last executing test programs: 11.220777916s ago: executing program 4 (id=2534): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340), &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) dup(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) r3 = syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000180), &(0x7f0000000100)) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000001000000002100000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000002c0)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void}, 0x39) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) 11.015046815s ago: executing program 2 (id=2536): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) 9.433283836s ago: executing program 4 (id=2541): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) 8.420052607s ago: executing program 4 (id=2543): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x10) close(r2) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x6400000c) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 7.673666325s ago: executing program 3 (id=2546): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 7.369739542s ago: executing program 2 (id=2548): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0xfff}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = dup(r2) write$UHID_INPUT(r7, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[], 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_FWMARK={0x8}]}}}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x5c}}, 0x0) 7.191584831s ago: executing program 4 (id=2549): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=@ipv6_getmulticast={0x14, 0x3a, 0x101}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000200)=""/98, 0x62}], 0x2}}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x480, 0x101}, 0x18) linkat(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x2000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000000), 0x48) mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = eventfd2(0xffffffff, 0x1) write$eventfd(r5, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r6, 0x4b45, 0x4) read$eventfd(r5, &(0x7f0000000040), 0x8) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001800010900000000000000000afc000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="db1d8f9f39daf0407500a2337d610c8f966824da73e1f593720cf8c87e81f15ed1828d6fd1"], 0x28}}, 0x0) lseek(r7, 0x8e, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r3, &(0x7f0000000140)='./file0/file0\x00', 0x0) 6.727240417s ago: executing program 1 (id=2550): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000008006966623000000000000000000000000064756d6d79300000000000000000000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000182c20000000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000007f0000e1ab14140000000000000000000084300400040000000000000000000041554449540000bcb92dfff07fca000000466ef58f5dc8438b000000000000000800"/376]}, 0x1f0) capset(&(0x7f0000000080), &(0x7f00000000c0)={0x200000, 0x200000}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000002c0)={0x4ec89a9d, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000010c0)={0x8, "99bdb1b0c7251b0894d3f0230a74bd856e3c10db57c3f7484d9ed4190dbc00f3"}) ioctl$SW_SYNC_IOC_INC(r1, 0xc0285700, &(0x7f0000000180)=0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000040420f00b7030000000020008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = epoll_create1(0x0) r6 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x2000201e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000000)) epoll_pwait2(r5, &(0x7f0000000100)=[{}], 0x1, &(0x7f00000016c0), 0x0, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) 6.019593899s ago: executing program 3 (id=2551): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvfrom$packet(r2, 0x0, 0x0, 0x2040, 0x0, 0x5c) 5.864751491s ago: executing program 2 (id=2552): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x2, 0x88, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.759370587s ago: executing program 1 (id=2553): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xa, 0x4d032, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@private2, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe4) mount$overlay(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f00000002c0), 0xe2882, &(0x7f0000000440)={[], [{@dont_measure}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '[/[[)-'}}, {@audit}]}) chdir(&(0x7f00000003c0)='./bus\x00') timer_create(0x0, &(0x7f0000000680)={0x0, 0x2f}, &(0x7f0000000000)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfecf}], 0x1, 0x0, 0x0, 0x5865}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) syz_io_uring_setup(0x2c5d, &(0x7f0000000140)={0x0, 0x445, 0x8, 0x2}, &(0x7f00000001c0), &(0x7f0000000200)) socket(0x0, 0x0, 0x0) r6 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)='`', 0xf4240}], 0x2) 5.636069339s ago: executing program 4 (id=2554): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={'sha384\x00'}}) 5.147177428s ago: executing program 4 (id=2555): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700800008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800c000100636f756e746572005c0002800c0002400000000000000001140000001000010000000000000000000084000a"], 0xa4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x88, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='fdb_delete\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000), 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="40e47dcb003e4932a1", 0x9}, {0x0}], 0x2}}], 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000104050000000000ef0000ff7f0000000000000002000000d5381253b65054649383407182a65bb03cf023d562572ff6e4f05bee4312183d2d8c550ee2a15a768a23d6e30e2ef0e61812db17edf87b2aa5b240cf48a9e52a0b8f37431d4949a051516555280386efc24f5e86cdf675b89ce54e7a580b7ac283e92b63cb0eab9f6643a19ec192ca0f4b5212e58581c13582d98f9b682f9f65e509fab695eee3e87fe6d4f0049a643d40362b65c4c83c196cf2c9c44071e00eb200abba5b5e922d2ad800bca4ba6ff08407a2cbb014fea0cddd2b5b01c5664659d2860995828138ad168147aa951ee25ef6f975af9cf45aaa59488b083a4c4bd599c3f5cc5f8b9d8a35abd6edff01e3014933c1c0221b21a85eb4e303aa9693ffffa38d0530023ac1ee9f82b100b87ba38345efa9d901aaa63d0328ba40fd5520b4e68e7f2ac61309b070b9876c991ebff28156062e2bdd1970bbaae0a38ef6554330cb836661a828b7a004f9df6eda45202ca5b97345c4a9c1a9f5d8c11a84"], 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}]}, 0x2d}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r11) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r12, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="2599ad8800000000280012800b00010067656e657665000018000280060005004e220000fdfc0300000000000400060008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0a002fb8aaaaaaaaaa000800"], 0x64}}, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 4.667460458s ago: executing program 1 (id=2558): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f06fc539471398450104663ea5b3e92dad434f"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_clone3(&(0x7f0000001040)={0x100000000, &(0x7f0000000280), &(0x7f0000000dc0), 0x0, {0x40}, &(0x7f0000000e40)=""/211, 0xd3, 0x0, &(0x7f0000001000)=[0x0], 0x1, {r2}}, 0x58) r3 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tr'], 0xa) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x8941, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000000c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r6}, 0x10) migrate_pages(0x0, 0x2, &(0x7f0000000180)=0x401, &(0x7f00000001c0)=0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8905, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setuid(0x0) 4.666999505s ago: executing program 3 (id=2559): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000200)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r1}, 0x90) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xde, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac141416e000030a44079f03fe8000000000000000000000000000223a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x40}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000008877fbac0c1416e000030a89079f03b18000070c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/253, 0x0, 0xfe, 0x60000000}, 0x50) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32, @ANYBLOB="0800b70004000000080026"], 0x4c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r8, 0x0, 0x0, 0x80400) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x1038, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x100c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xffc, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1038}}, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r10 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r10, 0x0, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv2(r11, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 4.614098814s ago: executing program 2 (id=2560): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c000000000000000007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1b) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000740)) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0xff}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40) openat(r5, &(0x7f0000000200)='./file0\x00', 0x111000, 0x49) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="83", 0x1) poll(&(0x7f0000000000)=[{}, {}], 0x2, 0x400) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)=ANY=[@ANYBLOB='Ppp\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf25540000000a00060008021100000100000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a0006000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.510641353s ago: executing program 1 (id=2561): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000002c0)={0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc058560f, &(0x7f0000000a80)={0x0, 0xe, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"}) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) socket(0x10, 0x803, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$rds(0x15, 0x5, 0x0) epoll_create(0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x8040480) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) 3.404206306s ago: executing program 0 (id=2562): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000240)=0x10001) mmap$dsp(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x200000a, 0x13, r1, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x80045002, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r6, &(0x7f0000000180)={&(0x7f00000005c0), 0x10, &(0x7f0000000140)={&(0x7f0000000040)=@can={{0x4, 0x1}, 0x8, 0x0, 0x0, 0x0, "0baac6cdb436d424"}, 0x10}, 0x2}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) io_uring_setup(0x0, 0x0) 3.014784966s ago: executing program 0 (id=2563): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x5411, &(0x7f0000000000)={0x3, @null}) 2.824961564s ago: executing program 1 (id=2564): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x2680, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) chdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x11, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x83edeeaf, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x44}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYRESOCT=r4, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000004300010000000000000b000800767863616e310000"], 0x20}}, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000200000800040001000000", 0x24) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) 2.824295179s ago: executing program 0 (id=2565): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x3, 0x6, 0xb2, 0x40, 0xfc5, 0x1227, 0xda8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xc7, 0x8f}}]}}]}}, 0x0) 1.230839732s ago: executing program 0 (id=2566): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.128870576s ago: executing program 0 (id=2567): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020400) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x41, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) 938.716333ms ago: executing program 0 (id=2568): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x401, 0x5, 0x3, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty, 0xb4}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 697.043997ms ago: executing program 3 (id=2569): mmap(&(0x7f0000162000/0x3000)=nil, 0x3000, 0xb635773f04ebbee2, 0x8071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000161000/0x4000)=nil, 0x4000, 0x6, &(0x7f0000000080)=0x2, 0xa, 0x3) 656.322935ms ago: executing program 1 (id=2570): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x9d, &(0x7f0000000180)={0x5, 0xf, 0x9d, 0x2, [@wireless={0xb}, @generic={0x8d, 0x10, 0x0, "6a66a17ba6f3dfb30a417a26ff2e4c76046cf4fcbdcab3217b7d513caa2a7bdf813a16cbaeb21d16be222d8b2fc82fdd7c7306e1750ed16af6db7ad5a82e61874f93f90908472dc3a55f7839b7a8a792ca8ad7288d07c59222e0f1084128bc0f7e461141d0cff03ceee9a0a78c6b75375f665646b6539fea8b40743ace635189d1c8892209e0d07db2a5"}]}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x94, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x47, 0x24, 0x13, 0x0, "2f08d62a2b30a77636f7f08a8b1f6000a4b2e720d6310f0c24b85f45feb86a2e8cca8e6c1fa36d05f37cb68719860b9d77d7f1fc9092da1983bb4a1d172477f38a68b7"}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 521.452222ms ago: executing program 3 (id=2571): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x1, r2, 0x0, &(0x7f0000000140)="d6", 0x1, 0xfffffffffffffe00}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r2, 0x0, 0x0, 0x7fffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r2, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r2, 0x0, &(0x7f0000000500)="d3", 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r2, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) 299.567273ms ago: executing program 2 (id=2572): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, &(0x7f0000000100)) 214.104245ms ago: executing program 3 (id=2573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000005c0)="48b806000000000000000f23c00f21f835010009000f23f80f20e035000010000f22e0c744240012000000c744240200000000ff2c2466f341afc744240025010000c7442402f2000000ff1c24644523d6c4e27d793008b853000000000000000f23c80f21f8350c0030000f23f866baf80cb898b19689ef66bafc0ced430f009721000000", 0x85}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 2 (id=2574): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000b2a500100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r1) kernel console output (not intermixed with test programs): uested out-of-range block 144115188075855872 for device sda1 [ 514.712663][T11117] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 514.768339][T11118] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 515.145989][T11131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1755'. [ 515.165824][T11131] gre1: entered allmulticast mode [ 515.291576][T11135] ptrace attach of "./syz-executor exec"[10364] was attempted by ""[11135] [ 516.178191][ T1531] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 516.341603][ T5274] usbhid 4-1:0.0: can't add hid device: -71 [ 516.366655][ T5274] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 516.611758][ T5274] usb 4-1: USB disconnect, device number 26 [ 516.722778][ T1531] usb 2-1: Using ep0 maxpacket: 16 [ 517.453988][ T1531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.525075][ T1531] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 517.723138][ T1531] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 517.733931][ T1531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.744104][ T1531] usb 2-1: config 0 descriptor?? [ 519.150852][T11166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1767'. [ 519.175298][ T1531] usbhid 2-1:0.0: can't add hid device: -71 [ 519.187360][ T1531] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 519.234516][ T1531] usb 2-1: USB disconnect, device number 32 [ 520.489464][T11189] fuse: blksize only supported for fuseblk [ 521.109360][T11206] syz.4.1782: attempt to access beyond end of device [ 521.109360][T11206] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 521.143452][T11206] EXT4-fs (loop4): unable to read superblock [ 522.720727][T11227] netlink: 'syz.1.1787': attribute type 2 has an invalid length. [ 524.042765][ T5272] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 524.252914][ T5272] usb 3-1: Using ep0 maxpacket: 8 [ 524.274001][ T5272] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 524.319533][T11254] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 524.322896][ T5272] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 524.389902][T11254] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 524.432849][T11254] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 524.457751][ T5272] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 524.476435][T11254] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 524.552993][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.562069][T11254] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 524.623094][T11254] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 524.663178][T11254] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 524.699122][T11254] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 524.772556][T11254] geneve2: entered promiscuous mode [ 524.802891][T11254] geneve2: entered allmulticast mode [ 524.881218][ T5272] usb 3-1: string descriptor 0 read error: -71 [ 524.889392][T11246] batadv_slave_1: entered promiscuous mode [ 524.895584][ T5272] hub 3-1:32.0: USB hub found [ 524.928455][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1794'. [ 524.950032][ T5272] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 524.986927][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1794'. [ 525.111433][ T5272] usb 3-1: USB disconnect, device number 26 [ 525.136976][T11240] batadv_slave_1: left promiscuous mode [ 525.244884][T11269] ip6gretap0 speed is unknown, defaulting to 1000 [ 525.502282][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'. [ 525.524070][ T9853] udevd[9853]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.583814][T11274] netlink: 'syz.1.1800': attribute type 15 has an invalid length. [ 525.822919][ T5231] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 526.025660][ T5231] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 526.060158][ T5231] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0xC has invalid wMaxPacketSize 0 [ 526.072019][ T5226] Bluetooth: hci4: command 0x206a tx timeout [ 526.078420][T11127] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 526.086977][ T5231] usb 3-1: config 0 interface 0 has no altsetting 0 [ 526.100424][ T5231] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 526.113786][ T5231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.122458][ T5231] usb 3-1: Product: syz [ 526.132740][ T5231] usb 3-1: Manufacturer: syz [ 526.138841][ T5231] usb 3-1: SerialNumber: syz [ 526.163789][ T5231] usb 3-1: config 0 descriptor?? [ 526.469009][ T5231] usbtest 3-1:0.0: Linux user mode ISO test driver [ 527.377582][ T5231] usbtest 3-1:0.0: high-speed {control iso-out} tests (+alt) [ 527.456708][ T5231] usb 3-1: USB disconnect, device number 27 [ 528.918981][ T29] audit: type=1326 audit(2000000312.257:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11288 comm="syz.4.1806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22ef5779f9 code=0x0 [ 529.284350][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 529.662591][ C1] Adjusting tsc more than 11% (6672763 vs 8464875) [ 530.325681][ T5272] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 530.653646][ T1531] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 531.027119][ T1531] usb 4-1: Using ep0 maxpacket: 8 [ 531.102007][ T1531] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.310527][ T1531] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.344703][ T1531] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 531.402875][ T1531] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 531.444972][ T1531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 531.482681][ T1531] usb 4-1: SerialNumber: syz [ 531.538715][ T1531] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 531.568534][ T1531] usbtest 4-1:1.0: Linux gadget zero [ 531.585237][ T1531] usbtest 4-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 531.781524][ T5272] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.791748][ T5272] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.808237][ T5272] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 531.817610][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 531.826006][ T5272] usb 1-1: SerialNumber: syz [ 532.110854][ T5273] usb 4-1: USB disconnect, device number 27 [ 532.949861][ T5272] usb 1-1: 0:2 : does not exist [ 532.990497][ T5272] usb 1-1: unit 255 not found! [ 533.106276][ T5272] usb 1-1: USB disconnect, device number 28 [ 533.487160][ T9853] udevd[9853]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.931050][ T7467] tipc: Subscription rejected, illegal request [ 534.056424][T11389] 9pnet: p9_errstr2errno: server reported unknown error @΂(Q [ 534.472207][T11406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1850'. [ 535.650528][T11422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.746316][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1859'. [ 535.978211][ T5274] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 536.074000][ T29] audit: type=1326 audit(2000000318.959:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3779f9 code=0x7ffc0000 [ 536.153935][ T29] audit: type=1326 audit(2000000318.959:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3779f9 code=0x7ffc0000 [ 536.188232][ T29] audit: type=1326 audit(2000000318.988:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fe4cc3779f9 code=0x7ffc0000 [ 536.226384][ T5274] usb 3-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.84 [ 536.242345][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.251244][ T29] audit: type=1326 audit(2000000318.988:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3779f9 code=0x7ffc0000 [ 536.276011][ T5274] usb 3-1: Product: syz [ 536.280227][ T5274] usb 3-1: Manufacturer: syz [ 536.284891][ T5274] usb 3-1: SerialNumber: syz [ 536.328087][ T5274] usb 3-1: config 0 descriptor?? [ 536.333182][ T29] audit: type=1326 audit(2000000318.988:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3779f9 code=0x7ffc0000 [ 536.354911][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.375684][ T5274] usb 3-1: bad CDC descriptors [ 536.387490][ T29] audit: type=1326 audit(2000000318.998:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe4cc3779f9 code=0x7ffc0000 [ 536.421286][ T58] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 536.471046][ T29] audit: type=1326 audit(2000000319.008:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3779f9 code=0x7ffc0000 [ 536.492709][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.526341][ T29] audit: type=1326 audit(2000000319.008:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3779f9 code=0x7ffc0000 [ 536.569390][ T29] audit: type=1326 audit(2000000319.008:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe4cc3779f9 code=0x7ffc0000 [ 536.591035][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.601064][ T29] audit: type=1326 audit(2000000319.008:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3779f9 code=0x7ffc0000 [ 536.651548][T11058] usb 3-1: USB disconnect, device number 28 [ 536.664957][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 536.695710][ T58] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 536.714198][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.724606][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1869'. [ 536.735282][ T58] usb 2-1: config 0 has no interface number 0 [ 536.741573][ T58] usb 2-1: config 0 interface 4 altsetting 36 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 536.752733][T11449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1869'. [ 536.762404][ T58] usb 2-1: config 0 interface 4 altsetting 36 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 536.773559][ T58] usb 2-1: config 0 interface 4 altsetting 36 bulk endpoint 0xD has invalid maxpacket 1023 [ 536.783753][ T58] usb 2-1: config 0 interface 4 altsetting 36 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 536.784754][T11449] netlink: 'syz.4.1869': attribute type 1 has an invalid length. [ 536.804104][ T58] usb 2-1: config 0 interface 4 altsetting 36 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 536.804154][ T58] usb 2-1: config 0 interface 4 altsetting 36 endpoint 0x83 has invalid wMaxPacketSize 0 [ 536.804225][ T58] usb 2-1: config 0 interface 4 altsetting 36 has 5 endpoint descriptors, different from the interface descriptor's value: 11 [ 536.804257][ T58] usb 2-1: config 0 interface 4 has no altsetting 0 [ 536.839653][ T5274] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 536.871308][T11449] fuse: Bad value for 'fd' [ 536.919328][ T58] usb 2-1: New USB device found, idVendor=0403, idProduct=fa88, bcdDevice=de.25 [ 536.934422][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.947095][ T58] usb 2-1: Product: syz [ 536.958032][ T58] usb 2-1: Manufacturer: syz [ 536.971090][ T58] usb 2-1: SerialNumber: syz [ 536.979608][ T58] usb 2-1: config 0 descriptor?? [ 536.986001][T11438] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 536.995831][ T58] ftdi_sio 2-1:0.4: FTDI USB Serial Device converter detected [ 537.005339][ T58] ftdi_sio ttyUSB0: unknown device type: 0xde25 [ 537.030686][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 537.058622][ T5274] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 537.078411][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.064093][ T5274] usb 1-1: config 0 descriptor?? [ 540.101186][T11058] usb 2-1: USB disconnect, device number 33 [ 540.202245][ T5274] usb 1-1: can't set config #0, error -71 [ 540.211173][T11058] ftdi_sio 2-1:0.4: device disconnected [ 540.239638][ T5274] usb 1-1: USB disconnect, device number 29 [ 540.515800][T11461] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 540.546654][T11467] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1876'. [ 540.692759][T11472] Bluetooth: MGMT ver 1.23 [ 541.005856][T11490] netlink: 'syz.3.1886': attribute type 1 has an invalid length. [ 541.119098][T11490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.190425][T11493] vlan2: entered promiscuous mode [ 541.209094][T11493] bond1: entered promiscuous mode [ 541.861462][ T58] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 542.078322][ T58] usb 4-1: config index 0 descriptor too short (expected 11076, got 36) [ 542.093985][T11515] ebtables: ebtables: counters copy to user failed while replacing table [ 542.122555][ T58] usb 4-1: config 74 has too many interfaces: 179, using maximum allowed: 32 [ 542.174471][ T58] usb 4-1: config 74 has 1 interface, different from the descriptor's value: 179 [ 542.211343][ T58] usb 4-1: config 74 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.252348][T11529] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 542.259865][T11529] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 542.284824][ T58] usb 4-1: config 74 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.305248][T11529] vhci_hcd vhci_hcd.0: Device attached [ 542.326536][ T58] usb 4-1: config 74 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 542.364971][ T58] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 542.378007][ T5273] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 542.421197][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.589971][ T47] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 542.608300][ T5272] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 542.626937][ T5273] usb 1-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 542.662587][ T5273] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 542.692300][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.750380][ T5273] usb 1-1: config 0 descriptor?? [ 542.793002][ T5273] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 542.822738][ T5273] usb 1-1: No valid video chain found. [ 542.841723][ T5272] usb 5-1: Using ep0 maxpacket: 16 [ 542.894259][ T5272] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 543.204196][ T5272] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 543.225898][ T5274] usb 1-1: USB disconnect, device number 30 [ 543.275624][ T5272] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 543.379778][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'. [ 543.380885][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 543.590643][ T5272] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 543.680228][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.752510][ T5272] usb 5-1: Product: syz [ 543.756814][ T5272] usb 5-1: Manufacturer: syz [ 543.761476][ T5272] usb 5-1: SerialNumber: syz [ 543.894272][ T5272] usb 5-1: config 0 descriptor?? [ 544.186015][T11540] vhci_hcd: connection reset by peer [ 544.217711][ T5272] powermate: Expected payload of 3--6 bytes, found 512 bytes! [ 544.484264][ T7477] vhci_hcd: stop threads [ 544.486994][ T5272] input: Griffin PowerMate as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input28 [ 544.491420][ T7477] vhci_hcd: release socket [ 544.508524][ C0] powermate: config urb returned -71 [ 544.514448][ C0] powermate: config urb returned -71 [ 544.520045][ C0] powermate: config urb returned -71 [ 544.525550][ C0] powermate: config urb returned -71 [ 545.564124][ T5272] usb 5-1: USB disconnect, device number 30 [ 545.570081][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 545.657909][ T58] usbhid 4-1:74.0: can't add hid device: -71 [ 545.666048][ T58] usbhid 4-1:74.0: probe with driver usbhid failed with error -71 [ 545.681121][ T58] usb 4-1: USB disconnect, device number 28 [ 545.698963][ T7477] vhci_hcd: disconnect device [ 546.289954][T11598] syz.4.1910: attempt to access beyond end of device [ 546.289954][T11598] nbd4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 546.485475][T11600] IPv6: sit1: Disabled Multicast RS [ 546.813130][T11058] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 547.165559][T11058] usb 2-1: Using ep0 maxpacket: 16 [ 547.174085][T11058] usb 2-1: config 253 has an invalid interface number: 157 but max is 3 [ 547.183116][T11058] usb 2-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 547.193042][T11058] usb 2-1: config 253 has an invalid interface number: 213 but max is 3 [ 547.210262][T11058] usb 2-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 547.240710][T11058] usb 2-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 547.440160][T11058] usb 2-1: config 253 has no interface number 0 [ 547.446605][T11058] usb 2-1: config 253 has no interface number 1 [ 547.453176][T11058] usb 2-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 547.478742][T11058] usb 2-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 548.170405][T11058] usb 2-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 548.181616][T11058] usb 2-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 548.195345][T11058] usb 2-1: config 253 interface 157 has no altsetting 0 [ 548.203345][T11058] usb 2-1: config 253 interface 213 has no altsetting 0 [ 548.217072][T11058] usb 2-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 548.226309][T11058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.234809][ T47] vhci_hcd: vhci_device speed not set [ 548.241709][ T1531] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 548.254167][T11058] usb 2-1: Product: syz [ 548.258596][T11058] usb 2-1: Manufacturer: syz [ 548.268678][T11058] usb 2-1: SerialNumber: syz [ 548.429707][ T1531] usb 3-1: Using ep0 maxpacket: 16 [ 548.438214][ T1531] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 548.466748][ T1531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 548.525431][ T1531] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 548.540151][ T1531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.549143][ T1531] usb 3-1: Product: syz [ 548.560373][ T1531] usb 3-1: Manufacturer: syz [ 548.565151][ T1531] usb 3-1: SerialNumber: syz [ 548.588951][T11600] 9pnet_fd: Insufficient options for proto=fd [ 548.610990][ T1531] usb 3-1: config 0 descriptor?? [ 548.665468][ T1531] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 548.683110][T11058] r8712u: register rtl8712_netdev_ops to netdev_ops [ 548.731409][T11058] usb 2-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 548.752385][T11058] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 548.759042][T11058] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 548.822757][ T5272] usb 3-1: USB disconnect, device number 29 [ 548.828836][ T7488] usb 3-1: Failed to submit usb control message: -71 [ 548.840721][T11058] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 548.848577][ T7488] usb 3-1: unable to send the bmi data to the device: -71 [ 548.871411][ T7488] usb 3-1: unable to get target info from device [ 548.877800][ T7488] usb 3-1: could not get target info (-71) [ 548.920162][T11058] usb 2-1: Found UVC 0.00 device syz (0b05:1791) [ 548.934317][ T7488] usb 3-1: could not probe fw (-71) [ 549.140490][T11058] usb 2-1: No valid video chain found. [ 549.419843][ T58] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 549.730395][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 549.975357][ T58] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 550.006064][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 550.110931][ T58] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 550.127097][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.135420][T11058] r8712u: register rtl8712_netdev_ops to netdev_ops [ 550.135452][T11058] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 550.157350][ T58] usb 5-1: Product: syz [ 550.164557][ T58] usb 5-1: Manufacturer: syz [ 550.169997][ T58] usb 5-1: SerialNumber: syz [ 550.189374][T11058] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 550.215396][ T58] usb 5-1: config 0 descriptor?? [ 550.217237][T11058] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 550.250858][T11058] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 550.307790][T11058] usb 2-1: USB disconnect, device number 34 [ 550.449664][T11631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.486151][T11631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.520187][T11631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.561544][T11631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.616268][T11631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.640458][T11631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.936175][T11631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.947981][T11631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.991015][T11058] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 551.021477][ T58] powermate: Expected payload of 3--6 bytes, found 512 bytes! [ 551.062741][ T58] input: Griffin PowerMate as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 551.107195][ C0] powermate: config urb returned -71 [ 551.112845][ C0] powermate: config urb returned -71 [ 551.118450][ C0] powermate: config urb returned -71 [ 551.124040][ C0] powermate: config urb returned -71 [ 551.151546][ T58] usb 5-1: USB disconnect, device number 31 [ 551.151599][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 551.198765][T11058] usb 2-1: config 250 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 551.272594][T11058] usb 2-1: language id specifier not provided by device, defaulting to English [ 551.310661][T11058] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 551.343313][T11058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.355131][T11058] usb 2-1: Product: syz [ 551.359538][T11058] usb 2-1: Manufacturer: 靰ﻥ傖ᅅ㞴岼먊ߧᚨ筨鴴㝮렃舊陌睬ٶ寥淴駖켧ἲ㯩譅㯂֫凑ᶜ鎣䟒ᣇ邛྽ⰨꢅŦꂙ섾倞ࡢᅗ힋䒺⿰挱 [ 551.406601][T11058] usb 2-1: SerialNumber: syz [ 551.619149][T11058] usbhid 2-1:250.0: couldn't find an input interrupt endpoint [ 552.772271][T11662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1932'. [ 553.085432][T11637] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.981220][T11671] tipc: Started in network mode [ 553.987486][T11671] tipc: Node identity 1, cluster identity 4711 [ 554.001664][T11671] tipc: Node number set to 1 [ 554.072749][T11677] vhci_hcd: vhci_device speed not set [ 554.122204][T11058] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 554.395875][ T58] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 554.603527][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 554.622052][ T58] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 554.641581][ T58] usb 1-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 554.666644][ T58] usb 1-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 554.680997][ T58] usb 1-1: Product: syz [ 554.715780][ T58] usb 1-1: config 0 descriptor?? [ 554.744654][ T58] usb 1-1: dvb_usb_v2: found a 'Anysee' in warm state [ 554.760316][ T58] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 554.769743][ T58] dvb_usb_anysee 1-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 554.881288][T11058] usb 4-1: Using ep0 maxpacket: 32 [ 554.907650][T11058] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.919355][T11058] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.929626][T11058] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 554.938997][T11058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.951643][T11058] usb 4-1: config 0 descriptor?? [ 555.040619][T11678] Process accounting resumed [ 555.116976][ T47] usb 2-1: USB disconnect, device number 35 [ 555.123213][ T5274] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 555.322543][ T5274] usb 5-1: Using ep0 maxpacket: 8 [ 555.336492][ T5274] usb 5-1: config 0 has no interfaces? [ 555.358720][ T5274] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 555.392005][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.406909][T11058] savu 0003:1E7D:2D5A.0022: item fetching failed at offset 4/8 [ 555.418692][ T5274] usb 5-1: config 0 descriptor?? [ 555.424969][T11058] savu 0003:1E7D:2D5A.0022: parse failed [ 555.431726][T11058] savu 0003:1E7D:2D5A.0022: probe with driver savu failed with error -22 [ 555.591505][T11701] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 555.591505][T11701] SȘȞZ6' [ 555.622338][T10721] usb 4-1: USB disconnect, device number 29 [ 556.647596][ T5274] usb 1-1: USB disconnect, device number 31 [ 557.963710][ T9] usb 5-1: USB disconnect, device number 32 [ 558.381287][T11727] netlink: 544 bytes leftover after parsing attributes in process `syz.3.1951'. [ 559.868764][T11748] tipc: Enabled bearer , priority 10 [ 560.292233][T10721] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 560.402312][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 560.512286][T11058] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 560.527971][T10721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.555187][T10721] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 560.596451][T10721] usb 1-1: config 1 has no interface number 0 [ 560.614283][T10721] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.633588][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.692361][T10721] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 560.712144][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.722272][T10721] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.732231][T11058] usb 5-1: Using ep0 maxpacket: 32 [ 560.737514][ T9] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 560.747895][T11058] usb 5-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 560.751575][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.771249][T10721] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 560.780858][T10721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.790309][T10721] usb 1-1: Product: syz [ 560.794802][T10721] usb 1-1: Manufacturer: syz [ 560.799427][T10721] usb 1-1: SerialNumber: syz [ 561.183781][ T9] usb 4-1: config 0 descriptor?? [ 561.192346][T11058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.277717][T11058] usb 5-1: config 0 descriptor?? [ 561.550603][ T5272] usb 5-1: USB disconnect, device number 33 [ 561.649915][ T9] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 561.711652][ T9] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 561.728050][ T9] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 561.751601][ T9] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 561.767562][ T9] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0 [ 561.995732][ T9] asus 0003:0B05:1ABE.0023: hidraw0: USB HID v0.00 Device [HID 0b05:1abe] on usb-dummy_hcd.3-1/input0 [ 562.006931][ T9] asus 0003:0B05:1ABE.0023: Asus input not registered [ 562.019276][ T9] asus 0003:0B05:1ABE.0023: probe with driver asus failed with error -12 [ 562.133157][ T9] usb 4-1: USB disconnect, device number 30 [ 562.937300][T10721] cdc_ncm 1-1:1.1: bind() failure [ 563.154311][ T9] usb 1-1: USB disconnect, device number 32 [ 563.562672][T11794] netlink: 164880 bytes leftover after parsing attributes in process `syz.1.1972'. [ 563.572343][T11794] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 563.652448][T10721] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 563.703931][T11797] batman_adv: batadv0: Adding interface: macsec1 [ 563.710821][T11797] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.741976][T11797] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 563.854615][T10721] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 563.887179][T10721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.928664][T10721] usb 3-1: config 0 descriptor?? [ 563.967302][T10721] gspca_main: spca508-2.14.0 probing 8086:0110 [ 564.174734][T10721] gspca_spca508: reg_read err -32 [ 564.205764][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.617772][T11779] overlayfs: invalid origin (0000) [ 564.677139][T10721] gspca_spca508: reg_read err -71 [ 564.703969][T10721] gspca_spca508: reg_read err -71 [ 564.722733][T10721] gspca_spca508: reg write: error -71 [ 564.763055][T10721] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 564.776404][T10721] usb 3-1: USB disconnect, device number 30 [ 564.882439][T11058] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 565.072183][ T5272] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 565.083471][T11832] 9pnet_fd: Insufficient options for proto=fd [ 565.113246][T11058] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.128823][T11058] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 565.150238][T11058] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 565.167040][T11058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 565.177980][T11058] usb 1-1: SerialNumber: syz [ 565.262258][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 565.284936][ T5272] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice=73.1b [ 565.311331][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.334331][ T5272] usb 5-1: Product: syz [ 565.347107][ T5272] usb 5-1: Manufacturer: syz [ 565.361141][ T5272] usb 5-1: SerialNumber: syz [ 565.382572][ T5272] usb 5-1: config 0 descriptor?? [ 565.413731][ T5272] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input30 [ 565.421129][T11058] usb 1-1: 0:2 : does not exist [ 565.485558][T11058] usb 1-1: USB disconnect, device number 33 [ 565.614581][ T4656] bcm5974 5-1:0.0: could not read from device [ 565.639154][ T4656] bcm5974 5-1:0.0: could not read from device [ 565.667060][ T5272] usb 5-1: USB disconnect, device number 34 [ 565.675890][ T4656] bcm5974 5-1:0.0: could not read from device [ 565.711009][ T4656] bcm5974 5-1:0.0: could not read from device [ 565.755034][ T9853] udevd[9853]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.212750][T10721] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 567.373306][ T5274] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 567.382040][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 567.382058][ T29] audit: type=1326 audit(2000000350.167:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11854 comm="syz.2.1998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7de3f779f9 code=0x0 [ 567.449740][T10721] usb 4-1: Using ep0 maxpacket: 16 [ 567.469138][T10721] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 567.487210][T10721] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 567.498910][T10721] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 567.521994][T10721] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 567.543206][ T5272] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 567.561016][T10721] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 567.577435][T10721] usb 4-1: config 1 interface 0 has no altsetting 0 [ 567.586198][T10721] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 567.600681][T10721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.610727][ T5274] usb 1-1: config 0 interface 0 has no altsetting 0 [ 567.618327][ T5274] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 567.635291][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.638595][T10721] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 567.679011][ T5274] usb 1-1: config 0 descriptor?? [ 567.695200][ T5274] smsusb:smsusb_probe: board id=8, interface number 0 [ 567.711605][ T5274] smsusb:smsusb_probe: Device initialized with return code -19 [ 567.762537][ T5272] usb 5-1: Using ep0 maxpacket: 8 [ 567.795987][ T5272] usb 5-1: unable to get BOS descriptor or descriptor too short [ 567.829994][ T5272] usb 5-1: string descriptor 0 read error: -22 [ 567.854118][T10721] scsi host1: usb-storage 4-1:1.0 [ 567.859542][ T5272] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 567.899887][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.961898][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1996'. [ 567.981542][ T5272] usb 5-1: config 0 descriptor?? [ 568.031604][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1996'. [ 568.088298][ T47] usb 1-1: USB disconnect, device number 34 [ 568.153308][ T5274] usb 4-1: USB disconnect, device number 31 [ 568.548517][ T5272] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 568.560345][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 568.607576][ T5272] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 568.628081][ T5272] dib0700: firmware download failed at 7 with -22 [ 568.656256][ T5272] usb 5-1: USB disconnect, device number 35 [ 568.793187][ T47] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 568.992287][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 569.015199][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.031705][T11890] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 569.041554][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.086708][ T47] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 569.123443][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.157001][ T47] usb 3-1: config 0 descriptor?? [ 569.515478][T11902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2014'. [ 569.580282][T11902] netlink: 'syz.3.2014': attribute type 1 has an invalid length. [ 569.596999][T11902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2014'. [ 569.605212][ T47] corsair 0003:1B1C:1B09.0024: item fetching failed at offset 2/5 [ 569.658415][ T47] corsair 0003:1B1C:1B09.0024: parse failed [ 569.684549][ T47] corsair 0003:1B1C:1B09.0024: probe with driver corsair failed with error -22 [ 569.860057][T11058] usb 3-1: USB disconnect, device number 31 [ 570.302261][T10721] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 570.524855][T10721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.586878][T10721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.623167][T10721] usb 4-1: New USB device found, idVendor=05cc, idProduct=0268, bcdDevice= 0.00 [ 570.664925][T10721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.715774][T10721] usb 4-1: config 0 descriptor?? [ 571.206641][T10721] hid-generic 0003:05CC:0268.0025: hidraw0: USB HID v0.00 Device [HID 05cc:0268] on usb-dummy_hcd.3-1/input0 [ 571.398156][ T47] usb 4-1: USB disconnect, device number 32 [ 572.325600][T11949] 9pnet_fd: Insufficient options for proto=fd [ 572.817678][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 573.531480][T11978] netlink: 'syz.0.2041': attribute type 5 has an invalid length. [ 573.843045][T10721] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 573.962333][ T47] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 574.032236][T10721] usb 5-1: Using ep0 maxpacket: 8 [ 574.191324][T10721] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 574.217945][T10721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.227137][T10721] usb 5-1: Product: syz [ 574.231542][T10721] usb 5-1: Manufacturer: syz [ 574.236539][T10721] usb 5-1: SerialNumber: syz [ 574.368305][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.425425][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.500376][ T47] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 574.600430][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.083436][T10721] usb 5-1: config 0 descriptor?? [ 575.102580][T10721] gspca_main: sq930x-2.14.0 probing 2770:930c [ 575.108357][ T47] usb 4-1: config 0 descriptor?? [ 575.396953][T12009] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2053'. [ 575.798034][ T47] usb 4-1: language id specifier not provided by device, defaulting to English [ 575.929178][T12026] netlink: 'syz.2.2058': attribute type 12 has an invalid length. [ 575.938071][T12026] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.2058'. [ 576.172302][T10721] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 577.057407][ T47] uclogic 0003:256C:006D.0026: failed retrieving string descriptor #100: -71 [ 577.078284][T10721] gspca_sq930x: Sensor ov9630 not yet treated [ 577.079303][ T47] uclogic 0003:256C:006D.0026: failed retrieving pen parameters: -71 [ 577.084815][T10721] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 577.132688][ T47] uclogic 0003:256C:006D.0026: failed probing pen v1 parameters: -71 [ 577.140943][ T47] uclogic 0003:256C:006D.0026: failed probing parameters: -71 [ 577.187302][T10721] usb 5-1: USB disconnect, device number 36 [ 577.214347][ T47] uclogic 0003:256C:006D.0026: probe with driver uclogic failed with error -71 [ 577.283767][ T47] usb 4-1: USB disconnect, device number 33 [ 578.765827][T12062] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 578.844796][T12062] macsec2: entered promiscuous mode [ 578.859181][T12062] macsec2: entered allmulticast mode [ 578.875465][T12062] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 578.904850][T12062] mac80211_hwsim hwsim26 wlan0: left allmulticast mode [ 578.919046][T12062] mac80211_hwsim hwsim26 wlan0: left promiscuous mode [ 580.377469][T12082] xt_cgroup: invalid path, errno=-2 [ 582.046299][T12094] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 582.567498][T12097] ip6gretap0 speed is unknown, defaulting to 1000 [ 584.699752][T12127] netlink: 'syz.3.2086': attribute type 1 has an invalid length. [ 584.719360][T12127] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2086'. [ 585.202343][ T47] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 585.405355][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 585.429445][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 585.465557][ T47] usb 4-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 585.482363][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.515935][ T47] usb 4-1: Product: syz [ 585.526906][ T47] usb 4-1: Manufacturer: syz [ 585.531572][ T47] usb 4-1: SerialNumber: syz [ 585.547386][ T47] usb 4-1: config 0 descriptor?? [ 585.702279][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 585.817735][T10721] usb 4-1: USB disconnect, device number 34 [ 585.885377][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.897825][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.909338][ T9] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 585.919324][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.950268][ T9] usb 2-1: config 0 descriptor?? [ 586.423398][ T9] hid-multitouch 0003:1FD2:6007.0027: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 586.453007][T12147] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 586.642142][ T9] usb 2-1: USB disconnect, device number 36 [ 586.769444][ T5226] Bluetooth: hci4: command 0x206a tx timeout [ 587.018534][ T7488] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.156336][ T7488] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.313779][T12163] binder: BC_ATTEMPT_ACQUIRE not supported [ 587.325695][ T7488] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.331498][T12163] binder: 12162:12163 ioctl c0306201 200005c0 returned -22 [ 587.478316][T12167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 587.613568][ T7488] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.651033][T12169] netlink: 'syz.2.2105': attribute type 5 has an invalid length. [ 587.666897][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 587.679831][ T5226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 587.691822][ T5226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 587.713900][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 587.732335][ T5226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 587.748502][ T5226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 587.862539][ T5272] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 587.912467][T10721] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 587.971060][T12175] ip6gretap0 speed is unknown, defaulting to 1000 [ 588.044944][ T7488] team0: left allmulticast mode [ 588.060502][ T7488] team_slave_0: left allmulticast mode [ 588.077347][ T7488] team_slave_1: left allmulticast mode [ 588.086087][ T7488] bridge0: port 3(team0) entered disabled state [ 588.094049][ T5272] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 588.104131][ T5272] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.119295][ T5272] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 588.120950][ T7488] bridge_slave_1: left allmulticast mode [ 588.136363][ T5272] usb 2-1: config 1 has no interface number 1 [ 588.153024][T10721] usb 4-1: Using ep0 maxpacket: 32 [ 588.159786][ T5272] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 588.181400][ T7488] bridge_slave_1: left promiscuous mode [ 588.188051][T10721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 588.202595][ T7488] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.231978][T10721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 588.241940][ T5272] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x4A, changing to 0xA [ 588.255719][ T7488] bridge_slave_0: left allmulticast mode [ 588.263279][ T7488] bridge_slave_0: left promiscuous mode [ 588.269183][ T5272] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 588.280680][ T7488] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.291807][T10721] usb 4-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 588.301721][T10721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.321201][ T5272] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 588.332770][T10721] usb 4-1: Product: syz [ 588.341089][T10721] usb 4-1: Manufacturer: syz [ 588.361167][ T5272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.377162][T10721] usb 4-1: SerialNumber: syz [ 588.391355][ T5272] usb 2-1: Product: syz [ 588.399817][T10721] usb 4-1: config 0 descriptor?? [ 588.412533][ T5272] usb 2-1: Manufacturer: syz [ 588.429531][ T5272] usb 2-1: SerialNumber: syz [ 588.651849][ T5274] usb 4-1: USB disconnect, device number 35 [ 588.743388][ T5272] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 588.915350][ T5272] usb 2-1: USB disconnect, device number 37 [ 589.274116][ T9505] udevd[9505]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.390626][ T29] audit: type=1804 audit(2000000628.183:2271): pid=12206 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.2119" name="/newroot/106/bus/bus" dev="overlay" ino=582 res=1 errno=0 [ 589.433145][T12206] Invalid ELF header magic: != ELF [ 589.804284][ T5226] Bluetooth: hci0: command tx timeout [ 590.091464][ T7488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.858417][ T7488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.905227][ T7488] bond0 (unregistering): Released all slaves [ 590.959333][T12210] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 591.000062][T12210] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 591.075617][ T7488] tipc: Disabling bearer [ 591.093398][ T7488] tipc: Left network mode [ 591.195170][T12233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.442625][ T47] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 591.657582][ T47] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 591.686692][ T47] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 591.705580][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.718624][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 591.758548][T12175] chnl_net:caif_netlink_parms(): no params data found [ 591.765796][ T47] usb 4-1: config 0 has no interface number 0 [ 591.811331][ T47] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 591.843431][ T47] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 591.882914][ T5226] Bluetooth: hci0: command tx timeout [ 591.898578][ T47] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 591.942569][ T47] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.051810][ T47] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 592.076993][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.845966][ T47] usb 4-1: config 0 descriptor?? [ 592.903970][ T47] gspca_main: spca561-2.14.0 probing abcd:cdee [ 593.275097][T12175] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.293399][T12175] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.293767][ T47] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 593.332008][T12175] bridge_slave_0: entered allmulticast mode [ 593.345798][T12175] bridge_slave_0: entered promiscuous mode [ 593.353155][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 593.360176][ T47] usb 4-1: MIDIStreaming interface descriptor not found [ 593.402241][ T7488] hsr_slave_0: left promiscuous mode [ 593.485800][ T7488] hsr_slave_1: left promiscuous mode [ 593.502003][ T47] usb 4-1: USB disconnect, device number 36 [ 593.534032][ T7488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.568000][ T7488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.606192][ T7488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.628142][ T7488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.687270][ T7488] veth1_macvtap: left promiscuous mode [ 593.701223][ T7488] veth0_macvtap: left promiscuous mode [ 593.712634][ T7488] veth1_vlan: left promiscuous mode [ 593.718027][ T7488] veth0_vlan: left promiscuous mode [ 593.900153][ T9749] udevd[9749]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.973230][ T5226] Bluetooth: hci0: command tx timeout [ 594.667510][T12314] [U]  [ 595.861448][T12331] ./file0: Can't lookup blockdev [ 596.053358][ T5226] Bluetooth: hci0: command tx timeout [ 596.131499][ T7488] team_slave_1 (unregistering): left promiscuous mode [ 596.150877][ T7488] team0 (unregistering): Port device team_slave_1 removed [ 596.209309][ T7488] team_slave_0 (unregistering): left promiscuous mode [ 596.226762][ T7488] team0 (unregistering): Port device team_slave_0 removed [ 596.829197][T12175] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.838218][T12175] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.849083][T12175] bridge_slave_1: entered allmulticast mode [ 596.857122][T12175] bridge_slave_1: entered promiscuous mode [ 596.907948][T12326] bridge0: entered promiscuous mode [ 596.930561][T12326] bridge0: entered allmulticast mode [ 597.084532][T12175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.148638][T12175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.321799][T12175] team0: Port device team_slave_0 added [ 597.367260][T12175] team0: Port device team_slave_1 added [ 597.374567][ T5274] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 597.442401][T11058] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 597.570958][T12175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.584471][ T47] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 597.602730][ T5274] usb 2-1: Using ep0 maxpacket: 16 [ 597.620982][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.631498][T12175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.652246][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.681053][T11058] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 597.681228][T12175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.708584][ T5274] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 597.745505][T11058] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 597.750810][T12175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.764028][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.779104][T11058] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 597.800615][ T5274] usb 2-1: config 0 descriptor?? [ 597.807051][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 597.812774][T11058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.821565][ T29] audit: type=1326 audit(2000000636.613:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12432 comm="syz.2.2156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7de3f779f9 code=0x0 [ 597.842663][T12373] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 597.857723][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.869731][T12373] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 597.872148][T12175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.877431][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 597.902863][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.934566][T11058] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 597.970029][T12175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.019759][ T47] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 598.104445][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.150233][ T47] usb 5-1: config 0 descriptor?? [ 598.164246][ T7488] IPVS: stop unused estimator thread 0... [ 598.274406][ T5274] mcp2200 0003:04D8:00DF.0028: item fetching failed at offset 0/2 [ 598.309204][ T5274] mcp2200 0003:04D8:00DF.0028: can't parse reports [ 598.331388][ T5274] mcp2200 0003:04D8:00DF.0028: probe with driver mcp2200 failed with error -22 [ 598.355436][T11058] usb 4-1: USB disconnect, device number 37 [ 598.487570][ T5272] usb 2-1: USB disconnect, device number 38 [ 598.667585][T12175] hsr_slave_0: entered promiscuous mode [ 598.728724][T12175] hsr_slave_1: entered promiscuous mode [ 600.541750][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 600.573547][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 600.612652][ T47] usb 5-1: USB disconnect, device number 37 [ 600.842848][T12601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2163'. [ 601.164844][T12640] netlink: 'syz.3.2167': attribute type 10 has an invalid length. [ 601.232345][ T47] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 601.250430][T12640] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2167'. [ 601.502193][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 601.528697][ T47] usb 5-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 601.571208][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.608935][ T47] usb 5-1: config 0 descriptor?? [ 601.646158][ T47] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 601.659509][T12663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2169'. [ 602.176049][ T47] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 602.176079][ T47] sq905c 5-1:0.0: Get version command failed [ 602.176162][ T47] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 602.231350][T12175] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 602.258001][T12175] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 602.281974][T12175] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 602.295553][T12175] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 602.359568][T12709] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2178'. [ 602.359599][T12709] netlink: 'syz.1.2178': attribute type 2 has an invalid length. [ 602.359616][T12709] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2178'. [ 602.541913][T12175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.602637][ T47] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 602.688593][T12175] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.714685][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.721934][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.742119][T11058] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.749544][T11058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.894346][ T47] usb 4-1: New USB device found, idVendor=07ca, idProduct=a835, bcdDevice=21.fa [ 602.922048][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.967161][ T47] usb 4-1: config 0 descriptor?? [ 603.224846][T12708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.256314][T12708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.304068][T12175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.334708][ T47] usb 4-1: string descriptor 0 read error: -71 [ 603.360254][ T47] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 603.401947][ T47] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 603.450259][ T47] usb 4-1: USB disconnect, device number 38 [ 603.534826][T12175] veth0_vlan: entered promiscuous mode [ 603.634828][T12175] veth1_vlan: entered promiscuous mode [ 603.677508][ T25] usb 5-1: USB disconnect, device number 38 [ 603.797284][T12175] veth0_macvtap: entered promiscuous mode [ 603.841056][T12175] veth1_macvtap: entered promiscuous mode [ 603.920353][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.943367][T12775] netlink: 'syz.4.2184': attribute type 1 has an invalid length. [ 603.955334][T12775] netlink: 'syz.4.2184': attribute type 1 has an invalid length. [ 603.964436][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.982462][T12775] netlink: 9108 bytes leftover after parsing attributes in process `syz.4.2184'. [ 603.993129][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.006378][T12775] netlink: 'syz.4.2184': attribute type 1 has an invalid length. [ 604.023503][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.032221][T12775] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2184'. [ 604.053651][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.083673][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.106137][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.134384][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.166853][T12175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.222329][ T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 604.222565][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.262239][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.284460][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.305370][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.332241][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.363925][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.390248][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.402210][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.420887][T12175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.428656][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 604.442838][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.482519][T12175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.491708][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 604.513875][T12175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.532383][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 604.562488][T12175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.592048][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 604.622665][T12175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.705656][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 604.789130][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 604.955542][ T25] usb 3-1: SerialNumber: syz [ 605.297573][ T25] cdc_acm 3-1:1.0: skipping garbage [ 605.343864][ T25] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 605.625086][ T7488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.646506][ T5273] usb 3-1: USB disconnect, device number 32 [ 605.671603][ T7488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.796956][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.813225][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.942679][ T5231] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 605.950544][T11058] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 606.142271][ T5231] usb 4-1: Using ep0 maxpacket: 8 [ 606.152464][T11058] usb 5-1: Using ep0 maxpacket: 8 [ 606.160819][ T5231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.176745][ T5231] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 606.193273][T11058] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 606.213970][ T5231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.240902][T11058] usb 5-1: config 0 has no interface number 1 [ 606.268921][T11058] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 606.282703][ T5231] usb 4-1: config 0 descriptor?? [ 606.318231][T11058] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 606.359137][T11058] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 606.392253][T11058] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 606.420902][T11058] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 606.449500][T11058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 606.478794][T11058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 606.544654][T11058] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 606.612388][T11058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.670764][T12868] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 606.677351][T12868] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 606.689756][T12868] vhci_hcd vhci_hcd.0: Device attached [ 606.700993][T11058] usb 5-1: Product: syz [ 606.714604][ T5231] logitech 0003:046D:C295.0029: item fetching failed at offset 0/3 [ 606.735031][T11058] usb 5-1: Manufacturer: syz [ 606.751721][T11058] usb 5-1: SerialNumber: syz [ 606.773167][ T5231] logitech 0003:046D:C295.0029: parse failed [ 606.779296][ T5231] logitech 0003:046D:C295.0029: probe with driver logitech failed with error -22 [ 606.800393][T11058] usb 5-1: config 0 descriptor?? [ 606.822564][T12820] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 606.841773][T11058] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 606.874251][T11058] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 606.881727][T11058] usb 5-1: invalid MIDI in EP 0 [ 606.919708][T11058] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 606.970266][T12813] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 606.970289][T12877] binder: BINDER_SET_CONTEXT_MGR already set [ 606.988224][ T47] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 607.024072][T12877] binder: 12874:12877 ioctl 4018620d 20000100 returned -16 [ 607.234791][T12813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.242972][T12880] binder: 12874:12880 ioctl c018620c 20000000 returned -1 [ 608.038753][T12813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.138902][T12869] vhci_hcd: connection reset by peer [ 608.195820][ T1304] vhci_hcd: stop threads [ 608.200125][ T1304] vhci_hcd: release socket [ 608.235447][ T1304] vhci_hcd: disconnect device [ 608.236510][T12813] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 608.402625][ T5231] usb 4-1: USB disconnect, device number 39 [ 608.411388][T12820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.449442][T12820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.380586][T12947] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2208'. [ 609.390412][T12947] netlink: 'syz.0.2208': attribute type 2 has an invalid length. [ 609.398580][T12947] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2208'. [ 610.728903][ T9] usb 5-1: USB disconnect, device number 39 [ 610.997901][ T29] audit: type=1326 audit(2000000649.793:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12983 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233cb779f9 code=0x7ffc0000 [ 611.019744][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.128885][ T29] audit: type=1326 audit(2000000649.823:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12983 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233cb779f9 code=0x7ffc0000 [ 611.148619][T12998] netlink: 'syz.0.2213': attribute type 1 has an invalid length. [ 611.159722][T12998] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.2213'. [ 611.160021][T12995] hsr0: entered promiscuous mode [ 611.173885][ T5274] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 611.186073][T12999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.235875][ T29] audit: type=1326 audit(2000000649.843:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12983 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f233cb779f9 code=0x7ffc0000 [ 611.284463][ T29] audit: type=1326 audit(2000000649.843:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12983 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233cb779f9 code=0x7ffc0000 [ 611.306168][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.320923][ T29] audit: type=1326 audit(2000000649.843:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12983 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233cb779f9 code=0x7ffc0000 [ 611.350598][ T29] audit: type=1326 audit(2000000649.843:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12983 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f233cb779f9 code=0x7ffc0000 [ 611.372257][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.384764][ T29] audit: type=1326 audit(2000000649.863:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12983 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233cb779f9 code=0x7ffc0000 [ 611.420498][ T29] audit: type=1326 audit(2000000649.863:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12983 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233cb779f9 code=0x7ffc0000 [ 611.443184][ T5274] usb 3-1: Using ep0 maxpacket: 16 [ 611.456409][ T5274] usb 3-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 611.467588][ T5274] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.483053][ T5274] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 255 [ 611.499139][ T29] audit: type=1326 audit(2000000649.873:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12983 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f233cb779f9 code=0x7ffc0000 [ 611.520762][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.531826][ T29] audit: type=1326 audit(2000000649.873:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12983 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233cb779f9 code=0x7ffc0000 [ 611.555080][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.565006][ T5274] usb 3-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.40 [ 611.577615][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.590282][ T5274] usb 3-1: Product: syz [ 611.600366][ T5274] usb 3-1: Manufacturer: syz [ 611.608072][ T5274] usb 3-1: SerialNumber: syz [ 611.818051][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2216'. [ 611.897477][ T5274] usb 3-1: USB disconnect, device number 33 [ 612.096075][T13032] No such timeout policy "syz0" [ 612.122563][ T47] vhci_hcd: vhci_device speed not set [ 612.157687][T13034] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2222'. [ 612.223503][ T5231] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 612.335194][T13038] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 613.117479][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 613.294408][ T5231] usb 1-1: Using ep0 maxpacket: 8 [ 613.316284][ T5231] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 613.360648][ T5231] usb 1-1: config 0 has no interface number 0 [ 613.386504][ T5231] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 613.447255][ T5231] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 613.476122][ T5231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.509634][ T5231] usb 1-1: config 0 descriptor?? [ 613.543997][ T5231] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 613.772060][T13062] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 613.877220][ T47] usb 1-1: USB disconnect, device number 35 [ 613.900738][ T47] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 614.274875][T13077] netlink: 'syz.4.2233': attribute type 10 has an invalid length. [ 614.356976][T13077] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.376630][T13077] bond0: (slave team0): Enslaving as an active interface with an up link [ 614.947215][T13092] netlink: 'syz.2.2239': attribute type 13 has an invalid length. [ 616.279158][T13108] netem: unknown loss type 0 [ 616.293559][T13108] netem: change failed [ 616.357571][T13108] ip6gre0: Master is either lo or non-ether device [ 616.467376][T13115] btrfs: Unknown parameter '(/%' [ 616.765486][T13123] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 616.968730][ T5272] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 617.184721][ T5272] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 617.200644][ T5272] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 617.220951][ T5272] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 617.262136][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.331499][T13126] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 617.384465][ T5272] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 617.468934][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.717106][ T47] usb 5-1: USB disconnect, device number 40 [ 617.795076][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.937392][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.129097][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.305446][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 618.305464][ T29] audit: type=1326 audit(2000000657.103:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13190 comm="syz.3.2261" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4cc3779f9 code=0x0 [ 618.305527][T13197] program syz.2.2262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.658957][T11127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 618.703504][T11127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 618.725385][T11127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 618.727865][ T36] bridge_slave_1: left allmulticast mode [ 618.743943][T11127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 618.753301][T11127] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 618.760688][T11127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 618.809145][ T36] bridge_slave_1: left promiscuous mode [ 618.989765][ T5272] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 619.028241][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.562581][ T29] audit: type=1326 audit(2000000658.343:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.2.2266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7de3f779f9 code=0x0 [ 619.883192][ T36] bridge_slave_0: left allmulticast mode [ 619.890126][ T36] bridge_slave_0: left promiscuous mode [ 619.898105][ T5272] usb 5-1: Using ep0 maxpacket: 8 [ 619.911687][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.926096][ T5272] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 619.935626][ T5272] usb 5-1: config 0 has no interface number 0 [ 619.941868][ T5272] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 619.956881][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.970075][ T5272] usb 5-1: config 0 descriptor?? [ 620.092158][ T5272] viperboard 5-1:0.143: version 0.00 found at bus 005 address 041 [ 620.160663][ T5272] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 620.225430][ T5272] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 620.371030][ T5272] usb 5-1: USB disconnect, device number 41 [ 620.842693][ T5226] Bluetooth: hci0: command tx timeout [ 622.070056][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.096615][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.116986][ T36] bond0 (unregistering): Released all slaves [ 622.510502][T13217] ip6gretap0 speed is unknown, defaulting to 1000 [ 622.732443][ T47] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 622.933236][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 622.934630][ T5226] Bluetooth: hci0: command tx timeout [ 622.982641][ T47] usb 4-1: config 6 has an invalid interface number: 119 but max is 0 [ 623.003325][ T47] usb 4-1: config 6 has no interface number 0 [ 623.024729][ T47] usb 4-1: config 6 interface 119 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 623.052174][ T47] usb 4-1: config 6 interface 119 has no altsetting 0 [ 623.083985][ T47] usb 4-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= b.48 [ 623.103499][ T36] hsr_slave_0: left promiscuous mode [ 623.122624][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.140975][ T36] hsr_slave_1: left promiscuous mode [ 623.151834][ T47] usb 4-1: Manufacturer: 탻짹჎슦弮䃮⽡쳤嫮㉦ꭴ湏扏퍐鷸㉾ [ 623.168744][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.183777][ T47] usb 4-1: SerialNumber: syz [ 623.189019][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.224134][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.235034][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.321377][ T36] veth1_macvtap: left promiscuous mode [ 623.382323][ T36] veth0_macvtap: left promiscuous mode [ 623.405026][ T36] veth1_vlan: left promiscuous mode [ 623.425233][ T36] veth0_vlan: left promiscuous mode [ 623.599156][T13378] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 623.915247][ T47] digi_acceleport 4-1:6.119: required endpoints missing [ 623.965753][ T47] usb 4-1: USB disconnect, device number 40 [ 625.643181][ T5226] Bluetooth: hci0: command tx timeout [ 625.656716][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.703070][T13409] input: syz0 as /devices/virtual/input/input31 [ 626.001984][ T36] team0 (unregistering): Port device team_slave_1 removed [ 626.053862][ T36] team0 (unregistering): Port device team_slave_0 removed [ 626.899550][T13454] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 627.734840][ T5226] Bluetooth: hci0: command tx timeout [ 627.835485][T13217] chnl_net:caif_netlink_parms(): no params data found [ 628.441617][T13217] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.470393][T13217] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.486486][T13217] bridge_slave_0: entered allmulticast mode [ 628.508552][T13217] bridge_slave_0: entered promiscuous mode [ 628.528253][T13217] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.551830][T13595] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2297'. [ 628.579275][T13217] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.606326][T13217] bridge_slave_1: entered allmulticast mode [ 628.639327][T13217] bridge_slave_1: entered promiscuous mode [ 628.862319][ T5273] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 628.873708][T13591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.876503][T13217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.923777][T13217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.067866][T13217] team0: Port device team_slave_0 added [ 629.082939][ T5273] usb 3-1: Using ep0 maxpacket: 32 [ 629.090469][ T5273] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 629.121493][ T5273] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 629.139740][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.165101][T13217] team0: Port device team_slave_1 added [ 629.180936][ T5273] usb 3-1: Product: syz [ 629.197212][ T5273] usb 3-1: Manufacturer: syz [ 629.214889][ T5273] usb 3-1: SerialNumber: syz [ 629.240101][ T5273] usb 3-1: config 0 descriptor?? [ 629.260969][T13602] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 629.286906][ T5273] hub 3-1:0.0: bad descriptor, ignoring hub [ 629.302843][ T5273] hub 3-1:0.0: probe with driver hub failed with error -5 [ 629.315290][T13217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.330846][T13217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.359165][ T5273] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input32 [ 629.422535][T13217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.453959][T13217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.472304][T13217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.626280][T13217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.710326][ T5273] usb 3-1: USB disconnect, device number 34 [ 629.710390][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 629.863817][T13716] cgroup: fork rejected by pids controller in /syz4 [ 629.872711][ T47] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 629.892368][ T5231] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 629.971245][T13217] hsr_slave_0: entered promiscuous mode [ 629.985039][T13217] hsr_slave_1: entered promiscuous mode [ 630.112352][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 630.117683][ T5231] usb 5-1: Using ep0 maxpacket: 16 [ 630.130616][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.141944][ T5231] usb 5-1: config 0 has no interfaces? [ 630.152041][ T5231] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 630.161377][ T5231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.187418][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 630.215845][ T5231] usb 5-1: config 0 descriptor?? [ 630.231070][ T47] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 630.263880][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.293521][ T47] usb 4-1: config 0 descriptor?? [ 630.744049][T13888] dlm: no local IP address has been set [ 630.750479][T13888] dlm: cannot start dlm midcomms -107 [ 630.990488][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 631.239892][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 631.322922][ T47] usb 4-1: USB disconnect, device number 41 [ 632.581852][T13936] random: crng reseeded on system resumption [ 632.665288][ T5231] usb 5-1: USB disconnect, device number 42 [ 634.054602][T13985] netlink: 'syz.1.2323': attribute type 4 has an invalid length. [ 634.132671][ T5231] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 634.198561][T13217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 634.259912][T13217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 634.297214][T13217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 634.331480][T13217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 634.341090][ T5231] usb 5-1: Using ep0 maxpacket: 16 [ 634.383800][ T5231] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 634.417631][ T5231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.455557][ T5231] usb 5-1: Product: syz [ 634.469908][ T5231] usb 5-1: Manufacturer: syz [ 634.500729][ T5231] usb 5-1: SerialNumber: syz [ 634.536487][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2325'. [ 634.548707][ T5231] usb 5-1: config 0 descriptor?? [ 634.567195][ T5231] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 635.331148][T13217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.459673][T13217] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.517779][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.525089][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.618231][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.625575][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.761512][ T5231] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 635.871105][ T5231] usb 5-1: USB disconnect, device number 43 [ 636.801213][T13217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.856541][T14058] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 636.952186][T14058] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 637.132609][T14058] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 637.349675][T14058] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 637.392005][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2333'. [ 637.403749][T14064] syz.2.2332: attempt to access beyond end of device [ 637.403749][T14064] loop2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 637.431818][T13217] veth0_vlan: entered promiscuous mode [ 637.530398][T13217] veth1_vlan: entered promiscuous mode [ 637.537098][T14061] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2333'. [ 637.553679][T14064] F2FS-fs (loop2): Unable to read 1th superblock [ 637.560210][T14064] syz.2.2332: attempt to access beyond end of device [ 637.560210][T14064] loop2: rw=0, sector=8, nr_sectors = 8 limit=0 [ 637.652298][T14064] F2FS-fs (loop2): Unable to read 2th superblock [ 637.759380][T13217] veth0_macvtap: entered promiscuous mode [ 637.858246][T13217] veth1_macvtap: entered promiscuous mode [ 638.054804][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.127664][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.138989][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.166376][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.192375][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.220377][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.249595][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.324595][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.378422][T13217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.417592][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.472916][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.542546][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.556236][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.566853][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.618901][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.676980][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.717152][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.776464][T13217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.831046][T13217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.878119][T13217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.916374][T13217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.953979][T13217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.298788][ T7484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.340090][ T7484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.552787][T14122] sp0: Synchronizing with TNC [ 639.654762][ T1304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.677541][ T1304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.535488][ T1531] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 641.724258][T14201] netlink: 'syz.0.2360': attribute type 3 has an invalid length. [ 641.779026][ T1531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.820462][ T1531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.840553][T14208] overlay: Unknown parameter '\' [ 641.850820][ T1531] usb 5-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 641.862531][ T1531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.884974][ T1531] usb 5-1: config 0 descriptor?? [ 642.063406][T14223] syz.0.2364[14223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 642.063801][T14223] syz.0.2364[14223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 642.138155][ T29] audit: type=1326 audit(2000000680.933:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14213 comm="syz.0.2364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefa59779f9 code=0x0 [ 642.341896][ T1531] logitech 0003:046D:C101.002A: hidraw0: USB HID v0.00 Device [HID 046d:c101] on usb-dummy_hcd.4-1/input0 [ 642.596624][ T1531] usb 5-1: USB disconnect, device number 44 [ 643.576829][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2371'. [ 649.284807][T14374] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 651.542368][ T5272] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 651.733972][ T5272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.751969][ T5272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.768309][ T5272] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 651.777997][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.794273][ T5272] usb 1-1: config 0 descriptor?? [ 652.016865][T14395] Bluetooth: MGMT ver 1.23 [ 652.186908][T14413] bridge_slave_1: left allmulticast mode [ 652.203421][T14413] bridge_slave_1: left promiscuous mode [ 652.219440][T14413] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.295873][ T5272] elo 0003:04E7:0030.002B: unknown main item tag 0xd [ 652.310719][T14413] netlink: 'syz.3.2402': attribute type 2 has an invalid length. [ 652.329652][ T5272] elo 0003:04E7:0030.002B: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input0 [ 652.356884][T14413] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 652.615827][ T5272] usb 1-1: USB disconnect, device number 36 [ 652.738400][T14426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2403'. [ 652.778797][T14419] netlink: 'syz.1.2403': attribute type 10 has an invalid length. [ 652.806030][T14419] bridge_slave_1: left allmulticast mode [ 652.831085][T14419] bridge_slave_1: left promiscuous mode [ 652.862807][T14419] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.916629][T14419] bridge_slave_0: left allmulticast mode [ 652.940324][T14419] bridge_slave_0: left promiscuous mode [ 652.964256][ T7484] Bluetooth: hci5: Frame reassembly failed (-84) [ 652.972497][T14419] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.432177][ T5274] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 653.541111][T14483] netlink: 'syz.1.2412': attribute type 2 has an invalid length. [ 653.577506][T14483] netlink: 'syz.1.2412': attribute type 8 has an invalid length. [ 653.604688][T14483] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2412'. [ 653.913094][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.940478][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.954231][ T5274] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.980086][ T5274] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 653.991849][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.014801][T14493] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.024524][T14493] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.034339][T14493] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.035103][ T5274] usb 5-1: config 0 descriptor?? [ 654.044095][T14493] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.155642][ T5272] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 654.344280][ T5272] usb 2-1: config 0 has no interfaces? [ 654.364850][ T5272] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 654.380520][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 654.390919][ T5272] usb 2-1: SerialNumber: syz [ 654.401631][ T5272] usb 2-1: config 0 descriptor?? [ 654.639496][ T5272] usb 2-1: USB disconnect, device number 39 [ 654.711817][ T5274] usbhid 5-1:0.0: can't add hid device: -71 [ 654.719858][ T5274] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 654.739803][ T5274] usb 5-1: USB disconnect, device number 45 [ 655.002267][T11127] Bluetooth: hci5: command 0x1003 tx timeout [ 655.011899][ T5226] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 655.296527][ T29] audit: type=1326 audit(2000000694.073:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14533 comm="syz.0.2419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefa59779f9 code=0x0 [ 656.083010][T14552] sctp: [Deprecated]: syz.3.2420 (pid 14552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 656.083010][T14552] Use struct sctp_sack_info instead [ 657.350552][T14578] netlink: 'syz.4.2432': attribute type 29 has an invalid length. [ 657.395850][T14578] netlink: 'syz.4.2432': attribute type 29 has an invalid length. [ 657.436735][T14579] netlink: 'syz.1.2431': attribute type 10 has an invalid length. [ 657.482504][T14588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2431'. [ 657.502545][T14579] team0: Failed to send options change via netlink (err -105) [ 657.510154][T14579] team0: Port device netdevsim0 added [ 657.568288][T14585] netlink: 'syz.4.2432': attribute type 29 has an invalid length. [ 657.594418][ T5273] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 657.713864][T14603] trusted_key: encrypted_key: keylen parameter is missing [ 657.760263][T14608] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2439'. [ 657.795031][ T29] audit: type=1326 audit(2000000696.593:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14599 comm="syz.3.2438" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3779f9 code=0x0 [ 657.816176][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.819987][T14608] : entered promiscuous mode [ 657.824548][T11058] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 658.022335][T11058] usb 2-1: Using ep0 maxpacket: 8 [ 658.033954][T11058] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.051425][T11058] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 658.060821][T11058] usb 2-1: config 1 has no interface number 1 [ 658.068015][T11058] usb 2-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 658.081967][T11058] usb 2-1: config 1 interface 2 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 658.095710][T11058] usb 2-1: config 1 interface 2 has no altsetting 0 [ 658.106122][T11058] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 658.115458][ T5274] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 658.137164][T11058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.149782][T11058] usb 2-1: Product: 쑿퉈ਝ쑻 [ 658.155037][T11058] usb 2-1: Manufacturer: ф [ 658.160071][T11058] usb 2-1: SerialNumber: syz [ 658.324383][ T5274] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=ab.40 [ 658.334842][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.348019][ T5274] usb 5-1: config 0 descriptor?? [ 658.358083][ T5274] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 658.366487][ T5274] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 658.374487][ T5274] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 658.385794][ T5274] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 658.394580][ T5274] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 658.407130][ T5274] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 658.435470][ T5274] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 658.458290][ T5274] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 658.487952][T11058] usb 2-1: USB disconnect, device number 40 [ 658.494274][ T5274] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 658.513169][ T5274] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 658.557031][ T5274] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 658.589138][ T5274] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 658.618617][ T5274] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 658.638048][ T5274] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 658.676226][ T5274] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 658.690589][ T5274] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 658.703452][ T5274] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 658.724391][ T5274] usb 5-1: USB disconnect, device number 46 [ 658.758832][ T5274] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 658.783133][T14518] udevd[14518]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.812967][ T5274] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 658.847641][ T5274] keyspan 5-1:0.0: device disconnected [ 658.883406][T14669] netlink: 'syz.3.2445': attribute type 142 has an invalid length. [ 660.442552][T14692] ALSA: mixer_oss: invalid OSS volume 'P7{*;+$p' [ 660.484187][T14692] ALSA: mixer_oss: invalid OSS volume '' [ 660.489892][T14692] ALSA: mixer_oss: invalid OSS volume 'b$Kf7?]3sX' [ 660.533432][T14692] ALSA: mixer_oss: invalid OSS volume 'K׍?Fg' [ 660.540106][T14692] ALSA: mixer_oss: invalid OSS volume '.L!t8yW+$NJs' [ 660.788858][T14686] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2448'. [ 660.822304][T14686] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2448'. [ 660.851408][T14698] netlink: 'syz.1.2448': attribute type 8 has an invalid length. [ 660.889688][T14698] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2448'. [ 660.890789][T14686] netlink: 'syz.1.2448': attribute type 5 has an invalid length. [ 660.910893][T14708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2456'. [ 660.940249][T14686] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2448'. [ 661.154202][ T5273] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 661.372235][ T5273] usb 1-1: Using ep0 maxpacket: 8 [ 661.463996][ T5273] usb 1-1: unable to get BOS descriptor or descriptor too short [ 661.481014][T14730] netlink: 'syz.4.2461': attribute type 10 has an invalid length. [ 661.487049][ T5273] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 661.496597][T14730] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2461'. [ 661.497520][ T5273] usb 1-1: can't read configurations, error -71 [ 661.509651][T14730] team0: entered promiscuous mode [ 661.531996][T14730] team_slave_0: entered promiscuous mode [ 661.540785][T14730] team_slave_1: entered promiscuous mode [ 661.560807][T14734] vivid-002: ================= START STATUS ================= [ 661.569161][T14734] vivid-002: Radio HW Seek Mode: Bounded [ 661.575486][T14734] vivid-002: Radio Programmable HW Seek: false [ 661.581672][T14734] vivid-002: RDS Rx I/O Mode: Block I/O [ 661.587358][T14734] vivid-002: Generate RBDS Instead of RDS: false [ 661.593738][T14734] vivid-002: RDS Reception: true [ 661.598682][T14734] vivid-002: RDS Program Type: 0 inactive [ 661.604567][T14734] vivid-002: RDS PS Name: inactive [ 661.610320][T14734] vivid-002: RDS Radio Text: inactive [ 661.615906][T14734] vivid-002: RDS Traffic Announcement: false inactive [ 661.622841][T14734] vivid-002: RDS Traffic Program: false inactive [ 661.629214][T14734] vivid-002: RDS Music: false inactive [ 661.634722][T14734] vivid-002: ================== END STATUS ================== [ 661.646819][T14730] bond0: (slave team0): Releasing backup interface [ 661.681839][T14730] bridge0: port 2(team0) entered blocking state [ 661.689263][T14730] bridge0: port 2(team0) entered disabled state [ 661.697103][T14730] team0: entered allmulticast mode [ 661.702789][T14730] team_slave_0: entered allmulticast mode [ 661.708672][T14730] team_slave_1: entered allmulticast mode [ 661.966171][T14742] random: crng reseeded on system resumption [ 668.670409][ T58] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 669.268539][ T29] audit: type=1326 audit(2000000708.053:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.1.2472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7913779f9 code=0x0 [ 669.622273][ T5274] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 669.832310][ T1531] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 669.852284][ T5274] usb 3-1: Using ep0 maxpacket: 32 [ 669.866352][ T5274] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 669.886194][ T5274] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 669.983853][ T5274] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 670.021661][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 670.091947][ T5274] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 670.152258][ T1531] usb 5-1: Using ep0 maxpacket: 16 [ 670.201288][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 670.217811][ T5274] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 670.252754][ T5274] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 670.273791][ T1531] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.285301][ T1531] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 670.297010][ T5274] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 670.365472][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.376365][ T1531] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 670.395719][ T1531] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 670.429575][ T5274] usb 3-1: config 0 descriptor?? [ 670.448802][ T1531] usb 5-1: Manufacturer: syz [ 670.516402][ T1531] usb 5-1: config 0 descriptor?? [ 670.790504][ T5274] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 670.812584][T14804] fuse: Bad value for 'fd' [ 672.008351][T14838] 9pnet: p9_errstr2errno: server reported unknown error sŧ6 [ 672.083881][ T5279] usb 3-1: USB disconnect, device number 35 [ 672.133089][ T5279] usblp0: removed [ 672.464240][ T1531] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 672.484140][ T1531] usb 5-1: USB disconnect, device number 47 [ 672.648196][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2494'. [ 672.737153][T14877] netlink: 'syz.3.2495': attribute type 10 has an invalid length. [ 672.989558][T14877] batman_adv: batadv0: Adding interface: team0 [ 672.996058][T14877] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.021490][T14877] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 673.032852][T14878] netlink: 'syz.3.2495': attribute type 10 has an invalid length. [ 673.040857][T14878] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2495'. [ 673.050036][T14878] team0: entered promiscuous mode [ 673.055325][T14878] team_slave_0: entered promiscuous mode [ 673.061588][T14878] team_slave_1: entered promiscuous mode [ 673.068015][T14878] geneve1: entered promiscuous mode [ 673.076907][T14878] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.105644][T14878] batman_adv: batadv0: Interface activated: team0 [ 673.113432][T14878] batman_adv: batadv0: Interface deactivated: team0 [ 673.120483][T14878] batman_adv: batadv0: Removing interface: team0 [ 673.573261][T14878] bridge0: port 2(team0) entered blocking state [ 673.589960][T14878] bridge0: port 2(team0) entered disabled state [ 673.600133][T14878] team0: entered allmulticast mode [ 673.614307][T14878] team_slave_0: entered allmulticast mode [ 673.635734][T14878] team_slave_1: entered allmulticast mode [ 673.641986][T14878] geneve1: entered allmulticast mode [ 673.667203][T14878] bridge0: port 2(team0) entered blocking state [ 673.673656][T14878] bridge0: port 2(team0) entered forwarding state [ 674.067915][T14910] netlink: 'syz.0.2504': attribute type 4 has an invalid length. [ 674.119709][T14910] netlink: 'syz.0.2504': attribute type 4 has an invalid length. [ 676.214557][ T5274] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 677.108812][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.148697][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.160566][ T5274] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 677.188538][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.205578][ T5274] usb 2-1: config 0 descriptor?? [ 677.270544][T14952] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2514'. [ 677.355170][T14945] syzkaller1: entered promiscuous mode [ 677.372256][T14945] syzkaller1: entered allmulticast mode [ 678.713486][ T5274] hid (null): global environment stack underflow [ 679.533109][ T5274] itetech 0003:06CB:73F5.002C: unknown main item tag 0x0 [ 679.553205][ T5274] itetech 0003:06CB:73F5.002C: global environment stack underflow [ 679.568481][ T5274] itetech 0003:06CB:73F5.002C: item 0 1 1 11 parsing failed [ 679.684867][ T5274] itetech 0003:06CB:73F5.002C: probe with driver itetech failed with error -22 [ 679.771070][ T5274] usb 2-1: USB disconnect, device number 41 [ 679.852409][T14994] netlink: 'syz.4.2521': attribute type 1 has an invalid length. [ 679.897093][T14994] netlink: 9324 bytes leftover after parsing attributes in process `syz.4.2521'. [ 679.907203][T15003] input: syz1 as /devices/virtual/input/input33 [ 679.970514][T14994] netlink: 'syz.4.2521': attribute type 1 has an invalid length. [ 680.007103][T14994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2521'. [ 680.369682][ T47] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 680.434066][T15022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2525'. [ 681.412634][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 681.428779][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 681.483273][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 681.515812][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 681.538027][ T47] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 681.551145][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.582884][ T47] usb 4-1: config 0 descriptor?? [ 681.628556][T15008] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.667949][ T47] hub 4-1:0.0: USB hub found [ 681.940675][ T47] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 682.042545][ T5279] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 682.264525][ T5279] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 682.301026][ T5279] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 682.349475][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.389242][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 682.427406][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 682.428431][ T5279] usb 2-1: config 0 descriptor?? [ 682.498811][ T5279] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 682.517021][ T47] usb 4-1: USB disconnect, device number 43 [ 682.788260][ T47] usb 2-1: USB disconnect, device number 42 [ 683.086016][ T29] audit: type=1107 audit(2000000721.883:2300): pid=15088 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 683.152308][ T5279] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 683.222224][T11058] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 683.232233][ T5273] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 683.352607][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 683.364803][ T5279] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 683.374906][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.385706][ T5279] usb 5-1: Product: syz [ 683.389973][ T5279] usb 5-1: Manufacturer: syz [ 683.406646][ T5279] usb 5-1: SerialNumber: syz [ 683.417252][T11058] usb 1-1: Using ep0 maxpacket: 8 [ 683.424435][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.433756][T11058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 683.435993][ T58] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 683.456224][ T5279] usb 5-1: config 0 descriptor?? [ 683.464907][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.471653][T11058] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=2f.d8 [ 683.476863][ T5279] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 683.510651][T11058] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.519337][ T5273] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 683.522392][T11058] usb 1-1: Product: syz [ 683.533327][ T5279] usb 5-1: Detected FT-X [ 683.538202][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.541148][T11058] usb 1-1: Manufacturer: syz [ 683.551609][T11058] usb 1-1: SerialNumber: syz [ 683.554187][ T5273] usb 3-1: config 0 descriptor?? [ 683.580942][T11058] usb 1-1: config 0 descriptor?? [ 683.603919][T11058] usbtest 1-1:0.0: Linux user mode ISO test driver [ 683.611466][T15096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2539'. [ 683.626695][T11058] usbtest 1-1:0.0: high-speed {control iso-out} tests (+alt) [ 683.669239][ T5279] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 683.701510][T15068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.716207][ T58] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 683.734557][ T58] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 683.763173][ T5279] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 683.774227][ T58] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 683.795059][ T5279] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 683.802184][ T58] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 683.819671][ T58] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 683.835071][ T5272] usb 1-1: USB disconnect, device number 39 [ 683.845655][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.866456][ T5279] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 683.898021][ T58] usb 4-1: Product: syz [ 683.910507][ T58] usb 4-1: Manufacturer: syz [ 683.927544][ T5279] usb 5-1: USB disconnect, device number 48 [ 683.940942][ T58] usb 4-1: SerialNumber: syz [ 683.963810][ T5279] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 683.986549][ T5279] ftdi_sio 5-1:0.0: device disconnected [ 684.980672][T15146] ip6gretap0 speed is unknown, defaulting to 1000 [ 685.205494][ T5232] Bluetooth: hci0: command 0x0401 tx timeout [ 685.207916][ T5273] uclogic 0003:256C:006D.002D: failed retrieving string descriptor #100: -71 [ 685.219476][T15089] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 685.273730][ T58] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 685.281317][ T5273] uclogic 0003:256C:006D.002D: failed retrieving pen parameters: -71 [ 685.299760][ T58] usb 4-1: 2:1 : sample bitwidth 187 in over sample bytes 4 [ 685.315152][ T5273] uclogic 0003:256C:006D.002D: failed probing pen v1 parameters: -71 [ 685.341615][ T58] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 685.361744][ T5273] uclogic 0003:256C:006D.002D: failed probing parameters: -71 [ 685.466873][ T5273] uclogic 0003:256C:006D.002D: probe with driver uclogic failed with error -71 [ 685.619665][ T5273] usb 3-1: USB disconnect, device number 36 [ 685.626210][ T58] usb 4-1: USB disconnect, device number 44 [ 685.750240][T15145] xt_CONNSECMARK: invalid mode: 0 [ 686.237637][T15198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2543'. [ 686.271299][T15045] udevd[15045]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.456527][T15221] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 686.598529][T15221] mac80211_hwsim hwsim26 wlan0: left promiscuous mode [ 687.085124][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.345342][T15260] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2553'. [ 688.898627][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.188958][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.516864][T15276] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 689.537547][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.252285][ T5274] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 690.263275][ T29] audit: type=1326 audit(2000000729.063:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15274 comm="syz.0.2557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefa59779f9 code=0x0 [ 690.289641][T15286] binder: 15285:15286 ioctl 4018620d 0 returned -22 [ 690.443763][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.502213][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 690.511689][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 690.534350][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 690.564170][ T5274] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 690.592160][ T47] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 690.616910][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.673637][ T5274] usb 4-1: config 0 descriptor?? [ 690.791059][T14535] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 690.807346][T14535] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 690.818818][T14535] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 690.832555][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 690.840689][T14535] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 690.855402][T14535] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 690.864183][T14535] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 690.875328][ T47] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 690.972182][ T47] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 691.055060][ T47] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 691.083104][ T36] team0: left allmulticast mode [ 691.096794][ T36] team_slave_0: left allmulticast mode [ 691.105188][ T47] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 691.133297][ T36] team_slave_1: left allmulticast mode [ 691.152385][ T36] bridge0: port 2(team0) entered disabled state [ 691.158869][ T47] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.183264][ T47] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 691.195328][ T36] bridge_slave_0: left allmulticast mode [ 691.213804][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.223301][ T36] bridge_slave_0: left promiscuous mode [ 691.240802][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.250592][T15275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.309752][T15275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.345026][ T5274] hid (null): bogus close delimiter [ 691.361091][ T5274] hid (null): invalid report_count 58028 [ 691.371591][ T5274] hid (null): unknown global tag 0xd [ 691.389650][ T5274] hid-generic 0003:0158:0100.002E: unknown main item tag 0x0 [ 691.402858][ T5274] hid-generic 0003:0158:0100.002E: unknown main item tag 0x0 [ 691.426929][ T5274] hid-generic 0003:0158:0100.002E: bogus close delimiter [ 691.456731][ T5274] hid-generic 0003:0158:0100.002E: item 0 0 2 10 parsing failed [ 691.469136][ T5274] hid-generic 0003:0158:0100.002E: probe with driver hid-generic failed with error -22 [ 691.487911][T15346] input: syz1 as /devices/virtual/input/input34 [ 691.492272][ T5272] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 691.561331][ T47] usb 3-1: usb_control_msg returned -32 [ 691.582300][ T47] usbtmc 3-1:16.0: can't read capabilities [ 691.627292][T15275] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2559'. [ 691.738678][ T5272] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 691.764676][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.792025][ T5272] usb 1-1: Product: syz [ 691.811304][ T5272] usb 1-1: Manufacturer: syz [ 691.816781][ T5272] usb 1-1: SerialNumber: syz [ 691.836543][ T5272] usb 1-1: config 0 descriptor?? [ 691.873248][ T5272] usbsevseg 1-1:0.0: USB 7 Segment device now attached [ 691.944392][ T36] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 691.977154][ T36] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 692.139450][ T47] usb 1-1: USB disconnect, device number 40 [ 692.161274][ T47] usbsevseg 1-1:0.0: USB 7 Segment now disconnected [ 692.280531][ T36] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 692.696242][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.720410][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.747085][ T36] bond0 (unregistering): Released all slaves [ 692.764139][ T36] bond1 (unregistering): Released all slaves [ 692.888794][T15388] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 692.925273][T14535] Bluetooth: hci2: command tx timeout [ 693.021107][ T36] bond2 (unregistering): Released all slaves [ 693.053657][ T36] bond3 (unregistering): Released all slaves [ 693.079487][ T58] ip6gretap0 speed is unknown, defaulting to 1000 [ 693.092222][T15346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2564'. [ 693.203891][ T5279] usb 4-1: USB disconnect, device number 45 [ 693.324730][ T36] tipc: Disabling bearer [ 693.365123][ T36] tipc: Left network mode [ 693.647942][ T47] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 693.702438][ T5274] usb 3-1: USB disconnect, device number 37 [ 693.852901][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 693.888199][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.969151][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.984516][ T36] hsr_slave_0: left promiscuous mode [ 693.990752][ T36] hsr_slave_1: left promiscuous mode [ 694.025674][ T47] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 694.036151][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.059571][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.062321][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.068100][T15394] jump_label: Fatal kernel bug, unexpected op at preempt_notifier_register+0x10/0xe0 [ffffffff8163f740] (eb 12 90 48 c7 != 66 90 0f 1f 00)) size:2 type:1 [ 694.093815][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.106156][ T47] usb 2-1: config 0 descriptor?? [ 694.115234][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.131320][T15394] ------------[ cut here ]------------ [ 694.137196][T15394] kernel BUG at arch/x86/kernel/jump_label.c:73! [ 694.152168][T15394] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 694.155225][ T36] veth1_macvtap: left promiscuous mode [ 694.159138][T15394] CPU: 1 UID: 0 PID: 15394 Comm: syz.0.2568 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 694.175366][T15394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 694.185445][T15394] RIP: 0010:__jump_label_patch+0x463/0x490 [ 694.191300][T15394] Code: e8 c2 79 5f 00 48 c7 c7 60 4f e5 8b 48 8b 0c 24 48 89 ce 48 89 ca 4d 89 e8 4c 8b 4c 24 08 41 54 e8 e2 18 76 0a 48 83 c4 08 90 <0f> 0b e8 06 18 79 0a e8 91 79 5f 00 90 0f 0b e8 89 79 5f 00 90 0f [ 694.201674][ T36] veth0_macvtap: left promiscuous mode [ 694.210952][T15394] RSP: 0018:ffffc900091cf7e0 EFLAGS: 00010292 [ 694.210975][T15394] RAX: 0000000000000097 RBX: 0000000000000085 RCX: c117167b6cb73500 [ 694.210990][T15394] RDX: ffffc90009c33000 RSI: 000000000003ffff RDI: 0000000000040000 [ 694.211004][T15394] RBP: ffffc900091cf908 R08: ffffffff8173ef2c R09: 1ffff92001239e9c [ 694.246461][T15394] R10: dffffc0000000000 R11: fffff52001239e9d R12: 0000000000000001 [ 694.254456][T15394] R13: ffffffff8be56d81 R14: ffffffff92ecb8c0 R15: ffffffff8be56d81 [ 694.262464][T15394] FS: 00007fefa66716c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 694.271418][T15394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 694.278025][T15394] CR2: 000000110c37a839 CR3: 000000005ec12000 CR4: 00000000003526f0 [ 694.280449][ T36] veth1_vlan: left promiscuous mode [ 694.286007][T15394] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 694.286025][T15394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 694.286042][T15394] Call Trace: [ 694.310482][T15394] [ 694.313436][T15394] ? __die_body+0x88/0xe0 [ 694.317807][T15394] ? die+0xcf/0x110 [ 694.321651][T15394] ? do_trap+0x15a/0x3a0 [ 694.325928][T15394] ? __jump_label_patch+0x463/0x490 [ 694.331156][T15394] ? do_error_trap+0x1dc/0x2c0 [ 694.335950][T15394] ? __jump_label_patch+0x463/0x490 [ 694.341180][T15394] ? __pfx_do_error_trap+0x10/0x10 [ 694.346318][T15394] ? report_bug+0x3e8/0x500 [ 694.350871][T15394] ? handle_invalid_op+0x34/0x40 [ 694.355924][T15394] ? __jump_label_patch+0x463/0x490 [ 694.361154][T15394] ? exc_invalid_op+0x38/0x50 [ 694.365860][T15394] ? asm_exc_invalid_op+0x1a/0x20 [ 694.368742][T14535] Bluetooth: hci3: command 0x0405 tx timeout [ 694.370904][T15394] ? __wake_up_klogd+0xcc/0x110 [ 694.381758][T15394] ? __jump_label_patch+0x463/0x490 [ 694.386993][T15394] ? preempt_notifier_register+0x10/0xe0 [ 694.392656][T15394] ? __pfx___jump_label_patch+0x10/0x10 [ 694.398242][T15394] ? preempt_notifier_register+0x10/0xe0 [ 694.403902][T15394] ? preempt_notifier_register+0x1f/0xe0 [ 694.409571][T15394] ? preempt_notifier_register+0x12/0xe0 [ 694.415232][T15394] ? __static_key_slow_dec_cpuslocked+0x21c/0x410 [ 694.421766][T15394] ? __pfx___mutex_lock+0x10/0x10 [ 694.426828][T15394] arch_jump_label_transform_queue+0x68/0x100 [ 694.432932][T15394] __jump_label_update+0x177/0x3a0 [ 694.438091][T15394] __static_key_slow_dec_cpuslocked+0x250/0x410 [ 694.444370][T15394] ? __pfx___static_key_slow_dec_cpuslocked+0x10/0x10 [ 694.451174][T15394] static_key_slow_dec+0x51/0xa0 [ 694.456143][T15394] kvm_put_kvm+0xf3b/0x1300 [ 694.460690][T15394] kvm_vcpu_release+0x57/0x70 [ 694.465406][T15394] ? __pfx_kvm_vcpu_release+0x10/0x10 [ 694.470794][T15394] __fput+0x24a/0x8a0 [ 694.474780][T15394] task_work_run+0x24f/0x310 [ 694.479363][T15394] ? __pfx_task_work_run+0x10/0x10 [ 694.484470][T15394] get_signal+0x15da/0x1730 [ 694.488974][T15394] ? __pfx_get_signal+0x10/0x10 [ 694.493831][T15394] arch_do_signal_or_restart+0x96/0x860 [ 694.499396][T15394] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 694.505551][T15394] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 694.511537][T15394] ? syscall_exit_to_user_mode+0xa3/0x370 [ 694.517256][T15394] syscall_exit_to_user_mode+0xc9/0x370 [ 694.522814][T15394] do_syscall_64+0x100/0x230 [ 694.527421][T15394] ? clear_bhb_loop+0x35/0x90 [ 694.532107][T15394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.538057][T15394] RIP: 0033:0x7fefa59779f9 [ 694.542474][T15394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.562088][T15394] RSP: 002b:00007fefa6671048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.570528][T15394] RAX: fffffffffffffffc RBX: 00007fefa5b06058 RCX: 00007fefa59779f9 [ 694.578542][T15394] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 694.586680][T15394] RBP: 00007fefa59e58ee R08: 0000000000000000 R09: 0000000000000000 [ 694.594657][T15394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.602648][T15394] R13: 000000000000006e R14: 00007fefa5b06058 R15: 00007ffdc5a10918 [ 694.610655][T15394] [ 694.613673][T15394] Modules linked in: [ 694.631247][T15394] ---[ end trace 0000000000000000 ]--- [ 694.636811][T15394] RIP: 0010:__jump_label_patch+0x463/0x490 [ 694.652092][T15394] Code: e8 c2 79 5f 00 48 c7 c7 60 4f e5 8b 48 8b 0c 24 48 89 ce 48 89 ca 4d 89 e8 4c 8b 4c 24 08 41 54 e8 e2 18 76 0a 48 83 c4 08 90 <0f> 0b e8 06 18 79 0a e8 91 79 5f 00 90 0f 0b e8 89 79 5f 00 90 0f [ 694.689611][T15394] RSP: 0018:ffffc900091cf7e0 EFLAGS: 00010292 [ 694.723374][T15394] RAX: 0000000000000097 RBX: 0000000000000085 RCX: c117167b6cb73500 [ 694.731453][T15394] RDX: ffffc90009c33000 RSI: 000000000003ffff RDI: 0000000000040000 [ 694.792103][T15394] RBP: ffffc900091cf908 R08: ffffffff8173ef2c R09: 1ffff92001239e9c [ 694.800180][T15394] R10: dffffc0000000000 R11: fffff52001239e9d R12: 0000000000000001 [ 694.832204][T15394] R13: ffffffff8be56d81 R14: ffffffff92ecb8c0 R15: ffffffff8be56d81 [ 694.840287][T15394] FS: 00007fefa66716c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 694.889930][T15394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 694.902074][T15394] CR2: 0000556cbd6cb950 CR3: 000000005ec12000 CR4: 00000000003526f0 [ 694.914609][T15394] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 694.937987][T15394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 694.962421][T15394] Kernel panic - not syncing: Fatal exception [ 694.968926][T15394] Kernel Offset: disabled [ 694.973340][T15394] Rebooting in 86400 seconds..