last executing test programs: 1.38604799s ago: executing program 1 (id=1176): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.285137235s ago: executing program 2 (id=1178): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x20c, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/28, 0x1c}], 0x1}, 0x7}], 0x1, 0x40000120, 0x0) 1.248236582s ago: executing program 2 (id=1179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0xd5d82000, 0x1000, &(0x7f0000fa3000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x0, 0x10000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 1.156662368s ago: executing program 0 (id=1180): r0 = socket$nl_audit(0x10, 0x3, 0x9) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1000"], 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x80) 1.156393213s ago: executing program 1 (id=1181): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x60) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x375}}}}}}, 0x0) 1.097440414s ago: executing program 2 (id=1182): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) r2 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) fcntl$setpipe(r0, 0x407, 0x8001a0) splice(r0, 0x0, r2, 0x0, 0x200002, 0x0) 1.097100994s ago: executing program 2 (id=1183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 1.000900878s ago: executing program 2 (id=1187): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 566.432576ms ago: executing program 2 (id=1188): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x2, 0x100, 0x7, 0x85, 0x10, 0x6}) 357.315909ms ago: executing program 3 (id=1192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 299.737251ms ago: executing program 0 (id=1193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 299.288256ms ago: executing program 1 (id=1194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) 291.163881ms ago: executing program 0 (id=1195): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000100)={0xb5}) 290.885452ms ago: executing program 3 (id=1196): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x9, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0x3, 0x32, 0x0, 0x9}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}]}, &(0x7f0000000140)=0xc) 239.747254ms ago: executing program 3 (id=1197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000480)={{0x80a0000, 0xf000, 0xc, 0x80, 0x4, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x41000, 0x6000, 0xe, 0x8, 0x5f, 0x0, 0x0, 0x9, 0xf, 0x5, 0xee, 0xf}, {0x8000000, 0xb000, 0x4, 0x8, 0xf0, 0x1, 0x88, 0x6, 0x7, 0x99, 0xfd, 0x1}, {0x100000, 0x5000, 0x8, 0xe, 0x7, 0x5, 0x1, 0x87, 0x5, 0x2}, {0x10000, 0x8000000, 0xa, 0x0, 0x5, 0x4, 0xf9, 0x6b, 0x5, 0x0, 0xfd, 0x80}, {0xeeee8000, 0xeeef0000, 0xb, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xe, 0x8}, {0xe6ef8000, 0x0, 0x0, 0x3, 0x53, 0x4, 0x0, 0xb9, 0x7, 0x5, 0x6, 0x7}, {0xeeee0000, 0x1332b2000, 0x9, 0x7, 0xfe, 0x0, 0xc, 0x3, 0x0, 0x6, 0xf9, 0x6}, {0x3000, 0x6}, {0x1, 0x3}, 0x2, 0x0, 0x2000, 0x2, 0xd, 0x2000, 0x10000, [0xfffffffffffffffc, 0x4, 0x9, 0xa]}) 155.695127ms ago: executing program 0 (id=1198): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 155.479507ms ago: executing program 0 (id=1199): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) 134.628918ms ago: executing program 1 (id=1200): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) close(r0) mq_unlink(&(0x7f0000000000)='eth0\x00') 126.764721ms ago: executing program 3 (id=1201): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)='}RC*', 0x4}], 0x1}}], 0x1, 0x0) 46.970636ms ago: executing program 1 (id=1202): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xad41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) open_by_handle_at(r1, &(0x7f0000000280)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0xa29, 0x7, 0x9, 0x1000, 0x499f, 0x6}}, 0x10081) 46.272525ms ago: executing program 3 (id=1203): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 42.788854ms ago: executing program 1 (id=1204): socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 876.063µs ago: executing program 0 (id=1205): syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 0s ago: executing program 3 (id=1206): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:1086' (ED25519) to the list of known hosts. [ 57.423824][ T5927] cgroup: Unknown subsys name 'net' [ 57.553879][ T5927] cgroup: Unknown subsys name 'cpuset' [ 57.558044][ T5927] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.669231][ T5927] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.510519][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.519889][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.523324][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.533632][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.536152][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.540047][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.540918][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.543089][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.544434][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.546465][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.548327][ T5952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.548367][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.550096][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.551444][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.552828][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.554785][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.562550][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.564817][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.567887][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.570789][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.840336][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 62.892326][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 62.926777][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 62.983647][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 63.071839][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.074087][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.076394][ T5940] bridge_slave_0: entered allmulticast mode [ 63.079723][ T5940] bridge_slave_0: entered promiscuous mode [ 63.122277][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.124573][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.126840][ T5940] bridge_slave_1: entered allmulticast mode [ 63.130230][ T5940] bridge_slave_1: entered promiscuous mode [ 63.163237][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.165484][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.167621][ T5944] bridge_slave_0: entered allmulticast mode [ 63.170528][ T5944] bridge_slave_0: entered promiscuous mode [ 63.192037][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.195140][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.198068][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.201215][ T5948] bridge_slave_0: entered allmulticast mode [ 63.204660][ T5948] bridge_slave_0: entered promiscuous mode [ 63.208295][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.211164][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.213463][ T5948] bridge_slave_1: entered allmulticast mode [ 63.216220][ T5948] bridge_slave_1: entered promiscuous mode [ 63.221930][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.224294][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.227166][ T5944] bridge_slave_1: entered allmulticast mode [ 63.231650][ T5944] bridge_slave_1: entered promiscuous mode [ 63.261470][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.278195][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.281843][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.284361][ T5950] bridge_slave_0: entered allmulticast mode [ 63.287532][ T5950] bridge_slave_0: entered promiscuous mode [ 63.291467][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.294091][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.296713][ T5950] bridge_slave_1: entered allmulticast mode [ 63.299750][ T5950] bridge_slave_1: entered promiscuous mode [ 63.318019][ T5940] team0: Port device team_slave_0 added [ 63.328063][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.346280][ T5940] team0: Port device team_slave_1 added [ 63.349672][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.354160][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.366559][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.380862][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.400078][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.447402][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.450752][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.460538][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.465773][ T5944] team0: Port device team_slave_0 added [ 63.469346][ T5948] team0: Port device team_slave_0 added [ 63.473339][ T5948] team0: Port device team_slave_1 added [ 63.476540][ T5950] team0: Port device team_slave_0 added [ 63.479128][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.481845][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.492772][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.497861][ T5944] team0: Port device team_slave_1 added [ 63.516411][ T5950] team0: Port device team_slave_1 added [ 63.529750][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.531747][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.540323][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.557501][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.560504][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.569733][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.575186][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.577445][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.585704][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.598873][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.601329][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.610247][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.630117][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.633081][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.642956][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.653566][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.655717][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.664427][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.699843][ T5948] hsr_slave_0: entered promiscuous mode [ 63.702079][ T5948] hsr_slave_1: entered promiscuous mode [ 63.707073][ T5940] hsr_slave_0: entered promiscuous mode [ 63.711354][ T5940] hsr_slave_1: entered promiscuous mode [ 63.713561][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 63.715411][ T5940] Cannot create hsr debugfs directory [ 63.720451][ T5944] hsr_slave_0: entered promiscuous mode [ 63.722725][ T5944] hsr_slave_1: entered promiscuous mode [ 63.724891][ T5944] debugfs: 'hsr0' already exists in 'hsr' [ 63.726756][ T5944] Cannot create hsr debugfs directory [ 63.777584][ T5950] hsr_slave_0: entered promiscuous mode [ 63.781026][ T5950] hsr_slave_1: entered promiscuous mode [ 63.784005][ T5950] debugfs: 'hsr0' already exists in 'hsr' [ 63.786440][ T5950] Cannot create hsr debugfs directory [ 64.071141][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.077414][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.082395][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.091614][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.132861][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.140980][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.146168][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.151303][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.224787][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.234705][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.243059][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.252401][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.326316][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.332116][ T5950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.339823][ T5950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.344148][ T5950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.354940][ T5950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.378581][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.399078][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.415723][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.419072][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.439464][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.442618][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.466023][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.475119][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.478673][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.500501][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.503663][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.548038][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.569187][ T63] Bluetooth: hci0: command tx timeout [ 64.574178][ T5944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.615884][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.644206][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.648760][ T63] Bluetooth: hci2: command tx timeout [ 64.649176][ T5947] Bluetooth: hci3: command tx timeout [ 64.651067][ T5952] Bluetooth: hci1: command tx timeout [ 64.657651][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.670744][ T211] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.673963][ T211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.694068][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.697022][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.703554][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.706594][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.711819][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.714916][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.844148][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.852814][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.891922][ T5948] veth0_vlan: entered promiscuous mode [ 64.903423][ T5944] veth0_vlan: entered promiscuous mode [ 64.906697][ T5948] veth1_vlan: entered promiscuous mode [ 64.913520][ T5944] veth1_vlan: entered promiscuous mode [ 64.935145][ T5948] veth0_macvtap: entered promiscuous mode [ 64.952112][ T5948] veth1_macvtap: entered promiscuous mode [ 64.957759][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.974640][ T5944] veth0_macvtap: entered promiscuous mode [ 64.989750][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.995088][ T5944] veth1_macvtap: entered promiscuous mode [ 65.002770][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.011627][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.019080][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.023428][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.035370][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.043776][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.051589][ T211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.057594][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.074950][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.087347][ T211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.091606][ T211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.100944][ T5950] veth0_vlan: entered promiscuous mode [ 65.113995][ T211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.129574][ T5950] veth1_vlan: entered promiscuous mode [ 65.133510][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.136081][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.176232][ T5940] veth0_vlan: entered promiscuous mode [ 65.187067][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.188847][ T5950] veth0_macvtap: entered promiscuous mode [ 65.190707][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.193545][ T5940] veth1_vlan: entered promiscuous mode [ 65.203195][ T5950] veth1_macvtap: entered promiscuous mode [ 65.212370][ T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.214906][ T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.232395][ T211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.235112][ T211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.235617][ T5948] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.246204][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.255649][ T5940] veth0_macvtap: entered promiscuous mode [ 65.262344][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.270945][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.274281][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.277897][ T5940] veth1_macvtap: entered promiscuous mode [ 65.307496][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.311773][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.327984][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.336143][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.380212][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.383900][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.398969][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.416527][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.451765][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.455158][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.487458][ T6034] Zero length message leads to an empty skb [ 65.492059][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.495337][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.507293][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.511890][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.556457][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.567381][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.572840][ T6038] Bluetooth: MGMT ver 1.23 [ 65.844759][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'. [ 66.037400][ T6064] input: syz1 as /devices/virtual/input/input5 [ 66.141483][ T6072] can0: slcan on ttyS3. [ 66.239694][ T6072] can0 (unregistered): slcan off ttyS3. [ 66.437813][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'. [ 66.650745][ T63] Bluetooth: hci0: command tx timeout [ 66.728463][ T63] Bluetooth: hci2: command tx timeout [ 66.741536][ T5952] Bluetooth: hci1: command tx timeout [ 66.741615][ T5947] Bluetooth: hci3: command tx timeout [ 66.782501][ T40] audit: type=1326 audit(1774266117.901:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.37" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8f88 code=0x7ffc0000 [ 66.793171][ T40] audit: type=1326 audit(1774266117.901:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.37" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8f88 code=0x7ffc0000 [ 66.801808][ T40] audit: type=1326 audit(1774266117.901:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.37" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 66.817913][ T40] audit: type=1326 audit(1774266117.901:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.37" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 66.827339][ T40] audit: type=1326 audit(1774266117.901:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.37" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8f88 code=0x7ffc0000 [ 66.834118][ T40] audit: type=1326 audit(1774266117.901:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.37" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8f88 code=0x7ffc0000 [ 66.841766][ T40] audit: type=1326 audit(1774266117.901:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.37" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 66.849157][ T40] audit: type=1326 audit(1774266117.901:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.37" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8f88 code=0x7ffc0000 [ 66.856213][ T40] audit: type=1326 audit(1774266117.901:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.37" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 66.866897][ T40] audit: type=1326 audit(1774266117.901:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.37" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8f88 code=0x7ffc0000 [ 67.109821][ T6136] ======================================================= [ 67.109821][ T6136] WARNING: The mand mount option has been deprecated and [ 67.109821][ T6136] and is ignored by this kernel. Remove the mand [ 67.109821][ T6136] option from the mount to silence this warning. [ 67.109821][ T6136] ======================================================= [ 67.514254][ T50] kernel read not supported for file /dsp (pid: 50 comm: kworker/3:1) [ 67.709009][ T6162] block nbd0: Unsupported socket: should be TCP or UNIX. [ 67.919646][ T828] Process accounting resumed [ 68.010539][ T6025] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.171304][ T6025] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.175349][ T6025] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 68.179081][ T6025] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.185735][ T6025] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 68.188686][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.191361][ T6025] usb 6-1: Product: syz [ 68.193188][ T6025] usb 6-1: Manufacturer: syz [ 68.194991][ T6025] usb 6-1: SerialNumber: syz [ 68.203727][ T6025] hub 6-1:1.0: bad descriptor, ignoring hub [ 68.206084][ T6025] hub 6-1:1.0: probe with driver hub failed with error -5 [ 68.411500][ T6025] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 68.728688][ T5947] Bluetooth: hci0: command tx timeout [ 68.808396][ T5947] Bluetooth: hci2: command tx timeout [ 68.808442][ T63] Bluetooth: hci1: command tx timeout [ 68.810252][ T5947] Bluetooth: hci3: command tx timeout [ 69.015515][ T6189] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.108193][ T6025] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.268210][ T6025] usb 5-1: Using ep0 maxpacket: 8 [ 69.272727][ T6025] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 69.275959][ T6025] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 69.280583][ T6025] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 69.285102][ T6025] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.289917][ T6025] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.294181][ T6025] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 69.299661][ T6025] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 69.305453][ T6025] usb 5-1: config 168 interface 0 has no altsetting 0 [ 69.309551][ T6025] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 69.313186][ T6025] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 69.317952][ T6025] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 69.323634][ T6025] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.329580][ T6025] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.334134][ T6025] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 69.338355][ T6025] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 69.342722][ T6025] usb 5-1: config 168 interface 0 has no altsetting 0 [ 69.345723][ T6025] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 69.348387][ T6025] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 69.352059][ T6025] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 69.355889][ T6025] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.359995][ T6025] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.364070][ T6025] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 69.369028][ T6025] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 69.374375][ T6025] usb 5-1: config 168 interface 0 has no altsetting 0 [ 69.381325][ T6025] usb 5-1: string descriptor 0 read error: -22 [ 69.383353][ T6025] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 69.386333][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.481308][ T841] usb 6-1: USB disconnect, device number 2 [ 69.485681][ T6025] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 69.492074][ T841] usblp0: removed [ 69.604484][ T828] usb 5-1: USB disconnect, device number 2 [ 70.104787][ T6210] binder: Binderfs stats mode cannot be changed during a remount [ 70.142263][ T5947] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 70.350099][ T6225] syz_tun: entered allmulticast mode [ 70.353756][ T6225] syz_tun: left allmulticast mode [ 70.375323][ T6227] netlink: 'syz.1.84': attribute type 4 has an invalid length. [ 70.707706][ T6248] openvswitch: netlink: IP tunnel dst address not specified [ 70.765508][ T6252] blkio.reset_stats is deprecated [ 70.811627][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.96'. [ 70.819249][ T5947] Bluetooth: hci0: command tx timeout [ 70.898772][ T5947] Bluetooth: hci3: command tx timeout [ 70.899160][ T5952] Bluetooth: hci1: command tx timeout [ 70.901145][ T5947] Bluetooth: hci2: command tx timeout [ 71.179535][ T5947] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 71.346314][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 71.352753][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 71.430146][ T6299] netlink: 'syz.3.115': attribute type 8 has an invalid length. [ 71.663297][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 71.668051][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 72.093253][ T6330] syz.1.130 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 72.236134][ T6349] netlink: 'syz.3.137': attribute type 12 has an invalid length. [ 72.239085][ T6349] netlink: 'syz.3.137': attribute type 29 has an invalid length. [ 72.241755][ T6349] netlink: 148 bytes leftover after parsing attributes in process `syz.3.137'. [ 72.244803][ T6349] netlink: 43 bytes leftover after parsing attributes in process `syz.3.137'. [ 72.430349][ T40] kauditd_printk_skb: 404 callbacks suppressed [ 72.430366][ T40] audit: type=1326 audit(1774266123.551:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.3.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 72.442109][ T40] audit: type=1326 audit(1774266123.551:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.3.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 72.454132][ T40] audit: type=1326 audit(1774266123.561:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.3.143" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 72.469243][ T40] audit: type=1326 audit(1774266123.561:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.3.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 72.500304][ T40] audit: type=1326 audit(1774266123.561:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.3.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 72.514593][ T40] audit: type=1326 audit(1774266123.561:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.3.143" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 72.522112][ T40] audit: type=1326 audit(1774266123.561:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.3.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 72.532894][ T40] audit: type=1326 audit(1774266123.561:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.3.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 72.541002][ T40] audit: type=1326 audit(1774266123.561:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.3.143" exe="/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 72.552456][ T40] audit: type=1326 audit(1774266123.571:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.3.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 72.693932][ T6380] netlink: 56 bytes leftover after parsing attributes in process `syz.3.150'. [ 72.905931][ T6395] Illegal XDP return value 4294967294 on prog (id 16) dev N/A, expect packet loss! [ 73.068331][ T6388] nbd0: detected capacity change from 0 to 63 [ 73.084103][ T63] block nbd0: Receive control failed (result -104) [ 73.084455][ T5947] block nbd0: Receive control failed (result -32) [ 73.087552][ T5952] block nbd0: Receive control failed (result -32) [ 73.131397][ T6403] netlink: 3 bytes leftover after parsing attributes in process `syz.0.158'. [ 73.135469][ T6403] netlink: 3 bytes leftover after parsing attributes in process `syz.0.158'. [ 73.334558][ T6414] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 73.337957][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 74.156454][ T6466] netlink: 'syz.0.187': attribute type 1 has an invalid length. [ 74.267455][ T6474] binder: 6473:6474 ioctl c0306201 80000640 returned -22 [ 74.277881][ T6031] kernel read not supported for file /vcs (pid: 6031 comm: kworker/1:4) [ 74.494232][ T6489] process 'syz.0.197' launched '/dev/fd/3' with NULL argv: empty string added [ 74.548483][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 74.718681][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 74.723105][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.727388][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 74.731864][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 74.736733][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 74.742396][ T24] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 74.746254][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.755594][ T24] hub 7-1:1.0: bad descriptor, ignoring hub [ 74.758221][ T24] hub 7-1:1.0: probe with driver hub failed with error -5 [ 74.761836][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 74.764187][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 74.768719][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 74.771317][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 75.368265][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.368442][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 75.728234][ T6031] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 75.888292][ T6031] usb 8-1: Using ep0 maxpacket: 16 [ 75.892666][ T6031] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.897321][ T6031] usb 8-1: config 0 has no interfaces? [ 75.901850][ T6031] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.905122][ T6031] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.907655][ T6031] usb 8-1: Product: syz [ 75.909527][ T6031] usb 8-1: Manufacturer: syz [ 75.911536][ T6031] usb 8-1: SerialNumber: syz [ 75.917278][ T6031] usb 8-1: config 0 descriptor?? [ 76.111636][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.114839][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.137168][ T6025] usb 8-1: USB disconnect, device number 2 [ 76.287940][ T6540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.220'. [ 76.630479][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 76.841849][ T6570] netem: incorrect ge model size [ 76.844207][ T6570] netem: change failed [ 76.910817][ T6574] mmap: syz.3.236 (6574) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.157834][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 77.164567][ T6589] netlink: 200 bytes leftover after parsing attributes in process `syz.3.243'. [ 77.646088][ T6616] bond0: entered promiscuous mode [ 77.647854][ T6616] bond_slave_0: entered promiscuous mode [ 77.652151][ T6616] bond_slave_1: entered promiscuous mode [ 77.978871][ T841] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 78.130464][ T841] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.133866][ T841] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.140129][ T841] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.143727][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.338535][ T5306] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.355930][ T841] usb 6-1: GET_CAPABILITIES returned 0 [ 78.358873][ T841] usbtmc 6-1:16.0: can't read capabilities [ 78.443534][ T24] usb 7-1: USB disconnect, device number 2 [ 78.447251][ T6479] cdc_wdm 7-1:1.0: Error autopm - -16 [ 78.517685][ T5306] usb 5-1: Using ep0 maxpacket: 8 [ 78.521927][ T5306] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 78.527301][ T5306] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 78.532014][ T5306] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.536022][ T5306] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.541494][ T5306] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.544973][ T5306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.562363][ T50] usb 6-1: USB disconnect, device number 3 [ 78.761916][ T5306] usb 5-1: GET_CAPABILITIES returned 0 [ 78.767320][ T5306] usbtmc 5-1:16.0: can't read capabilities [ 78.858388][ T6650] nbd1: detected capacity change from 0 to 63 [ 78.876513][ T5947] block nbd1: Receive control failed (result -104) [ 78.876534][ T63] block nbd1: Receive control failed (result -32) [ 78.876551][ T5952] block nbd1: Receive control failed (result -32) [ 78.948625][ T6667] capability: warning: `syz.2.279' uses deprecated v2 capabilities in a way that may be insecure [ 78.974214][ T5306] usb 5-1: USB disconnect, device number 3 [ 79.037055][ T6675] team_slave_0: entered promiscuous mode [ 79.039308][ T6675] team_slave_1: entered promiscuous mode [ 79.061136][ T6675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 79.155643][ T6683] netlink: 284 bytes leftover after parsing attributes in process `syz.1.286'. [ 79.350510][ T6700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.293'. [ 79.393764][ T6704] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.397770][ T6704] block device autoloading is deprecated and will be removed. [ 79.441839][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 79.441855][ T40] audit: type=1800 audit(1774266130.561:427): pid=6706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.297" name="file0" dev="9p" ino=71827915 res=0 errno=0 [ 79.462421][ T6706] netfs: Couldn't get user pages (rc=-14) [ 79.553509][ T6719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.303'. [ 79.557065][ T6719] bond0: left promiscuous mode [ 79.566811][ T6719] bond_slave_0: left promiscuous mode [ 79.571091][ T6719] bond_slave_1: left promiscuous mode [ 79.831120][ T6726] warning: `syz.1.306' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.928335][ T6730] vlan2: entered allmulticast mode [ 79.930022][ T6730] veth0_to_bond: entered allmulticast mode [ 80.074960][ T6739] input: syz0 as /devices/virtual/input/input6 [ 80.079496][ T6738] C: renamed from team_slave_0 (while UP) [ 80.087891][ T6738] netlink: 'syz.2.308': attribute type 2 has an invalid length. [ 80.091303][ T6738] netlink: 116 bytes leftover after parsing attributes in process `syz.2.308'. [ 80.095523][ T6738] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 80.807964][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 80.824312][ T6783] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.828337][ T6767] nbd2: detected capacity change from 0 to 63 [ 80.842053][ T5941] block nbd2: Receive control failed (result -104) [ 80.842097][ T5952] block nbd2: Receive control failed (result -32) [ 80.846480][ T63] block nbd2: Receive control failed (result -32) [ 81.000617][ T6795] netlink: 44 bytes leftover after parsing attributes in process `syz.0.339'. [ 81.298383][ T841] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 81.449977][ T841] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 81.454868][ T841] usb 7-1: config 0 interface 0 has no altsetting 0 [ 81.459832][ T841] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.463032][ T841] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.466288][ T841] usb 7-1: Product: syz [ 81.468753][ T841] usb 7-1: Manufacturer: syz [ 81.470650][ T841] usb 7-1: SerialNumber: syz [ 81.476713][ T841] usb 7-1: config 0 descriptor?? [ 81.486231][ T841] usb 7-1: selecting invalid altsetting 0 [ 81.608344][ T5947] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 81.609870][ T63] Bluetooth: hci4: command 0xfc11 tx timeout [ 81.702843][ T841] usb 7-1: USB disconnect, device number 3 [ 82.407891][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 82.414864][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 82.612957][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 82.691057][ T6874] netlink: 27 bytes leftover after parsing attributes in process `syz.0.372'. [ 82.861012][ T6883] sp0: Synchronizing with TNC [ 83.001395][ T6888] netlink: 'syz.3.377': attribute type 15 has an invalid length. [ 83.119106][ T6894] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.128436][ T6894] netlink: 'syz.0.380': attribute type 7 has an invalid length. [ 83.315933][ T50] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 83.363364][ T6914] o2cb: This node has not been configured. [ 83.366326][ T6914] o2cb: Cluster check failed. Fix errors before retrying. [ 83.373069][ T6914] (syz.0.390,6914,1):user_dlm_register:674 ERROR: status = -22 [ 83.376468][ T6914] (syz.0.390,6914,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 83.425686][ T6920] netlink: 'syz.0.393': attribute type 6 has an invalid length. [ 83.479627][ T50] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 83.487928][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.492776][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.507202][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 83.511280][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.514550][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.521008][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 83.524873][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.528564][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.532488][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 83.535716][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.539602][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.543638][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 83.546584][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.549636][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.553790][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 83.557108][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.561044][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.565633][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 83.570196][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.573598][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.577956][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 83.581680][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.585157][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.589208][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 83.593032][ T50] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 83.595979][ T50] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 83.599034][ T50] usb 8-1: Product: syz [ 83.600677][ T50] usb 8-1: Manufacturer: syz [ 83.602600][ T50] usb 8-1: SerialNumber: syz [ 83.609206][ T50] usb 8-1: config 0 descriptor?? [ 83.619299][ T50] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 83.800446][ T6937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.400'. [ 84.060996][ T6960] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.410'. [ 84.139674][ T6968] netlink: 'syz.2.413': attribute type 9 has an invalid length. [ 84.139716][ T6968] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.413'. [ 84.666518][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'. [ 85.139389][ T7029] kvm: kvm [7028]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000086) = 0x0 [ 85.858196][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.938695][ C3] usb 8-1: yurex_control_callback - control failed: -2 [ 85.941170][ C3] usb 8-1: yurex_control_callback - control failed: -32 [ 85.945718][ T50] usb 8-1: USB disconnect, device number 3 [ 85.949292][ T50] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 86.008322][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 86.012166][ T9] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 86.015402][ T9] usb 5-1: config 0 has no interface number 0 [ 86.017910][ T9] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 86.022450][ T9] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 86.027919][ T9] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 86.032803][ T9] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.043011][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 86.046866][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.050596][ T9] usb 5-1: Product: syz [ 86.052943][ T9] usb 5-1: Manufacturer: syz [ 86.055436][ T9] usb 5-1: SerialNumber: syz [ 86.059911][ T9] usb 5-1: config 0 descriptor?? [ 86.282164][ T9] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 86.332982][ T34] cfg80211: failed to load regulatory.db [ 86.487967][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 86.489716][ T6027] usb 5-1: USB disconnect, device number 4 [ 86.494318][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 86.501598][ T7061] netlink: 'syz.3.458': attribute type 13 has an invalid length. [ 86.505055][ T7061] netlink: 'syz.3.458': attribute type 11 has an invalid length. [ 87.650480][ T7120] __nla_validate_parse: 4 callbacks suppressed [ 87.650494][ T7120] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.486'. [ 87.823347][ T7133] ip6erspan0: entered allmulticast mode [ 88.163094][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 88.207916][ T7163] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.279089][ T7171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.506'. [ 88.586886][ T7189] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 88.628385][ T6027] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 88.649740][ T50] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 88.789855][ T6027] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 88.792659][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.796663][ T6027] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 88.800227][ T6027] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 88.803049][ T6027] usb 6-1: Manufacturer: syz [ 88.806657][ T6027] usb 6-1: config 0 descriptor?? [ 88.818935][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 88.822274][ T50] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.825452][ T50] usb 7-1: config 0 has no interface number 0 [ 88.829469][ T50] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.833610][ T50] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.836732][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.841374][ T50] usb 7-1: config 0 descriptor?? [ 88.852331][ T50] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 88.868197][ T6027] rc_core: IR keymap rc-hauppauge not found [ 88.870952][ T6027] Registered IR keymap rc-empty [ 88.876040][ T6027] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 88.893313][ T6027] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 89.042701][ T841] usb 6-1: USB disconnect, device number 4 [ 89.055548][ T34] usb 7-1: USB disconnect, device number 4 [ 89.058608][ C3] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 89.067902][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 89.223021][ T7218] syz.3.529 uses obsolete (PF_INET,SOCK_PACKET) [ 89.809388][ T7246] trusted_key: syz.0.542 sent an empty control message without MSG_MORE. [ 89.902847][ T7252] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.546'. [ 90.047563][ T7262] input: syz0 as /devices/virtual/input/input10 [ 90.520348][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 90.688190][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 90.697140][ T9] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 90.704407][ T9] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 90.709784][ T9] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.715328][ T9] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 90.735342][ T9] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 90.743939][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.747348][ T9] usb 6-1: Product: syz [ 90.754714][ T9] usb 6-1: Manufacturer: syz [ 90.756803][ T9] usb 6-1: SerialNumber: syz [ 90.774494][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 90.795120][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input11 [ 91.016778][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.568'. [ 91.017863][ T9] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 91.038208][ T9] (id 0x00) [ 91.064063][ T7307] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 91.098217][ T9] rc_core: IR keymap rc-imon-pad not found [ 91.100429][ T9] Registered IR keymap rc-empty [ 91.102316][ T9] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 91.106040][ T9] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 91.200702][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 91.206580][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input12 [ 91.217956][ T9] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:5> initialized [ 91.383306][ T7273] imon:vfd_write: invalid payload size [ 91.389534][ T9] usb 6-1: USB disconnect, device number 5 [ 91.608379][ T7335] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.208342][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 92.252861][ T7360] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.362170][ T29] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 92.365152][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.368012][ T29] usb 8-1: Product: syz [ 92.369754][ T29] usb 8-1: Manufacturer: syz [ 92.371304][ T29] usb 8-1: SerialNumber: syz [ 92.375446][ T29] usb 8-1: config 0 descriptor?? [ 92.557419][ T7374] netlink: 'syz.0.598': attribute type 11 has an invalid length. [ 92.587286][ T6025] usb 8-1: USB disconnect, device number 4 [ 92.655298][ T40] audit: type=1326 audit(1774266143.771:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.0.599" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x0 [ 93.854174][ T7433] netlink: 428 bytes leftover after parsing attributes in process `syz.2.624'. [ 93.858317][ T7433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.624'. [ 93.868742][ T6027] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 94.060097][ T6027] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 94.065867][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.069126][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.072765][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.077657][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.085431][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.088773][ T5947] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 94.089530][ T63] Bluetooth: hci0: command 0x1407 tx timeout [ 94.093980][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.096989][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.101299][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.104776][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.107594][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.111282][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.114698][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.117694][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.131444][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.135655][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.144341][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.147933][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.152586][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.158739][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.162325][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.171772][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.175608][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.180703][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.185007][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.189527][ T6027] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 94.192963][ T6027] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 94.196362][ T6027] usb 8-1: Product: syz [ 94.198409][ T6027] usb 8-1: Manufacturer: syz [ 94.200115][ T6027] usb 8-1: SerialNumber: syz [ 94.203209][ T6027] usb 8-1: config 0 descriptor?? [ 94.216579][ T6027] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 95.886613][ T7485] syzkaller1: entered promiscuous mode [ 95.889109][ T7485] syzkaller1: entered allmulticast mode [ 96.039044][ T7489] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 96.162789][ T7497] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 96.357879][ T7511] loop5: detected capacity change from 0 to 7 [ 96.370558][ T7511] Dev loop5: unable to read RDB block 7 [ 96.373085][ T7511] loop5: unable to read partition table [ 96.375714][ T7511] loop5: partition table beyond EOD, truncated [ 96.379350][ T7511] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 96.490005][ C2] usb 8-1: yurex_control_callback - control failed: -2 [ 96.493896][ T1341] usb 8-1: USB disconnect, device number 5 [ 96.501173][ T1341] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 96.527306][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 96.536324][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 97.261983][ T7556] netlink: 'syz.0.677': attribute type 25 has an invalid length. [ 97.263159][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 97.265283][ T7556] netlink: 'syz.0.677': attribute type 28 has an invalid length. [ 97.658475][ T29] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 97.839778][ T29] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.843257][ T29] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.846484][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 97.852353][ T29] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 97.857794][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.862677][ T29] usb 6-1: config 0 descriptor?? [ 98.064132][ T7596] capability: warning: `syz.0.695' uses 32-bit capabilities (legacy support in use) [ 98.290652][ T29] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 98.293318][ T29] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 98.296562][ T29] hid-steam 0003:28DE:1102.0002: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 98.368407][ T29] hid-steam 0003:28DE:1102.0002: Steam Controller 'XXXXXXXXXX' connected [ 98.374696][ T29] input: Steam Controller as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:28DE:1102.0002/input/input14 [ 98.393948][ T29] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 98.397022][ T29] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 98.421592][ T29] hid-steam 0003:28DE:1102.0003: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 98.438511][ T5994] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.493886][ T29] usb 6-1: USB disconnect, device number 6 [ 98.519767][ T29] hid-steam 0003:28DE:1102.0002: Steam Controller 'XXXXXXXXXX' disconnected [ 98.589228][ T5994] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 98.592813][ T5994] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.596042][ T5994] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.599866][ T5994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.602784][ T5994] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.605417][ T5994] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.609329][ T5994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.612926][ T5994] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.616088][ T5994] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.619812][ T5994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.622947][ T5994] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.626059][ T5994] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.629656][ T5994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.632708][ T5994] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.635586][ T5994] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.640156][ T5994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.643630][ T5994] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.647074][ T5994] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.650815][ T5994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.653818][ T5994] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.656733][ T5994] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.660592][ T5994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.663734][ T5994] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.667066][ T5994] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.671480][ T5994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.675183][ T5994] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 98.678261][ T5994] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 98.681210][ T5994] usb 5-1: Product: syz [ 98.682612][ T5994] usb 5-1: Manufacturer: syz [ 98.684286][ T5994] usb 5-1: SerialNumber: syz [ 98.691248][ T5994] usb 5-1: config 0 descriptor?? [ 98.698033][ T5994] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 100.149000][ T7656] input: syz1 as /devices/virtual/input/input15 [ 100.688314][ T6031] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 100.735700][ T7682] kvm: user requested TSC rate below hardware speed [ 100.838208][ T6031] usb 8-1: Using ep0 maxpacket: 8 [ 100.847362][ T6031] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 100.853674][ T6031] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.858052][ T6031] usb 8-1: Product: syz [ 100.860046][ T6031] usb 8-1: Manufacturer: syz [ 100.862007][ T6031] usb 8-1: SerialNumber: syz [ 100.872826][ T6031] usb 8-1: config 0 descriptor?? [ 100.969605][ C3] usb 5-1: yurex_control_callback - control failed: -2 [ 100.973596][ C3] usb 5-1: yurex_control_callback - control failed: -32 [ 100.980771][ T29] usb 5-1: USB disconnect, device number 5 [ 100.995335][ T29] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 101.083877][ T7693] netlink: 'syz.2.735': attribute type 10 has an invalid length. [ 101.088226][ T6031] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 101.097779][ T6031] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 101.102234][ T7693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.105949][ T6031] usb 8-1: USB disconnect, device number 6 [ 101.111754][ T7693] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 101.134256][ T7693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.140666][ T7693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.145030][ T7693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.148378][ T7693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.161138][ T7693] bond0: (slave batadv0): Releasing backup interface [ 101.185995][ T7695] netlink: 'syz.1.736': attribute type 13 has an invalid length. [ 101.774453][ T7717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.746'. [ 101.788355][ T7717] netlink: 'syz.1.746': attribute type 7 has an invalid length. [ 101.801928][ T7717] netlink: 'syz.1.746': attribute type 8 has an invalid length. [ 101.806660][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 101.818660][ T7717] erspan0: entered promiscuous mode [ 101.830984][ T7717] gretap0: entered promiscuous mode [ 101.840612][ T7717] erspan0: left promiscuous mode [ 101.846494][ T7717] gretap0: left promiscuous mode [ 102.402773][ T7759] syzkaller1: entered promiscuous mode [ 102.405782][ T7759] syzkaller1: entered allmulticast mode [ 102.657804][ T7777] input: syz1 as /devices/virtual/input/input16 [ 102.701370][ T7783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.775'. [ 102.712356][ T7783] netlink: 'syz.2.775': attribute type 7 has an invalid length. [ 102.715150][ T7783] netlink: 'syz.2.775': attribute type 8 has an invalid length. [ 102.722476][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 102.733652][ T7783] erspan0: entered promiscuous mode [ 102.737298][ T7783] gretap0: entered promiscuous mode [ 102.742685][ T7783] erspan0: left promiscuous mode [ 102.749920][ T7783] gretap0: left promiscuous mode [ 102.885608][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 103.052622][ T7806] netlink: 228 bytes leftover after parsing attributes in process `syz.2.784'. [ 103.056907][ T7806] netlink: 228 bytes leftover after parsing attributes in process `syz.2.784'. [ 103.116818][ T7811] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 103.620460][ T7611] block nbd0: Connection timed out, retrying (0/3 alive) [ 103.624803][ T7611] block nbd0: Connection timed out, retrying (0/3 alive) [ 103.630572][ T7611] block nbd0: Connection timed out, retrying (0/3 alive) [ 103.633645][ T7611] block nbd0: Connection timed out, retrying (0/3 alive) [ 103.637242][ T7611] block nbd0: Dead connection, failed to find a fallback [ 103.641317][ T7611] block nbd0: shutting down sockets [ 103.644468][ T7611] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 103.649063][ T7611] Buffer I/O error on dev nbd0, logical block 3, async page read [ 103.652624][ T7611] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 103.656593][ T7611] Buffer I/O error on dev nbd0, logical block 2, async page read [ 103.660004][ T7611] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 103.663003][ T7611] Buffer I/O error on dev nbd0, logical block 1, async page read [ 103.665902][ T7611] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 103.669344][ T7611] Buffer I/O error on dev nbd0, logical block 0, async page read [ 103.673623][ T5946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 103.679181][ T5946] Buffer I/O error on dev nbd0, logical block 0, async page read [ 103.683077][ T5946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 103.687556][ T5946] Buffer I/O error on dev nbd0, logical block 1, async page read [ 103.692951][ T5946] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 103.696928][ T5946] Buffer I/O error on dev nbd0, logical block 2, async page read [ 103.700144][ T5946] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 103.703195][ T5946] Buffer I/O error on dev nbd0, logical block 3, async page read [ 103.705956][ T5946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 103.709658][ T5946] Buffer I/O error on dev nbd0, logical block 0, async page read [ 103.712323][ T5946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 103.716099][ T5946] Buffer I/O error on dev nbd0, logical block 1, async page read [ 103.720743][ T5946] ldm_validate_partition_table(): Disk read failed. [ 103.724187][ T5946] Dev nbd0: unable to read RDB block 0 [ 103.727263][ T5946] nbd0: unable to read partition table [ 103.735454][ T5946] ldm_validate_partition_table(): Disk read failed. [ 103.737898][ T5946] Dev nbd0: unable to read RDB block 0 [ 103.740163][ T5946] nbd0: unable to read partition table [ 104.248035][ T7860] nbd: nbd0 already in use [ 104.254247][ T7860] block nbd0: NBD_DISCONNECT [ 104.256149][ T7860] block nbd0: Send disconnect failed -32 [ 104.260305][ T7860] block nbd0: Send disconnect failed -32 [ 104.262557][ T7860] block nbd0: Send disconnect failed -32 [ 104.553927][ T7888] syzkaller1: entered promiscuous mode [ 104.555798][ T7888] syzkaller1: entered allmulticast mode [ 105.206131][ T7929] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.837'. [ 105.331087][ T7935] bridge0: port 3(syz_tun) entered blocking state [ 105.334261][ T7935] bridge0: port 3(syz_tun) entered disabled state [ 105.337273][ T7935] syz_tun: entered allmulticast mode [ 105.342563][ T7935] syz_tun: entered promiscuous mode [ 105.345693][ T7935] bridge0: port 3(syz_tun) entered blocking state [ 105.349010][ T7935] bridge0: port 3(syz_tun) entered forwarding state [ 106.099801][ T7965] binder: 7964:7965 ioctl c0306201 80000280 returned -22 [ 106.789898][ T8001] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.871'. [ 107.609023][ T63] Bluetooth: hci4: command 0xfc11 tx timeout [ 107.611720][ T5947] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 108.008408][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.074731][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 108.077959][ T8077] netlink: 'syz.0.903': attribute type 21 has an invalid length. [ 108.088583][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.092503][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.096432][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.211416][ T8085] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 108.219683][ T8085] bond1 (unregistering): Released all slaves [ 108.798282][ T1341] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 108.901480][ T8140] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 108.948272][ T1341] usb 7-1: Using ep0 maxpacket: 8 [ 108.952559][ T1341] usb 7-1: config 0 has no interfaces? [ 108.956419][ T1341] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 108.959848][ T1341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.962384][ T1341] usb 7-1: Product: syz [ 108.963768][ T1341] usb 7-1: Manufacturer: syz [ 108.965333][ T1341] usb 7-1: SerialNumber: syz [ 108.968300][ T1341] usb 7-1: config 0 descriptor?? [ 108.977748][ T8147] loop9: detected capacity change from 0 to 7 [ 108.981342][ T7690] buffer_io_error: 138 callbacks suppressed [ 108.981352][ T7690] Buffer I/O error on dev loop9, logical block 0, async page read [ 108.985888][ T7690] Buffer I/O error on dev loop9, logical block 0, async page read [ 108.988560][ T7690] Buffer I/O error on dev loop9, logical block 0, async page read [ 108.991028][ T7690] Buffer I/O error on dev loop9, logical block 0, async page read [ 108.993660][ T7690] Buffer I/O error on dev loop9, logical block 0, async page read [ 108.996221][ T7690] Buffer I/O error on dev loop9, logical block 0, async page read [ 108.998850][ T7690] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.001698][ T7690] ldm_validate_partition_table(): Disk read failed. [ 109.003856][ T7690] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.006308][ T7690] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.010289][ T7690] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.012911][ T7690] Dev loop9: unable to read RDB block 0 [ 109.014795][ T7690] loop9: unable to read partition table [ 109.016886][ T7690] loop9: partition table beyond EOD, truncated [ 109.023493][ T8147] ldm_validate_partition_table(): Disk read failed. [ 109.028532][ T8147] Dev loop9: unable to read RDB block 0 [ 109.031265][ T8147] loop9: unable to read partition table [ 109.033955][ T8147] loop9: partition table beyond EOD, truncated [ 109.041166][ T8147] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 109.041166][ T8147] ) failed (rc=-5) [ 109.048268][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.088960][ T8149] loop9: detected capacity change from 7 to 0 [ 109.180219][ T50] usb 7-1: USB disconnect, device number 5 [ 109.278361][ T1341] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.378461][ T7618] block nbd1: Connection timed out, retrying (0/3 alive) [ 109.381420][ T7618] block nbd1: Connection timed out, retrying (0/3 alive) [ 109.384478][ T7618] block nbd1: Connection timed out, retrying (0/3 alive) [ 109.387670][ T7618] block nbd1: Connection timed out, retrying (0/3 alive) [ 109.391662][ T25] block nbd1: Dead connection, failed to find a fallback [ 109.394207][ T25] block nbd1: shutting down sockets [ 109.396147][ T25] blk_print_req_error: 138 callbacks suppressed [ 109.396157][ T25] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.402778][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.405967][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.409209][ T25] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.415194][ T6427] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.419356][ T6427] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.423657][ T6427] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.427661][ T6427] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.431806][ T6427] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.435114][ T6427] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.440648][ T6427] ldm_validate_partition_table(): Disk read failed. [ 109.441014][ T1341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.443154][ T6427] Dev nbd1: unable to read RDB block 0 [ 109.447847][ T1341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.450178][ T6427] nbd1: unable to read partition table [ 109.453938][ T1341] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.461118][ T1341] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.461995][ T6427] ldm_validate_partition_table(): Disk read failed. [ 109.464185][ T1341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.467275][ T6427] Dev nbd1: unable to read RDB block 0 [ 109.472364][ T6427] nbd1: unable to read partition table [ 109.472425][ T1341] usb 5-1: config 0 descriptor?? [ 109.848769][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.906156][ T1341] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 110.008729][ T1255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.014073][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.019998][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.088935][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.525814][ T8179] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.948'. [ 110.580659][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 110.988316][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 111.139643][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.143198][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.146525][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.151027][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.153935][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.157921][ T10] usb 7-1: config 0 descriptor?? [ 111.190939][ C3] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 111.298322][ T7611] block nbd2: Connection timed out, retrying (0/3 alive) [ 111.301682][ T7611] block nbd2: Connection timed out, retrying (0/3 alive) [ 111.305115][ T7611] block nbd2: Connection timed out, retrying (0/3 alive) [ 111.308612][ T35] block nbd2: Dead connection, failed to find a fallback [ 111.311858][ T35] block nbd2: shutting down sockets [ 111.316113][ T7611] block nbd2: Connection timed out, retrying (0/3 alive) [ 111.323426][ T6709] ldm_validate_partition_table(): Disk read failed. [ 111.326019][ T6709] Dev nbd2: unable to read RDB block 0 [ 111.328438][ T6709] nbd2: unable to read partition table [ 111.333141][ T6709] ldm_validate_partition_table(): Disk read failed. [ 111.336257][ T6709] Dev nbd2: unable to read RDB block 0 [ 111.348675][ T6709] nbd2: unable to read partition table [ 111.470118][ T8201] netlink: 'syz.3.958': attribute type 2 has an invalid length. [ 111.580724][ T10] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 111.676129][ T8209] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.840860][ T6027] usb 7-1: USB disconnect, device number 6 [ 111.974155][ T29] usb 5-1: USB disconnect, device number 6 [ 112.658988][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 113.051270][ T6027] net_ratelimit: 3 callbacks suppressed [ 113.051283][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.208582][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.420467][ T8302] netlink: 'syz.3.1000': attribute type 10 has an invalid length. [ 113.425746][ T8302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.431304][ T8302] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 113.445152][ T8302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.449985][ T8302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.453639][ T8302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.456171][ T8302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.469583][ T8302] bond0: (slave batadv0): Releasing backup interface [ 114.258698][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.808327][ T34] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 114.978173][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 114.982073][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.988134][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.991207][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 114.995288][ T34] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 114.998543][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.005787][ T34] usb 5-1: config 0 descriptor?? [ 115.068233][ T6025] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 115.221522][ T6025] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 115.225511][ T6025] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.238176][ T6025] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.243043][ T6025] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.246783][ T6025] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.250134][ T6025] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.253956][ T6025] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.257864][ T6025] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.261132][ T6025] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.265030][ T6025] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.269362][ T6025] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.272315][ T6025] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.275711][ T6025] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.281220][ T6025] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.284963][ T6025] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.289351][ T6025] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.292390][ T6025] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.295218][ T6025] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.299087][ T6025] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.302234][ T6025] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.302319][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.305124][ T6025] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.312026][ T6025] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.315204][ T6025] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.318778][ T6025] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.322503][ T6025] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.326889][ T6025] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 115.330033][ T6025] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 115.332763][ T6025] usb 7-1: Product: syz [ 115.334152][ T6025] usb 7-1: Manufacturer: syz [ 115.335701][ T6025] usb 7-1: SerialNumber: syz [ 115.340273][ T6025] usb 7-1: config 0 descriptor?? [ 115.351257][ T6025] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 115.436428][ T34] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0006/input/input17 [ 115.488179][ T6025] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 115.501862][ T34] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0006/input/input18 [ 115.516688][ T34] kye 0003:0458:5011.0006: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 115.556005][ T6027] usb 7-1: USB disconnect, device number 7 [ 115.564786][ T6027] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 115.621587][ T34] usb 5-1: USB disconnect, device number 7 [ 115.642050][ T6025] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 115.646458][ T6025] usb 6-1: config 0 interface 0 has no altsetting 0 [ 115.652281][ T6025] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.655444][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.658497][ T6025] usb 6-1: Product: syz [ 115.659884][ T6025] usb 6-1: Manufacturer: syz [ 115.661491][ T6025] usb 6-1: SerialNumber: syz [ 115.664375][ T6025] usb 6-1: config 0 descriptor?? [ 115.669686][ T6025] usb 6-1: selecting invalid altsetting 0 [ 115.873669][ T6031] usb 6-1: USB disconnect, device number 7 [ 116.094854][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.194204][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 116.297882][ T8407] Invalid argument reading file caps for ./file0 [ 116.328342][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.842931][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 116.847191][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 116.888317][ T50] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 117.049861][ T50] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 117.053010][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.058035][ T50] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 117.063331][ T50] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 117.065885][ T50] usb 7-1: Manufacturer: syz [ 117.068833][ T50] usb 7-1: config 0 descriptor?? [ 117.128230][ T50] rc_core: IR keymap rc-hauppauge not found [ 117.130847][ T50] Registered IR keymap rc-empty [ 117.134487][ T50] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 117.143869][ T50] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input19 [ 117.317187][ T8435] input: syz1 as /devices/virtual/input/input20 [ 117.378382][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.450744][ T6025] usb 7-1: USB disconnect, device number 8 [ 117.473114][ T8443] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 117.688643][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.725037][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 118.129293][ T8473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1075'. [ 118.133233][ T8473] bond0: ARP target 8.4.0.0 is already present [ 118.135967][ T8473] bond0: option arp_ip_target: invalid value (1032) [ 118.409263][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.747417][ T8487] Invalid argument reading file caps for ./file0 [ 119.128696][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.140857][ T8513] ubi31: attaching mtd0 [ 119.158533][ T40] audit: type=1326 audit(1774266426.284:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.3.1091" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x0 [ 119.449883][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.608484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.271320][ T8563] syzkaller1: entered promiscuous mode [ 120.273626][ T8563] syzkaller1: entered allmulticast mode [ 120.328024][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'. [ 120.331548][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'. [ 120.488350][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.908243][ T6031] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 121.028792][ T8602] syzkaller1: entered promiscuous mode [ 121.030982][ T8602] syzkaller1: entered allmulticast mode [ 121.102863][ T6031] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 121.108444][ T6031] usb 5-1: config 0 interface 0 has no altsetting 0 [ 121.118404][ T6031] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 121.122223][ T6031] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 121.126467][ T6031] usb 5-1: Product: syz [ 121.128405][ T6031] usb 5-1: Manufacturer: syz [ 121.130236][ T6031] usb 5-1: SerialNumber: syz [ 121.133427][ T6031] usb 5-1: config 0 descriptor?? [ 121.139461][ T6031] usb 5-1: selecting invalid altsetting 0 [ 121.350004][ T6025] usb 5-1: USB disconnect, device number 8 [ 121.533177][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.538685][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.618217][ T34] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 121.789635][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.793501][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.796656][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.801301][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.804371][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.813407][ T34] usb 8-1: config 0 descriptor?? [ 122.168975][ T1169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.172243][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.176703][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.230963][ T34] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 123.538410][ C2] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 123.608321][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.608349][ T828] net_ratelimit: 3 callbacks suppressed [ 123.608361][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.615673][ T8623] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 124.339831][ T6025] usb 8-1: USB disconnect, device number 7 [ 124.526518][ T8623] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.535449][ T8623] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.538793][ T8623] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.541032][ T8623] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.543941][ T8623] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.547335][ T8623] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.549345][ T8623] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.552371][ T8623] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.612201][ T8640] pim6reg1: entered promiscuous mode [ 124.614086][ T8640] pim6reg1: entered allmulticast mode [ 124.648394][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.797970][ T34] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 124.800766][ T828] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 124.802319][ T34] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 124.810394][ T34] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 124.813980][ T34] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 124.816977][ T34] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 124.819930][ T34] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 124.822756][ T34] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 124.825576][ T34] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 124.828493][ T34] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 124.831343][ T34] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 124.841486][ T34] hid-generic 00A0:0006:0003.0008: hidraw1: HID v0.05 Device [syz1] on syz0 [ 124.950513][ T828] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 124.953913][ T828] usb 6-1: config 0 has no interface number 0 [ 124.956499][ T828] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.984798][ T828] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 124.989141][ T828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.992218][ T828] usb 6-1: Product: syz [ 124.993679][ T828] usb 6-1: Manufacturer: syz [ 124.995360][ T828] usb 6-1: SerialNumber: syz [ 125.011247][ T828] usb 6-1: config 0 descriptor?? [ 125.023627][ T828] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 125.048640][ T34] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 125.122297][ T6025] usb 6-1: USB disconnect, device number 8 [ 125.140488][ T6025] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 125.202449][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.206792][ T34] usb 7-1: config 0 has no interfaces? [ 125.210154][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.212270][ T34] usb 7-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.a6 [ 125.218474][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.221723][ T34] usb 7-1: Product: syz [ 125.223593][ T34] usb 7-1: Manufacturer: syz [ 125.225572][ T34] usb 7-1: SerialNumber: syz [ 125.232696][ T34] usb 7-1: config 0 descriptor?? [ 125.239592][ T8672] netlink: 'syz.0.1157': attribute type 15 has an invalid length. [ 125.242723][ T8672] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1157'. [ 125.443019][ T34] usb 7-1: USB disconnect, device number 9 [ 125.506104][ T8682] binder: 8681:8682 ioctl c0306201 800001c0 returned -14 [ 125.611132][ T6025] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 125.688245][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.690004][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.784276][ T6025] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.788698][ T6025] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 125.793428][ T6025] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 125.797022][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.808941][ T8673] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.816506][ T6025] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.838286][ T828] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 125.988255][ T828] usb 8-1: Using ep0 maxpacket: 8 [ 125.991241][ T828] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.994820][ T828] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.999165][ T828] usb 8-1: config 0 interface 0 has no altsetting 0 [ 126.001478][ T828] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 126.004614][ T828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.009282][ T828] usb 8-1: config 0 descriptor?? [ 126.025069][ T6031] usb 6-1: USB disconnect, device number 9 [ 126.422318][ T828] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 126.568247][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.578343][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.620265][ T1341] usb 8-1: USB disconnect, device number 8 [ 126.730341][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.780974][ T8708] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1174'. [ 126.958852][ T8718] sctp: [Deprecated]: syz.0.1186 (pid 8718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.958852][ T8718] Use struct sctp_sack_info instead [ 126.967667][ T8718] sctp: [Deprecated]: syz.0.1186 (pid 8718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.967667][ T8718] Use struct sctp_sack_info instead [ 127.240299][ T8736] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.325560][ T8736] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.382118][ T8736] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.440388][ T8736] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.529564][ T1169] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.543210][ T70] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.557107][ T1169] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.566291][ T1169] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.768241][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.769065][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.898375][ T828] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 127.923915][ T8750] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 127.927931][ T8753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.931493][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.935929][ T8750] bond1 (unregistering): Released all slaves [ 128.079968][ T828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.084553][ T828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.088542][ T828] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.098428][ T828] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.101652][ T828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.110012][ T828] usb 7-1: config 0 descriptor?? [ 128.195940][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1204'. [ 128.259030][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.261574][ T63] block nbd4: Receive control failed (result -107) [ 128.263081][ T63] [ 128.264803][ T63] ====================================================== [ 128.267358][ T63] WARNING: possible circular locking dependency detected [ 128.269603][ T63] syzkaller #0 Tainted: G L [ 128.271892][ T63] ------------------------------------------------------ [ 128.274165][ T63] kworker/u33:0/63 is trying to acquire lock: [ 128.276214][ T63] ffff888076d0b560 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x67/0x410 [ 128.279280][ T63] [ 128.279280][ T63] but task is already holding lock: [ 128.281777][ T63] ffff8880518b1270 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 128.284660][ T63] [ 128.284660][ T63] which lock already depends on the new lock. [ 128.284660][ T63] [ 128.287950][ T63] [ 128.287950][ T63] the existing dependency chain (in reverse order) is: [ 128.290817][ T63] [ 128.290817][ T63] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 128.293391][ T63] __mutex_lock+0x1a2/0x1b90 [ 128.295544][ T63] nbd_queue_rq+0x428/0x1080 [ 128.297445][ T63] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 128.299640][ T63] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 128.302063][ T63] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 128.304174][ T63] blk_mq_run_hw_queue+0x23c/0x670 [ 128.306187][ T63] blk_mq_dispatch_list+0x51d/0x1360 [ 128.308665][ T63] blk_mq_flush_plug_list+0x130/0x600 [ 128.311381][ T63] __blk_flush_plug+0x2c4/0x4b0 [ 128.313516][ T63] __submit_bio+0x584/0x6c0 [ 128.315638][ T63] submit_bio_noacct_nocheck+0x562/0xc10 [ 128.318281][ T63] submit_bio_noacct+0xd17/0x2010 [ 128.320706][ T63] submit_bh_wbc+0x59c/0x770 [ 128.322969][ T63] block_read_full_folio+0x264/0x8e0 [ 128.325395][ T63] filemap_read_folio+0xfc/0x3b0 [ 128.327830][ T63] do_read_cache_folio+0x2d7/0x6b0 [ 128.330136][ T63] read_part_sector+0xd1/0x370 [ 128.332306][ T63] adfspart_check_ICS+0x93/0x910 [ 128.334092][ T63] bdev_disk_changed+0x7f8/0xc80 [ 128.335799][ T63] blkdev_get_whole+0x187/0x290 [ 128.337896][ T63] bdev_open+0x2c7/0xe40 [ 128.339437][ T63] blkdev_open+0x34e/0x4f0 [ 128.341183][ T63] do_dentry_open+0x6d8/0x1660 [ 128.343019][ T63] vfs_open+0x82/0x3f0 [ 128.344678][ T63] path_openat+0x208c/0x31a0 [ 128.346451][ T63] do_file_open+0x20e/0x430 [ 128.348219][ T63] do_sys_openat2+0x10d/0x1e0 [ 128.349932][ T63] __x64_sys_openat+0x12d/0x210 [ 128.351716][ T63] do_syscall_64+0x106/0xf80 [ 128.353447][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.355634][ T63] [ 128.355634][ T63] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 128.357926][ T63] __mutex_lock+0x1a2/0x1b90 [ 128.359653][ T63] nbd_queue_rq+0xba/0x1080 [ 128.361414][ T63] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 128.363557][ T63] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 128.365711][ T63] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 128.367795][ T63] blk_mq_run_hw_queue+0x23c/0x670 [ 128.369761][ T63] blk_mq_dispatch_list+0x51d/0x1360 [ 128.371685][ T63] blk_mq_flush_plug_list+0x130/0x600 [ 128.373803][ T63] __blk_flush_plug+0x2c4/0x4b0 [ 128.376082][ T63] __submit_bio+0x584/0x6c0 [ 128.377726][ T63] submit_bio_noacct_nocheck+0x562/0xc10 [ 128.379691][ T63] submit_bio_noacct+0xd17/0x2010 [ 128.381469][ T63] submit_bh_wbc+0x59c/0x770 [ 128.383378][ T63] block_read_full_folio+0x264/0x8e0 [ 128.385804][ T63] filemap_read_folio+0xfc/0x3b0 [ 128.388063][ T63] do_read_cache_folio+0x2d7/0x6b0 [ 128.390033][ T63] read_part_sector+0xd1/0x370 [ 128.391733][ T63] adfspart_check_ICS+0x93/0x910 [ 128.393634][ T63] bdev_disk_changed+0x7f8/0xc80 [ 128.395908][ T63] blkdev_get_whole+0x187/0x290 [ 128.397763][ T63] bdev_open+0x2c7/0xe40 [ 128.399308][ T63] blkdev_open+0x34e/0x4f0 [ 128.400965][ T63] do_dentry_open+0x6d8/0x1660 [ 128.402944][ T63] vfs_open+0x82/0x3f0 [ 128.404802][ T63] path_openat+0x208c/0x31a0 [ 128.406656][ T63] do_file_open+0x20e/0x430 [ 128.408302][ T63] do_sys_openat2+0x10d/0x1e0 [ 128.410099][ T63] __x64_sys_openat+0x12d/0x210 [ 128.411855][ T63] do_syscall_64+0x106/0xf80 [ 128.413679][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.416337][ T63] [ 128.416337][ T63] -> #4 (set->srcu){.+.+}-{0:0}: [ 128.419353][ T63] __synchronize_srcu+0xa1/0x2a0 [ 128.421645][ T63] blk_mq_quiesce_queue+0x149/0x1c0 [ 128.424014][ T63] elevator_switch+0x17b/0x7e0 [ 128.426316][ T63] elevator_change+0x352/0x530 [ 128.428692][ T63] elevator_set_default+0x29e/0x360 [ 128.431090][ T63] blk_register_queue+0x412/0x590 [ 128.433446][ T63] __add_disk+0x73f/0xe40 [ 128.435505][ T63] add_disk_fwnode+0x118/0x5c0 [ 128.437799][ T63] nbd_dev_add+0x77a/0xb10 [ 128.439580][ T63] nbd_init+0x291/0x2b0 [ 128.441123][ T63] do_one_initcall+0x11d/0x760 [ 128.442875][ T63] kernel_init_freeable+0x6e5/0x7a0 [ 128.444724][ T63] kernel_init+0x1f/0x1e0 [ 128.446424][ T63] ret_from_fork+0x754/0xd80 [ 128.448150][ T63] ret_from_fork_asm+0x1a/0x30 [ 128.449887][ T63] [ 128.449887][ T63] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 128.452321][ T63] __mutex_lock+0x1a2/0x1b90 [ 128.454260][ T63] elevator_change+0x1bc/0x530 [ 128.456477][ T63] elevator_set_none+0x92/0xf0 [ 128.458165][ T63] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 128.460206][ T63] nbd_start_device+0x1a6/0xbd0 [ 128.461922][ T63] nbd_genl_connect+0xff2/0x1a40 [ 128.463808][ T63] genl_family_rcv_msg_doit+0x214/0x300 [ 128.465901][ T63] genl_rcv_msg+0x560/0x800 [ 128.467667][ T63] netlink_rcv_skb+0x159/0x420 [ 128.469331][ T63] genl_rcv+0x28/0x40 [ 128.470926][ T63] netlink_unicast+0x5aa/0x870 [ 128.472593][ T63] netlink_sendmsg+0x8b0/0xda0 [ 128.474560][ T63] ____sys_sendmsg+0x9e1/0xb70 [ 128.476836][ T63] ___sys_sendmsg+0x190/0x1e0 [ 128.478722][ T63] __sys_sendmsg+0x170/0x220 [ 128.480701][ T63] __do_fast_syscall_32+0xe3/0x8c0 [ 128.482714][ T63] do_fast_syscall_32+0x32/0x70 [ 128.485004][ T63] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.487868][ T63] [ 128.487868][ T63] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 128.491071][ T63] blk_alloc_queue+0x610/0x790 [ 128.493278][ T63] blk_mq_alloc_queue+0x174/0x290 [ 128.495786][ T63] __blk_mq_alloc_disk+0x29/0x120 [ 128.498227][ T63] nbd_dev_add+0x492/0xb10 [ 128.500323][ T63] nbd_init+0x291/0x2b0 [ 128.502170][ T63] do_one_initcall+0x11d/0x760 [ 128.504352][ T63] kernel_init_freeable+0x6e5/0x7a0 [ 128.506664][ T63] kernel_init+0x1f/0x1e0 [ 128.508352][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.508670][ T63] ret_from_fork+0x754/0xd80 [ 128.508694][ T63] ret_from_fork_asm+0x1a/0x30 [ 128.516448][ T63] [ 128.516448][ T63] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 128.519244][ T63] fs_reclaim_acquire+0xc4/0x100 [ 128.521555][ T63] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 128.522610][ T828] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 128.524210][ T63] __alloc_skb+0x140/0x710 [ 128.524238][ T63] tcp_stream_alloc_skb+0x34/0x660 [ 128.524255][ T63] tcp_sendmsg_locked+0x1396/0x45e0 [ 128.536569][ T63] tcp_sendmsg+0x2e/0x50 [ 128.538615][ T63] inet_sendmsg+0xb9/0x140 [ 128.540530][ T63] sock_write_iter+0x4ea/0x5a0 [ 128.542176][ T63] vfs_write+0x6ac/0x1070 [ 128.543850][ T63] ksys_write+0x1f8/0x250 [ 128.545422][ T63] do_syscall_64+0x106/0xf80 [ 128.547077][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.548227][ T1341] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 128.549190][ T63] [ 128.549190][ T63] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 128.555179][ T63] __lock_acquire+0x14b8/0x2630 [ 128.556939][ T63] lock_acquire+0x1cf/0x380 [ 128.558519][ T63] lock_sock_nested+0x41/0xf0 [ 128.560166][ T63] inet_shutdown+0x67/0x410 [ 128.562201][ T63] nbd_mark_nsock_dead+0xae/0x5c0 [ 128.564462][ T63] recv_work+0x5fb/0x8c0 [ 128.566523][ T63] process_one_work+0xa23/0x19a0 [ 128.569006][ T63] worker_thread+0x5ef/0xe50 [ 128.571240][ T63] kthread+0x370/0x450 [ 128.573299][ T63] ret_from_fork+0x754/0xd80 [ 128.574995][ T63] ret_from_fork_asm+0x1a/0x30 [ 128.576992][ T63] [ 128.576992][ T63] other info that might help us debug this: [ 128.576992][ T63] [ 128.581180][ T63] Chain exists of: [ 128.581180][ T63] sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 128.581180][ T63] [ 128.586622][ T63] Possible unsafe locking scenario: [ 128.586622][ T63] [ 128.590204][ T63] CPU0 CPU1 [ 128.592479][ T63] ---- ---- [ 128.594665][ T63] lock(&nsock->tx_lock); [ 128.596518][ T63] lock(&cmd->lock); [ 128.599311][ T63] lock(&nsock->tx_lock); [ 128.602145][ T63] lock(sk_lock-AF_INET); [ 128.604080][ T63] [ 128.604080][ T63] *** DEADLOCK *** [ 128.604080][ T63] [ 128.607575][ T63] 3 locks held by kworker/u33:0/63: [ 128.609789][ T63] #0: ffff88802731f948 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 128.613438][ T63] #1: ffffc900007efd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 128.617081][ T63] #2: ffff8880518b1270 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 128.619982][ T63] [ 128.619982][ T63] stack backtrace: [ 128.621959][ T63] CPU: 3 UID: 0 PID: 63 Comm: kworker/u33:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.621976][ T63] Tainted: [L]=SOFTLOCKUP [ 128.621980][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.621988][ T63] Workqueue: nbd4-recv recv_work [ 128.622001][ T63] Call Trace: [ 128.622006][ T63] [ 128.622010][ T63] dump_stack_lvl+0x100/0x190 [ 128.622028][ T63] print_circular_bug.cold+0x178/0x1c7 [ 128.622047][ T63] check_noncircular+0x146/0x160 [ 128.622062][ T63] __lock_acquire+0x14b8/0x2630 [ 128.622077][ T63] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 128.622093][ T63] lock_acquire+0x1cf/0x380 [ 128.622106][ T63] ? inet_shutdown+0x67/0x410 [ 128.622117][ T63] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 128.622133][ T63] lock_sock_nested+0x41/0xf0 [ 128.622148][ T63] ? inet_shutdown+0x67/0x410 [ 128.622158][ T63] inet_shutdown+0x67/0x410 [ 128.622169][ T63] nbd_mark_nsock_dead+0xae/0x5c0 [ 128.622186][ T63] recv_work+0x5fb/0x8c0 [ 128.622198][ T63] ? __lock_acquire+0xd73/0x2630 [ 128.622213][ T63] ? __pfx_recv_work+0x10/0x10 [ 128.622224][ T63] ? debug_object_deactivate+0x2e4/0x3b0 [ 128.622237][ T63] ? rcu_is_watching+0x12/0xc0 [ 128.622255][ T63] process_one_work+0xa23/0x19a0 [ 128.622274][ T63] ? __pfx_process_one_work+0x10/0x10 [ 128.622292][ T63] ? __pfx_recv_work+0x10/0x10 [ 128.622304][ T63] worker_thread+0x5ef/0xe50 [ 128.622322][ T63] ? kthread+0x13a/0x450 [ 128.622336][ T63] ? __pfx_worker_thread+0x10/0x10 [ 128.622351][ T63] kthread+0x370/0x450 [ 128.622365][ T63] ? __pfx_kthread+0x10/0x10 [ 128.622380][ T63] ret_from_fork+0x754/0xd80 [ 128.622396][ T63] ? __pfx_ret_from_fork+0x10/0x10 [ 128.622413][ T63] ? __switch_to+0x7b4/0x1120 [ 128.622425][ T63] ? __pfx_kthread+0x10/0x10 [ 128.622440][ T63] ret_from_fork_asm+0x1a/0x30 [ 128.622455][ T63] [ 128.678266][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.678296][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.702246][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.708187][ T1341] usb 8-1: Using ep0 maxpacket: 8 [ 128.715161][ T1341] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 128.717867][ T1341] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.721285][ T1341] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.724554][ T1341] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.727715][ T1341] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.732049][ T1341] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.736046][ T1341] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.736977][ T828] kernel read not supported for file /dsp (pid: 828 comm: kworker/1:2) [ 128.808227][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.958948][ T1341] usb 8-1: usb_control_msg returned -32 [ 128.960772][ T1341] usbtmc 8-1:16.0: can't read capabilities [ 129.218363][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.538334][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.698386][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.838490][ C1] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 129.858512][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.489169][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.492508][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.496048][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.498605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.660494][ T9] usb 7-1: USB disconnect, device number 10 [ 130.738211][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.739676][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.236031][ T29] usb 8-1: USB disconnect, device number 9 [ 134.009082][ T828] net_ratelimit: 9 callbacks suppressed [ 134.009100][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.729082][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.818466][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.048485][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.768459][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.778391][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.088359][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.809819][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.888628][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.128478][ T828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.529421][ T1417] ieee802154 phy0 wpan0: encryption failed: -22