last executing test programs: 10.752481722s ago: executing program 2 (id=1015): quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000080)=""/7) 10.384598132s ago: executing program 3 (id=1022): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="50010000100013070000e50000000000000000e84f5fa3c831e700000000000000000000ffffac14140000000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000060001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x480) socket$packet(0x11, 0x3, 0x300) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) write$sndseq(r1, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$smackfs_netlabel(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='0000000000009:0000:200000:'], 0xfffffdef) 10.129644198s ago: executing program 3 (id=1027): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x1e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 8.880469349s ago: executing program 3 (id=1031): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfc, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) getpriority(0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x9c) 7.016695375s ago: executing program 3 (id=1036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 6.492795058s ago: executing program 2 (id=1038): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 5.964475093s ago: executing program 3 (id=1040): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f000004ca80)=""/102399, 0x18fff}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdir(0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) 5.908543775s ago: executing program 2 (id=1041): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4a}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.45102493s ago: executing program 2 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x569c}, 0x50) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000f, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000) ppoll(&(0x7f00000002c0)=[{r0}, {r0, 0x80}], 0x2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) recvmmsg(r3, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12022, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r4, 0x5606, 0x2) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000280)=0x9) ioctl$VT_RELDISP(r4, 0x5605) socket$kcm(0x11, 0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x32314752, 0x0, 0x0, 0xfffffffc}}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "27acb1c3a44f7ed5", "2f49cb2eac67858a538aa994116ca2d3", "8b5a705d", "0c620d6ce613adce"}, 0x28) 4.345338937s ago: executing program 4 (id=1050): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) 4.183595234s ago: executing program 4 (id=1052): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 4.037246825s ago: executing program 4 (id=1055): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b70, &(0x7f0000000000)=ANY=[]) 3.925732828s ago: executing program 4 (id=1056): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800005, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioprio_set$pid(0x2, 0x0, 0x0) 3.72880136s ago: executing program 2 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0xa}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40305829, &(0x7f0000000240)) 2.375794733s ago: executing program 1 (id=1061): socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/23, 0xfffffffffffffd36}}, {{&(0x7f0000000400)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/105, 0x69}, {&(0x7f0000000500)=""/154, 0x9d}, {&(0x7f00000008c0)=""/240, 0xf0}, {&(0x7f00000006c0)=""/198, 0xfffffffffffffdb9}], 0x4}}], 0x2, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2.021380878s ago: executing program 0 (id=1062): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r1, 0x6, 0x5, &(0x7f0000000040)=r0, 0x4) 1.909620637s ago: executing program 1 (id=1063): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000680)={&(0x7f0000000600)=[0x0], &(0x7f0000000640), 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0}) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/62, 0x3e}}], 0x1, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x10, 0x1004}, 0x10}], 0x1}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, "00050000000000000000000000000700"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000002c0)) poll(&(0x7f0000000480)=[{r8}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x20, 0x700, 0x8, 0x6, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x67, 0x0, 0x0, 0x0, 0x0, @local, @private=0xa010101, {[@noop, @noop]}}}}}) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="f529a2881a62aac20fc784dd11b17ec981c5e782ed725f0efd318e717577ccd2eef8973748bb3cfdece922c56ae73df61cc9dcc1dad437733f3ad7708873365af8f294d37060ee29bd6afac44c82fc91e854796c3e3f8e4ce3a2e2c4a174f69c235b47348daf9d69ed1c1de13e12ca5aa5c1770b22ea115314803c583f9837aca3", 0x81}], 0x1, &(0x7f00000001c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x4b77}}], 0x18}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="49f325de1796d6491ea9c0f1b54fa7", 0xf}, {&(0x7f0000001840)="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", 0xfc0}], 0x2, &(0x7f0000000380)=[@rthdr={{0x68, 0x29, 0x39, {0x33, 0xa, 0x1, 0x99, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x88, 0x6, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0x20, "97bb65cf03349dd837877403e520d9af627de9d0ae941069b38aa1a10f85c90b"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x3c, 0xa, 0x1, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @local, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r9}}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x2f, 0xd, '\x00', [@pad1, @generic={0x3, 0x63, "27cc274361cb27ffffeddc906d903e49dd10490ec94ca6126719a01a43c9d48b464ca07447a0f87c49ea24077ef7e9fbb381c339ac049edec93977c712c2ca1bfbd2d4d8992b8b806e23895128dd71abd6a65dd443f7c09bfe0cdcfc6b24088003167a"}]}}}, @hopopts={{0x38, 0x29, 0x36, {0x0, 0x3, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0xfffe, [0x10001, 0x2]}}, @ra={0x5, 0x2, 0x7}]}}}], 0x230}}], 0x3, 0x0) 1.853745141s ago: executing program 0 (id=1064): mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) sendmsg(r1, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000002180)=""/4105, 0x1009, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) dup(r6) socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 1.758251814s ago: executing program 1 (id=1065): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') chdir(0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000100)=r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 1.719404323s ago: executing program 4 (id=1066): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB='.'], 0x118) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x18ff5}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1}}], 0x48}, 0x0) 1.605643085s ago: executing program 0 (id=1067): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 742.271505ms ago: executing program 4 (id=1068): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0bf6540b10e07700902000000010902120001000000000904000001ff00ff"], 0x0) 588.597477ms ago: executing program 1 (id=1069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$KVM_RUN(r2, 0xae80, 0x0) 391.413071ms ago: executing program 0 (id=1070): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xff00000000000000, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903, 0x2}, 0x21) 275.727441ms ago: executing program 1 (id=1071): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000540)="00f733cae847b6f0450b2a9a775e9fe8008fa308772b0268460e5aa0a42907c3d0", 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) 233.252843ms ago: executing program 0 (id=1072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}]}]}]}], {0x14}}, 0xd0}}, 0x0) 149.960658ms ago: executing program 3 (id=1073): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x0) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc4c85513, &(0x7f0000000040)={0xb}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0xc1105511, &(0x7f0000000040)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00'/15, @ANYRES16=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000040000000000000000000000b8ee0816756b62187804752330b2b55830d7228ef1593c06"], 0x80}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040f0400001b04"], 0x7) 99.056722ms ago: executing program 1 (id=1074): r0 = io_uring_setup(0xdac, &(0x7f0000000180)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.103311ms ago: executing program 0 (id=1075): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x300, 0x258, 0x258, 0x300, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}, @common=@unspec=@owner={{0x38}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x190, 0x1c8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4, [], @ipv6=@mcast2, [], @ipv4=@empty, [], @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 0s ago: executing program 2 (id=1076): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000680)={&(0x7f0000000600)=[0x0], &(0x7f0000000640), 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0}) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/62, 0x3e}}], 0x1, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x10, 0x1004}, 0x10}], 0x1}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, "00050000000000000000000000000700"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000002c0)) poll(&(0x7f0000000480)=[{r8}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x20, 0x700, 0x8, 0x6, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x67, 0x0, 0x0, 0x0, 0x0, @local, @private=0xa010101, {[@noop, @noop]}}}}}) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="f529a2881a62aac20fc784dd11b17ec981c5e782ed725f0efd318e717577ccd2eef8973748bb3cfdece922c56ae73df61cc9dcc1dad437733f3ad7708873365af8f294d37060ee29bd6afac44c82fc91e854796c3e3f8e4ce3a2e2c4a174f69c235b47348daf9d69ed1c1de13e12ca5aa5c1770b22ea115314803c583f9837aca3", 0x81}], 0x1, &(0x7f00000001c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x4b77}}], 0x18}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="49f325de1796d6491ea9c0f1b54fa7", 0xf}, {&(0x7f0000001840)="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", 0xfc0}], 0x2, &(0x7f0000000380)=[@rthdr={{0x68, 0x29, 0x39, {0x33, 0xa, 0x1, 0x99, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x88, 0x6, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0x20, "97bb65cf03349dd837877403e520d9af627de9d0ae941069b38aa1a10f85c90b"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x3c, 0xa, 0x1, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @local, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r9}}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x2f, 0xd, '\x00', [@pad1, @generic={0x3, 0x63, "27cc274361cb27ffffeddc906d903e49dd10490ec94ca6126719a01a43c9d48b464ca07447a0f87c49ea24077ef7e9fbb381c339ac049edec93977c712c2ca1bfbd2d4d8992b8b806e23895128dd71abd6a65dd443f7c09bfe0cdcfc6b24088003167a"}]}}}, @hopopts={{0x38, 0x29, 0x36, {0x0, 0x3, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0xfffe, [0x10001, 0x2]}}, @ra={0x5, 0x2, 0x7}]}}}], 0x230}}], 0x3, 0x0) kernel console output (not intermixed with test programs): T6129] netlink: 9328 bytes leftover after parsing attributes in process `syz.0.206'. [ 132.871869][ T6125] netlink: 36 bytes leftover after parsing attributes in process `syz.4.204'. [ 132.878497][ T6129] netlink: 'syz.0.206': attribute type 1 has an invalid length. [ 133.299675][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.306345][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.442246][ T5230] Bluetooth: hci1: ACL packet for unknown connection handle 203 [ 133.534201][ T6143] tipc: Started in network mode [ 133.540158][ T6143] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 133.550076][ T6143] tipc: Enabled bearer , priority 0 [ 134.648370][ T25] tipc: Node number set to 10463914 [ 134.804219][ T6151] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 135.098088][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 135.114693][ T5348] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.251171][ T6164] netlink: 104 bytes leftover after parsing attributes in process `syz.3.215'. [ 135.319000][ T5230] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 135.366184][ T5348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 135.379838][ T5348] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 135.461688][ T5348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.522248][ T5348] usb 1-1: config 0 descriptor?? [ 135.663109][ T6168] netlink: 56 bytes leftover after parsing attributes in process `syz.3.217'. [ 135.818957][ T5348] ath6kl: Failed to submit usb control message: -71 [ 135.852387][ T5348] ath6kl: unable to send the bmi data to the device: -71 [ 135.884169][ T5348] ath6kl: Unable to send get target info: -71 [ 135.908824][ T5348] ath6kl: Failed to init ath6kl core: -71 [ 135.954907][ T5348] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 136.010197][ T5348] usb 1-1: USB disconnect, device number 3 [ 136.026904][ T6170] autofs: Unknown parameter '0x0000000000000000' [ 136.242771][ T6170] netlink: 'syz.2.218': attribute type 4 has an invalid length. [ 136.256375][ T6170] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.218'. [ 136.270703][ T4609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.281919][ T4609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.292848][ T4609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.303059][ T4609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.312820][ T4609] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 136.321000][ T4609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.647259][ T3004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.787252][ T3004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.027926][ T3004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.892270][ T3004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.161736][ T6201] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 138.271631][ T6175] chnl_net:caif_netlink_parms(): no params data found [ 138.297735][ T6208] netlink: 56 bytes leftover after parsing attributes in process `syz.2.228'. [ 138.329988][ T6210] autofs: Unknown parameter '0x0000000000000000' [ 138.354437][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.369236][ T3004] bridge_slave_1: left allmulticast mode [ 138.377586][ T3004] bridge_slave_1: left promiscuous mode [ 138.383403][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.392898][ T6210] netlink: 'syz.1.230': attribute type 4 has an invalid length. [ 138.406904][ T6210] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.230'. [ 138.415273][ T6214] Zero length message leads to an empty skb [ 138.424838][ T3004] bridge_slave_0: left allmulticast mode [ 138.430543][ T3004] bridge_slave_0: left promiscuous mode [ 138.433886][ T4609] Bluetooth: hci0: command tx timeout [ 138.455684][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.573741][ T4609] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 138.673886][ T5273] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 138.714153][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 138.732727][ T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 138.742708][ T8] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 138.770807][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.817064][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.864202][ T5273] usb 4-1: Using ep0 maxpacket: 16 [ 138.947502][ T5273] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice= 6.8a [ 138.968440][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.080616][ T5273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.112728][ T8] usb 1-1: Product: syz [ 139.209500][ T8] usb 1-1: Manufacturer: syz [ 139.436318][ T5273] usb 4-1: Product: syz [ 139.444222][ T8] usb 1-1: SerialNumber: syz [ 139.450456][ T6218] sctp: [Deprecated]: syz.1.232 (pid 6218) Use of int in max_burst socket option. [ 139.450456][ T6218] Use struct sctp_assoc_value instead [ 139.484149][ T5273] usb 4-1: Manufacturer: syz [ 139.500160][ T5273] usb 4-1: SerialNumber: syz [ 139.527873][ T5273] usb 4-1: config 0 descriptor?? [ 139.587957][ T5273] mcba_usb 4-1:0.0: Can't find endpoints [ 140.289519][ T5270] usb 4-1: USB disconnect, device number 8 [ 140.563990][ T4609] Bluetooth: hci0: command tx timeout [ 140.584170][ T8] usb 1-1: 0:2 : does not exist [ 140.660100][ T8] usb 1-1: USB disconnect, device number 4 [ 141.063490][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.089831][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.101677][ T3004] bond0 (unregistering): Released all slaves [ 141.161268][ T6226] bridge0: port 3(hsr_slave_1) entered blocking state [ 141.173982][ T6226] bridge0: port 3(hsr_slave_1) entered disabled state [ 141.182174][ T6226] hsr_slave_1: entered allmulticast mode [ 141.195624][ T6226] hsr_slave_1: left allmulticast mode [ 141.207593][ T6232] netlink: 44 bytes leftover after parsing attributes in process `syz.1.235'. [ 141.326095][ T4609] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 141.354220][ T5273] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.405767][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.422272][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.443535][ T6175] bridge_slave_0: entered allmulticast mode [ 141.451008][ T6175] bridge_slave_0: entered promiscuous mode [ 141.476759][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.484195][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.493643][ T6175] bridge_slave_1: entered allmulticast mode [ 141.502962][ T6175] bridge_slave_1: entered promiscuous mode [ 141.566142][ T5273] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 141.713462][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.402522][ T5273] usb 4-1: config 0 descriptor?? [ 142.417102][ T5273] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 142.615657][ T6175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.650794][ T6175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.660061][ T4609] Bluetooth: hci0: command tx timeout [ 142.685545][ T3004] hsr_slave_0: left promiscuous mode [ 142.691922][ T3004] hsr_slave_1: left promiscuous mode [ 142.705073][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.713788][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.730280][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.820801][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.872347][ T3004] veth1_macvtap: left promiscuous mode [ 142.879066][ T3004] veth0_macvtap: left promiscuous mode [ 142.884956][ T3004] veth1_vlan: left promiscuous mode [ 142.890463][ T3004] veth0_vlan: left promiscuous mode [ 143.698730][ T58] usb 4-1: USB disconnect, device number 9 [ 144.794862][ T4609] Bluetooth: hci0: command tx timeout [ 145.374345][ T5230] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 145.383987][ T5230] Bluetooth: hci2: Injecting HCI hardware error event [ 145.392736][ T5230] Bluetooth: hci2: hardware error 0x00 [ 147.210980][ T3004] team0 (unregistering): Port device team_slave_1 removed [ 147.408802][ T3004] team0 (unregistering): Port device team_slave_0 removed [ 147.464201][ T5230] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 148.273229][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 148.283143][ T6305] netlink: 'syz.2.255': attribute type 15 has an invalid length. [ 148.298799][ T6305] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 148.308662][ T6305] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 148.318209][ T6305] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 148.327102][ T6305] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 148.345831][ T6305] vxlan0: entered promiscuous mode [ 148.414592][ T6312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.256'. [ 148.571886][ T6175] team0: Port device team_slave_0 added [ 148.672111][ T6175] team0: Port device team_slave_1 added [ 148.764218][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.779377][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.808552][ T6175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.882126][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.905133][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.162831][ T6175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.509511][ T6175] hsr_slave_0: entered promiscuous mode [ 149.544351][ T6175] hsr_slave_1: entered promiscuous mode [ 149.555843][ T58] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 149.564221][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 149.571942][ T6175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.582975][ T6328] evm: overlay not supported [ 149.584257][ T6175] Cannot create hsr debugfs directory [ 149.593984][ T29] audit: type=1804 audit(1722251225.853:3): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.262" name="/newroot/63/bus/file0" dev="overlay" ino=347 res=1 errno=0 [ 149.745831][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 149.753325][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 149.768484][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.787144][ T58] usb 4-1: New USB device found, idVendor=05ac, idProduct=7b38, bcdDevice=df.5c [ 149.808951][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.818116][ T6334] loop0: detected capacity change from 0 to 1 [ 149.828908][ T25] usb 2-1: config 0 descriptor?? [ 149.851842][ T25] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 149.898475][ T58] usb 4-1: config 0 descriptor?? [ 149.912466][ T58] hub 4-1:0.0: bad descriptor, ignoring hub [ 149.919236][ T58] hub 4-1:0.0: probe with driver hub failed with error -5 [ 149.930564][ T58] ipheth 4-1:0.0: Unable to find alternate settings interface [ 149.943108][ T6334] Dev loop0: unable to read RDB block 1 [ 150.075948][ T6334] loop0: unable to read partition table [ 150.159115][ T6334] loop0: partition table beyond EOD, truncated [ 150.277958][ T6334] loop_reread_partitions: partition scan of loop0 (SaEǷ>#|J_diV3Q~d!=U5hcs-3hгJHv>l,) failed (rc=-5) [ 150.589716][ T58] usb 2-1: USB disconnect, device number 4 [ 150.694261][ T5223] usb 4-1: USB disconnect, device number 10 [ 150.972005][ T6175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.983548][ T6175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.996865][ T6175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.012232][ T6175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.278696][ T6175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.328909][ T6175] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.351485][ T29] audit: type=1326 audit(1722251227.613:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6348 comm="syz.1.269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4301d77299 code=0x0 [ 151.395691][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.402974][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.592428][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.599567][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.654088][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 152.364144][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 152.384200][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 152.419566][ T25] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 152.435148][ T29] audit: type=1326 audit(1722251228.693:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6353 comm="syz.1.270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4301d77299 code=0x0 [ 152.452647][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.484448][ T25] usb 1-1: Product: syz [ 152.488704][ T25] usb 1-1: Manufacturer: syz [ 152.508675][ T25] usb 1-1: SerialNumber: syz [ 152.518369][ T25] usb 1-1: config 0 descriptor?? [ 152.525003][ T6347] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.552684][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.700089][ T6366] autofs: Unknown parameter '0x0000000000000000' [ 152.739201][ T6175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.813384][ T6366] netlink: 'syz.2.273': attribute type 4 has an invalid length. [ 152.839382][ T6366] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.273'. [ 152.886270][ T5223] usb 1-1: USB disconnect, device number 5 [ 152.983377][ T6372] netlink: 47 bytes leftover after parsing attributes in process `syz.3.274'. [ 153.265552][ T6175] veth0_vlan: entered promiscuous mode [ 153.280996][ T6175] veth1_vlan: entered promiscuous mode [ 153.354379][ T6381] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 154.857575][ T6175] veth0_macvtap: entered promiscuous mode [ 154.913040][ T6175] veth1_macvtap: entered promiscuous mode [ 154.986405][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.019513][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.046085][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.060306][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.087916][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.235798][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.064069][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.113998][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.131162][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.245519][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.297152][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.369730][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.398205][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.408616][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.436480][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.474936][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.515695][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.586416][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.365014][ T6175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.373773][ T6175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.386298][ T6175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.395369][ T6175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.837634][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.845807][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.944758][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.955317][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.541415][ T29] audit: type=1326 audit(1722251236.803:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6436 comm="syz.0.288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cdb777299 code=0x0 [ 160.746186][ T5348] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.894330][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 160.938283][ T5348] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 160.953217][ T5348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.964017][ T5348] usb 5-1: Product: syz [ 160.976678][ T5348] usb 5-1: Manufacturer: syz [ 160.985632][ T5348] usb 5-1: SerialNumber: syz [ 161.003952][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.028532][ T5348] usb 5-1: config 0 descriptor?? [ 161.094348][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 161.111886][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.137799][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.173421][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.197108][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.209645][ T8] usb 4-1: Product: syz [ 161.215819][ T8] usb 4-1: Manufacturer: syz [ 161.225803][ T8] usb 4-1: SerialNumber: syz [ 161.243685][ T25] usb 1-1: config 0 has no interfaces? [ 161.256699][ T5348] hso 5-1:0.0: Can't find BULK IN endpoint [ 161.281821][ T5348] usb-storage 5-1:0.0: USB Mass Storage device detected [ 161.288419][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 161.354173][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 161.390363][ T25] usb 1-1: SerialNumber: syz [ 161.455868][ T25] usb 1-1: config 0 descriptor?? [ 161.538025][ T5348] usb 5-1: USB disconnect, device number 9 [ 161.718435][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 162.622820][ T8] usb 4-1: 0:2 : does not exist [ 162.741484][ T5223] usb 1-1: USB disconnect, device number 6 [ 162.765496][ T8] usb 4-1: USB disconnect, device number 11 [ 162.949756][ T6472] geneve2: entered promiscuous mode [ 162.959935][ T6472] geneve2: entered allmulticast mode [ 163.184535][ T6480] netlink: 48 bytes leftover after parsing attributes in process `syz.2.301'. [ 163.379083][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 163.834310][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 163.841729][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.860377][ T8] usb 5-1: config 0 has no interface number 0 [ 163.874063][ T8] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.903118][ T8] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.947501][ T6486] 9pnet_fd: Insufficient options for proto=fd [ 163.953956][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.979656][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.993761][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.303'. [ 164.028760][ T6490] netlink: 47 bytes leftover after parsing attributes in process `syz.1.304'. [ 164.041083][ T8] usb 5-1: config 0 descriptor?? [ 164.097774][ T8] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 164.402526][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.305'. [ 165.307548][ T8] usb 5-1: USB disconnect, device number 10 [ 165.354970][ T8] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 165.404106][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.603934][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 165.627120][ T25] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 165.667946][ T25] usb 2-1: config 0 has no interface number 0 [ 165.705885][ T25] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.731434][ T25] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 165.787959][ T25] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 165.807516][ T25] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 165.817735][ T25] usb 2-1: Product: syz [ 165.822005][ T25] usb 2-1: SerialNumber: syz [ 165.854596][ T25] usb 2-1: config 0 descriptor?? [ 165.867546][ T25] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 165.882307][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input16 [ 166.001391][ T6522] random: crng reseeded on system resumption [ 166.009055][ T6526] netlink: 48 bytes leftover after parsing attributes in process `syz.4.316'. [ 166.114169][ T58] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 166.380818][ T58] usb 4-1: config 0 has no interfaces? [ 166.399359][ T58] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 166.433578][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.464767][ T58] usb 4-1: SerialNumber: syz [ 166.490342][ T58] usb 4-1: config 0 descriptor?? [ 166.809238][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 166.991321][ T58] usb 4-1: USB disconnect, device number 12 [ 166.998245][ T6522] Restarting kernel threads ... done. [ 167.132624][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 167.222921][ C1] cm109_urb_ctl_callback: 16 callbacks suppressed [ 167.222945][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.236560][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.243737][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.250958][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.258133][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.265330][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.272539][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.279748][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.287007][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.295147][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.311141][ T5223] usb 2-1: USB disconnect, device number 5 [ 167.311191][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 167.337256][ T5223] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 167.344045][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 167.557291][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 167.601570][ T25] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 167.711948][ T25] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 167.817077][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.004087][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.042396][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.073895][ T25] usb 3-1: Product: syz [ 168.078116][ T25] usb 3-1: Manufacturer: syz [ 168.130724][ T25] usb 3-1: SerialNumber: syz [ 168.332544][ T6557] 9pnet_fd: Insufficient options for proto=fd [ 168.413365][ T6557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.327'. [ 168.892060][ T25] usb 3-1: 0:2 : does not exist [ 168.913683][ T25] usb 3-1: USB disconnect, device number 8 [ 169.922389][ T6578] random: crng reseeded on system resumption [ 169.974059][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 170.177173][ T8] usb 5-1: config 0 has no interfaces? [ 170.184709][ T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.203957][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.230526][ T8] usb 5-1: SerialNumber: syz [ 170.237522][ T8] usb 5-1: config 0 descriptor?? [ 170.282837][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 170.428474][ T6578] Restarting kernel threads ... done. [ 170.493410][ T5348] usb 5-1: USB disconnect, device number 11 [ 170.673977][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 170.864071][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 170.871642][ T8] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 170.879936][ T8] usb 3-1: config 0 has no interface number 0 [ 170.888216][ T8] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 170.904036][ T8] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 170.926030][ T8] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 170.940371][ T8] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 170.959139][ T8] usb 3-1: Product: syz [ 170.963497][ T8] usb 3-1: SerialNumber: syz [ 170.981035][ T8] usb 3-1: config 0 descriptor?? [ 170.989997][ T8] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 171.000733][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input18 [ 171.876405][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 171.885834][ T6613] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 171.955669][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 172.245411][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'. [ 172.359788][ C1] cm109_urb_ctl_callback: 43 callbacks suppressed [ 172.359807][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.373564][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.380766][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.387906][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.395064][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.402267][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.409580][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.416688][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.423817][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.430962][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.443959][ T25] usb 3-1: USB disconnect, device number 9 [ 172.449791][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 172.462100][ T5269] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 172.482321][ T25] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 172.655854][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.691336][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.727558][ T5269] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 172.759833][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.788071][ T5269] usb 4-1: config 0 descriptor?? [ 173.179947][ T6648] trusted_key: encrypted_key: key trusted:syz not found [ 173.409131][ T5269] usbhid 4-1:0.0: can't add hid device: -71 [ 173.446206][ T5269] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 173.472389][ T5269] usb 4-1: USB disconnect, device number 13 [ 173.813441][ T6659] affs: Unrecognized mount option "8]DKxp'di!欄" or missing value [ 173.823891][ T6659] affs: Error parsing options [ 176.654216][ T5269] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 176.838466][ T5269] usb 5-1: Using ep0 maxpacket: 8 [ 176.856186][ T5269] usb 5-1: New USB device found, idVendor=05ac, idProduct=7b38, bcdDevice=df.5c [ 177.033561][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.056853][ T5269] usb 5-1: config 0 descriptor?? [ 177.734541][ T5269] hub 5-1:0.0: bad descriptor, ignoring hub [ 177.763255][ T5269] hub 5-1:0.0: probe with driver hub failed with error -5 [ 178.215123][ T5269] ipheth 5-1:0.0: Unable to find alternate settings interface [ 178.483008][ T6723] affs: Unrecognized mount option "8]DKxp'di!欄" or missing value [ 178.493383][ T6723] affs: Error parsing options [ 179.172384][ T5269] usb 5-1: USB disconnect, device number 12 [ 179.188935][ T6715] geneve2: entered promiscuous mode [ 179.198838][ T6715] geneve2: entered allmulticast mode [ 179.548397][ T6737] 9pnet_fd: Insufficient options for proto=fd [ 179.633170][ T6737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.375'. [ 179.835808][ T6740] loop0: detected capacity change from 0 to 1 [ 179.860730][ C0] eth0: bad gso: type: 1, size: 1408 [ 179.928256][ T6740] Dev loop0: unable to read RDB block 1 [ 179.934250][ T6740] loop0: unable to read partition table [ 179.954186][ T6740] loop0: partition table beyond EOD, truncated [ 179.973003][ T6740] loop_reread_partitions: partition scan of loop0 (SaEǷ>#|J_diV3Q~d!=U5hcs-3hгJHv>l,) failed (rc=-5) [ 180.440686][ T5230] Bluetooth: hci0: ACL packet for unknown connection handle 203 [ 180.568342][ T6750] tipc: Started in network mode [ 180.573708][ T6750] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 180.586373][ T6750] tipc: Enabled bearer , priority 0 [ 181.594046][ T5223] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 181.706131][ T25] tipc: Node number set to 10463914 [ 181.803965][ T5223] usb 5-1: Using ep0 maxpacket: 16 [ 181.828821][ T5223] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.847890][ T5269] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 181.850852][ T5223] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.881203][ T5223] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.899358][ T5223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.909434][ T5223] usb 5-1: Product: syz [ 181.914051][ T5223] usb 5-1: Manufacturer: syz [ 181.914073][ T5223] usb 5-1: SerialNumber: syz [ 182.055779][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.070522][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.083935][ T5269] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 182.156230][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.210491][ T5269] usb 3-1: config 0 descriptor?? [ 182.277175][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 182.559108][ T58] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 182.638032][ T6792] trusted_key: encrypted_key: key trusted:syz not found [ 182.662063][ T5223] usb 5-1: 0:2 : does not exist [ 182.738305][ T5223] usb 5-1: USB disconnect, device number 13 [ 182.777893][ T58] usb 1-1: config index 0 descriptor too short (expected 106, got 36) [ 182.806408][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.835357][ T5269] usbhid 3-1:0.0: can't add hid device: -71 [ 182.851814][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.862762][ T5269] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 182.888017][ T58] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 182.900313][ T5269] usb 3-1: USB disconnect, device number 10 [ 182.911049][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.947508][ T58] usb 1-1: config 0 descriptor?? [ 183.067976][ T6798] capability: warning: `syz.1.395' uses 32-bit capabilities (legacy support in use) [ 183.080315][ T6798] program syz.1.395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.879951][ T58] corsair 0003:1B1C:1B3E.0006: failed to start in urb: -90 [ 183.914601][ T58] corsair 0003:1B1C:1B3E.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 184.695457][ T6787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.713761][ T6787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.797211][ T5269] usb 1-1: USB disconnect, device number 7 [ 185.377055][ C0] eth0: bad gso: type: 1, size: 1408 [ 186.405840][ T6840] netlink: 'syz.2.407': attribute type 12 has an invalid length. [ 186.413753][ T6840] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.407'. [ 187.219189][ T6842] random: crng reseeded on system resumption [ 187.273995][ T5223] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 187.398211][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 187.431162][ T6850] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 187.483923][ T5223] usb 5-1: Using ep0 maxpacket: 8 [ 187.513708][ T5223] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.551588][ T5223] usb 5-1: config 0 has no interface number 0 [ 187.575677][ T5223] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.622381][ T5223] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.671889][ T5223] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.695304][ T5223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.719192][ T5223] usb 5-1: config 0 descriptor?? [ 188.051789][ T5223] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 188.110627][ T5223] usb 5-1: USB disconnect, device number 14 [ 188.127708][ T5223] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 188.181718][ T6842] Restarting kernel threads ... done. [ 188.493708][ T29] audit: type=1800 audit(1722251264.753:7): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.414" name="file0" dev="overlay" ino=520 res=0 errno=0 [ 188.860077][ T6866] tipc: Started in network mode [ 188.865234][ T6866] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 188.876220][ T6866] tipc: Enabled bearer , priority 0 [ 189.819106][ T6868] Bluetooth: MGMT ver 1.23 [ 189.984050][ T5267] tipc: Node number set to 10463914 [ 191.244312][ T5267] IPVS: starting estimator thread 0... [ 191.374318][ T6895] IPVS: using max 33 ests per chain, 79200 per kthread [ 191.704394][ T5230] Bluetooth: hci1: command 0x0406 tx timeout [ 192.195435][ T29] audit: type=1800 audit(1722251268.463:8): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.427" name="file0" dev="overlay" ino=362 res=0 errno=0 [ 192.933317][ T6928] 9pnet_fd: Insufficient options for proto=fd [ 193.037447][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 193.133583][ T6928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.430'. [ 193.267236][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.302903][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.320897][ T25] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 193.330994][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.355017][ T25] usb 3-1: config 0 descriptor?? [ 193.805941][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.4.437'. [ 194.442581][ T6947] program syz.0.436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.453111][ T6949] trusted_key: encrypted_key: key trusted:syz not found [ 194.722698][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 194.754731][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.763991][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.824052][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 195.021602][ T25] usb 3-1: USB disconnect, device number 11 [ 196.094230][ T6973] netlink: 1304 bytes leftover after parsing attributes in process `syz.0.442'. [ 198.316938][ T5269] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 198.525593][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.552601][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.598215][ T5269] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 198.618797][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.640509][ T5269] usb 3-1: config 0 descriptor?? [ 199.060858][ T7034] trusted_key: encrypted_key: key trusted:syz not found [ 199.266999][ T5269] usbhid 3-1:0.0: can't add hid device: -71 [ 199.290078][ T5269] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 199.290996][ T7038] Invalid option length (0) for dns_resolver key [ 199.318630][ T5269] usb 3-1: USB disconnect, device number 12 [ 199.465674][ T7043] mmap: syz.0.458 (7043) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 199.674149][ T7050] netlink: 1304 bytes leftover after parsing attributes in process `syz.3.464'. [ 199.875736][ T7054] kvm: pic: non byte write [ 200.266457][ T7061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.467'. [ 202.912414][ T7084] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 203.295699][ T5269] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 203.537215][ T7102] netlink: 1304 bytes leftover after parsing attributes in process `syz.0.481'. [ 203.648239][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.480'. [ 204.470503][ T5269] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 204.482063][ T7102] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 204.498514][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.523285][ T5269] usb 5-1: config 0 descriptor?? [ 204.550957][ T5269] usb 5-1: selecting invalid altsetting 1 [ 204.629008][ T5269] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 204.661515][ T7115] netlink: 830 bytes leftover after parsing attributes in process `syz.1.483'. [ 205.468494][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.488851][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.565357][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 205.578948][ T7126] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 205.923977][ T5269] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 206.131633][ T5269] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 206.155324][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 206.165103][ T7138] kvm: pic: non byte write [ 206.190544][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 206.202055][ T5269] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.218249][ T5269] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.227674][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.241353][ T5269] usb 4-1: config 0 descriptor?? [ 206.258155][ T7133] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 206.685027][ T5348] usb 5-1: USB disconnect, device number 15 [ 206.720002][ T5269] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 206.760085][ T5269] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 206.794676][ T5269] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 207.910573][ T5269] usb 4-1: USB disconnect, device number 14 [ 207.926181][ C0] eth0: bad gso: type: 1, size: 1408 [ 209.402129][ T7180] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 209.409199][ T7180] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 209.419332][ T7182] vhci_hcd: connection closed [ 209.421690][ T7180] vhci_hcd vhci_hcd.0: Device attached [ 209.442107][ T12] vhci_hcd: stop threads [ 209.473693][ T12] vhci_hcd: release socket [ 209.499997][ T12] vhci_hcd: disconnect device [ 209.541733][ T7185] netlink: 'syz.0.501': attribute type 2 has an invalid length. [ 209.573909][ T7185] netlink: 244 bytes leftover after parsing attributes in process `syz.0.501'. [ 209.698493][ T7190] netlink: 48 bytes leftover after parsing attributes in process `syz.2.503'. [ 210.283078][ T5348] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 210.475828][ T7204] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.508'. [ 210.494493][ T5348] usb 4-1: Using ep0 maxpacket: 8 [ 210.508878][ T5348] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 210.529285][ T5348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.579853][ T5348] usb 4-1: Product: syz [ 210.591032][ T5348] usb 4-1: Manufacturer: syz [ 210.591167][ T7204] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 210.595928][ T5348] usb 4-1: SerialNumber: syz [ 210.629756][ T5348] usb 4-1: config 0 descriptor?? [ 210.636762][ T5223] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 210.655754][ T5348] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 210.864443][ T5223] usb 5-1: Using ep0 maxpacket: 32 [ 210.873788][ T5223] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 211.408197][ T5223] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 211.418619][ T5223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.426939][ T5223] usb 5-1: Product: syz [ 211.431672][ T5223] usb 5-1: Manufacturer: syz [ 211.437336][ T5223] usb 5-1: SerialNumber: syz [ 211.445584][ T5223] usb 5-1: config 0 descriptor?? [ 211.451549][ T7200] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 211.476346][ T5223] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.796173][ T5348] gspca_vc032x: reg_w err -71 [ 211.815516][ T5348] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 211.831317][ T5348] usb 4-1: USB disconnect, device number 15 [ 211.840385][ T5223] usb 5-1: USB disconnect, device number 16 [ 212.130169][ T7224] netlink: 'syz.0.515': attribute type 2 has an invalid length. [ 212.148131][ T7224] netlink: 244 bytes leftover after parsing attributes in process `syz.0.515'. [ 212.233978][ T5376] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 212.436715][ T5376] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 212.468070][ T5376] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.496646][ T5376] usb 2-1: config 0 has no interface number 0 [ 212.524795][ T5376] usb 2-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 212.674968][ T7238] program syz.4.518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.329502][ T5376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.402747][ T5376] usb 2-1: config 0 descriptor?? [ 213.450152][ T5376] qmi_wwan 2-1:0.154: probe with driver qmi_wwan failed with error -22 [ 214.144343][ T5267] usb 2-1: USB disconnect, device number 6 [ 214.153329][ T7245] netlink: 32 bytes leftover after parsing attributes in process `syz.4.520'. [ 214.198107][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 214.268310][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 214.300933][ T7254] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.523'. [ 214.673589][ T7254] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 214.940461][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 214.958379][ T7264] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 215.436198][ T7272] netlink: 48 bytes leftover after parsing attributes in process `syz.0.530'. [ 216.239982][ T7291] program syz.3.531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.080866][ T5223] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 218.418093][ T5223] usb 4-1: Using ep0 maxpacket: 8 [ 218.472774][ T5223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 218.484063][ T5223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 218.493761][ T5223] usb 4-1: New USB device found, idVendor=2040, idProduct=6517, bcdDevice=11.cd [ 218.513426][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.613563][ T5223] usb 4-1: config 0 descriptor?? [ 219.130725][ T5376] usb 4-1: USB disconnect, device number 16 [ 220.239315][ T7333] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 220.245962][ T7333] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 220.253727][ T7334] vhci_hcd: connection closed [ 220.253728][ T7333] vhci_hcd vhci_hcd.0: Device attached [ 220.294620][ T11] vhci_hcd: stop threads [ 220.298916][ T11] vhci_hcd: release socket [ 220.303366][ T11] vhci_hcd: disconnect device [ 220.491187][ T7347] netlink: 124 bytes leftover after parsing attributes in process `syz.3.551'. [ 220.753725][ T7350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.550'. [ 221.982225][ T7359] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 221.988773][ T7359] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 222.019089][ T7359] vhci_hcd vhci_hcd.0: Device attached [ 222.102198][ T7360] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 222.152506][ T11] vhci_hcd: stop threads [ 222.167120][ T11] vhci_hcd: release socket [ 222.179976][ T11] vhci_hcd: disconnect device [ 222.274157][ T5267] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 222.499591][ T5267] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 222.523232][ T5267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.549958][ T5267] usb 5-1: Product: syz [ 222.567046][ T5267] usb 5-1: Manufacturer: syz [ 222.590438][ T5267] usb 5-1: SerialNumber: syz [ 222.622960][ T5267] usb 5-1: config 0 descriptor?? [ 222.656388][ T5267] xillyusb 5-1:0.0: Failed to send quiesce request. Aborting. [ 222.690701][ T7390] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 222.710291][ T5267] xillyusb 5-1:0.0: probe with driver xillyusb failed with error -5 [ 222.871303][ T7390] team0: Port device netdevsim0 added [ 223.275606][ T7392] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 223.428182][ T5348] usb 5-1: USB disconnect, device number 17 [ 223.499117][ T7392] team0: Port device netdevsim0 removed [ 223.514253][ T7392] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 224.580595][ T7421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.564'. [ 225.584022][ T5348] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 225.612071][ T7445] loop0: detected capacity change from 0 to 7 [ 225.652641][ T7445] Dev loop0: unable to read RDB block 7 [ 225.678603][ T7445] loop0: AHDI p2 p3 [ 225.822101][ T7445] loop0: partition table partially beyond EOD, truncated [ 225.832277][ T7445] loop0: p2 start 341296255 is beyond EOD, truncated [ 226.614991][ T5348] usb 3-1: config index 0 descriptor too short (expected 106, got 36) [ 226.623192][ T5348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.661225][ T5348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.719800][ T5348] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 226.719834][ T5348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.723180][ T5348] usb 3-1: config 0 descriptor?? [ 227.147508][ T5348] corsair 0003:1B1C:1B3E.0008: failed to start in urb: -90 [ 227.203426][ T5348] corsair 0003:1B1C:1B3E.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 227.391951][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.412532][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.468780][ T5348] usb 3-1: USB disconnect, device number 13 [ 228.725486][ T7514] loop0: detected capacity change from 0 to 7 [ 228.738090][ T7514] Dev loop0: unable to read RDB block 7 [ 228.749492][ T7514] loop0: AHDI p2 p3 [ 228.754140][ T7514] loop0: partition table partially beyond EOD, truncated [ 228.768571][ T7514] loop0: p2 start 341296255 is beyond EOD, truncated [ 229.012787][ T7524] netlink: 'syz.4.588': attribute type 3 has an invalid length. [ 229.094237][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 229.201686][ T7530] netlink: 1304 bytes leftover after parsing attributes in process `syz.4.589'. [ 229.294075][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 229.312003][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.323746][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.342541][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.357964][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.366380][ T25] usb 4-1: Product: syz [ 229.370696][ T25] usb 4-1: Manufacturer: syz [ 229.375779][ T25] usb 4-1: SerialNumber: syz [ 229.737112][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 230.685806][ T25] usb 4-1: 0:2 : does not exist [ 230.706232][ T25] usb 4-1: USB disconnect, device number 17 [ 231.074025][ T25] IPVS: starting estimator thread 0... [ 231.174450][ T7555] IPVS: using max 18 ests per chain, 43200 per kthread [ 231.600101][ T7563] netlink: 'syz.3.599': attribute type 3 has an invalid length. [ 231.608512][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 231.935471][ T25] usb 1-1: config index 0 descriptor too short (expected 106, got 36) [ 231.954358][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.993136][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.013512][ T25] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 232.038389][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.053787][ T25] usb 1-1: config 0 descriptor?? [ 232.477994][ T5230] Bluetooth: hci5: sending frame failed (-49) [ 232.485972][ T25] corsair 0003:1B1C:1B3E.0009: failed to start in urb: -90 [ 232.493320][ T4609] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 232.587074][ T25] corsair 0003:1B1C:1B3E.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 233.279124][ T7574] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 233.286737][ T7574] ALSA: mixer_oss: invalid OSS volume 'OGAINW1' [ 233.295528][ T7574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.876213][ T5376] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 233.897548][ T7582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.919295][ T7582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.963108][ T7584] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 233.969649][ T7584] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 233.985013][ T7584] vhci_hcd vhci_hcd.0: Device attached [ 234.008448][ T7587] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 234.020712][ T3024] vhci_hcd: stop threads [ 234.043135][ T3024] vhci_hcd: release socket [ 234.058192][ T3024] vhci_hcd: disconnect device [ 234.059312][ T5270] usb 1-1: USB disconnect, device number 8 [ 234.084066][ T5376] usb 5-1: Using ep0 maxpacket: 8 [ 234.086026][ T5376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.086058][ T5376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.086080][ T5376] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.086119][ T5376] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 234.086140][ T5376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.198839][ T5376] usb 5-1: config 0 descriptor?? [ 234.661487][ T5376] sunplus 0003:04FC:05D8.000A: item fetching failed at offset 5/7 [ 234.684861][ T5376] sunplus 0003:04FC:05D8.000A: probe with driver sunplus failed with error -22 [ 235.287068][ T5376] usb 5-1: USB disconnect, device number 18 [ 235.402331][ T8] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 235.636384][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 235.666091][ T8] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 235.687397][ T8] usb 4-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.756276][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 235.779117][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 235.799520][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.823099][ T8] usb 4-1: Product: 㠊 [ 235.835117][ T8] usb 4-1: Manufacturer: ࠧ [ 235.845423][ T8] usb 4-1: SerialNumber: syz [ 235.863027][ T7616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 235.881310][ T7616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 236.143208][ T7615] netlink: 'syz.3.613': attribute type 5 has an invalid length. [ 237.027316][ T8] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 237.050108][ T8] usb 4-1: USB disconnect, device number 18 [ 237.129339][ T8] usblp0: removed [ 237.180094][ T7661] loop0: detected capacity change from 0 to 7 [ 237.190881][ T7661] Dev loop0: unable to read RDB block 7 [ 237.201710][ T7661] loop0: AHDI p2 p3 [ 237.253717][ T7661] loop0: partition table partially beyond EOD, truncated [ 237.326405][ T7661] loop0: p2 start 341296255 is beyond EOD, truncated [ 237.861300][ T7667] netlink: 'syz.4.626': attribute type 1 has an invalid length. [ 238.363925][ T5376] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 238.543936][ T5376] usb 1-1: Using ep0 maxpacket: 8 [ 238.550699][ T5376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.584505][ T5376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.602498][ T5376] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.636689][ T5269] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 238.643916][ T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 238.652775][ T5376] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 238.701892][ T5376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.718912][ T5376] usb 1-1: config 0 descriptor?? [ 238.854001][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 238.861491][ T5269] usb 2-1: Using ep0 maxpacket: 32 [ 238.862494][ T8] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 238.891494][ T5269] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=c3.cc [ 238.899503][ T8] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 238.910642][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.919866][ T8] usb 4-1: config 0 has no interface number 0 [ 238.936073][ T5269] usb 2-1: Product: syz [ 238.942804][ T5269] usb 2-1: Manufacturer: syz [ 238.951699][ T5269] usb 2-1: SerialNumber: syz [ 238.958528][ T8] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.961583][ T5269] usb 2-1: config 0 descriptor?? [ 238.989057][ T5269] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 239.003753][ T5269] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 239.011874][ T8] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 239.011950][ T5269] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 239.051799][ T5269] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 239.066984][ T5269] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 239.078804][ T5269] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 239.092050][ T8] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 239.092582][ T5269] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 239.118619][ T5269] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 239.141883][ T5269] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 239.164860][ T8] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 239.171514][ T5269] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 239.191479][ T5376] sunplus 0003:04FC:05D8.000B: item fetching failed at offset 5/7 [ 239.213301][ T5376] sunplus 0003:04FC:05D8.000B: probe with driver sunplus failed with error -22 [ 239.222637][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.230987][ T5269] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 239.259675][ T8] usb 4-1: config 0 descriptor?? [ 239.277467][ T5269] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 239.285984][ T7686] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 239.327653][ T5269] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 239.351387][ T5269] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 239.373185][ T5269] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 239.400053][ T5269] usb 2-1: USB disconnect, device number 7 [ 239.433687][ T5269] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 239.474776][ T5269] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 239.482256][ T5376] usb 1-1: USB disconnect, device number 9 [ 239.526245][ T5269] keyspan 2-1:0.0: device disconnected [ 239.777287][ T7699] loop0: detected capacity change from 0 to 7 [ 239.784483][ T7699] Dev loop0: unable to read RDB block 7 [ 239.790158][ T7699] loop0: AHDI p2 p3 [ 239.796660][ T7699] loop0: partition table partially beyond EOD, truncated [ 239.810389][ T7699] loop0: p2 start 341296255 is beyond EOD, truncated [ 239.930310][ T8] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input21 [ 240.208826][ T29] audit: type=1326 audit(1722251316.473:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7708 comm="syz.2.643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c90777299 code=0x0 [ 240.237647][ T8] usb 4-1: USB disconnect, device number 19 [ 240.237705][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 240.437069][ T7715] kvm: pic: non byte write [ 240.729582][ T7735] loop0: detected capacity change from 0 to 7 [ 240.745629][ T7735] Dev loop0: unable to read RDB block 7 [ 240.759715][ T7735] loop0: AHDI p2 p3 [ 240.770340][ T7735] loop0: partition table partially beyond EOD, truncated [ 240.790251][ T7735] loop0: p2 start 341296255 is beyond EOD, truncated [ 242.199750][ T7756] Bluetooth: Short BCSP packet [ 242.212280][ T7761] netlink: 'syz.4.661': attribute type 10 has an invalid length. [ 242.296303][ T7761] team0: Port device netdevsim0 added [ 242.316780][ T7767] netlink: 'syz.4.661': attribute type 10 has an invalid length. [ 242.410998][ T7767] team0: Port device netdevsim0 removed [ 242.446698][ T5227] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 242.486124][ T7767] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 243.602373][ T5269] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 244.203436][ T5227] Bluetooth: hci5: command 0x1003 tx timeout [ 244.222733][ T4609] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 244.313899][ T5269] usb 1-1: Using ep0 maxpacket: 8 [ 244.353866][ T5269] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 244.378605][ T5269] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 244.398468][ T5269] usb 1-1: config 0 has no interface number 0 [ 244.404859][ T5269] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.417317][ T5269] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.433428][ T5269] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 244.450088][ T5269] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 244.462395][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.485215][ T5269] usb 1-1: config 0 descriptor?? [ 244.506379][ T7773] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 244.652680][ T7800] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 245.038332][ T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 245.148850][ T5269] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input22 [ 245.246560][ T25] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 245.267763][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.317440][ T25] usb 4-1: config 0 descriptor?? [ 245.329007][ T25] usb 4-1: selecting invalid altsetting 1 [ 245.384797][ T25] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 245.513655][ T8] usb 1-1: USB disconnect, device number 10 [ 245.516591][ C1] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 245.732855][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.744856][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.706324][ T5267] usb 4-1: USB disconnect, device number 20 [ 247.936011][ T7829] sctp: [Deprecated]: syz.2.681 (pid 7829) Use of int in maxseg socket option. [ 247.936011][ T7829] Use struct sctp_assoc_value instead [ 247.953394][ T7829] xt_CONNSECMARK: invalid mode: 0 [ 248.497855][ C0] eth0: bad gso: type: 1, size: 1408 [ 249.761154][ T7849] kvm: pic: non byte write [ 250.176339][ T29] audit: type=1326 audit(1722251326.333:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7866 comm="syz.0.695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cdb777299 code=0x0 [ 250.197544][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.988275][ T7883] netlink: 1304 bytes leftover after parsing attributes in process `syz.2.699'. [ 252.318239][ T7902] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 252.325875][ T7902] ALSA: mixer_oss: invalid OSS volume 'OGAINW1' [ 252.333497][ T7902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.968345][ T7923] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 253.974934][ T7923] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 253.984065][ T7923] vhci_hcd vhci_hcd.0: Device attached [ 253.984081][ T7924] vhci_hcd: connection closed [ 254.012123][ T3004] vhci_hcd: stop threads [ 256.254749][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.423918][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.488359][ T3004] vhci_hcd: release socket [ 257.503989][ T25] usb 9-1: new high-speed USB device number 3 using vhci_hcd [ 258.797433][ T3004] vhci_hcd: disconnect device [ 258.829320][ T25] usb 9-1: enqueue for inactive port 0 [ 258.934907][ T25] vhci_hcd: vhci_device speed not set [ 259.111220][ T7949] netlink: 124 bytes leftover after parsing attributes in process `syz.0.722'. [ 260.075524][ T7950] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 260.083645][ T7950] ALSA: mixer_oss: invalid OSS volume 'OGAINW1' [ 260.091376][ T7950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.722730][ T7960] netlink: 1304 bytes leftover after parsing attributes in process `syz.1.724'. [ 262.086023][ T7996] netlink: 60 bytes leftover after parsing attributes in process `syz.2.735'. [ 262.144538][ T8003] process 'syz.3.738' launched './file0' with NULL argv: empty string added [ 262.418430][ T8015] netlink: 1304 bytes leftover after parsing attributes in process `syz.2.739'. [ 263.366471][ T8015] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 263.554705][ T4609] Bluetooth: hci0: command 0x0405 tx timeout [ 264.480924][ T5273] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 264.554200][ T5273] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 264.696153][ T8038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.750'. [ 264.794695][ T5223] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 264.987050][ T5223] usb 4-1: unable to get BOS descriptor or descriptor too short [ 265.010847][ T5223] usb 4-1: not running at top speed; connect to a high speed hub [ 265.034975][ T5223] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 265.057133][ T5223] usb 4-1: language id specifier not provided by device, defaulting to English [ 265.081259][ T5223] usb 4-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.40 [ 265.113677][ T5223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.135550][ T5223] usb 4-1: SerialNumber: а [ 265.168184][ T5223] usb 4-1: config 0 descriptor?? [ 265.783549][ T8059] hid-generic 0000:0000:0000.000C: pid 8059 passed too large report [ 267.473098][ T5267] usb 4-1: USB disconnect, device number 21 [ 268.723037][ T8082] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 268.731414][ T8082] ALSA: mixer_oss: invalid OSS volume 'OGAINW1' [ 268.739420][ T8082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.641258][ T8105] syz.0.771 uses old SIOCAX25GETINFO [ 269.823909][ T5376] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 270.076696][ T5376] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.314264][ T5223] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 270.503516][ T5376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 270.653516][ T5376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 270.669201][ T5376] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.689184][ T5376] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.699170][ T5376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.727680][ T5376] usb 5-1: config 0 descriptor?? [ 270.837616][ T5223] usb 3-1: not running at top speed; connect to a high speed hub [ 270.868926][ T5223] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 270.908757][ T5223] usb 3-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.949912][ T5223] usb 3-1: config 1 interface 0 has no altsetting 0 [ 270.963103][ T5223] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 270.972608][ T5223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.983401][ T5223] usb 3-1: Product: 㠊 [ 270.990130][ T5223] usb 3-1: Manufacturer: ࠧ [ 270.999727][ T5223] usb 3-1: SerialNumber: syz [ 271.013023][ T8112] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 271.020983][ T8112] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 271.158305][ T5376] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 271.173902][ T5376] plantronics 0003:047F:FFFF.000D: unbalanced collection at end of report description [ 271.189538][ T5376] plantronics 0003:047F:FFFF.000D: parse failed [ 271.196848][ T5376] plantronics 0003:047F:FFFF.000D: probe with driver plantronics failed with error -22 [ 271.298830][ T8109] netlink: 'syz.2.773': attribute type 5 has an invalid length. [ 271.371883][ T5269] usb 5-1: USB disconnect, device number 19 [ 271.475951][ T5223] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 271.529242][ T5223] usb 3-1: USB disconnect, device number 14 [ 271.557705][ T5223] usblp0: removed [ 272.664001][ T5376] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 272.877271][ T5376] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.906186][ T5376] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 272.942702][ T5376] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.952290][ T5376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.976094][ T5376] usb 1-1: Product: syz [ 272.980610][ T5376] usb 1-1: Manufacturer: syz [ 272.987467][ T5376] usb 1-1: SerialNumber: syz [ 273.220011][ T8151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 273.697098][ T5376] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 273.711594][ T5376] cdc_ncm 1-1:1.0: bind() failure [ 273.761484][ T5376] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 273.810331][ T5376] cdc_ncm 1-1:1.1: bind() failure [ 273.833931][ T5376] usb 1-1: USB disconnect, device number 11 [ 274.474056][ T5376] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 274.693878][ T5376] usb 4-1: Using ep0 maxpacket: 16 [ 274.712342][ T5376] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 274.761653][ T5376] usb 4-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 274.793492][ T5376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.842690][ T5376] usb 4-1: config 0 descriptor?? [ 274.902065][ T5376] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 274.983711][ T4609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.995195][ T4609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.005728][ T4609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.033180][ T4609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.048622][ T4609] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.058145][ T4609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.059417][ T3033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 275.136364][ T3033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.325550][ T4609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.329457][ T4609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.351846][ T4609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.363040][ T4609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.372767][ T4609] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.373303][ T4609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.377469][ T8186] batadv0: entered promiscuous mode [ 275.402476][ T8186] vlan2: entered promiscuous mode [ 275.413552][ T8186] vlan2: entered allmulticast mode [ 275.420544][ T8186] batadv0: entered allmulticast mode [ 275.440558][ T8186] batadv0: left allmulticast mode [ 275.440786][ T8186] batadv0: left promiscuous mode [ 275.572035][ T3033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 275.596002][ T5269] usb 4-1: USB disconnect, device number 22 [ 275.603240][ T3033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.743616][ T3033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 275.754404][ T3033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.875255][ T3033] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 275.901849][ T3033] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.982255][ T3033] bridge_slave_1: left allmulticast mode [ 277.009451][ T3033] bridge_slave_1: left promiscuous mode [ 277.026031][ T3033] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.037899][ T3033] bridge_slave_0: left allmulticast mode [ 277.043613][ T3033] bridge_slave_0: left promiscuous mode [ 277.049746][ T3033] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.134886][ T4609] Bluetooth: hci1: command tx timeout [ 277.409399][ T5223] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 277.453960][ T4609] Bluetooth: hci5: command tx timeout [ 277.609305][ T5223] usb 1-1: Using ep0 maxpacket: 16 [ 277.625933][ T5223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 277.649716][ T5223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 277.663298][ T3033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.674878][ T3033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.693678][ T5223] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 277.706767][ T3033] bond0 (unregistering): Released all slaves [ 277.751580][ T5223] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff51, bcdDevice=a9.fa [ 277.772954][ T5223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.789302][ T8182] chnl_net:caif_netlink_parms(): no params data found [ 277.792859][ T5223] usb 1-1: Product: syz [ 277.800822][ T5223] usb 1-1: Manufacturer: syz [ 277.818705][ T5223] usb 1-1: SerialNumber: syz [ 278.005485][ T5223] usb 1-1: config 0 descriptor?? [ 278.258151][ T5223] option 1-1:0.0: GSM modem (1-port) converter detected [ 278.871668][ T3033] tipc: Disabling bearer [ 278.884007][ T5223] usb 1-1: USB disconnect, device number 12 [ 278.899712][ T5223] option 1-1:0.0: device disconnected [ 278.925230][ T3033] tipc: Left network mode [ 278.929433][ T8187] chnl_net:caif_netlink_parms(): no params data found [ 278.981615][ T8225] VFS: could not find a valid V7 on nullb0. [ 279.149001][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.156816][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.178048][ T8182] bridge_slave_0: entered allmulticast mode [ 279.228629][ T5227] Bluetooth: hci1: command tx timeout [ 279.296411][ T8182] bridge_slave_0: entered promiscuous mode [ 279.534335][ T4609] Bluetooth: hci5: command tx timeout [ 279.851616][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.870665][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.884804][ T8182] bridge_slave_1: entered allmulticast mode [ 279.895413][ T8182] bridge_slave_1: entered promiscuous mode [ 279.932083][ T8240] input: syz0 as /devices/virtual/input/input23 [ 279.974385][ T5267] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 280.142183][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.151743][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.159790][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.167746][ T8187] bridge_slave_0: entered allmulticast mode [ 280.179921][ T8187] bridge_slave_0: entered promiscuous mode [ 280.189808][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.200238][ T5267] usb 5-1: Using ep0 maxpacket: 16 [ 280.212160][ T5267] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 280.217908][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.232980][ T5267] usb 5-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 280.240201][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.243326][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.250058][ T8187] bridge_slave_1: entered allmulticast mode [ 280.268023][ T8187] bridge_slave_1: entered promiscuous mode [ 280.271495][ T5267] usb 5-1: config 0 descriptor?? [ 280.291046][ T5267] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 280.334310][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 280.347149][ T8187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.385808][ T8187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.413927][ T8182] team0: Port device team_slave_0 added [ 280.414127][ T5270] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 280.430614][ T8182] team0: Port device team_slave_1 added [ 280.461961][ T3033] hsr_slave_0: left promiscuous mode [ 280.468081][ T3033] hsr_slave_1: left promiscuous mode [ 280.474210][ T3033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.481626][ T3033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.496882][ T3033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.506861][ T3033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.528852][ T25] usb 1-1: config index 0 descriptor too short (expected 106, got 36) [ 280.533066][ T3033] veth1_macvtap: left promiscuous mode [ 280.542942][ T3033] veth0_macvtap: left promiscuous mode [ 280.545632][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.552107][ T3033] veth1_vlan: left promiscuous mode [ 280.559959][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.571889][ T3033] veth0_vlan: left promiscuous mode [ 280.574698][ T25] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 280.591376][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.615628][ T5270] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 280.615663][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 280.615689][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 280.615710][ T5270] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.615749][ T5270] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.615772][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.618125][ T5270] usb 4-1: config 0 descriptor?? [ 280.623049][ T25] usb 1-1: config 0 descriptor?? [ 281.061625][ T5270] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 281.074171][ T25] corsair 0003:1B1C:1B3E.000E: failed to start in urb: -90 [ 281.083381][ T5270] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 281.091965][ T25] corsair 0003:1B1C:1B3E.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 281.114689][ T5270] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 281.294085][ T4609] Bluetooth: hci1: command tx timeout [ 281.298815][ T3033] team0 (unregistering): Port device team_slave_1 removed [ 281.324710][ T8243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.333641][ T8243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.339997][ T5270] usb 4-1: USB disconnect, device number 23 [ 281.362835][ T25] usb 1-1: USB disconnect, device number 13 [ 281.391112][ T3033] team0 (unregistering): Port device team_slave_0 removed [ 281.626453][ T4609] Bluetooth: hci5: command tx timeout [ 281.842702][ T8187] team0: Port device team_slave_0 added [ 281.857708][ T8187] team0: Port device team_slave_1 added [ 281.970130][ T8248] batadv0: entered promiscuous mode [ 281.984179][ T8248] vlan2: entered promiscuous mode [ 282.004051][ T8248] vlan2: entered allmulticast mode [ 282.009501][ T8248] batadv0: entered allmulticast mode [ 282.031158][ T8248] batadv0: left allmulticast mode [ 282.046361][ T8248] batadv0: left promiscuous mode [ 282.157138][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.173142][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.223519][ T5223] usb 5-1: USB disconnect, device number 20 [ 282.247669][ T8182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.296563][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.352182][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.403340][ T8187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.460775][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.479784][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.548333][ T8182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.577101][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.594347][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.674137][ T8187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.854114][ T8182] hsr_slave_0: entered promiscuous mode [ 282.882067][ T8182] hsr_slave_1: entered promiscuous mode [ 282.898342][ T8182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.933940][ T8182] Cannot create hsr debugfs directory [ 283.009034][ T8267] netlink: 188 bytes leftover after parsing attributes in process `syz.4.819'. [ 283.024012][ T8267] netlink: 56 bytes leftover after parsing attributes in process `syz.4.819'. [ 283.815814][ T5227] Bluetooth: hci5: command tx timeout [ 283.821272][ T4609] Bluetooth: hci1: command tx timeout [ 283.865798][ T8187] hsr_slave_0: entered promiscuous mode [ 283.902857][ T8187] hsr_slave_1: entered promiscuous mode [ 283.915490][ T8187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.933008][ T8187] Cannot create hsr debugfs directory [ 284.204161][ T5223] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 284.405845][ T5223] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.421242][ T5223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 284.432924][ T5348] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 284.441178][ T5223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 284.451623][ T5223] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.469449][ T5223] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.486297][ T5223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.498037][ T5223] usb 5-1: config 0 descriptor?? [ 284.656325][ T5348] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.687094][ T5348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 284.714382][ T8187] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 284.726099][ T5348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 284.740707][ T8187] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.751376][ T5348] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.774629][ T5348] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.784049][ T8182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 284.794366][ T5348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.820553][ T8182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 284.840958][ T5348] usb 4-1: config 0 descriptor?? [ 284.856766][ T8182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 284.932196][ T5223] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 284.941751][ T8187] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 284.952818][ T5223] plantronics 0003:047F:FFFF.0010: unbalanced collection at end of report description [ 284.962621][ T8187] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.963447][ T5223] plantronics 0003:047F:FFFF.0010: parse failed [ 284.984138][ T5223] plantronics 0003:047F:FFFF.0010: probe with driver plantronics failed with error -22 [ 285.016588][ T8182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 285.180237][ T8187] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 285.203908][ T8187] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.231040][ T5223] usb 5-1: USB disconnect, device number 21 [ 285.313094][ T5348] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 285.327462][ T8187] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 285.338545][ T5348] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 285.349692][ T8187] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.362430][ T5348] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 285.419013][ T8182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.465697][ T8182] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.520605][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.527952][ T5223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.577394][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.584577][ T5223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.630170][ T5269] usb 4-1: USB disconnect, device number 24 [ 285.761898][ T8187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 285.798831][ T8187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 285.816031][ T8187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 285.878209][ T8187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 286.103986][ T8187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.183704][ T8187] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.216056][ T8182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.240037][ T8291] netlink: 256 bytes leftover after parsing attributes in process `syz.4.826'. [ 286.263366][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.270575][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.352490][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.359719][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.381555][ T8296] netlink: 'syz.0.829': attribute type 10 has an invalid length. [ 286.409357][ T8296] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.432619][ T8296] bond0: (slave team0): Enslaving as an active interface with an up link [ 286.458674][ T8300] netlink: 'syz.0.829': attribute type 10 has an invalid length. [ 286.468639][ T8300] bond0: (slave team0): Releasing backup interface [ 286.489679][ T8300] bridge0: port 3(team0) entered blocking state [ 286.537797][ T8300] bridge0: port 3(team0) entered disabled state [ 286.572142][ T8300] team0: entered allmulticast mode [ 286.595726][ T8300] team_slave_0: entered allmulticast mode [ 286.614272][ T8307] netlink: 188 bytes leftover after parsing attributes in process `syz.3.833'. [ 286.623472][ T8300] team_slave_1: entered allmulticast mode [ 286.629486][ T8307] netlink: 56 bytes leftover after parsing attributes in process `syz.3.833'. [ 286.653413][ T8300] team0: entered promiscuous mode [ 286.668832][ T8300] team_slave_0: entered promiscuous mode [ 286.689031][ T8300] team_slave_1: entered promiscuous mode [ 286.760993][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.862364][ T8309] bridge_slave_1: left allmulticast mode [ 286.871079][ T8309] bridge_slave_1: left promiscuous mode [ 286.880806][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.958160][ T8182] veth0_vlan: entered promiscuous mode [ 287.050354][ T8182] veth1_vlan: entered promiscuous mode [ 287.177070][ T8182] veth0_macvtap: entered promiscuous mode [ 287.208805][ T8182] veth1_macvtap: entered promiscuous mode [ 287.347308][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.387168][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.400703][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.430676][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.443328][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.461974][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.474808][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.494020][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.505670][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.548616][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.574019][ T5269] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 287.578572][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.593855][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.614657][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.627682][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.638955][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.652205][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.663078][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.678911][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.704434][ T8323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.729514][ T8182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.754077][ T8182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.763916][ T8182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.778109][ T8182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.795316][ T5269] usb 4-1: not running at top speed; connect to a high speed hub [ 287.828084][ T5269] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 287.856720][ T8187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.863648][ T5269] usb 4-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.923005][ T5269] usb 4-1: config 1 interface 0 has no altsetting 0 [ 287.968574][ T5269] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 288.030414][ T5269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.080309][ T5269] usb 4-1: Product: 㠊 [ 288.092245][ T5269] usb 4-1: Manufacturer: ࠧ [ 288.113706][ T5269] usb 4-1: SerialNumber: syz [ 288.143029][ T8319] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 288.155097][ T7434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.170931][ T8319] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 288.178722][ T7434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.326836][ T8187] veth0_vlan: entered promiscuous mode [ 288.463629][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.485586][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.510678][ T8187] veth1_vlan: entered promiscuous mode [ 288.692224][ T8316] netlink: 'syz.3.836': attribute type 5 has an invalid length. [ 288.749602][ T8187] veth0_macvtap: entered promiscuous mode [ 288.807289][ T8187] veth1_macvtap: entered promiscuous mode [ 289.113901][ T8340] sctp: [Deprecated]: syz.0.841 (pid 8340) Use of int in maxseg socket option. [ 289.113901][ T8340] Use struct sctp_assoc_value instead [ 289.186070][ T8340] xt_CONNSECMARK: invalid mode: 0 [ 289.505466][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.527458][ T5269] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 289.553981][ T5269] usb 4-1: USB disconnect, device number 25 [ 289.557227][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.571918][ T5269] usblp0: removed [ 289.606171][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.618770][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.628806][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.644167][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.654156][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.664659][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.674814][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.685411][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.702721][ T8187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.722874][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.733534][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.768973][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.791019][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.814031][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.828236][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.838746][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.858705][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.873328][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.884965][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.909985][ T8187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.948658][ T8187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.966057][ T8187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.979443][ T8187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.991018][ T8187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.644401][ T58] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 290.864235][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.889432][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.914116][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 290.921618][ T58] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 290.943470][ T58] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 290.970253][ T58] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.989096][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.997315][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.004958][ T58] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.017376][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.033307][ T58] usb 1-1: Product: syz [ 291.041082][ T58] usb 1-1: SerialNumber: syz [ 291.244063][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 291.433986][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 291.461570][ T25] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 291.489040][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.503903][ T5223] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 291.522821][ T25] usb 5-1: Product: syz [ 291.544466][ T25] usb 5-1: Manufacturer: syz [ 291.553722][ T25] usb 5-1: SerialNumber: syz [ 291.581333][ T25] r8152-cfgselector 5-1: Unknown version 0x0000 [ 291.599858][ T25] r8152-cfgselector 5-1: config 0 descriptor?? [ 291.694479][ T5223] usb 2-1: Using ep0 maxpacket: 8 [ 291.710986][ T5223] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 291.720374][ T5223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.732093][ T5223] usb 2-1: config 0 descriptor?? [ 292.068142][ T25] r8152-cfgselector 5-1: Unknown version 0x0000 [ 292.113707][ T25] r8152-cfgselector 5-1: bad CDC descriptors [ 292.164021][ T5223] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 292.452584][ T5223] asix 2-1:0.0: probe with driver asix failed with error -32 [ 296.280112][ T58] usb 1-1: 0:2 : does not exist [ 296.347749][ T5223] usb 2-1: USB disconnect, device number 8 [ 296.354085][ T5348] r8152-cfgselector 5-1: USB disconnect, device number 22 [ 296.501883][ T58] usb 1-1: USB disconnect, device number 14 [ 298.749349][ T5223] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 299.173952][ T5223] usb 4-1: Using ep0 maxpacket: 8 [ 299.190041][ T5223] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 299.222373][ T5223] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 299.263098][ T5223] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.327280][ T5223] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.344498][ T5223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.358712][ T5223] usb 4-1: Product: syz [ 299.366124][ T5223] usb 4-1: SerialNumber: syz [ 299.482734][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.574719][ T8436] bridge_slave_1: left allmulticast mode [ 299.593983][ T8436] bridge_slave_1: left promiscuous mode [ 299.600458][ T8436] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.649094][ T8436] snd_dummy snd_dummy.0: control 3:0:0:syz0:0 is already present [ 300.504105][ T8361] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 301.451195][ T5223] usb 4-1: 0:2 : does not exist [ 301.519045][ T8361] usb 2-1: Using ep0 maxpacket: 8 [ 301.527099][ T8361] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 301.536910][ T8361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.586259][ T8361] usb 2-1: config 0 descriptor?? [ 301.613589][ T5223] usb 4-1: USB disconnect, device number 26 [ 301.845759][ T8361] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 301.873391][ T8361] asix 2-1:0.0: probe with driver asix failed with error -32 [ 302.204297][ T5223] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 305.597022][ T8361] usb 2-1: USB disconnect, device number 9 [ 305.664246][ T5223] usb 4-1: unable to read config index 0 descriptor/all [ 305.671347][ T5223] usb 4-1: can't read configurations, error -71 [ 305.924106][ T8497] netlink: 'syz.1.894': attribute type 27 has an invalid length. [ 305.944738][ T8497] netlink: 'syz.1.894': attribute type 3 has an invalid length. [ 305.971053][ T8497] netlink: 132 bytes leftover after parsing attributes in process `syz.1.894'. [ 306.025060][ T8502] hpfs: Bad magic ... probably not HPFS [ 308.122109][ T8528] capability: warning: `syz.1.905' uses deprecated v2 capabilities in a way that may be insecure [ 308.234394][ T8531] netlink: 'syz.4.908': attribute type 27 has an invalid length. [ 308.253158][ T8531] netlink: 'syz.4.908': attribute type 3 has an invalid length. [ 308.284124][ T8531] netlink: 132 bytes leftover after parsing attributes in process `syz.4.908'. [ 308.618061][ C0] eth0: bad gso: type: 1, size: 1408 [ 309.454303][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 309.739749][ T58] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 309.773992][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 309.781660][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 309.797473][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 309.807784][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.817918][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.119084][ C0] eth0: bad gso: type: 1, size: 1408 [ 310.581759][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 310.648804][ T8361] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 310.688507][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 310.695143][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.705223][ T58] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 310.856472][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.870328][ T58] usb 3-1: config 0 descriptor?? [ 310.878968][ T58] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state [ 310.886421][ T58] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 310.893304][ T58] dvb_usb_anysee 3-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 311.826244][ T25] usb 2-1: usb_control_msg returned -71 [ 311.831908][ T25] usbtmc 2-1:16.0: can't read capabilities [ 311.854500][ T8361] usb 4-1: Using ep0 maxpacket: 32 [ 311.865343][ T8361] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 311.906474][ T8361] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 312.025142][ T25] usb 2-1: USB disconnect, device number 10 [ 312.062833][ T8361] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 312.078742][ T8361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 312.090576][ T8361] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 312.103318][ T8361] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 312.129498][ T8361] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 312.150400][ T8361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.180837][ T8361] usb 4-1: config 0 descriptor?? [ 312.313581][ T58] usb 3-1: USB disconnect, device number 15 [ 312.597949][ T8361] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 312.638563][ T8563] ip6gretap0 speed is unknown, defaulting to 1000 [ 312.650073][ T8361] usb 4-1: USB disconnect, device number 29 [ 312.694642][ T8563] ip6gretap0 speed is unknown, defaulting to 1000 [ 312.718813][ T8361] usblp0: removed [ 312.829682][ T8563] ip6gretap0 speed is unknown, defaulting to 1000 [ 312.931552][ T8563] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 312.992493][ T8563] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 313.082190][ T8563] ip6gretap0 speed is unknown, defaulting to 1000 [ 313.095617][ T8563] ip6gretap0 speed is unknown, defaulting to 1000 [ 313.126977][ T8563] ip6gretap0 speed is unknown, defaulting to 1000 [ 313.156136][ T8563] ip6gretap0 speed is unknown, defaulting to 1000 [ 313.172607][ T8563] ip6gretap0 speed is unknown, defaulting to 1000 [ 313.182753][ T8563] ip6gretap0 speed is unknown, defaulting to 1000 [ 313.474714][ T58] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 314.084844][ T5223] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 314.446663][ T5223] usb 2-1: Using ep0 maxpacket: 8 [ 314.457873][ T5223] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 314.488622][ T5223] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 314.540361][ T5223] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.565773][ T5223] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.601653][ T5223] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.643945][ T5223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.833967][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 314.985615][ T58] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 315.055567][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.124723][ T58] usb 1-1: Product: syz [ 315.146875][ T58] usb 1-1: Manufacturer: syz [ 315.168282][ T58] usb 1-1: SerialNumber: syz [ 315.425558][ T58] r8152-cfgselector 1-1: Unknown version 0x0000 [ 315.464056][ T58] r8152-cfgselector 1-1: config 0 descriptor?? [ 315.543938][ T5223] usb 2-1: GET_CAPABILITIES returned 0 [ 315.549487][ T5223] usbtmc 2-1:16.0: can't read capabilities [ 315.776461][ T25] usb 2-1: USB disconnect, device number 11 [ 315.777537][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.936'. [ 315.793529][ T8625] netlink: 'syz.4.936': attribute type 2 has an invalid length. [ 315.802119][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.936'. [ 316.044665][ T58] r8152-cfgselector 1-1: Unknown version 0x0000 [ 316.080208][ T58] r8152-cfgselector 1-1: bad CDC descriptors [ 316.318288][ T58] r8152-cfgselector 1-1: USB disconnect, device number 15 [ 316.337583][ T8624] nullb0: AHDI p1 [ 317.348103][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'. [ 317.584085][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 317.622572][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.629277][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.100982][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 318.125243][ T25] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 318.136068][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.146562][ T25] usb 1-1: Product: syz [ 318.150803][ T25] usb 1-1: Manufacturer: syz [ 318.156487][ T25] usb 1-1: SerialNumber: syz [ 318.163526][ T25] usb 1-1: config 0 descriptor?? [ 318.172837][ T25] gspca_main: sq930x-2.14.0 probing 2770:930c [ 318.407555][ T8651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.448851][ T8651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.524513][ T25] gspca_sq930x: reg_r 001f failed -71 [ 318.530007][ T25] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 318.564288][ T25] usb 1-1: USB disconnect, device number 16 [ 318.631680][ C0] eth0: bad gso: type: 1, size: 1408 [ 319.044293][ T5273] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 319.440172][ T8664] ALSA: mixer_oss: invalid OSS volume 'D n*@\%΂`.%plÄ/Დ' [ 319.692781][ T8687] binder: 8686:8687 ioctl 1 20001200 returned -22 [ 319.853916][ T5273] usb 3-1: Using ep0 maxpacket: 8 [ 319.866507][ T5273] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 319.880944][ T5273] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 319.891562][ T5273] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.915234][ T5273] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.930255][ T8702] netlink: 224 bytes leftover after parsing attributes in process `syz.4.962'. [ 319.933976][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.953040][ T5273] usb 3-1: Product: syz [ 319.957310][ T5273] usb 3-1: SerialNumber: syz [ 320.905089][ T5223] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 321.363061][ T5223] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.408917][ T5223] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.574094][ T5273] usb 3-1: 0:2 : does not exist [ 321.597724][ T5223] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 321.636726][ T5273] usb 3-1: USB disconnect, device number 16 [ 321.646621][ T5223] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 321.670266][ T5223] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 321.684669][ T5223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.708457][ T5223] usb 2-1: Product: syz [ 321.718565][ T5223] usb 2-1: Manufacturer: syz [ 321.728721][ T5223] usb 2-1: SerialNumber: syz [ 321.754805][ T5223] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 321.763968][ T5223] cdc_ncm 2-1:1.0: bind() failure [ 321.774086][ T8723] netlink: 'syz.3.969': attribute type 27 has an invalid length. [ 321.786680][ T5223] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 321.804283][ T5223] cdc_ncm 2-1:1.1: bind() failure [ 321.984376][ T8734] ip6gretap0 speed is unknown, defaulting to 1000 [ 322.004055][ T55] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 322.173040][ T8740] netlink: 224 bytes leftover after parsing attributes in process `syz.3.975'. [ 322.201234][ T55] usb 1-1: Using ep0 maxpacket: 8 [ 322.285713][ T55] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 322.323108][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.347619][ T55] usb 1-1: Product: syz [ 322.351839][ T55] usb 1-1: Manufacturer: syz [ 322.375569][ T55] usb 1-1: SerialNumber: syz [ 322.525991][ T55] usb 1-1: config 0 descriptor?? [ 322.534564][ T55] gspca_main: sq930x-2.14.0 probing 2770:930c [ 322.872249][ T8746] hub 9-0:1.0: USB hub found [ 322.880705][ T8746] hub 9-0:1.0: 8 ports detected [ 323.214935][ T8731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.223683][ T55] gspca_sq930x: reg_r 001f failed -110 [ 323.238798][ T55] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 323.251245][ T8731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.494453][ T5376] usb 1-1: USB disconnect, device number 17 [ 323.614995][ T55] usb 2-1: USB disconnect, device number 12 [ 324.051027][ T8755] ALSA: mixer_oss: invalid OSS volume 'D n*@\%΂`.%plÄ/Დ' [ 325.471555][ C1] sd 0:0:1:0: [sda] tag#4839 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 325.482091][ C1] sd 0:0:1:0: [sda] tag#4839 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 326.296943][ T8790] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 326.307547][ T8790] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 326.323200][ T8790] Error parsing options; rc = [-22] [ 326.414344][ T58] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 326.517482][ T55] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 326.615668][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 326.670645][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.681751][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.692806][ T58] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 326.703513][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.723274][ T58] usb 5-1: config 0 descriptor?? [ 326.757607][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.794791][ T55] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 326.804181][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.818233][ T55] usb 1-1: config 0 descriptor?? [ 327.204858][ T58] savu 0003:1E7D:2D5A.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 327.328460][ T55] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 327.373006][ T55] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0013/input/input25 [ 327.540558][ C1] sd 0:0:1:0: [sda] tag#4848 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 327.550993][ C1] sd 0:0:1:0: [sda] tag#4848 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 328.136305][ T29] audit: type=1326 audit(1722251404.403:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8778 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdb777299 code=0x7ffc0000 [ 328.142201][ T5376] usb 5-1: USB disconnect, device number 23 [ 328.201711][ T8809] ip6gretap0 speed is unknown, defaulting to 1000 [ 328.211847][ T29] audit: type=1326 audit(1722251404.403:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8778 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdb777299 code=0x7ffc0000 [ 328.231929][ T55] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 328.233150][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.261350][ T29] audit: type=1326 audit(1722251404.433:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8778 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2cdb777299 code=0x7ffc0000 [ 328.282526][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.291136][ T29] audit: type=1326 audit(1722251404.433:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8778 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdb777299 code=0x7ffc0000 [ 328.359264][ T29] audit: type=1326 audit(1722251404.443:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8778 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdb777299 code=0x7ffc0000 [ 328.380800][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.409696][ T29] audit: type=1326 audit(1722251404.453:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8803 comm="syz.2.995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0ed577299 code=0x0 [ 328.430760][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.442899][ T29] audit: type=1326 audit(1722251404.463:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8778 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2cdb777299 code=0x7ffc0000 [ 328.464290][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.470907][ T29] audit: type=1326 audit(1722251404.473:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8778 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdb777299 code=0x7ffc0000 [ 328.513302][ T29] audit: type=1326 audit(1722251404.513:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8778 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdb777299 code=0x7ffc0000 [ 328.535156][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.562094][ T29] audit: type=1326 audit(1722251404.553:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8778 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2cdb777299 code=0x7ffc0000 [ 328.583506][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.242922][ T8827] xt_l2tp: missing protocol rule (udp|l2tpip) [ 330.316715][ T9] usb 1-1: USB disconnect, device number 18 [ 330.654906][ T8842] siw: device registration error -23 [ 330.925915][ T8849] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1009'. [ 331.016191][ T8849] netlink: 'syz.3.1009': attribute type 17 has an invalid length. [ 331.037803][ T8849] lo: entered promiscuous mode [ 331.142889][ T8846] lo: left promiscuous mode [ 331.658855][ C0] eth0: bad gso: type: 1, size: 1408 [ 333.910668][ T8880] block device autoloading is deprecated and will be removed. [ 333.922908][ T8880] syz.3.1022: attempt to access beyond end of device [ 333.922908][ T8880] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 335.500340][ T5273] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 335.614113][ T8897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1028'. [ 335.814507][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 335.814526][ T29] audit: type=1326 audit(1722251412.083:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.3.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708cb77299 code=0x7ffc0000 [ 335.894757][ T5273] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 335.913898][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.923122][ T29] audit: type=1326 audit(1722251412.083:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.3.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708cb77299 code=0x7ffc0000 [ 336.111114][ T29] audit: type=1326 audit(1722251412.083:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.3.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f708cb77299 code=0x7ffc0000 [ 336.173412][ T5273] usb 3-1: Product: syz [ 336.835584][ T8906] syzkaller0: refused to change device tx_queue_len [ 336.852180][ T5273] usb 3-1: Manufacturer: syz [ 336.874003][ T29] audit: type=1326 audit(1722251412.083:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.3.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708cb77299 code=0x7ffc0000 [ 336.898221][ T5273] usb 3-1: SerialNumber: syz [ 337.044955][ T5273] usb 3-1: config 0 descriptor?? [ 337.119633][ T29] audit: type=1326 audit(1722251412.083:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.3.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f708cb77299 code=0x7ffc0000 [ 337.180643][ T29] audit: type=1326 audit(1722251412.083:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.3.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708cb77299 code=0x7ffc0000 [ 337.203971][ T29] audit: type=1326 audit(1722251412.083:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.3.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708cb77299 code=0x7ffc0000 [ 337.206227][ T5273] usb 3-1: can't set config #0, error -71 [ 337.237715][ T29] audit: type=1326 audit(1722251412.083:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.3.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f708cb77299 code=0x7ffc0000 [ 337.263505][ T5273] usb 3-1: USB disconnect, device number 17 [ 337.277264][ T29] audit: type=1326 audit(1722251412.083:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.3.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708cb77299 code=0x7ffc0000 [ 337.310082][ T29] audit: type=1326 audit(1722251412.083:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.3.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f708cb77299 code=0x7ffc0000 [ 338.724080][ T5273] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 339.716865][ T5273] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.727353][ T5273] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 339.745906][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.757161][ T5273] usb 1-1: config 0 descriptor?? [ 339.778208][ T5273] option 1-1:0.0: GSM modem (1-port) converter detected [ 340.012452][ T8361] usb 1-1: USB disconnect, device number 19 [ 340.020166][ T8361] option 1-1:0.0: device disconnected [ 342.719415][ T9009] rdma_op ffff88801d2c81f0 conn xmit_rdma 0000000000000000 [ 343.804112][ T5223] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 344.015632][ T5223] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.054164][ T5223] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 344.083902][ T5223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.116476][ T5223] usb 5-1: config 0 descriptor?? [ 344.124867][ T5223] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 344.232658][ C0] eth0: bad gso: type: 1, size: 1408 [ 344.238079][ C0] ================================================================== [ 344.246307][ C0] BUG: KASAN: slab-use-after-free in bq_xmit_all+0x134/0x11d0 [ 344.253759][ C0] Read of size 8 at addr ffff88801fe70650 by task syz.1.1074/9025 [ 344.261560][ C0] [ 344.263882][ C0] CPU: 0 UID: 0 PID: 9025 Comm: syz.1.1074 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 344.274544][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 344.284581][ C0] Call Trace: [ 344.287848][ C0] [ 344.290678][ C0] dump_stack_lvl+0x241/0x360 [ 344.295359][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.300667][ C0] ? __pfx__printk+0x10/0x10 [ 344.305249][ C0] ? _printk+0xd5/0x120 [ 344.309395][ C0] ? __virt_addr_valid+0x183/0x530 [ 344.314486][ C0] ? __virt_addr_valid+0x183/0x530 [ 344.319578][ C0] print_report+0x169/0x550 [ 344.324064][ C0] ? __virt_addr_valid+0x183/0x530 [ 344.329153][ C0] ? __virt_addr_valid+0x183/0x530 [ 344.334247][ C0] ? __virt_addr_valid+0x45f/0x530 [ 344.339342][ C0] ? __phys_addr+0xba/0x170 [ 344.343833][ C0] ? bq_xmit_all+0x134/0x11d0 [ 344.348582][ C0] kasan_report+0x143/0x180 [ 344.353072][ C0] ? bq_xmit_all+0x134/0x11d0 [ 344.357731][ C0] bq_xmit_all+0x134/0x11d0 [ 344.362235][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 344.367331][ C0] ? __pfx_bq_xmit_all+0x10/0x10 [ 344.372253][ C0] ? __pfx_lock_release+0x10/0x10 [ 344.377283][ C0] ? trace_napi_poll_hit+0x51/0x3e0 [ 344.382481][ C0] __dev_flush+0x81/0x160 [ 344.386796][ C0] xdp_do_check_flushed+0x129/0x240 [ 344.391981][ C0] __napi_poll+0xe4/0x490 [ 344.396424][ C0] net_rx_action+0x89b/0x1240 [ 344.401100][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 344.406196][ C0] ? sched_clock+0x4a/0x70 [ 344.410601][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 344.417003][ C0] handle_softirqs+0x2c4/0x970 [ 344.421755][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 344.426499][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 344.431798][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 344.436981][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 344.441644][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 344.446850][ C0] irq_exit_rcu+0x9/0x30 [ 344.451107][ C0] common_interrupt+0xaa/0xd0 [ 344.455769][ C0] [ 344.458680][ C0] [ 344.461593][ C0] asm_common_interrupt+0x26/0x40 [ 344.466703][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x2f/0x90 [ 344.473539][ C0] Code: 8b 04 24 65 48 8b 14 25 00 d7 03 00 65 8b 05 30 50 70 7e a9 00 01 ff 00 74 10 a9 00 01 00 00 74 5b 83 ba 1c 16 00 00 00 74 52 <8b> 82 f8 15 00 00 83 f8 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc [ 344.493148][ C0] RSP: 0018:ffffc900116beec0 EFLAGS: 00000246 [ 344.499205][ C0] RAX: 0000000080000001 RBX: 0000000000000001 RCX: ffff8880187bbc00 [ 344.507175][ C0] RDX: ffff8880187bbc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 344.515308][ C0] RBP: ffffc900116b8000 R08: ffffffff81411960 R09: ffffffff81411746 [ 344.523270][ C0] R10: 0000000000000003 R11: ffff8880187bbc00 R12: 1ffff920022d7df6 [ 344.531226][ C0] R13: dffffc0000000000 R14: 1ffff920022d7df5 R15: ffffc900116c0000 [ 344.539186][ C0] ? unwind_next_frame+0xff6/0x2a00 [ 344.544399][ C0] ? unwind_next_frame+0x1210/0x2a00 [ 344.549685][ C0] unwind_next_frame+0x1210/0x2a00 [ 344.554876][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.560935][ C0] ? __kernel_text_address+0xd/0x40 [ 344.566118][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.572179][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 344.578320][ C0] arch_stack_walk+0x151/0x1b0 [ 344.583073][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.589135][ C0] stack_trace_save+0x118/0x1d0 [ 344.593985][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 344.599355][ C0] save_stack+0xfb/0x1f0 [ 344.603591][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 344.608608][ C0] ? __pfx_save_stack+0x10/0x10 [ 344.613447][ C0] ? free_unref_folios+0x100f/0x1ac0 [ 344.618718][ C0] ? folios_put_refs+0x76e/0x860 [ 344.623637][ C0] ? free_pages_and_swap_cache+0x5c8/0x690 [ 344.629436][ C0] ? tlb_flush_mmu+0x3a3/0x680 [ 344.634187][ C0] ? tlb_finish_mmu+0xd4/0x200 [ 344.638935][ C0] ? exit_mmap+0x44f/0xc80 [ 344.643398][ C0] ? __mmput+0x115/0x380 [ 344.647630][ C0] ? exit_mm+0x220/0x310 [ 344.651857][ C0] ? do_exit+0x9b2/0x27f0 [ 344.656168][ C0] ? do_group_exit+0x207/0x2c0 [ 344.661033][ C0] ? get_signal+0x1695/0x1730 [ 344.665707][ C0] ? arch_do_signal_or_restart+0x96/0x860 [ 344.671418][ C0] ? syscall_exit_to_user_mode+0xc9/0x370 [ 344.677125][ C0] ? do_syscall_64+0x100/0x230 [ 344.681878][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.687978][ C0] ? page_ext_get+0x20/0x2a0 [ 344.692562][ C0] __reset_page_owner+0x75/0x3f0 [ 344.697498][ C0] free_unref_folios+0x100f/0x1ac0 [ 344.702605][ C0] folios_put_refs+0x76e/0x860 [ 344.707368][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 344.712729][ C0] ? free_swap_cache+0xb3/0x880 [ 344.717570][ C0] free_pages_and_swap_cache+0x5c8/0x690 [ 344.723199][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 344.729442][ C0] ? tlb_table_flush+0x143/0x410 [ 344.734492][ C0] tlb_flush_mmu+0x3a3/0x680 [ 344.739195][ C0] ? __pfx_down_write+0x10/0x10 [ 344.744060][ C0] tlb_finish_mmu+0xd4/0x200 [ 344.748648][ C0] exit_mmap+0x44f/0xc80 [ 344.752884][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 344.757638][ C0] ? __asan_memset+0x23/0x50 [ 344.762239][ C0] ? uprobe_clear_state+0x277/0x290 [ 344.767442][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 344.772746][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 344.777938][ C0] __mmput+0x115/0x380 [ 344.782011][ C0] exit_mm+0x220/0x310 [ 344.786068][ C0] ? __pfx_exit_mm+0x10/0x10 [ 344.790685][ C0] ? taskstats_exit+0x326/0xa60 [ 344.795533][ C0] do_exit+0x9b2/0x27f0 [ 344.799684][ C0] ? __pfx_do_exit+0x10/0x10 [ 344.804260][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 344.809641][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 344.815817][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 344.824254][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 344.829371][ C0] do_group_exit+0x207/0x2c0 [ 344.833966][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 344.839167][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 344.844358][ C0] get_signal+0x1695/0x1730 [ 344.848890][ C0] ? __pfx_get_signal+0x10/0x10 [ 344.853855][ C0] arch_do_signal_or_restart+0x96/0x860 [ 344.859425][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 344.865600][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 344.871599][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 344.877337][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 344.882965][ C0] do_syscall_64+0x100/0x230 [ 344.887552][ C0] ? clear_bhb_loop+0x35/0x90 [ 344.892223][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.898108][ C0] RIP: 0033:0x7f1cd1977299 [ 344.902523][ C0] Code: Unable to access opcode bytes at 0x7f1cd197726f. [ 344.909524][ C0] RSP: 002b:00007f1cd26b00f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 344.917932][ C0] RAX: 0000000000000001 RBX: 00007f1cd1b05f88 RCX: 00007f1cd1977299 [ 344.925894][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1cd1b05f8c [ 344.933855][ C0] RBP: 00007f1cd1b05f80 R08: 7fffffffffffffff R09: 00007f1cd26b06c0 [ 344.941810][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1cd1b05f8c [ 344.949768][ C0] R13: 000000000000000b R14: 00007ffc808df890 R15: 00007ffc808df978 [ 344.957732][ C0] [ 344.960738][ C0] [ 344.963045][ C0] Allocated by task 5367: [ 344.967385][ C0] kasan_save_track+0x3f/0x80 [ 344.972051][ C0] __kasan_slab_alloc+0x66/0x80 [ 344.976885][ C0] kmem_cache_alloc_noprof+0x135/0x2a0 [ 344.982332][ C0] vm_area_dup+0x27/0x290 [ 344.986654][ C0] copy_mm+0xc7b/0x1f30 [ 344.990793][ C0] copy_process+0x187a/0x3dc0 [ 344.995467][ C0] kernel_clone+0x223/0x870 [ 344.999956][ C0] __x64_sys_clone+0x258/0x2a0 [ 345.004707][ C0] do_syscall_64+0xf3/0x230 [ 345.009198][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.015083][ C0] [ 345.017390][ C0] Freed by task 8761: [ 345.021348][ C0] kasan_save_track+0x3f/0x80 [ 345.026009][ C0] kasan_save_free_info+0x40/0x50 [ 345.031022][ C0] poison_slab_object+0xe0/0x150 [ 345.035940][ C0] __kasan_slab_free+0x37/0x60 [ 345.040686][ C0] kmem_cache_free+0x145/0x350 [ 345.045445][ C0] exit_mmap+0x645/0xc80 [ 345.049676][ C0] __mmput+0x115/0x380 [ 345.053735][ C0] exit_mm+0x220/0x310 [ 345.057791][ C0] do_exit+0x9b2/0x27f0 [ 345.061929][ C0] do_group_exit+0x207/0x2c0 [ 345.066498][ C0] get_signal+0x1695/0x1730 [ 345.070985][ C0] arch_do_signal_or_restart+0x96/0x860 [ 345.076520][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 345.082165][ C0] do_syscall_64+0x100/0x230 [ 345.086749][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.092637][ C0] [ 345.094946][ C0] The buggy address belongs to the object at ffff88801fe705d0 [ 345.094946][ C0] which belongs to the cache vm_area_struct of size 184 [ 345.109245][ C0] The buggy address is located 128 bytes inside of [ 345.109245][ C0] freed 184-byte region [ffff88801fe705d0, ffff88801fe70688) [ 345.123027][ C0] [ 345.125339][ C0] The buggy address belongs to the physical page: [ 345.131826][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fe70 [ 345.140572][ C0] memcg:ffff888025dd1c01 [ 345.144795][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 345.151895][ C0] page_type: 0xfdffffff(slab) [ 345.156651][ C0] raw: 00fff00000000000 ffff8880162fdb40 ffffea0000b361c0 dead00000000000c [ 345.165222][ C0] raw: 0000000000000000 0000000000100010 00000001fdffffff ffff888025dd1c01 [ 345.173785][ C0] page dumped because: kasan: bad access detected [ 345.180187][ C0] page_owner tracks the page as allocated [ 345.185882][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5580, tgid 5580 (dhcpcd-run-hook), ts 90626591860, free_ts 90591737482 [ 345.205315][ C0] post_alloc_hook+0x1f3/0x230 [ 345.210072][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 345.215694][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 345.220884][ C0] alloc_slab_page+0x5f/0x120 [ 345.225556][ C0] allocate_slab+0x5a/0x2f0 [ 345.230045][ C0] ___slab_alloc+0xcd1/0x14b0 [ 345.234704][ C0] __slab_alloc+0x58/0xa0 [ 345.239024][ C0] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 345.244472][ C0] vm_area_alloc+0x24/0x1d0 [ 345.248962][ C0] mmap_region+0xc3d/0x2090 [ 345.253449][ C0] do_mmap+0x8f9/0x1010 [ 345.257590][ C0] vm_mmap_pgoff+0x1dd/0x3d0 [ 345.262260][ C0] do_syscall_64+0xf3/0x230 [ 345.266754][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.272724][ C0] page last free pid 5572 tgid 5570 stack trace: [ 345.279034][ C0] free_unref_folios+0x100f/0x1ac0 [ 345.284131][ C0] folios_put_refs+0x76e/0x860 [ 345.288969][ C0] free_pages_and_swap_cache+0x5c8/0x690 [ 345.294588][ C0] tlb_flush_mmu+0x3a3/0x680 [ 345.299164][ C0] tlb_finish_mmu+0xd4/0x200 [ 345.303736][ C0] exit_mmap+0x44f/0xc80 [ 345.307977][ C0] __mmput+0x115/0x380 [ 345.312035][ C0] exit_mm+0x220/0x310 [ 345.316088][ C0] do_exit+0x9b2/0x27f0 [ 345.320231][ C0] do_group_exit+0x207/0x2c0 [ 345.324820][ C0] get_signal+0x1695/0x1730 [ 345.329311][ C0] arch_do_signal_or_restart+0x96/0x860 [ 345.334849][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 345.340384][ C0] do_syscall_64+0x100/0x230 [ 345.344967][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.350854][ C0] [ 345.353164][ C0] Memory state around the buggy address: [ 345.358778][ C0] ffff88801fe70500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 345.366825][ C0] ffff88801fe70580: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 345.375042][ C0] >ffff88801fe70600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 345.383085][ C0] ^ [ 345.389910][ C0] ffff88801fe70680: fb fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 [ 345.397954][ C0] ffff88801fe70700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.405996][ C0] ================================================================== [ 345.414149][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 345.421360][ C0] CPU: 0 UID: 0 PID: 9025 Comm: syz.1.1074 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 345.432062][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 345.442143][ C0] Call Trace: [ 345.445440][ C0] [ 345.448302][ C0] dump_stack_lvl+0x241/0x360 [ 345.453005][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.458194][ C0] ? __pfx__printk+0x10/0x10 [ 345.462775][ C0] ? vscnprintf+0x5d/0x90 [ 345.467100][ C0] panic+0x349/0x860 [ 345.471000][ C0] ? check_panic_on_warn+0x21/0xb0 [ 345.476098][ C0] ? __pfx_panic+0x10/0x10 [ 345.480502][ C0] ? mark_lock+0x9a/0x350 [ 345.484825][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 345.490704][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 345.496581][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 345.502893][ C0] ? print_report+0x502/0x550 [ 345.507557][ C0] check_panic_on_warn+0x86/0xb0 [ 345.512478][ C0] ? bq_xmit_all+0x134/0x11d0 [ 345.517136][ C0] end_report+0x77/0x160 [ 345.521364][ C0] kasan_report+0x154/0x180 [ 345.525856][ C0] ? bq_xmit_all+0x134/0x11d0 [ 345.530523][ C0] bq_xmit_all+0x134/0x11d0 [ 345.535021][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 345.540032][ C0] ? __pfx_bq_xmit_all+0x10/0x10 [ 345.544950][ C0] ? __pfx_lock_release+0x10/0x10 [ 345.549976][ C0] ? trace_napi_poll_hit+0x51/0x3e0 [ 345.555201][ C0] __dev_flush+0x81/0x160 [ 345.559516][ C0] xdp_do_check_flushed+0x129/0x240 [ 345.564876][ C0] __napi_poll+0xe4/0x490 [ 345.569185][ C0] net_rx_action+0x89b/0x1240 [ 345.573859][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 345.578969][ C0] ? sched_clock+0x4a/0x70 [ 345.583369][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.589685][ C0] handle_softirqs+0x2c4/0x970 [ 345.594433][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 345.599178][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 345.604444][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 345.609620][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 345.614190][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 345.619368][ C0] irq_exit_rcu+0x9/0x30 [ 345.623591][ C0] common_interrupt+0xaa/0xd0 [ 345.628343][ C0] [ 345.631255][ C0] [ 345.634168][ C0] asm_common_interrupt+0x26/0x40 [ 345.639180][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x2f/0x90 [ 345.646014][ C0] Code: 8b 04 24 65 48 8b 14 25 00 d7 03 00 65 8b 05 30 50 70 7e a9 00 01 ff 00 74 10 a9 00 01 00 00 74 5b 83 ba 1c 16 00 00 00 74 52 <8b> 82 f8 15 00 00 83 f8 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc [ 345.665604][ C0] RSP: 0018:ffffc900116beec0 EFLAGS: 00000246 [ 345.671651][ C0] RAX: 0000000080000001 RBX: 0000000000000001 RCX: ffff8880187bbc00 [ 345.679604][ C0] RDX: ffff8880187bbc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 345.687571][ C0] RBP: ffffc900116b8000 R08: ffffffff81411960 R09: ffffffff81411746 [ 345.695550][ C0] R10: 0000000000000003 R11: ffff8880187bbc00 R12: 1ffff920022d7df6 [ 345.703515][ C0] R13: dffffc0000000000 R14: 1ffff920022d7df5 R15: ffffc900116c0000 [ 345.711477][ C0] ? unwind_next_frame+0xff6/0x2a00 [ 345.716670][ C0] ? unwind_next_frame+0x1210/0x2a00 [ 345.721945][ C0] unwind_next_frame+0x1210/0x2a00 [ 345.727135][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.733281][ C0] ? __kernel_text_address+0xd/0x40 [ 345.738471][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.744628][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 345.750763][ C0] arch_stack_walk+0x151/0x1b0 [ 345.755595][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.761644][ C0] stack_trace_save+0x118/0x1d0 [ 345.766477][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 345.771831][ C0] save_stack+0xfb/0x1f0 [ 345.776071][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 345.781089][ C0] ? __pfx_save_stack+0x10/0x10 [ 345.785935][ C0] ? free_unref_folios+0x100f/0x1ac0 [ 345.791207][ C0] ? folios_put_refs+0x76e/0x860 [ 345.796124][ C0] ? free_pages_and_swap_cache+0x5c8/0x690 [ 345.801919][ C0] ? tlb_flush_mmu+0x3a3/0x680 [ 345.806679][ C0] ? tlb_finish_mmu+0xd4/0x200 [ 345.811444][ C0] ? exit_mmap+0x44f/0xc80 [ 345.815855][ C0] ? __mmput+0x115/0x380 [ 345.820080][ C0] ? exit_mm+0x220/0x310 [ 345.824303][ C0] ? do_exit+0x9b2/0x27f0 [ 345.828697][ C0] ? do_group_exit+0x207/0x2c0 [ 345.833527][ C0] ? get_signal+0x1695/0x1730 [ 345.838189][ C0] ? arch_do_signal_or_restart+0x96/0x860 [ 345.843912][ C0] ? syscall_exit_to_user_mode+0xc9/0x370 [ 345.849711][ C0] ? do_syscall_64+0x100/0x230 [ 345.854463][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.860525][ C0] ? page_ext_get+0x20/0x2a0 [ 345.865100][ C0] __reset_page_owner+0x75/0x3f0 [ 345.870018][ C0] free_unref_folios+0x100f/0x1ac0 [ 345.875116][ C0] folios_put_refs+0x76e/0x860 [ 345.879864][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 345.885128][ C0] ? free_swap_cache+0xb3/0x880 [ 345.889973][ C0] free_pages_and_swap_cache+0x5c8/0x690 [ 345.895604][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 345.901775][ C0] ? tlb_table_flush+0x143/0x410 [ 345.906709][ C0] tlb_flush_mmu+0x3a3/0x680 [ 345.911284][ C0] ? __pfx_down_write+0x10/0x10 [ 345.916120][ C0] tlb_finish_mmu+0xd4/0x200 [ 345.920701][ C0] exit_mmap+0x44f/0xc80 [ 345.924934][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 345.929676][ C0] ? __asan_memset+0x23/0x50 [ 345.934303][ C0] ? uprobe_clear_state+0x277/0x290 [ 345.939501][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 345.944767][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 345.949945][ C0] __mmput+0x115/0x380 [ 345.953997][ C0] exit_mm+0x220/0x310 [ 345.958044][ C0] ? __pfx_exit_mm+0x10/0x10 [ 345.962607][ C0] ? taskstats_exit+0x326/0xa60 [ 345.967443][ C0] do_exit+0x9b2/0x27f0 [ 345.971579][ C0] ? __pfx_do_exit+0x10/0x10 [ 345.976148][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 345.981507][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 345.987492][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.993806][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 345.998900][ C0] do_group_exit+0x207/0x2c0 [ 346.003469][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.008640][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 346.013817][ C0] get_signal+0x1695/0x1730 [ 346.018304][ C0] ? __pfx_get_signal+0x10/0x10 [ 346.023139][ C0] arch_do_signal_or_restart+0x96/0x860 [ 346.028675][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 346.034981][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 346.040949][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 346.046651][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 346.052176][ C0] do_syscall_64+0x100/0x230 [ 346.056749][ C0] ? clear_bhb_loop+0x35/0x90 [ 346.061409][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.067290][ C0] RIP: 0033:0x7f1cd1977299 [ 346.071680][ C0] Code: Unable to access opcode bytes at 0x7f1cd197726f. [ 346.078847][ C0] RSP: 002b:00007f1cd26b00f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 346.087242][ C0] RAX: 0000000000000001 RBX: 00007f1cd1b05f88 RCX: 00007f1cd1977299 [ 346.095199][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1cd1b05f8c [ 346.103515][ C0] RBP: 00007f1cd1b05f80 R08: 7fffffffffffffff R09: 00007f1cd26b06c0 [ 346.111552][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1cd1b05f8c [ 346.119593][ C0] R13: 000000000000000b R14: 00007ffc808df890 R15: 00007ffc808df978 [ 346.127654][ C0] [ 346.130884][ C0] Kernel Offset: disabled [ 346.135194][ C0] Rebooting in 86400 seconds..