last executing test programs: 8m1.881825502s ago: executing program 2 (id=7603): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000900)=[{{0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x8) 8m1.815343579s ago: executing program 2 (id=7604): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000004140)={0x0, 0x0, r1}) 8m1.754798903s ago: executing program 2 (id=7605): r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0x1000, 0x103) 8m1.682127048s ago: executing program 2 (id=7606): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 8m1.613985634s ago: executing program 2 (id=7608): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 8m1.023575991s ago: executing program 2 (id=7613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x38, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='v'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 8m0.61955009s ago: executing program 32 (id=7613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x38, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='v'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 2m34.124702946s ago: executing program 3 (id=12058): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x9}, &(0x7f00000000c0)=0x8) 2m34.064729727s ago: executing program 3 (id=12060): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x4000) 2m33.986090966s ago: executing program 3 (id=12061): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresuid(0x0, 0x0, 0xee00) newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x800) 2m33.910153959s ago: executing program 3 (id=12063): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xf) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000702, 0x0, 0x0) 2m33.747838904s ago: executing program 3 (id=12066): connect$unix(0xffffffffffffffff, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) 2m33.657042462s ago: executing program 3 (id=12068): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sync() 2m17.751722166s ago: executing program 33 (id=12068): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sync() 1m51.566695242s ago: executing program 1 (id=12527): socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r0], 0x0) 1m50.287812512s ago: executing program 1 (id=12537): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x22, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xfe, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00100a"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m49.895814647s ago: executing program 5 (id=12541): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) 1m49.812401s ago: executing program 5 (id=12542): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/248, 0xf8}], 0x1}, 0xa}], 0x1, 0x40002100, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580100001a0013"], 0x158}, 0x1, 0x0, 0x0, 0x4048010}, 0x24040014) 1m49.722582751s ago: executing program 5 (id=12543): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) 1m49.602234521s ago: executing program 5 (id=12545): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000200)='./file0/file0\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 1m49.49262526s ago: executing program 5 (id=12546): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x4018480c, &(0x7f0000000040)={0x1, 0x1, 0x7fffffff}) 1m48.460787178s ago: executing program 1 (id=12560): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x2, 0x611, 0xe7, &(0x7f0000000100)="c71023d2ccc6b43a629d39734b21ebad116d53384b5f3fa7c0fa004bb5d3cfd9747760e5b7eb72ff6dee6edb35b212929bc956d29237df65a457bba1c3c100b37397ed33cde17a0a0f174f6d7cea19e7a8eecd357b03eb24cc7628cd3c870ada87d836b96341ee51704024dad1d5939635ab8779f48c522cf4f1a36bbc829ea4ca98007d9a53398a5a2d7a26d6746b54eae1c3377571cd0edc038df946d72871d1eb60479c7813d38da1663930f27686e79b160164b98c57e3577fa35f9b7ffcc6676d926e9f444a0aaf006ad440b9998e525042b0c2def7053e4392e28a97481d8b55b2df2fa7"}], 0x1}) 1m48.331562581s ago: executing program 5 (id=12561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd30, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) 1m48.130562759s ago: executing program 34 (id=12561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd30, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) 1m46.87187202s ago: executing program 1 (id=12563): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000200)='./file0/file0\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 1m46.74935491s ago: executing program 1 (id=12564): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000280)="001d81c57c2030093f254aea526e732388a8", 0x12, 0x0, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 1m45.773289055s ago: executing program 1 (id=12568): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}], 0x2c) 1m45.510155093s ago: executing program 35 (id=12568): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}], 0x2c) 6.677263549s ago: executing program 7 (id=13637): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f0000003700)=ANY=[]) 3.609497687s ago: executing program 7 (id=13671): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x15, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x1000, 0x1, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0xbb, 0x1, 0xfffffffe, 0x7, 0x800, 0x0, 0xfffffffc, 0x0, 0x100, 0x0, 0x3, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0xfffffffd, 0x7ffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x18c, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x2000, 0x100000, 0x0, 0x0, 0x8, 0x4000000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x800000, 0x7], [0x10000, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x9, 0xffff7fff, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x400, 0x0, 0x6, 0x0, 0x82ce, 0x0, 0x3, 0x0, 0x0, 0xff, 0x4000003, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb], [0x0, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x0, 0x8, 0x80, 0x0, 0x3, 0x0, 0x2, 0x5, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x8000000, 0x0, 0x9, 0x3, 0x10000, 0x0, 0x6, 0xbfb6, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0xfffffffe, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5]}, 0x45c) 3.513955191s ago: executing program 7 (id=13673): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e1f, @broadcast}}, 0x5, 0x2, 0x0, 0x4, 0xe2d8f2eb1d010936, 0x405, 0x9}, 0x9c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006d02"]) 3.335815844s ago: executing program 7 (id=13677): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='dirsync\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 3.145358467s ago: executing program 7 (id=13681): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2000, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f0000000140)="826500000000000000b02872dccae05f3eb6385ef1e710d7", 0x18) 2.967619648s ago: executing program 7 (id=13686): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) 2.721896637s ago: executing program 6 (id=13689): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x19, r1, 0x1, 0xb, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 2.256513608s ago: executing program 6 (id=13698): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x5) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) 2.161069996s ago: executing program 6 (id=13699): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000300)=""/214, 0xd6}], 0x1) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 914.363391ms ago: executing program 4 (id=13718): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r1, 0x5, 0x1, '+'}, 0x9) 783.515217ms ago: executing program 4 (id=13720): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x40, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="de879477ecd5afb47062864e5737f6e1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "98ce2b874a858ddd"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4020}, 0x4080) 683.023022ms ago: executing program 4 (id=13721): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000045c0)=[{{&(0x7f0000000040)={0x2, 0x5e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0x1}, 0x8) 615.758025ms ago: executing program 4 (id=13722): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0x0) clock_adjtime(0x0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x5, 0x100000001, 0x4, 0x8000, 0x15c, 0x155, 0x7, 0xb, 0x80, 0xabbb, 0x3, 0x1, 0xf156, 0x1, 0x0, 0x41a0, 0x7fff, 0xc, 0x3, 0xffffffffffffffc8, 0xffff, 0x987, 0x6, 0x2, 0x3}) add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='j', 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0xffffffffffffffff) 491.948638ms ago: executing program 4 (id=13725): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') lseek(r0, 0x1, 0x2) getdents64(r0, 0x0, 0xfffffffffffffd65) 461.615052ms ago: executing program 0 (id=13726): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) 396.303467ms ago: executing program 0 (id=13727): r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='Z/{\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c) 331.538115ms ago: executing program 0 (id=13728): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000a006) 245.045964ms ago: executing program 0 (id=13729): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x1e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) 208.796133ms ago: executing program 6 (id=13730): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 129.116505ms ago: executing program 0 (id=13731): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r2, 0x89a3, 0x0) 103.139933ms ago: executing program 6 (id=13732): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 19.771491ms ago: executing program 0 (id=13733): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x143100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000009000/0x12000)=nil}) 494.588µs ago: executing program 4 (id=13734): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x44000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000019c0)=""/175, 0xaf}, {&(0x7f0000001a80)=""/207, 0xcf}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000004ac0)=""/4087, 0xff7}, {&(0x7f0000000540)=""/215, 0xd7}, {&(0x7f0000000480)=""/129, 0x81}, {&(0x7f0000003a80)=""/4105, 0x1009}, {&(0x7f0000000780)=""/166, 0xa6}], 0x5}, 0x88a}, {{0x0, 0x0, 0x0}, 0x80000003}], 0x5, 0x40018042, 0x0) 0s ago: executing program 6 (id=13735): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x1, 0x3}}) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f00004be000/0x2000)=nil, 0x2000}, 0x1}) kernel console output (not intermixed with test programs): invalid length. [ 943.523552][ T368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.548218][ T368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.617415][ T5955] usb 2-1: USB disconnect, device number 67 [ 943.760191][ T421] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 943.893036][ T427] vivid-002: disconnect [ 943.897840][ T427] vivid-002: reconnect [ 944.069642][ T435] input: syz0 as /devices/virtual/input/input105 [ 944.180272][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 84 seconds [ 944.194654][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 84 seconds [ 944.205658][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 84 seconds [ 944.216698][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 84 seconds [ 946.493627][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 85 seconds [ 946.504498][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 85 seconds [ 946.516534][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 85 seconds [ 946.528592][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 85 seconds [ 947.421355][ T566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11974'. [ 947.769267][ T5877] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 948.138935][ T6249] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 948.288804][ T6249] usb 2-1: Using ep0 maxpacket: 8 [ 948.296130][ T6249] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 948.311761][ T6249] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 948.325185][ T6249] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 948.340540][ T6249] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 948.354999][ T6249] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 948.372267][ T6249] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 948.381946][ T6249] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 948.396271][ T6249] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 948.411554][ T6249] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 948.422929][ T6249] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 948.440299][ T6249] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 948.447758][ T6249] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 948.460125][ T6249] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 948.472110][ T6249] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 948.483338][ T6249] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 948.498309][ T6249] usb 2-1: string descriptor 0 read error: -22 [ 948.505537][ T6249] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 948.514930][ T6249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.546060][ T6249] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 948.585840][ T601] netlink: 88 bytes leftover after parsing attributes in process `syz.0.11991'. [ 948.595789][ T601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11991'. [ 948.687630][ T606] bond0: (slave rose0): refused to change device type [ 948.758082][ T6249] usb 2-1: USB disconnect, device number 68 [ 948.817786][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 86 seconds [ 948.828761][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 86 seconds [ 948.840191][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 86 seconds [ 948.851370][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 86 seconds [ 948.950863][ T615] lo speed is unknown, defaulting to 1000 [ 948.958934][ T615] lo speed is unknown, defaulting to 1000 [ 949.278293][ T5955] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 949.430165][ T5955] usb 4-1: config 0 has no interfaces? [ 949.438318][ T5955] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 949.447489][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.456001][ T5955] usb 4-1: Product: syz [ 949.460455][ T5955] usb 4-1: Manufacturer: syz [ 949.465074][ T5955] usb 4-1: SerialNumber: syz [ 949.473305][ T5955] usb 4-1: config 0 descriptor?? [ 949.686331][ T5955] usb 4-1: USB disconnect, device number 55 [ 950.711422][ T701] 9pnet_fd: Insufficient options for proto=fd [ 951.117504][ T6249] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 951.127643][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 87 seconds [ 951.139759][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 87 seconds [ 951.151021][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 87 seconds [ 951.163099][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 87 seconds [ 951.279849][ T6249] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 951.289344][ T6249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.305930][ T6249] usb 2-1: config 0 descriptor?? [ 951.737121][ T5955] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 951.887174][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 951.894352][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.905480][ T5955] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 951.914807][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.927313][ T5955] usb 4-1: config 0 descriptor?? [ 952.328250][ T6249] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 952.347858][ T6249] usb 2-1: USB disconnect, device number 69 [ 952.365657][ T5955] mcp2221 0003:04D8:00DD.00D6: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 952.760567][ T6249] usb 4-1: USB disconnect, device number 56 [ 952.982515][ T761] input: syz1 as /devices/virtual/input/input107 [ 953.436519][T22804] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 953.446601][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 88 seconds [ 953.458076][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 88 seconds [ 953.471424][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 88 seconds [ 953.482815][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 88 seconds [ 953.636164][T22804] usb 2-1: Using ep0 maxpacket: 32 [ 953.646098][T22804] usb 2-1: unable to get BOS descriptor or descriptor too short [ 953.659010][T22804] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 953.677951][T22804] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 953.688466][T22804] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 953.697580][T22804] usb 2-1: config 128 has no interface number 0 [ 953.716113][T22804] usb 2-1: config 128 interface 127 altsetting 14 has an endpoint descriptor with address 0x37, changing to 0x7 [ 953.734704][T22804] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 953.762532][T22804] usb 2-1: config 128 interface 127 has no altsetting 0 [ 953.775857][T22804] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 953.795975][T22804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.815956][T22804] usb 2-1: Product: syz [ 953.820205][T22804] usb 2-1: Manufacturer: syz [ 953.824831][T22804] usb 2-1: SerialNumber: syz [ 953.991498][ T808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12070'. [ 954.094480][T22804] usb 2-1: USB disconnect, device number 70 [ 954.129909][T11437] udevd[11437]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 954.865649][T22804] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 955.037470][T22804] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 955.046554][T22804] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 955.057140][T22804] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 955.066355][T22804] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 955.078038][T22804] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 955.089328][T22804] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 955.103026][T22804] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 955.112844][T22804] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 955.121069][T22804] usb 2-1: Product: syz [ 955.125916][T22804] usb 2-1: Manufacturer: syz [ 955.134003][ T817] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 955.142865][T22804] cdc_wdm 2-1:1.0: skipping garbage [ 955.148175][T22804] cdc_wdm 2-1:1.0: skipping garbage [ 955.154734][T22804] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 955.160743][T22804] cdc_wdm 2-1:1.0: Unknown control protocol [ 955.344673][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 955.351476][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 955.358000][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 955.363152][ T6249] usb 2-1: USB disconnect, device number 71 [ 955.364628][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 955.376647][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 955.767703][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 89 seconds [ 955.779584][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 89 seconds [ 955.792706][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 89 seconds [ 955.803891][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 89 seconds [ 956.394032][ T856] syzkaller1: entered promiscuous mode [ 956.399847][ T856] syzkaller1: entered allmulticast mode [ 957.464273][ T6249] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 957.632371][ T6249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.643760][ T6249] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 957.656567][ T6249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.675274][ T6249] usb 2-1: config 0 descriptor?? [ 957.894702][ T6249] usbhid 2-1:0.0: can't add hid device: -71 [ 957.909787][ T6249] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 957.921484][ T6249] usb 2-1: USB disconnect, device number 72 [ 958.084191][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 90 seconds [ 958.095195][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 90 seconds [ 958.106283][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 90 seconds [ 958.117555][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 90 seconds [ 958.423832][ T6249] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 958.531775][ T918] sctp: [Deprecated]: syz.0.12119 (pid 918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 958.531775][ T918] Use struct sctp_sack_info instead [ 958.585051][ T6249] usb 2-1: Using ep0 maxpacket: 32 [ 958.592581][ T6249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.605793][ T6249] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 958.615177][ T6249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.634689][ T6249] usb 2-1: config 0 descriptor?? [ 958.652374][ T6249] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 958.666269][ T6249] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 958.715388][ T926] sctp: [Deprecated]: syz.0.12121 (pid 926) Use of int in max_burst socket option deprecated. [ 958.715388][ T926] Use struct sctp_assoc_value instead [ 959.045220][T22804] usb 2-1: USB disconnect, device number 73 [ 959.056178][T22804] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 959.883046][ T6249] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 960.073107][ T6249] usb 2-1: Using ep0 maxpacket: 16 [ 960.080303][ T6249] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.092047][ T6249] usb 2-1: config 0 interface 0 has no altsetting 0 [ 960.099067][ T6249] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 960.109418][ T6249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.125004][ T6249] usb 2-1: config 0 descriptor?? [ 960.156997][ T30] audit: type=1326 audit(2000001201.082:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=950 comm="syz.0.12129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x0 [ 960.408856][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 91 seconds [ 960.419818][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 91 seconds [ 960.431165][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 91 seconds [ 960.442427][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 91 seconds [ 960.553900][ T6249] corsair 0003:1B1C:1B34.00D7: unknown main item tag 0x0 [ 960.561038][ T6249] corsair 0003:1B1C:1B34.00D7: unknown main item tag 0x0 [ 960.570052][ T6249] corsair 0003:1B1C:1B34.00D7: unknown main item tag 0x0 [ 960.577312][ T6249] corsair 0003:1B1C:1B34.00D7: unknown main item tag 0x0 [ 960.584959][ T6249] corsair 0003:1B1C:1B34.00D7: unknown main item tag 0x0 [ 960.597516][ T6249] corsair 0003:1B1C:1B34.00D7: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.1-1/input0 [ 960.758716][T22804] usb 2-1: USB disconnect, device number 74 [ 961.786971][ T979] syzkaller1: entered promiscuous mode [ 961.794006][ T979] syzkaller1: entered allmulticast mode [ 962.119794][ T999] netlink: 37 bytes leftover after parsing attributes in process `syz.4.12148'. [ 962.144780][ T999] netlink: 37 bytes leftover after parsing attributes in process `syz.4.12148'. [ 962.722164][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 92 seconds [ 962.733042][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 92 seconds [ 962.744814][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 92 seconds [ 962.756625][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 92 seconds [ 963.393048][ T30] audit: type=1800 audit(2000001204.314:311): pid=1022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12157" name="nullb0" dev="tmpfs" ino=1040 res=0 errno=0 [ 963.881116][T22804] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 964.032612][T22804] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 964.042933][T22804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.054118][T22804] usb 2-1: config 0 descriptor?? [ 965.050930][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 93 seconds [ 965.061908][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 93 seconds [ 965.073013][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 93 seconds [ 965.084083][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 93 seconds [ 965.095230][T22804] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 965.105616][T22804] asix 2-1:0.0: probe with driver asix failed with error -71 [ 965.116447][T22804] usb 2-1: USB disconnect, device number 75 [ 965.733364][ T1052] netlink: 'syz.0.12167': attribute type 21 has an invalid length. [ 965.742246][ T1052] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12167'. [ 965.783085][ T1052] netlink: 'syz.0.12167': attribute type 21 has an invalid length. [ 965.791345][ T1052] netlink: 6 bytes leftover after parsing attributes in process `syz.0.12167'. [ 966.659913][ T5912] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 966.820272][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 966.827291][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.838773][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.851522][ T5912] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 966.860989][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.872278][ T5912] usb 2-1: config 0 descriptor?? [ 967.307203][ T5912] savu 0003:1E7D:2D5A.00D8: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 967.359806][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 94 seconds [ 967.370646][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 94 seconds [ 967.386213][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 94 seconds [ 967.397555][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 94 seconds [ 967.561399][ T5912] usb 2-1: USB disconnect, device number 76 [ 969.678648][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 95 seconds [ 969.692064][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 95 seconds [ 969.703137][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 95 seconds [ 969.714317][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 95 seconds [ 970.159572][ T1105] sctp: [Deprecated]: syz.1.12186 (pid 1105) Use of struct sctp_assoc_value in delayed_ack socket option. [ 970.159572][ T1105] Use struct sctp_sack_info instead [ 970.225569][ T5884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 970.238709][ T5884] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 970.247249][ T5884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 970.257848][ T5884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 970.268597][ T5884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 970.426394][ T1107] lo speed is unknown, defaulting to 1000 [ 970.449744][ T1107] lo speed is unknown, defaulting to 1000 [ 970.894396][ T1107] chnl_net:caif_netlink_parms(): no params data found [ 971.030415][ T1131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 971.086344][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.122312][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.138522][ T1107] bridge_slave_0: entered allmulticast mode [ 971.146526][ T1107] bridge_slave_0: entered promiscuous mode [ 971.167749][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.176319][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.184716][ T1107] bridge_slave_1: entered allmulticast mode [ 971.193120][ T1107] bridge_slave_1: entered promiscuous mode [ 971.301203][ T1107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.338014][ T1107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.417885][ T1107] team0: Port device team_slave_0 added [ 971.431357][ T1107] team0: Port device team_slave_1 added [ 971.525337][ T1107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.533377][ T1107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.560691][ T1107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.577599][ T1107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.585524][ T1107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.611560][ C0] vkms_vblank_simulate: vblank timer overrun [ 971.645195][ T1107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.776332][ T1107] hsr_slave_0: entered promiscuous mode [ 971.812766][ T1107] hsr_slave_1: entered promiscuous mode [ 971.830408][ T1107] debugfs: 'hsr0' already exists in 'hsr' [ 971.836213][ T1107] Cannot create hsr debugfs directory [ 972.017689][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 96 seconds [ 972.029447][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 96 seconds [ 972.040824][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 96 seconds [ 972.052109][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 96 seconds [ 972.328263][ T5877] Bluetooth: hci4: command tx timeout [ 972.345141][ T1107] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 972.389120][ T1107] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 972.413772][ T1107] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 972.426326][ T1107] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 972.539324][ T1185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12218'. [ 972.649040][ T1107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.685117][ T1107] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.719124][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.726367][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.753415][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.760673][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.109092][ T1107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.514071][ T1107] veth0_vlan: entered promiscuous mode [ 973.535776][ T1107] veth1_vlan: entered promiscuous mode [ 973.602091][ T1107] veth0_macvtap: entered promiscuous mode [ 973.622006][ T1107] veth1_macvtap: entered promiscuous mode [ 973.678753][ T1107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.705668][ T1107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.765771][ T771] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.788179][ T771] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.817345][ T771] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.868102][ T771] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.074232][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.097159][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.172649][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.182272][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.317690][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 97 seconds [ 974.328683][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 97 seconds [ 974.339830][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 97 seconds [ 974.352073][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 97 seconds [ 974.396960][ T5877] Bluetooth: hci4: command tx timeout [ 974.514724][ T1229] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12232'. [ 975.139537][ T1250] netlink: 84 bytes leftover after parsing attributes in process `syz.5.12239'. [ 975.531133][ T1267] netlink: 'syz.5.12247': attribute type 1 has an invalid length. [ 975.754008][ T1277] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12251'. [ 975.952384][ T1287] syzkaller1: entered promiscuous mode [ 975.958521][ T1287] syzkaller1: entered allmulticast mode [ 976.135088][T22804] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 976.284851][T22804] usb 2-1: Using ep0 maxpacket: 16 [ 976.292829][T22804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.303182][T22804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 976.314278][T22804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 976.326477][T22804] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 976.336462][T22804] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 976.350767][T22804] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 976.360203][T22804] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 976.368499][T22804] usb 2-1: Manufacturer: syz [ 976.377229][T22804] usb 2-1: config 0 descriptor?? [ 976.476630][ T5877] Bluetooth: hci4: command tx timeout [ 976.635992][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 98 seconds [ 976.650973][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 98 seconds [ 976.662808][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 98 seconds [ 976.674705][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 98 seconds [ 976.722816][ T1301] tipc: Started in network mode [ 976.729100][ T1301] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 976.738361][T22804] rc_core: IR keymap rc-hauppauge not found [ 976.744780][T22804] Registered IR keymap rc-empty [ 976.749915][T22804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 976.752670][ T1301] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 976.766755][ T1301] tipc: Enabled bearer , priority 10 [ 976.774621][T22804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 976.812949][T22804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 976.827961][T22804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input109 [ 976.848047][T22804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 976.859424][ T1308] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12264'. [ 976.875564][T22804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 976.915661][T22804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 976.945405][T22804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 976.984406][T22804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.043145][T22804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.085609][T22804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.134577][T22804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.175767][T22804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.204940][T22804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.238345][T22804] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 977.247580][T22804] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 977.269141][T22804] usb 2-1: USB disconnect, device number 77 [ 977.750397][ T1334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12277'. [ 977.868236][ T30] audit: type=1326 audit(2000001218.801:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1337 comm="syz.4.12279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e5498eb69 code=0x0 [ 977.884069][ T6249] tipc: Node number set to 1 [ 977.890120][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.490905][ T1359] bridge0: port 3(hsr_slave_1) entered blocking state [ 978.498536][ T1359] bridge0: port 3(hsr_slave_1) entered disabled state [ 978.505875][ T1359] hsr_slave_1: entered allmulticast mode [ 978.516184][ T1359] hsr_slave_1: left allmulticast mode [ 978.554152][ T5877] Bluetooth: hci4: command tx timeout [ 978.956122][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 99 seconds [ 978.969853][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 99 seconds [ 978.981088][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 99 seconds [ 978.992185][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 99 seconds [ 979.158607][ T1382] tipc: Started in network mode [ 979.169570][ T1382] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 979.188280][ T1382] tipc: Enabling of bearer rejected, failed to enable media [ 979.625319][ T1403] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 979.811275][ T1412] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12310'. [ 980.103065][ T6249] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 980.139336][ T1420] syzkaller1: entered promiscuous mode [ 980.145231][ T1420] syzkaller1: entered allmulticast mode [ 980.291082][ T6249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 980.306071][ T6249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 980.328281][ T6249] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 980.351209][ T6249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.360040][ T6249] usb 2-1: Product: syz [ 980.369826][ T6249] usb 2-1: Manufacturer: syz [ 980.377088][ T6249] usb 2-1: SerialNumber: syz [ 980.402513][ T6249] usb 2-1: config 0 descriptor?? [ 980.414182][ T1428] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 980.591879][ T1436] bridge0: port 3(hsr_slave_1) entered blocking state [ 980.599081][ T1436] bridge0: port 3(hsr_slave_1) entered disabled state [ 980.610544][ T1436] hsr_slave_1: entered allmulticast mode [ 980.619160][ T1436] hsr_slave_1: left allmulticast mode [ 980.706778][ T6249] usb 2-1: USB disconnect, device number 78 [ 981.275761][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 100 seconds [ 981.287045][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 100 seconds [ 981.298253][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 100 seconds [ 981.310612][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 100 seconds [ 981.612995][ T6249] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 981.775655][ T6249] usb 6-1: Using ep0 maxpacket: 16 [ 981.797437][ T6249] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 981.819332][ T6249] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 981.839781][ T6249] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 981.872082][ T6249] usb 6-1: config 1 interface 0 has no altsetting 0 [ 981.881736][ T6249] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 981.899948][ T6249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.922038][ T6249] usb 6-1: Product: syz [ 981.926259][ T6249] usb 6-1: Manufacturer: syz [ 981.941486][ T6249] usb 6-1: SerialNumber: syz [ 982.170798][ T6249] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 982.443876][ T1460] usblp0:failed reading printer status (-32) [ 982.472822][ T6249] usb 6-1: USB disconnect, device number 2 [ 982.493900][ T6249] usblp0: removed [ 983.059262][ T1511] loop2: detected capacity change from 0 to 7 [ 983.088694][ T1511] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 983.094621][ T1511] loop2: partition table partially beyond EOD, truncated [ 983.106301][ T1511] loop2: p1 size 872559382 extends beyond EOD, truncated [ 983.229896][T11437] udevd[11437]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 983.602704][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 101 seconds [ 983.614606][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 101 seconds [ 983.626010][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 101 seconds [ 983.637260][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 101 seconds [ 983.804345][ T1534] netlink: 'syz.1.12366': attribute type 1 has an invalid length. [ 983.812658][ T1534] netlink: 'syz.1.12366': attribute type 4 has an invalid length. [ 983.822987][ T1534] netlink: 212 bytes leftover after parsing attributes in process `syz.1.12366'. [ 985.110583][ T6249] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 985.260364][ T6249] usb 6-1: Using ep0 maxpacket: 8 [ 985.267390][ T6249] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 985.276159][ T6249] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 985.286034][ T6249] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 985.296321][ T6249] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 985.307205][ T6249] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 985.320443][ T6249] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 985.329531][ T6249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.556225][ T6249] usb 6-1: usb_control_msg returned -32 [ 985.570224][ T6249] usbtmc 6-1:16.0: can't read capabilities [ 985.803338][ T1595] sctp: [Deprecated]: syz.0.12401 (pid 1595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.803338][ T1595] Use struct sctp_sack_info instead [ 985.921206][ T1601] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 985.922477][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 102 seconds [ 985.929690][ T6249] usb 6-1: USB disconnect, device number 3 [ 985.938563][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 102 seconds [ 985.955381][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 102 seconds [ 985.967055][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 102 seconds [ 986.249192][ T1613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12402'. [ 986.899078][ T1646] sock: sock_set_timeout: `syz.5.12418' (pid 1646) tries to set negative timeout [ 987.705762][ T1676] input: syz1 as /devices/virtual/input/input110 [ 987.883977][ T1683] sctp: [Deprecated]: syz.5.12432 (pid 1683) Use of struct sctp_assoc_value in delayed_ack socket option. [ 987.883977][ T1683] Use struct sctp_sack_info instead [ 988.188884][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 988.239190][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 103 seconds [ 988.250090][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 103 seconds [ 988.261241][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 103 seconds [ 988.272953][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 103 seconds [ 988.305728][ T1689] sock: sock_set_timeout: `syz.1.12436' (pid 1689) tries to set negative timeout [ 988.358778][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 988.366757][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 988.383535][ T9] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 988.403489][ T9] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 988.415017][ T9] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 988.425184][ T9] usb 6-1: config 128 has no interface number 0 [ 988.431943][ T9] usb 6-1: config 128 interface 127 altsetting 14 has an endpoint descriptor with address 0x37, changing to 0x7 [ 988.475052][ T9] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 988.497852][ T9] usb 6-1: config 128 interface 127 has no altsetting 0 [ 988.509367][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 988.523966][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.537767][ T9] usb 6-1: Product: syz [ 988.549791][ T9] usb 6-1: Manufacturer: syz [ 988.554472][ T9] usb 6-1: SerialNumber: syz [ 988.583883][ T1694] syzkaller1: entered promiscuous mode [ 988.597373][ T1694] syzkaller1: entered allmulticast mode [ 988.875517][ T9] usb 6-1: USB disconnect, device number 4 [ 988.907172][T11437] udevd[11437]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 989.248634][ T5955] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 989.407860][ T1716] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 989.446075][ T5955] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 989.478528][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.486635][ T5955] usb 2-1: Product: syz [ 989.518126][ T5955] usb 2-1: Manufacturer: syz [ 989.522810][ T5955] usb 2-1: SerialNumber: syz [ 989.560597][ T5955] usb 2-1: config 0 descriptor?? [ 989.700089][ T1730] netlink: 624 bytes leftover after parsing attributes in process `syz.0.12454'. [ 989.818085][ T5925] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 989.968071][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 989.991917][ T5925] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 990.009632][ T5925] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 990.028093][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 990.036324][ T5925] usb 6-1: Product: syz [ 990.041105][ T5925] usb 6-1: Manufacturer: syz [ 990.045741][ T5925] usb 6-1: SerialNumber: syz [ 990.056387][ T5925] usb 6-1: config 0 descriptor?? [ 990.063839][ T1724] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 990.076434][ T5925] hub 6-1:0.0: bad descriptor, ignoring hub [ 990.082642][ T5925] hub 6-1:0.0: probe with driver hub failed with error -5 [ 990.548315][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 104 seconds [ 990.561524][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 104 seconds [ 990.572793][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 104 seconds [ 990.584267][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 104 seconds [ 990.596204][ T5955] usb 2-1: f81604_read: reg: 100f failed: -EPROTO [ 990.612903][ T5955] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 990.623677][ T5955] usb 2-1: USB disconnect, device number 79 [ 990.634667][ T5955] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 990.675455][ T5530] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 990.691128][ T5530] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 990.702870][ T1724] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 990.717020][ T5955] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 990.872550][ T1724] usb 6-1: device firmware changed [ 990.887649][ T9] usb 6-1: USB disconnect, device number 5 [ 991.027907][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 991.217471][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 991.226382][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 991.247659][ T9] usb 6-1: string descriptor 0 read error: -22 [ 991.264425][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 991.284662][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 991.320183][ T9] usb 6-1: config 0 descriptor?? [ 991.347619][ T1746] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 991.366801][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 991.382761][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 991.707973][ T9] usb 6-1: USB disconnect, device number 6 [ 992.008884][ T9] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 992.179394][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 992.207753][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.259656][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 992.287344][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.515883][ T9] usb 2-1: usb_control_msg returned -32 [ 992.543230][ T9] usbtmc 2-1:16.0: can't read capabilities [ 992.867470][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 105 seconds [ 992.879664][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 105 seconds [ 992.890825][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 105 seconds [ 992.901979][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 105 seconds [ 992.951875][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.960101][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.082405][ T9] usb 2-1: USB disconnect, device number 80 [ 993.479292][ T1849] lo speed is unknown, defaulting to 1000 [ 993.509619][ T1849] lo speed is unknown, defaulting to 1000 [ 993.872228][ T1849] netlink: 5 bytes leftover after parsing attributes in process `syz.0.12497'. [ 993.881726][ T1849] 0ªî{X¹¦: renamed from gretap0 [ 993.892932][ T1849] 0ªî{X¹¦: entered allmulticast mode [ 993.903075][ T1849] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 994.757087][ T1888] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.844490][ T1888] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.922410][ T1888] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.008169][ T1888] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.134878][ T59] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.158803][ T59] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.185930][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 106 seconds [ 995.201217][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 106 seconds [ 995.212301][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 106 seconds [ 995.214022][ T4014] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.223466][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 106 seconds [ 995.252099][ T4014] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.354587][ T1894] syzkaller1: entered promiscuous mode [ 995.361772][ T1894] syzkaller1: entered allmulticast mode [ 995.775118][ T5955] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 995.822755][ T1918] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 995.960193][ T5955] usb 6-1: Using ep0 maxpacket: 8 [ 995.974106][ T5955] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 995.988670][ T5955] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 995.999012][ T5955] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 996.014657][ T5955] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 996.030810][ T5955] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 996.047527][ T5955] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 996.056953][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.205144][ T5925] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 996.288481][ T5955] usb 6-1: GET_CAPABILITIES returned 0 [ 996.294269][ T5955] usbtmc 6-1:16.0: can't read capabilities [ 996.365581][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 996.372367][ T5925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 996.382755][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 996.394039][ T5925] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 996.403423][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.415227][ T5925] usb 2-1: Product: syz [ 996.419417][ T5925] usb 2-1: Manufacturer: syz [ 996.424012][ T5925] usb 2-1: SerialNumber: syz [ 996.497970][ T5955] usb 6-1: USB disconnect, device number 7 [ 996.643531][ T5925] usb 2-1: 0:2 : does not exist [ 996.652524][ T5925] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 996.678815][ T5925] usb 2-1: USB disconnect, device number 81 [ 996.717488][T11437] udevd[11437]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 996.982953][ T1943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 997.494478][ T5925] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 997.513799][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 107 seconds [ 997.525307][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 107 seconds [ 997.536588][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 107 seconds [ 997.548226][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 107 seconds [ 997.664398][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 997.680649][ T5925] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 997.702371][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.732748][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 997.771270][ T5925] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 997.796984][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.830892][ T5925] usb 2-1: config 0 descriptor?? [ 998.265330][ T5925] uclogic 0003:5543:0003.00D9: unknown main item tag 0x0 [ 998.272459][ T5925] uclogic 0003:5543:0003.00D9: unknown main item tag 0x0 [ 998.280850][ T5925] uclogic 0003:5543:0003.00D9: unknown main item tag 0x0 [ 998.288475][ T5925] uclogic 0003:5543:0003.00D9: unknown main item tag 0x0 [ 998.295919][ T5925] uclogic 0003:5543:0003.00D9: unknown main item tag 0x0 [ 998.304219][ T5925] uclogic 0003:5543:0003.00D9: unknown main item tag 0x0 [ 998.311316][ T5925] uclogic 0003:5543:0003.00D9: unknown main item tag 0x0 [ 998.326657][ T5925] uclogic 0003:5543:0003.00D9: hidraw0: USB HID vff.fd Device [HID 5543:0003] on usb-dummy_hcd.1-1/input0 [ 998.460339][ T5955] usb 2-1: USB disconnect, device number 82 [ 999.127999][ T3514] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.210206][ T3514] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.285524][ T3514] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.297078][ T5925] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 999.376858][ T3514] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.463256][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 999.476257][ T5925] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 999.499958][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.544326][ T5925] pvrusb2: Hardware description: Terratec Grabster AV400 [ 999.573173][ T5925] pvrusb2: ********** [ 999.577423][ T5925] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 999.603639][ T5925] pvrusb2: Important functionality might not be entirely working. [ 999.622587][ T5925] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 999.646439][ T5925] pvrusb2: ********** [ 999.650735][ T3514] bridge_slave_1: left allmulticast mode [ 999.657747][ T3514] bridge_slave_1: left promiscuous mode [ 999.667970][ T3514] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.687727][ T3514] bridge_slave_0: left allmulticast mode [ 999.693592][ T3514] bridge_slave_0: left promiscuous mode [ 999.699596][ T3514] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.747682][ T2345] pvrusb2: Invalid write control endpoint [ 999.842235][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 108 seconds [ 999.853460][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 108 seconds [ 999.864760][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 108 seconds [ 999.876339][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 108 seconds [ 999.891389][ T2345] pvrusb2: Invalid write control endpoint [ 999.897518][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 999.907030][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 999.914802][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 999.925005][ T2345] pvrusb2: Device being rendered inoperable [ 999.946728][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 999.949894][ T5884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 999.954005][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 999.956923][ T2345] pvrusb2: Attached sub-driver cx25840 [ 999.975410][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 999.985881][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 999.990660][ T5884] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 999.997134][ T2001] pvrusb2: Attempted to execute control transfer when device not ok [ 1000.014232][ T5884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1000.035042][ T1212] usb 2-1: USB disconnect, device number 83 [ 1000.042613][ T5884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1000.054264][ T5884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1000.366408][ T3514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.377917][ T3514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.388925][ T3514] bond0 (unregistering): Released all slaves [ 1000.434960][ T2004] lo speed is unknown, defaulting to 1000 [ 1000.455912][ T2004] lo speed is unknown, defaulting to 1000 [ 1000.497835][ T3514] tipc: Disabling bearer [ 1000.509767][ T3514] tipc: Left network mode [ 1001.496432][ T3514] hsr_slave_0: left promiscuous mode [ 1001.502789][ T3514] hsr_slave_1: left promiscuous mode [ 1001.508764][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.516688][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.524972][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.539752][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.570522][ T3514] veth1_macvtap: left promiscuous mode [ 1001.577055][ T3514] veth0_macvtap: left promiscuous mode [ 1001.583597][ T3514] veth1_vlan: left promiscuous mode [ 1001.589199][ T3514] veth0_vlan: left promiscuous mode [ 1001.601709][ T2031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12567'. [ 1002.142199][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 109 seconds [ 1002.153308][ T5884] Bluetooth: hci4: command tx timeout [ 1002.161349][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 109 seconds [ 1002.173044][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 109 seconds [ 1002.184426][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 109 seconds [ 1002.443786][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1002.472881][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1002.505796][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1002.535789][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1002.551212][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1002.569413][ T3514] team0 (unregistering): Port device team_slave_1 removed [ 1002.628803][ T3514] team0 (unregistering): Port device team_slave_0 removed [ 1003.249906][ T2037] lo speed is unknown, defaulting to 1000 [ 1003.287424][ T2037] lo speed is unknown, defaulting to 1000 [ 1003.310330][ T2004] chnl_net:caif_netlink_parms(): no params data found [ 1003.622093][ T2004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.630911][ T2004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.638332][ T2004] bridge_slave_0: entered allmulticast mode [ 1003.647054][ T2004] bridge_slave_0: entered promiscuous mode [ 1003.700589][ T2004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.716605][ T2004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.728444][ T2004] bridge_slave_1: entered allmulticast mode [ 1003.739698][ T2004] bridge_slave_1: entered promiscuous mode [ 1003.800493][ T3514] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.951790][ T2004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.971729][ T2004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.013383][ T3514] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.099616][ T3514] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.124051][ T2004] team0: Port device team_slave_0 added [ 1004.130589][ T2037] chnl_net:caif_netlink_parms(): no params data found [ 1004.151782][ T2004] team0: Port device team_slave_1 added [ 1004.213035][ T3514] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.223074][ T5884] Bluetooth: hci4: command tx timeout [ 1004.241936][ T2004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.248932][ T2004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.274885][ C0] vkms_vblank_simulate: vblank timer overrun [ 1004.282690][ T2004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.317065][ T2004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.324403][ T2004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.350318][ C0] vkms_vblank_simulate: vblank timer overrun [ 1004.357563][ T2004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.467093][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 110 seconds [ 1004.480624][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 110 seconds [ 1004.492255][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 110 seconds [ 1004.503404][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 110 seconds [ 1004.592368][ T2004] hsr_slave_0: entered promiscuous mode [ 1004.599398][ T2004] hsr_slave_1: entered promiscuous mode [ 1004.611964][ T2004] debugfs: 'hsr0' already exists in 'hsr' [ 1004.617790][ T2004] Cannot create hsr debugfs directory [ 1004.620966][ T5884] Bluetooth: hci2: command tx timeout [ 1004.631332][ T2037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.646865][ T2037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.656683][ T2037] bridge_slave_0: entered allmulticast mode [ 1004.668619][ T2037] bridge_slave_0: entered promiscuous mode [ 1004.744299][ T2037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.758293][ T2037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.768011][ T2037] bridge_slave_1: entered allmulticast mode [ 1004.790127][ T2037] bridge_slave_1: entered promiscuous mode [ 1004.973715][ T2037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.985365][ T3514] bridge0: port 3(batadv0) entered disabled state [ 1004.997215][ T3514] bridge_slave_1: left allmulticast mode [ 1005.003467][ T3514] bridge_slave_1: left promiscuous mode [ 1005.009338][ T3514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.021119][ T3514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.036377][ T3514] tipc: Resetting bearer [ 1005.384591][ T3514] tipc: Disabling bearer [ 1005.432780][ T3514] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1005.607725][ T3514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.618754][ T3514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.629791][ T3514] bond0 (unregistering): Released all slaves [ 1005.655222][ T2037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.773553][ T3514] tipc: Disabling bearer [ 1005.781866][ T3514] tipc: Left network mode [ 1005.862363][ T2037] team0: Port device team_slave_0 added [ 1005.896616][ T2037] team0: Port device team_slave_1 added [ 1005.973596][ T2037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.982557][ T2037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.020134][ T2037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.118750][ T2037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.129205][ T2037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.188803][ T2037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.300169][ T5884] Bluetooth: hci4: command tx timeout [ 1006.440492][ T2102] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12577'. [ 1006.659056][ T3514] hsr_slave_0: left promiscuous mode [ 1006.666029][ T3514] hsr_slave_1: left promiscuous mode [ 1006.679322][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.694660][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.702155][ T5884] Bluetooth: hci2: command tx timeout [ 1006.716937][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.731336][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.774892][ T3514] veth1_macvtap: left promiscuous mode [ 1006.792273][ T3514] veth0_macvtap: left promiscuous mode [ 1006.798042][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 111 seconds [ 1006.809227][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 111 seconds [ 1006.817843][ T3514] veth1_vlan: left promiscuous mode [ 1006.820660][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 111 seconds [ 1006.837787][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 111 seconds [ 1006.849276][ T3514] veth0_vlan: left promiscuous mode [ 1007.023364][ T3514] pim6reg9 (unregistering): left allmulticast mode [ 1007.047754][ T3514] pimreg (unregistering): left allmulticast mode [ 1007.568082][ T3514] team0 (unregistering): Port device team_slave_1 removed [ 1007.651655][ T2119] program syz.4.12582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1007.700501][ T3514] team0 (unregistering): Port device C removed [ 1008.370542][ T2037] hsr_slave_0: entered promiscuous mode [ 1008.378873][ T5884] Bluetooth: hci4: command tx timeout [ 1008.384418][ T2037] hsr_slave_1: entered promiscuous mode [ 1008.788427][ T5884] Bluetooth: hci2: command tx timeout [ 1008.861348][ T2004] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1008.932917][ T2004] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1008.981954][ T2004] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1009.033465][ T2004] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1009.099566][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 112 seconds [ 1009.110580][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 112 seconds [ 1009.121742][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 112 seconds [ 1009.132832][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 112 seconds [ 1009.246067][ T3514] IPVS: stop unused estimator thread 0... [ 1009.400435][ T2157] bridge0: port 3(syz_tun) entered blocking state [ 1009.407062][ T2157] bridge0: port 3(syz_tun) entered disabled state [ 1009.429521][ T2157] syz_tun: entered allmulticast mode [ 1009.437094][ T2157] syz_tun: entered promiscuous mode [ 1009.450465][ T2157] bridge0: port 3(syz_tun) entered blocking state [ 1009.457483][ T2157] bridge0: port 3(syz_tun) entered forwarding state [ 1009.673988][ T2165] overlayfs: invalid origin (0000) [ 1009.706984][ T2037] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1009.769270][ T2037] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1009.819491][ T2037] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1009.842442][ T2037] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1009.929983][ T2004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.040408][ T2004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.085112][T22616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.092388][T22616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.120265][T22616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.127488][T22616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.305885][ T2037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.366529][ T2037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.389615][T22616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.396807][T22616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.437177][T22616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.444568][T22616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.859885][ T5884] Bluetooth: hci2: command tx timeout [ 1010.987022][ T2004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.193840][ T2037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.418798][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 113 seconds [ 1011.429684][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 113 seconds [ 1011.440870][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 113 seconds [ 1011.451986][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 113 seconds [ 1012.008682][ T2004] veth0_vlan: entered promiscuous mode [ 1012.072026][ T2004] veth1_vlan: entered promiscuous mode [ 1012.189538][ T2004] veth0_macvtap: entered promiscuous mode [ 1012.225392][ T2004] veth1_macvtap: entered promiscuous mode [ 1012.241172][ T2037] veth0_vlan: entered promiscuous mode [ 1012.282038][ T2037] veth1_vlan: entered promiscuous mode [ 1012.389683][ T2004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.440137][ T2004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.502204][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.527358][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.548825][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.590044][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.620244][ T2037] veth0_macvtap: entered promiscuous mode [ 1012.665444][ T2037] veth1_macvtap: entered promiscuous mode [ 1012.774401][ T2037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.839763][ T2037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.918733][ T3514] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.960219][ T3514] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.985421][ T3514] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.006620][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.035714][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.076459][ T3514] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.259959][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.313410][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.700958][ T2311] o2cb: This node has not been configured. [ 1013.740447][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 114 seconds [ 1013.751841][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 114 seconds [ 1013.764225][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 114 seconds [ 1013.775452][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 114 seconds [ 1013.799487][ T2309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.813550][ T2311] o2cb: Cluster check failed. Fix errors before retrying. [ 1013.861491][ T2309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.879245][ T2311] (syz.0.12621,2311,1):user_dlm_register:674 ERROR: status = -22 [ 1013.919935][ T2311] (syz.0.12621,2311,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1014.030008][ T2301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.051364][ T2301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.543858][ T2338] batadv_slave_0: entered promiscuous mode [ 1014.577577][ T2335] batadv_slave_0: left promiscuous mode [ 1014.896157][ T2356] netlink: 'syz.6.12635': attribute type 21 has an invalid length. [ 1014.956049][ T2356] netlink: 176 bytes leftover after parsing attributes in process `syz.6.12635'. [ 1016.055717][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 115 seconds [ 1016.066853][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 115 seconds [ 1016.079306][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 115 seconds [ 1016.090741][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 115 seconds [ 1018.373999][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 116 seconds [ 1018.385029][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 116 seconds [ 1018.396230][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 116 seconds [ 1018.407373][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 116 seconds [ 1018.864272][ T5955] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1019.039529][ T5955] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.053131][ T5955] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1019.080287][ T5955] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1019.109713][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.131866][ T5955] usb 7-1: Product: syz [ 1019.138575][ T5955] usb 7-1: Manufacturer: syz [ 1019.148980][ T5955] usb 7-1: SerialNumber: syz [ 1019.157952][ T5955] usb 7-1: config 0 descriptor?? [ 1019.171169][ T5955] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1019.191744][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1019.208731][ T5955] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1019.235655][ T5955] usb 7-1: media controller created [ 1019.327720][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1019.417552][ T5955] DVB: Unable to find symbol tda10046_attach() [ 1019.445533][ T5955] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1019.463172][ T5955] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1019.909303][ T2576] netlink: 'syz.0.12684': attribute type 2 has an invalid length. [ 1019.919333][ T2576] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12684'. [ 1019.929450][ T2576] nbd: must specify a device to reconfigure [ 1020.280353][ T5955] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1020.330523][ T2593] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input111 [ 1020.383463][ T5955] usb 7-1: USB disconnect, device number 2 [ 1020.692783][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 117 seconds [ 1020.703764][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 117 seconds [ 1020.715964][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 117 seconds [ 1020.727398][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 117 seconds [ 1021.303739][ T2640] input: syz1 as /devices/virtual/input/input112 [ 1021.800724][ T2666] unknown channel width for channel at 909000KHz? [ 1022.405229][ T5925] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1022.588358][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.622067][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.641314][ T5925] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1022.681539][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.710005][ T5925] usb 7-1: config 0 descriptor?? [ 1022.856939][T22804] hid-generic 0000:0000:0000.00DA: unknown main item tag 0x0 [ 1022.882437][T22804] hid-generic 0000:0000:0000.00DA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1023.012446][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 118 seconds [ 1023.026456][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 118 seconds [ 1023.038663][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 118 seconds [ 1023.050169][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 118 seconds [ 1023.137436][ T5925] cm6533_jd 0003:0D8C:0022.00DB: unknown main item tag 0x0 [ 1023.175729][ T5925] cm6533_jd 0003:0D8C:0022.00DB: unknown main item tag 0x0 [ 1023.229621][ T5925] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.00DB/input/input113 [ 1023.302252][ T5925] cm6533_jd 0003:0D8C:0022.00DB: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 1023.346760][ T2735] netlink: 184 bytes leftover after parsing attributes in process `syz.0.12720'. [ 1023.407551][ T5925] usb 7-1: USB disconnect, device number 3 [ 1023.488485][ T2737] fido_id[2737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1023.710629][ T2742] input: syz0 as /devices/virtual/input/input114 [ 1024.501124][T22804] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1024.678856][T22804] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1024.710529][T22804] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1024.758581][T22804] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1024.796851][T22804] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1024.816708][T22804] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1024.832989][T22804] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1024.847213][T22804] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1024.869411][T22804] usb 7-1: Product: syz [ 1024.874108][T22804] usb 7-1: Manufacturer: syz [ 1024.915865][T22804] cdc_wdm 7-1:1.0: skipping garbage [ 1024.926502][T22804] cdc_wdm 7-1:1.0: skipping garbage [ 1024.947838][T22804] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1024.969413][T22804] cdc_wdm 7-1:1.0: Unknown control protocol [ 1025.140288][ C0] cdc_wdm 7-1:1.0: unknown notification 2 received: index 14891 len 53292 [ 1025.331052][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 119 seconds [ 1025.342942][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 119 seconds [ 1025.354578][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 119 seconds [ 1025.366055][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 119 seconds [ 1025.378335][T22804] usb 7-1: USB disconnect, device number 4 [ 1025.764026][ T2832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12745'. [ 1026.306398][ T2864] loop8: detected capacity change from 0 to 8 [ 1026.336939][ T2864] Dev loop8: unable to read RDB block 8 [ 1026.354270][ T2864] loop8: unable to read partition table [ 1026.382280][ T2864] loop8: partition table beyond EOD, truncated [ 1026.397665][ T2864] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1026.622481][ T5912] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1026.795649][ T5912] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1026.804848][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.813195][ T5912] usb 7-1: Product: syz [ 1026.817392][ T5912] usb 7-1: Manufacturer: syz [ 1026.822379][ T5912] usb 7-1: SerialNumber: syz [ 1026.829090][ T5912] usb 7-1: config 0 descriptor?? [ 1026.962685][ T2885] overlayfs: failed to clone upperpath [ 1027.021720][ T2887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12755'. [ 1027.650137][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 120 seconds [ 1027.661473][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 120 seconds [ 1027.673887][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 120 seconds [ 1027.685138][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 120 seconds [ 1027.697104][ T5912] usb 7-1: f81604_write: reg: 105 data: 92 failed: -EPROTO [ 1027.715703][ T5912] f81604 7-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1027.743774][ T5912] f81604 7-1:0.0: probe with driver f81604 failed with error -71 [ 1027.798692][ T5912] usb 7-1: USB disconnect, device number 5 [ 1028.768717][ T5912] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1028.928621][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 1028.935706][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1028.946951][ T5912] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1028.956249][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.966697][ T5912] usb 7-1: config 0 descriptor?? [ 1029.182502][ T5912] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1029.390079][ T5912] usb 7-1: USB disconnect, device number 6 [ 1029.629646][ T2950] overlayfs: failed to clone upperpath [ 1029.978640][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 121 seconds [ 1029.991454][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 121 seconds [ 1030.002618][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 121 seconds [ 1030.013747][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 121 seconds [ 1030.453352][ T2982] block nbd6: NBD_DISCONNECT [ 1030.463970][ T2982] block nbd6: Send disconnect failed -22 [ 1030.485445][ T2976] block nbd6: Disconnected due to user request. [ 1030.505920][ T2976] block nbd6: shutting down sockets [ 1030.810139][ T2996] syzkaller1: entered promiscuous mode [ 1030.819707][ T2996] syzkaller1: entered allmulticast mode [ 1032.286896][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 122 seconds [ 1032.298069][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 122 seconds [ 1032.309340][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 122 seconds [ 1032.320647][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 122 seconds [ 1032.516159][ T3052] syzkaller1: entered promiscuous mode [ 1032.522692][ T3052] syzkaller1: entered allmulticast mode [ 1033.792075][ T3089] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1034.605996][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 123 seconds [ 1034.617090][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 123 seconds [ 1034.628352][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 123 seconds [ 1034.640611][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 123 seconds [ 1034.713520][ T3115] syzkaller1: entered promiscuous mode [ 1034.735340][ T3115] syzkaller1: entered allmulticast mode [ 1035.671732][ T3137] autofs: Bad value for 'fd' [ 1035.755535][T22804] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1035.915252][T22804] usb 7-1: Using ep0 maxpacket: 8 [ 1035.946045][T22804] usb 7-1: config 0 has no interfaces? [ 1035.951599][T22804] usb 7-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1035.952957][ T3148] netlink: 348 bytes leftover after parsing attributes in process `syz.0.12846'. [ 1035.974833][T22804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.031017][T22804] usb 7-1: config 0 descriptor?? [ 1036.156671][ T3152] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12848'. [ 1036.175189][ T3152] gretap0: entered promiscuous mode [ 1036.195100][ T3152] netlink: 5 bytes leftover after parsing attributes in process `syz.0.12848'. [ 1036.210119][ T3152] 0ªî{X¹¦: renamed from gretap0 [ 1036.239775][ T3152] 0ªî{X¹¦: left promiscuous mode [ 1036.254489][ T3152] 0ªî{X¹¦: entered allmulticast mode [ 1036.260398][ T2890] usb 7-1: USB disconnect, device number 7 [ 1036.290094][ T3152] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1036.926658][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 124 seconds [ 1036.937638][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 124 seconds [ 1036.948939][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 124 seconds [ 1036.960506][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 124 seconds [ 1036.982419][ T3174] syzkaller1: entered promiscuous mode [ 1036.992290][ T3174] syzkaller1: entered allmulticast mode [ 1037.772056][ T3207] syzkaller1: entered promiscuous mode [ 1037.780293][ T3207] syzkaller1: entered allmulticast mode [ 1038.108634][ T3223] netlink: 14 bytes leftover after parsing attributes in process `syz.6.12869'. [ 1038.552557][ T3223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.589921][ T3223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.616158][ T3223] bond0 (unregistering): Released all slaves [ 1039.173667][ T3263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1039.243937][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 125 seconds [ 1039.254835][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 125 seconds [ 1039.266515][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 125 seconds [ 1039.278325][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 125 seconds [ 1040.719902][ T3316] syzkaller1: entered promiscuous mode [ 1040.728836][ T3316] syzkaller1: entered allmulticast mode [ 1041.568098][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 126 seconds [ 1041.579089][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 126 seconds [ 1041.590985][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 126 seconds [ 1041.602104][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 126 seconds [ 1042.883872][ T3364] syzkaller1: entered promiscuous mode [ 1042.889413][ T3364] syzkaller1: entered allmulticast mode [ 1043.692719][ T3388] kvm: user requested TSC rate below hardware speed [ 1043.881969][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 127 seconds [ 1043.893073][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 127 seconds [ 1043.904430][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 127 seconds [ 1043.915555][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 127 seconds [ 1044.358311][ T3410] input: syz1 as /devices/virtual/input/input116 [ 1046.215995][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 128 seconds [ 1046.228112][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 128 seconds [ 1046.230714][ T3485] overlayfs: failed to clone lowerpath [ 1046.239264][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 128 seconds [ 1046.239301][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 128 seconds [ 1046.419349][ T3492] input: syz1 as /devices/virtual/input/input117 [ 1047.154117][ T3521] syzkaller1: entered promiscuous mode [ 1047.160948][ T3521] syzkaller1: entered allmulticast mode [ 1047.606802][ T3544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12969'. [ 1048.141207][ T6249] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1048.327491][ T6249] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1048.344810][ T6249] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.369629][ T6249] usb 7-1: Product: syz [ 1048.382659][ T6249] usb 7-1: Manufacturer: syz [ 1048.390696][ T6249] usb 7-1: SerialNumber: syz [ 1048.410071][ T6249] usb 7-1: config 0 descriptor?? [ 1048.521414][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 129 seconds [ 1048.532406][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 129 seconds [ 1048.543674][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 129 seconds [ 1048.555603][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 129 seconds [ 1048.879701][ T6249] usb 7-1: Firmware: major: 64, minor: 74, hardware type: UNKNOWN (234) [ 1049.084956][ T6249] usb 7-1: failed to fetch extended address, random address set [ 1049.121305][ T6249] usb 7-1: atusb_probe: initialization failed, error = -524 [ 1049.138725][ T6249] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 1049.218540][ T6249] usb 7-1: USB disconnect, device number 8 [ 1049.392422][ T3610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1050.811622][ T3659] program syz.7.12999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1050.841700][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 130 seconds [ 1050.853005][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 130 seconds [ 1050.864309][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 130 seconds [ 1050.875782][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 130 seconds [ 1051.385047][ T3681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.216382][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1052.373529][ T9] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1052.386137][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.404172][ T9] usb 7-1: config 0 descriptor?? [ 1052.412785][ T9] cp210x 7-1:0.0: cp210x converter detected [ 1052.822840][ T9] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1052.844443][ T9] cp210x 7-1:0.0: GPIO initialisation failed: -524 [ 1052.882719][ T9] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1053.047927][ T9] usb 7-1: USB disconnect, device number 9 [ 1053.069192][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1053.095620][ T9] cp210x 7-1:0.0: device disconnected [ 1053.163031][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 131 seconds [ 1053.173904][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 131 seconds [ 1053.184966][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 131 seconds [ 1053.196355][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 131 seconds [ 1053.356835][ T30] audit: type=1326 audit(2000001550.321:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3755 comm="syz.4.13018" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e5498eb69 code=0x0 [ 1054.367352][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.379164][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.455263][ T3818] kernel profiling enabled (shift: 63) [ 1055.463085][ T3818] profiling shift: 63 too large [ 1055.481937][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 132 seconds [ 1055.492788][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 132 seconds [ 1055.503957][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 132 seconds [ 1055.515572][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 132 seconds [ 1055.757186][ T3828] lo speed is unknown, defaulting to 1000 [ 1055.781242][ T3831] 9pnet_fd: Insufficient options for proto=fd [ 1056.127182][ T3842] netlink: 14556 bytes leftover after parsing attributes in process `syz.6.13052'. [ 1056.553528][ T3859] netlink: 112 bytes leftover after parsing attributes in process `syz.4.13059'. [ 1056.766164][ T3859] syz.4.13059 (3859) used greatest stack depth: 17864 bytes left [ 1057.237432][ T3888] overlayfs: failed to clone lowerpath [ 1057.807938][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 133 seconds [ 1057.820877][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 133 seconds [ 1057.832370][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 133 seconds [ 1057.847129][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 133 seconds [ 1058.430377][ T3912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1058.645482][ T3918] pimreg: entered allmulticast mode [ 1060.123516][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 134 seconds [ 1060.135565][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 134 seconds [ 1060.147615][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 134 seconds [ 1060.159221][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 134 seconds [ 1061.107475][ T3979] lo speed is unknown, defaulting to 1000 [ 1061.578084][ T3997] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input118 [ 1061.828822][ T4002] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1062.131852][ T6249] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1062.155953][ T6249] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1062.175145][ T6249] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1062.203935][ T6249] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1062.234573][ T6249] rtc rtc0: __rtc_set_alarm: err=-22 [ 1062.441813][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 135 seconds [ 1062.452791][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 135 seconds [ 1062.463976][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 135 seconds [ 1062.475178][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 135 seconds [ 1062.907264][ T4034] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1062.915009][ T5963] IPVS: starting estimator thread 0... [ 1063.011327][ T4036] IPVS: using max 26 ests per chain, 62400 per kthread [ 1064.764845][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 136 seconds [ 1064.775797][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 136 seconds [ 1064.787457][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 136 seconds [ 1064.798914][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 136 seconds [ 1065.161249][ T4038] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1065.163214][ T5884] Bluetooth: hci1: command 0x0c1a tx timeout [ 1065.979833][ T4038] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1065.988117][ T4038] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1065.994252][ T4038] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1066.001605][ T4038] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1066.007604][ T4038] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1066.017904][ T4038] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1066.026463][ T4038] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1066.033076][ T4038] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1066.076449][ T4038] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1066.238107][ T4069] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1066.545603][ T4079] program syz.7.13153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1066.718564][ T30] audit: type=1326 audit(2000001563.671:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4085 comm="syz.0.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1066.781216][ T30] audit: type=1326 audit(2000001563.681:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4085 comm="syz.0.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1066.821207][ T30] audit: type=1326 audit(2000001563.681:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4085 comm="syz.0.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1066.832256][ T4087] lo speed is unknown, defaulting to 1000 [ 1066.909607][ T4088] lo speed is unknown, defaulting to 1000 [ 1066.931226][ T30] audit: type=1326 audit(2000001563.681:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4085 comm="syz.0.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1066.964990][ T30] audit: type=1326 audit(2000001563.681:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4085 comm="syz.0.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1066.989163][ T30] audit: type=1326 audit(2000001563.681:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4085 comm="syz.0.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1067.026485][ T30] audit: type=1326 audit(2000001563.681:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4085 comm="syz.0.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1067.089551][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 137 seconds [ 1067.100637][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 137 seconds [ 1067.111935][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 137 seconds [ 1067.123231][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 137 seconds [ 1067.129822][ T30] audit: type=1326 audit(2000001563.681:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4085 comm="syz.0.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1067.223450][ T30] audit: type=1326 audit(2000001563.681:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4085 comm="syz.0.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1067.248258][ T5877] Bluetooth: hci0: command 0x0c1a tx timeout [ 1067.254459][ T30] audit: type=1326 audit(2000001563.681:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4085 comm="syz.0.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1067.283786][ T4097] overlayfs: failed to clone upperpath [ 1068.041182][ T5884] Bluetooth: hci2: command 0x0c1a tx timeout [ 1068.048866][ T5877] Bluetooth: hci4: command 0x0c1a tx timeout [ 1068.049643][T23781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1068.645185][ T4158] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13183'. [ 1069.178219][ T4174] lo speed is unknown, defaulting to 1000 [ 1069.318229][ T4175] lo speed is unknown, defaulting to 1000 [ 1069.412722][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 138 seconds [ 1069.430045][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 138 seconds [ 1069.442812][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 138 seconds [ 1069.453934][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 138 seconds [ 1069.679617][ T4191] netlink: 19 bytes leftover after parsing attributes in process `syz.6.13195'. [ 1070.121269][T23781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1070.127526][T23781] Bluetooth: hci2: command 0x0c1a tx timeout [ 1070.133738][ T4136] Bluetooth: hci4: command 0x0c1a tx timeout [ 1070.761264][ T6249] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1070.912967][ T6249] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1070.925031][ T6249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.935574][ T6249] usb 7-1: config 0 descriptor?? [ 1070.949183][ T6249] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1071.347851][ T6249] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 1071.721849][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 139 seconds [ 1071.732742][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 139 seconds [ 1071.747008][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 139 seconds [ 1071.750362][ T6249] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1071.758099][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 139 seconds [ 1071.964759][ T6249] usb 7-1: USB disconnect, device number 10 [ 1072.203219][T23781] Bluetooth: hci2: command 0x0c1a tx timeout [ 1072.209976][ T4136] Bluetooth: hci4: command 0x0c1a tx timeout [ 1072.214275][ T4244] lo speed is unknown, defaulting to 1000 [ 1072.677441][ T4244] netlink: 'syz.0.13218': attribute type 10 has an invalid length. [ 1072.687320][ T4244] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13218'. [ 1072.892790][ T4257] netlink: 'syz.6.13223': attribute type 10 has an invalid length. [ 1072.919053][ T4257] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13223'. [ 1072.988225][ T4257] team0: Port device geneve0 added [ 1073.525483][ T4280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1073.795436][ T4292] netlink: 'syz.0.13236': attribute type 10 has an invalid length. [ 1073.805255][ T4292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13236'. [ 1073.863276][ T4292] team0: Port device geneve0 added [ 1074.047191][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 140 seconds [ 1074.059228][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 140 seconds [ 1074.071238][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 140 seconds [ 1074.082454][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 140 seconds [ 1074.323072][ T4308] netlink: 428 bytes leftover after parsing attributes in process `syz.0.13246'. [ 1074.332738][ T4308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13246'. [ 1074.727426][ T4326] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1074.735064][ T4326] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1074.743089][ T4326] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1074.749523][ T4326] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1074.756926][ T4326] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1074.763379][ T4326] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1074.773235][ T4326] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1074.779667][ T4326] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1074.787260][ T4326] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1074.793720][ T4326] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1075.481549][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1075.662283][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1075.669533][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.680692][ T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1075.690891][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.702828][ T9] usb 7-1: config 0 descriptor?? [ 1075.800504][ T4136] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1076.125000][ T9] mcp2221 0003:04D8:00DD.00DC: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1076.367102][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 141 seconds [ 1076.378057][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 141 seconds [ 1076.389225][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 141 seconds [ 1076.400831][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 141 seconds [ 1076.520883][ T9] usb 7-1: USB disconnect, device number 11 [ 1077.106453][ T4393] dvmrp0: entered allmulticast mode [ 1078.447628][ T4459] netlink: 14548 bytes leftover after parsing attributes in process `syz.7.13311'. [ 1078.686178][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 142 seconds [ 1078.698451][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 142 seconds [ 1078.709708][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 142 seconds [ 1078.723882][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 142 seconds [ 1078.841455][ T2890] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1078.992374][ T2890] usb 7-1: Using ep0 maxpacket: 32 [ 1079.000433][ T2890] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1079.018924][ T2890] usb 7-1: config 0 has no interface number 0 [ 1079.032333][ T2890] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1079.047386][ T2890] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1079.057491][ T2890] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1079.069570][ T2890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.078931][ T2890] usb 7-1: Product: syz [ 1079.089120][ T2890] usb 7-1: Manufacturer: syz [ 1079.095952][ T2890] usb 7-1: SerialNumber: syz [ 1079.104278][ T2890] usb 7-1: config 0 descriptor?? [ 1079.718442][ T2890] appletouch 7-1:0.85: Geyser mode initialized. [ 1079.728235][ T2890] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input119 [ 1079.939056][ T9] usb 7-1: USB disconnect, device number 12 [ 1079.983831][ T9] appletouch 7-1:0.85: input: appletouch disconnected [ 1081.029515][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 143 seconds [ 1081.046608][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 143 seconds [ 1081.057730][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 143 seconds [ 1081.069206][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 143 seconds [ 1081.152897][ T4519] netlink: 'syz.6.13340': attribute type 10 has an invalid length. [ 1081.164706][ T4519] net_ratelimit: 68 callbacks suppressed [ 1081.164719][ T4519] openvswitch: netlink: Flow key attr not present in new flow. [ 1081.417605][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13345'. [ 1081.915635][ T4550] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1081.925803][ T4550] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1081.938150][ T4550] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 1082.491239][ T6249] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1082.620872][ T4572] lo speed is unknown, defaulting to 1000 [ 1082.651600][ T6249] usb 7-1: Using ep0 maxpacket: 32 [ 1082.663265][ T6249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.685869][ T6249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.709584][ T6249] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1082.719949][ T6249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.754527][ T6249] usb 7-1: config 0 descriptor?? [ 1083.179972][ T6249] ft260 0003:0403:6030.00DD: unknown main item tag 0x7 [ 1083.375974][ T6249] ft260 0003:0403:6030.00DD: chip code: 6424 8183 [ 1083.410212][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 144 seconds [ 1083.421523][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 144 seconds [ 1083.432836][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 144 seconds [ 1083.444057][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 144 seconds [ 1083.745556][ T4600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13376'. [ 1083.783796][ T4600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13376'. [ 1083.828949][ T2890] usb 7-1: USB disconnect, device number 13 [ 1084.597512][ T4630] input: syz1 as /devices/virtual/input/input120 [ 1084.730236][ T4636] netlink: 'syz.0.13393': attribute type 10 has an invalid length. [ 1084.738532][ T4636] openvswitch: netlink: Flow key attr not present in new flow. [ 1085.721629][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 145 seconds [ 1085.733388][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 145 seconds [ 1085.744747][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 145 seconds [ 1085.755998][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 145 seconds [ 1085.805669][ T4668] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13407'. [ 1086.225443][ T4684] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13415'. [ 1086.237210][ T4684] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13415'. [ 1087.068943][ T4715] pim6reg1: entered promiscuous mode [ 1087.074558][ T4715] pim6reg1: entered allmulticast mode [ 1087.961332][ T4136] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1087.961405][T23781] Bluetooth: hci5: command 0x1003 tx timeout [ 1088.041766][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 146 seconds [ 1088.053123][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 146 seconds [ 1088.065002][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 146 seconds [ 1088.076397][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 146 seconds [ 1088.190976][ T4768] overlayfs: failed to clone lowerpath [ 1088.662224][ T4787] syzkaller1: entered promiscuous mode [ 1088.667818][ T4787] syzkaller1: entered allmulticast mode [ 1088.815693][ T4791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1088.948299][ T4795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1089.321556][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1089.506202][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1089.519031][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1089.526417][ T4822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13477'. [ 1089.531456][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1089.552971][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1089.569520][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1089.583671][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.601989][ T9] usb 7-1: config 0 descriptor?? [ 1090.034405][ T9] plantronics 0003:047F:FFFF.00DE: ignoring exceeding usage max [ 1090.049437][ T9] plantronics 0003:047F:FFFF.00DE: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1090.366732][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 147 seconds [ 1090.377665][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 147 seconds [ 1090.388779][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 147 seconds [ 1090.400074][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 147 seconds [ 1091.481835][ T4866] dvmrp17: entered allmulticast mode [ 1091.567606][ T4872] syzkaller1: entered promiscuous mode [ 1091.573477][ T4872] syzkaller1: entered allmulticast mode [ 1091.710048][ T4877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1091.939940][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13502'. [ 1091.972452][ T4887] pim6reg1: entered promiscuous mode [ 1091.977997][ T4887] pim6reg1: entered allmulticast mode [ 1092.134209][ T5925] usb 7-1: USB disconnect, device number 14 [ 1092.335696][ T4901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13510'. [ 1092.687032][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 148 seconds [ 1092.697923][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 148 seconds [ 1092.709286][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 148 seconds [ 1092.720880][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 148 seconds [ 1092.963783][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1092.963803][ T30] audit: type=1326 audit(2000001589.921:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.0.13518" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa5a38eb69 code=0x0 [ 1093.466836][ T4934] syzkaller1: entered promiscuous mode [ 1093.477122][ T4934] syzkaller1: entered allmulticast mode [ 1093.559124][ T4938] syzkaller1: entered promiscuous mode [ 1093.565681][ T4938] syzkaller1: entered allmulticast mode [ 1093.721207][ T4940] input: syz1 as /devices/virtual/input/input121 [ 1094.126831][ T4958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13536'. [ 1094.788016][ T4993] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1094.794562][ T4993] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1094.820444][ T4993] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1094.826983][ T4993] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1094.839371][ T4993] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1094.845884][ T4993] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1094.858542][ T4993] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1094.865110][ T4993] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1094.876172][ T4993] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1094.882633][ T4993] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1095.002434][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 149 seconds [ 1095.014059][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 149 seconds [ 1095.025518][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 149 seconds [ 1095.041914][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 149 seconds [ 1095.828285][ T5037] 9pnet_fd: Insufficient options for proto=fd [ 1096.431432][ T5925] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1096.584026][ T5925] usb 7-1: Using ep0 maxpacket: 16 [ 1096.593566][ T5925] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1096.603119][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.611221][ T5925] usb 7-1: Product: syz [ 1096.615456][ T5925] usb 7-1: Manufacturer: syz [ 1096.620088][ T5925] usb 7-1: SerialNumber: syz [ 1096.627360][ T5925] usb 7-1: config 0 descriptor?? [ 1096.810378][ T5056] overlayfs: failed to clone upperpath [ 1097.048471][ T5925] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1097.059902][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1097.070149][ T5925] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1097.078496][ T5925] usb 7-1: media controller created [ 1097.103095][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1097.250089][ T5925] zl10353_read_register: readreg error (reg=127, ret==0) [ 1097.257312][ T5925] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1097.268266][ T5925] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1097.281279][ T5925] usb 7-1: USB disconnect, device number 15 [ 1097.322192][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 150 seconds [ 1097.338707][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 150 seconds [ 1097.347147][ T5925] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1097.350154][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 150 seconds [ 1097.370742][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 150 seconds [ 1097.921228][ T5071] netlink: 6 bytes leftover after parsing attributes in process `syz.6.13583'. [ 1098.058219][ T5079] netlink: 'syz.6.13587': attribute type 21 has an invalid length. [ 1098.070230][ T5079] netlink: 14548 bytes leftover after parsing attributes in process `syz.6.13587'. [ 1098.394913][ T5092] syzkaller1: entered promiscuous mode [ 1098.400622][ T5092] syzkaller1: entered allmulticast mode [ 1099.113704][ T5122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13608'. [ 1099.466875][ T9] libceph: connect (1)[c::]:6789 error -22 [ 1099.480707][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1099.514880][ T5126] ceph: No mds server is up or the cluster is laggy [ 1099.528116][ T9] libceph: connect (1)[c::]:6789 error -22 [ 1099.541775][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1099.649856][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 151 seconds [ 1099.661328][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 151 seconds [ 1099.673661][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 151 seconds [ 1099.685561][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 151 seconds [ 1099.847370][ T5140] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1100.432473][ T5171] syzkaller1: entered promiscuous mode [ 1100.450367][ T5171] syzkaller1: entered allmulticast mode [ 1100.977389][ T30] audit: type=1326 audit(2000001597.941:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1100.999899][ C0] vkms_vblank_simulate: vblank timer overrun [ 1101.044819][ T30] audit: type=1326 audit(2000001597.941:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1101.072042][ T30] audit: type=1326 audit(2000001597.971:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa5a38d4d0 code=0x7ffc0000 [ 1101.096577][ T30] audit: type=1326 audit(2000001597.971:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1101.120320][ T30] audit: type=1326 audit(2000001597.971:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1101.150239][ T30] audit: type=1326 audit(2000001597.971:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1101.175309][ T30] audit: type=1326 audit(2000001597.971:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1101.199212][ T30] audit: type=1326 audit(2000001597.971:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1101.225562][ T30] audit: type=1326 audit(2000001597.981:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1101.255987][ T30] audit: type=1326 audit(2000001597.981:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a38eb69 code=0x7ffc0000 [ 1101.537166][ T5227] syzkaller1: entered promiscuous mode [ 1101.542852][ T5227] syzkaller1: entered allmulticast mode [ 1101.962891][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 152 seconds [ 1101.973768][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 152 seconds [ 1101.984909][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 152 seconds [ 1101.995969][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 152 seconds [ 1102.771243][T22804] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1102.805734][ T5255] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 1102.821592][ T5255] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1102.883282][ T5257] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13660'. [ 1102.941221][T22804] usb 7-1: Using ep0 maxpacket: 32 [ 1102.950621][T22804] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 1102.959729][T22804] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1102.977066][T22804] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1102.986348][T22804] usb 7-1: config 1 has no interface number 0 [ 1102.992735][T22804] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1103.003908][T22804] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1103.016911][T22804] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1103.026058][T22804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.048010][T22804] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1103.245109][T22804] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 1103.677734][ T5925] usb 7-1: USB disconnect, device number 16 [ 1103.686859][ T5925] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1103.920726][ T5280] input: syz1 as /devices/virtual/input/input122 [ 1104.282686][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 153 seconds [ 1104.293621][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 153 seconds [ 1104.310529][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 153 seconds [ 1104.322207][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 153 seconds [ 1104.564956][ T5306] syzkaller1: entered promiscuous mode [ 1104.578755][ T5306] syzkaller1: entered allmulticast mode [ 1105.028644][ T5324] netlink: 'syz.4.13693': attribute type 29 has an invalid length. [ 1105.040559][ T5324] netlink: 'syz.4.13693': attribute type 29 has an invalid length. [ 1105.057843][ T5324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13693'. [ 1105.070663][ T5322] 9pnet_fd: Insufficient options for proto=fd [ 1105.591303][T22804] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1105.753260][T22804] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1105.765058][T22804] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1105.776330][T22804] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1105.799605][T22804] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1105.822134][T22804] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1105.839022][T22804] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1105.849467][T22804] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1105.857711][T22804] usb 7-1: Product: syz [ 1105.862086][T22804] usb 7-1: Manufacturer: syz [ 1105.872847][T22804] cdc_wdm 7-1:1.0: skipping garbage [ 1105.878360][T22804] cdc_wdm 7-1:1.0: skipping garbage [ 1105.891571][T22804] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1105.898347][T22804] cdc_wdm 7-1:1.0: Unknown control protocol [ 1105.938873][ T5350] binder: 5349:5350 ioctl c0306201 200000000040 returned -14 [ 1106.604148][ T94] block nbd0: Possible stuck request ffff888025b3e000: control (read@0,1024B). Runtime 154 seconds [ 1106.615766][ T94] block nbd0: Possible stuck request ffff888025b3e1c0: control (read@1024,1024B). Runtime 154 seconds [ 1106.627161][ T94] block nbd0: Possible stuck request ffff888025b3e380: control (read@2048,1024B). Runtime 154 seconds [ 1106.638306][ T94] block nbd0: Possible stuck request ffff888025b3e540: control (read@3072,1024B). Runtime 154 seconds [ 1106.720105][ T6249] usb 7-1: USB disconnect, device number 17 [ 1106.727649][ T2282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.744892][ T2282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.484843][ T31] INFO: task syz.3.12068:804 blocked for more than 143 seconds. [ 1107.521243][ T31] Not tainted 6.16.0-next-20250804-syzkaller #0 [ 1107.528074][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1107.549348][ T31] task:syz.3.12068 state:D stack:26440 pid:804 tgid:803 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 1107.578561][ T31] Call Trace: [ 1107.585770][ T31] [ 1107.594358][ T31] __schedule+0x1798/0x4cc0 [ 1107.623319][ T31] ? __lock_acquire+0xab9/0xd20 [ 1107.631330][ T31] ? __lock_acquire+0xab9/0xd20 [ 1107.636264][ T31] ? __pfx___schedule+0x10/0x10 [ 1107.659348][ T31] ? schedule+0x91/0x360 [ 1107.667527][ T31] schedule+0x165/0x360 [ 1107.675883][ T31] schedule_preempt_disabled+0x13/0x30 [ 1107.684782][ T31] __mutex_lock+0x7e6/0x1360 [ 1107.689482][ T31] ? __mutex_lock+0x5b6/0x1360 [ 1107.694523][ T31] ? sync_bdevs+0x1ac/0x340 [ 1107.699101][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1107.704540][ T31] ? iput+0x398/0x9d0 [ 1107.708591][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1107.714342][ T31] sync_bdevs+0x1ac/0x340 [ 1107.718721][ T31] ksys_sync+0xb9/0x150 [ 1107.723019][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1107.727804][ T31] ? rcu_is_watching+0x15/0xb0 [ 1107.732655][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1107.737375][ T31] __ia32_sys_sync+0xe/0x20 [ 1107.742155][ T31] do_syscall_64+0xfa/0x3b0 [ 1107.746729][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1107.752465][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.758601][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1107.763441][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.769370][ T31] RIP: 0033:0x7fa2b738eb69 [ 1107.773863][ T31] RSP: 002b:00007fa2b8152038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1107.782343][ T31] RAX: ffffffffffffffda RBX: 00007fa2b75b5fa0 RCX: 00007fa2b738eb69 [ 1107.790358][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1107.798549][ T31] RBP: 00007fa2b75b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.806676][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1107.814749][ T31] R13: 0000000000000000 R14: 00007fa2b75b5fa0 R15: 00007ffc04d3deb8 [ 1107.823016][ T31] [ 1107.826163][ T31] [ 1107.826163][ T31] Showing all locks held in the system: [ 1107.839921][ T31] 2 locks held by ksoftirqd/1/23: [ 1107.846370][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1107.856868][ T31] #1: ffff888025490168 (&rdev->bss_lock){+.-.}-{3:3}, at: ieee80211_rx_handlers+0xf4/0xb760 [ 1107.867394][ T31] 1 lock held by khungtaskd/31: [ 1107.872468][ T31] #0: ffffffff8e539f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1107.882843][ T31] 2 locks held by getty/5629: [ 1107.887629][ T31] #0: ffff888030b6c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1107.897915][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1107.908666][ T31] 1 lock held by udevd/5876: [ 1107.913552][ T31] #0: ffff888142b61358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1107.923101][ T31] 1 lock held by syz.3.12068/804: [ 1107.928161][ T31] #0: ffff888142b61358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 1107.937813][ T31] [ 1107.940169][ T31] ============================================= [ 1107.940169][ T31] [ 1107.950132][ T31] NMI backtrace for cpu 0 [ 1107.950160][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 1107.950183][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1107.950196][ T31] Call Trace: [ 1107.950203][ T31] [ 1107.950212][ T31] dump_stack_lvl+0x189/0x250 [ 1107.950246][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1107.950273][ T31] ? __pfx__printk+0x10/0x10 [ 1107.950313][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1107.950339][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1107.950364][ T31] ? __pfx__printk+0x10/0x10 [ 1107.950395][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1107.950420][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1107.950453][ T31] watchdog+0xf60/0xfa0 [ 1107.950478][ T31] ? watchdog+0x1e2/0xfa0 [ 1107.950503][ T31] kthread+0x70e/0x8a0 [ 1107.950534][ T31] ? __pfx_watchdog+0x10/0x10 [ 1107.950552][ T31] ? __pfx_kthread+0x10/0x10 [ 1107.950581][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1107.950605][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1107.950629][ T31] ? __pfx_kthread+0x10/0x10 [ 1107.950657][ T31] ret_from_fork+0x3f9/0x770 [ 1107.950684][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.950714][ T31] ? __switch_to_asm+0x39/0x70 [ 1107.950730][ T31] ? __switch_to_asm+0x33/0x70 [ 1107.950746][ T31] ? __pfx_kthread+0x10/0x10 [ 1107.950775][ T31] ret_from_fork_asm+0x1a/0x30 [ 1107.950808][ T31] [ 1107.950820][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1108.099840][ C1] NMI backtrace for cpu 1 [ 1108.099859][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 1108.099880][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1108.099892][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1108.099922][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 5a 26 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1108.099939][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1108.099955][ C1] RAX: e623bd9b562ba700 RBX: ffffffff8196d308 RCX: e623bd9b562ba700 [ 1108.099969][ C1] RDX: 0000000000000001 RSI: ffffffff8dc916eb RDI: ffffffff8c04cf80 [ 1108.099982][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 1108.099996][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fe4b230 [ 1108.100010][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a55b40 [ 1108.100022][ C1] FS: 0000000000000000(0000) GS:ffff8881258de000(0000) knlGS:0000000000000000 [ 1108.100037][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1108.100049][ C1] CR2: 00005555747b05c8 CR3: 0000000076570000 CR4: 00000000003526f0 [ 1108.100065][ C1] DR0: 0000000000000002 DR1: 0000000000000002 DR2: 0000000000000008 [ 1108.100076][ C1] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1108.100088][ C1] Call Trace: [ 1108.100096][ C1] [ 1108.100103][ C1] default_idle+0x13/0x20 [ 1108.100119][ C1] default_idle_call+0x74/0xb0 [ 1108.100137][ C1] do_idle+0x1e8/0x510 [ 1108.100161][ C1] ? __pfx_do_idle+0x10/0x10 [ 1108.100191][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1108.100227][ C1] cpu_startup_entry+0x44/0x60 [ 1108.100247][ C1] start_secondary+0x101/0x110 [ 1108.100267][ C1] common_startup_64+0x13e/0x147 [ 1108.100291][ C1] [ 1108.100878][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1108.290225][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 1108.301233][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1108.311300][ T31] Call Trace: [ 1108.314586][ T31] [ 1108.317526][ T31] dump_stack_lvl+0x99/0x250 [ 1108.322138][ T31] ? __asan_memcpy+0x40/0x70 [ 1108.326740][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1108.331949][ T31] ? __pfx__printk+0x10/0x10 [ 1108.336572][ T31] vpanic+0x281/0x750 [ 1108.340598][ T31] ? __pfx_vpanic+0x10/0x10 [ 1108.345123][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 1108.350688][ T31] ? preempt_schedule+0xae/0xc0 [ 1108.355559][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1108.361052][ T31] panic+0xb9/0xc0 [ 1108.364799][ T31] ? __pfx_panic+0x10/0x10 [ 1108.369227][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1108.374617][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1108.380787][ T31] watchdog+0xf9f/0xfa0 [ 1108.384972][ T31] ? watchdog+0x1e2/0xfa0 [ 1108.389322][ T31] kthread+0x70e/0x8a0 [ 1108.393411][ T31] ? __pfx_watchdog+0x10/0x10 [ 1108.398110][ T31] ? __pfx_kthread+0x10/0x10 [ 1108.402725][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1108.407947][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1108.413178][ T31] ? __pfx_kthread+0x10/0x10 [ 1108.417813][ T31] ret_from_fork+0x3f9/0x770 [ 1108.422435][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.427615][ T31] ? __switch_to_asm+0x39/0x70 [ 1108.432421][ T31] ? __switch_to_asm+0x33/0x70 [ 1108.437209][ T31] ? __pfx_kthread+0x10/0x10 [ 1108.442015][ T31] ret_from_fork_asm+0x1a/0x30 [ 1108.446818][ T31] [ 1108.450207][ T31] Kernel Offset: disabled [ 1108.454538][ T31] Rebooting in 86400 seconds..