last executing test programs: 2.510624754s ago: executing program 3 (id=2793): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="740000001000010425bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="6644020000000000540012800b00010062726964676500004400028005002c0002000000080004000500000005002900000000000c001f000a000000000000000c0020"], 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2.383302857s ago: executing program 3 (id=2800): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth1_to_bond\x00', &(0x7f0000000200)=@ethtool_cmd={0x15, 0x1, 0x5, 0x43, 0xa, 0xf, 0x4, 0x1, 0x10, 0x8, 0x81, 0x9, 0x5, 0x0, 0x4, 0xa, [0x9, 0xffffff19]}}) 2.271160378s ago: executing program 3 (id=2802): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 2.120120694s ago: executing program 3 (id=2807): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="14010000140001002dbd7000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.984209158s ago: executing program 3 (id=2816): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x11, 0x0, @multicast1}}}}}}, 0x0) syz_usb_connect(0xf400, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) 709.801777ms ago: executing program 2 (id=2860): r0 = socket$netlink(0x10, 0x3, 0x0) fgetxattr(r0, &(0x7f0000000200)=@known='system.sockprotoname\x00', &(0x7f0000000240)=""/4, 0x4) 612.078757ms ago: executing program 4 (id=2864): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b00010067656e65766500003800028014000700fe8000000000000000000000000000160500090001000000050009000000000005000c000000000008000200640101091400030067656e65766531000000"], 0x7c}}, 0x2000000) 611.996037ms ago: executing program 2 (id=2865): openat$sndseq(0xffffffffffffff9c, &(0x7f00000053c0), 0x80202) pselect6(0x40, &(0x7f0000000040)={0x3, 0x2, 0x4, 0x81, 0x77d, 0x2, 0x14, 0xc0000000000}, 0x0, &(0x7f0000000180)={0x8, 0x10000, 0x3, 0x9, 0xfffffffffffffff7, 0x3, 0x37339520, 0x1}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 543.534505ms ago: executing program 4 (id=2867): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSETSW(r0, 0x5435, 0x0) 530.890355ms ago: executing program 0 (id=2868): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x40) 479.938391ms ago: executing program 2 (id=2870): r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x0, 0x4011, r0, 0x0) 461.675303ms ago: executing program 2 (id=2871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}]}, 0x58}}, 0x0) 450.050704ms ago: executing program 4 (id=2872): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) 429.960596ms ago: executing program 0 (id=2873): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0xfffffffffffffffe) 424.106047ms ago: executing program 1 (id=2874): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000000), 0xc) 374.206762ms ago: executing program 2 (id=2875): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) 369.290872ms ago: executing program 1 (id=2876): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 368.824982ms ago: executing program 4 (id=2877): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000d9bffc), 0x4) 348.111984ms ago: executing program 0 (id=2878): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8905, 0x1000000000000) 268.054682ms ago: executing program 0 (id=2879): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c3163534e83a7f6ac12a8b52f0d7086e274aa97a91fa46cdcefe7534fda04cace652b4c498a446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238401007cb9806b9641"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)='\b', 0x0}, 0x50) 267.957392ms ago: executing program 1 (id=2880): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d85893f229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5de0900000000000000cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e1217c1342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c67df4c6505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a9b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x3b, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 267.834822ms ago: executing program 2 (id=2881): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x800800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}]}}) 267.697422ms ago: executing program 4 (id=2882): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@mpls_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 246.231125ms ago: executing program 0 (id=2883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="28000000120001000000ffff761fabcaff000000", @ANYRES32=0x0, @ANYBLOB="4884000000400000080029"], 0x28}}, 0x0) 193.18185ms ago: executing program 0 (id=2884): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 172.896042ms ago: executing program 1 (id=2885): r0 = syz_socket_connect_nvme_tcp() close(r0) 172.452452ms ago: executing program 4 (id=2886): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 79.966532ms ago: executing program 1 (id=2887): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 24.462937ms ago: executing program 1 (id=2888): syz_mount_image$reiserfs(&(0x7f0000000580), &(0x7f0000000640)='./file1\x00', 0x8488, &(0x7f0000000680), 0xfd, 0x1109, &(0x7f00000006c0)="$eJzs2b9rFEEUB/Dv7J4/upVNvwhaWEhIOHtJoXCtrTYqqUyVqxT/HP8cTWUrIb0WAfuVNbs5lYB4dwrC5wPLvH3sm3lTzmwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgMEs+l2SnStopVyUpSdedLM6SdFP+1vu6SsmTw8Xy0fH88TJJ/f3z8jQpQ9VQlnb/zs123s7b/fbBzsHdD8vXb149Pzo6PB6nKelyer79rZSxHwAAAOBn/caadZYt21sfAAAA+J2tXiYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArKFvVnE7BVWSknTdyeIsSXdF3bV/1B8AAACwuZIqz5qr8hfXACv387Epl/lh/FqGeC/vxvpPf7r4i4frNw4AAAD/r/7GGPz4f71cX53H72V2eS4fcrczy+7uxfs45MtBUifZ+2Xy0/O3L6en9PXf3gsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwjR04FgAAAAAQ5m+dRscGAAAAAAAAAAAAAAAAAAAAAOwVAAD//2YP2E4=") mknodat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0\x00', 0x21c0, 0x103) 0s ago: executing program 3 (id=2889): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') write$cgroup_int(r0, &(0x7f0000000080)=0xfffffffffffffffe, 0x12) kernel console output (not intermixed with test programs): .308308][ T4192] device veth0_vlan entered promiscuous mode [ 69.329314][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.346448][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.354623][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.369971][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.427736][ T4192] device veth1_vlan entered promiscuous mode [ 69.458701][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.477518][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.486579][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.499946][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.509515][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.525255][ T4203] device veth0_vlan entered promiscuous mode [ 69.533775][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.544862][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.570707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.579688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.610969][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.618836][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.622968][ T4203] device veth1_vlan entered promiscuous mode [ 69.639697][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.648058][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.659445][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.674507][ T4192] device veth0_macvtap entered promiscuous mode [ 69.712077][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.725666][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.734376][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.748775][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.757632][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.774429][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.790601][ T4192] device veth1_macvtap entered promiscuous mode [ 69.814168][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.824170][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.846855][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.864495][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.875753][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.894004][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.911146][ T4203] device veth0_macvtap entered promiscuous mode [ 69.935303][ T4203] device veth1_macvtap entered promiscuous mode [ 69.959549][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.985895][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.014275][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.030815][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.041468][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.052305][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.066433][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.107348][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.130978][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.151876][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.170930][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.201847][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.221007][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.237708][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.260745][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.290122][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.320120][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.333785][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.370879][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.393371][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.424113][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.456740][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.482208][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.502391][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.523600][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.539779][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.562824][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.570390][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.581965][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.603340][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.621510][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.631362][ T4326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 70.662913][ T4326] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 70.676964][ T4326] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 70.689438][ T4326] device bridge1 entered promiscuous mode [ 70.701867][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.723366][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.737917][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.747907][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.774737][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.793432][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.804139][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.817259][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.828588][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.839559][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.858765][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.871101][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.881017][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 70.881097][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 70.881181][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 70.896819][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.910885][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 70.920638][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 70.973910][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.992432][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.022959][ T4203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.051756][ T4203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.064119][ T4203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.075428][ T4203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.185112][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.191901][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.227322][ T4346] loop3: detected capacity change from 0 to 512 [ 71.290782][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.307793][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.348334][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.388540][ T4346] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 71.410655][ T4346] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.421282][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.421326][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.450585][ T4349] netlink: 'syz.2.24': attribute type 9 has an invalid length. [ 71.459852][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.504374][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.597292][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.627997][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.682233][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.719937][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.769251][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.084105][ T4384] loop0: detected capacity change from 0 to 128 [ 72.131780][ T4384] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.160492][ T4384] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.350340][ T4178] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.374677][ T4401] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 72.400305][ T4401] netlink: 'syz.3.45': attribute type 9 has an invalid length. [ 72.626641][ T4178] usb 5-1: Using ep0 maxpacket: 8 [ 72.777380][ T4417] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 72.791220][ T4178] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 72.809921][ T4178] usb 5-1: config 0 has no interface number 0 [ 72.822144][ T4389] loop1: detected capacity change from 0 to 32768 [ 72.827100][ T4178] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 238, setting to 64 [ 72.870836][ T4178] usb 5-1: config 0 interface 200 has no altsetting 0 [ 72.897966][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 72.946315][ T4389] (syz.1.39,4389,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 72.988851][ T4389] (syz.1.39,4389,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 73.027148][ T4389] (syz.1.39,4389,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 73.070572][ T4178] usb 5-1: New USB device found, idVendor=0b57, idProduct=d428, bcdDevice=48.b9 [ 73.082834][ T4178] usb 5-1: New USB device strings: Mfr=102, Product=2, SerialNumber=3 [ 73.109691][ T4389] JBD2: Ignoring recovery information on journal [ 73.132372][ T4178] usb 5-1: Product: syz [ 73.177496][ T4178] usb 5-1: Manufacturer: syz [ 73.213522][ T4178] usb 5-1: SerialNumber: syz [ 73.226974][ T4389] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 73.247188][ T4406] loop3: detected capacity change from 0 to 32768 [ 73.265692][ T4431] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4435] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4431] [ 73.289687][ T4178] usb 5-1: config 0 descriptor?? [ 73.371405][ T4406] ======================================================= [ 73.371405][ T4406] WARNING: The mand mount option has been deprecated and [ 73.371405][ T4406] and is ignored by this kernel. Remove the mand [ 73.371405][ T4406] option from the mount to silence this warning. [ 73.371405][ T4406] ======================================================= [ 73.480625][ T4406] XFS (loop3): Mounting V5 Filesystem [ 73.608797][ T4192] ocfs2: Unmounting device (7,1) on (node local) [ 73.634678][ T4178] usbhid 5-1:0.200: couldn't find an input interrupt endpoint [ 73.699479][ T4178] usb 5-1: USB disconnect, device number 2 [ 73.806459][ T4406] XFS (loop3): Ending clean mount [ 73.809138][ T4469] netlink: 'syz.0.72': attribute type 4 has an invalid length. [ 73.997941][ T4195] XFS (loop3): Unmounting Filesystem [ 74.072818][ T4477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 74.123288][ T4477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 74.234103][ T4484] loop2: detected capacity change from 0 to 128 [ 74.402630][ T4484] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 74.419438][ T4484] FAT-fs (loop2): Filesystem has been set read-only [ 74.486083][ T4194] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 74.767999][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 74.797288][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 74.876997][ T4178] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.965395][ T4541] loop0: detected capacity change from 0 to 512 [ 75.060412][ T4541] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.072202][ T4541] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.118577][ T4550] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 75.133867][ T4554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.113'. [ 75.143788][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.113'. [ 75.271096][ T4178] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.296717][ T4178] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 75.315628][ T4178] usb 5-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 75.329301][ T4178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.472805][ T4573] netlink: 'syz.2.121': attribute type 10 has an invalid length. [ 75.474582][ T4574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.122'. [ 75.508941][ T4573] netlink: 'syz.2.121': attribute type 10 has an invalid length. [ 75.719702][ T4592] loop1: detected capacity change from 0 to 256 [ 75.740457][ T4596] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 75.758806][ T4592] exfat: Deprecated parameter 'utf8' [ 75.776525][ T4592] exfat: Deprecated parameter 'utf8' [ 75.824588][ T4592] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 76.194820][ T4629] unsupported nlmsg_type 40 [ 76.207402][ T265] block nbd2: Attempted send on invalid socket [ 76.214834][ T265] blk_update_request: I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.231764][ T4626] REISERFS warning (device nbd2): sh-2006 read_super_block: bread failed (dev nbd2, block 2, size 4096) [ 76.260282][ T4178] rtsx_usb: probe of 5-1:1.0 failed with error -110 [ 76.295470][ T4637] dlm: plock device version mismatch: kernel (1.2.0), user (1.32.0) [ 76.299102][ T4178] usb 5-1: USB disconnect, device number 3 [ 76.317824][ T265] block nbd2: Attempted send on invalid socket [ 76.324208][ T265] blk_update_request: I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.336903][ T4626] REISERFS warning (device nbd2): sh-2006 read_super_block: bread failed (dev nbd2, block 16, size 4096) [ 76.367048][ T4626] REISERFS warning (device nbd2): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd2 [ 76.408438][ T4638] ALSA: mixer_oss: invalid OSS volume ';ʸgԊ8\>Pxi9 h~' [ 76.416647][ T4638] ALSA: mixer_oss: invalid OSS volume ' ȪUBFRнEV#d' [ 76.432811][ T4638] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 76.441939][ T4638] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 76.450892][ T4638] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 76.459340][ T4638] ALSA: mixer_oss: invalid OSS volume 'udFdsj@Jug0cd' [ 76.468240][ T4638] ALSA: mixer_oss: invalid OSS volume 'NW֓YZS%fV' [ 76.479092][ T4638] ALSA: mixer_oss: invalid OSS volume ''lȿDTBxN' [ 76.500430][ T4638] ALSA: mixer_oss: invalid OSS volume 'y' [ 76.506592][ T4638] ALSA: mixer_oss: invalid OSS volume '5y}9r~M+3' [ 76.515332][ T4265] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.553534][ T4638] ALSA: mixer_oss: invalid OSS volume '϶*kC9d7띦2;"' [ 76.575796][ T4638] ALSA: mixer_oss: invalid OSS volume '*ndV8mE5:4' [ 76.591259][ T4638] ALSA: mixer_oss: invalid OSS volume 'PKڵ1} {N&Ia 8*ʇ' [ 76.602750][ T4638] ALSA: mixer_oss: invalid OSS volume 'OC"['m/AO^G&-' [ 76.619074][ T4638] ALSA: mixer_oss: invalid OSS volume '' [ 76.634640][ T4638] ALSA: mixer_oss: invalid OSS volume '@HV-=f#o)U.N' [ 76.720348][ T4258] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.749056][ T4657] netlink: 'syz.1.157': attribute type 4 has an invalid length. [ 76.769244][ T4657] netlink: 'syz.1.157': attribute type 3 has an invalid length. [ 76.786218][ T4657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.157'. [ 76.908820][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.970688][ T4265] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 76.979184][ T4265] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.002760][ T4672] loop1: detected capacity change from 0 to 256 [ 77.054934][ T4678] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 77.054934][ T4678] z,@qJ#"h/.W1ȱnNC"C׈E)8+' [ 77.090470][ T4265] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 77.102337][ T4672] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 77.110843][ T4265] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 77.118890][ T4265] usb 1-1: Manufacturer: syz [ 77.150392][ T4258] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 77.158739][ T4178] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 77.168821][ T4265] usb 1-1: config 0 descriptor?? [ 77.174379][ T4258] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 77.200511][ T4258] usb 4-1: config 0 interface 0 has no altsetting 0 [ 77.232577][ T4265] igorplugusb 1-1:0.0: incorrect number of endpoints [ 77.420522][ T4258] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.452933][ T4258] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.477721][ T4258] usb 4-1: Product: syz [ 77.488879][ T4258] usb 4-1: Manufacturer: syz [ 77.494696][ T4258] usb 4-1: SerialNumber: syz [ 77.527786][ T4258] usb 4-1: config 0 descriptor?? [ 77.539433][ T4265] usb 1-1: USB disconnect, device number 2 [ 77.604496][ T4178] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 77.615795][ T4258] hub 4-1:0.0: bad descriptor, ignoring hub [ 77.628661][ T4258] hub: probe of 4-1:0.0 failed with error -5 [ 77.634927][ T4178] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 77.668431][ T4258] usb 4-1: selecting invalid altsetting 0 [ 77.675425][ T4178] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.870939][ T4178] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 77.885061][ T4178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.893535][ T4178] usb 5-1: Product: syz [ 77.897837][ T4178] usb 5-1: Manufacturer: syz [ 77.903526][ T4178] usb 5-1: SerialNumber: syz [ 77.925431][ T4178] usb 5-1: config 0 descriptor?? [ 78.041008][ T21] usb 4-1: USB disconnect, device number 2 [ 78.090624][ T4731] netlink: 68 bytes leftover after parsing attributes in process `syz.2.185'. [ 78.106627][ T4731] netlink: 96 bytes leftover after parsing attributes in process `syz.2.185'. [ 78.117014][ T4731] tc_dump_action: action bad kind [ 78.435954][ T4178] usb 5-1: USB disconnect, device number 4 [ 78.583024][ T4770] loop2: detected capacity change from 0 to 256 [ 78.746293][ T4782] xt_connbytes: Forcing CT accounting to be enabled [ 78.768168][ T4782] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.881045][ T4792] loop2: detected capacity change from 0 to 164 [ 79.226432][ T4821] device ipip0 entered promiscuous mode [ 79.236937][ T4824] loop3: detected capacity change from 0 to 256 [ 79.260014][ T4824] exfat: Deprecated parameter 'namecase' [ 79.290939][ T4824] exfat: Deprecated parameter 'namecase' [ 79.335776][ T4824] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d) [ 79.478362][ T4842] program syz.4.241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.560961][ T4848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.652360][ T4858] netlink: 'syz.4.248': attribute type 13 has an invalid length. [ 79.680308][ T4858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.248'. [ 79.896058][ T4873] loop1: detected capacity change from 0 to 4096 [ 80.018246][ T4873] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 80.351857][ T4910] loop3: detected capacity change from 0 to 256 [ 80.380354][ T4267] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.591199][ T4926] loop2: detected capacity change from 0 to 1024 [ 80.599346][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 80.640270][ T4267] usb 5-1: Using ep0 maxpacket: 16 [ 80.706008][ T4932] mmap: syz.1.285 (4932): VmData 175874048 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 80.770977][ T4926] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: none. [ 80.784917][ T4267] usb 5-1: config 0 has no interfaces? [ 80.932970][ T4920] loop0: detected capacity change from 0 to 32768 [ 80.971287][ T4267] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 80.985395][ T4267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.995499][ T4267] usb 5-1: Product: syz [ 80.999763][ T4267] usb 5-1: Manufacturer: syz [ 81.025433][ T4267] usb 5-1: SerialNumber: syz [ 81.035049][ T4920] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.279 (4920) [ 81.048992][ T4267] r8152-cfgselector 5-1: config 0 descriptor?? [ 81.123280][ T4920] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 81.146269][ T4920] BTRFS info (device loop0): enabling ssd optimizations [ 81.173727][ T4920] BTRFS info (device loop0): not using ssd optimizations [ 81.192003][ T4920] BTRFS info (device loop0): turning off barriers [ 81.209169][ T4920] BTRFS info (device loop0): use no compression [ 81.224140][ T4920] BTRFS info (device loop0): using free space tree [ 81.250621][ T4920] BTRFS info (device loop0): has skinny extents [ 81.331125][ T4267] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 81.357983][ T4963] loop3: detected capacity change from 0 to 2048 [ 81.401300][ T4267] nvmet: connect request for invalid subsystem testsubsys! [ 81.416873][ T4971] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 81.469497][ T4963] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.536795][ T4267] usb 5-1: USB disconnect, device number 5 [ 81.639300][ T4991] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.047000][ T4183] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop0 scanned by udevd (4183) [ 82.161864][ T4990] loop1: detected capacity change from 0 to 32768 [ 82.254680][ T4990] [ 82.254680][ T4990] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.254680][ T4990] [ 82.357629][ T5017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.376932][ T4990] ERROR: (device loop1): dtSearch: stack overrun! [ 82.376932][ T4990] [ 82.410389][ T5020] (unnamed net_device) (uninitialized): up delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 82.432652][ T4990] btstack dump: [ 82.443395][ T4990] bn = 0, index = 0 [ 82.452937][ T4990] bn = 0, index = 0 [ 82.460404][ T4990] bn = 0, index = 0 [ 82.470466][ T4990] bn = 0, index = 0 [ 82.474386][ T4990] bn = 0, index = 0 [ 82.488545][ T5020] (unnamed net_device) (uninitialized): peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 82.510311][ T4990] bn = 0, index = 0 [ 82.516686][ T4990] bn = 0, index = 0 [ 82.529679][ T4990] bn = 0, index = 0 [ 82.550345][ T5020] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 82.555885][ T4990] jfs_rename did not expect dtDelete to return rc = -5 [ 82.574000][ T5018] loop0: detected capacity change from 0 to 4096 [ 82.588466][ T5022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 82.604112][ T4990] ERROR: (device loop1): jfs_rename: [ 82.604112][ T4990] [ 82.643618][ T5018] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 82.705072][ T5018] ntfs: volume version 3.1. [ 82.713506][ T145] ERROR: (device loop1): diWrite: ixpxd invalid [ 82.713506][ T145] [ 82.745067][ T145] ERROR: (device loop1): txCommit: [ 82.745067][ T145] [ 82.770283][ T145] jfs_write_inode: jfs_commit_inode failed! [ 82.788307][ T4192] [ 82.788307][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.788307][ T4192] [ 82.808485][ T4192] [ 82.808485][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.808485][ T4192] [ 82.851108][ T5018] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 82.919321][ T5018] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 82.976191][ T5018] ntfs: (device loop0): __ntfs_bitmap_set_bits_in_run(): Failed to map first page (error -5), aborting. [ 83.040200][ T5018] ntfs: (device loop0): __ntfs_cluster_free(): Failed to clear first run (error -5), aborting. [ 83.080262][ T5018] ntfs: (device loop0): ntfs_truncate(): Failed to release cluster(s) (error code -5). Unmount and run chkdsk to recover the lost cluster(s). [ 83.162225][ T5042] loop3: detected capacity change from 0 to 1024 [ 83.262637][ T4189] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 83.328965][ T5044] loop4: detected capacity change from 0 to 4096 [ 83.400550][ T5044] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 83.426460][ T5050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 83.511916][ T5044] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 83.910756][ T5038] loop2: detected capacity change from 0 to 32768 [ 84.093495][ T5038] XFS (loop2): Mounting V5 Filesystem [ 84.173903][ T5038] XFS (loop2): Ending clean mount [ 84.200294][ T4994] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 84.240193][ T4997] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.272681][ T5107] program syz.0.352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.286706][ T4194] XFS (loop2): Unmounting Filesystem [ 84.480187][ T4997] usb 5-1: Using ep0 maxpacket: 32 [ 84.506500][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 84.640526][ T4997] usb 5-1: unable to get BOS descriptor or descriptor too short [ 84.720486][ T4997] usb 5-1: config 14 has an invalid interface number: 64 but max is 0 [ 84.728846][ T4997] usb 5-1: config 14 has no interface number 0 [ 84.735567][ T4994] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 84.750335][ T4994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.758361][ T4994] usb 4-1: Product: syz [ 84.770302][ T4997] usb 5-1: config 14 interface 64 has no altsetting 0 [ 84.783741][ T5143] netlink: 144 bytes leftover after parsing attributes in process `syz.1.370'. [ 84.792902][ T4994] usb 4-1: Manufacturer: syz [ 84.797614][ T4994] usb 4-1: SerialNumber: syz [ 84.811295][ T4994] usb 4-1: config 0 descriptor?? [ 84.852271][ T4994] usb 4-1: selecting invalid altsetting 1 [ 84.858145][ T4994] technisat-usb2: could not set alternate setting to 0 [ 84.876787][ T5143] team0: Port device team_slave_0 removed [ 84.886425][ T5143] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 84.936913][ T5143] syz.1.370 (5143) used greatest stack depth: 20144 bytes left [ 84.965919][ T4997] usb 5-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=e7.cf [ 84.980236][ T4997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.000602][ T4997] usb 5-1: Product: syz [ 85.005100][ T4997] usb 5-1: Manufacturer: syz [ 85.009731][ T4997] usb 5-1: SerialNumber: syz [ 85.044391][ T5155] netlink: 'syz.0.376': attribute type 15 has an invalid length. [ 85.056776][ T5155] netlink: 25 bytes leftover after parsing attributes in process `syz.0.376'. [ 85.066687][ T4994] technisat-usb2: firmware version: 0.0 [ 85.073428][ T4994] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 85.136668][ T5161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.377'. [ 85.206963][ T5163] x_tables: duplicate entry at hook 2 [ 85.226887][ T5165] loop2: detected capacity change from 0 to 256 [ 85.298726][ T4994] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 85.337513][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 85.346472][ T4994] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 85.365495][ T4994] usb 4-1: USB disconnect, device number 3 [ 85.382528][ T4997] belkin_sa 5-1:14.64: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 85.451821][ T4997] usb 5-1: bcdDevice: e7cf, bfc: 0 [ 85.468093][ T4997] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 85.498321][ T4997] usb 5-1: USB disconnect, device number 6 [ 85.536140][ T4997] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 85.556498][ T5179] netlink: 'syz.1.388': attribute type 2 has an invalid length. [ 85.566409][ T4997] belkin_sa 5-1:14.64: device disconnected [ 85.668997][ T5190] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 85.726837][ T5190] CIFS mount error: No usable UNC path provided in device string! [ 85.726837][ T5190] [ 85.744024][ T5185] loop1: detected capacity change from 0 to 8192 [ 85.747880][ T5190] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 86.070558][ T4258] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.330663][ T5224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 86.349050][ T5226] capability: warning: `syz.0.411' uses deprecated v2 capabilities in a way that may be insecure [ 86.554287][ T7] cfg80211: failed to load regulatory.db [ 86.630726][ T4258] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 86.639841][ T4258] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 86.684859][ T5213] loop4: detected capacity change from 0 to 32768 [ 86.699637][ T4258] usb 3-1: Product: syz [ 86.710108][ T4258] usb 3-1: SerialNumber: syz [ 86.719619][ T4258] usb 3-1: config 0 descriptor?? [ 86.785494][ T5252] loop1: detected capacity change from 0 to 128 [ 86.950254][ T5256] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 87.024045][ T4258] usb 3-1: USB disconnect, device number 2 [ 87.071803][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.428'. [ 87.239566][ T5270] openvswitch: netlink: Missing key (keys=48, expected=10000000) [ 87.572736][ T5290] Cannot find set identified by id 0 to match [ 87.860199][ T4994] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 87.879815][ T5320] syz.2.458 uses obsolete (PF_INET,SOCK_PACKET) [ 87.899800][ T5319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.457'. [ 87.931849][ T5319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.457'. [ 88.033821][ T5334] netlink: 292 bytes leftover after parsing attributes in process `syz.0.465'. [ 88.113935][ T4994] usb 5-1: Using ep0 maxpacket: 32 [ 88.230364][ T4994] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 88.248439][ T4994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.298290][ T4994] usb 5-1: config 0 descriptor?? [ 88.305098][ T5357] loop3: detected capacity change from 0 to 256 [ 88.352558][ T4994] gspca_main: sunplus-2.14.0 probing 041e:400b [ 88.363997][ T5357] FAT-fs (loop3): Directory bread(block 64) failed [ 88.403496][ T5357] FAT-fs (loop3): Directory bread(block 65) failed [ 88.426890][ T5357] FAT-fs (loop3): Directory bread(block 66) failed [ 88.436626][ T5357] FAT-fs (loop3): Directory bread(block 67) failed [ 88.458307][ T5357] FAT-fs (loop3): Directory bread(block 68) failed [ 88.461682][ T5367] usb usb8: usbfs: process 5367 (syz.0.481) did not claim interface 5 before use [ 88.485886][ T5357] FAT-fs (loop3): Directory bread(block 69) failed [ 88.503115][ T5357] FAT-fs (loop3): Directory bread(block 70) failed [ 88.509684][ T5357] FAT-fs (loop3): Directory bread(block 71) failed [ 88.536830][ T5357] FAT-fs (loop3): Directory bread(block 72) failed [ 88.554141][ T5357] FAT-fs (loop3): Directory bread(block 73) failed [ 88.570468][ T5369] loop1: detected capacity change from 0 to 4096 [ 88.656684][ T5369] ntfs3: loop1: Failed to load $Extend. [ 88.790271][ T4994] gspca_sunplus: reg_w_riv err -71 [ 88.795515][ T4994] sunplus: probe of 5-1:0.0 failed with error -71 [ 88.831810][ T5384] CIFS: Attempting to mount \\127.0.0.1\share [ 88.839612][ T5384] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.888206][ T4994] usb 5-1: USB disconnect, device number 7 [ 88.936082][ T5384] CIFS: VFS: Error connecting to socket. Aborting operation. [ 88.958836][ T5384] CIFS: VFS: cifs_mount failed w/return code = -111 [ 89.082887][ T5404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'. [ 89.125263][ T5406] loop0: detected capacity change from 0 to 8 [ 89.276015][ T26] audit: type=1800 audit(1793118945.673:2): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.501" name="file0" dev="loop0" ino=1 res=0 errno=0 [ 89.346521][ T5420] loop3: detected capacity change from 0 to 64 [ 89.649612][ T5443] netlink: 'syz.2.520': attribute type 1 has an invalid length. [ 89.763035][ T5454] netlink: 64 bytes leftover after parsing attributes in process `syz.2.525'. [ 90.064529][ T5486] netlink: 'syz.4.542': attribute type 1 has an invalid length. [ 90.122633][ T5491] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.544'. [ 90.182164][ T5496] netlink: 84 bytes leftover after parsing attributes in process `syz.2.547'. [ 90.268126][ T5504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.550'. [ 90.344482][ T5511] loop4: detected capacity change from 0 to 64 [ 90.369683][ T5514] netlink: 'syz.3.553': attribute type 3 has an invalid length. [ 90.417717][ T5517] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.558'. [ 90.503436][ T5511] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 90.556125][ T26] audit: type=1326 audit(1793118946.953:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5525 comm="syz.0.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b66ef6559 code=0x0 [ 90.590867][ T5522] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.697616][ T5532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.564'. [ 90.791746][ T5530] loop0: detected capacity change from 0 to 4096 [ 90.859131][ T5530] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 90.904187][ T5530] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 90.969732][ T5530] ntfs: volume version 3.1. [ 90.983661][ T5530] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 91.058667][ T5530] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 91.085465][ T5556] loop3: detected capacity change from 0 to 256 [ 91.103561][ T5530] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 91.406844][ T4178] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.428385][ T5578] netlink: ct family unspecified [ 91.443748][ T5578] openvswitch: netlink: Actions may not be safe on all matching packets [ 91.523265][ T5588] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 91.709307][ T5598] loop0: detected capacity change from 0 to 4096 [ 91.736312][ T5598] EXT4-fs (loop0): Ignoring removed bh option [ 91.789390][ T5598] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsdgroups,acl,bh,usrquota,,errors=continue. Quota mode: writeback. [ 91.810581][ T4178] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 91.829929][ T4178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.842643][ T4178] usb 3-1: config 0 descriptor?? [ 91.901436][ T4178] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 91.909961][ T5598] EXT4-fs error (device loop0): ext4_empty_dir:3156: inode #12: block 80: comm syz.0.598: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 91.917260][ T4178] usb 3-1: Detected FT-X [ 91.975117][ T5620] netlink: 'syz.4.607': attribute type 21 has an invalid length. [ 92.008687][ T5598] EXT4-fs warning (device loop0): ext4_empty_dir:3158: inode #12: comm syz.0.598: directory missing '..' [ 92.264691][ T5638] loop4: detected capacity change from 0 to 512 [ 92.280905][ T5643] loop3: detected capacity change from 0 to 16 [ 92.319054][ T5643] erofs: (device loop3): mounted with root inode @ nid 36. [ 92.330565][ T4178] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 92.360330][ T4178] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 92.376824][ T5643] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 92.397903][ T5638] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsddf,quota,,errors=continue. Quota mode: writeback. [ 92.420228][ T4178] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 92.445731][ T5643] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 92.459544][ T5638] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.478697][ T4178] usb 3-1: USB disconnect, device number 3 [ 92.497459][ T4178] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 92.558936][ T4178] ftdi_sio 3-1:0.0: device disconnected [ 92.893412][ T5670] openvswitch: netlink: Missing valid actions attribute. [ 92.900838][ T5670] openvswitch: netlink: Actions may not be safe on all matching packets [ 92.932280][ T5648] XFS (loop0): Mounting V5 Filesystem [ 93.089263][ T5648] XFS (loop0): Ending clean mount [ 93.202385][ T4189] XFS (loop0): Unmounting Filesystem [ 93.355877][ T4994] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.532683][ T5719] __nla_validate_parse: 2 callbacks suppressed [ 93.532700][ T5719] netlink: 3 bytes leftover after parsing attributes in process `syz.2.650'. [ 93.562016][ T5719] 0X: renamed from caif0 [ 93.569963][ T5719] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 93.720594][ T4994] usb 2-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 93.743805][ T4994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.774323][ T4994] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.818079][ T4994] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 93.848566][ T4994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.877922][ T4994] usb 2-1: config 0 descriptor?? [ 94.040564][ T5755] device wlan0 entered promiscuous mode [ 94.086770][ T5755] syz.3.666 (5755) used greatest stack depth: 19584 bytes left [ 94.141030][ T4994] ath6kl: Failed to submit usb control message: -71 [ 94.147822][ T4994] ath6kl: unable to send the bmi data to the device: -71 [ 94.172844][ T4994] ath6kl: Unable to send get target info: -71 [ 94.193395][ T4994] ath6kl: Failed to init ath6kl core: -71 [ 94.249560][ T4994] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 94.278108][ T4994] usb 2-1: USB disconnect, device number 2 [ 94.392719][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.680'. [ 94.407233][ T5784] netlink: 60 bytes leftover after parsing attributes in process `syz.4.680'. [ 94.416424][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.680'. [ 94.426942][ T5784] netlink: 60 bytes leftover after parsing attributes in process `syz.4.680'. [ 94.436126][ T5784] netlink: 104 bytes leftover after parsing attributes in process `syz.4.680'. [ 94.448676][ T5787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 94.548614][ T5795] sch_tbf: burst 2 is lower than device veth1_to_batadv mtu (1514) ! [ 94.590222][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.622099][ T5799] set_capacity_and_notify: 1 callbacks suppressed [ 94.622114][ T5799] loop2: detected capacity change from 0 to 64 [ 94.656643][ T5803] x_tables: duplicate underflow at hook 4 [ 94.697746][ T5805] device wlan0 entered promiscuous mode [ 94.987954][ T5825] netlink: 'syz.1.701': attribute type 1 has an invalid length. [ 95.011651][ T5827] loop3: detected capacity change from 0 to 24 [ 95.040473][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.095799][ T5827] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 95.109517][ T5827] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 95.131649][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.175254][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.190264][ T5827] romfs: read error for inode 0x70040 [ 95.335375][ T5822] loop2: detected capacity change from 0 to 32768 [ 95.357870][ T5839] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 95.406267][ T5844] netlink: 64 bytes leftover after parsing attributes in process `syz.3.710'. [ 95.420374][ T4994] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.470287][ T7] usb 1-1: string descriptor 0 read error: -22 [ 95.479374][ T7] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 95.512250][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.569613][ T5850] loop3: detected capacity change from 0 to 256 [ 95.593432][ T7] usb 1-1: selecting invalid altsetting 1 [ 95.604993][ T7] usb 1-1: unit 3 not found! [ 95.690434][ T4994] usb 5-1: Using ep0 maxpacket: 32 [ 95.781464][ T5857] ALSA: mixer_oss: invalid OSS volume 'u' [ 95.810389][ T7] usb 1-1: cannot request logical cluster ID: 0 (err: -5) [ 95.814444][ T4994] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 95.817633][ T7] usb 1-1: invalid MIXER UNIT descriptor 6 [ 95.856859][ T4994] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 95.905399][ T4994] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 95.936444][ T7] snd-usb-audio: probe of 1-1:1.0 failed with error -5 [ 95.944643][ T4994] usb 5-1: config 1 has no interface number 0 [ 95.980382][ T4994] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.016042][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.017328][ T4994] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 96.068532][ T4258] usb 1-1: USB disconnect, device number 3 [ 96.129581][ T4994] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 96.166243][ T4994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.233488][ T4994] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 96.336414][ T5854] loop2: detected capacity change from 0 to 32768 [ 96.419589][ T5872] loop3: detected capacity change from 0 to 32768 [ 96.445512][ T5854] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.713 (5854) [ 96.459138][ T4994] snd_usb_pod 5-1:1.1: invalid control EP [ 96.465188][ T4997] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.472885][ T4994] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 96.480017][ T4994] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 96.489449][ T4994] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 96.505739][ T5872] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.724 (5872) [ 96.517053][ T5854] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 96.535709][ T5854] BTRFS info (device loop2): enabling all of the rescue options [ 96.550182][ T5854] BTRFS info (device loop2): ignoring data csums [ 96.566017][ T5854] BTRFS info (device loop2): ignoring bad roots [ 96.572930][ T5854] BTRFS info (device loop2): disabling log replay at mount time [ 96.582072][ T5854] BTRFS info (device loop2): enabling auto defrag [ 96.589761][ T5854] BTRFS info (device loop2): disabling auto defrag [ 96.596965][ T5854] BTRFS info (device loop2): turning on async discard [ 96.640139][ T5854] BTRFS info (device loop2): enabling ssd optimizations [ 96.667528][ T5854] BTRFS info (device loop2): using spread ssd allocation scheme [ 96.679973][ T5874] libceph: resolve '1.7.0.0.1' (ret=-3): failed [ 96.684430][ T5001] usb 5-1: USB disconnect, device number 8 [ 96.702308][ T5854] BTRFS info (device loop2): turning on sync discard [ 96.712498][ T5854] BTRFS info (device loop2): turning off discard [ 96.718915][ T5854] BTRFS info (device loop2): turning on async discard [ 96.730420][ T4997] usb 2-1: Using ep0 maxpacket: 8 [ 96.736457][ T5854] BTRFS info (device loop2): turning on sync discard [ 96.756328][ T5854] BTRFS info (device loop2): using free space tree [ 96.776097][ T5854] BTRFS info (device loop2): has skinny extents [ 96.784360][ T4182] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4182) [ 96.890389][ T4997] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.990326][ T4997] usb 2-1: config 86 has an invalid interface number: 78 but max is 0 [ 96.998579][ T4997] usb 2-1: config 86 has no interface number 0 [ 97.018132][ T4997] usb 2-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024 [ 97.068493][ T4997] usb 2-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1023 [ 97.081863][ T4997] usb 2-1: config 86 interface 78 has no altsetting 0 [ 97.100929][ T4994] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.271118][ T4997] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 97.314842][ T4997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.343877][ T4997] usb 2-1: Product: syz [ 97.348203][ T4997] usb 2-1: Manufacturer: syz [ 97.367632][ T4997] usb 2-1: SerialNumber: syz [ 97.450733][ T5868] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.458261][ T5868] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.510499][ T4994] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.531266][ T5918] loop4: detected capacity change from 0 to 8192 [ 97.596520][ T5918] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 97.610291][ T4994] usb 1-1: config 1 has an invalid interface number: 46 but max is 0 [ 97.625858][ T4994] usb 1-1: config 1 has no interface number 0 [ 97.666097][ T5918] REISERFS (device loop4): using ordered data mode [ 97.678380][ T4994] usb 1-1: config 1 interface 46 has no altsetting 0 [ 97.713101][ T5918] reiserfs: using flush barriers [ 97.723149][ T5918] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.767816][ T5918] REISERFS (device loop4): checking transaction log (loop4) [ 97.789645][ T5918] REISERFS (device loop4): Using r5 hash to sort names [ 97.806280][ T4997] kvaser_usb 2-1:86.78: Cannot get software info, error -71 [ 97.814686][ T5918] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 97.829409][ T4997] kvaser_usb: probe of 2-1:86.78 failed with error -71 [ 97.848589][ T4997] usb 2-1: USB disconnect, device number 3 [ 97.900399][ T4994] usb 1-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=36.8b [ 97.929930][ T4994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.954952][ T4994] usb 1-1: Product: syz [ 97.961040][ T4994] usb 1-1: Manufacturer: syz [ 97.965854][ T4994] usb 1-1: SerialNumber: syz [ 98.311608][ T4994] comedi comedi5: could not set alternate setting 3 in high speed [ 98.328694][ T4994] usbduxsigma 1-1:1.46: driver 'usbduxsigma' failed to auto-configure device. [ 98.357520][ T4994] usbduxsigma: probe of 1-1:1.46 failed with error -71 [ 98.385627][ T4994] usb 1-1: USB disconnect, device number 4 [ 98.475887][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.746042][ T5950] loop2: detected capacity change from 0 to 32768 [ 98.848097][ T5950] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 99.003701][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 99.132227][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.773'. [ 99.156454][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.773'. [ 99.274464][ T6003] device xfrm0 entered promiscuous mode [ 99.306272][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.773'. [ 99.478175][ T5988] loop0: detected capacity change from 0 to 32768 [ 99.560404][ T6011] loop4: detected capacity change from 0 to 1024 [ 100.078867][ T6026] netlink: 292 bytes leftover after parsing attributes in process `syz.3.782'. [ 100.093199][ T5988] XFS (loop0): Mounting V5 Filesystem [ 100.278364][ T6043] openvswitch: netlink: Missing valid actions attribute. [ 100.286052][ T6043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.329652][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'. [ 100.398390][ T5988] XFS (loop0): Ending clean mount [ 100.488343][ T4189] XFS (loop0): Unmounting Filesystem [ 100.669584][ T6070] loop2: detected capacity change from 0 to 8 [ 100.809718][ T26] audit: type=1800 audit(1793118957.203:4): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.803" name="file0" dev="loop2" ino=1 res=0 errno=0 [ 100.980240][ T4994] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.223497][ T6106] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 101.229929][ T6099] loop4: detected capacity change from 0 to 4096 [ 101.260859][ T4994] usb 2-1: Using ep0 maxpacket: 32 [ 101.353356][ T6099] ntfs3: loop4: Failed to load $Extend. [ 101.380494][ T4994] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 101.389605][ T4994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.429662][ T4994] usb 2-1: config 0 descriptor?? [ 101.483622][ T4994] gspca_main: sunplus-2.14.0 probing 041e:400b [ 101.743943][ T6140] netlink: 84 bytes leftover after parsing attributes in process `syz.4.834'. [ 101.921648][ T6156] loop3: detected capacity change from 0 to 1024 [ 101.930283][ T4994] gspca_sunplus: reg_w_riv err -71 [ 101.935626][ T4994] sunplus: probe of 2-1:0.0 failed with error -71 [ 101.969497][ T4994] usb 2-1: USB disconnect, device number 4 [ 102.060466][ T6156] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 102.114351][ T145] hfsplus: b-tree write err: -5, ino 25 [ 102.121635][ T145] hfsplus: b-tree write err: -5, ino 4 [ 102.134132][ T145] hfsplus: b-tree write err: -5, ino 2 [ 102.261749][ T6171] netlink: 64 bytes leftover after parsing attributes in process `syz.3.844'. [ 102.509978][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'. [ 102.532966][ T6190] netlink: 'syz.2.851': attribute type 3 has an invalid length. [ 102.641614][ T6200] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.853'. [ 102.889762][ T6223] netlink: ct family unspecified [ 102.898862][ T6223] openvswitch: netlink: Actions may not be safe on all matching packets [ 102.949559][ T6221] loop2: detected capacity change from 0 to 4096 [ 103.062237][ T6233] netlink: 'syz.3.870': attribute type 4 has an invalid length. [ 103.090793][ T6233] netlink: 17 bytes leftover after parsing attributes in process `syz.3.870'. [ 103.112864][ T6221] ntfs3: loop2: Failed to load $Extend. [ 103.256068][ T6242] loop3: detected capacity change from 0 to 512 [ 103.307337][ T6245] netlink: 'syz.1.874': attribute type 9 has an invalid length. [ 103.327593][ T6242] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.393293][ T6242] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 103.490023][ T6257] loop0: detected capacity change from 0 to 512 [ 103.509410][ T6257] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.531785][ T6242] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.873: bg 0: block 4: invalid block bitmap [ 103.547468][ T6257] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.878: invalid indirect mapped block 9 (level 0) [ 103.565214][ T6257] EXT4-fs (loop0): 1 truncate cleaned up [ 103.571800][ T6257] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 103.576396][ T6242] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 103.636327][ T6242] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.873: invalid indirect mapped block 1 (level 1) [ 103.663524][ T6242] EXT4-fs (loop3): 1 truncate cleaned up [ 103.669212][ T6242] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.751757][ T6264] netlink: 'syz.1.880': attribute type 2 has an invalid length. [ 104.416133][ T6307] loop3: detected capacity change from 0 to 512 [ 104.535060][ T6307] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsddf,quota,,errors=continue. Quota mode: writeback. [ 104.565176][ T6307] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.775925][ T6321] netlink: 'syz.2.908': attribute type 7 has an invalid length. [ 104.780792][ T4994] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.840315][ T6321] netlink: 'syz.2.908': attribute type 8 has an invalid length. [ 105.037290][ T6329] loop0: detected capacity change from 0 to 4096 [ 105.115972][ T6329] ntfs3: loop0: Failed to load $Extend. [ 105.200537][ T4994] usb 5-1: unable to get BOS descriptor or descriptor too short [ 105.290340][ T4994] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.312084][ T4994] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.570331][ T4994] usb 5-1: string descriptor 0 read error: -22 [ 105.577861][ T4994] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 105.595529][ T4994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.664708][ T4994] usb 5-1: selecting invalid altsetting 1 [ 105.678993][ T4994] usb 5-1: unit 3 not found! [ 105.860653][ T6366] loop3: detected capacity change from 0 to 4096 [ 105.880323][ T4994] usb 5-1: cannot request logical cluster ID: 0 (err: -5) [ 105.899087][ T4994] usb 5-1: invalid MIXER UNIT descriptor 6 [ 105.960528][ T4994] snd-usb-audio: probe of 5-1:1.0 failed with error -5 [ 106.007998][ T6366] ntfs3: loop3: Failed to load $Extend. [ 106.089087][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.175104][ T5912] usb 5-1: USB disconnect, device number 9 [ 106.857661][ T6432] __nla_validate_parse: 2 callbacks suppressed [ 106.857678][ T6432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.962'. [ 106.890986][ T6435] netlink: 'syz.4.960': attribute type 9 has an invalid length. [ 106.924862][ T6435] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.960'. [ 106.940306][ T5922] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.991932][ T6439] netlink: 316 bytes leftover after parsing attributes in process `syz.0.964'. [ 107.021695][ T6441] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.044046][ T6443] xt_hashlimit: size too large, truncated to 1048576 [ 107.051032][ T6441] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.066886][ T6443] xt_hashlimit: max too large, truncated to 1048576 [ 107.080213][ T6441] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.096817][ T6441] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.127452][ T6441] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 107.153017][ T6441] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 107.181775][ T6441] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 107.194485][ T6441] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 107.440236][ T6455] netlink: 236 bytes leftover after parsing attributes in process `syz.0.971'. [ 107.576102][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.978'. [ 107.617819][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.978'. [ 107.687333][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.978'. [ 107.716751][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.978'. [ 107.735954][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.978'. [ 107.766291][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.978'. [ 107.784356][ T6479] netlink: 'syz.3.984': attribute type 13 has an invalid length. [ 108.136599][ T6516] netlink: 'syz.3.999': attribute type 41 has an invalid length. [ 108.172347][ T6516] netlink: 'syz.3.999': attribute type 17 has an invalid length. [ 108.204952][ T6516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.553371][ T6547] netlink: 'syz.2.1014': attribute type 9 has an invalid length. [ 108.836652][ T6571] nft_compat: unsupported protocol 5 [ 109.031545][ T6593] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 109.039395][ T6593] Error parsing options; rc = [-22] [ 109.086534][ T6599] trusted_key: encrypted_key: keyword 'newU_5' not recognized [ 109.759833][ T6661] netlink: 'syz.4.1073': attribute type 275 has an invalid length. [ 110.013582][ T6682] netlink: 'syz.3.1083': attribute type 1 has an invalid length. [ 110.042435][ T5912] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.082958][ T6682] openvswitch: netlink: Actions may not be safe on all matching packets [ 110.450322][ T5912] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.470487][ T5912] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.587947][ T6715] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 110.599817][ T6715] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 110.609159][ T6715] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 110.620966][ T6715] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 110.694443][ T5912] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 110.707337][ T6715] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 110.711577][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.730462][ T6715] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 110.750189][ T5912] usb 1-1: Product: syz [ 110.754474][ T5912] usb 1-1: Manufacturer: syz [ 110.759091][ T5912] usb 1-1: SerialNumber: syz [ 110.764174][ T6715] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 110.792736][ T6715] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 111.249364][ T6750] netlink: 'syz.3.1117': attribute type 2 has an invalid length. [ 111.315768][ T5912] usb 1-1: 0:1 : does not exist [ 111.350348][ T5912] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x300, type = 0 [ 111.376436][ T5912] usb 1-1: unit 0 not found! [ 111.380702][ T4994] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.440022][ T5912] usb 1-1: USB disconnect, device number 5 [ 111.523414][ T6768] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 111.560292][ T6772] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 111.698801][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.760424][ T4994] usb 3-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x6D, skipping [ 111.790916][ T4994] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 111.810718][ T6789] netlink: 'syz.3.1135': attribute type 10 has an invalid length. [ 111.820615][ T4994] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 111.875871][ T6789] team0: Port device syz_tun added [ 111.973475][ T6799] netlink: 'syz.0.1140': attribute type 16 has an invalid length. [ 111.984521][ T6799] netlink: 'syz.0.1140': attribute type 17 has an invalid length. [ 112.020350][ T4994] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 112.035829][ T6799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.043076][ T4994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.043104][ T4994] usb 3-1: Product: syz [ 112.043120][ T4994] usb 3-1: Manufacturer: syz [ 112.043136][ T4994] usb 3-1: SerialNumber: syz [ 112.072090][ T6799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.079526][ T6799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.101012][ T6799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.218210][ T6812] xt_hashlimit: max too large, truncated to 1048576 [ 112.252671][ T6812] No such timeout policy "syz1" [ 112.322462][ T4994] usb 3-1: Not enough endpoints found in device, aborting! [ 112.586845][ T5922] usb 3-1: USB disconnect, device number 4 [ 113.089651][ T6871] --map-set only usable from mangle table [ 113.263407][ T6885] ubi0: attaching mtd0 [ 113.269874][ T6885] ubi0: scanning is finished [ 113.326905][ T6885] ubi0: empty MTD device detected [ 113.530643][ T6896] validate_nla: 1 callbacks suppressed [ 113.530658][ T6896] netlink: 'syz.3.1188': attribute type 10 has an invalid length. [ 113.556636][ T6885] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 113.569875][ T6900] JFS: discard option not supported on device [ 113.608576][ T6885] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 113.625333][ T6900] Mount JFS Failure: -22 [ 113.630458][ T6885] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 113.637464][ T6885] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 113.640015][ T6900] jfs_mount failed w/return code = -22 [ 113.716472][ T6885] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 113.750774][ T6885] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 113.759257][ T6885] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2504196955 [ 113.840109][ T6885] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 113.865387][ T6899] ubi0: background thread "ubi_bgt0d" started, PID 6899 [ 114.286856][ T6940] device bond1 entered promiscuous mode [ 114.295590][ T6940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.430146][ T5001] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.672365][ T6969] __nla_validate_parse: 24 callbacks suppressed [ 114.672380][ T6969] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1225'. [ 114.790315][ T5001] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 114.809712][ T5001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.812927][ T6979] netlink: 964 bytes leftover after parsing attributes in process `syz.4.1229'. [ 114.848076][ T5001] usb 1-1: config 0 descriptor?? [ 114.891196][ T5001] cp210x 1-1:0.0: cp210x converter detected [ 114.970880][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1233'. [ 115.020591][ T4994] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 115.267045][ T7013] nvme_fabrics: nof]bEDE=Ԙب]O0!WSל޷}F'5m[ޕwh}1n@ 7E aoVMYm0;yl:&1<7-h:SXl7ZS`.7Ph\fPG4`5_*v搡]\yu$[&s_M needs to be < 223 bytes [ 115.292164][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.325853][ T5001] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 115.360410][ T5001] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 115.370323][ T5001] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 115.389484][ T5001] usb 1-1: cp210x converter now attached to ttyUSB0 [ 115.443496][ T5001] usb 1-1: USB disconnect, device number 6 [ 115.484641][ T5001] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 115.501386][ T7023] ubi0: detaching mtd0 [ 115.526828][ T7023] ubi0: mtd0 is detached [ 115.533799][ T5001] cp210x 1-1:0.0: device disconnected [ 115.550361][ T4994] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 115.568636][ T4994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.595196][ T4994] usb 2-1: Product: syz [ 115.603726][ T4994] usb 2-1: Manufacturer: syz [ 115.620372][ T4997] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.630442][ T4994] usb 2-1: SerialNumber: syz [ 115.649365][ T4994] usb 2-1: config 0 descriptor?? [ 115.705121][ T4994] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 115.733166][ T4994] dvb-usb: bulk message failed: -22 (4/0) [ 115.759898][ T4994] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 115.780285][ T4994] dvb-usb: bulk message failed: -22 (5/0) [ 115.786352][ T4994] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 115.834622][ T4994] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 115.856449][ T4994] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 115.913182][ T5921] usb 2-1: USB disconnect, device number 5 [ 115.984980][ T4997] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.164867][ T4997] usb 3-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 116.184388][ T4997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.204442][ T4997] usb 3-1: Product: syz [ 116.218950][ T4997] usb 3-1: Manufacturer: syz [ 116.229047][ T4997] usb 3-1: SerialNumber: syz [ 116.291558][ T4997] ipheth 3-1:1.0: Unable to find endpoints [ 116.526254][ T7075] capability: warning: `syz.3.1277' uses 32-bit capabilities (legacy support in use) [ 116.536495][ T4997] apple-mfi-fastcharge 3-1: USB disconnect, device number 5 [ 117.080952][ T7105] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 117.140965][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1294'. [ 117.389705][ T7137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1305'. [ 117.601846][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1316'. [ 117.612285][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1316'. [ 118.121494][ T7205] netlink: 'syz.0.1340': attribute type 3 has an invalid length. [ 118.139664][ T7205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1340'. [ 118.272732][ T7214] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 118.447105][ T7231] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1353'. [ 118.679414][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 118.708919][ T7261] syz.3.1364 (7261): /proc/7253/oom_adj is deprecated, please use /proc/7253/oom_score_adj instead. [ 118.713677][ T7254] tc_dump_action: action bad kind [ 118.864448][ T7269] xt_hashlimit: max too large, truncated to 1048576 [ 119.266669][ T7298] netlink: 'syz.3.1386': attribute type 1 has an invalid length. [ 119.490457][ T5922] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.565891][ T7324] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 119.631190][ T7331] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.707627][ T7341] __nla_validate_parse: 2 callbacks suppressed [ 119.707643][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1406'. [ 119.887173][ T5922] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.899979][ T5922] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 119.927487][ T5922] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 119.948484][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.983223][ T7359] netlink: 'syz.3.1415': attribute type 1 has an invalid length. [ 120.014119][ T7359] netlink: 'syz.3.1415': attribute type 2 has an invalid length. [ 120.024714][ T7359] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1415'. [ 120.235330][ T5922] usb 2-1: NFC: Can't submit reader poweron cmd response -90 [ 120.242940][ T5921] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 120.264621][ T5922] pn533_usb 2-1:1.0: NFC: Couldn't poweron the reader (error -90) [ 120.283401][ T5922] pn533_usb: probe of 2-1:1.0 failed with error -90 [ 120.340132][ T4178] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 120.449321][ T7371] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 120.467441][ T4997] usb 2-1: USB disconnect, device number 6 [ 120.493694][ T7371] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1422'. [ 120.513184][ T7371] NCSI netlink: No device for ifindex 0 [ 120.571460][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1423'. [ 120.587638][ T7373] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 120.672563][ T5921] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 120.690127][ T5921] usb 3-1: config 0 has no interface number 0 [ 120.696283][ T5921] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 120.718628][ T5921] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 120.730746][ T5921] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 120.742655][ T5921] usb 3-1: config 0 interface 2 has no altsetting 0 [ 120.758730][ T7380] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.956943][ T5921] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 120.976886][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.990336][ T4178] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 120.999436][ T4178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.017916][ T5921] usb 3-1: Product: syz [ 121.028381][ T5921] usb 3-1: Manufacturer: syz [ 121.033506][ T4178] usb 5-1: Product: syz [ 121.037740][ T4178] usb 5-1: Manufacturer: syz [ 121.042536][ T5921] usb 3-1: SerialNumber: syz [ 121.047912][ T4178] usb 5-1: SerialNumber: syz [ 121.055026][ T5921] usb 3-1: config 0 descriptor?? [ 121.090818][ T7355] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.097948][ T7355] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.247075][ T7411] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1442'. [ 121.298662][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 121.308105][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 121.451745][ T7427] Sensor A: ================= START STATUS ================= [ 121.459374][ T7427] Sensor A: Test Pattern: 75% Colorbar [ 121.476417][ T7427] Sensor A: Show Information: All [ 121.490643][ T7427] Sensor A: Vertical Flip: false [ 121.496087][ T7427] Sensor A: Horizontal Flip: false [ 121.503917][ T7427] Sensor A: Brightness: 128 [ 121.510438][ T7427] Sensor A: Contrast: 128 [ 121.515905][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 121.558625][ T7427] Sensor A: Hue: 0 [ 121.568797][ T7427] Sensor A: Saturation: 128 [ 121.569756][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 121.588972][ T7427] Sensor A: ================== END STATUS ================== [ 121.612641][ T5921] usb 3-1: USB disconnect, device number 6 [ 121.806575][ T7450] nvme_fabrics: no handler found for transport fc-raddrR+0x333:pn-0x0444444444444444+host_traddr?nn-0x11111111111111117x:pn-0x22r222. [ 121.830370][ T4178] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 122.161014][ T7476] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1474'. [ 122.191761][ T7480] netlink: 'syz.1.1475': attribute type 11 has an invalid length. [ 122.243955][ T4997] usb 5-1: USB disconnect, device number 10 [ 122.370574][ T7496] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.1485' sets config #0 [ 122.582450][ T7519] [U] .h0FwZ,iqgҏV2sO [ 122.599432][ T7519] [U] ` w*BBOLhU [ 122.603994][ T7519] [U] w$n|#%o.z\̧mРw [ 122.620501][ T7519] [U] R{ꫢ S [ 122.631425][ T7518] [U] [ 122.720625][ T7531] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 122.750167][ T7531] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 122.880147][ T4178] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 122.888006][ T4178] ath9k_htc: Failed to initialize the device [ 122.902687][ T4997] usb 5-1: ath9k_htc: USB layer deinitialized [ 123.180561][ T7560] smb3: Bad value for 'uid' [ 124.598377][ T7680] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 124.799607][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.825259][ T7693] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 125.041939][ T7721] __nla_validate_parse: 7 callbacks suppressed [ 125.041955][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1593'. [ 125.108637][ T7724] usb usb8: usbfs: process 7724 (syz.2.1596) did not claim interface 0 before use [ 125.139026][ T7728] openvswitch: netlink: Actions may not be safe on all matching packets [ 125.260349][ T5921] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.463306][ T7749] netlink: 448 bytes leftover after parsing attributes in process `syz.4.1607'. [ 125.680321][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 125.700168][ T5921] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 125.721985][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1615'. [ 125.782334][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1617'. [ 125.810449][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1617'. [ 125.839342][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1617'. [ 125.930275][ T5921] usb 4-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 125.959417][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.998226][ T5921] usb 4-1: Product: syz [ 126.018500][ T5921] usb 4-1: Manufacturer: syz [ 126.038815][ T5921] usb 4-1: SerialNumber: syz [ 126.101920][ T5921] whiteheat 4-1:1.0: Connect Tech - WhiteHEAT converter detected [ 126.252941][ T21] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 126.320692][ T7798] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1631'. [ 126.350303][ T5921] usb 4-1: Connect Tech - WhiteHEAT: Couldn't send command [-71] [ 126.369138][ T5921] usb 4-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging [ 126.389658][ T5921] usb 4-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking) [ 126.408295][ T7801] netlink: 'syz.0.1634': attribute type 1 has an invalid length. [ 126.420278][ T5921] usb 4-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com [ 126.459782][ T5921] usb 4-1: USB disconnect, device number 4 [ 126.630351][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.655744][ T21] usb 5-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 126.677756][ T21] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 126.819696][ T7834] IPv6: sit1: Disabled Multicast RS [ 126.831215][ T21] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 126.854582][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.884263][ T21] usb 5-1: Product: syz [ 126.899701][ T21] usb 5-1: Manufacturer: syz [ 126.919266][ T21] usb 5-1: SerialNumber: syz [ 127.354451][ T7870] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 127.410190][ C1] usb 5-1: received EP1 urb->status = -71 [ 127.417929][ T21] usb 5-1: unable to init card! (ret=-110) [ 127.424463][ T21] snd-usb-caiaq: probe of 5-1:1.0 failed with error -110 [ 127.441828][ T21] usb 5-1: USB disconnect, device number 11 [ 127.588955][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.613328][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.639922][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.818840][ T7885] delete_channel: no stack [ 128.111327][ T7911] 9p: Unknown access argument [ 128.271701][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'. [ 128.386752][ T7929] openvswitch: netlink: Actions may not be safe on all matching packets [ 128.395495][ T7930] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1697'. [ 128.409251][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'. [ 128.414932][ T7927] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 128.486949][ T7932] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 128.610215][ T21] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 128.634525][ T7940] comedi comedi0: Minor 3 could not be opened [ 128.990357][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.020294][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.136443][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 129.139077][ T7973] netlink: 'syz.4.1718': attribute type 2 has an invalid length. [ 129.154180][ T7973] netlink: 'syz.4.1718': attribute type 1 has an invalid length. [ 129.156878][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 129.190258][ T21] usb 4-1: SerialNumber: syz [ 129.210797][ T4994] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 129.242620][ T21] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 129.256448][ T21] usb-storage 4-1:1.0: USB Mass Storage device detected [ 129.292049][ T21] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 129.330199][ T21] scsi host1: usb-storage 4-1:1.0 [ 129.460419][ T4994] usb 1-1: Using ep0 maxpacket: 32 [ 129.630419][ T4994] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.710338][ T4994] usb 1-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 129.728915][ T4994] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 129.728958][ T4994] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.901728][ T4994] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=40.40 [ 129.924089][ T4994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.955556][ T4994] usb 1-1: Product: syz [ 129.967403][ T4994] usb 1-1: Manufacturer: syz [ 129.978040][ T4994] usb 1-1: SerialNumber: syz [ 130.117263][ T8027] __nla_validate_parse: 3 callbacks suppressed [ 130.117280][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'. [ 130.281353][ T4994] cdc_ncm 1-1:1.0: skipping garbage [ 130.286713][ T4994] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 130.306893][ T4994] cdc_ncm 1-1:1.0: bind() failure [ 130.324759][ T8043] netlink: 106 bytes leftover after parsing attributes in process `syz.1.1746'. [ 130.345090][ T4994] usb 1-1: USB disconnect, device number 7 [ 130.631538][ T5001] usb 4-1: USB disconnect, device number 5 [ 131.212747][ T8100] netlink: 'syz.2.1770': attribute type 11 has an invalid length. [ 131.263111][ T8100] netlink: 448 bytes leftover after parsing attributes in process `syz.2.1770'. [ 131.305700][ T8106] comedi comedi0: Minor 3 could not be opened [ 131.381563][ T8110] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.429542][ T8114] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1776'. [ 131.478593][ T8114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.888806][ T8164] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1800'. [ 131.944602][ T5001] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 131.988945][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.046071][ T8172] sock: sock_timestamping_bind_phc: sock not bind to device [ 132.210750][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.221870][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.229459][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.250338][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 132.309685][ T8194] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 132.325667][ T5001] usb 1-1: config index 0 descriptor too short (expected 45, got 25) [ 132.340196][ T5001] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 132.370401][ T21] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.388298][ T5001] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.402000][ T21] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.540535][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 132.555205][ T21] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 132.563970][ T21] usb 4-1: Product: syz [ 132.573945][ T21] usb 4-1: Manufacturer: syz [ 132.580333][ T5001] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 132.604049][ T5001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.616645][ T5001] usb 1-1: Product: syz [ 132.624546][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.628641][ T5001] usb 1-1: Manufacturer: syz [ 132.636229][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.642827][ T21] hub 4-1:4.0: USB hub found [ 132.655624][ T5001] usb 1-1: SerialNumber: syz [ 132.711178][ T5001] rtl8150 1-1:1.0: couldn't find required endpoints [ 132.735348][ T5001] rtl8150: probe of 1-1:1.0 failed with error -5 [ 132.801398][ T8226] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 132.850302][ T21] hub 4-1:4.0: 2 ports detected [ 132.876274][ T8232] xt_TCPMSS: Only works on TCP SYN packets [ 132.951348][ T4178] usb 1-1: USB disconnect, device number 8 [ 133.070422][ T21] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 133.077361][ T21] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 133.131268][ T21] usb 4-1: USB disconnect, device number 6 [ 133.167644][ T8250] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1844'. [ 133.403571][ T8269] device geneve1 entered promiscuous mode [ 133.568284][ T8281] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1857'. [ 133.670493][ T8289] ksmbd: Unknown IPC event: 6, ignore. [ 133.972787][ T8320] netlink: 'syz.0.1877': attribute type 10 has an invalid length. [ 133.979928][ T8318] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1876'. [ 134.230417][ T4178] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 134.293771][ T8345] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 134.326952][ T8345] overlayfs: overlapping lowerdir path [ 134.369512][ T8349] fuse: Bad value for 'fd' [ 134.661729][ T4178] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.682820][ T4178] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.704869][ T4178] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.940215][ T5912] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.948225][ T4178] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 134.968243][ T4178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.976843][ T4178] usb 5-1: Product: syz [ 134.990128][ T4178] usb 5-1: Manufacturer: syz [ 134.995004][ T4178] usb 5-1: SerialNumber: syz [ 135.166854][ T4994] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.203292][ T8395] nfs: Unknown parameter 'ntext' [ 135.287105][ T4178] usb 5-1: Cannot retrieve CPort count: -71 [ 135.293355][ T4178] usb 5-1: Cannot retrieve CPort count: -71 [ 135.299304][ T4178] es2_ap_driver: probe of 5-1:1.0 failed with error -71 [ 135.321975][ T4178] usb 5-1: USB disconnect, device number 12 [ 135.342561][ T5912] usb 3-1: config 1 has an invalid descriptor of length 51, skipping remainder of the config [ 135.361217][ T5912] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 135.371136][ T5912] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 89, changing to 10 [ 135.390394][ T5912] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 33137, setting to 1024 [ 135.410156][ T4994] usb 2-1: Using ep0 maxpacket: 8 [ 135.570280][ T4994] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.596560][ T8411] netlink: 'syz.0.1921': attribute type 6 has an invalid length. [ 135.610309][ T5912] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 135.630088][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.638258][ T5912] usb 3-1: Product: syz [ 135.650111][ T5912] usb 3-1: Manufacturer: syz [ 135.654776][ T5912] usb 3-1: SerialNumber: syz [ 135.660452][ T4994] usb 2-1: config 64 has an invalid interface number: 138 but max is 0 [ 135.677678][ T4994] usb 2-1: config 64 has no interface number 0 [ 135.694462][ T4994] usb 2-1: config 64 interface 138 has no altsetting 0 [ 135.778528][ T8419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1925'. [ 135.870431][ T4994] usb 2-1: New USB device found, idVendor=03f0, idProduct=0107, bcdDevice= 2.00 [ 135.897445][ T4994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.917764][ T4994] usb 2-1: Product: syz [ 135.934637][ T4994] usb 2-1: Manufacturer: syz [ 135.939394][ T4994] usb 2-1: SerialNumber: syz [ 136.050650][ T5912] usb 3-1: 0:2 : does not exist [ 136.078689][ T8441] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1936'. [ 136.089989][ T5912] usb 3-1: USB disconnect, device number 7 [ 136.119778][ T8441] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 136.260732][ T8451] ip6t_REJECT: ECHOREPLY is not supported [ 136.290806][ T4994] usb-storage 2-1:64.138: USB Mass Storage device detected [ 136.372265][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.392436][ T4994] usb 2-1: USB disconnect, device number 7 [ 136.808100][ T8478] netlink: 'syz.0.1953': attribute type 10 has an invalid length. [ 136.942653][ T8482] device wlan0 entered promiscuous mode [ 137.364426][ T8510] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1970'. [ 137.396142][ T8510] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1970'. [ 137.426731][ T8510] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1970'. [ 137.430465][ T21] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 137.459147][ T8510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1970'. [ 137.505038][ T8520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1974'. [ 137.677579][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1982'. [ 137.715889][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1982'. [ 137.736894][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1982'. [ 137.764617][ T8546] PM: Enabling pm_trace changes system date and time during resume. [ 137.764617][ T8546] PM: Correct system time has to be restored manually after resume. [ 137.810368][ T5001] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 137.830298][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.848768][ T21] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 137.868808][ T21] usb 5-1: config 1 interface 0 has no altsetting 0 [ 138.030644][ T21] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 138.045860][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.072019][ T21] usb 5-1: Product: syz [ 138.076262][ T21] usb 5-1: Manufacturer: syz [ 138.092971][ T21] usb 5-1: SerialNumber: syz [ 138.139287][ T8577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.145432][ T21] usb-storage 5-1:1.0: USB Mass Storage device detected [ 138.180954][ T21] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 138.364454][ T4997] usb 5-1: USB disconnect, device number 13 [ 138.380629][ T5001] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 138.406893][ T5001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.425489][ T5001] usb 2-1: Product: syz [ 138.429827][ T5001] usb 2-1: Manufacturer: syz [ 138.439721][ T5001] usb 2-1: SerialNumber: syz [ 138.470373][ T5001] usb 2-1: config 0 descriptor?? [ 138.522843][ T5001] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 138.730174][ T5001] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 138.737605][ T5001] sq905c 2-1:0.0: Get version command failed [ 138.750108][ T4994] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 138.768752][ T5001] sq905c: probe of 2-1:0.0 failed with error -71 [ 138.788455][ T5001] usb 2-1: USB disconnect, device number 8 [ 138.814150][ T26] audit: type=1107 audit(1793118995.203:5): pid=8616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 139.270424][ T4994] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.375062][ T4994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.383751][ T4994] usb 4-1: Product: syz [ 139.388023][ T4994] usb 4-1: Manufacturer: syz [ 139.392988][ T4994] usb 4-1: SerialNumber: syz [ 139.490999][ T5912] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 139.921147][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.932454][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 139.955063][ T5912] usb 3-1: New USB device found, idVendor=0a5c, idProduct=21e8, bcdDevice= 1.00 [ 139.975661][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.000325][ T4178] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 140.044835][ T4994] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 140.276039][ T5921] usb 3-1: USB disconnect, device number 8 [ 140.428059][ T8731] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 140.454218][ T21] usb 4-1: USB disconnect, device number 7 [ 140.570522][ T4178] usb 2-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 140.587684][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.596351][ T4178] usb 2-1: Product: syz [ 140.601230][ T4178] usb 2-1: Manufacturer: syz [ 140.605880][ T4178] usb 2-1: SerialNumber: syz [ 140.622235][ T4178] usb 2-1: config 0 descriptor?? [ 140.631487][ T8744] netlink: 'syz.4.2083': attribute type 2 has an invalid length. [ 140.672076][ T4178] hub 2-1:0.0: bad descriptor, ignoring hub [ 140.678131][ T4178] hub: probe of 2-1:0.0 failed with error -5 [ 140.691118][ T4178] usbsevseg 2-1:0.0: USB 7 Segment device now attached [ 140.800247][ T5921] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 141.003896][ T5001] usb 2-1: USB disconnect, device number 9 [ 141.015693][ T5001] usbsevseg 2-1:0.0: USB 7 Segment now disconnected [ 141.101969][ T4994] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 141.109116][ T4994] ath9k_htc: Failed to initialize the device [ 141.127729][ T21] usb 4-1: ath9k_htc: USB layer deinitialized [ 141.210216][ T4997] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 141.270442][ T5921] usb 1-1: unable to get BOS descriptor or descriptor too short [ 141.370297][ T5921] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.390847][ T5921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.468848][ T8808] xt_hashlimit: max too large, truncated to 1048576 [ 141.486585][ T8808] xt_hashlimit: overflow, try lower: 137438953472/8 [ 141.537701][ T8811] __nla_validate_parse: 10 callbacks suppressed [ 141.537718][ T8811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2116'. [ 141.570337][ T4997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 141.590729][ T5921] usb 1-1: New USB device found, idVendor=0582, idProduct=4201, bcdDevice= 0.40 [ 141.610293][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.629434][ T5921] usb 1-1: Product: syz [ 141.638628][ T5921] usb 1-1: Manufacturer: syz [ 141.649093][ T5921] usb 1-1: SerialNumber: syz [ 141.750488][ T4997] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 141.769881][ T4997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.790486][ T4997] usb 5-1: Product: syz [ 141.794864][ T4997] usb 5-1: Manufacturer: syz [ 141.799847][ T4997] usb 5-1: SerialNumber: syz [ 141.821462][ T4997] usb 5-1: config 0 descriptor?? [ 141.871824][ T4997] powermate: probe of 5-1:0.0 failed with error -5 [ 142.036914][ T5921] usb 1-1: unit 2 not found! [ 142.043137][ T5921] usb 1-1: unit 240 not found! [ 142.084777][ T5921] usb 1-1: USB disconnect, device number 9 [ 142.102906][ T5922] usb 5-1: USB disconnect, device number 14 [ 142.104084][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2128'. [ 142.149064][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.388169][ T8849] netlink: 'syz.1.2133': attribute type 1 has an invalid length. [ 143.131561][ T8911] 0x000000000000-0x000000000008 : "" [ 143.188660][ T8911] ftl_cs: FTL header corrupt! [ 143.230398][ T8918] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2168'. [ 143.718525][ T8958] netlink: 'syz.2.2190': attribute type 10 has an invalid length. [ 143.811935][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.820289][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.881405][ T8958] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.888917][ T8958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.897528][ T8958] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.904692][ T8958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.972796][ T8958] team0: Port device bridge0 added [ 144.521320][ T9015] ip6t_rt: address list match requested but addrnr is 0 [ 144.600598][ T9019] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2219'. [ 144.650980][ T9024] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2221'. [ 144.736435][ T9032] sctp: [Deprecated]: syz.1.2225 (pid 9032) Use of int in max_burst socket option. [ 144.736435][ T9032] Use struct sctp_assoc_value instead [ 144.860734][ T9044] syz.4.2231 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 145.010902][ T9056] 0x000000000000-0x000000000008 : "" [ 145.047685][ T9056] ftl_cs: FTL header corrupt! [ 145.070225][ T9058] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2237'. [ 145.111149][ T9063] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.272401][ T9073] cifs: Unknown parameter 'h}# [ 145.272401][ T9073] [bIT&:"1:ӭ'4,Zz-#F<]%gC [ 145.272401][ T9073] SȘȞZ6' [ 145.579519][ T9095] 0x000000000000-0x000000000008 : "" [ 145.629976][ T9095] ftl_cs: FTL header corrupt! [ 145.880174][ T21] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 145.978579][ T9129] ieee802154 phy0 wpan0: encryption failed: -90 [ 146.120282][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 146.196171][ T9147] kernel profiling enabled (shift: 63) [ 146.215727][ T9147] profiling shift: 63 too large [ 146.240341][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 146.324744][ T9157] openvswitch: netlink: Actions may not be safe on all matching packets [ 146.423709][ T21] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 146.450098][ T21] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 146.458368][ T21] usb 5-1: Product: syz [ 146.496616][ T21] usb 5-1: Manufacturer: syz [ 146.504243][ T21] usb 5-1: SerialNumber: syz [ 146.587288][ T9182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2299'. [ 146.780685][ T21] usb 5-1: Invalid connection information received from device [ 146.983761][ T21] usb 5-1: USB disconnect, device number 15 [ 147.628916][ T9279] SET target dimension over the limit! [ 147.692175][ T9283] bond0: (slave bond_slave_1): Releasing backup interface [ 147.852252][ T9301] netlink: 'syz.4.2348': attribute type 15 has an invalid length. [ 148.090157][ T4994] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 148.156167][ T9319] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 148.192199][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2359'. [ 148.410794][ T4994] usb 2-1: not running at top speed; connect to a high speed hub [ 148.490540][ T4994] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.513811][ T4994] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.543645][ T4994] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 148.580208][ T4994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.792207][ T9353] lo speed is unknown, defaulting to 1000 [ 148.819712][ T9353] lo speed is unknown, defaulting to 1000 [ 148.841059][ T9353] lo speed is unknown, defaulting to 1000 [ 148.863962][ T9353] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.910357][ T4994] usb 2-1: string descriptor 0 read error: -71 [ 148.917203][ T4994] usb 2-1: Found UVC 1.00 device (046d:0825) [ 148.933012][ T9353] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 148.938231][ T4994] usb 2-1: No valid video chain found. [ 148.980984][ T4994] usb 2-1: USB disconnect, device number 10 [ 149.036264][ T9353] lo speed is unknown, defaulting to 1000 [ 149.071207][ T9353] lo speed is unknown, defaulting to 1000 [ 149.098528][ T9353] lo speed is unknown, defaulting to 1000 [ 149.129607][ T9353] lo speed is unknown, defaulting to 1000 [ 149.159745][ T9353] lo speed is unknown, defaulting to 1000 [ 149.274556][ T9376] tmpfs: Bad value for 'mpol' [ 149.650725][ T9405] bond0: (slave bond_slave_1): Releasing backup interface [ 149.722357][ T9409] mmap: syz.4.2403 (9409) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 149.975612][ T9436] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2415'. [ 150.259489][ T9467] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2432'. [ 150.535984][ T9488] netlink: 'syz.4.2443': attribute type 1 has an invalid length. [ 150.583184][ T9488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.718326][ T9500] comedi comedi4: bad chanlist[0]=0x00000899 chan=2201 range length=2 [ 150.876655][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'. [ 151.127029][ T9527] binder: 9526:9527 ioctl c00c620f 0 returned -14 [ 151.161606][ T9531] netlink: 'syz.1.2464': attribute type 39 has an invalid length. [ 151.176264][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2464'. [ 151.187191][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2464'. [ 151.224364][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2464'. [ 151.246754][ T9531] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 151.262527][ T4994] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 151.462182][ T9547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2472'. [ 151.478878][ T9549] 9pnet: p9_fd_create_unix (9549): problem connecting socket: dev: -111 [ 151.559457][ T9555] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 151.588411][ T9555] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2475'. [ 151.650445][ T4994] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.692381][ T4994] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 151.701974][ T9561] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2479'. [ 151.720612][ T4994] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.920295][ T4994] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.939721][ T4994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.961554][ T4994] usb 5-1: Product: syz [ 151.970390][ T4994] usb 5-1: Manufacturer: syz [ 151.975413][ T4994] usb 5-1: SerialNumber: syz [ 152.051439][ T4994] cdc_ncm 5-1:1.0: skipping garbage [ 152.057098][ T4994] usb 5-1: selecting invalid altsetting 1 [ 152.071682][ T9581] [U] [ 152.240455][ T9600] netlink: 'syz.2.2498': attribute type 5 has an invalid length. [ 152.490338][ T4994] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 152.496914][ T4994] cdc_ncm 5-1:1.0: bind() failure [ 152.543116][ T4994] usb 5-1: USB disconnect, device number 16 [ 152.631840][ T9637] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2517'. [ 152.714303][ T9645] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2519'. [ 152.872625][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2528'. [ 153.084896][ T9677] 8021q: VLANs not supported on gre0 [ 153.136397][ T9681] siw: device registration error -23 [ 153.228076][ T9686] netlink: 'syz.1.2541': attribute type 29 has an invalid length. [ 153.250326][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'. [ 153.267149][ T9689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2543'. [ 153.295475][ T9686] netlink: 'syz.1.2541': attribute type 29 has an invalid length. [ 153.308630][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'. [ 153.403611][ T9700] 9pnet: p9_fd_create_unix (9700): problem connecting socket: dev: -111 [ 153.638342][ T9715] netlink: 'syz.2.2555': attribute type 21 has an invalid length. [ 153.657718][ T9715] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2555'. [ 153.676381][ T9717] autofs4:pid:9717:autofs_fill_super: called with bogus options [ 154.039886][ T9741] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 154.071577][ T9741] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2568'. [ 154.097894][ T9745] IPv6: Can't replace route, no match found [ 154.336262][ T9756] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2576'. [ 154.921281][ T9803] overlayfs: missing 'lowerdir' [ 155.090169][ T5912] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.098743][ T9813] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 155.253296][ T9828] ip_tables: iptables: counters copy to user failed while replacing table [ 155.674547][ T5912] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 155.694036][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.721096][ T5912] usb 4-1: Product: syz [ 155.739001][ T5912] usb 4-1: Manufacturer: syz [ 155.757766][ T5912] usb 4-1: SerialNumber: syz [ 155.778374][ T5912] usb 4-1: config 0 descriptor?? [ 155.852530][ T5912] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 156.241304][ T9894] netlink: 'syz.4.2644': attribute type 3 has an invalid length. [ 156.260284][ T5921] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.278541][ T9897] autofs4:pid:9897:autofs_fill_super: called with bogus options [ 156.286827][ T5912] gspca_sunplus: reg_w_riv err -71 [ 156.292439][ T5912] sunplus: probe of 4-1:0.0 failed with error -71 [ 156.311559][ T5912] usb 4-1: USB disconnect, device number 8 [ 156.394366][ T9905] x_tables: unsorted entry at hook 3 [ 156.538016][ T9918] netlink: 'syz.4.2656': attribute type 9 has an invalid length. [ 156.546205][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 156.738448][ T5921] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 156.751375][ T5921] usb 3-1: config 0 has no interface number 0 [ 156.941316][ T5921] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 156.970448][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.978632][ T5921] usb 3-1: Product: syz [ 157.020312][ T5921] usb 3-1: Manufacturer: syz [ 157.025106][ T5921] usb 3-1: SerialNumber: syz [ 157.046165][ T5921] usb 3-1: config 0 descriptor?? [ 157.256234][ T9983] netlink: 'syz.3.2687': attribute type 10 has an invalid length. [ 157.313050][ T9987] __nla_validate_parse: 5 callbacks suppressed [ 157.313068][ T9987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2689'. [ 157.350315][ T5921] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 157.358068][ T5921] usb 3-1: Failed to initialize entity for entity 6 [ 157.372803][ T5921] usb 3-1: Failed to register entities (-22). [ 157.469651][ T9983] device veth0_vlan left promiscuous mode [ 157.488176][ T9983] device veth0_vlan entered promiscuous mode [ 157.509911][ T9983] team0: Device veth0_vlan failed to register rx_handler [ 157.555841][ T5921] usb 3-1: USB disconnect, device number 9 [ 158.116351][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.138963][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.167092][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.187068][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.203627][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.214717][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.237959][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.259890][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.269419][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.290195][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.297706][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.323212][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.337460][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.356228][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.366973][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.378899][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.394420][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.405102][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.427561][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.447815][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.456431][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.471015][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.478890][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.500184][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.518101][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.570169][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.592532][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.610810][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.628435][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.646469][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.666732][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.687064][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.707890][T10076] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 158.717434][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.731059][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.744939][T10076] overlayfs: missing 'lowerdir' [ 158.754929][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.763494][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.776383][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.784393][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.792297][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.799930][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.807766][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.815918][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.830012][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.841608][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.849254][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.857041][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.865021][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.872722][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.887831][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.903376][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.916963][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.927206][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.936346][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.944469][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.957634][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.984653][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.017427][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.037169][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.057780][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.075799][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.083790][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.091786][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.099505][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.107474][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.115412][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.123612][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.131807][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.139375][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.148156][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.163610][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.171473][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.178915][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.186926][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.194685][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.202618][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.216127][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.224197][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.232037][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.239466][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.247722][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.255435][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.263368][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.271141][ T4994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.280262][ T5921] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 159.305883][ T4994] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 159.457648][T10090] fido_id[10090]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 159.570147][ T21] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 159.670569][ T5921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.870179][ T4994] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 159.890379][ T5921] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 159.905219][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.920104][ T5921] usb 3-1: Product: syz [ 159.929983][ T5921] usb 3-1: Manufacturer: syz [ 159.940571][ T5921] usb 3-1: SerialNumber: syz [ 159.980739][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 160.020226][ T21] usb 1-1: not running at top speed; connect to a high speed hub [ 160.110266][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.147169][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.229629][ T5921] snd-usb-6fire 3-1:1.0: unknown device firmware state received from device: [ 160.240311][ T4994] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.247968][ T5921] eb [ 160.256657][ T4994] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 160.257712][ T5921] aa 00 00 00 00 00 00 [ 160.291587][ T5921] snd-usb-6fire: probe of 3-1:1.0 failed with error -5 [ 160.340508][ T4994] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.350562][ T4994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 160.358679][ T4994] usb 5-1: SerialNumber: syz [ 160.380937][T10100] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 160.400915][ T4994] hub 5-1:1.0: bad descriptor, ignoring hub [ 160.406860][ T4994] hub: probe of 5-1:1.0 failed with error -5 [ 160.413535][ T21] usb 1-1: string descriptor 0 read error: -22 [ 160.420013][ T21] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.431713][ T4994] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 160.441190][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.450234][ T5921] usb 3-1: USB disconnect, device number 10 [ 160.502994][ T21] usb 1-1: 0:1 : does not exist [ 160.510236][ T21] usb 1-1: 0:2 : does not exist [ 160.610903][ T4994] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 160.650723][ T4994] usb 5-1: USB disconnect, device number 17 [ 160.706510][ T21] usb 1-1: USB disconnect, device number 10 [ 160.817828][T10127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2756'. [ 160.909890][T10137] ufs: ufs_fill_super(): bad magic number [ 160.971363][T10145] printk: syz.3.2762 (10145): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 161.113006][T10161] rdma_rxe: rxe_register_device failed with error -23 [ 161.130830][T10161] rdma_rxe: failed to add lo [ 161.170799][T10163] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 161.179004][T10163] Error parsing options; rc = [-22] [ 161.521001][T10192] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 161.568297][T10192] Error parsing options; rc = [-22] [ 161.592578][T10199] netlink: 'syz.4.2789': attribute type 1 has an invalid length. [ 161.639250][T10199] netlink: 'syz.4.2789': attribute type 2 has an invalid length. [ 161.656317][T10199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2789'. [ 161.752187][T10207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2793'. [ 161.904278][ T155] nvme nvme0: rdma_resolve_route failed (-110). [ 161.952715][T10214] nvme nvme0: rdma connection establishment failed (-19) [ 162.042130][T10231] autofs4:pid:10231:autofs_fill_super: called with bogus options [ 162.127034][T10236] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2807'. [ 162.470212][T10268] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2823'. [ 162.560153][ T5921] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.685752][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2832'. [ 163.010434][ T5921] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 163.024315][ T5921] usb 4-1: config 0 has no interface number 0 [ 163.046506][ T5921] usb 4-1: config 0 interface 4 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 163.091010][ T5921] usb 4-1: config 0 interface 4 has no altsetting 0 [ 163.294298][ T5921] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 163.316683][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.339848][ T5921] usb 4-1: Product: syz [ 163.349686][ T5921] usb 4-1: Manufacturer: syz [ 163.360868][ T5921] usb 4-1: SerialNumber: syz [ 163.382221][ T5921] usb 4-1: config 0 descriptor?? [ 163.597327][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2863'. [ 163.620143][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2863'. [ 163.629327][T10350] netlink: 'syz.1.2863': attribute type 6 has an invalid length. [ 163.652575][ T5921] usb 4-1: USB disconnect, device number 9 [ 163.671216][T10354] kAFS: unable to lookup cell '({^@' [ 164.239757][T10394] [ 164.242134][T10394] ====================================================== [ 164.249158][T10394] WARNING: possible circular locking dependency detected [ 164.256207][T10394] syzkaller #0 Not tainted [ 164.260638][T10394] ------------------------------------------------------ [ 164.267684][T10394] syz.4.2886/10394 is trying to acquire lock: [ 164.273758][T10394] ffff888072dd0f98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 164.284254][T10394] [ 164.284254][T10394] but task is already holding lock: [ 164.291639][T10394] ffff888072dd13f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 164.300988][T10394] [ 164.300988][T10394] which lock already depends on the new lock. [ 164.300988][T10394] [ 164.311413][T10394] [ 164.311413][T10394] the existing dependency chain (in reverse order) is: [ 164.320444][T10394] [ 164.320444][T10394] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 164.328143][T10394] __mutex_lock_common+0x1e5/0x2400 [ 164.333914][T10394] mutex_lock_nested+0x17/0x20 [ 164.339232][T10394] hci_dev_do_close+0x5f/0x1020 [ 164.344636][T10394] hci_rfkill_set_block+0x101/0x180 [ 164.350391][T10394] rfkill_set_block+0x1c1/0x3c0 [ 164.355794][T10394] rfkill_fop_write+0x453/0x560 [ 164.361202][T10394] vfs_write+0x304/0xd70 [ 164.366020][T10394] ksys_write+0x153/0x260 [ 164.370945][T10394] do_syscall_64+0x4c/0xa0 [ 164.375913][T10394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.382358][T10394] [ 164.382358][T10394] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 164.390377][T10394] __mutex_lock_common+0x1e5/0x2400 [ 164.396133][T10394] mutex_lock_nested+0x17/0x20 [ 164.401455][T10394] rfkill_register+0x2f/0x970 [ 164.406695][T10394] hci_register_dev+0x459/0x980 [ 164.412107][T10394] vhci_create_device+0x32e/0x5c0 [ 164.417679][T10394] vhci_write+0x389/0x440 [ 164.422562][T10394] vfs_write+0x748/0xd70 [ 164.427369][T10394] ksys_write+0x153/0x260 [ 164.432265][T10394] do_syscall_64+0x4c/0xa0 [ 164.437242][T10394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.443691][T10394] [ 164.443691][T10394] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 164.451640][T10394] __mutex_lock_common+0x1e5/0x2400 [ 164.457387][T10394] mutex_lock_nested+0x17/0x20 [ 164.462701][T10394] vhci_send_frame+0x88/0x100 [ 164.467938][T10394] hci_send_frame+0x1a9/0x2e0 [ 164.473167][T10394] hci_tx_work+0x9b5/0x16d0 [ 164.478218][T10394] process_one_work+0x867/0xff0 [ 164.483622][T10394] worker_thread+0xad7/0x12a0 [ 164.488857][T10394] kthread+0x42e/0x520 [ 164.493470][T10394] ret_from_fork+0x1f/0x30 [ 164.498444][T10394] [ 164.498444][T10394] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 164.507706][T10394] __lock_acquire+0x38f7/0x7d40 [ 164.513144][T10394] lock_acquire+0x19f/0x400 [ 164.518202][T10394] __flush_work+0x116/0x210 [ 164.523255][T10394] hci_dev_do_close+0x201/0x1020 [ 164.528763][T10394] hci_rfkill_set_block+0x101/0x180 [ 164.534644][T10394] rfkill_set_block+0x1c1/0x3c0 [ 164.540045][T10394] rfkill_fop_write+0x453/0x560 [ 164.545445][T10394] vfs_write+0x304/0xd70 [ 164.550234][T10394] ksys_write+0x153/0x260 [ 164.555119][T10394] do_syscall_64+0x4c/0xa0 [ 164.560082][T10394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.566523][T10394] [ 164.566523][T10394] other info that might help us debug this: [ 164.566523][T10394] [ 164.576790][T10394] Chain exists of: [ 164.576790][T10394] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 164.576790][T10394] [ 164.591761][T10394] Possible unsafe locking scenario: [ 164.591761][T10394] [ 164.599224][T10394] CPU0 CPU1 [ 164.604601][T10394] ---- ---- [ 164.609978][T10394] lock(&hdev->req_lock); [ 164.614431][T10394] lock(rfkill_global_mutex); [ 164.620439][ T4998] Bluetooth: hci0: command 0x080f tx timeout [ 164.621750][T10394] lock(&hdev->req_lock); [ 164.621769][T10394] lock((work_completion)(&hdev->tx_work)); [ 164.640689][T10394] [ 164.640689][T10394] *** DEADLOCK *** [ 164.640689][T10394] [ 164.648850][T10394] 2 locks held by syz.4.2886/10394: [ 164.654061][T10394] #0: ffffffff8e4f5a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 164.664206][T10394] #1: ffff888072dd13f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 164.674027][T10394] [ 164.674027][T10394] stack backtrace: [ 164.679949][T10394] CPU: 0 PID: 10394 Comm: syz.4.2886 Not tainted syzkaller #0 [ 164.687456][T10394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 164.697554][T10394] Call Trace: [ 164.700858][T10394] [ 164.703819][T10394] dump_stack_lvl+0x188/0x250 [ 164.708537][T10394] ? load_image+0x410/0x410 [ 164.713069][T10394] ? show_regs_print_info+0x20/0x20 [ 164.718308][T10394] ? print_circular_bug+0x12b/0x1a0 [ 164.723545][T10394] check_noncircular+0x2f8/0x400 [ 164.728537][T10394] ? look_up_lock_class+0x71/0x110 [ 164.733680][T10394] ? print_deadlock_bug+0x5d0/0x5d0 [ 164.738913][T10394] ? lockdep_lock+0xf1/0x1f0 [ 164.743561][T10394] ? mark_lock+0x94/0x320 [ 164.747916][T10394] ? _find_first_zero_bit+0xd1/0xf0 [ 164.753139][T10394] __lock_acquire+0x38f7/0x7d40 [ 164.758040][T10394] ? mark_lock+0x94/0x320 [ 164.762391][T10394] ? verify_lock_unused+0x140/0x140 [ 164.767637][T10394] ? __lock_acquire+0x12df/0x7d40 [ 164.772698][T10394] ? start_flush_work+0x784/0x830 [ 164.777757][T10394] lock_acquire+0x19f/0x400 [ 164.782287][T10394] ? __flush_work+0xfa/0x210 [ 164.786907][T10394] ? verify_lock_unused+0x140/0x140 [ 164.792153][T10394] ? read_lock_is_recursive+0x10/0x10 [ 164.797583][T10394] __flush_work+0x116/0x210 [ 164.802114][T10394] ? __flush_work+0xfa/0x210 [ 164.806727][T10394] ? flush_work+0x20/0x20 [ 164.811084][T10394] ? rcu_lock_release+0x5/0x20 [ 164.815878][T10394] ? __lock_acquire+0x7d40/0x7d40 [ 164.820959][T10394] hci_dev_do_close+0x201/0x1020 [ 164.825922][T10394] hci_rfkill_set_block+0x101/0x180 [ 164.831143][T10394] ? rcu_lock_release+0x20/0x20 [ 164.836018][T10394] rfkill_set_block+0x1c1/0x3c0 [ 164.840897][T10394] rfkill_fop_write+0x453/0x560 [ 164.845768][T10394] ? rfkill_fop_read+0x560/0x560 [ 164.850730][T10394] ? common_file_perm+0x160/0x1c0 [ 164.855777][T10394] ? fsnotify_perm+0x5d/0x560 [ 164.860479][T10394] ? security_file_permission+0x75/0xa0 [ 164.866046][T10394] ? rfkill_fop_read+0x560/0x560 [ 164.871001][T10394] vfs_write+0x304/0xd70 [ 164.875270][T10394] ? file_end_write+0x250/0x250 [ 164.880144][T10394] ? __fget_files+0x402/0x470 [ 164.884853][T10394] ? __fdget_pos+0x1e2/0x370 [ 164.889486][T10394] ? ksys_write+0x70/0x260 [ 164.893944][T10394] ksys_write+0x153/0x260 [ 164.898301][T10394] ? __ia32_sys_read+0x80/0x80 [ 164.903103][T10394] ? lockdep_hardirqs_on+0x94/0x140 [ 164.908329][T10394] do_syscall_64+0x4c/0xa0 [ 164.912808][T10394] ? clear_bhb_loop+0x30/0x80 [ 164.917506][T10394] ? clear_bhb_loop+0x30/0x80 [ 164.922214][T10394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.928145][T10394] RIP: 0033:0x7ff261489559 [ 164.932590][T10394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.952220][T10394] RSP: 002b:00007ff25f6e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.960687][T10394] RAX: ffffffffffffffda RBX: 00007ff26170ffa0 RCX: 00007ff261489559 [ 164.968683][T10394] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 164.976675][T10394] RBP: 00007ff261520b20 R08: 0000000000000000 R09: 0000000000000000 [ 164.984693][T10394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.992727][T10394] R13: 00007ff261710038 R14: 00007ff26170ffa0 R15: 00007ffe5fb65038 [ 165.000740][T10394]