last executing test programs: 2m34.972688719s ago: executing program 0 (id=6921): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0) 2m34.068846626s ago: executing program 0 (id=6939): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2m33.865861665s ago: executing program 0 (id=6941): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xfa, 0x11cfa, 0x0, 0x800000a, 0x3, 0x4, 0x1, 0x0, 0x2}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/58, 0x3a}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) 2m33.562822694s ago: executing program 0 (id=6945): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x3, 0x7ffc1ffb}]}) getdents(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2d) 2m33.305638055s ago: executing program 0 (id=6947): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 2m30.990083104s ago: executing program 0 (id=6981): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x40) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 2m15.916508844s ago: executing program 32 (id=6981): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x40) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 1m56.090937713s ago: executing program 3 (id=7353): r0 = add_key(&(0x7f0000000480)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x7) keyctl$setperm(0x5, r0, 0x8082008) 1m55.779580941s ago: executing program 3 (id=7354): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003980)=[{{&(0x7f0000000940)={0xa, 0x4e22, 0x2, @remote, 0x8}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000000980)="15ca93a7c5", 0x5}], 0x1}}, {{&(0x7f0000002340)={0xa, 0x4e24, 0x5d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000003880)=[{&(0x7f0000002380)="e0999f724f", 0x5}], 0x1}}], 0x2, 0x20004000) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x82, &(0x7f0000000000)={0x0, 0x10001}, &(0x7f0000000040)=0x8) 1m55.337270329s ago: executing program 3 (id=7359): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) 1m55.051804085s ago: executing program 3 (id=7363): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 1m54.845349495s ago: executing program 3 (id=7370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410028bd0d66e05f22f395b9000008000300", @ANYRES32=r2, @ANYBLOB="1400040073797a6b616c6c6572300000000000000800050002000000050053"], 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1m53.579995199s ago: executing program 3 (id=7378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x27b}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m53.309109413s ago: executing program 33 (id=7378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x27b}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m7.785399831s ago: executing program 5 (id=7879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'netdevsim0\x00', @local}) 1m7.335041279s ago: executing program 5 (id=7883): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.103557605s ago: executing program 5 (id=7899): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) 1m5.816935841s ago: executing program 5 (id=7904): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0x5e, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r1}, 0x4) 1m5.636147198s ago: executing program 5 (id=7908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xa, @empty, 0x680e}}, 0x0, 0x0, 0x0, 0x0, "9dec8b353af854cf69817345392d065672964c9ff9ab3ca7de43dc020f7358fc0463a619c08bd89988846060ebe3f3042996520cf69eedcffb3c22bc99423d6689d93e258fb2866dfd03047197d0f670"}, 0xd8) 1m5.384981254s ago: executing program 5 (id=7912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) sync() 50.749037856s ago: executing program 2 (id=8093): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) 50.601444852s ago: executing program 2 (id=8095): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 50.298517932s ago: executing program 34 (id=7912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) sync() 49.983358725s ago: executing program 2 (id=8104): setresgid(0xee00, 0xee01, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x40}}], 0x1, 0x84) 49.803940252s ago: executing program 2 (id=8107): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="79ee7ca42eea", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4c1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 49.560630942s ago: executing program 2 (id=8111): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r1, 0x0, 0x0) 49.291412021s ago: executing program 2 (id=8114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x1) 34.010170322s ago: executing program 35 (id=8114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x1) 5.315751956s ago: executing program 7 (id=8462): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000800)={0x3, 0x1}, 0x4) 5.023825934s ago: executing program 7 (id=8466): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) 4.904527197s ago: executing program 7 (id=8467): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) 4.672167951s ago: executing program 7 (id=8470): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x9, 0x72}, 0x49) 4.501557211s ago: executing program 7 (id=8474): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x5, 0x0, 0x2}}, 0x2e) close(r1) 3.32782645s ago: executing program 7 (id=8487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000003, 0x0, 0xffffffffffffffff}]}) 2.624401484s ago: executing program 1 (id=8490): ftruncate(0xffffffffffffffff, 0xc17a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x2, [@ptr, @func, @int, @int, @volatile, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {0x1}]}]}}, 0x0, 0x8e}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000100), 0x0}, 0x20) 2.339937332s ago: executing program 1 (id=8495): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="050000000000000000001a00000006002100620000007c0022800400"], 0xa0}}, 0x0) 2.043946763s ago: executing program 6 (id=8497): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 1.993583064s ago: executing program 1 (id=8499): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64d0, &(0x7f0000000280)={0x0, r2, 0xffffffa4, 0xfffffff9, 0x87, 0x200}) 1.912388082s ago: executing program 4 (id=8500): r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000980)={0x2, 0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000740)=""/241, 0xf1}], 0x0}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r1, 0x4, 0x0) 1.719802159s ago: executing program 8 (id=8501): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 1.718992987s ago: executing program 1 (id=8502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x4) 1.538811836s ago: executing program 4 (id=8503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000100)={0xd080000000000000, 0x8000000, 0x5, 0x9, 0x1b}) 1.455001304s ago: executing program 8 (id=8504): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b3b000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) unshare(0x8020400) 1.443922382s ago: executing program 6 (id=8505): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.242098889s ago: executing program 6 (id=8506): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x4fb, &(0x7f00000009c0)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, r1, &(0x7f0000000040)='B', 0x1, 0x4, 0x0, 0x997f18199400164}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffb, r1, 0x0, 0x0, 0xc}]) 1.176082049s ago: executing program 8 (id=8507): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 1.134744646s ago: executing program 4 (id=8508): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) 1.050858156s ago: executing program 1 (id=8509): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000007c0)={&(0x7f0000000240), 0x8}) 851.966746ms ago: executing program 8 (id=8510): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x9eff, 0x100, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x3, 0x6, @mcast2, 0xfffffffd}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @empty}}}, 0x108) 850.265515ms ago: executing program 1 (id=8511): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bind$llc(r0, 0x0, 0x0) 760.554533ms ago: executing program 4 (id=8512): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c", 0x31, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 622.398066ms ago: executing program 6 (id=8513): r0 = socket$inet6(0xa, 0x80003, 0x101) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x2000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 597.810961ms ago: executing program 8 (id=8514): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 427.786592ms ago: executing program 4 (id=8515): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x0, 0x1, 0x5, 0x400, 0x3}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 378.441554ms ago: executing program 8 (id=8516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30200000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 247.588731ms ago: executing program 6 (id=8517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000002c0)={0xffffffff, 0x2}) 158.381217ms ago: executing program 4 (id=8518): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, 0x0, 0x7fe, 0xe4, 0x24, 0x0, 0x1}) 0s ago: executing program 6 (id=8519): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0xcd9) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) kernel console output (not intermixed with test programs): stuck request ffff888024ece540: control (read@3072,1024B). Runtime 89 seconds [ 663.967154][ T990] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 664.127116][ T990] usb 5-1: Using ep0 maxpacket: 32 [ 664.130491][ T990] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 664.130519][ T990] usb 5-1: config 0 has no interface number 0 [ 664.135164][ T990] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 664.135192][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.135221][ T990] usb 5-1: Product: syz [ 664.135233][ T990] usb 5-1: Manufacturer: syz [ 664.135244][ T990] usb 5-1: SerialNumber: syz [ 664.149331][ T990] usb 5-1: config 0 descriptor?? [ 664.207087][ T990] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 664.307178][ T5916] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 664.384246][T22863] ./file0: Can't lookup blockdev [ 664.407602][ T990] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 664.407791][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 90 seconds [ 664.407835][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 90 seconds [ 664.407870][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 90 seconds [ 664.407910][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 90 seconds [ 664.482370][ T990] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 664.501229][ T5916] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 664.501260][ T5916] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 664.501298][ T5916] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 664.501381][ T5916] usb 4-1: config 220 has no interface number 2 [ 664.501548][ T5916] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 664.501579][ T5916] usb 4-1: config 220 interface 0 has no altsetting 0 [ 664.501600][ T5916] usb 4-1: config 220 interface 76 has no altsetting 0 [ 664.501621][ T5916] usb 4-1: config 220 interface 1 has no altsetting 0 [ 664.530732][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 664.581378][ T5916] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 664.581414][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.581437][ T5916] usb 4-1: Product: syz [ 664.581454][ T5916] usb 4-1: Manufacturer: syz [ 664.581470][ T5916] usb 4-1: SerialNumber: syz [ 664.824113][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 664.825562][ T6025] usb 5-1: USB disconnect, device number 58 [ 664.834293][ T6025] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 664.863368][ T5916] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 664.863405][ T5916] usb 4-1: No valid video chain found. [ 664.863465][ T5916] usb 4-1: selecting invalid altsetting 0 [ 664.926085][ T6025] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 664.928380][ T6025] quatech2 5-1:0.51: device disconnected [ 664.958624][ T5916] usb 4-1: selecting invalid altsetting 0 [ 664.958662][ T5916] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 664.983207][ T5916] usb 4-1: USB disconnect, device number 62 [ 666.116168][ T5916] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 666.278702][ T5916] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 666.278744][ T5916] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 666.278765][ T5916] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 666.278786][ T5916] usb 3-1: config 220 has no interface number 2 [ 666.278865][ T5916] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 666.278897][ T5916] usb 3-1: config 220 interface 0 has no altsetting 0 [ 666.278917][ T5916] usb 3-1: config 220 interface 76 has no altsetting 0 [ 666.278938][ T5916] usb 3-1: config 220 interface 1 has no altsetting 0 [ 666.282465][ T5916] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 666.282493][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.282516][ T5916] usb 3-1: Product: syz [ 666.282532][ T5916] usb 3-1: Manufacturer: syz [ 666.282548][ T5916] usb 3-1: SerialNumber: syz [ 666.616796][ T5916] usb 3-1: selecting invalid altsetting 0 [ 666.617328][ T5916] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 666.617359][ T5916] usb 3-1: No valid video chain found. [ 666.690283][ T5916] usb 3-1: selecting invalid altsetting 0 [ 666.690325][ T5916] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 666.694556][ T5916] usb 3-1: USB disconnect, device number 57 [ 666.782385][T22927] input: syz0 as /devices/virtual/input/input50 [ 666.805862][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 91 seconds [ 666.805910][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 91 seconds [ 666.805943][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 91 seconds [ 666.805975][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 91 seconds [ 667.444744][T22947] bond0: entered promiscuous mode [ 667.444770][T22947] bond_slave_0: entered promiscuous mode [ 667.445031][T22947] bond_slave_1: entered promiscuous mode [ 667.448592][T22947] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 667.486269][T22947] batadv0: entered promiscuous mode [ 667.494887][T22947] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 667.515633][T22947] hsr1: entered promiscuous mode [ 667.519341][T22947] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 668.205240][T22979] input: syz1 as /devices/virtual/input/input51 [ 668.857335][T23003] tipc: New replicast peer: 255.255.255.255 [ 668.858130][T23003] tipc: Enabled bearer , priority 1 [ 668.864897][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 669.014621][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 669.017463][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.017493][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.017515][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 669.017557][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 669.017581][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.023736][ T10] usb 5-1: config 0 descriptor?? [ 669.214722][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 92 seconds [ 669.214768][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 92 seconds [ 669.214800][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 92 seconds [ 669.214995][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 92 seconds [ 669.511256][ T10] microsoft 0003:045E:07DA.0072: unknown main item tag 0x0 [ 669.511295][ T10] microsoft 0003:045E:07DA.0072: ignoring exceeding usage max [ 669.605991][T23021] loop9: detected capacity change from 0 to 8 [ 669.686127][T23021] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 669.686171][T23021] loop9: partition table partially beyond EOD, truncated [ 669.686387][T23021] loop9: p1 size 81768186 extends beyond EOD, truncated [ 669.728120][ T10] microsoft 0003:045E:07DA.0072: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 669.728151][ T10] microsoft 0003:045E:07DA.0072: no inputs found [ 669.728164][ T10] microsoft 0003:045E:07DA.0072: could not initialize ff, continuing anyway [ 669.945261][ T1717] usb 5-1: USB disconnect, device number 59 [ 670.207158][T23040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7152'. [ 670.234893][T23042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7153'. [ 670.275712][T23044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7154'. [ 670.275735][T23044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7154'. [ 670.596990][T23057] can0: slcan on ptm0. [ 670.725253][T23056] can0 (unregistered): slcan off ptm0. [ 671.336912][T23084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7173'. [ 671.337026][T23084] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7173'. [ 671.608985][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 93 seconds [ 671.609062][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 93 seconds [ 671.609100][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 93 seconds [ 671.609145][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 93 seconds [ 671.892993][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 671.916675][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 671.918240][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 671.925332][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 671.927599][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 671.996022][T23101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7181'. [ 672.283390][T23105] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7183'. [ 672.596399][T23112] netlink: 544 bytes leftover after parsing attributes in process `syz.4.7185'. [ 672.735845][T23094] chnl_net:caif_netlink_parms(): no params data found [ 673.218029][T23094] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.218258][T23094] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.218502][T23094] bridge_slave_0: entered allmulticast mode [ 673.221462][T23094] bridge_slave_0: entered promiscuous mode [ 673.225926][T23094] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.226176][T23094] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.226423][T23094] bridge_slave_1: entered allmulticast mode [ 673.229639][T23094] bridge_slave_1: entered promiscuous mode [ 673.428442][T23094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.443970][T23094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.693633][T23094] team0: Port device team_slave_0 added [ 673.717417][T23094] team0: Port device team_slave_1 added [ 673.967556][T19446] Bluetooth: hci5: command tx timeout [ 674.002719][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 94 seconds [ 674.002769][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 94 seconds [ 674.002805][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 94 seconds [ 674.002840][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 94 seconds [ 674.184905][T23146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7199'. [ 674.255407][T23094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.255427][T23094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.255458][T23094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.260671][T23094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.260687][T23094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.339605][T23094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.590451][T23094] hsr_slave_0: entered promiscuous mode [ 674.591507][T23094] hsr_slave_1: entered promiscuous mode [ 674.602407][T23094] debugfs: 'hsr0' already exists in 'hsr' [ 674.602442][T23094] Cannot create hsr debugfs directory [ 674.701950][ T1717] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 674.855647][ T1717] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 674.855681][ T1717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.903294][ T1717] usb 3-1: config 0 descriptor?? [ 675.134215][ T1717] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 675.194785][T23165] macsec1: entered allmulticast mode [ 675.194813][T23165] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 675.276689][T23165] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 675.352223][ T1717] [drm:udl_init] *ERROR* Selecting channel failed [ 675.478702][ T1717] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 675.478731][ T1717] [drm] Initialized udl on minor 2 [ 675.542508][ T1717] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 675.574683][ T1717] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 675.613655][ T1717] usb 3-1: USB disconnect, device number 58 [ 675.620046][ T6025] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 675.620689][ T6025] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 676.045307][T19446] Bluetooth: hci5: command tx timeout [ 676.289955][T23094] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 676.320592][T23094] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 676.359579][T23094] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 676.395779][T23094] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 676.401078][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 95 seconds [ 676.401134][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 95 seconds [ 676.401173][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 95 seconds [ 676.401210][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 95 seconds [ 676.918966][T23094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.079949][T23094] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.129827][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.130690][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.213638][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.213879][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.487452][T23214] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7226'. [ 677.712417][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 677.712444][ T38] audit: type=1326 audit(677.600:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23219 comm="syz.2.7228" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f936235ebe9 code=0x0 [ 678.026594][T23094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.120810][T19446] Bluetooth: hci5: command tx timeout [ 678.799904][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 96 seconds [ 678.799960][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 96 seconds [ 678.800000][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 96 seconds [ 678.800038][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 96 seconds [ 679.507824][T23250] tipc: Started in network mode [ 679.507858][T23250] tipc: Node identity ac14140f, cluster identity 4 [ 679.508165][T23250] tipc: New replicast peer: 255.255.255.255 [ 679.539380][T23250] tipc: Enabled bearer , priority 1 [ 679.545127][T23251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7238'. [ 679.545153][T23251] tipc: Disabling bearer [ 679.898480][T23094] veth0_vlan: entered promiscuous mode [ 679.947028][T23094] veth1_vlan: entered promiscuous mode [ 680.115876][T23094] veth0_macvtap: entered promiscuous mode [ 680.137419][T23094] veth1_macvtap: entered promiscuous mode [ 680.199761][T19446] Bluetooth: hci5: command tx timeout [ 680.237941][T23094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.283746][T23094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.315972][ T1171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.316217][ T1171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.316451][ T1171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.316509][ T1171] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.740299][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.740323][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.750138][T23287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7251'. [ 680.954214][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.954238][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.198616][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 97 seconds [ 681.198681][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 97 seconds [ 681.198714][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 97 seconds [ 681.198748][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 97 seconds [ 682.877840][ T5951] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 682.947756][ T5916] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 683.012032][T23332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7271'. [ 683.032821][ T5951] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 683.032848][ T5951] usb 5-1: config 0 has no interface number 0 [ 683.032881][ T5951] usb 5-1: config 0 interface 106 has no altsetting 0 [ 683.036064][ T5951] usb 5-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 683.036092][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.036113][ T5951] usb 5-1: Product: syz [ 683.036128][ T5951] usb 5-1: Manufacturer: syz [ 683.036143][ T5951] usb 5-1: SerialNumber: syz [ 683.047899][ T5951] usb 5-1: config 0 descriptor?? [ 683.094136][T23332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7271'. [ 683.110446][ T5916] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 683.110478][ T5916] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 683.110502][ T5916] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 683.111990][ T5916] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 683.112018][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 683.112039][ T5916] usb 6-1: SerialNumber: syz [ 683.181012][T23317] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 683.199093][ T5916] hub 6-1:1.0: bad descriptor, ignoring hub [ 683.199136][ T5916] hub 6-1:1.0: probe with driver hub failed with error -5 [ 683.248092][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 683.280589][ T5951] usb 5-1: USB disconnect, device number 60 [ 683.390246][T23317] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 683.412282][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.428798][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 683.428830][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.428853][ T10] usb 4-1: Product: syz [ 683.428869][ T10] usb 4-1: Manufacturer: syz [ 683.428948][ T10] usb 4-1: SerialNumber: syz [ 683.597449][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 98 seconds [ 683.597503][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 98 seconds [ 683.597542][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 98 seconds [ 683.597579][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 98 seconds [ 683.932416][ T5916] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 683.999105][ T5916] usb 6-1: USB disconnect, device number 2 [ 684.019293][ T5916] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 684.212044][ T5951] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 684.323328][ T10] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 684.324183][ T10] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 684.345031][ T10] cdc_ncm 4-1:1.0: bind() failure [ 684.367652][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 684.367719][ T10] cdc_ncm 4-1:1.1: bind() failure [ 684.373108][ T5951] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 684.373137][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.373159][ T5951] usb 5-1: Product: syz [ 684.373173][ T5951] usb 5-1: Manufacturer: syz [ 684.373188][ T5951] usb 5-1: SerialNumber: syz [ 684.380406][ T5951] r8152-cfgselector 5-1: Unknown version 0x0000 [ 684.380431][ T5951] r8152-cfgselector 5-1: config 0 descriptor?? [ 684.452705][ T10] usb 4-1: USB disconnect, device number 63 [ 684.857559][ T6025] r8152-cfgselector 5-1: USB disconnect, device number 61 [ 685.126771][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 685.296490][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 685.299070][ T10] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 685.299099][ T10] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 685.299120][ T10] usb 3-1: config 3 has no interface number 0 [ 685.299170][ T10] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 685.299202][ T10] usb 3-1: config 3 interface 45 has no altsetting 0 [ 685.302613][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 685.302645][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.302668][ T10] usb 3-1: Product: syz [ 685.302686][ T10] usb 3-1: Manufacturer: syz [ 685.302703][ T10] usb 3-1: SerialNumber: syz [ 685.304934][T23365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7286'. [ 685.687388][ T10] usb 3-1: USB disconnect, device number 59 [ 685.996463][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 99 seconds [ 685.996515][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 99 seconds [ 685.996570][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 99 seconds [ 685.996607][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 99 seconds [ 686.768715][T23401] input: syz1 as /devices/virtual/input/input52 [ 686.811836][T23403] pimreg: tun_chr_ioctl cmd 1074025677 [ 686.811990][T23403] pimreg: linktype set to 270 [ 686.990971][T23407] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7304'. [ 687.284564][T23419] netlink: 'syz.5.7308': attribute type 2 has an invalid length. [ 687.725321][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 687.877992][ T9] usb 6-1: config index 0 descriptor too short (expected 69, got 36) [ 687.878025][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.882560][ T9] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 687.882590][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.882610][ T9] usb 6-1: Product: syz [ 687.882625][ T9] usb 6-1: Manufacturer: syz [ 687.882640][ T9] usb 6-1: SerialNumber: syz [ 687.951043][ T9] usb 6-1: config 0 descriptor?? [ 687.964603][ T9] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 688.415162][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 100 seconds [ 688.415218][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 100 seconds [ 688.415258][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 100 seconds [ 688.415296][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 100 seconds [ 688.431500][T23425] comedi comedi0: comedi_bond: 3:2 3:3 attached, 48 channels from 2 devices [ 688.536621][T23454] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7325'. [ 688.623432][T23454] hsr_slave_0: left promiscuous mode [ 688.709592][T23454] hsr_slave_1: left promiscuous mode [ 688.795773][ T9] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 688.795877][ T9] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 688.800165][ T9] usb 6-1: USB disconnect, device number 3 [ 689.374097][ T1717] kernel read not supported for file /usbmon9 (pid: 1717 comm: kworker/1:2) [ 689.866505][T23481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7337'. [ 690.351080][T23498] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7344'. [ 690.769730][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.793809][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 101 seconds [ 690.793861][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 101 seconds [ 690.793898][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 101 seconds [ 690.793935][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 101 seconds [ 691.717965][T23523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7358'. [ 691.736763][T23524] netlink: 'syz.1.7357': attribute type 1 has an invalid length. [ 691.736932][T23524] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7357'. [ 692.798277][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 692.980666][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 692.980689][ T9] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 692.980704][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 692.980718][ T9] usb 3-1: config 220 has no interface number 2 [ 692.980771][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 692.980791][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 692.980805][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 692.980818][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 693.050852][T23551] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.064364][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 693.064397][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.064419][ T9] usb 3-1: Product: syz [ 693.064435][ T9] usb 3-1: Manufacturer: syz [ 693.064452][ T9] usb 3-1: SerialNumber: syz [ 693.192683][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 102 seconds [ 693.192737][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 102 seconds [ 693.192776][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 102 seconds [ 693.192813][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 102 seconds [ 693.327406][ T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 693.327462][ T9] usb 3-1: No valid video chain found. [ 693.327523][ T9] usb 3-1: selecting invalid altsetting 0 [ 693.389834][ T9] usb 3-1: selecting invalid altsetting 0 [ 693.389874][ T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 693.413417][ T9] usb 3-1: USB disconnect, device number 60 [ 693.643134][T23551] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.943990][T23567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7380'. [ 693.944018][T23567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7380'. [ 693.967309][T23551] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.282917][ C1] vkms_vblank_simulate: vblank timer overrun [ 694.339316][T23551] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.548696][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 694.561381][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 694.571467][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 694.583447][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 694.584343][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 694.755743][ T3563] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.825961][ T3563] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.876371][ T3563] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.940535][ T3563] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.214771][T23591] block device autoloading is deprecated and will be removed. [ 695.546974][T23605] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7395'. [ 695.593248][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 103 seconds [ 695.593299][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 103 seconds [ 695.593355][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 103 seconds [ 695.593391][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 103 seconds [ 695.742962][T23581] chnl_net:caif_netlink_parms(): no params data found [ 696.377773][T23581] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.379827][T23581] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.380088][T23581] bridge_slave_0: entered allmulticast mode [ 696.417175][T23581] bridge_slave_0: entered promiscuous mode [ 696.434189][T23581] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.434407][T23581] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.434626][T23581] bridge_slave_1: entered allmulticast mode [ 696.462410][T23581] bridge_slave_1: entered promiscuous mode [ 696.670991][T19446] Bluetooth: hci1: command tx timeout [ 696.753421][T23581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.758285][T23581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.906437][T23639] netem: change failed [ 697.119662][T23581] team0: Port device team_slave_0 added [ 697.148407][T23581] team0: Port device team_slave_1 added [ 697.581722][ T38] audit: type=1326 audit(953.496:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23660 comm="syz.2.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936235ebe9 code=0x7ffc0000 [ 697.599022][ T38] audit: type=1326 audit(953.496:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23660 comm="syz.2.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936235ebe9 code=0x7ffc0000 [ 697.600392][ T38] audit: type=1326 audit(953.506:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23660 comm="syz.2.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f936235ebe9 code=0x7ffc0000 [ 697.600872][ T38] audit: type=1326 audit(953.506:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23660 comm="syz.2.7419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f936235ebe9 code=0x0 [ 697.765716][T23669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7422'. [ 697.807592][T23581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.807611][T23581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.807653][T23581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.855333][T23581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.855351][T23581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.855383][T23581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.990176][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 104 seconds [ 697.990227][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 104 seconds [ 697.990265][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 104 seconds [ 697.990302][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 104 seconds [ 698.220336][T23581] hsr_slave_0: entered promiscuous mode [ 698.238074][T23581] hsr_slave_1: entered promiscuous mode [ 698.248356][T23581] debugfs: 'hsr0' already exists in 'hsr' [ 698.248385][T23581] Cannot create hsr debugfs directory [ 698.406502][T23667] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 698.636086][T23686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7429'. [ 698.720335][T23667] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 698.720466][T23667] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 698.749996][ T5845] Bluetooth: hci1: command tx timeout [ 698.828807][T23667] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 698.962756][T23667] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 698.962950][T23667] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 699.036063][T23667] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 699.594750][T23702] dummy0: entered promiscuous mode [ 699.606589][T23702] dummy0: left promiscuous mode [ 699.900399][ T1717] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 699.951216][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 700.053069][ T1717] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 700.053101][ T1717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.077547][ T1717] usb 6-1: config 0 descriptor?? [ 700.087848][ T1717] cp210x 6-1:0.0: cp210x converter detected [ 700.089603][T23714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7442'. [ 700.389035][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 105 seconds [ 700.389088][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 105 seconds [ 700.389231][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 105 seconds [ 700.389270][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 105 seconds [ 700.401119][T23581] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 700.493343][ T1717] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 700.535133][ T1717] usb 6-1: cp210x converter now attached to ttyUSB0 [ 700.593829][T23581] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 700.623995][T23581] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 700.672277][T23581] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 700.732837][ T9] usb 6-1: USB disconnect, device number 4 [ 700.748950][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 700.763663][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 700.918958][ T9] cp210x 6-1:0.0: device disconnected [ 700.989505][ T5845] Bluetooth: hci1: command 0x0419 tx timeout [ 701.187597][T23737] vlan3: entered allmulticast mode [ 701.657095][T23581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.715976][T23581] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.734415][T23266] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.734614][T23266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.779825][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.779971][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.368397][ T990] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 702.518266][ T990] usb 6-1: Using ep0 maxpacket: 16 [ 702.520600][T23581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.520696][ T990] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 702.520734][ T990] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 702.520763][ T990] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 702.522516][ T990] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 702.522545][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 702.522568][ T990] usb 6-1: SerialNumber: syz [ 702.540205][T23750] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 702.727876][ T1717] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 702.794092][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 106 seconds [ 702.794153][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 106 seconds [ 702.794188][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 106 seconds [ 702.794222][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 106 seconds [ 702.795743][ T990] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 702.824519][ T990] usb 6-1: USB disconnect, device number 5 [ 702.827818][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 702.877715][ T1717] usb 3-1: Using ep0 maxpacket: 16 [ 702.885465][ T1717] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 702.885497][ T1717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.885520][ T1717] usb 3-1: Product: syz [ 702.885536][ T1717] usb 3-1: Manufacturer: syz [ 702.885552][ T1717] usb 3-1: SerialNumber: syz [ 702.930358][ T1717] usb 3-1: config 0 descriptor?? [ 702.946775][ T1717] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 703.068623][ T5845] Bluetooth: hci1: command 0x0419 tx timeout [ 703.197011][ T1717] gp8psk: usb in 128 operation failed. [ 703.204350][ T1717] gp8psk: usb in 137 operation failed. [ 703.204370][ T1717] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 703.212766][ T1717] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 703.212826][ T1717] usb 3-1: media controller created [ 703.281726][ T1717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 703.322412][ T1717] gp8psk_fe: Frontend revision 1 attached [ 703.322480][ T1717] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 703.322704][ T1717] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 703.418256][ T1717] gp8psk: usb in 138 operation failed. [ 703.418275][ T1717] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 703.418291][ T1717] gp8psk: found Genpix USB device pID = 201 (hex) [ 703.421197][ T1717] usb 3-1: USB disconnect, device number 61 [ 703.472337][T23581] veth0_vlan: entered promiscuous mode [ 703.512379][T23581] veth1_vlan: entered promiscuous mode [ 703.569749][ T1717] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 703.711255][T23581] veth0_macvtap: entered promiscuous mode [ 703.716798][T23581] veth1_macvtap: entered promiscuous mode [ 703.762701][T23581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.795499][T23581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.827114][ T1171] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.850049][ T1171] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.891226][ T1171] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.902137][ T1171] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.017634][T23796] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 704.510243][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.510265][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.646233][T23811] netlink: 'syz.1.7478': attribute type 1 has an invalid length. [ 704.702511][T23266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.702536][T23266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.907069][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 705.148196][ T5845] Bluetooth: hci1: command 0x0419 tx timeout [ 705.187182][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 107 seconds [ 705.187237][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 107 seconds [ 705.187275][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 107 seconds [ 705.187313][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 107 seconds [ 705.403510][T23824] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7379'. [ 705.415404][T23824] batadv1: entered allmulticast mode [ 707.226146][T19446] Bluetooth: hci1: command 0x0419 tx timeout [ 707.312161][T23898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7517'. [ 707.585693][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 108 seconds [ 707.585746][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 108 seconds [ 707.585782][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 108 seconds [ 707.585817][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 108 seconds [ 707.745302][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 707.905324][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 707.907916][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 707.907950][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 707.911028][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 707.911060][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.911083][ T10] usb 7-1: Product: syz [ 707.911099][ T10] usb 7-1: Manufacturer: syz [ 707.911116][ T10] usb 7-1: SerialNumber: syz [ 707.977264][ T10] usb 7-1: config 0 descriptor?? [ 707.999819][ T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 707.999856][ T10] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 708.301116][T23924] Bluetooth: MGMT ver 1.23 [ 708.517594][ T38] audit: type=1326 audit(964.431:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23929 comm="syz.5.7533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f698315ebe9 code=0x0 [ 708.603945][ T10] em28xx 7-1:0.0: unknown em28xx chip ID (41) [ 708.806159][ T10] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 708.806674][ T10] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 708.806691][ T10] em28xx 7-1:0.0: No AC97 audio processor [ 708.813434][ T10] usb 7-1: USB disconnect, device number 2 [ 708.841338][ T10] em28xx 7-1:0.0: Disconnecting em28xx [ 708.853445][ T10] em28xx 7-1:0.0: Freeing device [ 709.247349][T23786] Process accounting resumed [ 709.322532][ T5845] Bluetooth: hci1: command 0x0419 tx timeout [ 709.974382][T23786] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 710.004771][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 109 seconds [ 710.004824][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 109 seconds [ 710.004850][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 109 seconds [ 710.004874][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 109 seconds [ 710.141992][T23786] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 710.142016][T23786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.150752][T23786] usb 6-1: config 0 descriptor?? [ 711.001751][T23786] usb 6-1: Cannot set autoneg [ 711.003253][T23786] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 711.027524][T23786] usb 6-1: USB disconnect, device number 6 [ 711.070120][T23974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7552'. [ 711.070150][T23974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7552'. [ 711.273643][ T9105] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 711.328284][T23980] sctp: [Deprecated]: syz.1.7556 (pid 23980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 711.328284][T23980] Use struct sctp_sack_info instead [ 711.423678][ T9105] usb 5-1: Using ep0 maxpacket: 16 [ 711.430158][ T9105] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 711.430189][ T9105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.430212][ T9105] usb 5-1: Product: syz [ 711.430228][ T9105] usb 5-1: Manufacturer: syz [ 711.430244][ T9105] usb 5-1: SerialNumber: syz [ 711.452082][ T9105] r8152-cfgselector 5-1: Unknown version 0x0000 [ 711.452116][ T9105] r8152-cfgselector 5-1: config 0 descriptor?? [ 711.468076][ T9105] hub 5-1:0.0: bad descriptor, ignoring hub [ 711.468118][ T9105] hub 5-1:0.0: probe with driver hub failed with error -5 [ 711.612336][T23986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7559'. [ 711.663987][T23786] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 712.094240][T23786] r8152-cfgselector 5-1: reset high-speed USB device number 62 using dummy_hcd [ 712.383455][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 110 seconds [ 712.383508][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 110 seconds [ 712.383546][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 110 seconds [ 712.383581][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 110 seconds [ 712.393296][ T9105] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 712.503335][ T1717] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 712.546207][ T9105] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 712.546235][ T9105] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 712.546255][ T9105] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 712.549859][ T9105] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 712.549890][ T9105] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.549913][ T9105] usb 3-1: Product: syz [ 712.549929][ T9105] usb 3-1: Manufacturer: syz [ 712.549945][ T9105] usb 3-1: SerialNumber: syz [ 712.623760][T23786] r8152-cfgselector 5-1: USB disconnect, device number 62 [ 712.772449][ T67] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 713.211302][ T9105] usb 3-1: 0:2 : does not exist [ 713.353222][T24026] netlink: 136 bytes leftover after parsing attributes in process `syz.4.7578'. [ 713.353250][T24026] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 713.466175][ T990] usb 3-1: USB disconnect, device number 62 [ 713.784848][ T67] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 713.785306][ T67] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 713.902457][ T1717] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 714.052316][ T1717] usb 7-1: Using ep0 maxpacket: 8 [ 714.054793][ T1717] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 714.054825][ T1717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.093422][ T1717] pvrusb2: Hardware description: Terratec Grabster AV400 [ 714.093441][ T1717] pvrusb2: ********** [ 714.093449][ T1717] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 714.093462][ T1717] pvrusb2: Important functionality might not be entirely working. [ 714.093473][ T1717] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 714.093486][ T1717] pvrusb2: ********** [ 714.192521][ T9105] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 714.335375][ T2368] pvrusb2: Invalid write control endpoint [ 714.455207][ T2368] pvrusb2: Invalid write control endpoint [ 714.455226][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 714.455237][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 714.455248][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 714.455260][ T2368] pvrusb2: Device being rendered inoperable [ 714.455850][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 714.455905][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 714.462370][ T2368] pvrusb2: Attached sub-driver cx25840 [ 714.462387][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 714.462401][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 714.575706][T24045] pvrusb2: Attempted to execute control transfer when device not ok [ 714.577530][ T9105] usb 7-1: USB disconnect, device number 3 [ 714.682388][T24065] block nbd3: server does not support multiple connections per device. [ 714.682850][T24065] block nbd3: shutting down sockets [ 714.782397][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 111 seconds [ 714.782451][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 111 seconds [ 714.782503][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 111 seconds [ 714.782536][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 111 seconds [ 715.955757][T24105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7611'. [ 716.273248][T24121] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7618'. [ 716.331114][T23786] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 716.482811][T23786] usb 7-1: Using ep0 maxpacket: 16 [ 716.485397][T23786] usb 7-1: config 0 has an invalid interface number: 203 but max is 0 [ 716.485422][T23786] usb 7-1: config 0 has no interface number 0 [ 716.485475][T23786] usb 7-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 716.488355][T23786] usb 7-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 716.488379][T23786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.488399][T23786] usb 7-1: Product: syz [ 716.488413][T23786] usb 7-1: Manufacturer: syz [ 716.488427][T23786] usb 7-1: SerialNumber: syz [ 716.495932][T23786] usb 7-1: config 0 descriptor?? [ 716.501223][T24110] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 716.519333][T23786] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 716.761028][ T9105] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 716.837951][T24133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7624'. [ 716.911678][ T9105] usb 6-1: Using ep0 maxpacket: 32 [ 716.914613][ T9105] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 716.914640][ T9105] usb 6-1: config 0 has no interface number 0 [ 716.914687][ T9105] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 716.914717][ T9105] usb 6-1: config 0 interface 85 has no altsetting 0 [ 716.920430][ T9105] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 716.920462][ T9105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.920900][ T9105] usb 6-1: Product: syz [ 716.920923][ T9105] usb 6-1: Manufacturer: syz [ 716.920943][ T9105] usb 6-1: SerialNumber: syz [ 716.962349][ T9105] usb 6-1: config 0 descriptor?? [ 717.180868][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 112 seconds [ 717.180989][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 112 seconds [ 717.181030][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 112 seconds [ 717.181130][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 112 seconds [ 717.301561][T23786] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 717.326814][ T1717] usb 7-1: USB disconnect, device number 4 [ 717.418058][T24140] netlink: 'syz.2.7627': attribute type 11 has an invalid length. [ 717.464893][T23786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.465002][T23786] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 717.465029][T23786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.546747][T23786] usb 5-1: config 0 descriptor?? [ 717.595632][ T9105] appletouch 6-1:0.85: Geyser mode initialized. [ 717.613789][ T9105] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input53 [ 717.800810][ T1717] usb 6-1: USB disconnect, device number 7 [ 717.961715][ T1717] appletouch 6-1:0.85: input: appletouch disconnected [ 718.100240][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 718.198818][T23786] razer 0003:1532:010E.0073: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 718.380961][T23786] usb 5-1: USB disconnect, device number 63 [ 718.630366][T24157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7635'. [ 719.579418][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 113 seconds [ 719.579468][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 113 seconds [ 719.579503][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 113 seconds [ 719.579537][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 113 seconds [ 719.861063][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7647'. [ 719.861097][T24181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7647'. [ 719.889725][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7647'. [ 719.889753][T24181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7647'. [ 720.020177][T24187] tun0: tun_chr_ioctl cmd 2147767521 [ 721.908355][T23786] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 721.948285][ T1717] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 721.979263][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 114 seconds [ 721.979311][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 114 seconds [ 721.979343][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 114 seconds [ 721.979374][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 114 seconds [ 722.067230][T23786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 722.067267][T23786] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 722.067293][T23786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 722.073481][T23786] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 722.073514][T23786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.073539][T23786] usb 5-1: Product: syz [ 722.073555][T23786] usb 5-1: Manufacturer: syz [ 722.073572][T23786] usb 5-1: SerialNumber: syz [ 722.097262][T23786] usb 5-1: config 0 descriptor?? [ 722.098441][ T1717] usb 7-1: Using ep0 maxpacket: 16 [ 722.105317][ T1717] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.105445][ T1717] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 722.105480][ T1717] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 722.105506][ T1717] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 722.105534][ T1717] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 722.117679][ T1717] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 722.117779][ T1717] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 722.117806][ T1717] usb 7-1: Manufacturer: syz [ 722.120378][T24237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 722.125527][T24237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 722.150741][T23786] usb 5-1: ucan: probing device on interface #0 [ 722.186263][ T1717] usb 7-1: config 0 descriptor?? [ 722.410179][T24258] input: syz1 as /devices/virtual/input/input54 [ 722.567857][ T1717] rc_core: IR keymap rc-hauppauge not found [ 722.567877][ T1717] Registered IR keymap rc-empty [ 722.568129][ T1717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 722.588234][ T1717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 722.617191][ T1717] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 722.644827][ T1717] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input55 [ 722.677408][ T1717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 722.698598][ T1717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 722.718409][ T1717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 722.738087][ T1717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 722.757984][ T1717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 722.766915][T23786] ucan 5-1:0.0: probe with driver ucan failed with error -22 [ 722.779296][ T1717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 722.798110][ T1717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 722.818975][ T1717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 722.840873][ T1717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 722.861085][ T1717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 722.920731][ T1717] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 722.921481][ T1717] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 722.980931][ T1717] usb 7-1: USB disconnect, device number 5 [ 723.007791][ T9105] usb 5-1: USB disconnect, device number 64 [ 723.147553][ T9] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 723.309821][ T9] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 723.309852][ T9] usb 3-1: config 0 has no interface number 0 [ 723.312945][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 723.312976][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.312998][ T9] usb 3-1: Product: syz [ 723.313014][ T9] usb 3-1: Manufacturer: syz [ 723.313030][ T9] usb 3-1: SerialNumber: syz [ 723.367477][ T9] usb 3-1: config 0 descriptor?? [ 723.802157][ T9] usb 3-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 724.005055][ T9] usb 3-1: failed to fetch extended address, random address set [ 724.107736][ T9] usb 3-1: USB disconnect, device number 63 [ 724.377572][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 115 seconds [ 724.377629][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 115 seconds [ 724.377665][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 115 seconds [ 724.377698][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 115 seconds [ 725.196662][ T1717] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 725.226554][ T9105] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 725.349833][ T1717] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 725.349864][ T1717] usb 3-1: config 1 has an invalid interface number: 4 but max is 0 [ 725.349886][ T1717] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 725.349910][ T1717] usb 3-1: config 1 has no interface number 0 [ 725.349928][ T1717] usb 3-1: config 1 has no interface number 1 [ 725.349997][ T1717] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 725.350058][ T1717] usb 3-1: config 1 interface 4 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 725.350083][ T1717] usb 3-1: config 1 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 725.350113][ T1717] usb 3-1: config 1 interface 105 has no altsetting 0 [ 725.350134][ T1717] usb 3-1: config 1 interface 4 has no altsetting 0 [ 725.353453][ T1717] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 725.353482][ T1717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.353505][ T1717] usb 3-1: Product: syz [ 725.353521][ T1717] usb 3-1: Manufacturer: syz [ 725.353535][ T1717] usb 3-1: SerialNumber: syz [ 725.378898][ T9105] usb 7-1: Using ep0 maxpacket: 8 [ 725.384344][ T9105] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 725.384377][ T9105] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 725.384478][ T9105] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 725.384522][ T9105] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 725.384641][ T9105] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 725.384670][ T9105] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.649470][ T9105] usb 7-1: GET_CAPABILITIES returned 0 [ 725.649767][ T9105] usbtmc 7-1:16.0: can't read capabilities [ 725.655995][ T1717] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 725.854492][ T1717] usb 7-1: USB disconnect, device number 6 [ 725.893991][ T9105] usb 3-1: USB disconnect, device number 64 [ 726.575987][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 726.776122][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 116 seconds [ 726.776184][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 116 seconds [ 726.776218][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 116 seconds [ 726.776252][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 116 seconds [ 727.058633][T24364] netlink: 'syz.6.7722': attribute type 49 has an invalid length. [ 727.437586][T24378] netem: incorrect gi model size [ 728.230020][T24407] loop7: detected capacity change from 0 to 7 [ 728.241162][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.241206][ C0] buffer_io_error: 4 callbacks suppressed [ 728.241222][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 728.244375][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.244412][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 728.244651][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.244685][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 728.245076][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.245109][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 728.247056][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.247092][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 728.250877][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.250914][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 728.251138][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.251172][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 728.251275][T24407] ldm_validate_partition_table(): Disk read failed. [ 728.251495][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.251528][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 728.251970][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.252003][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 728.252304][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.252337][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 728.270698][T24407] Dev loop7: unable to read RDB block 0 [ 728.274797][T24407] loop7: unable to read partition table [ 728.275392][T24407] loop7: partition table beyond EOD, truncated [ 728.275416][T24407] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 728.697938][T24414] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 729.175703][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 117 seconds [ 729.175756][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 117 seconds [ 729.175805][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 117 seconds [ 729.175841][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 117 seconds [ 731.332205][T24491] program syz.4.7782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 731.593684][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 118 seconds [ 731.593738][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 118 seconds [ 731.593777][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 118 seconds [ 731.593815][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 118 seconds [ 731.814881][ T990] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 731.969602][ T990] usb 7-1: unable to get BOS descriptor or descriptor too short [ 731.969692][ T990] usb 7-1: no configurations [ 731.969708][ T990] usb 7-1: can't read configurations, error -22 [ 733.232578][ T990] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 733.382796][ T990] usb 7-1: Using ep0 maxpacket: 32 [ 733.386272][ T990] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.386308][ T990] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.389534][ T990] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 733.389565][ T990] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 733.389588][ T990] usb 7-1: Product: syz [ 733.389605][ T990] usb 7-1: Manufacturer: syz [ 733.475562][ T990] hub 7-1:4.0: USB hub found [ 733.740586][ T990] hub 7-1:4.0: config failed, hub has too many ports! (err -19) [ 733.983642][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 119 seconds [ 733.983696][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 119 seconds [ 733.983733][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 119 seconds [ 733.983769][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 119 seconds [ 734.032129][ T9105] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 734.052579][ T5951] usb 7-1: USB disconnect, device number 9 [ 734.182129][ T9105] usb 3-1: Using ep0 maxpacket: 32 [ 734.184660][ T9105] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 734.184689][ T9105] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 734.184715][ T9105] usb 3-1: config 0 interface 0 has no altsetting 0 [ 734.187295][ T9105] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 734.187322][ T9105] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 734.187343][ T9105] usb 3-1: Product: syz [ 734.187358][ T9105] usb 3-1: Manufacturer: syz [ 734.187373][ T9105] usb 3-1: SerialNumber: syz [ 734.220385][T24575] program syz.4.7817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.266706][ T9105] usb 3-1: config 0 descriptor?? [ 734.477309][T24583] vivid-000: ================= START STATUS ================= [ 734.477332][T24583] vivid-000: Test Pattern: 75% Colorbar [ 734.477372][T24583] vivid-000: Fill Percentage of Frame: 100 [ 734.477395][T24583] vivid-000: Horizontal Movement: No Movement [ 734.477416][T24583] vivid-000: Vertical Movement: No Movement [ 734.477436][T24583] vivid-000: OSD Text Mode: All [ 734.477455][T24583] vivid-000: Show Border: false [ 734.477475][T24583] vivid-000: Show Square: false [ 734.477494][T24583] vivid-000: Sensor Flipped Horizontally: false [ 734.477514][T24583] vivid-000: Sensor Flipped Vertically: false [ 734.477533][T24583] vivid-000: Insert SAV Code in Image: false [ 734.477553][T24583] vivid-000: Insert EAV Code in Image: false [ 734.477571][T24583] vivid-000: Insert Video Guard Band: false [ 734.477591][T24583] vivid-000: Reduced Framerate: false [ 734.477609][T24583] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 734.477632][T24583] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 734.477653][T24583] vivid-000: Enable Capture Cropping: true grabbed [ 734.477677][T24583] vivid-000: Enable Capture Composing: true grabbed [ 734.477701][T24583] vivid-000: Enable Capture Scaler: true grabbed [ 734.477725][T24583] vivid-000: Timestamp Source: Start of Exposure [ 734.477745][T24583] vivid-000: Colorspace: Rec. 709 [ 734.477764][T24583] vivid-000: Transfer Function: Default [ 734.477783][T24583] vivid-000: Y'CbCr Encoding: Default [ 734.477802][T24583] vivid-000: HSV Encoding: Hue 0-179 [ 734.477828][T24583] vivid-000: Quantization: Default [ 734.477848][T24583] vivid-000: Apply Alpha To Red Only: false [ 734.477868][T24583] vivid-000: Standard Aspect Ratio: 4x3 [ 734.477888][T24583] vivid-000: DV Timings Signal Mode: Current DV Timings [ 734.477909][T24583] vivid-000: DV Timings: 640x480p59 inactive [ 734.477933][T24583] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 734.477954][T24583] vivid-000: Maximum EDID Blocks: 2 [ 734.477975][T24583] vivid-000: Limited RGB Range (16-235): true [ 734.478005][T24583] vivid-000: Rx RGB Quantization Range: Automatic [ 734.478024][T24583] vivid-000: Power Present: 0x00000001 [ 734.478045][T24583] tpg source WxH: 1280x720 (Y'CbCr) [ 734.478057][T24583] tpg field: 1 [ 734.478065][T24583] tpg crop: (0,0)/1280x720 [ 734.478078][T24583] tpg compose: (0,0)/1280x720 [ 734.478092][T24583] tpg colorspace: 3 [ 734.478099][T24583] tpg transfer function: 0/1 [ 734.478110][T24583] tpg Y'CbCr encoding: 0/2 [ 734.478119][T24583] tpg quantization: 0/2 [ 734.478129][T24583] tpg RGB range: 0/1 [ 734.478138][T24583] vivid-000: ================== END STATUS ================== [ 734.648765][T24588] input: syz0 as /devices/virtual/input/input56 [ 734.692896][ T9105] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 735.121788][ T9105] usb 3-1: USB disconnect, device number 65 [ 736.375868][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 120 seconds [ 736.375922][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 120 seconds [ 736.375961][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 120 seconds [ 736.375998][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 120 seconds [ 736.712621][T24612] syz.6.7830 (24612) used greatest stack depth: 16760 bytes left [ 738.410510][ T990] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 738.580895][ T990] usb 7-1: Using ep0 maxpacket: 32 [ 738.597032][ T990] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 738.597062][ T990] usb 7-1: config 0 has no interface number 0 [ 738.605912][ T990] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 738.605950][ T990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.605975][ T990] usb 7-1: Product: syz [ 738.605993][ T990] usb 7-1: Manufacturer: syz [ 738.606011][ T990] usb 7-1: SerialNumber: syz [ 738.652892][ T990] usb 7-1: config 0 descriptor?? [ 738.668392][ T990] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 738.769869][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 121 seconds [ 738.769920][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 121 seconds [ 738.769955][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 121 seconds [ 738.769990][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 121 seconds [ 738.968663][ T990] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 739.000581][ T990] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 739.357193][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 739.358878][ T5951] usb 7-1: USB disconnect, device number 10 [ 739.382177][ T5951] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 739.407681][ T5951] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 739.408511][ T5951] quatech2 7-1:0.51: device disconnected [ 740.930663][ T38] audit: type=1804 audit(997.849:2052): pid=24755 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.7895" name="/newroot/1587/bus" dev="tmpfs" ino=8035 res=1 errno=0 [ 741.168804][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 122 seconds [ 741.168856][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 122 seconds [ 741.168904][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 122 seconds [ 741.168941][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 122 seconds [ 741.514865][T24777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7906'. [ 742.088325][ T9105] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 742.161024][T24798] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7916'. [ 742.238050][ T9105] usb 7-1: Using ep0 maxpacket: 8 [ 742.240886][ T9105] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 742.240916][ T9105] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.282024][ T9105] pvrusb2: Hardware description: Terratec Grabster AV400 [ 742.282043][ T9105] pvrusb2: ********** [ 742.282052][ T9105] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 742.282067][ T9105] pvrusb2: Important functionality might not be entirely working. [ 742.282078][ T9105] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 742.282092][ T9105] pvrusb2: ********** [ 742.494154][ T2368] pvrusb2: Invalid write control endpoint [ 742.567888][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 742.577985][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 742.624440][ T2368] pvrusb2: Invalid write control endpoint [ 742.624457][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 742.624469][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 742.624479][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 742.624491][ T2368] pvrusb2: Device being rendered inoperable [ 742.624565][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 742.624618][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 742.626659][ T2368] pvrusb2: Attached sub-driver cx25840 [ 742.626672][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 742.626683][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 742.695455][T24790] pvrusb2: Killing an I2C write to 3 that is too large (desired=62 limit=61) [ 742.697484][ T5916] usb 7-1: USB disconnect, device number 11 [ 742.727922][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 742.731854][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 742.731887][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.770649][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 742.770667][ T9] pvrusb2: ********** [ 742.770676][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 742.770689][ T9] pvrusb2: Important functionality might not be entirely working. [ 742.770706][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 742.770719][ T9] pvrusb2: ********** [ 743.000100][ T2368] pvrusb2: Invalid write control endpoint [ 743.090388][ T2368] pvrusb2: Invalid write control endpoint [ 743.090405][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 743.090416][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 743.090426][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 743.090438][ T2368] pvrusb2: Device being rendered inoperable [ 743.090515][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 743.090582][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 743.100108][ T2368] pvrusb2: Attached sub-driver cx25840 [ 743.100125][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 743.100140][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 743.230393][ T9] usb 5-1: USB disconnect, device number 65 [ 743.571483][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 123 seconds [ 743.571538][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 123 seconds [ 743.571576][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 123 seconds [ 743.571623][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 123 seconds [ 743.700481][ T38] audit: type=1326 audit(1000.631:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24829 comm="syz.6.7929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7817ebe9 code=0x7ffc0000 [ 743.716089][ T38] audit: type=1326 audit(1000.631:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24829 comm="syz.6.7929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7817ebe9 code=0x7ffc0000 [ 743.719568][ T38] audit: type=1326 audit(1000.651:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24829 comm="syz.6.7929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7e7817ebe9 code=0x7ffc0000 [ 743.719626][ T38] audit: type=1326 audit(1000.651:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24829 comm="syz.6.7929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7817ebe9 code=0x7ffc0000 [ 743.719685][ T38] audit: type=1326 audit(1000.651:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24829 comm="syz.6.7929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7817ebe9 code=0x7ffc0000 [ 743.720151][ T38] audit: type=1326 audit(1000.651:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24829 comm="syz.6.7929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7e7817ebe9 code=0x7ffc0000 [ 743.773220][ T38] audit: type=1326 audit(1000.701:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24829 comm="syz.6.7929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7817ebe9 code=0x7ffc0000 [ 744.367442][ T5916] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 744.526984][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 744.530093][ T5916] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 744.530124][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.549622][ T5916] usb 5-1: config 0 descriptor?? [ 744.572806][ T5916] gspca_main: sunplus-2.14.0 probing 041e:400b [ 744.635867][T24855] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7941'. [ 745.379949][ T5916] gspca_sunplus: reg_w_riv err -71 [ 745.380055][ T5916] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 745.392697][ T5916] usb 5-1: USB disconnect, device number 66 [ 745.854976][T24887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7956'. [ 745.966270][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 124 seconds [ 745.966322][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 124 seconds [ 745.966359][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 124 seconds [ 745.966403][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 124 seconds [ 748.365308][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 125 seconds [ 748.365362][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 125 seconds [ 748.365399][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 125 seconds [ 748.365437][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 125 seconds [ 748.954928][T24987] usb usb8: usbfs: process 24987 (syz.1.8004) did not claim interface 0 before use [ 750.030980][T25012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8015'. [ 750.765959][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 126 seconds [ 750.766011][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 126 seconds [ 750.766050][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 126 seconds [ 750.766086][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 126 seconds [ 752.135941][T25081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 752.169718][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.977813][T25106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8058'. [ 752.977852][T25106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8058'. [ 753.162703][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 127 seconds [ 753.162756][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 127 seconds [ 753.162792][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 127 seconds [ 753.162827][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 127 seconds [ 753.877805][T25130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8069'. [ 754.112070][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 754.278546][ T9] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 754.278575][ T9] usb 5-1: config 0 has no interface number 0 [ 754.278608][ T9] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 754.278650][ T9] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 754.278680][ T9] usb 5-1: config 0 interface 255 has no altsetting 0 [ 754.278714][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 754.278745][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.283763][ T9] usb 5-1: config 0 descriptor?? [ 754.322511][ T9] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 754.517799][ T990] usb 5-1: USB disconnect, device number 67 [ 755.561865][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 128 seconds [ 755.561918][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 128 seconds [ 755.561956][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 128 seconds [ 755.561993][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 128 seconds [ 757.792359][T25223] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 757.808547][T25223] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 757.811112][T25223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 757.814053][T25223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 757.814952][T25223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 757.960410][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 129 seconds [ 757.960464][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 129 seconds [ 757.960503][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 129 seconds [ 757.960541][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 129 seconds [ 758.561222][T19446] Bluetooth: hci1: command 0x0419 tx timeout [ 758.710295][T25222] chnl_net:caif_netlink_parms(): no params data found [ 759.178348][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8125'. [ 759.521989][T25222] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.522149][T25222] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.522433][T25222] bridge_slave_0: entered allmulticast mode [ 759.525504][T25222] bridge_slave_0: entered promiscuous mode [ 759.528737][T25222] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.528868][T25222] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.529091][T25222] bridge_slave_1: entered allmulticast mode [ 759.591128][T25222] bridge_slave_1: entered promiscuous mode [ 759.919169][T19446] Bluetooth: hci6: command tx timeout [ 759.995411][T25222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.023422][T25222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.312763][T25222] team0: Port device team_slave_0 added [ 760.328134][T25222] team0: Port device team_slave_1 added [ 760.359247][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 130 seconds [ 760.359299][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 130 seconds [ 760.359337][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 130 seconds [ 760.359374][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 130 seconds [ 760.649315][T19446] Bluetooth: hci1: command 0x0419 tx timeout [ 760.990075][T25222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.990094][T25222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.990122][T25222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.992627][T25222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.992643][T25222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.992673][T25222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.293331][T25290] block nbd3: shutting down sockets [ 761.383484][T25294] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.8140'. [ 761.531077][T25222] hsr_slave_0: entered promiscuous mode [ 761.532562][T25222] hsr_slave_1: entered promiscuous mode [ 761.533529][T25222] debugfs: 'hsr0' already exists in 'hsr' [ 761.533555][T25222] Cannot create hsr debugfs directory [ 761.768335][ T1717] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 761.918438][ T1717] usb 7-1: Using ep0 maxpacket: 8 [ 761.920972][ T1717] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 761.921003][ T1717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.971843][ T1717] pvrusb2: Hardware description: Terratec Grabster AV400 [ 761.971864][ T1717] pvrusb2: ********** [ 761.971872][ T1717] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 761.971887][ T1717] pvrusb2: Important functionality might not be entirely working. [ 761.971898][ T1717] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 761.971912][ T1717] pvrusb2: ********** [ 761.999083][ T5845] Bluetooth: hci6: command tx timeout [ 762.183213][ T2368] pvrusb2: Invalid write control endpoint [ 762.383763][T25298] pvrusb2: Invalid write control endpoint [ 762.394256][ T1717] usb 7-1: USB disconnect, device number 12 [ 762.414300][ T2368] pvrusb2: Invalid write control endpoint [ 762.414317][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 762.414329][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 762.414338][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 762.414350][ T2368] pvrusb2: Device being rendered inoperable [ 762.414379][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 762.414444][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 762.468579][ T2368] pvrusb2: Attached sub-driver cx25840 [ 762.468599][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 762.468613][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 762.778216][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 131 seconds [ 762.778270][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 131 seconds [ 762.778307][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 131 seconds [ 762.778342][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 131 seconds [ 763.433593][T25222] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 763.554870][T25222] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 763.696114][T25222] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 763.742529][T25222] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 764.077991][ T5845] Bluetooth: hci6: command tx timeout [ 764.149368][T25330] netem: change failed [ 764.442505][T25222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.605930][T25222] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.670337][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.670507][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.673397][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.673564][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.156752][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 132 seconds [ 765.156809][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 132 seconds [ 765.156855][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 132 seconds [ 765.156900][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 132 seconds [ 765.835380][T25222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.156481][ T5845] Bluetooth: hci6: command tx timeout [ 766.410896][ T990] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 766.560791][ T990] usb 5-1: Using ep0 maxpacket: 32 [ 766.563366][ T990] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 766.563396][ T990] usb 5-1: config 0 has no interface number 0 [ 766.577014][ T990] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 766.577046][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.577068][ T990] usb 5-1: Product: syz [ 766.577085][ T990] usb 5-1: Manufacturer: syz [ 766.577101][ T990] usb 5-1: SerialNumber: syz [ 766.624317][ T990] usb 5-1: config 0 descriptor?? [ 766.647585][ T990] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 766.858576][ T990] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 766.893716][ T990] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 767.116789][T25222] veth0_vlan: entered promiscuous mode [ 767.173016][T25222] veth1_vlan: entered promiscuous mode [ 767.325941][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 767.326702][ T990] usb 5-1: USB disconnect, device number 68 [ 767.377996][ T990] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 767.416444][ T990] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 767.417189][ T990] quatech2 5-1:0.51: device disconnected [ 767.430181][T25222] veth0_macvtap: entered promiscuous mode [ 767.499120][T25222] veth1_macvtap: entered promiscuous mode [ 767.573742][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 133 seconds [ 767.573792][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 133 seconds [ 767.573825][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 133 seconds [ 767.573860][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 133 seconds [ 767.666631][T25222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.704638][T25222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.771192][ T67] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.806263][ T67] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.811417][ T67] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.811469][ T67] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.345213][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.345235][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.475895][T23266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.475920][T23266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.575333][T25421] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.580420][T25421] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.956124][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 134 seconds [ 769.956177][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 134 seconds [ 769.956215][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 134 seconds [ 769.956251][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 134 seconds [ 770.013418][T25430] [U] [ 770.015793][T25427] [U] [ 770.191306][T25438] netlink: 'syz.7.8193': attribute type 44 has an invalid length. [ 770.539391][T25444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8195'. [ 770.539422][T25444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8195'. [ 770.932681][T25432] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 771.480287][T25458] netem: incorrect gi model size [ 772.277101][T25482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8211'. [ 772.354808][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 135 seconds [ 772.354866][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 135 seconds [ 772.354906][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 135 seconds [ 772.354946][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 135 seconds [ 773.479576][T25496] sp0: Synchronizing with TNC [ 773.487875][T25495] [U] `` [ 774.223935][T19446] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 774.228363][T19446] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 774.230012][T25513] netlink: 'syz.6.8223': attribute type 1 has an invalid length. [ 774.236131][T19446] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 774.237936][T19446] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 774.238890][T19446] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 774.249429][T25512] loop7: detected capacity change from 0 to 7 [ 774.253519][T25512] Dev loop7: unable to read RDB block 7 [ 774.253570][T25512] loop7: AHDI p1 p2 [ 774.253613][T25512] loop7: partition table partially beyond EOD, truncated [ 774.253738][T25512] loop7: p1 start 1702000233 is beyond EOD, truncated [ 774.523904][T25518] netlink: 'syz.4.8226': attribute type 1 has an invalid length. [ 774.751905][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 136 seconds [ 774.751957][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 136 seconds [ 774.751994][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 136 seconds [ 774.752031][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 136 seconds [ 775.286711][T25510] chnl_net:caif_netlink_parms(): no params data found [ 775.831301][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 776.116604][T25510] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.116809][T25510] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.117058][T25510] bridge_slave_0: entered allmulticast mode [ 776.120027][T25510] bridge_slave_0: entered promiscuous mode [ 776.163510][T25510] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.163740][T25510] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.163986][T25510] bridge_slave_1: entered allmulticast mode [ 776.166855][T25510] bridge_slave_1: entered promiscuous mode [ 776.391395][ T5845] Bluetooth: hci7: command tx timeout [ 776.565268][T25548] [U]  [ 776.881775][T25552] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8236'. [ 776.881898][T25552] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8236'. [ 777.153213][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 137 seconds [ 777.153267][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 137 seconds [ 777.153305][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 137 seconds [ 777.153342][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 137 seconds [ 777.225627][T25510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.294039][T25510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.555133][T25510] team0: Port device team_slave_0 added [ 777.559136][T25510] team0: Port device team_slave_1 added [ 777.734503][ T9105] kernel write not supported for file /media1 (pid: 9105 comm: kworker/1:10) [ 777.947173][T25510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.947191][T25510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.947219][T25510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.004009][T25510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.004028][T25510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.004058][T25510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.470213][ T5845] Bluetooth: hci7: command tx timeout [ 778.737338][T25510] hsr_slave_0: entered promiscuous mode [ 778.738893][T25510] hsr_slave_1: entered promiscuous mode [ 778.745810][T25510] debugfs: 'hsr0' already exists in 'hsr' [ 778.745841][T25510] Cannot create hsr debugfs directory [ 779.550521][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 138 seconds [ 779.550574][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 138 seconds [ 779.550612][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 138 seconds [ 779.550649][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 138 seconds [ 780.549066][ T5845] Bluetooth: hci7: command tx timeout [ 780.730786][T25625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8269'. [ 781.652246][T25510] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 781.711784][T25510] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 781.804110][T25510] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 781.821827][ T38] audit: type=1326 audit(1038.750:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25639 comm="syz.4.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dd4febe9 code=0x7ffc0000 [ 781.857784][ T38] audit: type=1326 audit(1038.800:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25639 comm="syz.4.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff3dd4febe9 code=0x7ffc0000 [ 781.857845][ T38] audit: type=1326 audit(1038.800:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25639 comm="syz.4.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dd4febe9 code=0x7ffc0000 [ 781.857903][ T38] audit: type=1326 audit(1038.800:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25639 comm="syz.4.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dd4febe9 code=0x7ffc0000 [ 781.869372][ T38] audit: type=1326 audit(1038.820:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25639 comm="syz.4.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff3dd4febe9 code=0x7ffc0000 [ 781.869436][ T38] audit: type=1326 audit(1038.820:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25639 comm="syz.4.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dd4febe9 code=0x7ffc0000 [ 781.869487][ T38] audit: type=1326 audit(1038.820:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25639 comm="syz.4.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dd4febe9 code=0x7ffc0000 [ 781.890615][ T38] audit: type=1326 audit(1038.840:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25639 comm="syz.4.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff3dd4febe9 code=0x7ffc0000 [ 781.890684][ T38] audit: type=1326 audit(1038.840:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25639 comm="syz.4.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dd4febe9 code=0x7ff00000 [ 781.890738][ T38] audit: type=1326 audit(1038.840:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25639 comm="syz.4.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dd4febe9 code=0x7ff00000 [ 781.948855][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 139 seconds [ 781.948909][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 139 seconds [ 781.948948][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 139 seconds [ 781.948988][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 139 seconds [ 782.110975][T25510] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 782.612086][T25510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.628420][ T5845] Bluetooth: hci7: command tx timeout [ 782.678097][T25510] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.715482][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.720079][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.784472][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.784659][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.473875][T25673] sp0: Synchronizing with TNC [ 783.968080][T25510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.348767][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 140 seconds [ 784.348840][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 140 seconds [ 784.348883][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 140 seconds [ 784.348925][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 140 seconds [ 785.297477][T25692] tap0: tun_chr_ioctl cmd 2147767520 [ 785.667378][T25701] loop7: detected capacity change from 0 to 7 [ 785.672066][ C1] blk_print_req_error: 5 callbacks suppressed [ 785.672090][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 785.672125][ C1] buffer_io_error: 5 callbacks suppressed [ 785.672139][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 785.699859][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 785.699905][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 785.700294][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 785.700332][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 785.700782][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 785.700821][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 785.725687][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 785.725730][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 785.726321][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 785.726356][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 785.726770][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 785.726805][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 785.726913][T25701] ldm_validate_partition_table(): Disk read failed. [ 785.727101][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 785.727135][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 785.727407][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 785.727440][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 785.727716][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 785.727749][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 785.728323][T25701] Dev loop7: unable to read RDB block 0 [ 785.729399][T25701] loop7: unable to read partition table [ 785.729680][T25701] loop7: partition table beyond EOD, truncated [ 785.729703][T25701] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 786.139318][T25510] veth0_vlan: entered promiscuous mode [ 786.174103][T25510] veth1_vlan: entered promiscuous mode [ 786.250524][T25510] veth0_macvtap: entered promiscuous mode [ 786.269380][T25510] veth1_macvtap: entered promiscuous mode [ 786.311582][T25510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.370056][T25510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.394977][ T3594] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.399719][ T3594] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.417531][ T3594] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.419588][ T3594] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.751714][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 141 seconds [ 786.751770][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 141 seconds [ 786.751809][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 141 seconds [ 786.751847][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 141 seconds [ 787.176866][T23266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.176889][T23266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.264205][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.264245][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.635307][T25751] program syz.1.8316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 788.662004][T25755] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8317'. [ 789.144665][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 142 seconds [ 789.144716][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 142 seconds [ 789.144750][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 142 seconds [ 789.144785][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 142 seconds [ 789.678534][T25780] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8328'. [ 789.776511][T25782] netlink: 'syz.1.8329': attribute type 9 has an invalid length. [ 789.776535][T25782] netlink: 155628 bytes leftover after parsing attributes in process `syz.1.8329'. [ 789.894316][ T9105] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 790.059364][ T9105] usb 5-1: Using ep0 maxpacket: 16 [ 790.062675][ T9105] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2047, setting to 1024 [ 790.062714][ T9105] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 790.090404][ T9105] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 790.090437][ T9105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.090461][ T9105] usb 5-1: Product: syz [ 790.090477][ T9105] usb 5-1: Manufacturer: syz [ 790.090494][ T9105] usb 5-1: SerialNumber: syz [ 790.350536][ T9105] cdc_ncm 5-1:1.0: bind() failure [ 790.371690][ T9105] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 790.371742][ T9105] cdc_ncm 5-1:1.1: bind() failure [ 790.409301][ T9105] usb 5-1: USB disconnect, device number 69 [ 790.865706][T25809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8341'. [ 790.924073][ T990] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 791.078057][ T990] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 791.078092][ T990] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 791.083108][ T990] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 791.083139][ T990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.083163][ T990] usb 9-1: Product: syz [ 791.083179][ T990] usb 9-1: Manufacturer: syz [ 791.083196][ T990] usb 9-1: SerialNumber: syz [ 791.101762][ T990] usb 9-1: config 0 descriptor?? [ 791.103205][T25804] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 791.103734][T25804] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 791.344812][T25804] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 791.350435][T25804] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 791.543708][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 143 seconds [ 791.543761][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 143 seconds [ 791.543797][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 143 seconds [ 791.543830][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 143 seconds [ 791.778741][ T990] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 791.972196][ T990] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 791.985258][ T990] usb 9-1: USB disconnect, device number 2 [ 792.332075][T25841] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8356'. [ 793.596631][ T38] kauditd_printk_skb: 1831 callbacks suppressed [ 793.596653][ T38] audit: type=1326 audit(1050.556:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25872 comm="syz.8.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5534e0ebe9 code=0x7ffc0000 [ 793.596862][ T38] audit: type=1326 audit(1050.556:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25872 comm="syz.8.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5534e0ebe9 code=0x7ffc0000 [ 793.674177][ T38] audit: type=1326 audit(1050.636:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25872 comm="syz.8.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f5534e0ebe9 code=0x7ffc0000 [ 793.674239][ T38] audit: type=1326 audit(1050.636:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25872 comm="syz.8.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5534e0ebe9 code=0x7ffc0000 [ 793.674288][ T38] audit: type=1326 audit(1050.636:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25872 comm="syz.8.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5534e0ebe9 code=0x7ffc0000 [ 793.674337][ T38] audit: type=1326 audit(1050.636:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25872 comm="syz.8.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5534e10b07 code=0x7ffc0000 [ 793.681294][ T38] audit: type=1326 audit(1050.636:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25872 comm="syz.8.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5534e10a7c code=0x7ffc0000 [ 793.681355][ T38] audit: type=1326 audit(1050.636:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25872 comm="syz.8.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5534e109b4 code=0x7ffc0000 [ 793.681419][ T38] audit: type=1326 audit(1050.636:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25872 comm="syz.8.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5534e109b4 code=0x7ffc0000 [ 793.681468][ T38] audit: type=1326 audit(1050.636:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25872 comm="syz.8.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5534e0d84a code=0x7ffc0000 [ 793.942230][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 144 seconds [ 793.942285][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 144 seconds [ 793.942324][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 144 seconds [ 793.942361][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 144 seconds [ 794.916683][T25934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 794.919977][T25934] bond0: (slave bond1): Enslaving as an active interface with an up link [ 795.899038][T25955] netlink: 'syz.6.8388': attribute type 3 has an invalid length. [ 795.899063][T25955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8388'. [ 796.348120][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 145 seconds [ 796.348172][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 145 seconds [ 796.348210][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 145 seconds [ 796.348241][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 145 seconds [ 796.361809][T25964] netlink: 452 bytes leftover after parsing attributes in process `syz.4.8393'. [ 798.740203][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 146 seconds [ 798.740258][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 146 seconds [ 798.740295][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 146 seconds [ 798.740331][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 146 seconds [ 799.152230][T26057] input: syz0 as /devices/virtual/input/input57 [ 800.358981][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 800.519438][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 800.522211][ T10] usb 5-1: config 0 has no interfaces? [ 800.525385][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 800.525422][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.525444][ T10] usb 5-1: Product: syz [ 800.525460][ T10] usb 5-1: Manufacturer: syz [ 800.525477][ T10] usb 5-1: SerialNumber: syz [ 800.581248][ T10] usb 5-1: config 0 descriptor?? [ 800.746915][T26096] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8451'. [ 800.870669][ T9105] usb 5-1: USB disconnect, device number 70 [ 801.148845][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 147 seconds [ 801.148904][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 147 seconds [ 801.148942][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 147 seconds [ 801.148978][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 147 seconds [ 803.350151][T26164] binder: BC_ACQUIRE_RESULT not supported [ 803.350169][T26164] binder: 26162:26164 ioctl c0306201 200000000640 returned -22 [ 803.544443][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 148 seconds [ 803.544497][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 148 seconds [ 803.544536][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 148 seconds [ 803.544578][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 148 seconds [ 803.611396][T26169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 803.611415][T26169] IPv6: NLM_F_CREATE should be set when creating new route [ 803.611512][T26169] IPv6: NLM_F_CREATE should be set when creating new route [ 803.611549][T26169] IPv6: NLM_F_CREATE should be set when creating new route [ 803.612070][T26169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 803.669701][T26171] loop9: detected capacity change from 0 to 8 [ 803.722159][T26171] Dev loop9: unable to read RDB block 8 [ 803.722226][T26171] loop9: unable to read partition table [ 803.722753][T26171] loop9: partition table beyond EOD, truncated [ 803.722778][T26171] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 804.919025][ T70] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.952344][T26191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8495'. [ 805.445915][ T70] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.487706][T19446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 805.514120][T19446] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 805.522023][T19446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 805.523508][T19446] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 805.525248][T19446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 805.939599][ T63] block nbd0: Possible stuck request ffff888024ece000: control (read@0,1024B). Runtime 149 seconds [ 805.939650][ T63] block nbd0: Possible stuck request ffff888024ece1c0: control (read@1024,1024B). Runtime 149 seconds [ 805.939684][ T63] block nbd0: Possible stuck request ffff888024ece380: control (read@2048,1024B). Runtime 149 seconds [ 805.939720][ T63] block nbd0: Possible stuck request ffff888024ece540: control (read@3072,1024B). Runtime 149 seconds [ 805.991974][ T70] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.217582][T26223] loop8: detected capacity change from 0 to 7 [ 806.228832][T26223] Dev loop8: unable to read RDB block 7 [ 806.228882][T26223] loop8: unable to read partition table [ 806.229138][T26223] loop8: partition table beyond EOD, truncated [ 806.229179][T26223] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 806.822398][ T70] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.178934][ T39] INFO: task syz.0.6981:22659 blocked for more than 143 seconds. [ 807.178960][ T39] Not tainted syzkaller #0 [ 807.178973][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 807.178985][ T39] task:syz.0.6981 state:D stack:26696 pid:22659 tgid:22658 ppid:5854 task_flags:0x400140 flags:0x00004004 [ 807.179062][ T39] Call Trace: [ 807.179070][ T39] [ 807.179086][ T39] __schedule+0x16f3/0x4c20 [ 807.179133][ T39] ? sched_clock+0x3f/0x60 [ 807.179162][ T39] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 807.179202][ T39] ? __pfx___schedule+0x10/0x10 [ 807.179262][ T39] rt_mutex_schedule+0x77/0xf0 [ 807.179285][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 807.179335][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 807.179368][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 807.179399][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 807.179429][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 807.179476][ T39] ? __pfx_wait_on_inode+0x10/0x10 [ 807.179519][ T39] ? bdev_open+0xe0/0xcc0 [ 807.179550][ T39] mutex_lock_nested+0x16a/0x1d0 [ 807.179583][ T39] bdev_open+0xe0/0xcc0 [ 807.179621][ T39] blkdev_open+0x46c/0x610 [ 807.179653][ T39] ? __pfx_blkdev_open+0x10/0x10 [ 807.179681][ T39] do_dentry_open+0x9ae/0x1350 [ 807.179718][ T39] vfs_open+0x3b/0x350 [ 807.179737][ T39] ? path_openat+0x2ed9/0x3840 [ 807.179767][ T39] path_openat+0x2ef1/0x3840 [ 807.179802][ T39] ? try_to_take_rt_mutex+0x840/0xb00 [ 807.179863][ T39] ? __pfx_path_openat+0x10/0x10 [ 807.179890][ T39] ? do_raw_spin_lock+0x121/0x290 [ 807.179929][ T39] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 807.179964][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.180000][ T39] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 807.180043][ T39] do_filp_open+0x1fa/0x410 [ 807.180072][ T39] ? __pfx_do_filp_open+0x10/0x10 [ 807.180096][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 807.180154][ T39] ? alloc_fd+0x64f/0x6c0 [ 807.180198][ T39] do_sys_openat2+0x121/0x1c0 [ 807.180222][ T39] ? __se_sys_futex+0x36f/0x400 [ 807.180250][ T39] ? __pfx_do_sys_openat2+0x10/0x10 [ 807.180283][ T39] ? rcu_is_watching+0x15/0xb0 [ 807.180329][ T39] __x64_sys_openat+0x138/0x170 [ 807.180360][ T39] do_syscall_64+0xfa/0x3b0 [ 807.180380][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.180414][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.180437][ T39] ? clear_bhb_loop+0x60/0xb0 [ 807.180466][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.180493][ T39] RIP: 0033:0x7f65fc17d550 [ 807.180514][ T39] RSP: 002b:00007f65fa3e5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 807.180537][ T39] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f65fc17d550 [ 807.180554][ T39] RDX: 0000000000000000 RSI: 00007f65fa3e5c10 RDI: 00000000ffffff9c [ 807.180571][ T39] RBP: 00007f65fa3e5c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 807.180588][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 807.180603][ T39] R13: 00007f65fc3b6038 R14: 00007f65fc3b5fa0 R15: 00007ffff57be208 [ 807.180641][ T39] [ 807.180700][ T39] [ 807.180700][ T39] Showing all locks held in the system: [ 807.180713][ T39] 1 lock held by rcu_tasks_trace/36: [ 807.180727][ T39] #0: ffffffff8d9a98c0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0 [ 807.180791][ T39] 1 lock held by khungtaskd/39: [ 807.180805][ T39] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 807.180860][ T39] 6 locks held by kworker/u8:5/70: [ 807.180897][ T39] 2 locks held by getty/5599: [ 807.180910][ T39] #0: ffff88823bf6a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 807.180974][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 807.181036][ T39] 1 lock held by udevd/12066: [ 807.181048][ T39] #0: ffff888024e614c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 807.181102][ T39] 1 lock held by syz.0.6981/22659: [ 807.181114][ T39] #0: ffff888024e614c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 807.181168][ T39] 1 lock held by syz.5.7912/24788: [ 807.181182][ T39] #0: ffff888024e614c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 807.181239][ T39] 2 locks held by kworker/u8:38/25920: [ 807.181252][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 807.181341][ T39] #1: ffffc90003ee7bc0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 807.181401][ T39] 2 locks held by kworker/u8:45/25928: [ 807.181415][ T39] 4 locks held by syz.1.8511/26231: [ 807.181430][ T39] 1 lock held by syz.8.8516/26244: [ 807.181443][ T39] 1 lock held by syz.4.8518/26247: [ 807.181457][ T39] #0: ffff88808b908d90 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x214/0x4d0 [ 807.181517][ T39] 2 locks held by syz.4.8518/26248: [ 807.181532][ T39] 2 locks held by modprobe/26250: [ 807.181547][ T39] [ 807.181553][ T39] ============================================= [ 807.181553][ T39] [ 807.181570][ T39] NMI backtrace for cpu 0 [ 807.181594][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 807.181620][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 807.181633][ T39] Call Trace: [ 807.181643][ T39] [ 807.181652][ T39] dump_stack_lvl+0x189/0x250 [ 807.181690][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.181727][ T39] ? __pfx__printk+0x10/0x10 [ 807.181766][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 807.181799][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 807.181832][ T39] ? __pfx__printk+0x10/0x10 [ 807.181863][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 807.181896][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 807.181930][ T39] watchdog+0xf93/0xfe0 [ 807.181966][ T39] ? watchdog+0x1de/0xfe0 [ 807.182003][ T39] kthread+0x70e/0x8a0 [ 807.182042][ T39] ? __pfx_watchdog+0x10/0x10 [ 807.182072][ T39] ? __pfx_kthread+0x10/0x10 [ 807.182114][ T39] ? __pfx_kthread+0x10/0x10 [ 807.182152][ T39] ret_from_fork+0x3f9/0x770 [ 807.182186][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 807.182224][ T39] ? __switch_to_asm+0x39/0x70 [ 807.182245][ T39] ? __switch_to_asm+0x33/0x70 [ 807.182266][ T39] ? __pfx_kthread+0x10/0x10 [ 807.182303][ T39] ret_from_fork_asm+0x1a/0x30 [ 807.182350][ T39] [ 807.182359][ T39] Sending NMI from CPU 0 to CPUs 1: [ 807.182386][ C1] NMI backtrace for cpu 1 [ 807.182403][ C1] CPU: 1 UID: 0 PID: 25928 Comm: kworker/u8:45 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 807.182425][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 807.182438][ C1] Workqueue: bat_events batadv_nc_worker [ 807.182466][ C1] RIP: 0010:__lock_acquire+0x44c/0xd20 [ 807.182493][ C1] Code: 0f 44 ea 44 8b a7 18 0b 00 00 41 8d 4c 24 ff 83 f9 ff bd ff ff ff ff 0f 4c e9 ff c5 45 8d 7c 24 01 49 ff cc 44 89 f9 83 c1 fe <78> 44 44 89 e3 81 e3 ff ff ff 7f 83 f9 31 73 1d 48 8d 0c 9b 8b 8c [ 807.182521][ C1] RSP: 0018:ffffc90003c07650 EFLAGS: 00000017 [ 807.182536][ C1] RAX: 000000000002000b RBX: 0000000000000003 RCX: 0000000000000003 [ 807.182547][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff88802df00000 [ 807.182559][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8af90c4b [ 807.182571][ C1] R10: dffffc0000000000 R11: fffffbfff1e3ab47 R12: 0000000000000003 [ 807.182584][ C1] R13: 0000000000000001 R14: ffff88802df00bc0 R15: 0000000000000005 [ 807.182597][ C1] FS: 0000000000000000(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 807.182612][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 807.182624][ C1] CR2: 00007f9139afefe8 CR3: 0000000063b34000 CR4: 00000000003526f0 [ 807.182641][ C1] Call Trace: [ 807.182648][ C1] [ 807.182659][ C1] ? rt_spin_lock+0x1bb/0x2c0 [ 807.182680][ C1] lock_acquire+0x120/0x360 [ 807.182703][ C1] ? rt_spin_lock+0x1bb/0x2c0 [ 807.182727][ C1] ? __lock_acquire+0xab9/0xd20 [ 807.182754][ C1] rt_spin_lock+0x1d7/0x2c0 [ 807.182775][ C1] ? rt_spin_lock+0x1bb/0x2c0 [ 807.182796][ C1] ? __local_bh_disable_ip+0xa1/0x400 [ 807.182831][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 807.182852][ C1] ? __local_bh_disable_ip+0xa1/0x400 [ 807.182874][ C1] ? __local_bh_disable_ip+0xa1/0x400 [ 807.182895][ C1] __local_bh_disable_ip+0x264/0x400 [ 807.182916][ C1] ? batadv_nc_purge_paths+0x6a/0x3f0 [ 807.182941][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 807.182962][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 807.182986][ C1] ? rt_spin_unlock+0x65/0x80 [ 807.183006][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 807.183033][ C1] batadv_nc_purge_paths+0xf7/0x3f0 [ 807.183065][ C1] ? batadv_nc_purge_paths+0x6a/0x3f0 [ 807.183093][ C1] batadv_nc_worker+0x87e/0xbc0 [ 807.183118][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 807.183143][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 807.183165][ C1] process_scheduled_works+0xade/0x17b0 [ 807.183200][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 807.183229][ C1] worker_thread+0x8a0/0xda0 [ 807.183263][ C1] kthread+0x70e/0x8a0 [ 807.183289][ C1] ? __pfx_worker_thread+0x10/0x10 [ 807.183311][ C1] ? __pfx_kthread+0x10/0x10 [ 807.183340][ C1] ? __pfx_kthread+0x10/0x10 [ 807.183366][ C1] ret_from_fork+0x3f9/0x770 [ 807.183408][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 807.183435][ C1] ? __switch_to_asm+0x39/0x70 [ 807.183452][ C1] ? __switch_to_asm+0x33/0x70 [ 807.183469][ C1] ? __pfx_kthread+0x10/0x10 [ 807.183496][ C1] ret_from_fork_asm+0x1a/0x30 [ 807.183522][ C1] [ 807.184398][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 807.184414][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 807.184438][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 807.184451][ T39] Call Trace: [ 807.184459][ T39] [ 807.184468][ T39] dump_stack_lvl+0x99/0x250 [ 807.184500][ T39] ? __asan_memcpy+0x40/0x70 [ 807.184523][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.184554][ T39] ? __pfx__printk+0x10/0x10 [ 807.184591][ T39] vpanic+0x281/0x750 [ 807.184643][ T39] ? __pfx_vpanic+0x10/0x10 [ 807.184674][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 807.184699][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.184744][ T39] panic+0xb9/0xc0 [ 807.184777][ T39] ? __pfx_panic+0x10/0x10 [ 807.184813][ T39] ? irq_work_queue+0xc3/0x140 [ 807.184846][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 807.184878][ T39] watchdog+0xfd2/0xfe0 [ 807.184911][ T39] ? watchdog+0x1de/0xfe0 [ 807.184945][ T39] kthread+0x70e/0x8a0 [ 807.184982][ T39] ? __pfx_watchdog+0x10/0x10 [ 807.185011][ T39] ? __pfx_kthread+0x10/0x10 [ 807.185050][ T39] ? __pfx_kthread+0x10/0x10 [ 807.185087][ T39] ret_from_fork+0x3f9/0x770 [ 807.185120][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 807.185156][ T39] ? __switch_to_asm+0x39/0x70 [ 807.185196][ T39] ? __switch_to_asm+0x33/0x70 [ 807.185217][ T39] ? __pfx_kthread+0x10/0x10 [ 807.185254][ T39] ret_from_fork_asm+0x1a/0x30 [ 807.185295][ T39] [ 807.185658][ T39] Kernel Offset: disabled