last executing test programs: 18.845961397s ago: executing program 4 (id=2874): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d00)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "c90e"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 14.968484816s ago: executing program 0 (id=2886): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x61, 0x0, 0x0, @time, {}, {}, @result}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x382f, 0xffffffffffffffff, 0x1}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x81, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x79}, @timestamp={0x7, 0x4, 0x0, 0x0, 0xe}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44}}}}}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x400, 0x3) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000000)={0x35}) bind$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, 0x3}, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x0) 14.802891581s ago: executing program 3 (id=2889): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10, 0x44}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='4\x00', 0xfffffffffffffe12) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 13.056892967s ago: executing program 4 (id=2891): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000240)='/dev/ttyS3\x00', 0xb, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setgid(0xee00) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002640), 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x0, 0x70f0) 13.041268808s ago: executing program 3 (id=2892): mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200500000000c0a0101000000000000000007000000090002007379"], 0xe4}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b4b, &(0x7f0000000000)) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x12, 0x1e, 0x5, 0x0}) socket(0x200000000000011, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000010c0)=@security={'security\x00', 0x64, 0x4, 0x558, 0x100000c, 0x0, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x4c0, 0x4c0, 0x4c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x7}}]}, @common=@SET={0x60}}, {{@ip={@empty, @private, 0x0, 0x0, 'wg2\x00', 'veth0\x00'}, 0x0, 0x2d0, 0x2f8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}, @common=@ah={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) 11.994752933s ago: executing program 3 (id=2896): socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="003cbdb394fc3c892d35e7357800"/24]) 10.80226285s ago: executing program 3 (id=2898): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r3, 0xae7e, 0x0) 10.295689975s ago: executing program 1 (id=2899): socket$inet_dccp(0x2, 0x6, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$dsp(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000001e40)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='scalable\x00', 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r1, 0x2) 10.177932796s ago: executing program 2 (id=2900): r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000002a0000000000000000000000c600feff0000000b950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) epoll_create(0x207ffd) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc901, 0x0) mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x80000480, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) socket(0x15, 0x5, 0x0) 9.115354842s ago: executing program 1 (id=2901): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 9.085588934s ago: executing program 4 (id=2902): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d00)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "c90e"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 8.880801652s ago: executing program 2 (id=2903): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10, 0x44}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='4\x00', 0xfffffffffffffe12) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 8.727253786s ago: executing program 1 (id=2904): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}}, 0x0) 7.822791438s ago: executing program 2 (id=2905): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) pselect6(0x40, &(0x7f0000000080)={0x7, 0x9, 0x3, 0xb, 0xb, 0x8, 0x9, 0x100000001}, &(0x7f0000000100)={0x3, 0x2, 0x5003, 0x7, 0x9, 0x1, 0x81, 0x1}, 0x0, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x6ec2]}, 0x8}) 7.635243854s ago: executing program 2 (id=2906): mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200500000000c0a0101000000000000000007000000090002007379"], 0xe4}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b4b, &(0x7f0000000000)) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x12, 0x1e, 0x5, 0x0}) socket(0x200000000000011, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000010c0)=@security={'security\x00', 0x64, 0x4, 0x558, 0x100000c, 0x0, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x4c0, 0x4c0, 0x4c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x7}}]}, @common=@SET={0x60}}, {{@ip={@empty, @private, 0x0, 0x0, 'wg2\x00', 'veth0\x00'}, 0x0, 0x2d0, 0x2f8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}, @common=@ah={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) 7.633985275s ago: executing program 1 (id=2907): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x24, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) r0 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007"], 0x0) write$usbip_server(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000000030000000100"], 0x31) 6.770606762s ago: executing program 0 (id=2908): socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) write$sndseq(0xffffffffffffffff, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="003cbdb394fc3c892d35e7357800"/24]) 6.511466125s ago: executing program 2 (id=2909): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000031c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x20000000, 0x6, 0x9, 0x6, {0x2, 0x0, 0x4, 0x1, 0x9, 0x6}, {0xff, 0x0, 0x0, 0x8, 0x1, 0x4}, 0x5bf, 0x9, 0x6}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x78}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) 6.436613382s ago: executing program 3 (id=2910): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x321000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000d80)}, {0x0}, {&(0x7f0000000280)="fe2e6702", 0x4}, {&(0x7f0000001d80)="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", 0x782}, {0x0}], 0x5}, 0x400c010) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f252e0f01c248b820450000000000000f23d00f21f835000000010f2bf8c46289900cabb9f9080000b8c93c0000ba000000004b0fc7af03000000c4816857a601000000", 0x6e}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.695570379s ago: executing program 2 (id=2911): socket$inet_dccp(0x2, 0x6, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$dsp(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000001e40)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='scalable\x00', 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r1, 0x2) 5.688206419s ago: executing program 4 (id=2912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/15, @ANYBLOB], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x40) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000700)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r6}}, 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r7, 0x24, 0x0, 0xffffffffffffffff, @void, @value}, 0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x0) 5.674047791s ago: executing program 0 (id=2913): r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000002a0000000000000000000000c600feff0000000b950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) epoll_create(0x207ffd) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc901, 0x0) mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x80000480, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) socket(0x15, 0x5, 0x0) 2.532179753s ago: executing program 4 (id=2914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r6, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r5, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 2.180038694s ago: executing program 1 (id=2915): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10, 0x44}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='4\x00', 0xfffffffffffffe12) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.154350267s ago: executing program 0 (id=2916): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) pselect6(0x40, &(0x7f0000000080)={0x7, 0x9, 0x3, 0xb, 0xb, 0x8, 0x9, 0x100000001}, &(0x7f0000000100)={0x3, 0x2, 0x5003, 0x7, 0x9, 0x1, 0x81, 0x1}, 0x0, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x6ec2]}, 0x8}) 2.11226293s ago: executing program 1 (id=2917): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}}, 0x0) 1.703584198s ago: executing program 3 (id=2918): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x61, 0x0, 0x0, @time, {}, {}, @result}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x382f, 0xffffffffffffffff, 0x1}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x81, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x79}, @timestamp={0x7, 0x4, 0x0, 0x0, 0xe}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44}}}}}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x400, 0x3) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000000)={0x35}) bind$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, 0x3}, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x0) 1.214154021s ago: executing program 0 (id=2919): mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200500000000c0a0101000000000000000007000000090002007379"], 0xe4}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b4b, &(0x7f0000000000)) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x12, 0x1e, 0x5, 0x0}) socket(0x200000000000011, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000010c0)=@security={'security\x00', 0x64, 0x4, 0x558, 0x100000c, 0x0, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x4c0, 0x4c0, 0x4c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x7}}]}, @common=@SET={0x60}}, {{@ip={@empty, @private, 0x0, 0x0, 'wg2\x00', 'veth0\x00'}, 0x0, 0x2d0, 0x2f8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}, @common=@ah={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) 946.280645ms ago: executing program 4 (id=2920): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r3, 0xae7e, 0x0) 0s ago: executing program 0 (id=2921): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000031c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x20000000, 0x6, 0x9, 0x6, {0x2, 0x0, 0x4, 0x1, 0x9, 0x6}, {0xff, 0x0, 0x0, 0x8, 0x1, 0x4}, 0x5bf, 0x9, 0x6}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x78}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): mpat=0 ip=0x7f1ba237d0b0 code=0x7ffc0000 [ 383.394171][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.419338][ T26] audit: type=1326 audit(1731143502.448:60): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=unconfined pid=8075 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ba237d0b0 code=0x7ffc0000 [ 383.549854][ T4300] usb 1-1: Using ep0 maxpacket: 8 [ 383.562991][ T4300] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 383.572855][ T4300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.581983][ T4300] usb 1-1: Product: syz [ 383.587255][ T4300] usb 1-1: Manufacturer: syz [ 383.591907][ T4300] usb 1-1: SerialNumber: syz [ 383.599582][ T4300] usb 1-1: config 0 descriptor?? [ 384.495270][ T7059] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 384.715481][ T7059] usb 2-1: Using ep0 maxpacket: 16 [ 384.763318][ T7059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 384.782680][ T4300] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 385.013071][ T7059] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 385.043803][ T7059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.082663][ T8117] xt_nat: multiple ranges no longer supported [ 385.126441][ T7059] usb 2-1: Product: syz [ 385.159620][ T7059] usb 2-1: Manufacturer: syz [ 385.193125][ T7059] usb 2-1: SerialNumber: syz [ 385.280071][ T7059] usb 2-1: config 0 descriptor?? [ 385.405658][ T7059] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 385.432032][ T7059] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 385.590392][ T8119] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1289'. [ 385.915043][ T4300] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 385.959241][ T8124] capability: warning: `syz.3.1291' uses 32-bit capabilities (legacy support in use) [ 385.960047][ T7059] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 387.251626][ T7059] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 387.356232][ T7059] em28xx 2-1:0.0: board has no eeprom [ 387.386448][ T6567] usb 1-1: USB disconnect, device number 28 [ 387.485340][ T7059] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 387.493224][ T7059] em28xx 2-1:0.0: dvb set to bulk mode. [ 387.535513][ T7059] usb 2-1: USB disconnect, device number 16 [ 387.557870][ T7059] em28xx 2-1:0.0: Disconnecting em28xx [ 387.607088][ T6567] em28xx 2-1:0.0: Binding DVB extension [ 388.434363][ T8151] device netdevsim0 entered promiscuous mode [ 388.503886][ T6567] em28xx 2-1:0.0: Registering input extension [ 388.515611][ T7059] em28xx 2-1:0.0: Closing input extension [ 388.528408][ T7059] em28xx 2-1:0.0: Freeing device [ 388.567420][ T8148] device netdevsim0 left promiscuous mode [ 388.678835][ T8156] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1301'. [ 389.416631][ T8164] netlink: 'syz.1.1303': attribute type 10 has an invalid length. [ 389.551635][ T8164] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.553246][ T8183] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1312'. [ 391.146929][ T8190] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1314'. [ 391.225472][ T8191] xt_cluster: node mask cannot exceed total number of nodes [ 391.745209][ T4300] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 392.078884][ T4298] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 392.209196][ T8199] netlink: 'syz.3.1318': attribute type 10 has an invalid length. [ 392.238239][ T8199] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.245708][ T8199] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.296262][ T4300] usb 1-1: Using ep0 maxpacket: 8 [ 392.304845][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.312124][ T8199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.319653][ T8199] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.326840][ T8199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.341342][ T4300] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 392.351032][ T4300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.352054][ T8199] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 392.359659][ T4300] usb 1-1: Product: syz [ 392.373622][ T4300] usb 1-1: Manufacturer: syz [ 392.397836][ T4298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.412761][ T4300] usb 1-1: SerialNumber: syz [ 392.429290][ T4298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.449133][ T4298] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.472078][ T4300] usb 1-1: config 0 descriptor?? [ 392.499282][ T4298] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 392.509474][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.601551][ T4298] usb 3-1: config 0 descriptor?? [ 392.779141][ T4300] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 393.247958][ T4298] usbhid 3-1:0.0: can't add hid device: -71 [ 393.260658][ T4298] usbhid: probe of 3-1:0.0 failed with error -71 [ 393.293821][ T4298] usb 3-1: USB disconnect, device number 25 [ 393.364973][ T8207] lo speed is unknown, defaulting to 1000 [ 393.381955][ T8207] lo speed is unknown, defaulting to 1000 [ 393.418750][ T8207] lo speed is unknown, defaulting to 1000 [ 393.448390][ T8207] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 393.452815][ T8214] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1324'. [ 393.481756][ T8207] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 393.553589][ T8207] lo speed is unknown, defaulting to 1000 [ 393.564177][ T8207] lo speed is unknown, defaulting to 1000 [ 393.573299][ T8207] lo speed is unknown, defaulting to 1000 [ 393.580933][ T8207] lo speed is unknown, defaulting to 1000 [ 393.588332][ T8207] lo speed is unknown, defaulting to 1000 [ 395.021696][ T4300] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 395.385709][ T8237] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1328'. [ 395.466718][ T8238] xt_cluster: node mask cannot exceed total number of nodes [ 396.804710][ T4300] usb 1-1: USB disconnect, device number 29 [ 397.487192][ T8248] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1335'. [ 401.531665][ T8294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1345'. [ 402.428655][ T8299] overlayfs: failed to resolve './file1': -2 [ 402.611953][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1353'. [ 404.715585][ T8334] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1362'. [ 405.647201][ T8341] overlayfs: failed to resolve './file1': -2 [ 405.677986][ T8342] overlayfs: failed to resolve './file0': -2 [ 406.118360][ T8348] device macsec0 entered promiscuous mode [ 406.380573][ T8347] device macsec0 left promiscuous mode [ 406.880204][ T8365] netlink: 'syz.4.1371': attribute type 10 has an invalid length. [ 407.402071][ T8376] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1375'. [ 410.258272][ T8403] netlink: 'syz.2.1384': attribute type 10 has an invalid length. [ 410.316628][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.324235][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.926620][ T8420] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 410.926620][ T8420] SÃȘØÈžZ§6ŸÂ' [ 411.948164][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 414.473859][ T8463] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 414.473859][ T8463] SÃȘØÈžZ§6ŸÂ' [ 417.045753][ T6065] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 417.247025][ T6065] usb 4-1: Using ep0 maxpacket: 16 [ 417.253899][ T6065] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 417.264033][ T6065] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.275496][ T6065] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.290045][ T6065] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.301406][ T6065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.305260][ T4330] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 417.310811][ T6065] usb 4-1: Product: syz [ 417.330774][ T6065] usb 4-1: Manufacturer: syz [ 417.347257][ T6065] usb 4-1: SerialNumber: syz [ 417.372118][ T8505] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1419'. [ 417.705262][ T4330] usb 5-1: Using ep0 maxpacket: 32 [ 417.713642][ T4330] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 417.750135][ T4330] usb 5-1: config 0 has no interface number 0 [ 417.777342][ T4330] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 417.793867][ T4330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.803227][ T4330] usb 5-1: Product: syz [ 417.815649][ T4330] usb 5-1: Manufacturer: syz [ 417.820376][ T4330] usb 5-1: SerialNumber: syz [ 417.832279][ T4330] usb 5-1: config 0 descriptor?? [ 417.857535][ T4330] smsc95xx v2.0.0 [ 417.905850][ T4300] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 417.936136][ T6065] usb 4-1: 0:2 : does not exist [ 418.105868][ T4300] usb 3-1: Using ep0 maxpacket: 16 [ 418.120881][ T4300] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 418.155396][ T4300] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.168068][ T4300] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.184847][ T4300] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.197679][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.208512][ T4300] usb 3-1: Product: syz [ 418.212910][ T4300] usb 3-1: Manufacturer: syz [ 418.218809][ T4300] usb 3-1: SerialNumber: syz [ 418.249934][ T4330] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 418.265078][ T4330] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 418.768583][ T8518] MPTCP: kernel_bind error, err=-98 [ 419.071073][ T6065] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 419.134321][ T6065] usb 4-1: USB disconnect, device number 17 [ 419.142946][ T4300] usb 3-1: 0:2 : does not exist [ 419.446265][ T4300] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 419.478802][ T4300] usb 3-1: USB disconnect, device number 26 [ 420.124609][ C1] sd 0:0:1:0: [sda] tag#6541 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 420.135251][ C1] sd 0:0:1:0: [sda] tag#6541 CDB: Write(6) 0a 03 00 00 00 00 [ 420.248789][ T4330] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 420.274782][ T4330] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 420.289265][ T4330] usb 5-1: USB disconnect, device number 21 [ 422.613744][ T8560] xt_nat: multiple ranges no longer supported [ 423.015843][ C1] sd 0:0:1:0: [sda] tag#6546 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 423.026387][ C1] sd 0:0:1:0: [sda] tag#6546 CDB: Write(6) 0a 03 00 00 00 00 [ 423.504186][ T4269] Bluetooth: hci4: link tx timeout [ 423.509941][ T4269] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 423.517892][ T4269] Bluetooth: hci4: link tx timeout [ 423.523071][ T4269] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 424.522051][ T8595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1452'. [ 424.668974][ T8593] lo speed is unknown, defaulting to 1000 [ 424.708997][ C1] sd 0:0:1:0: [sda] tag#6547 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 424.719479][ C1] sd 0:0:1:0: [sda] tag#6547 CDB: Write(6) 0a 03 00 00 00 00 [ 425.250234][ T8621] netlink: 'syz.2.1461': attribute type 10 has an invalid length. [ 426.064232][ T8636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1468'. [ 426.220150][ C1] sd 0:0:1:0: [sda] tag#6552 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 426.230803][ C1] sd 0:0:1:0: [sda] tag#6552 CDB: Write(6) 0a 03 00 00 00 00 [ 426.721559][ T8652] device macsec0 entered promiscuous mode [ 427.418842][ T8651] device macsec0 left promiscuous mode [ 428.465853][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1483'. [ 428.617652][ C1] sd 0:0:1:0: [sda] tag#6553 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 428.628244][ C1] sd 0:0:1:0: [sda] tag#6553 CDB: Write(6) 0a 03 00 00 00 00 [ 429.796261][ T8708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1496'. [ 430.212339][ C1] sd 0:0:1:0: [sda] tag#6554 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 430.222837][ C1] sd 0:0:1:0: [sda] tag#6554 CDB: Write(6) 0a 03 00 00 00 00 [ 431.222459][ T8727] input: syz0 as /devices/virtual/input/input11 [ 431.626900][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1508'. [ 432.361081][ T8753] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 432.376448][ T8753] team0: Device ipvlan2 failed to register rx_handler [ 432.460253][ C1] sd 0:0:1:0: [sda] tag#6559 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 432.470761][ C1] sd 0:0:1:0: [sda] tag#6559 CDB: Write(6) 0a 03 00 00 00 00 [ 432.992489][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 432.992612][ T26] audit: type=1326 audit(1731143552.828:76): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=unconfined pid=8758 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 433.247528][ T8768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1520'. [ 433.526955][ T26] audit: type=1326 audit(1731143552.828:77): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=unconfined pid=8758 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c5eb7d0b0 code=0x7ffc0000 [ 433.667382][ T26] audit: type=1326 audit(1731143552.838:78): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=unconfined pid=8758 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c5eb7d0b0 code=0x7ffc0000 [ 433.691883][ T26] audit: type=1326 audit(1731143552.838:79): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=unconfined pid=8758 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 433.726119][ T26] audit: type=1326 audit(1731143552.838:80): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=unconfined pid=8758 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 433.822620][ T26] audit: type=1326 audit(1731143552.838:81): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=unconfined pid=8758 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 433.845508][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.923235][ T26] audit: type=1326 audit(1731143552.838:82): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=unconfined pid=8758 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 433.946294][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.276236][ T6065] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 434.476121][ T6065] usb 4-1: device descriptor read/64, error -71 [ 434.906000][ T6065] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 435.065904][ T6065] usb 4-1: device descriptor read/64, error -71 [ 435.186190][ T6065] usb usb4-port1: attempt power cycle [ 435.458547][ T8809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1534'. [ 435.595377][ T6065] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 435.636764][ T6065] usb 4-1: device descriptor read/8, error -71 [ 435.905830][ T6065] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 436.031381][ T8815] netlink: 'syz.4.1535': attribute type 1 has an invalid length. [ 436.050693][ T8815] kAFS: unparsable volume name [ 436.776463][ T6065] usb 4-1: device descriptor read/8, error -71 [ 436.895963][ T6065] usb usb4-port1: unable to enumerate USB device [ 438.016634][ T8837] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 438.023663][ T8837] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 438.083323][ T8837] vhci_hcd vhci_hcd.0: Device attached [ 438.149244][ T8843] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 438.200985][ C1] sd 0:0:1:0: [sda] tag#6568 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 438.211573][ C1] sd 0:0:1:0: [sda] tag#6568 CDB: Write(6) 0a 03 00 00 00 00 [ 438.275520][ T7059] vhci_hcd: vhci_device speed not set [ 438.344238][ T8850] netlink: 'syz.2.1550': attribute type 10 has an invalid length. [ 438.352414][ T7059] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 438.360348][ T6567] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 438.442302][ T8850] team0: Port device netdevsim0 added [ 438.726587][ T8857] netlink: 'syz.0.1548': attribute type 1 has an invalid length. [ 439.347704][ T6567] usb 2-1: config 0 has no interfaces? [ 439.353237][ T6567] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 439.395308][ T6567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.412275][ T6567] usb 2-1: config 0 descriptor?? [ 439.626855][ T6567] usb 2-1: USB disconnect, device number 17 [ 439.630534][ T8838] usb 35-1: recv xbuf, 0 [ 439.653190][ T8129] vhci_hcd: stop threads [ 439.661391][ T8129] vhci_hcd: release socket [ 439.694072][ T8129] vhci_hcd: disconnect device [ 439.705956][ T6065] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 439.725436][ T7059] vhci_hcd: vhci_device speed not set [ 439.866061][ T6065] usb 1-1: device descriptor read/64, error -71 [ 439.932881][ T8871] netlink: 'syz.4.1556': attribute type 10 has an invalid length. [ 439.958668][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.965038][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.135852][ T6065] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 440.295819][ T6065] usb 1-1: device descriptor read/64, error -71 [ 440.416394][ T6065] usb usb1-port1: attempt power cycle [ 440.826116][ T6065] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 440.858970][ T6065] usb 1-1: device descriptor read/8, error -71 [ 441.619152][ T8886] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 441.806008][ T6065] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 441.857283][ T6065] usb 1-1: device descriptor read/8, error -71 [ 441.981393][ T6065] usb usb1-port1: unable to enumerate USB device [ 442.718529][ T8905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1568'. [ 442.769110][ T8905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1568'. [ 443.129831][ T8918] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1572'. [ 444.392194][ T8946] netlink: 'syz.2.1577': attribute type 1 has an invalid length. [ 445.249391][ T8944] vivid-000: kernel_thread() failed [ 445.515770][ T4240] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 445.607274][ T8950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1581'. [ 445.657938][ T8950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1581'. [ 445.675901][ T4240] usb 5-1: device descriptor read/64, error -71 [ 445.884084][ T8956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1585'. [ 445.945820][ T4240] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 446.235942][ T4240] usb 5-1: device descriptor read/64, error -71 [ 447.094488][ T4240] usb usb5-port1: attempt power cycle [ 447.134067][ T8970] process 'syz.3.1589' launched './file1' with NULL argv: empty string added [ 447.669117][ T8992] netlink: 'syz.4.1591': attribute type 1 has an invalid length. [ 447.706388][ T8992] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat md_clear arch_capabilities [ 447.706388][ T8992] vmx flags ' [ 448.171094][ T8990] vivid-000: kernel_thread() failed [ 448.348501][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1595'. [ 448.365911][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1595'. [ 449.494110][ T9005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1598'. [ 451.497883][ T9020] xt_nat: multiple ranges no longer supported [ 451.765859][ T6567] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 451.985846][ T6567] usb 2-1: Using ep0 maxpacket: 16 [ 451.993506][ T6567] usb 2-1: config 0 has no interfaces? [ 452.028137][ T6567] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 452.139153][ T6567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.153365][ T6567] usb 2-1: Product: syz [ 452.159886][ T6567] usb 2-1: Manufacturer: syz [ 452.170990][ T6567] usb 2-1: SerialNumber: syz [ 452.200584][ T6567] usb 2-1: config 0 descriptor?? [ 453.931863][ T9045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1609'. [ 453.947929][ T9045] netlink: 'syz.4.1609': attribute type 6 has an invalid length. [ 453.973642][ T9045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1609'. [ 454.495885][ T4240] usb 2-1: USB disconnect, device number 18 [ 455.174718][ T9061] lo speed is unknown, defaulting to 1000 [ 455.539748][ T9070] xt_nat: multiple ranges no longer supported [ 456.599206][ T9080] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 456.667235][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1621'. [ 456.821821][ T9082] netlink: 'syz.0.1621': attribute type 6 has an invalid length. [ 456.831231][ T9080] CIFS mount error: No usable UNC path provided in device string! [ 456.831231][ T9080] [ 456.893332][ T9080] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 456.895494][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1621'. [ 456.925989][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 456.987969][ T9084] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 456.998038][ T9084] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 457.516089][ T9094] MPTCP: kernel_bind error, err=-98 [ 457.595343][ T7059] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 457.845453][ T7059] usb 1-1: Using ep0 maxpacket: 16 [ 457.861499][ T7059] usb 1-1: config 0 has no interfaces? [ 457.919214][ T7059] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 457.973706][ T7059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.001571][ T7059] usb 1-1: Product: syz [ 458.017116][ T7059] usb 1-1: Manufacturer: syz [ 458.031601][ T7059] usb 1-1: SerialNumber: syz [ 458.128177][ T7059] usb 1-1: config 0 descriptor?? [ 460.253062][ T6567] usb 1-1: USB disconnect, device number 34 [ 460.329271][ T9126] CIFS mount error: No usable UNC path provided in device string! [ 460.329271][ T9126] [ 460.374279][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1633'. [ 460.385216][ T9126] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 460.391320][ T9128] netlink: 'syz.0.1633': attribute type 6 has an invalid length. [ 460.402822][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1633'. [ 460.602712][ T9132] lo speed is unknown, defaulting to 1000 [ 461.175217][ T6567] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 461.357248][ T6567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.369965][ T6567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.380254][ T6567] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.406035][ T6567] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 461.455876][ T6567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.468753][ T6567] usb 4-1: config 0 descriptor?? [ 461.605332][ T7059] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 461.817327][ T7059] usb 2-1: config index 0 descriptor too short (expected 1042, got 18) [ 461.830607][ T7059] usb 2-1: config 0 has too many interfaces: 181, using maximum allowed: 32 [ 461.858910][ T7059] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 181 [ 461.891641][ T6567] acrux 0003:1A34:0802.0004: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 461.897638][ T9160] CIFS mount error: No usable UNC path provided in device string! [ 461.897638][ T9160] [ 461.905701][ T6567] acrux 0003:1A34:0802.0004: no inputs found [ 461.913937][ T9160] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 461.929850][ T7059] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 461.947217][ T7059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.955812][ T6567] acrux 0003:1A34:0802.0004: Failed to enable force feedback support, error: -19 [ 461.965881][ T7059] usb 2-1: Product: syz [ 461.970615][ T7059] usb 2-1: Manufacturer: syz [ 461.975809][ T7059] usb 2-1: SerialNumber: syz [ 461.981781][ T9158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1644'. [ 461.982778][ T7059] usb 2-1: config 0 descriptor?? [ 461.996256][ T9158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1644'. [ 462.708723][ T9173] kAFS: unparsable volume name [ 462.768382][ T7059] mos7840 2-1:0.0: required endpoints missing [ 462.779329][ T7059] usb 2-1: USB disconnect, device number 19 [ 463.267570][ T9185] lo speed is unknown, defaulting to 1000 [ 463.463713][ T9193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1657'. [ 463.491500][ T9193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1657'. [ 463.972028][ T126] usb 4-1: USB disconnect, device number 22 [ 464.840242][ T9223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1669'. [ 464.866506][ T9223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1669'. [ 465.104980][ T9232] lo speed is unknown, defaulting to 1000 [ 465.196396][ T6065] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 465.386983][ T6065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.407992][ T6065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.455730][ T6065] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.501534][ T6065] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 465.579157][ T6065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.725089][ T6065] usb 1-1: config 0 descriptor?? [ 466.146595][ T6065] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 466.166365][ T6065] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 466.173312][ T6065] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 466.232261][ T6065] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 466.243079][ T6065] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 466.485306][ T7059] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 466.501818][ T6065] acrux 0003:1A34:0802.0005: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 466.513615][ T6065] acrux 0003:1A34:0802.0005: no inputs found [ 466.676186][ T7059] usb 2-1: Using ep0 maxpacket: 16 [ 466.719273][ T7059] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 466.808964][ T7059] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.974993][ T7059] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.125786][ T7059] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.163607][ T7059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.175756][ T6065] acrux 0003:1A34:0802.0005: Failed to enable force feedback support, error: -19 [ 467.197721][ T7059] usb 2-1: Product: syz [ 467.201945][ T7059] usb 2-1: Manufacturer: syz [ 467.227678][ T7059] usb 2-1: SerialNumber: syz [ 467.245230][ T9262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1682'. [ 467.278258][ T9262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1682'. [ 467.354422][ T6065] usb 1-1: USB disconnect, device number 35 [ 467.672176][ T7059] usb 2-1: 0:2 : does not exist [ 468.198407][ T9283] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 468.204993][ T9283] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 468.220420][ T9283] vhci_hcd vhci_hcd.0: Device attached [ 468.238826][ T9284] vhci_hcd: connection closed [ 468.239465][ T4449] vhci_hcd: stop threads [ 468.360231][ T4449] vhci_hcd: release socket [ 468.364889][ T4449] vhci_hcd: disconnect device [ 468.432425][ T6567] vhci_hcd: vhci_device speed not set [ 468.760643][ T7059] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 468.801436][ T7059] usb 2-1: USB disconnect, device number 20 [ 468.907015][ T9300] netlink: 'syz.2.1694': attribute type 10 has an invalid length. [ 469.035810][ T4300] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 469.070564][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1696'. [ 469.080536][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1696'. [ 469.233724][ T4300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.261990][ T4300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.280612][ T4300] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.294525][ T4300] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 469.310942][ T4300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.387672][ T4300] usb 1-1: config 0 descriptor?? [ 469.539015][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'. [ 469.729787][ T9318] overlayfs: missing 'lowerdir' [ 469.806464][ T4300] acrux 0003:1A34:0802.0006: unknown main item tag 0x0 [ 469.819857][ T4300] acrux 0003:1A34:0802.0006: unknown main item tag 0x0 [ 469.912343][ T4300] acrux 0003:1A34:0802.0006: unknown main item tag 0x0 [ 469.943925][ T4300] acrux 0003:1A34:0802.0006: unknown main item tag 0x0 [ 469.985842][ T4300] acrux 0003:1A34:0802.0006: unknown main item tag 0x0 [ 470.033499][ T4300] acrux 0003:1A34:0802.0006: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 470.054236][ T4300] acrux 0003:1A34:0802.0006: no inputs found [ 470.066915][ T4300] acrux 0003:1A34:0802.0006: Failed to enable force feedback support, error: -19 [ 470.375524][ T6567] usb 1-1: USB disconnect, device number 36 [ 470.508135][ T9325] netlink: 'syz.2.1706': attribute type 10 has an invalid length. [ 470.550930][ T9327] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 470.557488][ T9327] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 470.575970][ T9327] vhci_hcd vhci_hcd.0: Device attached [ 470.604781][ T9331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1707'. [ 470.611344][ T9328] vhci_hcd: connection closed [ 470.619609][ T4489] vhci_hcd: stop threads [ 470.629669][ T9331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1707'. [ 470.633823][ T4489] vhci_hcd: release socket [ 470.689185][ T4489] vhci_hcd: disconnect device [ 471.109267][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'. [ 471.577248][ T9353] overlayfs: missing 'lowerdir' [ 472.372858][ T9362] netlink: 'syz.0.1718': attribute type 10 has an invalid length. [ 472.407184][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.414395][ T9362] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.470217][ T9364] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1719'. [ 472.935284][ T4330] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 473.407296][ T4330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.427055][ T4330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.442121][ T4330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 473.470060][ T4330] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 473.484374][ T4330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.512284][ T4330] usb 3-1: config 0 descriptor?? [ 473.583644][ T9387] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 473.612495][ T9387] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 473.937653][ T4330] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 474.415818][ T4330] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 474.455467][ T4330] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 474.476089][ T4330] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 474.511332][ T4330] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 474.528243][ T4330] acrux 0003:1A34:0802.0007: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 474.546950][ T4330] acrux 0003:1A34:0802.0007: no inputs found [ 474.553487][ T4330] acrux 0003:1A34:0802.0007: Failed to enable force feedback support, error: -19 [ 474.636785][ T4330] usb 3-1: USB disconnect, device number 27 [ 474.833870][ T9400] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1732'. [ 475.473147][ T9415] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 475.497950][ T9415] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 476.973300][ T9429] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1745'. [ 477.745717][ T9434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.759490][ T9434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.943630][ T9434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.961057][ T9434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.167623][ T9434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.179595][ T9434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.214040][ T9448] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 478.228369][ T9448] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 479.229922][ T9434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.250212][ T9434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.274230][ T9459] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1756'. [ 479.345884][ T6567] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 479.613198][ T6567] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 479.910648][ T6567] usb 1-1: config 0 has no interface number 0 [ 479.948087][ T6567] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 479.951990][ T9434] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.994963][ T6567] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 480.015564][ T6567] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 480.019227][ T9434] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.033903][ T6567] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 480.056233][ T6567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.077097][ T6567] usb 1-1: config 0 descriptor?? [ 480.092085][ T6567] ldusb 1-1:0.55: Interrupt in endpoint not found [ 480.149657][ T9434] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.158829][ T9434] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.983369][ T9434] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.992083][ T9434] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.055649][ T9434] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.058612][ T6065] usb 1-1: USB disconnect, device number 37 [ 481.071722][ T9434] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.353629][ T9485] overlayfs: missing 'lowerdir' [ 482.919857][ T9499] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1770'. [ 484.203381][ T9516] overlayfs: missing 'lowerdir' [ 484.950905][ T9525] netlink: 'syz.1.1779': attribute type 10 has an invalid length. [ 485.473527][ T9534] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1784'. [ 486.088479][ T9546] overlayfs: missing 'lowerdir' [ 487.304539][ T9559] netlink: 'syz.1.1792': attribute type 10 has an invalid length. [ 487.557576][ T4269] Bluetooth: hci4: link tx timeout [ 487.562805][ T4269] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 487.571525][ T4269] Bluetooth: hci4: link tx timeout [ 487.576938][ T4269] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 488.514916][ T9570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1797'. [ 488.536790][ T9570] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1797'. [ 490.020142][ T9589] overlayfs: missing 'workdir' [ 490.685984][ T9603] netlink: 'syz.2.1805': attribute type 10 has an invalid length. [ 492.645464][ T9624] overlayfs: missing 'workdir' [ 493.008294][ T9632] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat md_clear arch_capabilities [ 493.008294][ T9632] vmx flags ' [ 493.046410][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.057381][ T9633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1812'. [ 493.285188][ T9628] vivid-000: kernel_thread() failed [ 493.765548][ T9634] xt_cluster: node mask cannot exceed total number of nodes [ 494.699188][ T9645] netlink: 'syz.2.1817': attribute type 10 has an invalid length. [ 496.506660][ T9676] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat md_clear arch_capabilities [ 496.506660][ T9676] vmx flags ' [ 497.241014][ T9679] overlayfs: missing 'workdir' [ 497.780508][ T9687] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1828'. [ 497.799889][ T9687] xt_cluster: node mask cannot exceed total number of nodes [ 498.682983][ T9695] netlink: 'syz.2.1832': attribute type 10 has an invalid length. [ 500.618708][ T9715] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat md_clear arch_capabilities [ 500.618708][ T9715] vmx flags ' [ 500.656912][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.755321][ T26] audit: type=1804 audit(1731143620.578:83): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1838" name="/newroot/360/bus/file0" dev="overlay" ino=1938 res=1 errno=0 [ 501.292579][ T9734] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1840'. [ 501.365763][ T9735] xt_cluster: node mask cannot exceed total number of nodes [ 501.409068][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.425798][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.866258][ T9739] netlink: 'syz.4.1844': attribute type 10 has an invalid length. [ 504.285151][ T9770] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat md_clear arch_capabilities [ 504.285151][ T9770] vmx flags ' [ 504.701022][ T26] audit: type=1804 audit(1731143624.548:84): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1853" name="/newroot/360/bus/file0" dev="overlay" ino=2005 res=1 errno=0 [ 504.751886][ T126] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 505.089889][ T9778] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1854'. [ 505.437470][ T126] usb 4-1: device descriptor read/64, error -71 [ 505.446153][ T9785] netlink: 'syz.1.1857': attribute type 10 has an invalid length. [ 506.776419][ T9799] xt_nat: multiple ranges no longer supported [ 507.653910][ T26] audit: type=1804 audit(1731143627.498:85): pid=9812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1865" name="/newroot/363/bus/file0" dev="overlay" ino=1963 res=1 errno=0 [ 508.138225][ T9813] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat md_clear arch_capabilities [ 508.138225][ T9813] vmx flags ' [ 508.356224][ T9820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1866'. [ 508.493945][ T9824] netlink: 'syz.3.1869': attribute type 10 has an invalid length. [ 508.519900][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.527193][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.505296][ T126] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 510.581008][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 510.856134][ T126] usb 4-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53 [ 510.875326][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.883380][ T126] usb 4-1: Product: syz [ 510.896962][ T126] usb 4-1: Manufacturer: syz [ 510.901629][ T126] usb 4-1: SerialNumber: syz [ 510.939448][ T126] usb 4-1: config 0 descriptor?? [ 511.056851][ T126] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 511.789857][ T9865] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat md_clear arch_capabilities [ 511.789857][ T9865] vmx flags ' [ 512.426370][ T9867] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1880'. [ 512.492655][ T126] usb 4-1: USB disconnect, device number 25 [ 513.540252][ T9896] xt_nat: multiple ranges no longer supported [ 515.620177][ T9906] MPTCP: kernel_bind error, err=-98 [ 517.035839][ T6065] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 517.179796][ T9920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1898'. [ 517.285854][ T6065] usb 5-1: Using ep0 maxpacket: 16 [ 517.293195][ T6065] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 517.364304][ T6065] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.392299][ T6065] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.432139][ T6065] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.457225][ T6065] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.474441][ T6065] usb 5-1: Product: syz [ 517.479807][ T6065] usb 5-1: Manufacturer: syz [ 517.484557][ T6065] usb 5-1: SerialNumber: syz [ 517.910235][ T6065] usb 5-1: 0:2 : does not exist [ 518.672563][ T6065] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 518.707995][ T6065] usb 5-1: USB disconnect, device number 25 [ 519.758507][ T9955] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1911'. [ 520.482455][ T9971] xt_nat: multiple ranges no longer supported [ 521.714990][ T9988] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1923'. [ 523.740561][T10008] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1930'. [ 523.971470][ T126] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 524.142226][T10016] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1934'. [ 524.259604][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.421250][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.621248][ T126] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 524.654544][ T126] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 524.690774][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.718638][ T126] usb 3-1: config 0 descriptor?? [ 525.951344][ T126] acrux 0003:1A34:0802.0008: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 525.963985][ T126] acrux 0003:1A34:0802.0008: no inputs found [ 525.970966][ T126] acrux 0003:1A34:0802.0008: Failed to enable force feedback support, error: -19 [ 526.047743][ T126] usb 3-1: USB disconnect, device number 28 [ 526.454177][T10042] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1941'. [ 526.505957][T10046] xt_cluster: node mask cannot exceed total number of nodes [ 528.875748][ T4300] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 528.959413][T10078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1954'. [ 529.010358][ T27] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 529.075889][ T4300] usb 3-1: Using ep0 maxpacket: 16 [ 529.147955][ T4300] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 529.187421][ T4300] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.254910][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.360616][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.460168][ T4300] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.577306][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 529.684579][ T4300] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.725797][ T27] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 529.738080][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.770693][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.781395][ T4300] usb 3-1: Product: syz [ 529.986865][ T4300] usb 3-1: Manufacturer: syz [ 529.992845][ T4300] usb 3-1: SerialNumber: syz [ 529.999120][ T27] usb 4-1: config 0 descriptor?? [ 530.506060][ T4300] usb 3-1: 0:2 : does not exist [ 530.731863][ T27] acrux 0003:1A34:0802.0009: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 530.764339][ T27] acrux 0003:1A34:0802.0009: no inputs found [ 530.777966][ T27] acrux 0003:1A34:0802.0009: Failed to enable force feedback support, error: -19 [ 531.001648][ T27] usb 4-1: USB disconnect, device number 26 [ 531.110405][T10099] MPTCP: kernel_bind error, err=-98 [ 531.331008][T10098] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1960'. [ 531.349707][T10098] xt_cluster: node mask cannot exceed total number of nodes [ 531.704731][ T4300] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 531.998011][ T4300] usb 3-1: USB disconnect, device number 29 [ 532.585266][ T4330] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 532.815281][ T4330] usb 4-1: Using ep0 maxpacket: 8 [ 532.822484][ T4330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.863693][ T4330] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 532.889009][T10122] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat md_clear arch_capabilities [ 532.889009][T10122] vmx flags ' [ 532.927023][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.676642][ T4330] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 533.692345][ T4330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.701495][ T4330] usb 4-1: Product: syz [ 533.706085][ T4330] usb 4-1: Manufacturer: syz [ 533.710722][ T4330] usb 4-1: SerialNumber: syz [ 533.717812][ T4330] usb 4-1: config 0 descriptor?? [ 533.754395][T10129] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1970'. [ 534.049201][T10135] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 534.156172][T10140] MPTCP: kernel_bind error, err=-98 [ 534.336021][ T27] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 534.525804][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 534.542072][ T27] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 534.553676][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.566002][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 534.580835][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 535.100862][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.110354][ T27] usb 2-1: Product: syz [ 535.116507][ T27] usb 2-1: Manufacturer: syz [ 535.121329][ T27] usb 2-1: SerialNumber: syz [ 535.373261][ T4330] usb 4-1: USB disconnect, device number 27 [ 535.552275][ T27] usb 2-1: 0:2 : does not exist [ 536.437408][T10170] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 536.485315][ T4330] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 536.714352][ T27] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 536.875458][ T4330] usb 4-1: Using ep0 maxpacket: 16 [ 536.918460][ T4330] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 536.985527][T10181] MPTCP: kernel_bind error, err=-98 [ 537.137117][ T4330] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 537.350429][ T4330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.446859][ T4330] usb 4-1: Product: syz [ 537.492139][ T4330] usb 4-1: Manufacturer: syz [ 537.540362][ T4330] usb 4-1: SerialNumber: syz [ 537.592142][ T4330] usb 4-1: config 0 descriptor?? [ 537.734690][T10185] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1989'. [ 537.985996][ T27] usb 2-1: USB disconnect, device number 21 [ 538.588593][ T126] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 538.885263][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 539.026469][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.339767][ T126] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 539.425805][ T126] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 539.434931][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.480280][ T126] usb 3-1: Product: syz [ 539.484541][ T126] usb 3-1: Manufacturer: syz [ 539.511180][ T126] usb 3-1: SerialNumber: syz [ 539.521828][ T6567] usb 4-1: USB disconnect, device number 28 [ 539.536587][ T126] usb 3-1: config 0 descriptor?? [ 539.843883][T10211] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 540.141146][T10208] overlayfs: failed to resolve './file0': -2 [ 540.875200][ T6567] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 540.930868][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2002'. [ 540.981684][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 541.072758][ T27] usb 3-1: USB disconnect, device number 30 [ 541.085343][ T6567] usb 4-1: Using ep0 maxpacket: 16 [ 541.092794][ T6567] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 541.119844][ T6567] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.299059][T10239] overlayfs: failed to resolve './file0': -2 [ 541.331941][ T6567] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.364918][ T6567] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.378962][ T6567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.393304][ T6567] usb 4-1: Product: syz [ 542.077865][ T6567] usb 4-1: Manufacturer: syz [ 542.168246][ T6567] usb 4-1: SerialNumber: syz [ 542.325911][ T27] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 542.525450][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 542.553574][ T27] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 542.572567][ T27] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 542.582569][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.591336][ T27] usb 5-1: Product: syz [ 542.596456][ T27] usb 5-1: Manufacturer: syz [ 542.601163][ T27] usb 5-1: SerialNumber: syz [ 542.619607][ T27] usb 5-1: config 0 descriptor?? [ 542.652619][ T6567] usb 4-1: 0:2 : does not exist [ 543.094918][T10249] netlink: 'syz.1.2010': attribute type 10 has an invalid length. [ 543.645397][T10264] overlayfs: failed to resolve './file0': -2 [ 544.216361][ T6567] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 544.335535][ T6567] usb 4-1: USB disconnect, device number 29 [ 544.659231][ T6065] usb 5-1: USB disconnect, device number 26 [ 544.758366][T10281] MPTCP: kernel_bind error, err=-98 [ 544.858707][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'. [ 544.947234][ T27] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 544.964950][T10284] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 545.525814][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 545.537847][ T27] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 545.608845][ T27] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 545.650416][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.665656][ T27] usb 1-1: Product: syz [ 545.670645][ T27] usb 1-1: Manufacturer: syz [ 545.679519][ T27] usb 1-1: SerialNumber: syz [ 545.776600][ T27] usb 1-1: config 0 descriptor?? [ 546.376550][T10297] netlink: 'syz.3.2021': attribute type 10 has an invalid length. [ 547.787065][ T27] usb 1-1: USB disconnect, device number 38 [ 548.117347][ T4404] kworker/dying (4404) used greatest stack depth: 20000 bytes left [ 548.226277][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2029'. [ 548.314716][T10324] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 548.506185][T10328] lo speed is unknown, defaulting to 1000 [ 548.647401][T10335] netlink: 'syz.4.2033': attribute type 10 has an invalid length. [ 550.542614][T10347] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2036'. [ 550.571910][T10347] xt_cluster: node mask cannot exceed total number of nodes [ 550.741746][ T4269] Bluetooth: hci4: link tx timeout [ 550.754268][ T4269] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 550.762188][ T4269] Bluetooth: hci4: link tx timeout [ 550.768652][ T4269] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 550.822187][T10354] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 551.076934][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'. [ 551.095043][T10363] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 551.236501][ T126] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 551.595248][ T126] usb 1-1: Using ep0 maxpacket: 8 [ 551.619547][ T126] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 551.654243][ T126] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 551.705855][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.725850][ T126] usb 1-1: Product: syz [ 551.730070][ T126] usb 1-1: Manufacturer: syz [ 551.734744][ T126] usb 1-1: SerialNumber: syz [ 551.757949][ T126] usb 1-1: config 0 descriptor?? [ 553.737041][T10394] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2050'. [ 553.740556][T10396] MPTCP: kernel_bind error, err=-98 [ 553.790195][T10397] xt_cluster: node mask cannot exceed total number of nodes [ 554.083827][ T4298] usb 1-1: USB disconnect, device number 39 [ 554.526288][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2054'. [ 554.571290][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 555.066126][ T27] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 555.285885][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 555.306656][ T27] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 555.316721][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.336177][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.358726][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 555.370584][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.380135][ T27] usb 2-1: Product: syz [ 555.384431][ T27] usb 2-1: Manufacturer: syz [ 555.390585][ T27] usb 2-1: SerialNumber: syz [ 555.865935][ T27] usb 2-1: 0:2 : does not exist [ 556.815808][ T27] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 556.844901][ T27] usb 2-1: USB disconnect, device number 22 [ 557.212382][T10434] MPTCP: kernel_bind error, err=-98 [ 557.354517][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'. [ 557.383531][T10436] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 557.510576][T10439] xt_nat: multiple ranges no longer supported [ 557.649150][T10444] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 559.560629][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2076'. [ 559.609921][T10466] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 560.582340][T10484] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 560.815484][T10490] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2083'. [ 560.827730][T10490] xt_cluster: node mask cannot exceed total number of nodes [ 562.840379][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.846769][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.234836][T10530] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2097'. [ 567.681390][T10570] lo speed is unknown, defaulting to 1000 [ 567.873658][T10564] MPTCP: kernel_bind error, err=-98 [ 570.292873][T10589] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 574.590449][T10670] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 577.345643][ T126] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 577.638447][ T126] usb 4-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53 [ 577.735258][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.794318][ T126] usb 4-1: Product: syz [ 577.798972][ T126] usb 4-1: Manufacturer: syz [ 577.803598][ T126] usb 4-1: SerialNumber: syz [ 577.831150][ T126] usb 4-1: config 0 descriptor?? [ 577.851886][ T126] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 579.506531][T10707] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2154'. [ 579.839475][ T4300] usb 4-1: USB disconnect, device number 30 [ 580.406803][ T126] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 581.455219][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 581.464781][ T126] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 581.507994][ T126] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.575811][ T126] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.629320][ T126] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.665505][T10738] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2165'. [ 581.731045][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.785115][ T126] usb 2-1: Product: syz [ 581.815281][ T126] usb 2-1: Manufacturer: syz [ 581.820784][ T126] usb 2-1: SerialNumber: syz [ 582.262562][ T126] usb 2-1: 0:2 : does not exist [ 582.723387][ T126] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 582.890778][ T126] usb 2-1: USB disconnect, device number 23 [ 583.694091][T10754] xt_nat: multiple ranges no longer supported [ 583.784721][T10756] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 587.056252][T10791] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 588.858623][T10817] lo speed is unknown, defaulting to 1000 [ 588.935700][T10820] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2189'. [ 589.435192][T10826] xt_nat: multiple ranges no longer supported [ 592.323411][T10857] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2201'. [ 592.569014][T10859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2202'. [ 593.670236][ T7059] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 593.865212][ T7059] usb 1-1: Using ep0 maxpacket: 16 [ 593.872378][ T7059] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 593.925109][ T7059] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.988132][ T7059] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.035950][ T7059] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.095694][ T7059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.144502][ T7059] usb 1-1: Product: syz [ 594.171620][ T7059] usb 1-1: Manufacturer: syz [ 594.189710][ T7059] usb 1-1: SerialNumber: syz [ 594.321248][T10879] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 594.652254][ T7059] usb 1-1: 0:2 : does not exist [ 594.671125][ T7059] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 594.750329][ T7059] usb 1-1: USB disconnect, device number 40 [ 594.781118][T10892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2213'. [ 595.035641][T10896] MPTCP: kernel_bind error, err=-98 [ 596.654991][T10921] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 597.653802][T10935] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat md_clear arch_capabilities [ 597.653802][T10935] vmx flags ' [ 597.692474][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.109218][T10946] MPTCP: kernel_bind error, err=-98 [ 598.326915][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'. [ 598.371206][T10952] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 598.399708][T10948] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 598.425575][T10953] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 599.978095][T10982] MPTCP: kernel_bind error, err=-98 [ 600.434986][T10991] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat md_clear arch_capabilities [ 600.434986][T10991] vmx flags ' [ 600.501905][T10996] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2246'. [ 603.328581][T11019] MPTCP: kernel_bind error, err=-98 [ 605.478724][T11046] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat md_clear arch_capabilities [ 605.478724][T11046] vmx flags ' [ 605.522357][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.134606][T11052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2260'. [ 606.365205][ T126] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 606.999872][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 607.021284][ T126] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 607.041059][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.073771][ T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.094947][ T126] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 607.113162][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.124295][ T126] usb 3-1: Product: syz [ 607.135253][ T126] usb 3-1: Manufacturer: syz [ 607.140274][ T126] usb 3-1: SerialNumber: syz [ 607.566469][ T126] usb 3-1: 0:2 : does not exist [ 607.668867][ T126] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 607.694991][T11084] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 607.741372][ T126] usb 3-1: USB disconnect, device number 31 [ 608.857379][T11093] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2276'. [ 609.033845][T11097] netlink: 'syz.2.2278': attribute type 10 has an invalid length. [ 609.139075][T11097] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 610.020534][ T4298] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 610.246894][ T4298] usb 3-1: Using ep0 maxpacket: 8 [ 610.260339][ T4298] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 610.310967][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.352869][ T4298] usb 3-1: Product: syz [ 610.383113][ T4298] usb 3-1: Manufacturer: syz [ 610.409031][ T4298] usb 3-1: SerialNumber: syz [ 610.437595][ T4298] usb 3-1: config 0 descriptor?? [ 610.684316][ T4298] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 611.052552][T11122] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 611.065245][ T126] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 611.278490][ T126] usb 2-1: unable to get BOS descriptor or descriptor too short [ 611.289193][ T126] usb 2-1: config 0 has an invalid interface number: 158 but max is 0 [ 611.297822][ T126] usb 2-1: config 0 has no interface number 0 [ 611.306620][ T126] usb 2-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=70.01 [ 611.307659][ T4298] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 611.316129][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.316159][ T126] usb 2-1: Product: syz [ 611.316176][ T126] usb 2-1: Manufacturer: syz [ 611.316194][ T126] usb 2-1: SerialNumber: syz [ 611.318272][ T126] usb 2-1: config 0 descriptor?? [ 611.353905][ T126] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state. [ 611.362768][ T126] dvb-usb: bulk message failed: -22 (4/0) [ 611.370275][ T126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 611.380851][ T126] dvb-usb: bulk message failed: -22 (5/0) [ 611.386811][ T126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 611.399496][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 611.409459][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 611.420532][ T126] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650) [ 611.431664][ T126] usb 2-1: media controller created [ 611.458202][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 611.479994][ T126] ttusb2: set interface to alts=3 failed [ 611.541603][ T126] DVB: Unable to find symbol tda10023_attach() [ 611.549234][ T126] dvb-usb: no frontend was attached by 'Technotrend TT-connect CT-3650' [ 611.858539][T11131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2284'. [ 612.848201][ T7059] usb 3-1: USB disconnect, device number 32 [ 612.915477][ T126] rc_core: IR keymap rc-tt-1500 not found [ 612.921686][ T126] Registered IR keymap rc-empty [ 612.935652][ T126] rc rc0: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 612.960267][ T126] input: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input25 [ 613.019306][ T126] dvb-usb: schedule remote query interval to 150 msecs. [ 613.055356][ T126] dvb-usb: bulk message failed: -22 (4/0) [ 613.071653][ T126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 613.102843][ T126] dvb-usb: bulk message failed: -22 (5/0) [ 613.123101][ T126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 613.154265][ T126] dvb-usb: Technotrend TT-connect CT-3650 successfully initialized and connected. [ 613.227697][ T7059] dvb-usb: bulk message failed: -22 (4/0) [ 613.233778][ T7059] ttusb2: there might have been an error during control message transfer. (rlen = 9, was 0) [ 613.265753][ T7059] dvb-usb: error -5 while querying for an remote control event. [ 613.435709][ T7059] dvb-usb: bulk message failed: -22 (4/0) [ 613.451757][ T7059] ttusb2: there might have been an error during control message transfer. (rlen = 9, was 0) [ 613.462364][ T126] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 613.497291][ T7059] dvb-usb: error -5 while querying for an remote control event. [ 614.247177][ T4269] Bluetooth: hci4: link tx timeout [ 614.252380][ T4269] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.260703][ T4269] Bluetooth: hci4: link tx timeout [ 614.278723][ T4269] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.317553][ T4298] usb 2-1: USB disconnect, device number 24 [ 614.322049][ T7059] dvb-usb: bulk message failed: -22 (4/0) [ 614.329725][ T7059] ttusb2: there might have been an error during control message transfer. (rlen = 9, was 0) [ 614.340104][ T7059] dvb-usb: error -5 while querying for an remote control event. [ 614.435275][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 614.448903][ T126] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 614.459196][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.470230][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 614.483005][ T126] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 614.493672][ T4298] dvb-usb: Technotrend TT-connect CT-3650 successfully deinitialized and disconnected. [ 614.502578][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.513041][ T126] usb 4-1: Product: syz [ 614.519621][ T126] usb 4-1: Manufacturer: syz [ 614.530079][ T126] usb 4-1: SerialNumber: syz [ 614.670799][T11156] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 615.042796][ T126] usb 4-1: 0:2 : does not exist [ 615.061184][ T126] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 615.195676][ T126] usb 4-1: USB disconnect, device number 31 [ 615.655352][ T7059] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 615.998619][T11177] xt_nat: multiple ranges no longer supported [ 616.705214][ T7059] usb 3-1: Using ep0 maxpacket: 8 [ 616.717421][ T7059] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 616.784665][ T7059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.804953][ T7059] usb 3-1: Product: syz [ 616.809476][ T7059] usb 3-1: Manufacturer: syz [ 616.814732][ T7059] usb 3-1: SerialNumber: syz [ 616.827480][ T7059] usb 3-1: config 0 descriptor?? [ 617.064620][ T7059] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 617.748378][ T7059] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 618.071846][T11186] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 618.078439][T11186] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 618.135018][T11186] vhci_hcd vhci_hcd.0: Device attached [ 618.331022][ T7059] vhci_hcd: vhci_device speed not set [ 618.365748][ T4298] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 618.411499][ T7059] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 618.553922][ T4298] usb 5-1: config 0 has no interfaces? [ 618.560211][ T4298] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 618.579951][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2310'. [ 618.590173][ T4298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.593541][T11202] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 618.626693][ T4298] usb 5-1: config 0 descriptor?? [ 618.814558][ T126] usb 3-1: USB disconnect, device number 33 [ 618.837947][T11187] usb 41-1: recv xbuf, 0 [ 618.838671][ T4298] usb 5-1: USB disconnect, device number 27 [ 618.848961][ T4542] vhci_hcd: stop threads [ 618.853452][ T4542] vhci_hcd: release socket [ 618.863673][ T4542] vhci_hcd: disconnect device [ 618.921886][ T7059] vhci_hcd: vhci_device speed not set [ 620.649974][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2321'. [ 620.692719][T11237] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 623.005844][T11266] bridge0: port 3(erspan0) entered blocking state [ 623.029593][T11266] bridge0: port 3(erspan0) entered disabled state [ 623.038611][T11266] device erspan0 entered promiscuous mode [ 624.279686][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.287056][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.360965][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2334'. [ 624.423035][T11282] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 627.556496][T11304] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 627.714717][T11304] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 627.736529][T11304] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 627.777429][T11304] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 627.783677][T11304] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 627.793953][T11304] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 627.824259][T11304] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 627.935771][T11304] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 627.982706][T11304] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 628.012388][T11304] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 628.051027][T11304] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 628.057513][T11304] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 628.871923][T11339] netlink: 'syz.2.2352': attribute type 1 has an invalid length. [ 628.885395][T11339] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2352'. [ 628.915263][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 628.919612][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2352'. [ 629.795974][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 629.855813][ T4298] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 629.877120][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 629.935638][T11357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2360'. [ 630.035992][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 630.258479][ T4298] usb 2-1: Using ep0 maxpacket: 8 [ 630.316899][ T4298] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 630.328194][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.374000][ T4298] usb 2-1: Product: syz [ 630.394771][ T4298] usb 2-1: Manufacturer: syz [ 630.415580][ T4298] usb 2-1: SerialNumber: syz [ 630.436523][ T4298] usb 2-1: config 0 descriptor?? [ 630.643355][T11363] fuse: Bad value for 'fd' [ 630.652554][ T4298] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 630.995852][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 631.045886][ T4300] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 631.225913][ T4300] usb 3-1: Using ep0 maxpacket: 16 [ 631.233452][ T4300] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 631.242896][ T4300] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.253848][ T4300] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.264743][ T4298] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 631.275493][ T4300] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 631.286154][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.294261][ T4300] usb 3-1: Product: syz [ 631.298590][ T4300] usb 3-1: Manufacturer: syz [ 631.303275][ T4300] usb 3-1: SerialNumber: syz [ 631.455759][ T4298] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 631.839934][ T4298] usb 4-1: Using ep0 maxpacket: 8 [ 631.877844][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 631.920597][ T4300] usb 3-1: 0:2 : does not exist [ 631.939452][ T4298] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 631.955971][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 632.052251][ T4298] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 632.116058][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 632.149088][ T4298] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 632.227306][ T4298] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.323300][ T4298] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 632.345724][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.557513][ T4300] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 632.691029][ T4300] usb 3-1: USB disconnect, device number 34 [ 632.703496][ T4298] usb 4-1: GET_CAPABILITIES returned 0 [ 632.711512][ T4298] usbtmc 4-1:16.0: can't read capabilities [ 633.178270][ T7059] usb 2-1: USB disconnect, device number 25 [ 633.206826][ T126] usb 4-1: USB disconnect, device number 32 [ 633.401439][T11403] fuse: Bad value for 'fd' [ 636.021152][ T126] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 636.119006][T11437] fuse: Bad value for 'fd' [ 636.215208][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 636.226294][ T126] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 636.245464][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.260253][ T126] usb 3-1: Product: syz [ 636.264504][ T126] usb 3-1: Manufacturer: syz [ 636.286488][ T126] usb 3-1: SerialNumber: syz [ 636.292919][ T126] usb 3-1: config 0 descriptor?? [ 636.515368][ T126] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 637.136476][ T126] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 637.913372][T11474] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 637.919961][T11474] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 637.988980][T11474] vhci_hcd vhci_hcd.0: Device attached [ 638.186181][ T4298] vhci_hcd: vhci_device speed not set [ 638.265798][ T4298] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 638.285795][ T4300] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 638.480081][ T4300] usb 5-1: config 0 has no interfaces? [ 638.487396][ T4300] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 638.506624][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.531536][ T4300] usb 5-1: config 0 descriptor?? [ 638.571663][ T4300] usb 3-1: USB disconnect, device number 35 [ 639.629723][T11475] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 639.647695][ T126] usb 5-1: USB disconnect, device number 28 [ 639.666159][ T4280] vhci_hcd: stop threads [ 639.670475][ T4280] vhci_hcd: release socket [ 639.691328][ T4280] vhci_hcd: disconnect device [ 643.664908][ T4300] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 643.755709][ T4298] vhci_hcd: vhci_device speed not set [ 643.835721][ T4300] usb 3-1: device descriptor read/64, error -71 [ 644.105498][ T4300] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 644.306205][ T4300] usb 3-1: device descriptor read/64, error -71 [ 644.436872][ T4300] usb usb3-port1: attempt power cycle [ 644.847437][T11567] netlink: 'syz.3.2430': attribute type 1 has an invalid length. [ 644.865521][T11567] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2430'. [ 644.876081][ T4300] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 644.891591][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2430'. [ 644.935835][ T4300] usb 3-1: device descriptor read/8, error -71 [ 645.974019][T11589] MPTCP: kernel_bind error, err=-98 [ 647.155930][ T4298] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 647.416620][ T4298] usb 2-1: device descriptor read/64, error -71 [ 647.705721][ T4298] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 647.875872][ T4298] usb 2-1: device descriptor read/64, error -71 [ 647.997798][ T4298] usb usb2-port1: attempt power cycle [ 648.425702][ T4298] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 648.466570][ T4298] usb 2-1: device descriptor read/8, error -71 [ 648.735729][ T4298] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 648.766421][ T4298] usb 2-1: device descriptor read/8, error -71 [ 648.894692][ T4298] usb usb2-port1: unable to enumerate USB device [ 648.975690][T11644] kvm: emulating exchange as write [ 649.410147][ C1] sd 0:0:1:0: [sda] tag#6578 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 649.420677][ C1] sd 0:0:1:0: [sda] tag#6578 CDB: Write(6) 0a 0b 00 08 00 00 [ 651.069782][ T4298] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 651.145359][T11693] xt_nat: multiple ranges no longer supported [ 651.965680][ T4298] usb 4-1: device descriptor read/64, error -71 [ 652.310167][ T4298] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 653.155993][ T4298] usb 4-1: device descriptor read/64, error -71 [ 653.278097][ T4298] usb usb4-port1: attempt power cycle [ 654.095781][ T4298] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 654.360677][ T4298] usb 4-1: device not accepting address 35, error -71 [ 654.400268][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2486'. [ 654.947322][T11744] xt_nat: multiple ranges no longer supported [ 655.485348][ T126] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 655.676768][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 655.744432][ T126] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 655.841546][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.921035][ T126] usb 2-1: Product: syz [ 655.964398][ T126] usb 2-1: Manufacturer: syz [ 656.212369][ T126] usb 2-1: SerialNumber: syz [ 656.290866][ T126] usb 2-1: config 0 descriptor?? [ 656.521260][ T126] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 657.336714][T11788] xt_nat: multiple ranges no longer supported [ 658.589789][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 658.597582][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 658.605616][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 658.612939][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 658.620722][ T126] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 658.637647][ T126] usb 2-1: USB disconnect, device number 30 [ 658.654032][ T26] audit: type=1326 audit(1731143778.498:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11809 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 658.676382][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.703759][ T26] audit: type=1326 audit(1731143778.498:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11809 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 658.754311][ T26] audit: type=1326 audit(1731143778.538:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11809 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 658.776607][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.837533][ T26] audit: type=1326 audit(1731143778.538:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11809 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 658.862766][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.885676][ T26] audit: type=1326 audit(1731143778.538:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11809 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 658.918324][ T26] audit: type=1326 audit(1731143778.548:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11809 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 659.760293][ T26] audit: type=1326 audit(1731143778.548:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11809 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 659.819767][ T26] audit: type=1326 audit(1731143778.548:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11809 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f120d9756e7 code=0x7ffc0000 [ 660.082962][ T26] audit: type=1326 audit(1731143778.548:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11809 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f120d91a099 code=0x7ffc0000 [ 660.164559][T11829] xt_nat: multiple ranges no longer supported [ 661.029558][T11838] Bluetooth: MGMT ver 1.22 [ 661.060783][ T26] audit: type=1326 audit(1731143778.548:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11809 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f120d9756e7 code=0x7ffc0000 [ 665.035284][ T126] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 665.315260][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 665.325516][ T126] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 665.347544][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.364261][ T126] usb 3-1: Product: syz [ 665.373019][ T126] usb 3-1: Manufacturer: syz [ 665.383119][ T126] usb 3-1: SerialNumber: syz [ 665.393597][ T126] usb 3-1: config 0 descriptor?? [ 665.727660][ T126] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 668.744583][ T126] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 668.762456][ T126] usb 3-1: USB disconnect, device number 40 [ 669.363560][T11939] xt_nat: multiple ranges no longer supported [ 671.381744][T11958] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2551'. [ 671.399504][T11958] xt_cluster: node mask cannot exceed total number of nodes [ 674.112638][T11982] kvm: pic: single mode not supported [ 674.112762][T11982] kvm: pic: level sensitive irq not supported [ 674.136400][T11982] kvm: pic: non byte read [ 674.198908][T11982] kvm: pic: non byte read [ 678.376757][ T48] Bluetooth: hci4: link tx timeout [ 678.381932][ T48] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 678.390207][ T48] Bluetooth: hci4: link tx timeout [ 678.396035][ T48] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 679.799480][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 679.799498][ T26] audit: type=1326 audit(1731143799.648:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba237e719 code=0x7ffc0000 [ 679.828265][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.984417][ T26] audit: type=1326 audit(1731143799.668:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ba237e719 code=0x7ffc0000 [ 680.015781][ T26] audit: type=1326 audit(1731143799.668:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba237e719 code=0x7ffc0000 [ 680.116152][T12105] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2594'. [ 680.692756][ T26] audit: type=1326 audit(1731143799.668:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba237e719 code=0x7ffc0000 [ 680.757036][ T26] audit: type=1326 audit(1731143799.668:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f1ba237e719 code=0x7ffc0000 [ 680.779389][ C0] vkms_vblank_simulate: vblank timer overrun [ 680.796692][ T26] audit: type=1326 audit(1731143799.668:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba237e719 code=0x7ffc0000 [ 680.829762][T12100] MPTCP: kernel_bind error, err=-98 [ 680.934545][ T26] audit: type=1326 audit(1731143799.668:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba237e719 code=0x7ffc0000 [ 680.962369][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.625981][ T26] audit: type=1326 audit(1731143803.478:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12144 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23add7e719 code=0x7ffc0000 [ 683.678713][ T26] audit: type=1326 audit(1731143803.478:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12144 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23add7e719 code=0x7ffc0000 [ 683.804132][ T26] audit: type=1326 audit(1731143803.508:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12144 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23add7e719 code=0x7ffc0000 [ 683.826523][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.980723][T12148] dlm: no locking on control device [ 683.998616][T12148] program syz.4.2610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 685.726672][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.733429][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.921822][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 686.921839][ T26] audit: type=1326 audit(1731143806.768:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.1.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 687.032587][ T26] audit: type=1326 audit(1731143806.768:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.1.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 687.122956][ T26] audit: type=1326 audit(1731143806.768:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.1.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 687.145319][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.158293][T12188] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 687.164871][T12188] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 687.202942][ T26] audit: type=1326 audit(1731143806.768:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.1.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 687.218070][T12188] vhci_hcd vhci_hcd.0: Device attached [ 687.225446][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.325992][ T26] audit: type=1326 audit(1731143806.768:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.1.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 687.416012][ T27] vhci_hcd: vhci_device speed not set [ 687.442444][ T26] audit: type=1326 audit(1731143806.778:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.1.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 687.486860][ T27] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 687.504649][ T26] audit: type=1326 audit(1731143806.778:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.1.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 687.568767][ T26] audit: type=1326 audit(1731143806.778:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.1.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 687.597297][ T4300] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 687.908239][ T4300] usb 3-1: config 0 has no interfaces? [ 687.913758][ T4300] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 687.938532][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.963908][ T4300] usb 3-1: config 0 descriptor?? [ 688.179110][T12207] MPTCP: kernel_bind error, err=-98 [ 688.199448][T12193] usb 37-1: recv xbuf, 0 [ 688.211328][ T4300] usb 3-1: USB disconnect, device number 41 [ 688.228025][ T46] vhci_hcd: stop threads [ 688.233605][ T46] vhci_hcd: release socket [ 688.264880][ T46] vhci_hcd: disconnect device [ 688.305281][ T27] vhci_hcd: vhci_device speed not set [ 693.655363][T12283] xt_nat: multiple ranges no longer supported [ 694.345857][T12293] xt_cgroup: path and classid specified [ 699.706168][T12343] MPTCP: kernel_bind error, err=-98 [ 704.752807][T12421] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 704.764615][T12421] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 705.098580][T12421] vhci_hcd vhci_hcd.0: Device attached [ 705.316547][ T4298] vhci_hcd: vhci_device speed not set [ 705.385827][ T4300] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 705.400219][ T4298] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 705.595857][ T4300] usb 5-1: config 0 has no interfaces? [ 705.601629][ T4300] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 705.782030][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.792882][ T4300] usb 5-1: config 0 descriptor?? [ 706.004003][T12422] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 706.004686][ T4300] usb 5-1: USB disconnect, device number 29 [ 706.040201][ T46] vhci_hcd: stop threads [ 706.067172][ T46] vhci_hcd: release socket [ 706.149208][ T46] vhci_hcd: disconnect device [ 707.931016][T12448] MPTCP: kernel_bind error, err=-98 [ 708.035383][ T7059] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 708.228567][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2712'. [ 708.255187][ T7059] usb 5-1: Using ep0 maxpacket: 16 [ 708.262761][ T7059] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 708.334594][ T7059] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.374018][ T7059] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 708.420637][ T7059] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 708.462493][ T7059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.503683][ T7059] usb 5-1: Product: syz [ 708.525337][ T7059] usb 5-1: Manufacturer: syz [ 708.536017][ T7059] usb 5-1: SerialNumber: syz [ 708.971633][ T7059] usb 5-1: 0:2 : does not exist [ 708.993077][ T7059] usb 5-1: 1:0: cannot get min/max values for control 2 (id 1) [ 709.079296][ T7059] usb 5-1: USB disconnect, device number 30 [ 710.545666][ T4298] vhci_hcd: vhci_device speed not set [ 711.553494][T12495] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat md_clear arch_capabilities [ 711.553494][T12495] vmx flags ' [ 711.591595][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.705915][T12494] vivid-000: kernel_thread() failed [ 713.114929][T12514] fuse: Unknown parameter 'group_i00000000000000000000' [ 713.926155][ T7059] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 714.115528][ T7059] usb 5-1: Using ep0 maxpacket: 16 [ 714.126135][ T7059] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 714.149794][ T7059] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.181676][ T7059] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 714.319979][ T7059] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 714.329510][ T7059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.357615][ T7059] usb 5-1: Product: syz [ 714.389668][ T7059] usb 5-1: Manufacturer: syz [ 714.405339][ T7059] usb 5-1: SerialNumber: syz [ 715.095596][ T7059] usb 5-1: 0:2 : does not exist [ 715.168578][ T7059] usb 5-1: 1:0: cannot get min/max values for control 2 (id 1) [ 715.230486][ T7059] usb 5-1: USB disconnect, device number 31 [ 716.632376][T12545] fuse: Unknown parameter 'group_i00000000000000000000' [ 718.394581][T12561] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2743'. [ 718.883543][T12561] xt_cluster: node mask cannot exceed total number of nodes [ 719.265648][ T4298] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 719.455733][ T4298] usb 5-1: Using ep0 maxpacket: 16 [ 719.463206][ T4298] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 719.494104][ T4298] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.528213][ T4298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 719.642198][ T4298] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 719.687028][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.714973][ T4298] usb 5-1: Product: syz [ 719.723378][ T4298] usb 5-1: Manufacturer: syz [ 719.733419][ T4298] usb 5-1: SerialNumber: syz [ 720.228292][ T4298] usb 5-1: 0:2 : does not exist [ 720.259523][ T4298] usb 5-1: 1:0: cannot get min/max values for control 2 (id 1) [ 720.429803][ T4298] usb 5-1: USB disconnect, device number 32 [ 722.436883][T12613] autofs4:pid:12613:autofs_fill_super: called with bogus options [ 725.586685][T12634] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2768'. [ 725.796584][T12634] xt_cluster: node mask cannot exceed total number of nodes [ 726.097381][T12640] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2772'. [ 732.354589][T12701] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2789'. [ 732.447014][T12705] xt_cluster: node mask cannot exceed total number of nodes [ 734.265787][ T4298] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 734.825671][ T4298] usb 5-1: Using ep0 maxpacket: 16 [ 734.832801][ T4298] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 734.849192][ T4298] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.872631][ T4298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.908360][ T4298] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 734.919836][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.941534][ T4298] usb 5-1: Product: syz [ 734.963136][ T4298] usb 5-1: Manufacturer: syz [ 734.974596][ T4298] usb 5-1: SerialNumber: syz [ 735.427887][ T4298] usb 5-1: 0:2 : does not exist [ 737.428404][ T7059] usb 5-1: USB disconnect, device number 33 [ 739.775097][ T126] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 740.087115][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.105649][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.117345][ T126] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 740.128308][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.143704][ T126] usb 3-1: config 0 descriptor?? [ 740.570112][ T126] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 740.599991][ T126] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 740.641030][ T126] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 740.673665][ T126] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 740.708757][ T126] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 740.745871][ T126] uclogic 0003:5543:0004.000A: No inputs registered, leaving [ 740.819785][ T126] uclogic 0003:5543:0004.000A: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0 [ 740.922720][ T126] usb 3-1: USB disconnect, device number 42 [ 741.755866][ T4300] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 741.955604][ T4300] usb 3-1: Using ep0 maxpacket: 16 [ 741.970596][ T4300] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.982416][ T4300] usb 3-1: config 0 interface 0 has no altsetting 0 [ 741.989948][ T4300] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 742.000685][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.029498][ T48] Bluetooth: hci4: link tx timeout [ 742.034775][ T48] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 742.043801][ T48] Bluetooth: hci4: link tx timeout [ 742.049618][ T48] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 742.058267][ T4300] usb 3-1: config 0 descriptor?? [ 742.533280][ T4300] hid (null): unknown global tag 0xc [ 742.582239][ T4300] cougar 0003:060B:500A.000B: usage count exceeds max: fixing up report descriptor [ 742.644267][ T4300] cougar 0003:060B:500A.000B: unexpected long global item [ 742.664388][ T4300] cougar 0003:060B:500A.000B: parse failed [ 742.677667][ T4300] cougar: probe of 0003:060B:500A.000B failed with error -22 [ 742.888013][ T4300] usb 3-1: USB disconnect, device number 43 [ 742.944221][T12840] dlm: no locking on control device [ 742.952393][T12840] program syz.0.2839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 743.815946][ T26] audit: type=1326 audit(1731143863.668:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53197e719 code=0x7ffc0000 [ 743.895671][ T26] audit: type=1326 audit(1731143863.668:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53197e719 code=0x7ffc0000 [ 743.972316][ T26] audit: type=1326 audit(1731143863.708:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd53197e719 code=0x7ffc0000 [ 744.002867][ T26] audit: type=1326 audit(1731143863.708:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53197e719 code=0x7ffc0000 [ 744.039776][ T26] audit: type=1326 audit(1731143863.708:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53197e719 code=0x7ffc0000 [ 744.069893][ T26] audit: type=1326 audit(1731143863.718:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd53197e719 code=0x7ffc0000 [ 744.156975][ T26] audit: type=1326 audit(1731143863.718:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53197e719 code=0x7ffc0000 [ 744.374137][ T26] audit: type=1326 audit(1731143863.718:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53197e719 code=0x7ffc0000 [ 744.410485][ T26] audit: type=1326 audit(1731143863.728:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fd53197e719 code=0x7ffc0000 [ 744.453951][ T26] audit: type=1326 audit(1731143863.728:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53197e719 code=0x7ffc0000 [ 744.476455][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.804608][T12873] netlink: 'syz.4.2850': attribute type 1 has an invalid length. [ 744.852353][T12873] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2850'. [ 744.855887][ T4300] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 745.631960][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2850'. [ 745.785730][ T4300] usb 2-1: Using ep0 maxpacket: 16 [ 745.821293][ T4300] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 745.865939][ T4300] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.923101][ T4300] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 746.066083][ T4300] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 746.091391][T12886] xt_cgroup: path and classid specified [ 746.485535][ T4300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.493590][ T4300] usb 2-1: Product: syz [ 746.553448][ T4300] usb 2-1: Manufacturer: syz [ 746.558911][ T4300] usb 2-1: SerialNumber: syz [ 746.978920][ T4300] usb 2-1: 0:2 : does not exist [ 747.157714][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.164149][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.937000][T12907] dlm: no locking on control device [ 747.947076][T12907] program syz.0.2859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 750.094079][ T7059] usb 2-1: USB disconnect, device number 31 [ 750.422796][T12923] netlink: 'syz.0.2862': attribute type 1 has an invalid length. [ 750.470744][T12923] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2862'. [ 750.879976][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2862'. [ 750.987858][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 751.002887][ T26] audit: type=1326 audit(1731143870.748:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 751.429226][ T26] audit: type=1326 audit(1731143870.838:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 751.704157][ T26] audit: type=1326 audit(1731143871.298:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 751.728625][ T26] audit: type=1326 audit(1731143871.298:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 751.752704][ T26] audit: type=1326 audit(1731143871.298:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 751.798864][ T26] audit: type=1326 audit(1731143871.298:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 751.826632][ T26] audit: type=1326 audit(1731143871.298:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 751.999861][ T26] audit: type=1326 audit(1731143871.298:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 752.023481][ T26] audit: type=1326 audit(1731143871.298:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 752.047325][ T26] audit: type=1326 audit(1731143871.298:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5eb7e719 code=0x7ffc0000 [ 752.264087][T12951] program syz.4.2872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 753.506430][ T4300] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 755.036441][T12974] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2878'. [ 755.094167][T12975] xt_cluster: node mask cannot exceed total number of nodes [ 755.455089][ T4300] usb 5-1: Using ep0 maxpacket: 16 [ 755.462108][ T4300] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 755.485608][ T4300] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.505624][ T4300] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 755.534054][ T4300] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 755.555782][ T4300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.563840][ T4300] usb 5-1: Product: syz [ 755.585601][ T4300] usb 5-1: Manufacturer: syz [ 755.590269][ T4300] usb 5-1: SerialNumber: syz [ 755.881560][T12990] netlink: 'syz.2.2883': attribute type 1 has an invalid length. [ 755.917320][T12990] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2883'. [ 755.993597][T12993] program syz.0.2884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 756.131743][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2883'. [ 756.613382][ T4300] usb 5-1: 0:2 : does not exist [ 756.737470][T13000] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 756.744026][T13000] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 756.760738][T13000] vhci_hcd vhci_hcd.0: Device attached [ 758.067365][ T7059] vhci_hcd: vhci_device speed not set [ 758.108550][ T4300] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 758.542495][ T4298] usb 5-1: USB disconnect, device number 34 [ 758.555214][ T7059] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 758.635555][ T4300] usb 2-1: device descriptor read/64, error -71 [ 758.908502][ T4300] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 758.919447][T13024] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2892'. [ 758.978267][T13025] xt_cluster: node mask cannot exceed total number of nodes [ 759.269801][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 759.269814][ T26] audit: type=1326 audit(1731143879.118:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.2.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23add7e719 code=0x7ffc0000 [ 759.285711][ T4300] usb 2-1: device descriptor read/64, error -71 [ 759.417885][ T26] audit: type=1326 audit(1731143879.148:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.2.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23add7e719 code=0x7ffc0000 [ 759.426039][ T4300] usb usb2-port1: attempt power cycle [ 759.440290][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.537702][ T26] audit: type=1326 audit(1731143879.158:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.2.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23add7e719 code=0x7ffc0000 [ 759.661643][ T26] audit: type=1326 audit(1731143879.158:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.2.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23add7e719 code=0x7ffc0000 [ 759.742051][T13002] vhci_hcd: connection reset by peer [ 759.749912][ T26] audit: type=1326 audit(1731143879.158:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.2.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23add7e719 code=0x7ffc0000 [ 759.772302][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.784926][ T26] audit: type=1326 audit(1731143879.158:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.2.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23add7e719 code=0x7ffc0000 [ 759.807437][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.814148][ T26] audit: type=1326 audit(1731143879.158:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.2.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23add7e719 code=0x7ffc0000 [ 759.836539][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.853336][ T26] audit: type=1326 audit(1731143879.158:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.2.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23add7e719 code=0x7ffc0000 [ 759.882716][ T11] vhci_hcd: stop threads [ 759.887489][ T11] vhci_hcd: release socket [ 759.893452][ T11] vhci_hcd: disconnect device [ 759.898670][ T26] audit: type=1326 audit(1731143879.168:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.2.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f23add7e719 code=0x7ffc0000 [ 759.921077][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.969164][ T26] audit: type=1326 audit(1731143879.168:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.2.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23add7e719 code=0x7ffc0000 [ 759.991574][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.206110][T13037] program syz.3.2896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 762.687413][ T48] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 763.013678][ T6567] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 763.131614][T13064] xt_nat: multiple ranges no longer supported [ 763.845219][ T7059] vhci_hcd: vhci_device speed not set [ 763.875189][ T6567] usb 5-1: Using ep0 maxpacket: 16 [ 763.882325][ T6567] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 763.911896][ T6567] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 763.959513][ T6567] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 764.047118][ T6567] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 764.105159][ T6567] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.105723][T13068] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 764.119933][T13068] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 764.129366][ T6567] usb 5-1: Product: syz [ 764.153969][ T6567] usb 5-1: Manufacturer: syz [ 764.169700][ T6567] usb 5-1: SerialNumber: syz [ 764.253397][T13068] vhci_hcd vhci_hcd.0: Device attached [ 764.464047][T13076] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2906'. [ 764.523448][T13078] xt_cluster: node mask cannot exceed total number of nodes [ 764.545169][ T126] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 764.585847][ T7059] vhci_hcd: vhci_device speed not set [ 764.600065][ T6567] usb 5-1: 0:2 : does not exist [ 764.656217][ T7059] usb 35-1: device descriptor read/64, error -110 [ 764.738157][ T126] usb 2-1: no configurations [ 764.744115][ T126] usb 2-1: can't read configurations, error -22 [ 764.855790][ T7059] vhci_hcd: vhci_device speed not set [ 764.917278][ T126] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 764.925308][ T7059] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 765.155956][ T126] usb 2-1: no configurations [ 765.160616][ T126] usb 2-1: can't read configurations, error -22 [ 765.230498][T13083] program syz.0.2908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 765.943147][ T126] usb usb2-port1: attempt power cycle [ 765.971872][ T4298] usb 5-1: USB disconnect, device number 35 [ 768.068220][ T48] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 768.077371][ T48] Bluetooth: hci4: Injecting HCI hardware error event [ 768.086156][ T48] Bluetooth: hci4: hardware error 0x00 [ 769.123890][T13069] vhci_hcd: connection reset by peer [ 769.132179][ T6007] vhci_hcd: stop threads [ 769.136771][ T6007] vhci_hcd: release socket [ 769.141360][ T6007] vhci_hcd: disconnect device [ 769.146326][ T126] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 769.532851][ T126] usb 2-1: device not accepting address 37, error -71 [ 769.585166][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 769.585188][ T26] audit: type=1326 audit(1731143889.418:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.0.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 770.055226][ T7059] vhci_hcd: vhci_device speed not set [ 770.442286][ T26] audit: type=1326 audit(1731143889.698:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.0.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 770.493738][ T26] audit: type=1326 audit(1731143889.698:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.0.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 770.586580][T13127] xt_nat: multiple ranges no longer supported [ 771.022207][ T26] audit: type=1326 audit(1731143889.708:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.0.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 771.051609][T13131] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2919'. [ 771.104536][T13133] xt_cluster: node mask cannot exceed total number of nodes [ 771.231310][ T26] audit: type=1326 audit(1731143889.708:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.0.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 771.253730][ C0] vkms_vblank_simulate: vblank timer overrun [ 771.311956][ T26] audit: type=1326 audit(1731143889.708:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.0.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 771.480925][ T26] audit: type=1326 audit(1731143889.708:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.0.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 771.503390][ C0] vkms_vblank_simulate: vblank timer overrun [ 771.635220][ T48] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 771.649960][ T26] audit: type=1326 audit(1731143889.708:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.0.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 771.702761][ T26] audit: type=1326 audit(1731143889.708:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.0.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 771.746410][ T26] audit: type=1326 audit(1731143889.718:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.0.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120d97e719 code=0x7ffc0000 [ 771.768977][ C0] vkms_vblank_simulate: vblank timer overrun [ 771.832784][ T6184] ------------[ cut here ]------------ [ 771.839576][ T6184] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 771.848419][ T6184] WARNING: CPU: 1 PID: 6184 at fs/sysfs/group.c:280 sysfs_remove_group+0x179/0x2a0 [ 771.858872][ T6184] Modules linked in: [ 771.862840][ T6184] CPU: 1 PID: 6184 Comm: kbnepd bnep0 Not tainted 6.1.116-syzkaller #0 [ 771.871748][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 771.882496][ T6184] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 771.888923][ T6184] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 7a a4 c7 ff 49 8b 14 24 48 c7 c7 a0 72 1c 8b 4c 89 f6 e8 c7 35 38 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e1 1b 70 ff [ 771.908621][ T6184] RSP: 0018:ffffc900195d7910 EFLAGS: 00010246 [ 771.914837][ T6184] RAX: f1ab3de2aaa71200 RBX: ffff88807b2d7450 RCX: ffff88802bf13b80 [ 771.922906][ T6184] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 771.930964][ T6184] RBP: dffffc0000000000 R08: ffffffff8152a88e R09: fffff520032bae81 [ 771.939015][ T6184] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807b2d7420 [ 771.947112][ T6184] R13: 1ffffffff180f55c R14: ffffffff8c07b220 R15: ffff88805a90b9f8 [ 771.955153][ T6184] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 771.964203][ T6184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.970848][ T6184] CR2: 00007fffe437b0b8 CR3: 000000005e4d4000 CR4: 00000000003506e0 [ 771.978905][ T6184] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 771.986944][ T6184] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 771.994954][ T6184] Call Trace: [ 771.998295][ T6184] [ 772.001255][ T6184] ? __warn+0x15a/0x520 [ 772.005483][ T6184] ? sysfs_remove_group+0x179/0x2a0 [ 772.010816][ T6184] ? report_bug+0x2af/0x500 [ 772.015404][ T6184] ? sysfs_remove_group+0x179/0x2a0 [ 772.020684][ T6184] ? handle_bug+0x3d/0x70 [ 772.025083][ T6184] ? exc_invalid_op+0x16/0x40 [ 772.029808][ T6184] ? asm_exc_invalid_op+0x16/0x20 [ 772.034888][ T6184] ? __warn_printk+0x28e/0x350 [ 772.039733][ T6184] ? sysfs_remove_group+0x179/0x2a0 [ 772.045015][ T6184] netdev_queue_update_kobjects+0x3ce/0x480 [ 772.050976][ T6184] netdev_unregister_kobject+0x10d/0x250 [ 772.056689][ T6184] unregister_netdevice_many+0x12bf/0x17a0 [ 772.062558][ T6184] ? alloc_netdev_mqs+0xeb0/0xeb0 [ 772.067677][ T6184] ? mutex_lock_nested+0x10/0x10 [ 772.072665][ T6184] ? read_lock_is_recursive+0x10/0x10 [ 772.078121][ T6184] unregister_netdev+0x19b/0x210 [ 772.083117][ T6184] ? clear_nonspinnable+0x60/0x60 [ 772.088189][ T6184] ? unlist_netdevice+0x7f0/0x7f0 [ 772.093299][ T6184] bnep_session+0x2db9/0x2fa0 [ 772.098041][ T6184] ? bnep_add_connection+0xd80/0xd80 [ 772.103375][ T6184] ? _raw_spin_unlock+0x40/0x40 [ 772.108284][ T6184] ? release_firmware_map_entry+0x16a/0x186 [ 772.114365][ T6184] ? wait_woken+0x1d0/0x1d0 [ 772.118936][ T6184] ? _raw_spin_unlock+0x40/0x40 [ 772.123818][ T6184] ? __kthread_parkme+0x168/0x1c0 [ 772.128915][ T6184] kthread+0x28d/0x320 [ 772.133006][ T6184] ? bnep_add_connection+0xd80/0xd80 [ 772.138344][ T6184] ? kthread_blkcg+0xd0/0xd0 [ 772.142940][ T6184] ret_from_fork+0x1f/0x30 [ 772.147400][ T6184] [ 772.150419][ T6184] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 772.157698][ T6184] CPU: 1 PID: 6184 Comm: kbnepd bnep0 Not tainted 6.1.116-syzkaller #0 [ 772.165935][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 772.175990][ T6184] Call Trace: [ 772.179264][ T6184] [ 772.182195][ T6184] dump_stack_lvl+0x1e3/0x2cb [ 772.186878][ T6184] ? nf_tcp_handle_invalid+0x642/0x642 [ 772.192339][ T6184] ? panic+0x764/0x764 [ 772.196420][ T6184] ? vscnprintf+0x59/0x80 [ 772.200759][ T6184] panic+0x318/0x764 [ 772.204657][ T6184] ? __warn+0x169/0x520 [ 772.208822][ T6184] ? memcpy_page_flushcache+0xfc/0xfc [ 772.214209][ T6184] ? ret_from_fork+0x1f/0x30 [ 772.218936][ T6184] __warn+0x348/0x520 [ 772.222971][ T6184] ? sysfs_remove_group+0x179/0x2a0 [ 772.228172][ T6184] report_bug+0x2af/0x500 [ 772.232503][ T6184] ? sysfs_remove_group+0x179/0x2a0 [ 772.237821][ T6184] handle_bug+0x3d/0x70 [ 772.241991][ T6184] exc_invalid_op+0x16/0x40 [ 772.246528][ T6184] asm_exc_invalid_op+0x16/0x20 [ 772.251385][ T6184] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 772.257193][ T6184] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 7a a4 c7 ff 49 8b 14 24 48 c7 c7 a0 72 1c 8b 4c 89 f6 e8 c7 35 38 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e1 1b 70 ff [ 772.276804][ T6184] RSP: 0018:ffffc900195d7910 EFLAGS: 00010246 [ 772.283013][ T6184] RAX: f1ab3de2aaa71200 RBX: ffff88807b2d7450 RCX: ffff88802bf13b80 [ 772.291000][ T6184] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 772.298978][ T6184] RBP: dffffc0000000000 R08: ffffffff8152a88e R09: fffff520032bae81 [ 772.307037][ T6184] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807b2d7420 [ 772.315019][ T6184] R13: 1ffffffff180f55c R14: ffffffff8c07b220 R15: ffff88805a90b9f8 [ 772.323019][ T6184] ? __warn_printk+0x28e/0x350 [ 772.327810][ T6184] netdev_queue_update_kobjects+0x3ce/0x480 [ 772.333748][ T6184] netdev_unregister_kobject+0x10d/0x250 [ 772.339395][ T6184] unregister_netdevice_many+0x12bf/0x17a0 [ 772.345222][ T6184] ? alloc_netdev_mqs+0xeb0/0xeb0 [ 772.350427][ T6184] ? mutex_lock_nested+0x10/0x10 [ 772.355379][ T6184] ? read_lock_is_recursive+0x10/0x10 [ 772.360763][ T6184] unregister_netdev+0x19b/0x210 [ 772.365727][ T6184] ? clear_nonspinnable+0x60/0x60 [ 772.370761][ T6184] ? unlist_netdevice+0x7f0/0x7f0 [ 772.375824][ T6184] bnep_session+0x2db9/0x2fa0 [ 772.380550][ T6184] ? bnep_add_connection+0xd80/0xd80 [ 772.385848][ T6184] ? _raw_spin_unlock+0x40/0x40 [ 772.390708][ T6184] ? release_firmware_map_entry+0x16a/0x186 [ 772.396612][ T6184] ? wait_woken+0x1d0/0x1d0 [ 772.401128][ T6184] ? _raw_spin_unlock+0x40/0x40 [ 772.405987][ T6184] ? __kthread_parkme+0x168/0x1c0 [ 772.411106][ T6184] kthread+0x28d/0x320 [ 772.415173][ T6184] ? bnep_add_connection+0xd80/0xd80 [ 772.420485][ T6184] ? kthread_blkcg+0xd0/0xd0 [ 772.425084][ T6184] ret_from_fork+0x1f/0x30 [ 772.429529][ T6184] [ 772.432955][ T6184] Kernel Offset: disabled [ 772.437383][ T6184] Rebooting in 86400 seconds..