last executing test programs: 10.239390803s ago: executing program 4 (id=1640): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x6}}]}, 0x38}}, 0x0) 9.259205643s ago: executing program 3 (id=1641): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) 9.13284066s ago: executing program 4 (id=1643): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0}) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x7fffffffeff3) 8.874306418s ago: executing program 3 (id=1644): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x0, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@multicast1, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x9c, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101, 0xfffffffc}, {@broadcast, 0x52b1}, {@remote}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @loopback, @multicast1, @private=0xa010102, @loopback]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.873564864s ago: executing program 4 (id=1645): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0xfffc}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 8.676055213s ago: executing program 4 (id=1646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x0, 0xffff, 0x0, 0x4}, {0x0, 0x1, 0x200, 0x8, 0x0, 0x40000000}, 0x0, 0x0, 0x1c44}}, @TCA_TBF_RATE64={0xc}]}}]}, 0x6c}}, 0x0) syz_emit_ethernet(0xffffffffffffff80, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x68, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @mptcp=@generic={0x1, 0x0, "9142cc2b04d4917fe04b7025"}, @exp_smc, @fastopen={0x22, 0x7, "cf6af75d5c"}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d98"], 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3001}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000480)=ANY=[], 0x31) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) 8.03399313s ago: executing program 3 (id=1647): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f00000001c0)='./file1\x00') r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket(0x0, 0x0, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) 5.661175741s ago: executing program 1 (id=1654): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000740)={[{@mode={'mode', 0x3d, 0x4000000000000005}}]}) 5.55428103s ago: executing program 0 (id=1655): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}}, 0x0) 5.499386251s ago: executing program 4 (id=1656): syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) dup(0xffffffffffffffff) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1008, 0x0) getxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=@random={'security.', '\x00'}, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x72) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 5.421030017s ago: executing program 1 (id=1657): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 5.361597529s ago: executing program 0 (id=1658): symlinkat(&(0x7f00000001c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00') r0 = landlock_create_ruleset(&(0x7f0000000140)={0xb642}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x2) 5.341103537s ago: executing program 2 (id=1659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "e4"}]}], {0x14}}, 0x8c}}, 0x0) 5.29807643s ago: executing program 3 (id=1660): bpf$PROG_LOAD(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000004c0), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f0000000100)=0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @mcast1, 0x8000}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)='G', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e1d, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x2, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r7, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 5.240985295s ago: executing program 0 (id=1661): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000040e0008001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r1, &(0x7f0000001b40)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x20000890) 5.092799285s ago: executing program 2 (id=1662): mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@metacopy_on}], [{@appraise}], 0x2c}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x8d) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x1, "4ef7289910e0843a8f13f2fe244b73fb24e0fe49951c925bca907f6a609d8f49", 0x0, 0x81}, 0x3c) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f00000002c0), 0x4) r5 = socket(0x21, 0x2, 0x10000000000002) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x103, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r5, 0x110, 0x3) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@multicast2, @empty, 0x0, "e798888beab3af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000080)=0x9, 0x4) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept4$ax25(r6, 0x0, &(0x7f00000000c0), 0x80800) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000, r6}, 0x18) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r7, &(0x7f0000000180), &(0x7f0000000240)=@tcp6=r8, 0x1}, 0x20) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2712, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 4.983824292s ago: executing program 0 (id=1663): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x4, 0x0, &(0x7f00000002c0)="0000ff0c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="440b01000000000028001280090001007665746800000000180002801400010000000000", @ANYBLOB="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", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000003c0)=""/160) semget(0x1, 0x3, 0x88) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff}, 0x48) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000300)={0x2, {0x2, 0x0, 0x0, 0x101}}) 4.753495458s ago: executing program 1 (id=1664): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/53, 0x35}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x0) 3.838247734s ago: executing program 2 (id=1665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) open(0x0, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42d00) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={0x0, 0x0, {0x200000}}) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0xe}], 0x1) 3.026966624s ago: executing program 1 (id=1666): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$unix(r2, 0x0, 0x0, 0xffffffe0, 0x0, 0x0) 2.736275206s ago: executing program 0 (id=1667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x0, [@local, @rand_addr]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local}}}, @ip_tos_int={{0x14}}], 0x58}}], 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.575145215s ago: executing program 2 (id=1668): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$unix(r1, &(0x7f00000050c0)=[{{&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x0) 2.399488576s ago: executing program 3 (id=1669): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) 2.377865966s ago: executing program 2 (id=1670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) open(0x0, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42d00) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={0x0, 0x0, {0x200000}}) readv(r6, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0xe}], 0x1) 2.281127815s ago: executing program 1 (id=1671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f00)=[{{&(0x7f0000000d00)=@tipc=@id, 0x80, 0x0}}, {{&(0x7f0000001880)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}, {{&(0x7f0000001c40)=@qipcrtr, 0x80, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f0000002780)=@tipc=@name, 0x80, 0x0}}, {{&(0x7f0000003a00)=@xdp, 0x80, &(0x7f0000003ac0)=[{0x0}], 0x1, &(0x7f0000003b00)=""/179, 0xb3}, 0x6}], 0x5, 0x20a0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x5}}, 0x20) get_robust_list(r0, 0x0, 0xfffffffffffffffd) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x9, 0xd, 0x0, 0x0, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x3, 0x0, 0x8000000000000001, 0x0, 0x2}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x0, @private}, @in={0x2, 0x4e21, @private=0xa010102}}, @sadb_x_sec_ctx={0x2, 0x18, 0xff, 0x3, 0x8, "fc89dc01ce3f079e"}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x50}, [], {0x95, 0x0, 0x1200}}, 0x0}, 0x90) 661.953781ms ago: executing program 2 (id=1672): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000006c0)={0x77359400}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000b80)={{0x0, 0x2, 0x0, 0x9, '\x00', 0x80000001}, 0x5, 0x20, 0x7, r0, 0x1, 0x4, 'syz1\x00', &(0x7f0000000940)=['sched_switch\x00'], 0xd}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x300, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x420, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x23, &(0x7f0000000cc0)=ANY=[@ANYBLOB, @ANYRESOCT=r5, @ANYRESOCT=r4, @ANYRES32=r3, @ANYBLOB="000040000000000cb7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008277993e2b36d206d9000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x0, 0x10, 0x2, {0x0, 0x0, 0x0, 0x0, {0x2}, {}, {0xffef}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1000}]}, 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000540)={0x3ff, 0x6}) shutdown(r6, 0x1) recvmsg(r6, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 360.121431ms ago: executing program 3 (id=1673): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x840) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000", @ANYRES32], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40000000000011a, 0x0, 0x0) 350.435903ms ago: executing program 0 (id=1674): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10) r3 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) close(r3) syz_io_uring_setup(0x1e45, &(0x7f0000000780), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x10003, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) 283.602775ms ago: executing program 4 (id=1675): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)) 0s ago: executing program 1 (id=1676): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000003c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7aa, &(0x7f0000000180)={{@my=0x1}}) kernel console output (not intermixed with test programs): is strongly recommended to keep mac addresses unique to avoid problems! [ 551.244935][ T7897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.336901][ T7897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.369436][ T7897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.395133][ T7897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.404165][ T7897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.437181][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.460102][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.855322][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.340364][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.372521][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.395095][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.444913][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.490473][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.530620][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.541590][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.555754][ T7895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.715258][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.731771][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.744026][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.757896][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.774911][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.787157][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.872906][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.933694][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.945809][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.957985][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.970192][ T8008] futex_wake_op: syz.3.677 tries to shift op by -1; fix this program [ 553.000837][ T7895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.051509][ T7895] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.071550][ T7895] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.084398][ T7895] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.094169][ T7895] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.127482][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.144874][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.215897][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.245917][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.260944][ T5330] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 553.352587][ T7029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.391522][ T7029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.411875][ T8016] autofs: Unknown parameter '' [ 553.461662][ T8016] input: syz1 as /devices/virtual/input/input16 [ 553.490530][ T5330] usb 1-1: Using ep0 maxpacket: 32 [ 553.500487][ T5330] usb 1-1: too many configurations: 16, using maximum allowed: 8 [ 553.541272][ T7035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.548129][ T5330] usb 1-1: config 20 has too many interfaces: 33, using maximum allowed: 32 [ 553.585182][ T7035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.614859][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.683'. [ 553.624089][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.683'. [ 553.646730][ T5330] usb 1-1: config 20 has an invalid descriptor of length 242, skipping remainder of the config [ 553.703820][ T5330] usb 1-1: config 20 has 0 interfaces, different from the descriptor's value: 33 [ 553.755531][ T5330] usb 1-1: config 20 has too many interfaces: 33, using maximum allowed: 32 [ 553.794971][ T5330] usb 1-1: config 20 has an invalid descriptor of length 242, skipping remainder of the config [ 553.828399][ T5330] usb 1-1: config 20 has 0 interfaces, different from the descriptor's value: 33 [ 553.848706][ T5330] usb 1-1: config 20 has too many interfaces: 33, using maximum allowed: 32 [ 554.042614][ T5330] usb 1-1: config 20 has an invalid descriptor of length 242, skipping remainder of the config [ 554.071227][ T5330] usb 1-1: config 20 has 0 interfaces, different from the descriptor's value: 33 [ 554.086968][ T5330] usb 1-1: config 20 has too many interfaces: 33, using maximum allowed: 32 [ 554.589071][ T5330] usb 1-1: config 20 has an invalid descriptor of length 242, skipping remainder of the config [ 555.044634][ T5330] usb 1-1: config 20 has 0 interfaces, different from the descriptor's value: 33 [ 555.135529][ T5330] usb 1-1: config 20 has too many interfaces: 33, using maximum allowed: 32 [ 555.844015][ T5330] usb 1-1: config 20 has an invalid descriptor of length 242, skipping remainder of the config [ 555.855476][ T5330] usb 1-1: config 20 has 0 interfaces, different from the descriptor's value: 33 [ 555.866638][ T5330] usb 1-1: config 20 has too many interfaces: 33, using maximum allowed: 32 [ 555.922627][ T5330] usb 1-1: config 20 has an invalid descriptor of length 242, skipping remainder of the config [ 556.006183][ T5330] usb 1-1: config 20 has 0 interfaces, different from the descriptor's value: 33 [ 556.111692][ T5330] usb 1-1: unable to read config index 6 descriptor/start: -71 [ 556.143466][ T5330] usb 1-1: can't read configurations, error -71 [ 556.157549][ T8040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.689'. [ 556.204459][ T8040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.689'. [ 556.576613][ T8054] xt_CT: You must specify a L4 protocol and not use inversions on it [ 556.903708][ T8054] syzkaller0: entered promiscuous mode [ 556.947534][ T8054] syzkaller0: entered allmulticast mode [ 557.109937][ T8062] autofs: Unknown parameter '' [ 557.205546][ T8062] input: syz1 as /devices/virtual/input/input17 [ 557.800561][ T29] audit: type=1326 audit(1723320779.473:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8067 comm="syz.4.699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ac9b779f9 code=0x0 [ 559.251812][ T29] audit: type=1326 audit(1723320780.083:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8080 comm="syz.3.703" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7897f779f9 code=0x0 [ 559.690542][ T5305] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 559.912464][ T5305] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 559.932248][ T5305] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 559.950383][ T5305] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 559.978597][ T5305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.399499][ T8103] usb usb9: usbfs: process 8103 (syz.3.704) did not claim interface 0 before use [ 561.311871][ T5305] usb 4-1: language id specifier not provided by device, defaulting to English [ 561.418914][ T8103] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 564.028388][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.034834][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.483586][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 565.621707][ T5305] usb 4-1: USB disconnect, device number 22 [ 566.006894][ T5235] Bluetooth: hci5: sending frame failed (-49) [ 566.014718][ T7570] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 566.050307][ T8145] netlink: 'syz.4.723': attribute type 4 has an invalid length. [ 566.075554][ T8143] netlink: 'syz.4.723': attribute type 4 has an invalid length. [ 566.090602][ T5330] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 566.317891][ T5330] usb 1-1: Using ep0 maxpacket: 16 [ 566.349150][ T5330] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.364415][ T5330] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 566.630563][ T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 566.902643][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.930031][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.948686][ T5330] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 566.974790][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 567.004538][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.009459][ T5330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.044460][ T25] usb 4-1: Product: syz [ 567.048642][ T25] usb 4-1: Manufacturer: syz [ 567.055244][ T25] usb 4-1: SerialNumber: syz [ 567.068072][ T25] usb 4-1: selecting invalid altsetting 1 [ 567.119901][ T5330] usb 1-1: Product: syz [ 567.156706][ T5330] usb 1-1: Manufacturer: syz [ 567.190349][ T5330] usb 1-1: SerialNumber: syz [ 567.228967][ T5330] usb 1-1: config 0 descriptor?? [ 567.252862][ T5330] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 567.520466][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 567.527880][ T8150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.528356][ T8150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.631288][ T5330] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 567.657092][ T5330] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 567.682094][ T5330] usb 1-1: USB disconnect, device number 14 [ 567.832316][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 567.848889][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.877868][ T9] usb 5-1: config 0 descriptor?? [ 567.967301][ T25] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 567.984456][ T8165] netlink: 'syz.2.732': attribute type 10 has an invalid length. [ 567.995716][ T25] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 568.036034][ T8165] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 568.045238][ T25] usb 4-1: selecting invalid altsetting 1 [ 568.060686][ T25] cdc_ncm 4-1:1.0: bind() failure [ 568.100984][ T25] usb 4-1: USB disconnect, device number 23 [ 568.311559][ T9] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 568.327308][ T9] hackrf 5-1:0.0: Could not detect board [ 568.340746][ T9] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 568.353280][ T9] usb 5-1: USB disconnect, device number 7 [ 568.570934][ T5330] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 568.650553][ T5305] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 568.677071][ T8182] IPv4: Oversized IP packet from 127.0.0.1 [ 568.684817][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 568.802379][ T5330] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 568.823672][ T5330] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 568.835513][ T5330] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 568.885514][ T5330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.910336][ T5305] usb 2-1: Using ep0 maxpacket: 16 [ 568.938551][ T5305] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 568.959057][ T8173] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 568.970526][ T5305] usb 2-1: config 0 has no interface number 0 [ 568.983280][ T5330] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 568.992506][ T5305] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.062320][ T5305] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.163791][ T5305] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 569.204182][ T5305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.269615][ T5305] usb 2-1: config 0 descriptor?? [ 569.774170][ T25] usb 3-1: USB disconnect, device number 10 [ 570.031819][ T46] usb 2-1: USB disconnect, device number 7 [ 570.130450][ T5305] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 570.526475][ T8211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.563135][ T8211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.575341][ T8211] netlink: 36 bytes leftover after parsing attributes in process `syz.3.747'. [ 571.265159][ T5305] usb 1-1: Using ep0 maxpacket: 16 [ 571.280076][ T5305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 571.317728][ T5305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 571.349488][ T8214] autofs: Unknown parameter '' [ 571.371591][ T5305] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 571.372224][ T8214] input: syz1 as /devices/virtual/input/input18 [ 571.387460][ T5305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.418556][ T5305] usb 1-1: config 0 descriptor?? [ 574.230930][ T5305] usbhid 1-1:0.0: can't add hid device: -71 [ 574.258596][ T5305] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 574.305283][ T5305] usb 1-1: USB disconnect, device number 15 [ 574.502189][ T8247] autofs: Unknown parameter '' [ 574.605204][ T8247] input: syz1 as /devices/virtual/input/input19 [ 575.691260][ T8255] autofs: Unknown parameter '' [ 575.731965][ T8255] input: syz1 as /devices/virtual/input/input20 [ 576.099700][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 576.138476][ T8263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.764'. [ 576.461661][ T5305] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 576.611029][ T8276] macvtap0: entered promiscuous mode [ 576.649062][ T8278] sctp: [Deprecated]: syz.0.767 (pid 8278) Use of int in maxseg socket option. [ 576.649062][ T8278] Use struct sctp_assoc_value instead [ 576.666535][ T8276] macvtap0: left promiscuous mode [ 576.711626][ T5305] usb 4-1: Using ep0 maxpacket: 16 [ 576.765234][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.820338][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.879253][ T5305] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 576.936165][ T5305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.968174][ T5305] usb 4-1: config 0 descriptor?? [ 580.316038][ T8273] delete_channel: no stack [ 580.333370][ T5305] cp2112 0003:10C4:EA90.0009: unbalanced delimiter at end of report description [ 580.423162][ T5305] cp2112 0003:10C4:EA90.0009: parse failed [ 580.464050][ T5305] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -22 [ 580.606741][ T8299] autofs: Unknown parameter '' [ 580.673252][ T8299] input: syz1 as /devices/virtual/input/input21 [ 580.704282][ T46] usb 4-1: USB disconnect, device number 24 [ 582.931242][ T8318] netlink: 'syz.1.778': attribute type 5 has an invalid length. [ 583.026628][ T8321] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 583.237215][ T8322] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.778'. [ 584.912316][ T8335] atomic_op ffff888061ce3998 conn xmit_atomic 0000000000000000 [ 585.694779][ T8345] ip6gretap0: entered promiscuous mode [ 585.739317][ T8345] macvtap1: entered allmulticast mode [ 585.764971][ T8345] ip6gretap0: entered allmulticast mode [ 585.800226][ T8345] ip6gretap0: left allmulticast mode [ 585.816594][ T8345] ip6gretap0: left promiscuous mode [ 586.033445][ T8354] sctp: [Deprecated]: syz.3.785 (pid 8354) Use of int in maxseg socket option. [ 586.033445][ T8354] Use struct sctp_assoc_value instead [ 586.154661][ T8356] atomic_op ffff88806f864998 conn xmit_atomic 0000000000000000 [ 586.903516][ T8362] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 586.941934][ T8347] macvtap0: entered promiscuous mode [ 586.949655][ T8347] macvtap0: left promiscuous mode [ 586.986993][ T8353] bridge_slave_1: left allmulticast mode [ 587.001773][ T8353] bridge_slave_1: left promiscuous mode [ 587.009354][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.681572][ T8344] delete_channel: no stack [ 588.681648][ T8355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.787'. [ 592.422943][ T8383] mmap: syz.4.796 (8383): VmData 37462016 exceed data ulimit 40800. Update limits or use boot option ignore_rlimit_data. [ 592.492140][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.797'. [ 592.529164][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.797'. [ 592.714744][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 592.963708][ T25] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 592.973279][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.003129][ T25] usb 3-1: config 0 descriptor?? [ 593.054634][ T25] cp210x 3-1:0.0: cp210x converter detected [ 593.203489][ T8394] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262207 (only 8 groups) [ 593.521413][ T8397] netlink: 80 bytes leftover after parsing attributes in process `syz.2.793'. [ 595.036225][ T25] usb 3-1: cp210x converter now attached to ttyUSB0 [ 596.734085][ T8406] macvtap0: entered promiscuous mode [ 596.772831][ T25] usb 3-1: USB disconnect, device number 11 [ 596.780577][ T8406] macvtap0: left promiscuous mode [ 596.796738][ T8408] sctp: [Deprecated]: syz.1.803 (pid 8408) Use of int in maxseg socket option. [ 596.796738][ T8408] Use struct sctp_assoc_value instead [ 596.816841][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 596.979855][ T25] cp210x 3-1:0.0: device disconnected [ 597.024127][ T8402] delete_channel: no stack [ 599.523506][ T8424] netlink: 244 bytes leftover after parsing attributes in process `syz.4.807'. [ 599.860370][ T46] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 599.977092][ T8429] input: syz1 as /devices/virtual/input/input22 [ 601.350595][ T46] usb 4-1: device not accepting address 25, error -71 [ 602.491006][ T8454] macvtap0: entered promiscuous mode [ 602.516559][ T8454] macvtap0: left promiscuous mode [ 602.522775][ T8457] sctp: [Deprecated]: syz.2.818 (pid 8457) Use of int in maxseg socket option. [ 602.522775][ T8457] Use struct sctp_assoc_value instead [ 604.124150][ T8449] delete_channel: no stack [ 604.527370][ T8473] input: syz1 as /devices/virtual/input/input23 [ 605.370143][ T8494] sctp: [Deprecated]: syz.0.834 (pid 8494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 605.370143][ T8494] Use struct sctp_sack_info instead [ 605.449975][ T8495] input: syz0 as /devices/virtual/input/input24 [ 605.961040][ T8494] netlink: 104 bytes leftover after parsing attributes in process `syz.0.834'. [ 610.212817][ T8521] input: syz1 as /devices/virtual/input/input26 [ 610.226124][ T29] audit: type=1804 audit(1723320831.903:65): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.840" name="/newroot/37/bus/file0" dev="overlay" ino=225 res=1 errno=0 [ 610.754685][ T8536] input: syz1 as /devices/virtual/input/input27 [ 611.587499][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'. [ 611.628917][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'. [ 611.689325][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 611.725101][ T7570] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 611.778850][ T8557] VFS: could not find a valid V7 on nullb0. [ 611.793301][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 611.833929][ T8557] vxfs: WRONG superblock magic 00000000 at 1 [ 611.841474][ T8557] vxfs: WRONG superblock magic 00000000 at 8 [ 612.015247][ T8557] vxfs: can't find superblock. [ 612.445010][ T8556] sctp: [Deprecated]: syz.1.856 (pid 8556) Use of int in max_burst socket option. [ 612.445010][ T8556] Use struct sctp_assoc_value instead [ 612.952038][ T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 612.965705][ T8] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 612.986031][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 612.999053][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 613.173170][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 613.263492][ T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 613.388104][ T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 613.454581][ T8] usb 5-1: Product: syz [ 613.509172][ T8] usb 5-1: Manufacturer: syz [ 613.619373][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 613.624822][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 613.663704][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 613.670105][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 613.762801][ T8] usb 5-1: USB disconnect, device number 8 [ 615.161161][ T8600] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 615.168062][ T8600] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 615.199158][ T8599] syzkaller0: entered promiscuous mode [ 615.205225][ T8599] syzkaller0: entered allmulticast mode [ 615.211207][ T8600] vhci_hcd vhci_hcd.0: Device attached [ 615.332519][ T8584] netlink: 'syz.2.865': attribute type 9 has an invalid length. [ 615.340204][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 615.359328][ T8601] vhci_hcd: connection closed [ 615.378375][ T7035] vhci_hcd: stop threads [ 615.391461][ T7035] vhci_hcd: release socket [ 615.398356][ T7035] vhci_hcd: disconnect device [ 616.178382][ T29] audit: type=1326 audit(1723320837.853:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8621 comm="syz.2.876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff960d779f9 code=0x0 [ 616.459830][ T8628] devpts: called with bogus options [ 619.180598][ T8643] pim6reg1: entered promiscuous mode [ 619.185982][ T8643] pim6reg1: entered allmulticast mode [ 619.981771][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 620.103197][ T8670] ubi0: attaching mtd0 [ 620.115899][ T8670] ubi0: scanning is finished [ 620.186684][ T8671] netlink: 92 bytes leftover after parsing attributes in process `syz.0.890'. [ 620.847920][ T8670] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 622.220367][ T5271] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 622.429097][ T8692] nfs4: Unexpected value for 'rdma' [ 622.430406][ T5271] usb 2-1: Using ep0 maxpacket: 16 [ 622.477508][ T5271] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 622.507318][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.689150][ T5271] usb 2-1: Product: syz [ 622.693553][ T5271] usb 2-1: Manufacturer: syz [ 622.698179][ T5271] usb 2-1: SerialNumber: syz [ 622.711479][ T5271] usb 2-1: config 0 descriptor?? [ 622.722844][ T5271] usb 2-1: no audio or video endpoints found [ 622.738500][ T5271] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 623.140965][ T46] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 623.720762][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 623.894347][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.920760][ T46] usb 4-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 623.932236][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.403094][ T46] usb 4-1: config 0 descriptor?? [ 624.549272][ T46] usb 4-1: Found UVC 0.00 device (05a9:2630) [ 624.576218][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.593137][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.780400][ T46] usb 4-1: No valid video chain found. [ 624.924166][ T5330] usb 4-1: USB disconnect, device number 27 [ 625.006258][ T8713] autofs: Unknown parameter '' [ 625.021597][ T8713] input: syz1 as /devices/virtual/input/input28 [ 625.170564][ T46] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 625.510456][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 625.524688][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.537437][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.549847][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 625.560637][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.643984][ T46] usb 1-1: config 0 descriptor?? [ 625.896790][ T25] usb 2-1: USB disconnect, device number 8 [ 626.153365][ T46] logitech 0003:046D:C20E.000A: rdesc size test failed for formula gp [ 626.175858][ T46] logitech 0003:046D:C20E.000A: unbalanced delimiter at end of report description [ 626.206050][ T46] logitech 0003:046D:C20E.000A: parse failed [ 626.219338][ T46] logitech 0003:046D:C20E.000A: probe with driver logitech failed with error -22 [ 626.440911][ T46] usb 1-1: USB disconnect, device number 16 [ 627.584425][ T8740] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 628.061280][ T8748] netlink: 'syz.3.913': attribute type 1 has an invalid length. [ 628.416856][ T8736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.909'. [ 628.643795][ T8752] autofs: Unknown parameter '' [ 628.777622][ T8752] input: syz1 as /devices/virtual/input/input29 [ 629.602602][ T46] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 629.619651][ T29] audit: type=1326 audit(1723320851.273:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8764 comm="syz.0.920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71e9f779f9 code=0x0 [ 630.000425][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 630.267462][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 630.292127][ T8779] netlink: 'syz.2.923': attribute type 1 has an invalid length. [ 630.310316][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 630.324199][ T7570] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 630.364014][ T46] usb 4-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=7d.eb [ 630.379347][ T5330] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 630.420739][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.434749][ T8773] futex_wake_op: syz.4.922 tries to shift op by -1; fix this program [ 630.443719][ T46] usb 4-1: Product: syz [ 630.448036][ T46] usb 4-1: Manufacturer: syz [ 630.453694][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'. [ 630.470519][ T46] usb 4-1: SerialNumber: syz [ 630.663037][ T46] usb 4-1: config 0 descriptor?? [ 630.670513][ T46] safe_serial 4-1:0.0: safe_serial converter detected [ 630.677138][ T5330] usb 2-1: Using ep0 maxpacket: 32 [ 630.677553][ T46] safe_serial 4-1:0.0: probe with driver safe_serial failed with error -22 [ 630.690200][ T5330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 630.781041][ T5330] usb 2-1: config 0 has an invalid interface number: 7 but max is 0 [ 630.789287][ T5330] usb 2-1: config 0 has no interface number 0 [ 630.812594][ T5330] usb 2-1: config 0 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 631.970941][ T5330] usb 2-1: New USB device found, idVendor=2208, idProduct=c9d2, bcdDevice=62.d0 [ 631.980077][ T5330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.203875][ T5330] usb 2-1: Product: syz [ 632.222413][ T46] usb 4-1: USB disconnect, device number 28 [ 632.222428][ T5330] usb 2-1: Manufacturer: syz [ 632.222450][ T5330] usb 2-1: SerialNumber: syz [ 632.285332][ T5330] usb 2-1: config 0 descriptor?? [ 632.325374][ T5330] usb-storage 2-1:0.7: USB Mass Storage device detected [ 632.471119][ T5330] usb 2-1: USB disconnect, device number 9 [ 633.000774][ T8808] autofs: Unknown parameter '' [ 633.034180][ T8808] input: syz1 as /devices/virtual/input/input30 [ 634.780481][ T5330] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 635.320344][ T46] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 635.461359][ T5330] usb 2-1: Using ep0 maxpacket: 16 [ 635.480129][ T5330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.538111][ T5330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.540376][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 635.728147][ T5330] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 635.766048][ T5330] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 635.772625][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.810765][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.599777][ T5330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.660344][ T46] usb 5-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 636.717377][ T46] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 636.769557][ T5330] usb 2-1: config 0 descriptor?? [ 636.775283][ T46] usb 5-1: config 0 descriptor?? [ 636.804789][ T46] usb 5-1: can't set config #0, error -71 [ 636.827035][ T46] usb 5-1: USB disconnect, device number 9 [ 637.119467][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 637.576655][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 637.585704][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.433004][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 643.490399][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 643.512100][ T5330] usbhid 2-1:0.0: can't add hid device: -32 [ 643.522942][ T9] usb 4-1: Manufacturer: syz [ 643.531292][ T5330] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 643.581676][ T9] usb 4-1: config 0 descriptor?? [ 643.635541][ T8846] can: request_module (can-proto-4) failed. [ 643.706573][ T8] usb 2-1: USB disconnect, device number 10 [ 643.712748][ T9] usb 4-1: can't set config #0, error -71 [ 643.732966][ T9] usb 4-1: USB disconnect, device number 29 [ 643.899032][ T8855] autofs: Unknown parameter '' [ 643.993562][ T8855] input: syz1 as /devices/virtual/input/input31 [ 644.366718][ T8867] syz.0.947: attempt to access beyond end of device [ 644.366718][ T8867] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 644.411566][ T8867] isofs_fill_super: bread failed, dev=nbd0, iso_blknum=16, block=32 [ 645.247156][ T8890] overlayfs: overlapping lowerdir path [ 647.141720][ T8884] Bluetooth: hci4: command 0x0406 tx timeout [ 647.149278][ T8883] Bluetooth: hci2: command 0x0406 tx timeout [ 647.156594][ T8883] Bluetooth: hci3: command 0x0406 tx timeout [ 647.164048][ T8884] Bluetooth: hci1: command 0x0406 tx timeout [ 647.170101][ T8884] Bluetooth: hci0: command 0x0406 tx timeout [ 647.349746][ T8903] autofs: Unknown parameter '' [ 647.381095][ T8903] input: syz1 as /devices/virtual/input/input32 [ 647.948243][ T8917] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 648.288353][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 648.299983][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 648.310112][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 648.330745][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 648.334697][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 648.340355][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 648.711113][ T5223] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 649.093224][ T2589] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.534901][ T2589] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.538042][ T8939] syz.3.970 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 649.858098][ T2589] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.974806][ T29] audit: type=1400 audit(1723321127.657:68): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=8956 comm="syz.0.977" dest=20000 netif=wpan0 [ 649.975139][ T2589] bond0: (slave netdevsim0): Releasing backup interface [ 650.015614][ T2589] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.157052][ T8920] chnl_net:caif_netlink_parms(): no params data found [ 650.298156][ T2589] bridge_slave_1: left allmulticast mode [ 650.309785][ T2589] bridge_slave_1: left promiscuous mode [ 650.320586][ T2589] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.338162][ T2589] bridge_slave_0: left allmulticast mode [ 650.353058][ T2589] bridge_slave_0: left promiscuous mode [ 650.365613][ T2589] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.411013][ T5223] Bluetooth: hci0: command tx timeout [ 650.690575][ T8972] Process accounting resumed [ 650.832932][ T8981] usb usb8: usbfs: process 8981 (syz.3.985) did not claim interface 0 before use [ 650.905721][ T8983] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 651.522866][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050a88000: rx timeout, send abort [ 652.031334][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050a88000: abort rx timeout. Force session deactivation [ 652.175181][ T2589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.271609][ T2589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.328951][ T2589] bond0 (unregistering): Released all slaves [ 652.357786][ T8995] autofs: Unknown parameter '' [ 652.393058][ T8995] input: syz1 as /devices/virtual/input/input34 [ 652.422329][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'. [ 652.500840][ T5223] Bluetooth: hci0: command tx timeout [ 652.745074][ T9001] netlink: 3084 bytes leftover after parsing attributes in process `syz.3.990'. [ 652.764834][ T9001] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 652.790287][ T9001] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.990'. [ 652.818270][ T9001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.990'. [ 653.082003][ T8920] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.100595][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.108190][ T8920] bridge_slave_0: entered allmulticast mode [ 653.120059][ T8920] bridge_slave_0: entered promiscuous mode [ 653.131492][ T8920] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.144514][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.158278][ T8920] bridge_slave_1: entered allmulticast mode [ 653.377275][ T8920] bridge_slave_1: entered promiscuous mode [ 654.721935][ T5223] Bluetooth: hci0: command tx timeout [ 655.980028][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 657.039845][ T5223] Bluetooth: hci0: command tx timeout [ 657.528596][ T8920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.667193][ T8920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.025356][ T8920] team0: Port device team_slave_0 added [ 658.077470][ T8920] team0: Port device team_slave_1 added [ 658.123886][ T2589] hsr_slave_0: left promiscuous mode [ 658.132985][ T2589] hsr_slave_1: left promiscuous mode [ 658.146614][ T2589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.154311][ T2589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.164687][ T2589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.179108][ T2589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.221943][ T2589] veth1_macvtap: left promiscuous mode [ 658.227524][ T2589] veth0_macvtap: left promiscuous mode [ 658.235786][ T2589] veth1_vlan: left promiscuous mode [ 658.243697][ T2589] veth0_vlan: left promiscuous mode [ 658.564724][ T941] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 658.770420][ T941] usb 1-1: Using ep0 maxpacket: 16 [ 658.777660][ T941] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 658.797248][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.822687][ T941] usb 1-1: config 0 descriptor?? [ 658.842291][ T9060] trusted_key: syz.1.1008 sent an empty control message without MSG_MORE. [ 658.843022][ T941] usb 1-1: invalid MIDI EP [ 658.885457][ T941] usb 1-1: snd-bcd2000: error during probing [ 658.907971][ T941] snd-bcd2000 1-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 659.075898][ T2589] team0 (unregistering): Port device team_slave_1 removed [ 659.141902][ T941] usb 1-1: USB disconnect, device number 17 [ 659.176194][ T2589] team0 (unregistering): Port device team_slave_0 removed [ 659.475761][ T9066] autofs: Unknown parameter '' [ 659.510075][ T9066] input: syz1 as /devices/virtual/input/input35 [ 662.628364][ T9090] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.1017'. [ 662.662570][ T9090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1017'. [ 662.691472][ T8920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.720347][ T8920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.808505][ T8920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.834118][ T8920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.854742][ T8920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.913474][ T8920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.937373][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'. [ 663.218870][ T8920] hsr_slave_0: entered promiscuous mode [ 663.233730][ T8920] hsr_slave_1: entered promiscuous mode [ 663.459010][ T5226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 663.470181][ T5226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 663.491754][ T5226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 663.500006][ T5226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 663.513926][ T5226] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 663.526079][ T5226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 665.610870][ T5223] Bluetooth: hci5: command tx timeout [ 667.690967][ T5223] Bluetooth: hci5: command tx timeout [ 668.279003][ T9122] delete_channel: no stack [ 668.558946][ T9098] chnl_net:caif_netlink_parms(): no params data found [ 668.645555][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'. [ 668.787975][ T3947] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.113000][ T8920] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 669.770472][ T5223] Bluetooth: hci5: command tx timeout [ 670.005009][ T3947] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.089282][ T8920] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 670.573800][ T3947] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.185403][ T8920] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 671.232166][ T8920] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 671.349031][ T3947] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.516604][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.538888][ T9098] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.563467][ T9098] bridge_slave_0: entered allmulticast mode [ 671.589346][ T9098] bridge_slave_0: entered promiscuous mode [ 671.701871][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.724926][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.747865][ T9098] bridge_slave_1: entered allmulticast mode [ 671.769948][ T9098] bridge_slave_1: entered promiscuous mode [ 671.851276][ T5223] Bluetooth: hci5: command tx timeout [ 671.948065][ T9098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.975392][ T9098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.082577][ T9165] netlink: 'syz.0.1037': attribute type 13 has an invalid length. [ 672.090923][ T9165] macvtap0: entered allmulticast mode [ 672.096413][ T9165] veth0_macvtap: entered allmulticast mode [ 672.107797][ T9165] macvtap0: refused to change device tx_queue_len [ 672.577764][ T9098] team0: Port device team_slave_0 added [ 672.609852][ T9098] team0: Port device team_slave_1 added [ 672.796526][ T3947] bridge_slave_1: left allmulticast mode [ 672.816724][ T3947] bridge_slave_1: left promiscuous mode [ 672.824692][ T3947] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.848098][ T3947] bridge_slave_0: left allmulticast mode [ 672.854490][ T3947] bridge_slave_0: left promiscuous mode [ 672.864221][ T3947] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.931239][ T5271] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 673.162413][ T5271] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 673.200790][ T5271] usb 5-1: config 0 has no interface number 0 [ 673.220765][ T5271] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 673.260320][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.308009][ T5271] usb 5-1: config 0 descriptor?? [ 673.351731][ T5271] ums-realtek 5-1:0.6: USB Mass Storage device detected [ 673.685616][ T46] usb 5-1: USB disconnect, device number 10 [ 673.989192][ T3947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.022402][ T3947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.041556][ T3947] bond0 (unregistering): Released all slaves [ 674.067563][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.080318][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.123190][ T9098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.148267][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.163977][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.199023][ T9098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.363032][ T8920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.655516][ T9098] hsr_slave_0: entered promiscuous mode [ 674.688987][ T9098] hsr_slave_1: entered promiscuous mode [ 674.706743][ T9098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.738989][ T9098] Cannot create hsr debugfs directory [ 675.096114][ T8920] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.385605][ T7029] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.393192][ T7029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.630765][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.637977][ T6202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.650746][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 675.713020][ T3947] hsr_slave_0: left promiscuous mode [ 675.734081][ T3947] hsr_slave_1: left promiscuous mode [ 675.757548][ T3947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.776606][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 675.791493][ T3947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.811314][ T3947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.818837][ T3947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.893298][ T3947] veth1_macvtap: left promiscuous mode [ 675.908256][ T3947] veth0_macvtap: left promiscuous mode [ 675.915695][ T3947] veth1_vlan: left promiscuous mode [ 675.928626][ T3947] veth0_vlan: left promiscuous mode [ 675.982384][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 676.166251][ T5271] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 676.361297][ T5271] usb 2-1: Using ep0 maxpacket: 16 [ 676.501491][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 676.530433][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 677.669388][ T5271] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 677.678561][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.686716][ T5271] usb 2-1: Product: syz [ 677.692294][ T5271] usb 2-1: Manufacturer: syz [ 677.696919][ T5271] usb 2-1: SerialNumber: syz [ 677.704350][ T5271] usb 2-1: config 0 descriptor?? [ 677.825726][ T3947] team0 (unregistering): Port device team_slave_1 removed [ 677.871955][ T3947] team0 (unregistering): Port device team_slave_0 removed [ 677.956198][ T9] usb 2-1: USB disconnect, device number 11 [ 678.403803][ T9205] tipc: Started in network mode [ 678.419252][ T9205] tipc: Node identity FUNC_PRO, cluster identity 4711 [ 678.426608][ T9205] tipc: Enabling of bearer rejected, failed to enable media [ 678.992101][ T9216] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1051'. [ 679.186694][ T9216] gretap0: entered promiscuous mode [ 679.650460][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 679.860748][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 679.891522][ T9] usb 5-1: string descriptor 0 read error: -22 [ 679.892734][ T29] audit: type=1326 audit(1723321157.577:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.1.1054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbebf779f9 code=0x0 [ 679.915057][ T9] usb 5-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=b5.b0 [ 679.971633][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.029010][ T9] usb 5-1: config 0 descriptor?? [ 680.042037][ T9] usb 5-1: Found UVC 0.00 device (1871:0306) [ 680.052214][ T9098] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 680.059484][ T9] usb 5-1: No valid video chain found. [ 680.078247][ T9098] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 680.107321][ T9098] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 680.141779][ T8920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.162700][ T9098] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 680.344685][ T8920] veth0_vlan: entered promiscuous mode [ 680.377344][ T8920] veth1_vlan: entered promiscuous mode [ 680.385081][ T941] usb 5-1: USB disconnect, device number 11 [ 680.536809][ T8920] veth0_macvtap: entered promiscuous mode [ 680.599597][ T9098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.622063][ T8920] veth1_macvtap: entered promiscuous mode [ 680.693441][ T9098] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.803356][ T7029] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.810569][ T7029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.854786][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.871971][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.884891][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.905498][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.917054][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.930895][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.941523][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.961823][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.996079][ T8920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.083566][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.125669][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.160535][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.222800][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.249636][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.150741][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.190482][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.260299][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.304204][ T8920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.345139][ T3947] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.352345][ T3947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.429626][ T8920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.470467][ T8920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.479456][ T8920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.553862][ T8920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.756805][ T9098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 682.923145][ T7029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.947219][ T7029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.988101][ T3947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.001690][ T3947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.231357][ T9098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.377651][ T9098] veth0_vlan: entered promiscuous mode [ 684.411181][ T9098] veth1_vlan: entered promiscuous mode [ 685.499925][ T9098] veth0_macvtap: entered promiscuous mode [ 685.593225][ T9098] veth1_macvtap: entered promiscuous mode [ 686.101546][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.510571][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.752943][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.004761][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.044284][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.073763][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.096261][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.119439][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.130155][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.171652][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.190315][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.210810][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.242575][ T9098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.268866][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.304101][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.317950][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.329564][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.342530][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.353800][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.365147][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.376398][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.387061][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.399075][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.429657][ T9098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.456617][ T9098] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.498824][ T9098] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.509011][ T9098] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.518895][ T9098] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.760490][ T9313] netlink: 'syz.2.1078': attribute type 4 has an invalid length. [ 690.829192][ T9316] netlink: 'syz.2.1078': attribute type 4 has an invalid length. [ 690.874673][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.911181][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.040477][ T6202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.067568][ T6202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.172299][ T9323] Bluetooth: MGMT ver 1.23 [ 691.738629][ T9329] fuse: Bad value for 'fd' [ 697.419180][ T9385] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1095'. [ 697.478468][ T9385] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 697.609954][ T9393] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 697.666373][ T9393] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 697.740361][ T9393] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 697.785517][ T9393] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 697.849944][ T9393] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 697.899336][ T9393] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 697.925115][ T9393] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 697.948155][ T9393] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 697.986298][ T9393] geneve2: entered promiscuous mode [ 698.007503][ T9393] geneve2: entered allmulticast mode [ 698.013730][ T5327] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 698.210422][ T5327] usb 3-1: Using ep0 maxpacket: 32 [ 698.227626][ T5327] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 698.261977][ T5327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 698.547635][ T5327] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 698.570629][ T5327] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 700.239496][ T5327] usb 3-1: Product: syz [ 700.244035][ T5327] usb 3-1: Manufacturer: syz [ 700.248671][ T5327] usb 3-1: SerialNumber: syz [ 700.431362][ T5327] usb 3-1: config 0 descriptor?? [ 701.080933][ T9408] input: syz0 as /devices/virtual/input/input36 [ 701.666415][ T9415] tipc: Enabled bearer , priority 0 [ 701.730514][ T5327] usb 3-1: can't set config #0, error -71 [ 701.741237][ T5327] usb 3-1: USB disconnect, device number 12 [ 701.803492][ T9415] tipc: Resetting bearer [ 701.879845][ T9414] tipc: Resetting bearer [ 703.262519][ T5327] tipc: Node number set to 419765260 [ 703.602997][ T46] kernel write not supported for file /snd/seq (pid: 46 comm: kworker/1:1) [ 704.611806][ T46] IPVS: starting estimator thread 0... [ 704.870375][ T9451] IPVS: using max 24 ests per chain, 57600 per kthread [ 707.875983][ T9414] tipc: Disabling bearer [ 708.745709][ T9483] fuse: Bad value for 'fd' [ 709.071361][ T5223] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 709.080639][ T5223] Bluetooth: hci0: Injecting HCI hardware error event [ 709.091151][ T5226] Bluetooth: hci0: hardware error 0x00 [ 710.818967][ T9478] netlink: 'syz.4.1119': attribute type 16 has an invalid length. [ 712.484368][ T9502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1123'. [ 712.580654][ T5228] Bluetooth: hci3: command 0x1003 tx timeout [ 712.588746][ T5223] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 713.108365][ T5226] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 713.488649][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 713.500282][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 715.003375][ T9531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.030564][ T5327] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 715.163320][ T9535] fuse: Bad value for 'fd' [ 715.231500][ T5327] usb 4-1: Using ep0 maxpacket: 8 [ 715.251292][ T5327] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=8a.18 [ 715.288340][ T5327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.315298][ T5327] usb 4-1: config 0 descriptor?? [ 715.346615][ T5327] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 715.367936][ T5327] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 715.829997][ T5327] usb 4-1: USB disconnect, device number 30 [ 716.724670][ T9541] gretap0: refused to change device tx_queue_len [ 716.734399][ T9541] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 719.129230][ T9572] Invalid ELF header magic: != ELF [ 720.683000][ T29] audit: type=1804 audit(1723321196.357:70): pid=9572 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1145" name="/newroot/7/bus/bus" dev="overlay" ino=64 res=1 errno=0 [ 721.072882][ T9583] futex_wake_op: syz.0.1149 tries to shift op by -1; fix this program [ 721.260617][ T941] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 721.606332][ T941] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 721.673352][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.769276][ T941] usb 4-1: config 0 descriptor?? [ 721.836846][ T941] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 722.656650][ T9596] hub 6-0:1.0: USB hub found [ 722.665797][ T9596] hub 6-0:1.0: 1 port detected [ 723.546508][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'. [ 723.780923][ T29] audit: type=1326 audit(1723321201.397:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9603 comm="syz.0.1159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71e9f779f9 code=0x0 [ 724.396275][ T9616] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1162'. [ 724.530801][ T941] gspca_stv06xx: HDCS-1020 sensor detected [ 724.901882][ T941] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 724.917743][ T941] usb 4-1: USB disconnect, device number 31 [ 725.883529][ T29] audit: type=1804 audit(1723321203.547:72): pid=9625 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.1166" name="/newroot/105/bus/file0" dev="overlay" ino=593 res=1 errno=0 [ 726.181852][ T941] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 726.470768][ T5271] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 726.737264][ T941] usb 1-1: Using ep0 maxpacket: 32 [ 727.123690][ T9650] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 727.146839][ T941] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 727.200940][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.257235][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1175'. [ 727.275370][ T9653] tipc: Started in network mode [ 727.287826][ T9653] tipc: Node identity f0, cluster identity 4711 [ 727.294680][ T9653] tipc: Node number set to 240 [ 727.299088][ T941] usb 1-1: config 0 descriptor?? [ 727.320533][ T5271] usb 5-1: Using ep0 maxpacket: 16 [ 727.342256][ T941] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 727.356520][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 727.375602][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 727.396077][ T5271] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 727.409990][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.436157][ T5271] usb 5-1: config 0 descriptor?? [ 727.926983][ T9639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.029524][ T9639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.493377][ T9639] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1169'. [ 728.541785][ T5271] hid (null): bogus close delimiter [ 728.548993][ T5271] hid (null): invalid report_count 58028 [ 728.571599][ T5271] hid (null): unknown global tag 0xd [ 728.580899][ T5271] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 728.591365][ T5271] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 728.600314][ T5271] hid-generic 0003:0158:0100.000B: bogus close delimiter [ 728.607486][ T5271] hid-generic 0003:0158:0100.000B: item 0 0 2 10 parsing failed [ 728.619814][ T5271] hid-generic 0003:0158:0100.000B: probe with driver hid-generic failed with error -22 [ 728.650429][ T5305] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 728.717266][ T9666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 728.850617][ T5305] usb 4-1: Using ep0 maxpacket: 8 [ 728.858647][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 728.869373][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 728.882073][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 728.929192][ T5305] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 728.939045][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.951005][ T5305] usb 4-1: Product: syz [ 728.956728][ T5305] usb 4-1: Manufacturer: syz [ 728.965341][ T5305] usb 4-1: SerialNumber: syz [ 729.000530][ T5305] usb 4-1: config 0 descriptor?? [ 729.170656][ T5271] usb 5-1: USB disconnect, device number 12 [ 729.397418][ T5305] usb 4-1: USB disconnect, device number 32 [ 729.407774][ T941] usb 1-1: USB disconnect, device number 18 [ 729.530373][ T9657] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 730.038032][ T9687] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 730.063918][ T5305] kernel write not supported for file /uhid (pid: 5305 comm: kworker/0:4) [ 730.493494][ T9698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 731.725766][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'. [ 731.816850][ T9701] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 731.826224][ T9701] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 733.500909][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 733.500993][ T9715] netlink: 'syz.0.1195': attribute type 4 has an invalid length. [ 735.800320][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 736.005393][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 736.019574][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.043737][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.062703][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 736.086421][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.105036][ T9] usb 4-1: config 0 descriptor?? [ 736.826101][ T9] kye 0003:0458:0138.000C: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0 [ 737.282158][ T9] usb 4-1: USB disconnect, device number 33 [ 737.490118][ T9754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1210'. [ 737.631971][ T9757] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 737.658294][ T9757] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 740.741062][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 741.126611][ T29] audit: type=1326 audit(1723321218.807:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.3.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2dd779f9 code=0x7ffc0000 [ 741.162968][ T29] audit: type=1326 audit(1723321218.827:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.3.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2dd779f9 code=0x7ffc0000 [ 741.462741][ T25] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 741.472765][ T29] audit: type=1326 audit(1723321218.837:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.3.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f6a2dd779f9 code=0x7ffc0000 [ 741.473304][ T9802] autofs: Unknown parameter '' [ 741.504431][ T29] audit: type=1326 audit(1723321218.837:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.3.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2dd779f9 code=0x7ffc0000 [ 741.560344][ T29] audit: type=1326 audit(1723321218.837:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.3.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2dd779f9 code=0x7ffc0000 [ 741.609778][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 743.758798][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 743.759903][ T9802] input: syz1 as /devices/virtual/input/input37 [ 743.858099][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 744.066088][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'. [ 744.128299][ T25] usb 2-1: unable to read config index 1 descriptor/start: -71 [ 744.138077][ T25] usb 2-1: can't read configurations, error -71 [ 744.570765][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 744.914021][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 744.947026][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 745.003871][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 745.020967][ T29] audit: type=1326 audit(1723321222.707:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9820 comm="syz.4.1229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ac9b779f9 code=0x0 [ 745.034334][ T25] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 745.077504][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.101549][ T25] usb 2-1: config 0 descriptor?? [ 745.106651][ T9833] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 745.292758][ T9841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 745.344151][ T9841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1235'. [ 745.363818][ T9841] IPv6: NLM_F_REPLACE set, but no existing node found! [ 746.100722][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 746.122740][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 746.153080][ T25] usb 2-1: USB disconnect, device number 13 [ 746.229112][ T9855] autofs: Unknown parameter '' [ 746.258883][ T9855] input: syz1 as /devices/virtual/input/input38 [ 746.401575][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1242'. [ 747.140949][ T5226] Bluetooth: hci5: command tx timeout [ 747.390461][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 747.511255][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.517870][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.655098][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 747.677744][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.704133][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 747.718115][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.724740][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 747.761795][ T9] usb 4-1: Manufacturer: syz [ 747.765347][ T9877] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.786339][ T9] usb 4-1: config 0 descriptor?? [ 747.921070][ T9] rc_core: IR keymap rc-hauppauge not found [ 747.933555][ T9877] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.934991][ T9] Registered IR keymap rc-empty [ 747.940809][ T9877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.964703][ T9877] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.968333][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 747.971925][ T9877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.000960][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input39 [ 748.029285][ T9866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.056945][ T9866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.148455][ T9866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.160849][ T9866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.193651][ T9] usb 4-1: USB disconnect, device number 34 [ 748.368429][ T5226] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 748.790348][ T5271] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 748.971239][ T5271] usb 5-1: Using ep0 maxpacket: 16 [ 748.979668][ T5271] usb 5-1: unable to get BOS descriptor or descriptor too short [ 748.988503][ T5271] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 748.998744][ T5271] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 749.009088][ T5271] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 749.025726][ T5271] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 749.035067][ T5271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.043128][ T5271] usb 5-1: Product: syz [ 749.047282][ T5271] usb 5-1: Manufacturer: syz [ 749.053046][ T5271] usb 5-1: SerialNumber: syz [ 749.462635][ T5271] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 749.720346][ T5271] cdc_ncm 5-1:1.0: bind() failure [ 749.749776][ T5271] usb 5-1: USB disconnect, device number 13 [ 751.928131][ T9930] netlink: 'syz.4.1264': attribute type 1 has an invalid length. [ 751.975209][ T9932] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 752.203850][ T9939] netlink: 'syz.3.1269': attribute type 3 has an invalid length. [ 752.212073][ T9939] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1269'. [ 754.046404][ T9955] can: request_module (can-proto-4) failed. [ 757.100366][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 757.158905][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'. [ 757.200406][ T9991] nbd: socks must be embedded in a SOCK_ITEM attr [ 757.209292][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 757.218565][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 757.348887][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 757.381816][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 757.435244][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.485201][ T25] usb 3-1: config 0 descriptor?? [ 757.495558][ T25] smsusb:smsusb_probe: board id=8, interface number 0 [ 757.510959][ T25] smsusb:smsusb_probe: Device initialized with return code -19 [ 757.727523][ T5330] usb 3-1: USB disconnect, device number 13 [ 757.924390][ T3947] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.101141][ T3947] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.171180][ T25] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 758.377678][ T3947] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.411472][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 758.439238][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 758.534083][ T25] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 758.638102][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 758.905705][ T25] usb 4-1: SerialNumber: syz [ 759.220081][ T3947] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.406239][ T25] usb 4-1: 0:2 : does not exist [ 759.463374][ T25] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 759.536151][ T25] usb 4-1: USB disconnect, device number 35 [ 760.114965][T10025] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 761.894718][ T5223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 761.906995][ T5223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 761.918363][ T5223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 761.928854][ T5223] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 761.960396][ T5223] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 761.969250][ T5223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 762.031852][ T3947] bridge_slave_0: left allmulticast mode [ 762.052836][T10030] cgroup: noprefix used incorrectly [ 762.080294][ T3947] bridge_slave_0: left promiscuous mode [ 762.086141][ T3947] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.280320][ T5226] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 764.044111][T10051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1306'. [ 764.100810][ T5226] Bluetooth: hci2: command tx timeout [ 764.533060][ T5226] Bluetooth: hci1: command tx timeout [ 764.640126][T10055] ieee802154 phy0 wpan0: encryption failed: -22 [ 765.757126][T10061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 766.170635][ T5223] Bluetooth: hci2: command tx timeout [ 766.570509][ T5223] Bluetooth: hci1: command tx timeout [ 766.631435][ T3947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.643917][ T3947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.657615][ T3947] bond0 (unregistering): Released all slaves [ 766.910429][ T46] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 767.151505][ T3947] tipc: Left network mode [ 767.882905][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 767.907879][ T46] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 767.927446][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.949703][ T46] usb 1-1: Product: syz [ 767.954581][ T46] usb 1-1: Manufacturer: syz [ 767.969715][ T46] usb 1-1: SerialNumber: syz [ 767.980768][ T46] usb 1-1: config 0 descriptor?? [ 768.001890][ T46] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 768.178856][T10085] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 768.223919][ T5305] usb 1-1: USB disconnect, device number 19 [ 768.252063][ T5223] Bluetooth: hci2: command tx timeout [ 768.610552][ T5271] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 768.742950][ T3947] hsr_slave_0: left promiscuous mode [ 768.749763][ T3947] hsr_slave_1: left promiscuous mode [ 768.761184][ T3947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.769109][ T3947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.809185][ T3947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.818420][ T3947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.830367][ T5271] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.847225][ T5271] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 768.866816][ T5271] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 768.876162][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 768.889749][ T5271] usb 4-1: SerialNumber: syz [ 768.935959][ T3947] veth1_macvtap: left promiscuous mode [ 768.953096][ T3947] veth0_macvtap: left promiscuous mode [ 768.959267][ T3947] veth1_vlan: left promiscuous mode [ 768.980069][ T3947] veth0_vlan: left promiscuous mode [ 769.116462][T10094] fuse: Unknown parameter 'goup_id' [ 769.448094][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 770.206766][T10127] input: syz1 as /devices/virtual/input/input41 [ 770.330448][ T5223] Bluetooth: hci2: command tx timeout [ 770.695248][ T3947] team0 (unregistering): Port device team_slave_1 removed [ 770.803443][ T3947] team0 (unregistering): Port device team_slave_0 removed [ 771.494343][T10110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1327'. [ 771.526961][T10027] chnl_net:caif_netlink_parms(): no params data found [ 771.583793][ T5271] usb 4-1: 0:2 : does not exist [ 771.613152][ T5271] usb 4-1: unit 5: unexpected type 0x09 [ 771.690717][ T5271] usb 4-1: USB disconnect, device number 36 [ 771.891517][T10027] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.903991][T10027] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.911790][T10027] bridge_slave_0: entered allmulticast mode [ 771.933682][T10027] bridge_slave_0: entered promiscuous mode [ 771.947479][T10027] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.955887][T10027] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.970972][T10027] bridge_slave_1: entered allmulticast mode [ 772.024685][T10027] bridge_slave_1: entered promiscuous mode [ 772.375829][T10027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.107379][T10136] delete_channel: no stack [ 773.311455][T10027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.534418][T10027] team0: Port device team_slave_0 added [ 773.571663][T10027] team0: Port device team_slave_1 added [ 773.706279][T10027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.729736][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.825567][T10027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.053062][T10027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.060386][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.976403][T10027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.000063][T10174] lo: entered promiscuous mode [ 775.352245][T10027] hsr_slave_0: entered promiscuous mode [ 775.405099][T10027] hsr_slave_1: entered promiscuous mode [ 775.422117][T10027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.433953][T10027] Cannot create hsr debugfs directory [ 775.449262][T10172] lo: left promiscuous mode [ 775.674189][T10195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1352'. [ 776.047762][T10206] 9pnet_fd: Insufficient options for proto=fd [ 777.347921][T10216] Process accounting resumed [ 777.396607][T10221] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 777.414282][T10222] netlink: 'syz.3.1360': attribute type 11 has an invalid length. [ 778.709933][T10027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 778.954131][T10027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 778.999839][T10027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 779.094476][T10027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 780.058212][T10027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.085385][T10027] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.136767][ T1837] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.144009][ T1837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.209872][ T7029] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.217118][ T7029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.440665][ T5305] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 780.742114][ T5305] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 781.097306][ T5305] usb 3-1: language id specifier not provided by device, defaulting to English [ 781.122790][T10027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 781.151736][ T5305] usb 3-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 781.173423][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.206949][ T5305] usb 3-1: Product: syz [ 781.230595][ T5305] usb 3-1: Manufacturer: 꼳ฐḼ馊ᠪ횔ꑇ꛲⨀맾ߟな㡰홖⒙ᒅ煗ﵙ [ 781.268850][ T5305] usb 3-1: SerialNumber: syz [ 781.304838][ T5305] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 781.471508][ T25] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 781.521731][T10275] netlink: 'syz.1.1375': attribute type 3 has an invalid length. [ 781.682249][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 781.695263][ T5305] usb 3-1: USB disconnect, device number 14 [ 781.743951][ T25] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 781.783564][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.800690][T10027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.826177][ T25] usb 4-1: Product: syz [ 781.846393][ T25] usb 4-1: Manufacturer: syz [ 781.856899][ T25] usb 4-1: SerialNumber: syz [ 781.865560][ T25] usb 4-1: config 0 descriptor?? [ 781.879181][T10269] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 781.902423][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 782.209574][ T25] usb 4-1: USB disconnect, device number 37 [ 782.833558][T10027] veth0_vlan: entered promiscuous mode [ 782.859912][T10027] veth1_vlan: entered promiscuous mode [ 782.880749][ T5330] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 782.926091][T10027] veth0_macvtap: entered promiscuous mode [ 782.959380][T10027] veth1_macvtap: entered promiscuous mode [ 783.007267][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.024887][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.037807][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.056532][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.080275][ T5330] usb 1-1: Using ep0 maxpacket: 8 [ 783.092245][ T5330] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 783.113792][ T5330] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 783.140293][ T5330] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 783.162780][ T5330] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 783.191713][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.214049][ T5330] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 783.233788][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.328781][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.339528][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.349496][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.363538][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.675996][T10297] hub 6-0:1.0: USB hub found [ 784.681399][T10297] hub 6-0:1.0: 1 port detected [ 784.720323][ T5330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.756969][T10027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.070452][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.094085][ T5330] usb 1-1: GET_CAPABILITIES returned 0 [ 785.099816][ T5330] usbtmc 1-1:16.0: can't read capabilities [ 785.149021][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.184617][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.201034][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.212427][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.230467][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.250314][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.267791][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.303274][T10301] binder: 10300:10301 ioctl c018620c 200005c0 returned -1 [ 785.310229][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.350671][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.373707][ T5330] usb 1-1: USB disconnect, device number 20 [ 785.392194][T10027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.465262][T10027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.485548][T10027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.496915][T10027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.506565][T10027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.742063][ T6194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.751458][ T6194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.876642][ T6194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.908543][ T6194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.340458][T10334] netlink: 'syz.0.1388': attribute type 14 has an invalid length. [ 788.368847][T10335] netlink: 'syz.4.1391': attribute type 6 has an invalid length. [ 788.398250][T10337] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 788.404832][T10337] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 788.413628][T10337] vhci_hcd vhci_hcd.0: Device attached [ 788.428279][T10337] netlink: 'syz.3.1390': attribute type 1 has an invalid length. [ 788.444756][T10335] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1391'. [ 788.455600][T10337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1390'. [ 788.661205][T10338] vhci_hcd: connection closed [ 788.662102][ T7032] vhci_hcd: stop threads [ 788.672559][T10341] cgroup: name respecified [ 788.698783][ T7032] vhci_hcd: release socket [ 788.717585][ T7032] vhci_hcd: disconnect device [ 788.750667][ T8] usb 16-1: enqueue for inactive port 0 [ 788.928097][ T29] audit: type=1326 audit(1723321266.607:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261af779f9 code=0x7ffc0000 [ 791.717131][ T29] audit: type=1326 audit(1723321266.607:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261af779f9 code=0x7ffc0000 [ 791.739731][ T29] audit: type=1326 audit(1723321266.607:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f261af779f9 code=0x7ffc0000 [ 791.766977][ T29] audit: type=1326 audit(1723321266.607:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261af779f9 code=0x7ffc0000 [ 791.795716][ T29] audit: type=1326 audit(1723321266.607:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261af779f9 code=0x7ffc0000 [ 791.822928][ T29] audit: type=1326 audit(1723321266.607:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f261af779f9 code=0x7ffc0000 [ 792.021491][ T8] usb usb16-port1: attempt power cycle [ 792.100623][ T29] audit: type=1326 audit(1723321266.607:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261af779f9 code=0x7ffc0000 [ 792.187118][ T29] audit: type=1326 audit(1723321266.607:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261af779f9 code=0x7ffc0000 [ 793.868438][ T29] audit: type=1326 audit(1723321266.627:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f261af779f9 code=0x7ffc0000 [ 793.890061][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.897254][ T29] audit: type=1326 audit(1723321266.637:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10347 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261af779f9 code=0x7ffc0000 [ 794.254935][ T8] usb usb16-port1: unable to enumerate USB device [ 795.079182][T10396] xt_NFQUEUE: number of total queues is 0 [ 795.191842][T10405] xt_nfacct: accounting object `syz1' does not exists [ 795.404497][T10415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1408'. [ 795.460338][ T5271] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 795.554206][T10409] vlan1: entered promiscuous mode [ 795.572293][T10409] batman_adv: batadv0: Adding interface: vlan1 [ 795.580046][T10409] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.814704][T10409] batman_adv: batadv0: Not using interface vlan1 (retrying later): interface not active [ 795.822380][ T5271] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 796.077518][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.293054][ T5271] usb 5-1: config 0 descriptor?? [ 796.632649][ T5271] usb 5-1: selecting invalid altsetting 1 [ 796.712971][ T5271] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 796.864644][T10396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.541477][T10396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.708421][ T5271] usb 5-1: USB disconnect, device number 14 [ 802.912474][T10443] program syz.2.1421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 803.110837][T10455] tipc: Enabled bearer , priority 10 [ 803.251803][ T5330] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 804.504525][T10470] geneve3: entered promiscuous mode [ 804.532705][T10470] geneve3: entered allmulticast mode [ 804.578524][ T5330] usb 4-1: Using ep0 maxpacket: 16 [ 804.586736][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.604908][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.615836][ T5330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 804.629186][ T5330] usb 4-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 804.638384][ T5330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.651287][ T5330] usb 4-1: config 0 descriptor?? [ 805.597546][ T5330] wacom 0003:056A:0022.000D: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 805.882257][ T5330] wacom 0003:056A:0022.000D: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.3-1/input0 [ 805.898978][ T5330] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0022.000D/input/input42 [ 806.270744][ T5305] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 806.474329][ T5330] usb 4-1: USB disconnect, device number 38 [ 806.590421][ T5327] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 806.700462][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 806.732477][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 806.767947][ T5305] usb 2-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 806.794647][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.823494][ T5305] usb 2-1: Product: syz [ 806.828993][ T5305] usb 2-1: Manufacturer: syz [ 806.837439][ T5305] usb 2-1: SerialNumber: syz [ 806.848653][ T5305] usb 2-1: config 0 descriptor?? [ 806.866061][ T5305] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 806.897841][ T5305] usb 2-1: Detected SIO [ 806.902581][ T5327] usb 5-1: Using ep0 maxpacket: 8 [ 806.919481][ T5305] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 806.928410][ T5327] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 806.947791][ T5305] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 806.955299][ T5327] usb 5-1: config 0 has no interface number 0 [ 806.973265][ T5327] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 806.992884][ T5327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.009185][ T5305] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 807.017524][ T5327] usb 5-1: Product: syz [ 807.027043][ T5327] usb 5-1: Manufacturer: syz [ 807.033223][ T5327] usb 5-1: SerialNumber: syz [ 807.079670][ T5327] usb 5-1: config 0 descriptor?? [ 807.135120][T10502] KVM: debugfs: duplicate directory 10502-4 [ 807.166523][ T5327] usb 2-1: USB disconnect, device number 14 [ 807.207894][ T5327] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 807.222365][T10509] siw: device registration error -23 [ 807.238834][ T5327] ftdi_sio 2-1:0.0: device disconnected [ 808.670859][ T5305] usb 5-1: USB disconnect, device number 15 [ 808.897712][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.897893][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.204480][T10534] 9pnet_fd: Insufficient options for proto=fd [ 810.017388][T10521] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 811.521252][T10549] team_slave_0: entered promiscuous mode [ 811.527499][T10549] team_slave_1: entered promiscuous mode [ 811.585436][T10549] macvtap1: entered promiscuous mode [ 811.613825][T10549] team0: entered promiscuous mode [ 811.662013][T10549] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 811.703763][ T5223] Bluetooth: hci4: unexpected event for opcode 0x202d [ 813.301857][T10573] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 814.818969][T10594] macvlan0: entered allmulticast mode [ 814.827216][T10594] veth1_vlan: entered allmulticast mode [ 815.180780][ T5327] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 815.293476][T10602] 9pnet_fd: Insufficient options for proto=fd [ 816.310471][ T5327] usb 4-1: Using ep0 maxpacket: 16 [ 816.345792][ T5327] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 816.380680][ T5327] usb 4-1: config 0 has no interface number 0 [ 816.409128][ T5327] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 173 [ 816.478226][ T5327] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 816.499652][T10619] Process accounting resumed [ 816.532194][ T5327] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 816.556858][T10620] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 816.594574][ T5327] usb 4-1: Product: syz [ 816.632502][ T5327] usb 4-1: SerialNumber: syz [ 816.679552][ T5327] usb 4-1: config 0 descriptor?? [ 816.700713][T10596] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 817.035519][ T5327] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 817.078025][ T5327] usb 4-1: invalid MIDI in EP 0 [ 817.120298][ T5357] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 817.232099][ T5327] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 817.259762][ T5327] usb 4-1: USB disconnect, device number 39 [ 817.342848][ T5357] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 817.365674][ T5357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.432432][ T5357] usb 1-1: config 0 descriptor?? [ 817.460898][ T5357] usb 1-1: bad CDC descriptors [ 818.243341][ T5327] usb 1-1: USB disconnect, device number 21 [ 820.462795][T10663] hub 6-0:1.0: USB hub found [ 820.467841][T10663] hub 6-0:1.0: 1 port detected [ 821.535056][T10681] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 821.560343][ T5357] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 821.905647][ T5357] usb 5-1: Using ep0 maxpacket: 8 [ 822.719543][ T5357] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 822.950402][ T5357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.987439][ T5357] usb 5-1: Product: syz [ 823.007319][ T5357] usb 5-1: Manufacturer: syz [ 823.018367][ T5357] usb 5-1: SerialNumber: syz [ 823.488421][ T5357] usb 5-1: config 0 descriptor?? [ 823.513957][ T5357] gspca_main: sq930x-2.14.0 probing 2770:930c [ 823.540357][ T5305] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 823.679339][T10700] binder: BINDER_SET_CONTEXT_MGR already set [ 823.687622][T10700] binder: 10695:10700 ioctl 4018620d 20000040 returned -16 [ 823.735022][T10670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.764247][T10670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.860372][ T5305] usb 4-1: Using ep0 maxpacket: 32 [ 823.868951][ T5357] gspca_sq930x: reg_r 001f failed -71 [ 823.895542][ T5305] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 823.904290][ T5357] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 823.922708][ T5305] usb 4-1: config 0 has no interface number 0 [ 823.944649][ T5357] usb 5-1: USB disconnect, device number 16 [ 824.075539][ T5305] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 824.281589][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.336531][ T5305] usb 4-1: Product: syz [ 824.378739][ T5305] usb 4-1: Manufacturer: syz [ 824.384516][ T5305] usb 4-1: SerialNumber: syz [ 824.492004][ T5305] usb 4-1: config 0 descriptor?? [ 824.553638][T10700] syz.0.1502 (10700): drop_caches: 2 [ 824.684277][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 824.684297][ T29] audit: type=1326 audit(1723321302.367:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e9f779f9 code=0x7ffc0000 [ 824.758537][ T29] audit: type=1326 audit(1723321302.397:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71e9f779f9 code=0x7ffc0000 [ 824.783558][ T29] audit: type=1326 audit(1723321302.397:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e9f779f9 code=0x7ffc0000 [ 824.836589][ T29] audit: type=1326 audit(1723321302.397:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e9f779f9 code=0x7ffc0000 [ 824.878778][ T29] audit: type=1326 audit(1723321302.397:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f71e9f779f9 code=0x7ffc0000 [ 824.906405][ T29] audit: type=1326 audit(1723321302.397:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e9f779f9 code=0x7ffc0000 [ 824.986419][ T29] audit: type=1326 audit(1723321302.397:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e9f779f9 code=0x7ffc0000 [ 825.049052][ T29] audit: type=1326 audit(1723321302.407:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71e9f779f9 code=0x7ffc0000 [ 825.110337][ T29] audit: type=1326 audit(1723321302.407:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e9f779f9 code=0x7ffc0000 [ 825.175518][ T5330] usb 4-1: USB disconnect, device number 40 [ 825.182423][ T5330] f81534a_ctrl 4-1:0.88: failed to set register 0x116: -19 [ 825.197602][ T5330] f81534a_ctrl 4-1:0.88: failed to enable ports: -19 [ 825.207454][ T29] audit: type=1326 audit(1723321302.407:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e9f779f9 code=0x7ffc0000 [ 827.164581][ T5330] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 827.469577][ T5330] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 827.525082][ T5330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 827.616371][ T5330] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 827.668255][ T5330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 827.715367][ T5330] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 827.765553][ T5330] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 827.800463][ T5330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.829778][ T5330] usb 5-1: Product: syz [ 827.835726][ T5330] usb 5-1: Manufacturer: syz [ 827.850670][ T5330] usb 5-1: SerialNumber: syz [ 827.892153][ T5330] usb 5-1: config 0 descriptor?? [ 827.914825][ T5330] option 5-1:0.0: GSM modem (1-port) converter detected [ 828.198248][ T5330] usb 5-1: USB disconnect, device number 17 [ 828.207420][ T5330] option 5-1:0.0: device disconnected [ 830.574463][T10810] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 830.581049][T10810] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 830.609929][T10810] vhci_hcd vhci_hcd.0: Device attached [ 830.730419][T10799] netlink: 'syz.2.1535': attribute type 1 has an invalid length. [ 830.929620][T10799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1535'. [ 831.768765][T10812] vhci_hcd: connection closed [ 831.794964][ T6204] vhci_hcd: stop threads [ 831.838199][ T6204] vhci_hcd: release socket [ 831.850612][ T5357] usb 14-1: SetAddress Request (3) to port 0 [ 831.863558][ T6204] vhci_hcd: disconnect device [ 831.898069][ T5357] usb 14-1: new SuperSpeed USB device number 3 using vhci_hcd [ 831.980524][ T5357] usb 14-1: enqueue for inactive port 0 [ 835.503848][ T5357] usb usb14-port1: attempt power cycle [ 837.391806][ T5357] usb usb14-port1: unable to enumerate USB device [ 837.910761][T10863] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 838.210256][ T46] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 838.420260][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 838.442798][ T46] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 838.500216][ T46] usb 5-1: config 1 has no interface number 1 [ 838.530274][ T46] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 838.584987][ T46] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 838.638584][ T46] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 838.705572][ T46] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 838.730251][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.774473][ T46] usb 5-1: Product: syz [ 838.786532][ T46] usb 5-1: Manufacturer: syz [ 838.818337][ T46] usb 5-1: SerialNumber: syz [ 839.180366][ T46] usb 5-1: 2:1: cannot set freq 2005725 to ep 0x82 [ 839.608934][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 839.734942][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 839.760941][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 839.812186][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 839.839576][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 840.132947][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 840.277759][ T46] usb 5-1: USB disconnect, device number 18 [ 840.441617][T10896] autofs: Unknown parameter '' [ 840.504893][T10896] input: syz1 as /devices/virtual/input/input45 [ 840.527583][ T7032] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.189229][ T7032] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.478535][ T7032] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.694757][T10909] can0: slcan on ptm0. [ 842.011742][ T7032] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.861609][ T5226] Bluetooth: hci1: command tx timeout [ 843.142405][T10906] can0 (unregistered): slcan off ptm0. [ 843.438247][ T7032] bridge_slave_1: left allmulticast mode [ 843.471959][ T7032] bridge_slave_1: left promiscuous mode [ 843.511147][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.543393][ T7032] bridge_slave_0: left allmulticast mode [ 843.549100][ T7032] bridge_slave_0: left promiscuous mode [ 843.574347][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.923722][ T5226] Bluetooth: hci1: command tx timeout [ 847.060335][ T5226] Bluetooth: hci1: command tx timeout [ 850.660345][ T5226] Bluetooth: hci1: command tx timeout [ 851.306012][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 851.306054][ T29] audit: type=1800 audit(1723321328.887:149): pid=10976 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.4.1589" name="/" dev="fuse" ino=1 res=0 errno=0 [ 851.487558][ T7032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.503568][ T7032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.526403][ T7032] bond0 (unregistering): Released all slaves [ 851.547465][ T7032] bond1 (unregistering): Released all slaves [ 852.937070][T11009] netlink: 'syz.3.1596': attribute type 11 has an invalid length. [ 852.973156][T11004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1594'. [ 852.991953][T11004] bond0: entered allmulticast mode [ 852.997263][T11004] bond_slave_0: entered allmulticast mode [ 853.005176][T11004] bond_slave_1: entered allmulticast mode [ 853.022345][T11007] IPv6: sit1: Disabled Multicast RS [ 853.036737][T11010] netlink: 'syz.0.1594': attribute type 10 has an invalid length. [ 853.068388][T11010] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 853.093420][T11010] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 853.117971][T10886] chnl_net:caif_netlink_parms(): no params data found [ 853.500217][ T7032] hsr_slave_0: left promiscuous mode [ 853.538523][ T7032] hsr_slave_1: left promiscuous mode [ 853.564513][ T7032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.588413][ T7032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.609640][ T7032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.621808][ T7032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.658372][ T7032] veth1_macvtap: left promiscuous mode [ 853.666219][ T7032] veth0_macvtap: left promiscuous mode [ 853.679888][ T7032] veth1_vlan: left promiscuous mode [ 853.693160][ T7032] veth0_vlan: left promiscuous mode [ 856.338995][ T7032] team0 (unregistering): Port device team_slave_1 removed [ 856.397398][ T7032] team0 (unregistering): Port device team_slave_0 removed [ 856.544997][ T5330] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 856.732727][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 856.767405][ T5330] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 856.776832][ T5330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.802837][ T5330] usb 4-1: Product: syz [ 856.807056][ T5330] usb 4-1: Manufacturer: syz [ 856.812083][ T5330] usb 4-1: SerialNumber: syz [ 856.828049][ T5330] usb 4-1: config 0 descriptor?? [ 857.052176][T11067] syz.3.1614(11067): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 857.072376][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'. [ 857.101178][T11039] netlink: 'syz.2.1605': attribute type 3 has an invalid length. [ 857.129410][T10886] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.163604][T10886] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.186861][ T5330] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 857.205534][ T5330] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 857.241782][ T5330] usb 4-1: USB disconnect, device number 41 [ 857.250238][T10886] bridge_slave_0: entered allmulticast mode [ 857.258631][T10886] bridge_slave_0: entered promiscuous mode [ 857.288397][T10886] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.311597][T10886] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.319251][T10886] bridge_slave_1: entered allmulticast mode [ 857.338438][T10886] bridge_slave_1: entered promiscuous mode [ 857.486834][T10886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.543787][T10886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.668710][T10886] team0: Port device team_slave_0 added [ 857.686620][T10886] team0: Port device team_slave_1 added [ 857.784425][T10886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.825029][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.860357][ T943] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 857.895909][T10886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.917916][T10886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.939979][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.992751][T10886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.060289][ T943] usb 5-1: Using ep0 maxpacket: 16 [ 858.082028][ T943] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 858.147004][ T943] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 858.165373][ T943] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 858.203074][ T943] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 858.240704][ T943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.278993][ T943] usb 5-1: Product: syz [ 858.293491][ T943] usb 5-1: Manufacturer: syz [ 858.310954][T11085] netlink: 'syz.3.1620': attribute type 8 has an invalid length. [ 858.339587][ T943] usb 5-1: SerialNumber: syz [ 858.348724][T10886] hsr_slave_0: entered promiscuous mode [ 858.415220][T10886] hsr_slave_1: entered promiscuous mode [ 858.423351][T10886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 858.441042][T10886] Cannot create hsr debugfs directory [ 858.788603][ T943] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 862.218880][ T943] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 862.354959][ T943] usb 5-1: USB disconnect, device number 19 [ 862.411082][T11107] netlink: 'syz.0.1627': attribute type 3 has an invalid length. [ 862.447856][T11113] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 862.610017][T11122] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1629'. [ 862.634224][T11122] openvswitch: netlink: VXLAN extension 1024 out of range max 1 [ 863.359029][T10886] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 863.378730][T10886] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 864.297596][T10886] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 864.355867][T10886] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 870.364163][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.584734][T10886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.744757][T10886] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.818600][T11144] MTD: Couldn't look up './file0': -15 [ 871.854336][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.861508][ T6194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.972630][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.979955][ T6194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.773585][T11152] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1639'. [ 873.540397][ T5223] Bluetooth: hci5: command 0x0406 tx timeout [ 873.590656][ T5357] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 873.704751][T11157] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 873.723409][T11157] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1641'. [ 873.815525][ T5357] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 873.830402][ T5357] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 873.842241][ T5357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.868175][ T5357] usb 3-1: config 0 descriptor?? [ 873.916236][T10886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.053985][T10886] veth0_vlan: entered promiscuous mode [ 874.073345][T10886] veth1_vlan: entered promiscuous mode [ 874.123942][T10886] veth0_macvtap: entered promiscuous mode [ 874.134825][ T5327] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 874.146907][T10886] veth1_macvtap: entered promiscuous mode [ 874.212741][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.238726][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.255445][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.272305][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.282659][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.293762][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.306696][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.327291][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.346545][ T5327] usb 1-1: config 0 has no interfaces? [ 874.352980][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.366990][ T5327] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 874.370609][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.391616][ T5327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.421533][T10886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.433632][ T5327] usb 1-1: config 0 descriptor?? [ 874.438821][T11175] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 874.466675][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.479059][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.490232][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.512798][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.523158][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.537306][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.547939][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.559710][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.570211][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.582854][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.608181][T10886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.623365][T10886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.632553][T10886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.645191][T10886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.654930][T10886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.863831][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.892510][ T6200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.901221][ T5357] usb 1-1: USB disconnect, device number 22 [ 874.929469][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.959039][ T6200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.551509][ T5330] usb 3-1: USB disconnect, device number 15 [ 875.808914][T11184] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 877.424037][T11208] bpf: Bad value for 'mode' [ 877.618461][T11213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1657'. [ 877.649951][T11213] netlink: 'syz.1.1657': attribute type 7 has an invalid length. [ 877.658825][T11213] netlink: 'syz.1.1657': attribute type 8 has an invalid length. [ 877.672675][T11213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1657'. [ 877.707504][T11213] gretap0: entered promiscuous mode [ 877.738232][T11213] batadv_slave_1: entered promiscuous mode [ 877.790958][ T46] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 878.112960][ T46] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 879.028102][ T46] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 879.056647][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 879.080065][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 879.114909][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 879.142197][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 879.156661][ T46] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 879.173438][ T46] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 879.229749][ T46] usb 5-1: Product: syz [ 879.253305][ T46] usb 5-1: Manufacturer: syz [ 879.434386][T11210] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 879.446470][ T46] cdc_wdm 5-1:1.0: skipping garbage [ 879.452225][ T46] cdc_wdm 5-1:1.0: skipping garbage [ 879.459182][ T46] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 879.465372][ T46] cdc_wdm 5-1:1.0: Unknown control protocol [ 880.409951][ T5357] usb 5-1: USB disconnect, device number 20 [ 882.870559][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'. [ 883.718886][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN PTI [ 883.731625][ C1] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 883.740077][ C1] CPU: 1 UID: 0 PID: 11273 Comm: syz.2.1672 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 883.750859][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 883.760934][ C1] RIP: 0010:skb_segment+0x2e9b/0x46f0 [ 883.766334][ C1] Code: 44 24 18 48 89 44 24 38 44 8b ac 24 b0 00 00 00 e9 3c de ff ff e8 45 3d 1d f8 48 8b 44 24 20 48 8d 58 70 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 3b 0a 00 00 8b 03 48 89 84 24 88 00 00 [ 883.785975][ C1] RSP: 0018:ffffc90000a16e40 EFLAGS: 00010202 [ 883.792096][ C1] RAX: 000000000000000e RBX: 0000000000000070 RCX: ffff88801c7e0000 [ 883.800080][ C1] RDX: 0000000000000100 RSI: ffff888051bdba6e RDI: 000000000000ffff [ 883.808061][ C1] RBP: ffffc90000a170b0 R08: ffffffff897617ac R09: ffffffff897b77d0 [ 883.816026][ C1] R10: 0000000000000002 R11: ffff88801c7e0000 R12: dffffc0000000000 [ 883.823989][ C1] R13: 0000000000000005 R14: ffff888051bdba60 R15: 0000000000000000 [ 883.831960][ C1] FS: 00007f261bccb6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 883.840985][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 883.847576][ C1] CR2: 0000001b30316ff8 CR3: 00000000525cc000 CR4: 00000000003506f0 [ 883.855541][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 883.863512][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 883.871565][ C1] Call Trace: [ 883.874838][ C1] [ 883.877670][ C1] ? __die_body+0x88/0xe0 [ 883.882025][ C1] ? die_addr+0x108/0x140 [ 883.886361][ C1] ? exc_general_protection+0x3dd/0x5d0 [ 883.891921][ C1] ? skb_network_protocol+0x5aa/0x7b0 [ 883.897295][ C1] ? asm_exc_general_protection+0x26/0x30 [ 883.903095][ C1] ? skb_network_protocol+0x1b0/0x7b0 [ 883.908474][ C1] ? skb_segment+0xc3c/0x46f0 [ 883.913148][ C1] ? skb_segment+0x2e9b/0x46f0 [ 883.917906][ C1] ? __pfx_validate_chain+0x10/0x10 [ 883.923102][ C1] ? __pfx_hlock_conflict+0x10/0x10 [ 883.928297][ C1] ? __pfx_skb_segment+0x10/0x10 [ 883.933225][ C1] ? __lock_acquire+0x137a/0x2040 [ 883.938245][ C1] tcp_gso_segment+0x3e3/0x1d20 [ 883.943095][ C1] ? __pfx_tcp_wfree+0x10/0x10 [ 883.947851][ C1] ipv6_gso_segment+0xb55/0x2120 [ 883.952786][ C1] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 883.958148][ C1] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 883.963511][ C1] skb_mac_gso_segment+0x383/0x740 [ 883.968622][ C1] ? skb_mac_gso_segment+0x1b8/0x740 [ 883.973914][ C1] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 883.979546][ C1] __skb_gso_segment+0x324/0x4c0 [ 883.984484][ C1] validate_xmit_skb+0x585/0x1120 [ 883.989504][ C1] ? rcu_read_lock_bh_held+0x7e/0x120 [ 883.994893][ C1] ? __pfx_validate_xmit_skb+0x10/0x10 [ 884.000355][ C1] __dev_queue_xmit+0x17a4/0x3e90 [ 884.005398][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 884.010511][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 884.015909][ C1] ? mark_lock+0x9a/0x350 [ 884.020242][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 884.026237][ C1] ? __ipv6_neigh_lookup_noref+0x59f/0x730 [ 884.032042][ C1] ? ip6_finish_output2+0xdb6/0x1680 [ 884.037332][ C1] ip6_finish_output2+0xfc2/0x1680 [ 884.042446][ C1] ? ip6_finish_output2+0x712/0x1680 [ 884.047749][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 884.053296][ C1] ? ip6_mtu+0x81/0x3f0 [ 884.057549][ C1] ip6_finish_output+0x41e/0x810 [ 884.062485][ C1] ip6_xmit+0xefe/0x17f0 [ 884.066731][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 884.071493][ C1] ? inet6_csk_route_socket+0x625/0xe30 [ 884.077034][ C1] ? inet6_csk_route_socket+0x402/0xe30 [ 884.082576][ C1] inet6_csk_xmit+0x468/0x710 [ 884.087247][ C1] ? inet6_csk_xmit+0x1be/0x710 [ 884.092090][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 884.097306][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 884.102495][ C1] __tcp_transmit_skb+0x1ed1/0x3b30 [ 884.107720][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 884.113265][ C1] ? __build_skb_around+0x245/0x3d0 [ 884.118471][ C1] ? skb_split+0x83e/0x1420 [ 884.122984][ C1] ? tcp_small_queue_check+0x206/0x410 [ 884.128457][ C1] tcp_write_xmit+0x18b4/0x6a10 [ 884.133324][ C1] __tcp_push_pending_frames+0x9b/0x360 [ 884.138879][ C1] tcp_data_snd_check+0x7b/0xa0 [ 884.143752][ C1] tcp_rcv_state_process+0x180a/0x4570 [ 884.149214][ C1] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 884.155016][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 884.160130][ C1] ? sk_filter_trim_cap+0x5bf/0xa80 [ 884.165335][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 884.170356][ C1] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 884.175742][ C1] tcp_v6_do_rcv+0x8bc/0x13a0 [ 884.180425][ C1] tcp_v6_rcv+0x253a/0x2fb0 [ 884.184942][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 884.189790][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 884.194649][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 884.199489][ C1] ip6_protocol_deliver_rcu+0xc76/0x1570 [ 884.205139][ C1] ? ip6_input_finish+0xdc/0x2d0 [ 884.210066][ C1] ip6_input_finish+0x187/0x2d0 [ 884.214903][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 884.220269][ C1] NF_HOOK+0x3a4/0x450 [ 884.224332][ C1] ? NF_HOOK+0x9a/0x450 [ 884.228485][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 884.233065][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 884.238424][ C1] ? ip6_rcv_finish_core+0x1fb/0x410 [ 884.243715][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 884.248911][ C1] NF_HOOK+0x3a4/0x450 [ 884.252975][ C1] ? skb_orphan+0xae/0xd0 [ 884.257308][ C1] ? NF_HOOK+0x9a/0x450 [ 884.261471][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 884.266064][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 884.271283][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 884.275952][ C1] __netif_receive_skb+0x1ea/0x650 [ 884.281073][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 884.286099][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 884.291731][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 884.297714][ C1] ? __pfx_lock_release+0x10/0x10 [ 884.302738][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 884.307945][ C1] process_backlog+0x662/0x15b0 [ 884.312803][ C1] ? process_backlog+0x33b/0x15b0 [ 884.317830][ C1] ? __pfx_process_backlog+0x10/0x10 [ 884.323135][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 884.329114][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 884.335444][ C1] __napi_poll+0xcb/0x490 [ 884.339774][ C1] net_rx_action+0x89b/0x1240 [ 884.344459][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 884.349570][ C1] ? sched_clock+0x4a/0x70 [ 884.353994][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 884.360326][ C1] handle_softirqs+0x2c4/0x970 [ 884.365093][ C1] ? do_softirq+0x11b/0x1e0 [ 884.369592][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 884.374876][ C1] do_softirq+0x11b/0x1e0 [ 884.379199][ C1] [ 884.382118][ C1] [ 884.385042][ C1] ? __pfx_do_softirq+0x10/0x10 [ 884.389888][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 884.395520][ C1] ? sk_wait_data+0x250/0x510 [ 884.400286][ C1] ? rcu_is_watching+0x15/0xb0 [ 884.405054][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 884.410251][ C1] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 884.415389][ C1] ? sk_wait_data+0x250/0x510 [ 884.420060][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 884.425780][ C1] sk_wait_data+0x250/0x510 [ 884.430290][ C1] ? __pfx_sk_wait_data+0x10/0x10 [ 884.435315][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 884.441048][ C1] ? __tcp_send_ack+0x17e/0x600 [ 884.445996][ C1] tcp_recvmsg_locked+0xcef/0x2640 [ 884.451120][ C1] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 884.456683][ C1] ? tcp_recvmsg+0x23c/0x920 [ 884.461278][ C1] tcp_recvmsg+0x25d/0x920 [ 884.465689][ C1] ? __lock_acquire+0x137a/0x2040 [ 884.470730][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 884.475757][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 884.481740][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 884.486693][ C1] inet6_recvmsg+0x16a/0x730 [ 884.491292][ C1] ? irqentry_exit+0x63/0x90 [ 884.495887][ C1] ? __pfx_inet6_recvmsg+0x10/0x10 [ 884.500996][ C1] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 884.506279][ C1] ? security_socket_recvmsg+0x90/0xb0 [ 884.511739][ C1] sock_recvmsg+0x109/0x280 [ 884.516248][ C1] ____sys_recvmsg+0x1db/0x470 [ 884.521016][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 884.526312][ C1] __sys_recvmsg+0x2f0/0x3e0 [ 884.530908][ C1] ? __pfx___sys_recvmsg+0x10/0x10 [ 884.536018][ C1] ? do_futex+0x33b/0x560 [ 884.540362][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 884.546709][ C1] ? do_syscall_64+0x100/0x230 [ 884.551558][ C1] ? do_syscall_64+0xb6/0x230 [ 884.556231][ C1] do_syscall_64+0xf3/0x230 [ 884.560729][ C1] ? clear_bhb_loop+0x35/0x90 [ 884.565404][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.571304][ C1] RIP: 0033:0x7f261af779f9 [ 884.575733][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.595420][ C1] RSP: 002b:00007f261bccb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 884.603856][ C1] RAX: ffffffffffffffda RBX: 00007f261b106208 RCX: 00007f261af779f9 [ 884.611909][ C1] RDX: 0000000040000110 RSI: 00000000200008c0 RDI: 0000000000000006 [ 884.619877][ C1] RBP: 00007f261afe58ee R08: 0000000000000000 R09: 0000000000000000 [ 884.627935][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.635903][ C1] R13: 0000000000000000 R14: 00007f261b106208 R15: 00007ffc42b23c08 [ 884.643947][ C1] [ 884.646974][ C1] Modules linked in: [ 884.650959][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.657028][ C1] ---[ end trace 0000000000000000 ]--- [ 884.662510][ C1] RIP: 0010:skb_segment+0x2e9b/0x46f0 [ 884.667899][ C1] Code: 44 24 18 48 89 44 24 38 44 8b ac 24 b0 00 00 00 e9 3c de ff ff e8 45 3d 1d f8 48 8b 44 24 20 48 8d 58 70 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 3b 0a 00 00 8b 03 48 89 84 24 88 00 00 [ 884.687492][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.693496][ C1] RSP: 0018:ffffc90000a16e40 EFLAGS: 00010202 [ 884.699556][ C1] RAX: 000000000000000e RBX: 0000000000000070 RCX: ffff88801c7e0000 [ 884.707539][ C1] RDX: 0000000000000100 RSI: ffff888051bdba6e RDI: 000000000000ffff [ 884.715529][ C1] RBP: ffffc90000a170b0 R08: ffffffff897617ac R09: ffffffff897b77d0 [ 884.723523][ C1] R10: 0000000000000002 R11: ffff88801c7e0000 R12: dffffc0000000000 [ 884.731508][ C1] R13: 0000000000000005 R14: ffff888051bdba60 R15: 0000000000000000 [ 884.739508][ C1] FS: 00007f261bccb6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 884.748443][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 884.755056][ C1] CR2: 0000001b30316ff8 CR3: 00000000525cc000 CR4: 00000000003506f0 [ 884.763068][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 884.771055][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 884.779025][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 884.786344][ C1] Kernel Offset: disabled [ 884.790666][ C1] Rebooting in 86400 seconds..