audit: type=1326 audit(1768333856.846:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.9.26218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 820.739187][ T40] audit: type=1326 audit(1768333856.846:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.9.26218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 820.746199][ T40] audit: type=1326 audit(1768333856.846:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.9.26218" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 820.753078][ T40] audit: type=1326 audit(1768333856.846:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.9.26218" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 820.759904][ T40] audit: type=1326 audit(1768333856.846:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.9.26218" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 820.766668][ T40] audit: type=1326 audit(1768333856.846:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.9.26218" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 820.773892][ T40] audit: type=1326 audit(1768333856.846:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.9.26218" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 820.778714][ T9] tipc: Node number set to 2886997162 [ 820.781525][ T40] audit: type=1326 audit(1768333856.846:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.9.26218" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 820.789924][ T40] audit: type=1326 audit(1768333856.856:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.9.26218" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 820.934051][T29178] netlink: 'syz.3.26223': attribute type 1 has an invalid length. [ 820.946566][T29178] bond2: entered promiscuous mode [ 820.949467][T29178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 820.970714][T29178] 8021q: adding VLAN 0 to HW filter on device bond3 [ 820.973783][T29178] bond2: (slave bond3): making interface the new active one [ 820.976640][T29178] bond3: entered promiscuous mode [ 820.979600][T29178] bond2: (slave bond3): Enslaving as an active interface with an up link [ 821.118650][T16412] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 821.268617][T16412] usb 10-1: Using ep0 maxpacket: 16 [ 821.271703][T16412] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.275389][T16412] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.278734][T16412] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 821.282957][T16412] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 821.285893][T16412] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.289759][T16412] usb 10-1: config 0 descriptor?? [ 821.554778][T29193] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.26228'. [ 821.699076][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 50 seconds [ 821.701100][T16412] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:05AC:8241.0016/input/input95 [ 821.702698][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 50 seconds [ 821.709974][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 50 seconds [ 821.714653][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 50 seconds [ 821.768265][T16412] appleir 0003:05AC:8241.0016: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 821.880086][T29206] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.26232'. [ 821.897368][ T34] usb 10-1: USB disconnect, device number 5 [ 821.907942][T29208] netlink: 'syz.2.26233': attribute type 1 has an invalid length. [ 821.910998][T29208] netlink: 'syz.2.26233': attribute type 6 has an invalid length. [ 821.913791][T29208] netlink: 52 bytes leftover after parsing attributes in process `syz.2.26233'. [ 822.133030][T29215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26236'. [ 822.168878][T29220] input: syz1 as /devices/virtual/input/input96 [ 822.171701][T29220] input: failed to attach handler leds to device input96, error: -6 [ 822.428678][ T34] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 822.489045][T16412] usb 14-1: new high-speed USB device number 27 using dummy_hcd [ 822.578941][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 822.582108][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 822.584862][ T34] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 822.588474][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.593027][ T34] usb 8-1: config 0 descriptor?? [ 822.640609][T16412] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 822.645521][T16412] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 822.650054][T16412] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 822.654158][T16412] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 822.659818][T16412] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 822.663619][T16412] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.669699][T16412] usb 14-1: config 0 descriptor?? [ 822.955886][T29265] sctp: [Deprecated]: syz.2.26259 (pid 29265) Use of int in maxseg socket option. [ 822.955886][T29265] Use struct sctp_assoc_value instead [ 823.010960][ T34] mcp2221 0003:04D8:00DD.0017: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 823.083960][T16412] usbhid 14-1:0.0: can't add hid device: -71 [ 823.086606][T16412] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 823.096445][T16412] usb 14-1: USB disconnect, device number 27 [ 823.209121][T15823] usb 8-1: USB disconnect, device number 21 [ 823.634364][T29269] tipc: Started in network mode [ 823.636136][T29269] tipc: Node identity ac1414aa, cluster identity 4711 [ 823.639831][T29269] tipc: Enabled bearer , priority 10 [ 823.701207][T29276] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 823.988678][ T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 824.008645][ T6198] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 824.149165][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 824.152380][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 824.155190][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 824.158466][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 824.163200][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 824.166370][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 824.170603][ T6198] usb 10-1: Using ep0 maxpacket: 32 [ 824.173199][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 824.176309][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.181181][ T6198] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.185909][ T6198] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.191426][ T6198] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 824.199715][ T6198] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 824.202689][ T6198] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.209350][ T6198] usb 10-1: config 0 descriptor?? [ 824.401905][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 824.403757][ T9] usbtmc 8-1:16.0: can't read capabilities [ 824.644791][ T6198] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5011.0018/input/input97 [ 824.671608][ T34] usb 8-1: USB disconnect, device number 22 [ 824.727877][ T6198] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5011.0018/input/input98 [ 824.739398][ T6198] kye 0003:0458:5011.0018: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 824.759859][T15823] tipc: Node number set to 2886997162 [ 825.204682][T29299] tipc: Started in network mode [ 825.207876][T29299] tipc: Node identity ac1414aa, cluster identity 4711 [ 825.210804][T29299] tipc: Enabled bearer , priority 10 [ 825.217977][T29297] overlayfs: missing 'lowerdir' [ 825.703621][ C0] kye 0003:0458:5011.0018: usb_submit_urb(ctrl) failed: -1 [ 825.899074][ T6198] usb 14-1: new high-speed USB device number 28 using dummy_hcd [ 826.051606][ T6198] usb 14-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 826.055306][ T6198] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.059471][ T6198] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.062621][ T6198] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 826.067661][ T6198] usb 14-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 826.070865][ T6198] usb 14-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 826.073526][ T6198] usb 14-1: Manufacturer: syz [ 826.076431][ T6198] usb 14-1: config 0 descriptor?? [ 826.336977][T29329] netlink: 'syz.5.26286': attribute type 1 has an invalid length. [ 826.338666][T13393] tipc: Node number set to 2886997162 [ 826.491372][ T6197] usb 10-1: USB disconnect, device number 6 [ 826.494011][ T6198] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 826.503819][ T6198] appleir 0003:05AC:8243.0019: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 826.694902][ T34] usb 14-1: USB disconnect, device number 28 [ 826.970651][T29362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26301'. [ 826.986330][T29362] bond1: Invalid ad_actor_system MAC address. [ 826.988464][T29362] bond1: option ad_actor_system: invalid value (68719607821) [ 827.029832][T29362] bond1 (unregistering): Released all slaves [ 827.296977][T29382] vxcan0: tx address claim with different name [ 828.098960][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 55 seconds [ 828.102421][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 55 seconds [ 828.105972][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 55 seconds [ 828.109927][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 55 seconds [ 828.117596][T29421] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.26329'. [ 828.145902][T29423] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 828.150196][T29423] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 828.153835][T29423] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 828.441347][T29431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.26334'. [ 828.445230][T29431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.26334'. [ 828.709802][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 828.860766][ T24] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 828.864467][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 828.867905][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 828.873136][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 828.877376][ T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 828.882413][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.888399][ T24] usb 10-1: config 0 descriptor?? [ 829.018878][ T6198] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 829.168836][ T6198] usb 8-1: Using ep0 maxpacket: 16 [ 829.173798][ T6198] usb 8-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 829.176743][ T6198] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.179385][ T6198] usb 8-1: Product: syz [ 829.180773][ T6198] usb 8-1: Manufacturer: syz [ 829.182317][ T6198] usb 8-1: SerialNumber: syz [ 829.185083][ T6198] usb 8-1: config 0 descriptor?? [ 829.189028][ T6198] as10x_usb: device has been detected [ 829.191044][ T6198] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 829.196747][ T6198] usb 8-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 829.209718][ T6198] as10x_usb: error during firmware upload part1 [ 829.211885][ T6198] Registered device Sky IT Digital Key (green led) [ 829.296798][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 829.301231][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 829.303705][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 829.306085][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 829.308456][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 829.315552][ T24] plantronics 0003:047F:FFFF.001A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 829.338708][ T6127] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 829.340619][T16544] Bluetooth: hci2: command 0x1003 tx timeout [ 829.393025][T29450] random: crng reseeded on system resumption [ 829.408051][T14730] usb 8-1: USB disconnect, device number 23 [ 829.418972][T14730] Unregistered device Sky IT Digital Key (green led) [ 829.419551][T14730] as10x_usb: device has been disconnected [ 829.497280][ T24] usb 10-1: USB disconnect, device number 7 [ 829.995920][ T40] kauditd_printk_skb: 613 callbacks suppressed [ 829.995937][ T40] audit: type=1800 audit(1768333867.113:5022): pid=29491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.26361" name="nullb0" dev="devtmpfs" ino=3352 res=0 errno=0 [ 830.090545][T29501] netlink: 40 bytes leftover after parsing attributes in process `syz.5.26366'. [ 830.725565][ T40] audit: type=1326 audit(1768333867.843:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29539 comm="syz.3.26384" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x0 [ 831.595785][T29565] syzkaller1: entered promiscuous mode [ 831.598117][T29565] syzkaller1: entered allmulticast mode [ 831.688723][T15823] usb 14-1: new high-speed USB device number 29 using dummy_hcd [ 831.849949][T15823] usb 14-1: config index 0 descriptor too short (expected 39, got 27) [ 831.852556][T15823] usb 14-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 831.855620][T15823] usb 14-1: config 0 interface 0 has no altsetting 0 [ 831.859169][T15823] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 831.862113][T15823] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 831.864750][T15823] usb 14-1: Product: syz [ 831.866112][T15823] usb 14-1: Manufacturer: syz [ 831.867646][T15823] usb 14-1: SerialNumber: syz [ 831.871197][T15823] usb 14-1: config 0 descriptor?? [ 831.874178][T15823] hub 14-1:0.0: bad descriptor, ignoring hub [ 831.876172][T15823] hub 14-1:0.0: probe with driver hub failed with error -5 [ 831.880068][T15823] usb 14-1: selecting invalid altsetting 0 [ 832.410242][T29593] netlink: 20 bytes leftover after parsing attributes in process `syz.5.26408'. [ 832.768893][T29563] usb 14-1: reset high-speed USB device number 29 using dummy_hcd [ 832.979318][T29617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.26419'. [ 833.139775][T29563] usb 14-1: failed to restore interface 0 altsetting 251 (error=-71) [ 833.144509][ T6198] usb 14-1: USB disconnect, device number 29 [ 833.364714][ T40] audit: type=1326 audit(1768333870.483:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29624 comm="syz.5.26423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 833.374422][ T40] audit: type=1326 audit(1768333870.483:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29624 comm="syz.5.26423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 833.381235][ T40] audit: type=1326 audit(1768333870.483:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29624 comm="syz.5.26423" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 833.387759][ T40] audit: type=1326 audit(1768333870.483:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29624 comm="syz.5.26423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 833.396440][ T40] audit: type=1326 audit(1768333870.483:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29624 comm="syz.5.26423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 833.418108][T29629] macvlan2: entered promiscuous mode [ 833.421854][T29629] batman_adv: batadv0: Adding interface: macvlan2 [ 833.423816][T29629] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.431625][T29629] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 833.861438][ T25] block nbd1: Possible stuck request ffff888026bb0000: control (read@0,4096B). Runtime 210 seconds [ 833.937900][T29661] input: syz0 as /devices/virtual/input/input99 [ 834.051449][T29665] 9pnet: p9_errstr2errno: server reported unknown error  [ 834.268690][ T34] usb 14-1: new high-speed USB device number 30 using dummy_hcd [ 834.429894][ T34] usb 14-1: config index 0 descriptor too short (expected 23569, got 27) [ 834.432966][ T34] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.438186][ T34] usb 14-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 834.442526][ T34] usb 14-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 834.445410][ T34] usb 14-1: Manufacturer: syz [ 834.450744][ T34] usb 14-1: config 0 descriptor?? [ 834.498706][ T34] rc_core: IR keymap rc-hauppauge not found [ 834.499429][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 60 seconds [ 834.500576][ T34] Registered IR keymap rc-empty [ 834.501277][ T34] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/rc/rc0 [ 834.505140][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 60 seconds [ 834.507633][ T34] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/rc/rc0/input100 [ 834.510859][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 60 seconds [ 834.522892][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 60 seconds [ 834.619684][ T6127] Bluetooth: hci1: command 0x2016 tx timeout [ 834.656025][T16412] usb 14-1: USB disconnect, device number 30 [ 834.768447][T29697] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 834.980063][T29712] netlink: 24 bytes leftover after parsing attributes in process `syz.5.26462'. [ 835.635685][T29732] netlink: 'syz.2.26470': attribute type 3 has an invalid length. [ 835.758728][ T8126] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 835.799021][ T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 835.944770][ T8126] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.947784][ T8126] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 835.959284][ T8126] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 835.962067][ T8126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.965700][ T9] usb 8-1: config 0 has no interfaces? [ 835.966507][ T8126] usb 10-1: config 0 descriptor?? [ 835.967916][ T9] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 835.978776][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.982263][ T8126] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 835.984463][ T8126] dvb-usb: bulk message failed: -22 (3/0) [ 835.984549][ T9] usb 8-1: config 0 descriptor?? [ 835.987465][ T8126] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 835.991895][ T8126] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 835.994002][ T8126] usb 10-1: media controller created [ 835.996397][ T8126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 836.013035][ T8126] dvb-usb: bulk message failed: -22 (6/0) [ 836.014792][ T8126] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 836.021409][ T8126] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input101 [ 836.040801][ T8126] dvb-usb: schedule remote query interval to 150 msecs. [ 836.042985][ T8126] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 836.106118][T29740] tun1: tun_chr_ioctl cmd 1074025675 [ 836.107886][T29740] tun1: persist enabled [ 836.109637][T29740] tun1: tun_chr_ioctl cmd 1074025675 [ 836.111361][T29740] tun1: persist enabled [ 836.192929][T29727] dvb-usb: bulk message failed: -22 (2/0) [ 836.198684][ T8126] usb 10-1: USB disconnect, device number 8 [ 836.289990][ T8126] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 836.698675][T16544] Bluetooth: hci1: command 0x2016 tx timeout [ 837.472425][T29759] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 837.714590][T16544] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 837.720084][T16544] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 837.722532][T16544] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 837.725267][T16544] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 837.727733][T16544] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 837.753796][T29768] ip6_vti0 speed is unknown, defaulting to 1000 [ 837.949036][T29768] chnl_net:caif_netlink_parms(): no params data found [ 838.025167][T29768] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.027465][T29768] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.030373][T29768] bridge_slave_0: entered allmulticast mode [ 838.033151][T29768] bridge_slave_0: entered promiscuous mode [ 838.036485][T29768] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.038901][T29768] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.041234][T29768] bridge_slave_1: entered allmulticast mode [ 838.043946][T29768] bridge_slave_1: entered promiscuous mode [ 838.061460][T29768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.066047][T29768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.081079][T29768] team0: Port device team_slave_0 added [ 838.084232][T29768] team0: Port device team_slave_1 added [ 838.096985][T29768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.099357][T29768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.107265][T29768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.111856][T29768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.114089][T29768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.122140][T29768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.145130][T29768] hsr_slave_0: entered promiscuous mode [ 838.147473][T29768] hsr_slave_1: entered promiscuous mode [ 838.149904][T29768] debugfs: 'hsr0' already exists in 'hsr' [ 838.151918][T29768] Cannot create hsr debugfs directory [ 838.559831][ T9] usb 8-1: USB disconnect, device number 24 [ 838.836106][T29768] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 838.901310][T29768] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 839.289895][T29768] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 839.332232][T29768] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 839.406541][T29768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.415937][T29768] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.423933][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.426418][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.433912][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.436246][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.576823][T29768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.747545][T29768] veth0_vlan: entered promiscuous mode [ 839.749975][ T6127] Bluetooth: hci2: command tx timeout [ 839.754742][T29768] veth1_vlan: entered promiscuous mode [ 839.777461][T29768] veth0_macvtap: entered promiscuous mode [ 839.784757][T29768] veth1_macvtap: entered promiscuous mode [ 839.797430][T29768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.807348][T29768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.815212][ T3079] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.819353][ T3079] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.822566][ T3079] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.825959][ T3079] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.002991][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.005570][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.021696][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.024744][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.171637][T29793] netlink: 'syz.9.26496': attribute type 27 has an invalid length. [ 840.418779][T29793] syz_tun: left promiscuous mode [ 840.461440][T29793] bridge0: left allmulticast mode [ 840.498765][T29793] dummy0: left promiscuous mode [ 840.918814][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 65 seconds [ 840.922508][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 65 seconds [ 840.925998][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 65 seconds [ 840.929660][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 65 seconds [ 841.041720][T29793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.818813][ T6127] Bluetooth: hci2: command tx timeout [ 842.050274][ T13] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.062961][ T13] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.079487][ T13] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.237071][T29818] loop5: detected capacity change from 0 to 7 [ 842.244301][T19697] Dev loop5: unable to read RDB block 7 [ 842.246159][T19697] loop5: unable to read partition table [ 842.248458][T19697] loop5: partition table beyond EOD, truncated [ 842.252427][T29818] Dev loop5: unable to read RDB block 7 [ 842.254860][T29818] loop5: unable to read partition table [ 842.257519][T29818] loop5: partition table beyond EOD, truncated [ 842.260786][T29818] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 842.543037][T29831] netlink: 'syz.5.26506': attribute type 1 has an invalid length. [ 842.546206][T29831] netlink: 20 bytes leftover after parsing attributes in process `syz.5.26506'. [ 842.652332][T29837] netlink: 63 bytes leftover after parsing attributes in process `syz.9.26509'. [ 842.719019][T29841] vimc link validate: Scaler:src:16x16 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 842.833616][ T62] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 843.008717][ T62] usb 10-1: Using ep0 maxpacket: 32 [ 843.014459][ T62] usb 10-1: unable to get BOS descriptor or descriptor too short [ 843.021094][ T62] usb 10-1: config 255 has an invalid interface number: 81 but max is 0 [ 843.027165][ T62] usb 10-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 843.030576][ T62] usb 10-1: config 255 has no interface number 0 [ 843.032741][ T62] usb 10-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 843.036568][ T62] usb 10-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 843.040279][ T62] usb 10-1: config 255 interface 81 has no altsetting 0 [ 843.044730][ T62] usb 10-1: string descriptor 0 read error: -22 [ 843.046951][ T62] usb 10-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 843.049966][ T62] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.066342][ T62] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:255.81/input/input102 [ 843.138168][T29860] syzkaller1: entered promiscuous mode [ 843.140624][T29860] syzkaller1: entered allmulticast mode [ 843.673268][ T62] usb 10-1: USB disconnect, device number 9 [ 843.911209][ T6127] Bluetooth: hci2: command tx timeout [ 843.973394][T29872] netlink: 96 bytes leftover after parsing attributes in process `syz.9.26525'. [ 844.065084][T29878] netlink: 72 bytes leftover after parsing attributes in process `syz.3.26527'. [ 844.720440][T29907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 845.248429][ T40] audit: type=1326 audit(1768333882.363:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.26550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 845.257423][ T40] audit: type=1326 audit(1768333882.373:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.26550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 845.260435][T29929] kvm: apic: phys broadcast and lowest prio [ 845.268962][ T40] audit: type=1326 audit(1768333882.393:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.26550" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 845.286688][ T40] audit: type=1326 audit(1768333882.403:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.26550" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 845.293593][ T40] audit: type=1326 audit(1768333882.403:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.26550" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 845.308915][ T40] audit: type=1326 audit(1768333882.403:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.26550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 845.316450][ T40] audit: type=1326 audit(1768333882.403:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.26550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 845.325688][ T40] audit: type=1326 audit(1768333882.403:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.26550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 845.332848][ T40] audit: type=1326 audit(1768333882.403:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.26550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 845.339987][ T40] audit: type=1326 audit(1768333882.403:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.26550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 845.776962][T29955] netlink: 'syz.3.26559': attribute type 13 has an invalid length. [ 845.978924][ T6127] Bluetooth: hci2: command tx timeout [ 847.098707][T14730] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 847.198736][ T34] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 847.234188][T30010] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 847.238023][T30010] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 847.260785][T14730] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 847.263577][T14730] usb 10-1: config 0 has no interface number 0 [ 847.265725][T14730] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 847.269673][T14730] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 847.273253][T14730] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 847.277617][T14730] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 847.280583][T14730] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 847.283056][T14730] usb 10-1: Product: syz [ 847.284364][T14730] usb 10-1: SerialNumber: syz [ 847.287425][T14730] usb 10-1: config 0 descriptor?? [ 847.291321][T14730] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 847.294309][T14730] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.8/input/input103 [ 847.309119][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 70 seconds [ 847.312655][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 70 seconds [ 847.316039][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 70 seconds [ 847.319603][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 70 seconds [ 847.360400][ T34] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 847.363901][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 847.367415][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 847.371662][ T34] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 847.375684][ T34] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 847.378612][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.384321][ T34] usb 11-1: config 0 descriptor?? [ 847.386855][T29996] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 847.493305][ C3] cm109 10-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 847.708813][ C2] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.711547][ C2] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.714141][ C2] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.716908][ C2] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.719467][T16412] usb 10-1: USB disconnect, device number 10 [ 847.721867][ C2] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.721886][ C2] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 847.759590][T16412] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 847.788709][ T6197] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 847.798931][ T34] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 847.801846][ T34] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 847.804217][ T34] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 847.806720][ T34] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 847.809482][ T34] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 847.811900][ T34] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 847.817807][ T34] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 847.938773][ T6197] usb 8-1: Using ep0 maxpacket: 8 [ 847.942382][ T6197] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 847.944961][ T6197] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 847.947957][ T6197] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 847.951603][ T6197] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 847.954671][ T6197] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.958772][ T6197] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 847.961529][ T6197] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.060680][T13393] usb 11-1: USB disconnect, device number 5 [ 848.171266][ T6197] usb 8-1: GET_CAPABILITIES returned 0 [ 848.173207][ T6197] usbtmc 8-1:16.0: can't read capabilities [ 848.429620][T30023] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 848.429639][ T34] usb 8-1: USB disconnect, device number 25 [ 849.249906][T30060] netlink: zone id is out of range [ 849.498700][ T6127] Bluetooth: hci2: command tx timeout [ 849.818698][T14885] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 850.138674][ T62] usb 14-1: new high-speed USB device number 31 using dummy_hcd [ 850.194142][T30092] netlink: zone id is out of range [ 850.286756][T30096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26618'. [ 850.321953][ T62] usb 14-1: Using ep0 maxpacket: 8 [ 850.325573][ T62] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 850.330683][ T62] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 850.337161][ T62] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 850.343569][ T62] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 850.346794][ T62] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 850.350993][ T62] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 850.353981][ T62] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.521731][T30104] netlink: 'syz.5.26622': attribute type 19 has an invalid length. [ 850.569358][ T62] usb 14-1: GET_CAPABILITIES returned 0 [ 850.571219][ T62] usbtmc 14-1:16.0: can't read capabilities [ 850.818713][T13393] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 850.827448][T30086] usbtmc 14-1:16.0: usb_control_msg returned -71 [ 850.830382][ T34] usb 14-1: USB disconnect, device number 31 [ 850.972773][T13393] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 850.988975][T13393] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.992174][T13393] usb 8-1: Product: syz [ 850.993897][T13393] usb 8-1: Manufacturer: syz [ 850.995731][T13393] usb 8-1: SerialNumber: syz [ 851.008286][T13393] usb 8-1: config 0 descriptor?? [ 851.028285][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 851.028295][ T40] audit: type=1326 audit(1768333888.143:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30114 comm="syz.6.26626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 851.039591][ T40] audit: type=1326 audit(1768333888.163:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30114 comm="syz.6.26626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 851.049222][ T40] audit: type=1326 audit(1768333888.163:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30114 comm="syz.6.26626" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 851.058673][ T40] audit: type=1326 audit(1768333888.173:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30114 comm="syz.6.26626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 851.066299][ T40] audit: type=1326 audit(1768333888.173:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30114 comm="syz.6.26626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 851.073326][ T40] audit: type=1326 audit(1768333888.173:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30114 comm="syz.6.26626" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 851.184730][ T40] audit: type=1326 audit(1768333888.303:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30114 comm="syz.6.26626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 851.192830][ T40] audit: type=1326 audit(1768333888.303:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30114 comm="syz.6.26626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 851.222676][T13393] usb 8-1: USB disconnect, device number 26 [ 851.798794][T30133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 852.508635][ T6197] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 852.543225][T30170] erspan0: left promiscuous mode [ 852.553186][T30170] ip6gretap0: left promiscuous mode [ 852.558315][T30170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.561451][T30170] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.609834][T30170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 852.671940][ T6197] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 852.675509][ T6197] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.678081][ T6197] usb 10-1: Product: syz [ 852.679702][ T6197] usb 10-1: Manufacturer: syz [ 852.681058][ T6197] usb 10-1: SerialNumber: syz [ 852.683912][ T6197] usb 10-1: config 0 descriptor?? [ 852.686201][ T40] audit: type=1326 audit(1768333889.803:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30180 comm="syz.9.26650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 852.693958][ T40] audit: type=1326 audit(1768333889.813:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30180 comm="syz.9.26650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 852.868974][T13393] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 852.893536][ T6197] usb 10-1: USB disconnect, device number 11 [ 853.019987][T13393] usb 11-1: Using ep0 maxpacket: 8 [ 853.023104][T13393] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 853.025619][T13393] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 853.028336][T13393] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 853.032827][T13393] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 853.036103][T13393] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.041117][T13393] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 853.044338][T13393] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.260481][T13393] usb 11-1: GET_CAPABILITIES returned 0 [ 853.262623][T13393] usbtmc 11-1:16.0: can't read capabilities [ 853.521285][T30178] usbtmc 11-1:16.0: usb_control_msg returned -71 [ 853.521514][ T24] usb 11-1: USB disconnect, device number 6 [ 853.591396][T30205] netlink: 48 bytes leftover after parsing attributes in process `syz.9.26662'. [ 853.708780][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 75 seconds [ 853.711944][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 75 seconds [ 853.715415][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 75 seconds [ 853.718701][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 75 seconds [ 854.038659][ T34] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 854.188779][ T34] usb 10-1: Using ep0 maxpacket: 16 [ 854.192184][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.196279][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.200158][ T34] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 854.205129][ T34] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 854.208618][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.208666][ T6197] usb 14-1: new full-speed USB device number 32 using dummy_hcd [ 854.215357][ T34] usb 10-1: config 0 descriptor?? [ 854.326441][T30231] input: syz0 as /devices/virtual/input/input104 [ 854.370448][ T6197] usb 14-1: config 0 has an invalid interface number: 8 but max is 0 [ 854.372998][ T6197] usb 14-1: config 0 has no interface number 0 [ 854.374856][ T6197] usb 14-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 854.378328][ T6197] usb 14-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 854.382430][ T6197] usb 14-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 854.386525][ T6197] usb 14-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 854.394341][ T6197] usb 14-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 854.396824][ T6197] usb 14-1: Product: syz [ 854.398185][ T6197] usb 14-1: SerialNumber: syz [ 854.401076][ T6197] usb 14-1: config 0 descriptor?? [ 854.405501][ T6197] cm109 14-1:0.8: invalid payload size 0, expected 4 [ 854.411557][ T6197] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.8/input/input105 [ 854.612388][ C1] cm109 14-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 854.625048][ T34] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 854.627301][ T34] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 854.630826][ T34] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 854.633897][ T34] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 854.636583][ T34] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 854.642928][ T34] input: HID 0955:7214 Haptics as /devices/virtual/input/input106 [ 854.662318][ T34] shield 0003:0955:7214.001C: Registered Thunderstrike controller [ 854.665248][ T34] shield 0003:0955:7214.001C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 854.825611][T30216] netlink: 20 bytes leftover after parsing attributes in process `syz.5.26668'. [ 854.872115][ C1] cm109 14-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 854.872276][ T6199] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 854.874511][ C1] cm109 14-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 854.879944][ T29] usb 14-1: USB disconnect, device number 32 [ 854.881505][T14730] usb 10-1: USB disconnect, device number 12 [ 854.881866][ C1] cm109 14-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 854.886249][ C1] cm109 14-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 854.887633][ T6199] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 854.894744][ T6199] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 854.898599][ T6199] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 854.919458][ T29] cm109 14-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 855.529004][T30252] geneve2: entered promiscuous mode [ 855.673981][ T29] libceph: connect (1)[c::]:6789 error -101 [ 855.676053][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 855.718781][T30260] ceph: No mds server is up or the cluster is laggy [ 855.728150][T30267] input: syz0 as /devices/virtual/input/input107 [ 856.471159][T30278] 9pnet_virtio: no channels available for device syz [ 856.623967][T30292] 9pnet_virtio: no channels available for device syz [ 856.838772][T16412] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 856.998722][T16412] usb 10-1: Using ep0 maxpacket: 8 [ 857.001739][T16412] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 857.004521][T16412] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 857.010541][T16412] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 857.013987][T16412] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 857.017297][T16412] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 857.021555][T16412] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 857.024486][T16412] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.234181][T16412] usb 10-1: GET_CAPABILITIES returned 0 [ 857.236052][T16412] usbtmc 10-1:16.0: can't read capabilities [ 857.491901][T30288] usbtmc 10-1:16.0: usb_control_msg returned -71 [ 857.493232][T16412] usb 10-1: USB disconnect, device number 13 [ 858.623316][T30340] netlink: 68 bytes leftover after parsing attributes in process `syz.9.26723'. [ 858.626140][T30340] netlink: 68 bytes leftover after parsing attributes in process `syz.9.26723'. [ 858.818726][T16412] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 858.968616][T16412] usb 10-1: Using ep0 maxpacket: 8 [ 858.972909][T16412] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 858.975472][T16412] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 858.978523][T16412] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 858.982227][T16412] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 858.985379][T16412] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.989440][T16412] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 858.992490][T16412] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.200904][T16412] usb 10-1: GET_CAPABILITIES returned 0 [ 859.202789][T16412] usbtmc 10-1:16.0: can't read capabilities [ 859.464549][T30334] usbtmc 10-1:16.0: usb_control_msg returned -71 [ 859.464799][ T6197] usb 10-1: USB disconnect, device number 14 [ 859.665111][T30372] input: syz1 as /devices/virtual/input/input110 [ 859.667237][T30372] input: failed to attach handler leds to device input110, error: -6 [ 859.727960][T30374] netlink: 'syz.3.26735': attribute type 12 has an invalid length. [ 859.732107][T30374] netlink: 'syz.3.26735': attribute type 29 has an invalid length. [ 859.735349][T30374] netlink: 'syz.3.26735': attribute type 1 has an invalid length. [ 859.738495][T30374] netlink: 'syz.3.26735': attribute type 2 has an invalid length. [ 859.742362][T30374] netlink: 'syz.3.26735': attribute type 1 has an invalid length. [ 859.744847][T30374] netlink: 228 bytes leftover after parsing attributes in process `syz.3.26735'. [ 859.885940][T30382] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.26741'. [ 860.119256][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 80 seconds [ 860.122626][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 80 seconds [ 860.126098][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 80 seconds [ 860.129583][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 80 seconds [ 860.162233][T30396] netlink: 212336 bytes leftover after parsing attributes in process `syz.9.26749'. [ 860.413701][T30412] sctp: [Deprecated]: syz.5.26765 (pid 30412) Use of int in maxseg socket option. [ 860.413701][T30412] Use struct sctp_assoc_value instead [ 860.562548][T30423] atomic_op ffff88806dd1d198 conn xmit_atomic 0000000000000000 [ 860.575312][T30425] netlink: 4 bytes leftover after parsing attributes in process `syz.9.26761'. [ 860.612710][T30428] netlink: 'syz.6.26763': attribute type 1 has an invalid length. [ 860.615132][T30428] netlink: 'syz.6.26763': attribute type 6 has an invalid length. [ 860.617566][T30428] netlink: 52 bytes leftover after parsing attributes in process `syz.6.26763'. [ 860.834407][T30448] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 861.135611][T30463] netlink: 'syz.5.26779': attribute type 1 has an invalid length. [ 861.198153][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 861.198164][ T40] audit: type=1326 audit(1768333899.309:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30465 comm="syz.9.26780" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f84579 code=0x0 [ 861.290665][T30463] bond1: entered promiscuous mode [ 861.292545][T30463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 861.301230][T30471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26781'. [ 861.309405][T30468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 861.313535][T30468] bond1: (slave bond2): making interface the new active one [ 861.316451][T30468] bond2: entered promiscuous mode [ 861.319253][T30468] bond1: (slave bond2): Enslaving as an active interface with an up link [ 861.431658][T30481] atomic_op ffff888000de0198 conn xmit_atomic 0000000000000000 [ 861.488286][T30486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26786'. [ 861.631326][T30499] overlayfs: missing 'lowerdir' [ 861.634342][T30501] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.26790'. [ 861.690398][T30505] input: syz1 as /devices/virtual/input/input111 [ 861.692573][T30505] input: failed to attach handler leds to device input111, error: -6 [ 861.870167][T30518] sctp: [Deprecated]: syz.6.26811 (pid 30518) Use of int in maxseg socket option. [ 861.870167][T30518] Use struct sctp_assoc_value instead [ 862.748740][ T9] usb 14-1: new high-speed USB device number 33 using dummy_hcd [ 862.818629][ T34] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 862.898670][ T9] usb 14-1: Using ep0 maxpacket: 8 [ 862.902000][ T9] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 862.905506][ T9] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 862.909498][ T9] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 862.912813][ T9] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 862.916363][ T9] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 862.920614][ T9] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 862.923584][ T9] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.969317][ T34] usb 11-1: Using ep0 maxpacket: 32 [ 862.972681][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.976678][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.980092][ T34] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 862.984145][ T34] usb 11-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 862.987092][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.991086][ T34] usb 11-1: config 0 descriptor?? [ 863.133711][ T9] usb 14-1: GET_CAPABILITIES returned 0 [ 863.135522][ T9] usbtmc 14-1:16.0: can't read capabilities [ 863.392606][T16412] usb 14-1: USB disconnect, device number 33 [ 863.414374][ T34] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5011.001D/input/input112 [ 863.480746][ T34] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5011.001D/input/input113 [ 863.519208][ T34] kye 0003:0458:5011.001D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 863.938727][ T25] block nbd1: Possible stuck request ffff888026bb0000: control (read@0,4096B). Runtime 240 seconds [ 864.428918][ C3] kye 0003:0458:5011.001D: usb_submit_urb(ctrl) failed: -1 [ 864.965327][T30579] vxcan0: tx address claim with different name [ 865.188105][T30603] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.26840'. [ 865.232228][ T6197] usb 11-1: USB disconnect, device number 7 [ 865.287238][T30616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26853'. [ 865.309552][T30616] bond4: Invalid ad_actor_system MAC address. [ 865.312198][T30616] bond4: option ad_actor_system: invalid value (68719607821) [ 865.343520][T30616] bond4 (unregistering): Released all slaves [ 865.488733][ T9] usb 14-1: new high-speed USB device number 34 using dummy_hcd [ 865.638633][ T9] usb 14-1: Using ep0 maxpacket: 32 [ 865.641784][ T9] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.646243][ T9] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.650221][ T9] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 865.654767][ T9] usb 14-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 865.658098][ T9] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.663756][ T9] usb 14-1: config 0 descriptor?? [ 866.086434][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:0458:5011.001E/input/input114 [ 866.158085][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:0458:5011.001E/input/input115 [ 866.179546][ T9] kye 0003:0458:5011.001E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.9-1/input0 [ 866.209552][ T6197] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 866.368625][ T6197] usb 10-1: Using ep0 maxpacket: 16 [ 866.373176][ T6197] usb 10-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 866.376468][ T6197] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.379719][ T6197] usb 10-1: Product: syz [ 866.381179][ T6197] usb 10-1: Manufacturer: syz [ 866.382902][ T6197] usb 10-1: SerialNumber: syz [ 866.385571][ T6197] usb 10-1: config 0 descriptor?? [ 866.400028][ T6197] as10x_usb: device has been detected [ 866.402583][ T6197] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 866.410268][ T6197] usb 10-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 866.418068][ T6197] as10x_usb: error during firmware upload part1 [ 866.420461][ T6197] Registered device Sky IT Digital Key (green led) [ 866.498762][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 85 seconds [ 866.504342][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 85 seconds [ 866.507798][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 85 seconds [ 866.511312][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 85 seconds [ 866.601883][T30650] random: crng reseeded on system resumption [ 866.608851][ T6199] usb 10-1: USB disconnect, device number 15 [ 866.619215][ T6199] Unregistered device Sky IT Digital Key (green led) [ 866.619814][ T6199] as10x_usb: device has been disconnected [ 867.209486][ C0] kye 0003:0458:5011.001E: usb_submit_urb(ctrl) failed: -1 [ 867.333372][T30688] vxcan0: tx address claim with different name [ 867.954844][T30722] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.26891'. [ 867.967066][T30724] input: syz1 as /devices/virtual/input/input116 [ 867.981890][ T6197] usb 14-1: USB disconnect, device number 34 [ 868.243115][T30740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26902'. [ 868.246032][T30740] netlink: 'syz.3.26902': attribute type 1 has an invalid length. [ 868.347496][T30752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26909'. [ 868.447919][ T40] audit: type=1800 audit(1768333906.559:5067): pid=30763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.26913" name="nullb0" dev="devtmpfs" ino=3352 res=0 errno=0 [ 868.602928][T30774] lo: Caught tx_queue_len zero misconfig [ 868.604874][T30774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.26919'. [ 868.731460][ T40] audit: type=1326 audit(1768333906.849:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30782 comm="syz.9.26923" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x0 [ 868.747455][T30785] syzkaller1: entered promiscuous mode [ 868.750793][T30785] syzkaller1: entered allmulticast mode [ 869.540006][ T842] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 869.542395][ T1145] Bluetooth: hci3: Frame reassembly failed (-84) [ 869.690063][ T842] usb 11-1: config 0 has no interfaces? [ 869.693076][ T842] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 869.696250][ T842] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 869.699176][ T842] usb 11-1: Product: syz [ 869.700942][ T842] usb 11-1: Manufacturer: syz [ 869.705168][ T842] usb 11-1: config 0 descriptor?? [ 869.914839][ T6199] usb 11-1: USB disconnect, device number 8 [ 870.079871][ T40] audit: type=1326 audit(1768333908.199:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.3.26959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 870.088822][ T40] audit: type=1326 audit(1768333908.199:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.3.26959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 870.097215][ T40] audit: type=1326 audit(1768333908.209:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.3.26959" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 870.106260][ T40] audit: type=1326 audit(1768333908.209:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.3.26959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 870.114579][ T40] audit: type=1326 audit(1768333908.209:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.3.26959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 870.200693][T30866] macvlan3: entered promiscuous mode [ 870.203521][T30866] batman_adv: batadv0: Adding interface: macvlan3 [ 870.206091][T30866] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.216228][T30866] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active [ 870.364271][T30876] Invalid ELF header magic: != ELF [ 870.590523][T30891] netlink: 72 bytes leftover after parsing attributes in process `syz.6.26973'. [ 870.630439][T30896] input: syz0 as /devices/virtual/input/input117 [ 871.580519][T16544] Bluetooth: hci3: command 0x1003 tx timeout [ 871.582988][ T6127] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 872.543453][T30966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27008'. [ 872.546934][T30966] netlink: 'syz.5.27008': attribute type 1 has an invalid length. [ 872.563765][T16544] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 872.570759][T16544] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 872.573540][T16544] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 872.577363][T16544] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 872.580836][T16544] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 872.588019][T30969] netlink: 'syz.3.27014': attribute type 27 has an invalid length. [ 872.719206][T30969] lo: left promiscuous mode [ 872.868820][T30969] syz_tun: left promiscuous mode [ 872.911776][T30969] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.914734][T30969] bridge0: left allmulticast mode [ 872.919989][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 90 seconds [ 872.923961][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 90 seconds [ 872.928171][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 90 seconds [ 872.932227][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 90 seconds [ 873.158668][ T34] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 873.310213][ T34] usb 10-1: config 0 has no interfaces? [ 873.312250][ T34] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 873.315674][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.320102][ T34] usb 10-1: config 0 descriptor?? [ 873.604682][T30969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 873.616423][T30969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.618698][ T6127] Bluetooth: hci2: command tx timeout [ 874.678775][T30969] macvlan2: left promiscuous mode [ 874.684065][T30969] bond2: left promiscuous mode [ 874.685654][T30969] bond3: left promiscuous mode [ 874.739570][T30969] macvlan3: left promiscuous mode [ 874.743104][ T1151] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.746263][ T1151] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.749355][ T1151] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.759313][ T1151] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.772289][T30967] ip6_vti0 speed is unknown, defaulting to 1000 [ 874.774315][T30988] loop5: detected capacity change from 0 to 7 [ 874.777642][T30988] Dev loop5: unable to read RDB block 7 [ 874.781773][T30988] loop5: unable to read partition table [ 874.783924][T30988] loop5: partition table beyond EOD, truncated [ 874.785876][T30988] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 874.947588][T30967] chnl_net:caif_netlink_parms(): no params data found [ 875.015714][T30967] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.018047][T30967] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.020400][T30967] bridge_slave_0: entered allmulticast mode [ 875.024334][T30967] bridge_slave_0: entered promiscuous mode [ 875.029105][T30967] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.032210][T30967] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.035236][T30967] bridge_slave_1: entered allmulticast mode [ 875.038477][T30967] bridge_slave_1: entered promiscuous mode [ 875.054091][T30967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.059943][T30967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.081357][T30967] team0: Port device team_slave_0 added [ 875.087695][T30967] team0: Port device team_slave_1 added [ 875.101750][T30967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.104357][T30967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.115023][T30967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.120255][T30967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.122548][T30967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.130676][T30967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.153227][T30967] hsr_slave_0: entered promiscuous mode [ 875.155504][T30967] hsr_slave_1: entered promiscuous mode [ 875.157624][T30967] debugfs: 'hsr0' already exists in 'hsr' [ 875.159623][T30967] Cannot create hsr debugfs directory [ 875.889507][ T24] usb 10-1: USB disconnect, device number 16 [ 876.058387][T31005] netlink: 'syz.3.27019': attribute type 1 has an invalid length. [ 876.062179][T31005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.27019'. [ 876.164864][T30967] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 876.206679][T30967] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 876.208960][T31009] netlink: 63 bytes leftover after parsing attributes in process `syz.5.27021'. [ 876.242542][T30967] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 876.281059][T30967] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 876.343449][T31021] netlink: 96 bytes leftover after parsing attributes in process `syz.3.27024'. [ 876.376891][T30967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.389100][T30967] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.395243][T16833] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.398847][T16833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.412580][T11764] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.414862][T11764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.520012][T31028] kvm: apic: phys broadcast and lowest prio [ 876.546701][T30967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.700146][ T6127] Bluetooth: hci2: command tx timeout [ 876.710264][T30967] veth0_vlan: entered promiscuous mode [ 876.716864][T30967] veth1_vlan: entered promiscuous mode [ 876.899213][T30967] veth0_macvtap: entered promiscuous mode [ 876.903307][T30967] veth1_macvtap: entered promiscuous mode [ 876.913731][T30967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.920254][T30967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.950602][ T1145] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.954208][ T1145] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.962459][ T1145] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.994228][ T1145] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.334861][T16833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.337367][T16833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.353276][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.355793][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.566682][ T40] audit: type=1326 audit(1768333915.679:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.27006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 877.579363][ T40] audit: type=1326 audit(1768333915.679:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.27006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 877.598657][ T40] audit: type=1326 audit(1768333915.689:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.27006" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 877.607654][ T40] audit: type=1326 audit(1768333915.689:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.27006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 877.616328][ T40] audit: type=1326 audit(1768333915.689:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.7.27006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 877.709370][T31072] netlink: 'syz.7.27043': attribute type 13 has an invalid length. [ 878.779736][ T6127] Bluetooth: hci2: command tx timeout [ 878.858202][T31112] input: syz0 as /devices/virtual/input/input118 [ 878.978886][T31122] netlink: 96 bytes leftover after parsing attributes in process `syz.5.27072'. [ 879.098373][ T40] audit: type=1800 audit(1768333917.209:5079): pid=31133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.27070" name="nullb0" dev="devtmpfs" ino=3352 res=0 errno=0 [ 879.177191][T31141] team_slave_1: Caught tx_queue_len zero misconfig [ 879.299352][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 95 seconds [ 879.305120][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 95 seconds [ 879.309619][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 95 seconds [ 879.314762][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 95 seconds [ 879.369267][T31154] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 879.978719][T16544] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 879.979406][ T6127] Bluetooth: hci3: command 0x1003 tx timeout [ 880.140542][ T40] audit: type=1800 audit(1768333918.259:5080): pid=31174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.27083" name="nullb0" dev="devtmpfs" ino=3352 res=0 errno=0 [ 880.156973][T31176] loop5: detected capacity change from 0 to 7 [ 880.160954][T31176] Dev loop5: unable to read RDB block 7 [ 880.163575][T31176] loop5: unable to read partition table [ 880.166195][T31176] loop5: partition table beyond EOD, truncated [ 880.171043][T31176] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 880.236386][ T40] audit: type=1326 audit(1768333918.349:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31181 comm="syz.3.27094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 880.253501][ T40] audit: type=1326 audit(1768333918.369:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31181 comm="syz.3.27094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 880.274563][ T40] audit: type=1326 audit(1768333918.369:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31181 comm="syz.3.27094" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 880.858725][ T6127] Bluetooth: hci2: command tx timeout [ 881.168702][T15823] usb 14-1: new high-speed USB device number 35 using dummy_hcd [ 881.330245][T15823] usb 14-1: config index 0 descriptor too short (expected 45, got 36) [ 881.333800][T15823] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 881.338910][T15823] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 881.344308][T15823] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 881.349978][T15823] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 881.353826][T15823] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.359329][T15823] usb 14-1: config 0 descriptor?? [ 881.362314][T31199] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 881.775707][T15823] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 881.778258][T15823] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 881.780718][T15823] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 881.783074][T15823] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 881.785314][T15823] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 881.787633][T15823] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 881.793349][T15823] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 882.041602][T15823] usb 14-1: USB disconnect, device number 35 [ 882.218736][ T6127] Bluetooth: hci3: command 0x1003 tx timeout [ 882.219423][T16544] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 882.583383][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 882.583400][ T40] audit: type=1326 audit(1768333920.699:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31217 comm="syz.9.27105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 882.598655][ T40] audit: type=1326 audit(1768333920.699:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31217 comm="syz.9.27105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 882.609648][ T40] audit: type=1326 audit(1768333920.709:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31217 comm="syz.9.27105" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 882.617851][ T40] audit: type=1326 audit(1768333920.709:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31217 comm="syz.9.27105" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 882.625678][ T40] audit: type=1326 audit(1768333920.719:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31217 comm="syz.9.27105" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 882.632830][ T40] audit: type=1326 audit(1768333920.719:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31217 comm="syz.9.27105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 882.640186][ T40] audit: type=1326 audit(1768333920.719:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31217 comm="syz.9.27105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 882.647224][ T40] audit: type=1326 audit(1768333920.729:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31217 comm="syz.9.27105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 882.654379][ T40] audit: type=1326 audit(1768333920.729:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31217 comm="syz.9.27105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 882.661810][ T40] audit: type=1326 audit(1768333920.729:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31217 comm="syz.9.27105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 882.999397][T31234] netlink: 'syz.9.27116': attribute type 13 has an invalid length. [ 884.328670][ T29] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 884.388736][ T6198] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 884.478636][ T29] usb 12-1: Using ep0 maxpacket: 32 [ 884.482613][ T29] usb 12-1: unable to get BOS descriptor or descriptor too short [ 884.486391][ T29] usb 12-1: config 255 has an invalid interface number: 81 but max is 0 [ 884.489948][ T29] usb 12-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 884.494118][ T29] usb 12-1: config 255 has no interface number 0 [ 884.496399][ T29] usb 12-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 884.501198][ T29] usb 12-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 884.505678][ T29] usb 12-1: config 255 interface 81 has no altsetting 0 [ 884.511030][ T29] usb 12-1: string descriptor 0 read error: -22 [ 884.513464][ T29] usb 12-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 884.516980][ T29] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.539072][ T29] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:255.81/input/input119 [ 884.540760][ T6198] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.546842][ T6198] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 884.550730][ T6198] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 884.554003][ T6198] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.559162][ T6198] usb 8-1: config 0 descriptor?? [ 884.565960][ T6198] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 884.570286][ T6198] dvb-usb: bulk message failed: -22 (3/0) [ 884.599307][ T6198] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 884.605628][ T6198] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 884.608412][ T6198] usb 8-1: media controller created [ 884.615302][ T6198] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 884.625229][ T6198] dvb-usb: bulk message failed: -22 (6/0) [ 884.627279][ T6198] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 884.635690][ T6198] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input120 [ 884.644086][ T6198] dvb-usb: schedule remote query interval to 150 msecs. [ 884.646289][ T6198] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 884.759067][ C1] usbtouchscreen 12-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 884.766316][T31252] dvb-usb: bulk message failed: -22 (2/0) [ 884.770999][ T6198] usb 8-1: USB disconnect, device number 27 [ 884.842803][ C1] usbtouchscreen 12-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -19 [ 884.846588][ T29] usb 12-1: USB disconnect, device number 2 [ 884.856839][ T6198] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 885.317936][T31262] netlink: 4 bytes leftover after parsing attributes in process `syz.9.27136'. [ 885.480901][T31274] netlink: 'syz.5.27131': attribute type 13 has an invalid length. [ 885.504754][T15823] hid-generic 0003:0004:0000.0020: unknown main item tag 0x0 [ 885.508094][T15823] hid-generic 0003:0004:0000.0020: unknown main item tag 0x0 [ 885.511279][T15823] hid-generic 0003:0004:0000.0020: unknown main item tag 0x0 [ 885.518823][T15823] hid-generic 0003:0004:0000.0020: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 885.638207][T31279] fido_id[31279]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 885.698769][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 100 seconds [ 885.702974][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 100 seconds [ 885.707894][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 100 seconds [ 885.712293][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 100 seconds [ 886.078224][T31306] netlink: 4 bytes leftover after parsing attributes in process `syz.7.27148'. [ 886.082762][T31306] netlink: 4 bytes leftover after parsing attributes in process `syz.7.27148'. [ 886.749122][T31330] syzkaller1: entered allmulticast mode [ 886.793566][T31339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27162'. [ 887.255265][ T6198] Process accounting resumed [ 887.268687][T31371] Process accounting resumed [ 887.984857][T31403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27192'. [ 888.208721][ T29] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 888.368649][ T29] usb 12-1: Using ep0 maxpacket: 8 [ 888.372606][ T29] usb 12-1: config 0 interface 0 has no altsetting 0 [ 888.375430][ T29] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 888.379799][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.385297][ T29] usb 12-1: config 0 descriptor?? [ 888.802016][ T29] mcp2221 0003:04D8:00DD.0021: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 889.000652][ T29] usb 12-1: USB disconnect, device number 3 [ 889.273874][T31459] netlink: 'syz.5.27220': attribute type 83 has an invalid length. [ 889.279314][T31462] lo: Caught tx_queue_len zero misconfig [ 889.952599][T31521] serio: Serial port ptm0 [ 890.985101][T31540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.27255'. [ 890.987519][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 890.987532][ T40] audit: type=1400 audit(1768333929.099:5110): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=31539 comm=FF [ 891.215526][T31559] netlink: 64 bytes leftover after parsing attributes in process `syz.7.27264'. [ 891.250005][T31563] netlink: 212336 bytes leftover after parsing attributes in process `syz.9.27266'. [ 891.682215][T31603] netlink: 27 bytes leftover after parsing attributes in process `syz.5.27283'. [ 891.799025][ T6198] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 891.952141][ T6198] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.956972][ T6198] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 891.964326][ T6198] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 891.968173][ T6198] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 891.973400][ T6198] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 891.977048][ T6198] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.998450][T31612] netfs: Couldn't get user pages (rc=-14) [ 892.020330][ T6198] usb 12-1: config 0 descriptor?? [ 892.100048][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 105 seconds [ 892.103407][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 105 seconds [ 892.106731][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 105 seconds [ 892.110568][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 105 seconds [ 892.445307][ T6198] plantronics 0003:047F:FFFF.0022: ignoring exceeding usage max [ 892.462183][ T6198] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 892.486911][T31632] netlink: 96 bytes leftover after parsing attributes in process `syz.3.27296'. [ 892.516831][T31636] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.27298'. [ 892.964068][T31670] netlink: 64 bytes leftover after parsing attributes in process `syz.3.27313'. [ 893.007629][T31672] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.27315'. [ 893.619568][T15823] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 893.778666][T15823] usb 8-1: Using ep0 maxpacket: 8 [ 893.781942][T15823] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 893.785024][T15823] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 893.788048][T15823] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 893.791740][T15823] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.795838][T15823] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 893.798604][T15823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.005226][T15823] usb 8-1: GET_CAPABILITIES returned 0 [ 894.007461][T15823] usbtmc 8-1:16.0: can't read capabilities [ 894.028789][ T25] block nbd1: Possible stuck request ffff888026bb0000: control (read@0,4096B). Runtime 270 seconds [ 894.271388][ T34] usb 8-1: USB disconnect, device number 28 [ 894.530682][ T6198] usb 12-1: USB disconnect, device number 4 [ 894.679039][ T9] usb 14-1: new high-speed USB device number 36 using dummy_hcd [ 894.830094][ T9] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 894.835013][ T9] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 894.839741][ T9] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 894.843948][ T9] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 894.849502][ T9] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 894.853404][ T9] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.860370][ T9] usb 14-1: config 0 descriptor?? [ 895.286090][ T9] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 895.301634][ T9] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 895.541002][ T9] usb 14-1: USB disconnect, device number 36 [ 895.661486][T31767] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.899609][T31786] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.27366'. [ 896.424264][T31824] binder_alloc: binder_alloc_mmap_handler: 31823 80ffd000-80ffe000 already mapped failed -16 [ 896.549773][ T9] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 896.702433][ T9] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 896.705928][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.719146][ T9] usb 8-1: Product: syz [ 896.720909][ T9] usb 8-1: Manufacturer: syz [ 896.722858][ T9] usb 8-1: SerialNumber: syz [ 896.727912][ T9] usb 8-1: config 0 descriptor?? [ 896.941137][ T29] usb 8-1: USB disconnect, device number 29 [ 897.968884][ T29] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 898.028724][ T62] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 898.130705][ T29] usb 12-1: config index 0 descriptor too short (expected 45, got 36) [ 898.134181][ T29] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 898.139396][ T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 898.143990][ T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 898.149006][ T29] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 898.154568][ T29] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 898.157701][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.162383][ T29] usb 12-1: config 0 descriptor?? [ 898.165055][T31864] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 898.201100][ T62] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 898.205350][ T62] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 898.209644][ T62] usb 8-1: config 0 interface 0 has no altsetting 0 [ 898.214185][ T62] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 898.217993][ T62] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 898.221758][ T62] usb 8-1: Product: syz [ 898.223717][ T62] usb 8-1: Manufacturer: syz [ 898.225754][ T62] usb 8-1: SerialNumber: syz [ 898.229795][ T62] usb 8-1: config 0 descriptor?? [ 898.235201][ T62] hub 8-1:0.0: bad descriptor, ignoring hub [ 898.237785][ T62] hub 8-1:0.0: probe with driver hub failed with error -5 [ 898.244537][ T62] usb 8-1: selecting invalid altsetting 0 [ 898.528868][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 110 seconds [ 898.532962][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 110 seconds [ 898.537665][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 110 seconds [ 898.538794][ T6127] Bluetooth: hci3: command 0xfc11 tx timeout [ 898.542969][T16544] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 898.549504][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 110 seconds [ 898.608450][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 898.612240][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 898.615482][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 898.618843][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 898.622035][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 898.625293][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 898.627948][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 898.630709][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 898.633079][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 898.639610][ T29] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 898.848889][T31869] usb 8-1: reset high-speed USB device number 30 using dummy_hcd [ 898.860167][ T29] usb 12-1: USB disconnect, device number 5 [ 899.449125][T14730] usb 8-1: USB disconnect, device number 30 [ 899.738713][ T34] usb 14-1: new high-speed USB device number 37 using dummy_hcd [ 899.775735][T31936] syzkaller1: entered promiscuous mode [ 899.777983][T31936] syzkaller1: entered allmulticast mode [ 899.890178][ T34] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.894464][ T34] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.898365][ T34] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 899.903938][ T34] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 899.907550][ T34] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.912768][ T34] usb 14-1: config 0 descriptor?? [ 899.995334][T31938] binder: 31937:31938 ioctl c0306201 800003c0 returned -22 [ 900.217118][ T40] audit: type=1326 audit(1768333938.329:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31945 comm="syz.3.27437" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f66579 code=0x0 [ 900.326999][ T34] hid_parser_main: 6 callbacks suppressed [ 900.327012][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 900.331332][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 900.333710][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 900.336160][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 900.338806][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 900.341250][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 900.343647][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 900.345969][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 900.348422][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 900.350910][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 900.356359][ T34] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 900.582388][ T29] usb 14-1: USB disconnect, device number 37 [ 901.498658][T16544] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 902.031701][T31983] macvtap1: entered promiscuous mode [ 902.034048][T31983] macvtap1: entered allmulticast mode [ 902.036145][T31983] veth1_vlan: entered allmulticast mode [ 902.058180][T31983] macvtap2: entered promiscuous mode [ 902.060690][T31983] macvtap2: entered allmulticast mode [ 902.609088][ T9] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 902.626998][ T40] audit: type=1326 audit(1768333940.739:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31998 comm="syz.9.27460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 902.636076][ T40] audit: type=1326 audit(1768333940.739:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31998 comm="syz.9.27460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 902.652626][ T40] audit: type=1326 audit(1768333940.739:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31998 comm="syz.9.27460" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 902.668624][ T40] audit: type=1326 audit(1768333940.739:5115): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=31998 comm="syz.9.27460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 902.677779][ T40] audit: type=1326 audit(1768333940.739:5116): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=31998 comm="syz.9.27460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 902.758917][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 902.763656][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 902.767013][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 902.778691][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 902.781804][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 902.788778][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.793697][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 902.797141][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.008900][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 903.010736][ T9] usbtmc 8-1:16.0: can't read capabilities [ 903.206325][T32025] netlink: 20 bytes leftover after parsing attributes in process `syz.7.27470'. [ 903.220873][T14730] usb 8-1: USB disconnect, device number 31 [ 903.718901][ T842] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 903.727235][T32047] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.27482'. [ 903.868946][ T842] usb 12-1: Using ep0 maxpacket: 8 [ 903.876859][ T842] usb 12-1: config 0 interface 0 has no altsetting 0 [ 903.879137][ T842] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 903.882131][ T842] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.886176][ T842] usb 12-1: config 0 descriptor?? [ 903.961253][T32063] 9p: Unknown uid 00000000004294967295 [ 904.300513][ T842] mcp2221 0003:04D8:00DD.0026: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 904.497533][ T842] usb 12-1: USB disconnect, device number 6 [ 904.748195][T32091] input: syz0 as /devices/virtual/input/input122 [ 904.750861][T32091] input: failed to attach handler leds to device input122, error: -6 [ 904.898747][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 115 seconds [ 904.903131][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 115 seconds [ 904.907673][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 115 seconds [ 904.912868][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 115 seconds [ 905.426906][T32113] netlink: 'syz.7.27512': attribute type 4 has an invalid length. [ 905.571754][T32126] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 905.990414][T32157] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.27531'. [ 906.076770][T32154] netlink: 'syz.5.27530': attribute type 12 has an invalid length. [ 906.079508][T32154] netlink: 'syz.5.27530': attribute type 29 has an invalid length. [ 906.084391][T32154] netlink: 148 bytes leftover after parsing attributes in process `syz.5.27530'. [ 906.087272][T32154] netlink: 'syz.5.27530': attribute type 2 has an invalid length. [ 906.089932][T32154] netlink: 23 bytes leftover after parsing attributes in process `syz.5.27530'. [ 906.748993][T32201] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.27548'. [ 906.799513][ T9] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 906.811770][T32203] bridge0: entered promiscuous mode [ 906.813948][T32203] bridge0: port 2(vlan0) entered blocking state [ 906.816087][T32203] bridge0: port 2(vlan0) entered disabled state [ 906.818130][T32203] vlan0: entered allmulticast mode [ 906.820855][T32203] bridge0: entered allmulticast mode [ 906.849516][T32203] vlan0: left allmulticast mode [ 906.851106][T32203] bridge0: left allmulticast mode [ 906.889231][T32203] bridge0: left promiscuous mode [ 906.892831][T32211] netlink: 'syz.7.27553': attribute type 1 has an invalid length. [ 906.895392][T32211] netlink: 40 bytes leftover after parsing attributes in process `syz.7.27553'. [ 906.959131][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 906.966545][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 906.969077][ T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 906.972186][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.976974][ T9] usb 8-1: config 0 descriptor?? [ 906.985545][T32219] loop5: detected capacity change from 0 to 7 [ 906.990037][T27468] Dev loop5: unable to read RDB block 7 [ 906.991979][T27468] loop5: AHDI p1 p2 p3 [ 906.993478][T27468] loop5: partition table partially beyond EOD, truncated [ 906.995747][T27468] loop5: p1 start 1601398130 is beyond EOD, truncated [ 906.997897][T27468] loop5: p2 start 1702059890 is beyond EOD, truncated [ 907.003259][T32219] Dev loop5: unable to read RDB block 7 [ 907.005208][T32219] loop5: AHDI p1 p2 p3 [ 907.006626][T32219] loop5: partition table partially beyond EOD, truncated [ 907.009969][T32219] loop5: p1 start 1601398130 is beyond EOD, truncated [ 907.012254][T32219] loop5: p2 start 1702059890 is beyond EOD, truncated [ 907.402992][ T9] mcp2221 0003:04D8:00DD.0027: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 907.550770][T32258] netlink: 'syz.7.27575': attribute type 4 has an invalid length. [ 907.604947][T15823] usb 8-1: USB disconnect, device number 32 [ 907.882575][T32274] netlink: 12 bytes leftover after parsing attributes in process `syz.9.27582'. [ 907.975265][T32280] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.27585'. [ 908.150734][T32293] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.27588'. [ 908.304663][T15823] IPVS: starting estimator thread 0... [ 908.388699][T32308] IPVS: using max 46 ests per chain, 110400 per kthread [ 908.466239][T32318] smc: net device bond0 applied user defined pnetid SYZ0 [ 908.948693][ T34] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 909.028893][ T842] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 909.048707][T15823] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 909.112032][ T34] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 909.115090][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.117584][ T34] usb 10-1: Product: syz [ 909.119066][ T34] usb 10-1: Manufacturer: syz [ 909.120576][ T34] usb 10-1: SerialNumber: syz [ 909.125089][ T34] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 909.143931][T14730] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 909.179934][ T842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.183590][ T842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.186621][ T842] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 909.191068][ T842] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 909.193939][ T842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.197707][ T842] usb 8-1: config 0 descriptor?? [ 909.209953][T15823] usb 12-1: config index 0 descriptor too short (expected 45, got 36) [ 909.213045][T15823] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 909.217059][T15823] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 909.218790][ T9] usb 14-1: new high-speed USB device number 38 using dummy_hcd [ 909.220487][T15823] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 909.226482][T15823] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 909.230750][T15823] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 909.233637][T15823] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.237508][T15823] usb 12-1: config 0 descriptor?? [ 909.239808][T32341] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 909.360097][T32333] random: crng reseeded on system resumption [ 909.369924][T32333] netlink: 64 bytes leftover after parsing attributes in process `syz.5.27610'. [ 909.411982][ T34] usb 10-1: USB disconnect, device number 17 [ 909.611348][ T842] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 909.636650][T32345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.642078][T32345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.650085][ T9] usb 14-1: unable to get BOS descriptor or descriptor too short [ 909.656150][ T9] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 909.660733][ T9] usb 14-1: can't read configurations, error -71 [ 909.668725][T15823] plantronics 0003:047F:FFFF.0029: reserved main item tag 0xd [ 909.673532][T15823] plantronics 0003:047F:FFFF.0029: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 909.861278][ T842] usb 8-1: USB disconnect, device number 33 [ 909.868963][T15823] usb 12-1: USB disconnect, device number 7 [ 910.218922][T14730] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 910.221605][T14730] ath9k_htc: Failed to initialize the device [ 910.224065][ T34] usb 10-1: ath9k_htc: USB layer deinitialized [ 910.485488][ T40] audit: type=1326 audit(1768333948.599:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32367 comm="syz.5.27625" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96598 code=0x7ffc0000 [ 910.497562][ T40] audit: type=1326 audit(1768333948.619:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32367 comm="syz.5.27625" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 910.511664][ T40] audit: type=1326 audit(1768333948.619:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32367 comm="syz.5.27625" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96598 code=0x7ffc0000 [ 910.518404][ T40] audit: type=1326 audit(1768333948.619:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32367 comm="syz.5.27625" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96598 code=0x7ffc0000 [ 910.525657][ T40] audit: type=1326 audit(1768333948.619:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32367 comm="syz.5.27625" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96598 code=0x7ffc0000 [ 910.533170][ T40] audit: type=1326 audit(1768333948.619:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32367 comm="syz.5.27625" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96598 code=0x7ffc0000 [ 910.540385][ T40] audit: type=1326 audit(1768333948.619:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32367 comm="syz.5.27625" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96598 code=0x7ffc0000 [ 910.547491][ T40] audit: type=1326 audit(1768333948.619:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32367 comm="syz.5.27625" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96598 code=0x7ffc0000 [ 910.556426][ T40] audit: type=1326 audit(1768333948.619:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32367 comm="syz.5.27625" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96598 code=0x7ffc0000 [ 910.564343][ T40] audit: type=1326 audit(1768333948.619:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32367 comm="syz.5.27625" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96598 code=0x7ffc0000 [ 911.309087][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 120 seconds [ 911.313973][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 120 seconds [ 911.318519][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 120 seconds [ 911.322977][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 120 seconds [ 911.663669][ T62] IPVS: starting estimator thread 0... [ 911.768743][T32422] IPVS: using max 43 ests per chain, 103200 per kthread [ 912.102503][T32408] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 912.105133][T32408] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 912.182391][T32408] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 912.239771][T32408] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 912.241908][T32408] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 912.310458][T32408] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 913.179644][T32467] lo: Caught tx_queue_len zero misconfig [ 913.348946][ T6127] Bluetooth: hci1: command 0x2016 tx timeout [ 913.568676][ T6199] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 913.734550][ T6199] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 913.737342][ T6199] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 913.741967][ T6199] usb 12-1: config 0 interface 0 has no altsetting 0 [ 913.751980][ T6199] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 913.755119][ T6199] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 913.758213][ T6199] usb 12-1: Product: syz [ 913.767004][ T6199] usb 12-1: Manufacturer: syz [ 913.771055][ T6199] usb 12-1: SerialNumber: syz [ 913.775665][ T6199] usb 12-1: config 0 descriptor?? [ 913.778301][ T6199] hub 12-1:0.0: bad descriptor, ignoring hub [ 913.780297][ T6199] hub 12-1:0.0: probe with driver hub failed with error -5 [ 913.784092][ T6199] usb 12-1: selecting invalid altsetting 0 [ 914.298714][T12940] Bluetooth: hci2: command 0x0c1a tx timeout [ 914.458820][T12940] Bluetooth: hci3: command 0x1003 tx timeout [ 914.458887][T16544] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 914.635276][T32504] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.27679'. [ 914.678862][T32475] usb 12-1: reset high-speed USB device number 8 using dummy_hcd [ 915.259918][ T62] usb 12-1: USB disconnect, device number 8 [ 915.418904][T16544] Bluetooth: hci1: command 0x2016 tx timeout [ 916.138744][ T6127] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 916.142487][T16544] Bluetooth: hci5: command 0x1003 tx timeout [ 916.379238][ T6127] Bluetooth: hci2: command 0x0c1a tx timeout [ 916.538655][ T6127] Bluetooth: hci4: command 0x0c1a tx timeout [ 916.542599][T32412] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 916.654055][T32522] netlink: 360 bytes leftover after parsing attributes in process `syz.3.27687'. [ 917.437449][T32548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27696'. [ 917.442555][T32548] netlink: 72 bytes leftover after parsing attributes in process `syz.3.27696'. [ 917.498968][ T6127] Bluetooth: hci1: command 0x2016 tx timeout [ 917.699011][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 125 seconds [ 917.703063][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 125 seconds [ 917.707543][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 125 seconds [ 917.712059][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 125 seconds [ 917.712198][T32561] batadv_slave_1: entered promiscuous mode [ 917.733325][T32560] batadv_slave_1: left promiscuous mode [ 918.346254][T32596] netlink: 44 bytes leftover after parsing attributes in process `syz.5.27717'. [ 918.350326][T32596] netlink: 43 bytes leftover after parsing attributes in process `syz.5.27717'. [ 918.354079][T32596] netlink: 'syz.5.27717': attribute type 6 has an invalid length. [ 918.357036][T32596] netlink: 'syz.5.27717': attribute type 5 has an invalid length. [ 918.360061][T32596] netlink: 43 bytes leftover after parsing attributes in process `syz.5.27717'. [ 918.459286][ T6127] Bluetooth: hci2: command 0x0c1a tx timeout [ 919.519523][T32631] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 919.523006][T32631] tipc: Enabled bearer , priority 10 [ 919.668810][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 919.929915][ T6199] kernel write not supported for file /vcs (pid: 6199 comm: kworker/3:3) [ 919.938865][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 919.989127][T32673] kernel read not supported for file /rmdF¼ì (pid: 32673 comm: syz.3.27747) [ 919.993176][ T40] kauditd_printk_skb: 83 callbacks suppressed [ 919.993187][ T40] audit: type=1800 audit(1768333958.109:5210): pid=32673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.27747" name=726D64461716BCEC dev="mqueue" ino=265296 res=0 errno=0 [ 920.003545][T32672] netlink: 8 bytes leftover after parsing attributes in process `syz.7.27748'. [ 920.027939][T32675] ip6_vti0 speed is unknown, defaulting to 1000 [ 920.049703][T15823] kernel read not supported for file /rmdF¼ì (pid: 15823 comm: kworker/2:5) [ 920.278763][ T6199] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 920.329747][T32695] netlink: 'syz.7.27755': attribute type 1 has an invalid length. [ 920.342790][T32695] bond1: entered promiscuous mode [ 920.344710][T32695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 920.413969][T32695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 920.416567][T32695] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 920.420688][T32695] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 920.425887][T32695] bond1: (slave gre1): making interface the new active one [ 920.428268][T32695] gre1: entered promiscuous mode [ 920.429932][ T6199] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 920.431078][T32695] bond1: (slave gre1): Enslaving as an active interface with an up link [ 920.433695][ T6199] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 920.441199][ T6199] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 920.445004][ T6199] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.450859][T32677] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 920.453637][T32677] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 920.458312][ T6199] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 920.478774][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 920.530866][ T9] kernel write not supported for file /vcs (pid: 9 comm: kworker/0:0) [ 920.595857][T14885] Bluetooth: hci3: Frame reassembly failed (-84) [ 920.607036][T14885] Bluetooth: hci3: Frame reassembly failed (-84) [ 920.670248][ T6199] usb 10-1: USB disconnect, device number 18 [ 921.028697][T12940] Bluetooth: hci2: command 0x0c1a tx timeout [ 921.498774][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 922.538655][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 922.591503][ T329] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 922.618921][T16544] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 922.817855][ T341] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 922.824369][ T341] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 922.868727][ T46] unregister_netdevice: waiting for sit0 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 923.370317][T27487] bond0: (slave syz_tun): Releasing backup interface [ 923.578738][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 923.729971][T31892] bond0: (slave syz_tun): Releasing backup interface [ 924.118833][ T25] block nbd1: Possible stuck request ffff888026bb0000: control (read@0,4096B). Runtime 300 seconds [ 924.118872][ T30] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 130 seconds [ 924.127825][ T30] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 130 seconds [ 924.131821][ T30] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 130 seconds [ 924.135574][ T30] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 130 seconds [ 926.379070][ T5347] udevd[5347]: worker [17686] /devices/virtual/block/nbd1 timeout; kill it [ 926.382806][ T5347] udevd[5347]: seq 23141 '/devices/virtual/block/nbd1' killed [ 926.385961][ T5347] udevd[5347]: worker [19696] /devices/virtual/block/nbd3 is taking a long time [ 930.498795][ T25] block nbd3: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 135 seconds [ 930.503363][ T25] block nbd3: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 135 seconds [ 930.507969][ T25] block nbd3: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 135 seconds [ 930.513172][ T25] block nbd3: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 135 seconds