last executing test programs: 12m12.274903919s ago: executing program 32 (id=13395): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 6m17.646578323s ago: executing program 33 (id=19705): unshare(0x40600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000180)=r1, 0x4) 5m49.168994231s ago: executing program 4 (id=20211): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1, 0x0, 0x0, 0x800}, 0x4000080) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x2, 0x0, @val=0x80}}}}}}}, 0x0) syz_emit_ethernet(0x31, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xffff, 0xf, 0x0, @opaque="66b71b4468e24e"}}}}}, 0x0) 5m48.990052302s ago: executing program 4 (id=20215): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 5m48.819077325s ago: executing program 4 (id=20218): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r2, 0x0, 0xfffd, 0x0) 5m48.698514763s ago: executing program 4 (id=20222): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f0000001200)='./file0/file0\x00', 0x0, 0x84000, 0x0) 5m48.510835338s ago: executing program 4 (id=20227): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r0, r2, 0x25, 0xa, @val=@tracing={0x0, 0x10}}, 0x20) 5m48.082786925s ago: executing program 4 (id=20235): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x8000800, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}]}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000180)={0x20, 0x14, 0x12, "3299fad1a560da0781c2106a5bd2cb999f14"}, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 5m47.823572819s ago: executing program 34 (id=20235): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x8000800, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}]}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000180)={0x20, 0x14, 0x12, "3299fad1a560da0781c2106a5bd2cb999f14"}, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 4m50.102492757s ago: executing program 2 (id=21209): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000440)="b4", 0x1}], 0x1, 0xc) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x7, 0x8) 4m50.026676123s ago: executing program 2 (id=21210): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [], 0x6b}}) 4m49.893742865s ago: executing program 2 (id=21213): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x393, 0x0) 4m49.723479672s ago: executing program 2 (id=21215): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$9p_unix(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x802ca2, &(0x7f0000000400)) 4m49.627571483s ago: executing program 2 (id=21218): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) creat(&(0x7f00000005c0)='./file0\x00', 0xc9028ba210c11f8b) unlink(&(0x7f0000000540)='./file0\x00') 4m49.523790216s ago: executing program 2 (id=21221): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000009000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x453, 0x10, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000010) 4m33.399100828s ago: executing program 35 (id=21221): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000009000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x453, 0x10, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000010) 2m46.496315002s ago: executing program 6 (id=23198): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m46.196857305s ago: executing program 6 (id=23203): mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r0, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) 2m46.102328077s ago: executing program 6 (id=23205): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000030400"/18, @ANYRES32=0x0, @ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x4e24, 0x2, 'sed\x00', 0x0, 0xfffffffc}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 2m45.999506329s ago: executing program 6 (id=23206): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 2m45.992067967s ago: executing program 6 (id=23207): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m45.875513091s ago: executing program 6 (id=23209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000800008001000000040000003f30"]) 2m29.792630733s ago: executing program 36 (id=23209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000800008001000000040000003f30"]) 40.946617221s ago: executing program 3 (id=24887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 40.799244799s ago: executing program 3 (id=24888): syz_open_dev$video4linux(&(0x7f0000000200), 0x0, 0x88c00) r0 = syz_io_uring_setup(0x690b, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x3, 0x251}, &(0x7f0000000300), &(0x7f0000000400)=0x0) syz_io_uring_setup(0x1866, &(0x7f0000000140), &(0x7f0000000500)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 40.691243169s ago: executing program 3 (id=24891): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000c80)="ef", 0x1}], 0x1, 0x0, 0x0, 0x4000010}, 0x20004011) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) close_range(r0, 0xffffffffffffffff, 0x0) 40.571149673s ago: executing program 3 (id=24894): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000380)=@x86={0x7, 0x6, 0x3b, 0x0, 0x101, 0x9, 0x5, 0x1, 0x9, 0x9, 0x9, 0xf6, 0x0, 0x892, 0x4, 0x9, 0xd1, 0xf9, 0x5, '\x00', 0x8e, 0x6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) 40.209907283s ago: executing program 3 (id=24897): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 40.067499688s ago: executing program 3 (id=24901): bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r0, 0x0, 0xffff}, 0x18) r1 = syz_io_uring_setup(0x6acf, &(0x7f0000000940), &(0x7f00000009c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001c80)={0x1, 0x2000000, 0x0, &(0x7f0000001140)=[{0x0}], 0x0}, 0x20) 39.998642355s ago: executing program 8 (id=24902): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x24) close(r0) 39.818680771s ago: executing program 8 (id=24904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local={0x5}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 39.599513779s ago: executing program 8 (id=24905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x13, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008702"]) 39.382060884s ago: executing program 8 (id=24906): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 39.162628155s ago: executing program 8 (id=24909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x5fe, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0x2c01, 0x3f00}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 38.818149725s ago: executing program 8 (id=24911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='/dev/null\x00', &(0x7f0000000080)='/dev/null\x00', 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300) 38.536189728s ago: executing program 37 (id=24911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='/dev/null\x00', &(0x7f0000000080)='/dev/null\x00', 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300) 23.598399023s ago: executing program 38 (id=24901): bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r0, 0x0, 0xffff}, 0x18) r1 = syz_io_uring_setup(0x6acf, &(0x7f0000000940), &(0x7f00000009c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001c80)={0x1, 0x2000000, 0x0, &(0x7f0000001140)=[{0x0}], 0x0}, 0x20) 7.096685473s ago: executing program 0 (id=25149): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x31, @string={0x31, 0x3, "f29ac370d208e6a25d2112bdab1b3c0022e7723efd1b9304f2b894844ee105fc519acc3d857e4d63fd675300914944"}}, 0x0, 0x0}, 0x0) 4.652546631s ago: executing program 7 (id=25160): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2a, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0x2, [{}, {}]}, 0x48) 3.923463252s ago: executing program 1 (id=25166): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x8}, &(0x7f00000002c0)=0x8) 3.791301984s ago: executing program 0 (id=25167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x400000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000880)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000003c0)={0x1, r2}) 3.692722413s ago: executing program 7 (id=25168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x3b, 0x0, 0xfffffffffffffffb}, {0x481, 0x0, 0x2a72f97}]}) 3.485043561s ago: executing program 0 (id=25169): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000700)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xfbfffff7, 0x401, 0xd, 0xf7d, 0x18, "010100"}) write(r0, 0x0, 0x0) 3.387443981s ago: executing program 7 (id=25170): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') 3.36981237s ago: executing program 0 (id=25171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 3.298293416s ago: executing program 0 (id=25172): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106a0529000000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) writev(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)="5b84ce532198a9", 0x7}], 0x2) 2.895875427s ago: executing program 1 (id=25176): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x35, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.792450657s ago: executing program 9 (id=25178): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010ac05418200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x2) 2.678158282s ago: executing program 1 (id=25179): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x101}, 0x8) 2.610769514s ago: executing program 7 (id=25180): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x88541, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x0, 0x3}, {0x35}, {}, {}, {0x6}]}) 2.514315886s ago: executing program 1 (id=25181): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x3) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 2.37953707s ago: executing program 7 (id=25182): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 2.371405726s ago: executing program 1 (id=25183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 2.204450224s ago: executing program 1 (id=25184): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x400) 1.434322162s ago: executing program 7 (id=25185): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584", @ANYRES16=r0], 0x0) 1.054487431s ago: executing program 5 (id=25189): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000004, 0x0, 0x1, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) 944.729094ms ago: executing program 5 (id=25190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffffffffffffff88a8180081"], 0x0) 889.441103ms ago: executing program 5 (id=25191): r0 = syz_io_uring_setup(0x5ab8, &(0x7f00000003c0)={0x0, 0x4278, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x3b, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80002101, 0x1}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='io_uring_req_failed\x00', r3, 0x0, 0x100000000}, 0x18) io_uring_enter(r0, 0x78c0, 0xbd76, 0x1, 0x0, 0x0) 808.424717ms ago: executing program 5 (id=25192): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x5c, 0x0, 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 807.250484ms ago: executing program 9 (id=25193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000380)) 733.927093ms ago: executing program 5 (id=25194): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0xffffffff, 0x10001, 0x6}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r0, r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 585.667486ms ago: executing program 9 (id=25195): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = io_uring_setup(0x2c49, &(0x7f0000000400)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 582.973421ms ago: executing program 5 (id=25196): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) readv(r1, &(0x7f0000001700)=[{&(0x7f0000000200)=""/13, 0xd}], 0x1) 490.881553ms ago: executing program 9 (id=25197): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r1}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) 418.714258ms ago: executing program 9 (id=25198): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0xd, r1, 0x4}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) 275.987281ms ago: executing program 9 (id=25199): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) getresgid(&(0x7f0000000040), &(0x7f0000007000), &(0x7f0000000000)) 0s ago: executing program 0 (id=25200): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) kernel console output (not intermixed with test programs): unexpected cc 0x0c03 length: 249 > 1 [ 1341.628475][T19557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1341.639870][T19557] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1341.653736][T19557] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1341.661632][T19557] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1341.666582][ T6583] netlink: 'syz.3.23665': attribute type 3 has an invalid length. [ 1341.686835][T19557] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1341.696681][ T3539] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.708177][T19557] Bluetooth: hci0: command 0x0c1a tx timeout [ 1341.714262][T19557] Bluetooth: hci1: command 0x0406 tx timeout [ 1341.757064][ T6583] netlink: 'syz.3.23665': attribute type 3 has an invalid length. [ 1341.867743][ T6576] wlan0 speed is unknown, defaulting to 1000 [ 1341.889276][ T6576] lo speed is unknown, defaulting to 1000 [ 1342.082516][ T3539] bridge_slave_1: left allmulticast mode [ 1342.089134][ T3539] bridge_slave_1: left promiscuous mode [ 1342.117641][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.157742][ T3539] bridge_slave_0: left allmulticast mode [ 1342.163441][ T3539] bridge_slave_0: left promiscuous mode [ 1342.182036][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.830620][ T3539] batman_adv: batadv0: Removing interface: gretap1 [ 1343.834518][ T29] audit: type=1400 audit(2000000127.892:5690): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=6679 comm="syz.5.23692" [ 1343.887259][ T29] audit: type=1400 audit(2000000127.939:5691): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=6681 comm="syz.7.23693" [ 1343.908539][ T29] audit: type=1400 audit(2000000127.939:5692): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=6681 comm="syz.7.23693" dest=20002 [ 1343.926047][T14417] Bluetooth: hci2: command tx timeout [ 1343.926173][ T6588] Bluetooth: hci0: command 0x0c1a tx timeout [ 1344.091449][ T3539] bond0 (unregistering): left allmulticast mode [ 1344.097745][ T3539] bond_slave_0: left allmulticast mode [ 1344.111686][ T3539] bond_slave_1: left allmulticast mode [ 1344.117415][ T3539] bond2 (unregistering): left allmulticast mode [ 1344.128571][ T3539] bond0 (unregistering): left promiscuous mode [ 1344.141005][ T3539] bond_slave_0: left promiscuous mode [ 1344.147888][ T3539] bond_slave_1: left promiscuous mode [ 1344.153633][ T3539] bond2 (unregistering): left promiscuous mode [ 1344.201659][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.221346][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.236037][ T3539] bond0 (unregistering): (slave bond2): Releasing backup interface [ 1344.254192][ T3539] bond0 (unregistering): Released all slaves [ 1344.268443][ T3539] bond1 (unregistering): Released all slaves [ 1344.389265][ T6110] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1344.567508][ T6110] usb 6-1: Using ep0 maxpacket: 16 [ 1344.590072][ T6110] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.612358][ T6110] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1344.628497][ T3539] bond2 (unregistering): Released all slaves [ 1344.642338][ T6110] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1344.669789][ T6110] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1344.743525][ T6110] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1344.800932][ T6110] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1344.847535][ T6110] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1344.847639][ T3539] tipc: Left network mode [ 1344.870589][ T6110] usb 6-1: Manufacturer: syz [ 1344.903333][ T6110] usb 6-1: config 0 descriptor?? [ 1345.033534][ T6576] chnl_net:caif_netlink_parms(): no params data found [ 1345.064739][ T3539] IPVS: stopping backup sync thread 32170 ... [ 1345.080942][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.7.23703'. [ 1345.160125][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.7.23703'. [ 1345.454665][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.522590][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.534781][ T6576] bridge_slave_0: entered allmulticast mode [ 1345.559554][ T6576] bridge_slave_0: entered promiscuous mode [ 1345.661777][ T6110] rc_core: IR keymap rc-hauppauge not found [ 1345.667903][ T6110] Registered IR keymap rc-empty [ 1345.682975][ T6110] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1345.727266][ T6110] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1345.751246][ T6110] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1345.768621][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.790481][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.797809][ T6576] bridge_slave_1: entered allmulticast mode [ 1345.812435][ T6110] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input172 [ 1345.834952][ T6576] bridge_slave_1: entered promiscuous mode [ 1345.850429][ T6110] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1345.875334][ T6110] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1345.939920][ T6110] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1345.961602][ T6110] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1345.993035][ T6110] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1346.014683][ T6110] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1346.051802][ T6110] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1346.089095][ T6110] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1346.121293][ T6110] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1346.144657][ T6588] Bluetooth: hci2: command tx timeout [ 1346.144666][T14417] Bluetooth: hci0: command 0x0c1a tx timeout [ 1346.175890][ T6110] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1346.202776][ T6110] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1346.208975][ T6576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.244201][ T6576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.245769][ T6110] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 58 [ 1346.345951][ T6110] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1346.367968][ T6110] usb 6-1: USB disconnect, device number 70 [ 1346.417205][ T3539] hsr_slave_0: left promiscuous mode [ 1346.436505][ T3539] hsr_slave_1: left promiscuous mode [ 1346.458975][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1346.489924][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.519937][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.538385][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.614410][ T3539] veth1_macvtap: left promiscuous mode [ 1346.626257][ T3539] veth0_macvtap: left promiscuous mode [ 1346.631914][ T3539] veth1_vlan: left promiscuous mode [ 1346.638491][ T3539] veth0_vlan: left promiscuous mode [ 1346.821293][ T6942] input: syz0 as /devices/virtual/input/input173 [ 1347.640749][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23731'. [ 1347.929374][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 1348.040259][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23732'. [ 1348.073166][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 1348.366701][ T6588] Bluetooth: hci2: command tx timeout [ 1349.277939][ T6962] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1349.307248][ T6962] bridge0: port 1(batadv1) entered blocking state [ 1349.313813][ T6962] bridge0: port 1(batadv1) entered disabled state [ 1349.341795][ T6962] batadv1: entered allmulticast mode [ 1349.348692][ T6962] batadv1: entered promiscuous mode [ 1349.384322][ T6576] team0: Port device team_slave_0 added [ 1349.406773][ T6576] team0: Port device team_slave_1 added [ 1349.436491][ T7000] netlink: 'syz.9.23738': attribute type 1 has an invalid length. [ 1349.554182][ T6576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.575434][ T6576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.629972][ T6576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.653354][ T6576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.661610][ T6576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.689294][ T6576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.806133][ T35] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1349.816995][ T35] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1349.834975][ T6576] hsr_slave_0: entered promiscuous mode [ 1349.853113][ T6576] hsr_slave_1: entered promiscuous mode [ 1349.859412][ T6576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1349.878164][ T6576] Cannot create hsr debugfs directory [ 1349.895693][ T6208] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1350.093920][ T6208] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1350.126709][ T6208] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.162169][ T6208] usb 10-1: config 0 descriptor?? [ 1350.325552][ T7144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.23748'. [ 1350.591006][ T6588] Bluetooth: hci2: command tx timeout [ 1350.703456][ T6576] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1350.726871][ T6576] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1350.754067][ T6576] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1350.775291][ T6576] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1350.885964][ T6576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.907135][ T6576] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.923066][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.930215][ T3539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.962866][ T5530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.969982][ T5530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.012628][ T6576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1351.023544][ T6576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1351.074241][ T6208] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1351.103932][ T6208] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1351.135663][ T6208] asix 10-1:0.0: probe with driver asix failed with error -71 [ 1351.162185][ T6208] usb 10-1: USB disconnect, device number 3 [ 1351.239438][ T6576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1351.561785][ T6576] veth0_vlan: entered promiscuous mode [ 1351.601622][ T6576] veth1_vlan: entered promiscuous mode [ 1351.678771][ T6576] veth0_macvtap: entered promiscuous mode [ 1351.717282][ T6576] veth1_macvtap: entered promiscuous mode [ 1351.739418][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.751415][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.789633][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.822542][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.845444][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.867530][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.891879][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.906661][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.918428][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.959457][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.970152][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.983215][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.995733][ T6576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1352.014657][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.047511][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.076538][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.097770][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.115877][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.131059][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.142641][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.154606][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.165887][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.177784][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.191870][ T6576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1352.235410][ T7214] netlink: 632 bytes leftover after parsing attributes in process `syz.9.23761'. [ 1352.284168][ T6576] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.297194][ T6576] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.322660][ T6576] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.331435][ T6576] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.568615][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.576571][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.697969][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.721942][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.766692][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23767'. [ 1353.480835][ T7279] 9p: Unknown Cache mode or invalid value f [ 1354.705802][ T6162] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1354.878713][ T6162] usb 10-1: config index 0 descriptor too short (expected 43, got 22) [ 1354.907568][ T6162] usb 10-1: config 0 has an invalid interface number: 219 but max is 0 [ 1354.937746][ T6162] usb 10-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1354.975149][ T6162] usb 10-1: config 0 has no interface number 0 [ 1354.992269][ T6162] usb 10-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1355.043538][ T6162] usb 10-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1355.063914][ T6162] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.083532][ T6162] usb 10-1: Product: syz [ 1355.094318][ T6162] usb 10-1: Manufacturer: syz [ 1355.105125][ T6162] usb 10-1: SerialNumber: syz [ 1355.127796][ T6162] usb 10-1: config 0 descriptor?? [ 1355.367773][ T6162] etas_es58x 10-1:0.219: Starting syz syz (Serial Number syz) [ 1355.411689][ T6162] usb 10-1: USB disconnect, device number 4 [ 1357.710752][ T7437] vlan2: entered allmulticast mode [ 1357.721588][ T7437] bridge0: entered allmulticast mode [ 1357.733215][ T7437] bridge0: port 3(vlan2) entered blocking state [ 1357.763647][ T7437] bridge0: port 3(vlan2) entered disabled state [ 1357.819177][ T7437] bridge0: left allmulticast mode [ 1357.919183][ T7442] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1357.928875][ T7441] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1357.972774][ T7446] ALSA: mixer_oss: invalid OSS volume 'P7{*;+$p' [ 1358.004727][ T7446] ALSA: mixer_oss: invalid OSS volume '' [ 1358.031308][ T7446] ALSA: mixer_oss: invalid OSS volume 'b$Kf7?]3sX' [ 1358.073941][ T7446] ALSA: mixer_oss: invalid OSS volume 'K׍?Fg' [ 1358.089271][ T7446] ALSA: mixer_oss: invalid OSS volume '.L!t8yW+$NJs' [ 1358.276749][ T6110] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1358.437272][ T6110] usb 9-1: Using ep0 maxpacket: 16 [ 1358.449544][ T6110] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1358.479569][ T6110] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1358.513750][ T6110] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1358.534055][ T6110] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.542204][ T6110] usb 9-1: Product: syz [ 1358.553016][ T6110] usb 9-1: Manufacturer: syz [ 1358.558027][ T6110] usb 9-1: SerialNumber: syz [ 1358.568678][ T6110] usb 9-1: config 0 descriptor?? [ 1358.588302][ T6110] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1358.600086][ T6110] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1359.251605][ T6110] em28xx 9-1:0.0: chip ID is em2870 [ 1359.520032][ T6164] usb 9-1: USB disconnect, device number 18 [ 1359.526734][ T6164] em28xx 9-1:0.0: Disconnecting em28xx [ 1359.539871][ T6164] em28xx 9-1:0.0: Freeing device [ 1360.589079][ T7574] overlay: Unknown parameter ' [ 1360.589079][ T7574] time [ 1360.589079][ T7574] string [ 1360.589079][ T7574] statistic [ 1360.589079][ T7574] state [ 1360.589079][ T7574] realm [ 1360.589079][ T7574] rateest [ 1360.589079][ T7574] quota [ 1360.589079][ T7574] pkttype [ 1360.589079][ T7574] physdev [ 1360.589079][ T7574] cgroup [ 1360.589079][ T7574] cgroup [ 1360.589079][ T7574] cgroup [ 1360.589079][ T7574] owner [ 1360.589079][ T7574] nfacct [ 1360.589079][ T7574] nfacct [ 1360.589079][ T7574] mac [ 1360.589079][ T7574] limit [ 1360.589079][ T7574] ipvs [ 1360.589079][ T7574] helper [ 1360.589079][ T7574] devgroup [ 1360.589079][ T7574] cpu [ 1360.589079][ T7574] conntrack [ 1360.589079][ T7574] conntrack [ 1360.589079][ T7574] conntrack [ 1360.589079][ T7574] connlabel [ 1360.589079][ T7574] connbytes [ 1360.589079][ T7574] comment [ 1360.589079][ T7574] bpf [ 1360.589079][ T7574] bpf [ 1360.589079][ T7574] connmark [ 1360.589079][ T7574] mark [ 1360.589079][ T7574] rpfilter [ 1360.589079][ T7574] ah [ 1360.589079][ T7574] tcpmss [ 1360.589079][ T7574] socket [ 1360.589079][ T7574] socket [ 1360.589079][ T7574] socket [ 1360.589079][ T7574] socket [ 1360.589079][ T7574] sctp [ 1360.589079][ T7574] recent [ 1360.589079][ T7574] recent [ 1360.589079][ T7574] policy [ 1360.589079][ T7574] osf [ 1360.589079][ T7574] multiport [ 1360.589079][ T7574] length [ 1360.589079][ T7574] l2tp [ 1360.589079][ T7574] iprange [ 1360.589079][ T7574] ipcomp [ 1360.589079][ T7574] ttl [ 1360.589079][ T7574] hashlimit [ 1360.589079][ T7574] hashlimit [ 1360.589079][ T7574] hashlimit [ 1360.589079][ T7574] esp [ 1360.589079][ T7574] ecn [ 1360.589079][ T7574] tos [ 1360.589079][ T7574] dscp [ 1360.589079][ T7574] dccp [ 1360.589079][ T7574] connlimit [ 1360.589079][ T7574] cluster [ 1360.589079][ T7574] addrtype [ 1360.589079][ T7574] addrtype [ 1360.589079][ T7574] set [ 1360.589079][ T7574] set [ 1360.589079][ T7574] set [ 1360.589079][ T7574] set [ 1360.589079][ T7574] set [ 1360.589079][ T7574] icmp [ 1361.204013][ T7593] misc userio: Begin command sent, but we're already running [ 1361.278095][ T7598] bridge0: entered promiscuous mode [ 1361.292696][ T7598] macvlan5: entered promiscuous mode [ 1361.765720][ T7619] kvm: kvm [7618]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x98b5 [ 1362.136835][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.7.23908'. [ 1362.168247][ T6164] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1362.350119][ T6164] usb 4-1: Using ep0 maxpacket: 32 [ 1362.360493][ T6164] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1362.368618][ T6164] usb 4-1: config 0 has no interface number 0 [ 1362.399129][ T6164] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1362.430252][ T6164] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1362.458713][ T6164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.475936][ T6164] usb 4-1: Product: syz [ 1362.490123][ T6164] usb 4-1: Manufacturer: syz [ 1362.505424][ T6164] usb 4-1: SerialNumber: syz [ 1362.524286][ T6164] usb 4-1: config 0 descriptor?? [ 1362.818219][ T7684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1362.850705][ T7684] bond0: (slave bond1): Enslaving as an active interface with a down link [ 1363.427084][ T6164] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1363.427129][ T6164] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1363.427145][ T6164] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1363.427225][ T6164] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1363.437038][ T6164] usb 4-1: USB disconnect, device number 104 [ 1364.071483][ T867] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1364.265300][ T867] usb 10-1: Using ep0 maxpacket: 8 [ 1364.275109][ T867] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1364.306376][ T867] usb 10-1: config 0 has no interface number 0 [ 1364.312640][ T867] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1364.361449][ T867] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1364.415240][ T867] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1364.446476][ T867] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1364.477850][ T867] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1364.499967][ T867] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.526709][ T867] usb 10-1: config 0 descriptor?? [ 1364.545430][ T867] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1364.765594][ T6164] usb 10-1: USB disconnect, device number 5 [ 1364.777393][ T6164] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1364.906819][ T7808] netlink: 4272 bytes leftover after parsing attributes in process `syz.8.23948'. [ 1365.283911][ T7826] netlink: 'syz.8.23956': attribute type 1 has an invalid length. [ 1365.313391][ T7826] netlink: 104 bytes leftover after parsing attributes in process `syz.8.23956'. [ 1365.345594][ T7826] netlink: 'syz.8.23956': attribute type 1 has an invalid length. [ 1365.468808][ T7835] netlink: 165 bytes leftover after parsing attributes in process `syz.8.23960'. [ 1365.878636][ T6162] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1366.065396][ T6162] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.091529][ T6162] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.114510][ T6162] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1366.128796][ T6162] usb 9-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 1366.138442][ T6162] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.149042][ T6162] usb 9-1: config 0 descriptor?? [ 1366.262387][ T2692] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1366.422752][ T2692] usb 6-1: Using ep0 maxpacket: 16 [ 1366.430382][ T2692] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1366.438703][ T2692] usb 6-1: config 0 has no interface number 0 [ 1366.446265][ T2692] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.457698][ T2692] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.467755][ T2692] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1366.478306][ T2692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.491718][ T2692] usb 6-1: config 0 descriptor?? [ 1366.598500][ T6162] betop 0003:11C0:5506.007B: unbalanced collection at end of report description [ 1366.620265][ T6162] betop 0003:11C0:5506.007B: parse failed [ 1366.626861][ T6162] betop 0003:11C0:5506.007B: probe with driver betop failed with error -22 [ 1366.815196][ T6164] usb 9-1: USB disconnect, device number 19 [ 1367.153465][ T2692] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.007C/input/input178 [ 1367.301617][ T2692] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.007C/input/input179 [ 1367.335737][ T2692] uclogic 0003:28BD:0071.007C: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.5-1/input1 [ 1367.372153][ T2692] usb 6-1: USB disconnect, device number 71 [ 1368.786847][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.8.24014'. [ 1369.106245][ T8024] netlink: 16 bytes leftover after parsing attributes in process `syz.9.24021'. [ 1369.129856][ T8024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.275881][ T29] audit: type=1400 audit(2000000151.689:5693): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8036 comm="syz.8.24025" dest=20000 [ 1369.460700][ T8045] macvlan0: entered promiscuous mode [ 1369.460725][ T8045] team0: entered promiscuous mode [ 1369.460740][ T8045] team_slave_0: entered promiscuous mode [ 1369.461016][ T8045] team_slave_1: entered promiscuous mode [ 1369.461501][ T8045] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1369.463476][ T8045] bridge0: port 1(macvlan0) entered blocking state [ 1369.512175][ T8045] bridge0: port 1(macvlan0) entered disabled state [ 1369.512433][ T8045] macvlan0: entered allmulticast mode [ 1369.512454][ T8045] team0: entered allmulticast mode [ 1369.512471][ T8045] team_slave_0: entered allmulticast mode [ 1369.512487][ T8045] team_slave_1: entered allmulticast mode [ 1369.718696][ T8058] veth1_macvtap: left promiscuous mode [ 1369.840159][ T29] audit: type=1326 audit(2000000152.222:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.3.24038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1369.843329][ T29] audit: type=1326 audit(2000000152.222:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.3.24038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1369.852904][ T29] audit: type=1326 audit(2000000152.241:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.3.24038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1369.860670][ T29] audit: type=1326 audit(2000000152.250:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.3.24038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1369.922529][T14417] Bluetooth: hci2: command 0x0405 tx timeout [ 1370.154167][ T29] audit: type=1326 audit(2000000152.344:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.3.24038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1370.154210][ T29] audit: type=1326 audit(2000000152.390:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.3.24038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1370.154240][ T29] audit: type=1326 audit(2000000152.390:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.3.24038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2813d83da7 code=0x7ffc0000 [ 1370.154277][ T29] audit: type=1326 audit(2000000152.390:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.3.24038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2813d28fb9 code=0x7ffc0000 [ 1370.154308][ T29] audit: type=1326 audit(2000000152.390:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.3.24038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2813d83da7 code=0x7ffc0000 [ 1371.114227][ T8112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24060'. [ 1371.205484][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24062'. [ 1371.380416][ T8118] xt_NFQUEUE: number of total queues is 0 [ 1371.666026][ T8134] batadv_slave_1: entered promiscuous mode [ 1372.104631][ T6588] Bluetooth: hci0: unexpected event for opcode 0x200a [ 1373.425085][ T2692] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1373.652459][ T2692] usb 6-1: Using ep0 maxpacket: 32 [ 1373.677888][ T2692] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1373.713608][ T2692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.738140][ T2692] usb 6-1: config 0 descriptor?? [ 1373.780000][ T2692] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1373.873502][ T6162] kernel write not supported for file /sequencer (pid: 6162 comm: kworker/0:4) [ 1374.490091][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24104'. [ 1374.573468][ T8349] nbd: socks must be embedded in a SOCK_ITEM attr [ 1374.636950][ T2692] gspca_sunplus: reg_w_riv err -71 [ 1374.642197][ T2692] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1374.667874][ T2692] usb 6-1: USB disconnect, device number 72 [ 1374.783770][ T6164] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1374.975168][ T6164] usb 9-1: Using ep0 maxpacket: 16 [ 1374.981982][ T6164] usb 9-1: config 8 has an invalid interface number: 39 but max is 0 [ 1375.001274][ T6164] usb 9-1: config 8 has no interface number 0 [ 1375.025983][ T6164] usb 9-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1375.082900][ T6164] usb 9-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1375.123967][ T6164] usb 9-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1375.146647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1375.158061][ T6164] usb 9-1: config 8 interface 39 has no altsetting 0 [ 1375.175724][ T6164] usb 9-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1375.186449][ T6164] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.241112][ T6164] usb 9-1: Product: syz [ 1375.246349][ T6164] usb 9-1: Manufacturer: syz [ 1375.246545][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24112'. [ 1375.250964][ T6164] usb 9-1: SerialNumber: syz [ 1375.798329][ T8424] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1375.804903][ T8424] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1375.831998][ T8424] vhci_hcd vhci_hcd.0: Device attached [ 1375.849143][ T8425] vhci_hcd: connection closed [ 1375.849478][ T5530] vhci_hcd: stop threads [ 1375.860337][ T5530] vhci_hcd: release socket [ 1375.865247][ T5530] vhci_hcd: disconnect device [ 1375.933948][ T6164] ipheth 9-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 1375.994460][ T6164] ipheth 9-1:8.39: Apple iPhone USB Ethernet device attached [ 1376.156046][ T6164] usb 9-1: USB disconnect, device number 20 [ 1376.217507][ T6164] ipheth 9-1:8.39: Apple iPhone USB Ethernet now disconnected [ 1376.279946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1376.874137][ T8470] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1377.184954][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 1377.184972][ T29] audit: type=1400 audit(2000000159.097:5734): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8492 comm="syz.5.24140" dest=2 [ 1377.686904][ T8517] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1377.746395][ T8517] team0: Device macvtap1 failed to register rx_handler [ 1377.777853][ T8517] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 1378.597875][ T8554] tun0: tun_chr_ioctl cmd 1074025681 [ 1378.973774][ T6164] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1379.103590][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24170'. [ 1379.156368][ T6164] usb 6-1: Using ep0 maxpacket: 16 [ 1379.164472][ T6164] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1379.173627][ T6164] usb 6-1: config 0 has no interface number 0 [ 1379.192870][ T6164] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1379.216474][ T6164] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1379.254268][ T6164] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1379.264385][ T6164] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1379.287278][ T6164] usb 6-1: Product: syz [ 1379.313099][ T6164] usb 6-1: SerialNumber: syz [ 1379.340018][ T6164] usb 6-1: config 0 descriptor?? [ 1379.354901][ T6164] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1379.370393][ T6164] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input182 [ 1379.601488][ T8595] bridge0: entered promiscuous mode [ 1379.629763][ T8594] bridge0: left promiscuous mode [ 1379.930712][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24176'. [ 1380.366418][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24192'. [ 1380.495688][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1380.507112][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1380.514980][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1380.522146][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1380.532799][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1380.540747][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1380.553712][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1380.562692][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1380.570920][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1380.581158][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1380.631226][ T6208] usb 6-1: USB disconnect, device number 73 [ 1380.641333][ T6208] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1380.787191][ T8641] netlink: 16 bytes leftover after parsing attributes in process `syz.9.24187'. [ 1380.823232][ T8641] netem: invalid attributes len -6 [ 1380.828398][ T8641] netem: change failed [ 1381.931335][ T8695] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 1382.001488][ T8695] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 1382.043994][ T8695] overlayfs: conflicting lowerdir path [ 1383.369259][ T8770] netlink: 165 bytes leftover after parsing attributes in process `syz.7.24239'. [ 1383.861557][T14417] Bluetooth: hci2: command 0x0405 tx timeout [ 1383.891209][ T6162] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1384.052786][ T6162] usb 6-1: Using ep0 maxpacket: 8 [ 1384.076658][ T6162] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1384.096451][ T6162] usb 6-1: config 179 has no interface number 0 [ 1384.115545][ T6162] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1384.146746][ T6162] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1384.171293][ T6162] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1384.192954][ T6162] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1384.228101][ T6162] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1384.241928][ T6162] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1384.251803][ T6162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.276480][ T8777] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1384.591137][ T6162] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input183 [ 1384.741011][ T8777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.759866][ T8777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.785578][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1384.785584][ T6208] usb 6-1: USB disconnect, device number 74 [ 1384.785628][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1384.808130][ T6208] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1384.895682][ T8844] ax25_connect(): syz.9.24265 uses autobind, please contact jreuter@yaina.de [ 1385.355114][ T8869] netlink: 'syz.7.24274': attribute type 10 has an invalid length. [ 1385.399129][ T8871] netlink: 4272 bytes leftover after parsing attributes in process `syz.3.24273'. [ 1385.410917][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.7.24274'. [ 1385.644809][ T6208] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1385.837159][ T6208] usb 10-1: Using ep0 maxpacket: 16 [ 1385.859346][ T6208] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.880488][ T6208] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1385.915537][ T6208] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1385.930923][ T6208] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.952370][ T6208] usb 10-1: config 0 descriptor?? [ 1386.414722][ T6164] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1386.672008][ T6164] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1386.682508][ T6164] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1386.713953][ T6164] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1386.732468][ T6164] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1386.757991][ T6164] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1386.783310][ T6164] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.808721][ T6164] usb 6-1: config 0 descriptor?? [ 1386.923355][ T8938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1387.049440][ T6164] hdpvr 6-1:0.0: firmware version 0x8 dated )˟=J+noKܐo5foɠObL [ 1387.565888][ T6164] hdpvr 6-1:0.0: Could not setup controls [ 1387.597276][ T6164] hdpvr 6-1:0.0: registering videodev failed [ 1387.636337][ T6164] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 1387.668575][ T6164] usb 6-1: USB disconnect, device number 75 [ 1388.651097][ T6208] usbhid 10-1:0.0: can't add hid device: -71 [ 1388.657252][ T6208] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1388.703266][ T6208] usb 10-1: USB disconnect, device number 6 [ 1388.964678][ T9020] input: syz0 as /devices/virtual/input/input184 [ 1388.980213][ T6162] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1389.097649][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.8.24328'. [ 1389.152866][ T6162] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1389.174200][ T6162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.199748][ T6162] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1389.215053][ T6162] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1389.223535][ T6162] usb 6-1: Manufacturer: syz [ 1389.231410][ T6162] usb 6-1: config 0 descriptor?? [ 1389.379186][ T6162] rc_core: IR keymap rc-hauppauge not found [ 1389.391169][ T6162] Registered IR keymap rc-empty [ 1389.419283][ T6162] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1389.445854][ T6162] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input185 [ 1389.733089][ C0] igorplugusb 6-1:0.0: receive overflow, at least 9 lost [ 1389.958258][ T6162] usb 6-1: USB disconnect, device number 76 [ 1390.417554][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.9.24356'. [ 1391.103763][ T9142] netlink: 24 bytes leftover after parsing attributes in process `syz.8.24370'. [ 1391.467713][ T6588] Bluetooth: hci3: unexpected event 0x2c length: 4 < 17 [ 1391.911415][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24387'. [ 1392.302720][ T9209] netlink: 'syz.5.24397': attribute type 1 has an invalid length. [ 1392.322203][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24397'. [ 1392.733660][ T6164] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1392.915792][ T6164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.933331][ T6164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.943486][ T6208] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1392.956338][ T6164] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1392.972075][ T6164] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 1392.981878][ T6164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.995114][ T6164] usb 4-1: config 0 descriptor?? [ 1393.110542][ T6208] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.138285][ T6208] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.172738][ T6208] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1393.203290][ T6208] usb 10-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1393.234552][ T6208] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.257485][ T6208] usb 10-1: config 0 descriptor?? [ 1393.444096][ T6164] betop 0003:11C0:5506.007D: unbalanced collection at end of report description [ 1393.455365][ T6164] betop 0003:11C0:5506.007D: parse failed [ 1393.469824][ T6164] betop 0003:11C0:5506.007D: probe with driver betop failed with error -22 [ 1393.679935][ T6164] usb 4-1: USB disconnect, device number 105 [ 1393.701697][ T6208] acrux 0003:1A34:0802.007E: unknown main item tag 0x0 [ 1393.716492][ T6208] acrux 0003:1A34:0802.007E: unknown main item tag 0x0 [ 1393.738822][ T6208] acrux 0003:1A34:0802.007E: unknown main item tag 0x0 [ 1393.759740][ T6208] acrux 0003:1A34:0802.007E: unknown main item tag 0x0 [ 1393.777621][ T6208] acrux 0003:1A34:0802.007E: item fetching failed at offset 4/5 [ 1393.798728][ T6208] acrux 0003:1A34:0802.007E: parse failed [ 1393.816759][ T6208] acrux 0003:1A34:0802.007E: probe with driver acrux failed with error -22 [ 1393.837378][ T9270] netlink: 'syz.7.24411': attribute type 15 has an invalid length. [ 1393.923631][ T6208] usb 10-1: USB disconnect, device number 7 [ 1394.039787][ T6588] Bluetooth: hci2: command 0x0405 tx timeout [ 1394.510214][ T9313] program syz.7.24420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1394.956624][ T9331] netlink: 20 bytes leftover after parsing attributes in process `syz.8.24428'. [ 1394.995055][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24429'. [ 1395.140055][ T9354] @: renamed from vlan0 (while UP) [ 1395.279137][ T9362] netlink: 16 bytes leftover after parsing attributes in process `syz.7.24435'. [ 1395.342708][ T6208] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1395.513993][ T6208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.531999][ T6208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.533202][ T6110] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1395.577187][ T6208] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1395.586271][ T6208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.621999][ T6208] usb 6-1: config 0 descriptor?? [ 1395.698809][ T29] audit: type=1326 audit(2000000176.411:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.7.24443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1395.727316][ T6110] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1395.758730][ T29] audit: type=1326 audit(2000000176.449:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.7.24443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1395.771994][ T6110] usb 9-1: string descriptor 0 read error: -71 [ 1395.788270][ T29] audit: type=1326 audit(2000000176.449:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.7.24443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1395.811236][ T29] audit: type=1326 audit(2000000176.449:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.7.24443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1395.835962][ T6110] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1395.881280][ T6110] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1395.942999][ T6110] usb 9-1: can't set config #1, error -71 [ 1395.970009][ T6110] usb 9-1: USB disconnect, device number 21 [ 1396.076198][ T6208] usbhid 6-1:0.0: can't add hid device: -71 [ 1396.084149][ T29] audit: type=1326 audit(2000000176.449:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.7.24443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1396.107177][ T6208] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1396.137021][ T6208] usb 6-1: USB disconnect, device number 77 [ 1396.159870][ T29] audit: type=1326 audit(2000000176.458:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.7.24443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1396.269922][ T29] audit: type=1326 audit(2000000176.467:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.7.24443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f291c783da7 code=0x7ffc0000 [ 1396.318064][ T29] audit: type=1326 audit(2000000176.467:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.7.24443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f291c728fb9 code=0x7ffc0000 [ 1396.456860][ T29] audit: type=1326 audit(2000000176.467:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.7.24443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f291c783da7 code=0x7ffc0000 [ 1396.624950][ T29] audit: type=1326 audit(2000000176.467:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.7.24443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f291c728fb9 code=0x7ffc0000 [ 1397.035554][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.9.24457'. [ 1397.188606][ T9442] ptrace attach of "./syz-executor exec"[5411] was attempted by "./syz-executor exec"[9442] [ 1397.265075][ T6162] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1397.372973][ T6110] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1397.426046][ T6162] usb 4-1: Using ep0 maxpacket: 16 [ 1397.433360][ T6162] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1397.442593][ T6162] usb 4-1: config 0 has no interface number 0 [ 1397.449974][ T6162] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1397.462041][ T6162] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1397.472055][ T6162] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1397.482169][ T6162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.493798][ T6162] usb 4-1: config 0 descriptor?? [ 1397.545828][ T6110] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1397.555481][ T6110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.576778][ T6110] usb 6-1: config 0 descriptor?? [ 1397.585802][T31832] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1397.605554][ T6110] cp210x 6-1:0.0: cp210x converter detected [ 1397.748065][T31832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1397.770721][T31832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1397.782050][T31832] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1397.795473][T31832] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1397.806295][T31832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.818772][T31832] usb 10-1: config 0 descriptor?? [ 1398.029195][ T6110] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1398.053579][ T6110] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1398.180450][ T6162] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.007F/input/input186 [ 1398.238763][ T9494] netlink: 16215 bytes leftover after parsing attributes in process `syz.7.24471'. [ 1398.264005][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.266758][ T6208] usb 6-1: USB disconnect, device number 78 [ 1398.277737][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.289514][ T6162] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.007F/input/input187 [ 1398.303078][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.303813][ T6208] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1398.310637][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.328828][ T6162] uclogic 0003:28BD:0071.007F: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 1398.360009][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.377195][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.404368][ T6162] usb 4-1: USB disconnect, device number 106 [ 1398.416659][ T9515] netlink: 20 bytes leftover after parsing attributes in process `syz.7.24473'. [ 1398.417963][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.436618][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.445030][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.447502][ T6208] cp210x 6-1:0.0: device disconnected [ 1398.459637][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.469629][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.481991][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.490511][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.493415][ T9515] nbd: socks must be embedded in a SOCK_ITEM attr [ 1398.500512][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.514710][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.523071][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.531848][ T6110] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1398.568262][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.619843][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.629007][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.637627][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.645774][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.653508][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.661449][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.670380][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.678757][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.686404][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.710774][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.718239][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.755352][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.769778][ T6110] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1398.780604][ T6110] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.788823][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.796708][ T6110] usb 9-1: Product: syz [ 1398.800901][ T6110] usb 9-1: Manufacturer: syz [ 1398.806496][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.814251][ T6110] usb 9-1: SerialNumber: syz [ 1398.821552][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.831275][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.839991][ T6110] usb 9-1: config 0 descriptor?? [ 1398.845274][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.880784][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.888725][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.897538][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.916332][T31832] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 1398.931736][T31832] plantronics 0003:047F:FFFF.0080: No inputs registered, leaving [ 1398.957955][T31832] plantronics 0003:047F:FFFF.0080: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1398.991022][T31832] usb 10-1: USB disconnect, device number 8 [ 1399.074000][ T6110] usb 9-1: USB disconnect, device number 22 [ 1399.481683][ T9716] usb usb8: usbfs: process 9716 (syz.3.24480) did not claim interface 0 before use [ 1399.767367][ T6208] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1399.942552][ T6208] usb 10-1: Using ep0 maxpacket: 8 [ 1399.993655][ T6208] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.009961][ T6208] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1400.045163][ T6208] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.056746][ T6208] usb 10-1: config 0 descriptor?? [ 1400.075648][ T6208] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1400.491893][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24502'. [ 1400.564420][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24502'. [ 1400.591427][ T9781] netlink: 'syz.7.24502': attribute type 1 has an invalid length. [ 1400.613265][ T9781] nbd: error processing sock list [ 1401.139544][ T6208] gspca_vc032x: reg_r err -71 [ 1401.149380][ T6208] vc032x 10-1:0.0: probe with driver vc032x failed with error -71 [ 1401.174285][ T6208] usb 10-1: USB disconnect, device number 9 [ 1401.767874][ T6208] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1401.950021][ T6208] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1401.969734][ T6208] usb 9-1: config 1 has no interface number 0 [ 1401.975909][ T6208] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.002920][ T6208] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1402.029703][ T6208] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1402.052787][ T6208] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 1402.098747][ T6208] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1402.117922][ T6208] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.137718][ T6208] usb 9-1: Product: syz [ 1402.148509][ T6208] usb 9-1: Manufacturer: syz [ 1402.159287][ T6208] usb 9-1: SerialNumber: syz [ 1402.399724][ T9839] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1402.784093][ T9890] CIFS mount error: No usable UNC path provided in device string! [ 1402.784093][ T9890] [ 1402.825669][ T9890] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1403.082681][ T9839] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1403.093374][ T6208] cdc_ncm 9-1:1.1: bind() failure [ 1403.189469][ T9910] netlink: 12 bytes leftover after parsing attributes in process `syz.9.24542'. [ 1403.199165][ T9910] netlink: 112 bytes leftover after parsing attributes in process `syz.9.24542'. [ 1403.216749][ T9910] netlink: 12 bytes leftover after parsing attributes in process `syz.9.24542'. [ 1403.315341][ T6208] usb 9-1: USB disconnect, device number 23 [ 1404.542827][ T9983] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1404.842065][ T9998] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 1404.887620][ T9998] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 1404.910069][ T9998] overlayfs: conflicting lowerdir path [ 1405.326248][T14417] Bluetooth: hci2: command 0x0405 tx timeout [ 1405.477117][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 1405.477134][ T29] audit: type=1326 audit(2000000185.569:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.24588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1405.548100][ T29] audit: type=1326 audit(2000000185.597:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.24588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1405.659381][ T29] audit: type=1326 audit(2000000185.597:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.24588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1405.715986][ T29] audit: type=1326 audit(2000000185.597:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.24588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1405.739548][ T29] audit: type=1326 audit(2000000185.597:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.24588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1405.798484][ T29] audit: type=1326 audit(2000000185.606:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.24588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1405.843538][ T29] audit: type=1326 audit(2000000185.606:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.24588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1405.965120][ T29] audit: type=1326 audit(2000000185.606:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.24588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1406.077943][ T29] audit: type=1326 audit(2000000185.606:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.24588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1406.103701][ T6208] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1406.205417][ T29] audit: type=1326 audit(2000000185.606:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.24588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2813d8cde9 code=0x7ffc0000 [ 1406.309862][ T6208] usb 6-1: Using ep0 maxpacket: 16 [ 1406.318195][ T6208] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 1406.331662][ T6208] usb 6-1: config 8 has no interface number 0 [ 1406.338281][ T6208] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1406.395818][ T6208] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1406.417976][ T6208] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1406.437245][ T6208] usb 6-1: config 8 interface 39 has no altsetting 0 [ 1406.461556][ T6208] usb 6-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1406.473424][ T6208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.492274][ T6208] usb 6-1: Product: syz [ 1406.502326][ T6208] usb 6-1: Manufacturer: syz [ 1406.506993][ T6208] usb 6-1: SerialNumber: syz [ 1407.186590][ T6208] ipheth 6-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 1407.233195][ T6208] ipheth 6-1:8.39: Apple iPhone USB Ethernet device attached [ 1407.422915][ T6110] usb 6-1: USB disconnect, device number 79 [ 1407.539053][ T6110] ipheth 6-1:8.39: Apple iPhone USB Ethernet now disconnected [ 1407.858960][ T6208] hid-generic 0000:0003:0000.0081: unknown main item tag 0x0 [ 1407.867841][ T6208] hid-generic 0000:0003:0000.0081: unknown main item tag 0x0 [ 1407.885099][ T6208] hid-generic 0000:0003:0000.0081: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1408.477754][T10172] vimc link validate: Scaler:src:16x16 (0x33424752, 4, 0, 0, 2) RGB/YUV Capture:snk:16x16 (0x42474752, 6, 0, 5, 0) [ 1409.587143][T10222] input: syz0 as /devices/virtual/input/input188 [ 1409.787746][T10230] xt_CT: No such helper "pptp" [ 1410.588638][T10280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24671'. [ 1411.195914][ T6208] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1411.371039][ T6208] usb 10-1: Using ep0 maxpacket: 8 [ 1411.394405][ T6208] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1411.420435][ T6208] usb 10-1: config 179 has no interface number 0 [ 1411.448574][ T6208] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1411.487271][ T6208] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1411.521344][ T6208] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1411.555605][ T6208] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1411.591851][ T6208] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1411.623450][ T6208] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1411.638321][ T6208] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.689205][T10299] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1411.792010][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1411.792028][ T29] audit: type=1326 audit(2000000191.462:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10331 comm="syz.7.24692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1411.866777][ T29] audit: type=1326 audit(2000000191.462:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10331 comm="syz.7.24692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1411.933270][ T29] audit: type=1326 audit(2000000191.481:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10331 comm="syz.7.24692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1411.995206][ T29] audit: type=1326 audit(2000000191.481:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10331 comm="syz.7.24692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1412.023083][ T867] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input189 [ 1412.090589][ T29] audit: type=1326 audit(2000000191.481:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10331 comm="syz.7.24692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1412.161649][ T29] audit: type=1326 audit(2000000191.481:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10331 comm="syz.7.24692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1412.220508][ T29] audit: type=1326 audit(2000000191.481:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10331 comm="syz.7.24692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1412.233369][T10299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.283557][T10299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.313855][ T29] audit: type=1326 audit(2000000191.481:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10331 comm="syz.7.24692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1412.372930][T31832] usb 10-1: USB disconnect, device number 10 [ 1412.372972][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1412.389178][ C1] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 1412.398504][T31832] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1412.437313][ T29] audit: type=1326 audit(2000000191.481:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10331 comm="syz.7.24692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1412.481289][ T29] audit: type=1326 audit(2000000191.481:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10331 comm="syz.7.24692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291c78cde9 code=0x7ffc0000 [ 1413.932367][ T867] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1414.103403][ T867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1414.126977][ T867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1414.149235][ T867] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1414.181458][ T867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.211852][ T867] usb 4-1: config 0 descriptor?? [ 1414.672283][ T867] keytouch 0003:0926:3333.0082: fixing up Keytouch IEC report descriptor [ 1414.691187][ T867] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0082/input/input190 [ 1414.947679][ T867] keytouch 0003:0926:3333.0082: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1415.008156][ T867] usb 4-1: USB disconnect, device number 107 [ 1415.836154][ T6588] Bluetooth: hci2: ISO packet too small [ 1415.895366][T10507] netlink: 40 bytes leftover after parsing attributes in process `syz.8.24740'. [ 1415.908134][T10507] netlink: 40 bytes leftover after parsing attributes in process `syz.8.24740'. [ 1416.037831][ T6110] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1416.205321][ T6110] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.223780][ T6110] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1416.289577][ T6110] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.301491][ T6110] usb 10-1: config 0 descriptor?? [ 1416.528873][ T6110] usbhid 10-1:0.0: can't add hid device: -71 [ 1416.541775][ T6110] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1416.599910][ T6110] usb 10-1: USB disconnect, device number 11 [ 1416.973271][T10549] syzkaller1: entered promiscuous mode [ 1416.990685][T10549] syzkaller1: entered allmulticast mode [ 1417.064052][ T6110] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1417.235771][ T6110] usb 10-1: Using ep0 maxpacket: 32 [ 1417.267590][ T6110] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.305361][ T6110] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1417.336548][ T6110] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.369723][ T6110] usb 10-1: config 0 descriptor?? [ 1417.392533][ T6110] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1417.435017][ T6110] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1417.522597][T10573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1417.546316][T14417] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1417.588377][T14417] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1417.603880][T14417] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1417.614349][T14417] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1417.622300][T14417] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1417.629629][T14417] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1417.647352][ T6110] usb 10-1: USB disconnect, device number 12 [ 1417.672969][ T6110] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1417.693059][T10574] wlan0 speed is unknown, defaulting to 1000 [ 1417.713850][T10574] lo speed is unknown, defaulting to 1000 [ 1418.049340][ T6208] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1418.056644][T10574] chnl_net:caif_netlink_parms(): no params data found [ 1418.065682][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1418.065699][ T29] audit: type=1326 audit(2000000197.346:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10702 comm="syz.5.24760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cd18cde9 code=0x7ffc0000 [ 1418.096921][ T29] audit: type=1326 audit(2000000197.346:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10702 comm="syz.5.24760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cd18cde9 code=0x7ffc0000 [ 1418.120360][ T29] audit: type=1326 audit(2000000197.346:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10702 comm="syz.5.24760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f74cd18cde9 code=0x7ffc0000 [ 1418.166353][ T29] audit: type=1326 audit(2000000197.346:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10702 comm="syz.5.24760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cd18cde9 code=0x7ffc0000 [ 1418.191789][ T29] audit: type=1326 audit(2000000197.346:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10702 comm="syz.5.24760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cd18cde9 code=0x7ffc0000 [ 1418.215250][ T29] audit: type=1326 audit(2000000197.346:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10702 comm="syz.5.24760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f74cd18cde9 code=0x7ffc0000 [ 1418.241613][ T6208] usb 9-1: Using ep0 maxpacket: 16 [ 1418.254767][ T6208] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1418.275851][ T6208] usb 9-1: config 0 has no interface number 0 [ 1418.288893][ T6208] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1418.312674][ T29] audit: type=1326 audit(2000000197.346:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10702 comm="syz.5.24760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cd18cde9 code=0x7ffc0000 [ 1418.336349][ T6208] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1418.346690][ T6208] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1418.357071][ T29] audit: type=1326 audit(2000000197.346:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10702 comm="syz.5.24760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cd18cde9 code=0x7ffc0000 [ 1418.381847][ T6208] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.392652][ T6208] usb 9-1: config 0 descriptor?? [ 1418.402912][ T29] audit: type=1326 audit(2000000197.355:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10702 comm="syz.5.24760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f74cd18cde9 code=0x7ffc0000 [ 1418.427187][ T29] audit: type=1326 audit(2000000197.355:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10702 comm="syz.5.24760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cd18cde9 code=0x7ffc0000 [ 1418.512616][T10574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.530062][T10574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.537698][T10574] bridge_slave_0: entered allmulticast mode [ 1418.547305][T10574] bridge_slave_0: entered promiscuous mode [ 1418.557088][T10574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.566018][T10574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.574412][T10574] bridge_slave_1: entered allmulticast mode [ 1418.582825][T10574] bridge_slave_1: entered promiscuous mode [ 1418.804168][T10574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.833139][T10574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.934089][T10574] team0: Port device team_slave_0 added [ 1418.966243][T10813] mkiss: ax0: crc mode is auto. [ 1418.975100][T10574] team0: Port device team_slave_1 added [ 1419.068594][T10574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.069017][ T6208] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.0083/input/input191 [ 1419.099913][T10574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.124513][ T6208] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.0083/input/input192 [ 1419.130153][T10574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.162055][ T6208] uclogic 0003:28BD:0071.0083: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.8-1/input1 [ 1419.178096][T10574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.196265][T10574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.248515][T10574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1419.338809][T31832] usb 9-1: USB disconnect, device number 24 [ 1419.421641][T10895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1419.450414][T10574] hsr_slave_0: entered promiscuous mode [ 1419.463504][T10574] hsr_slave_1: entered promiscuous mode [ 1419.471168][T10574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1419.478847][T10574] Cannot create hsr debugfs directory [ 1419.866762][ T6588] Bluetooth: hci3: command tx timeout [ 1420.213021][T10995] loop8: detected capacity change from 0 to 7 [ 1420.240448][T10995] Dev loop8: unable to read RDB block 7 [ 1420.246088][T10995] loop8: AHDI p1 p3 p4 [ 1420.264484][T10995] loop8: partition table partially beyond EOD, truncated [ 1420.303362][T10995] loop8: p1 start 975770946 is beyond EOD, truncated [ 1420.310122][T10995] loop8: p3 start 6514546 is beyond EOD, truncated [ 1420.702431][T10574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1420.722420][ T6208] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1420.735946][T10574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1420.799318][T10574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1420.838594][T10574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1420.925662][ T6208] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1420.946532][ T6208] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1420.965367][T11041] xt_CT: No such helper "pptp" [ 1420.987964][ T6208] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1421.009952][ T6208] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.018084][ T6208] usb 10-1: Product: syz [ 1421.041883][ T6208] usb 10-1: Manufacturer: syz [ 1421.047770][T10574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.052169][ T6208] usb 10-1: SerialNumber: syz [ 1421.065926][T11047] input: syz0 as /devices/virtual/input/input193 [ 1421.127296][T10574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.158740][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.165881][ T9301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.236354][ T9301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.243490][ T9301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1421.358340][T11060] sctp: [Deprecated]: syz.8.24793 (pid 11060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1421.358340][T11060] Use struct sctp_sack_info instead [ 1421.610420][T11072] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1421.658551][T11075] netlink: 428 bytes leftover after parsing attributes in process `syz.5.24798'. [ 1421.719025][T10574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1421.837511][T10574] veth0_vlan: entered promiscuous mode [ 1421.852094][T10574] veth1_vlan: entered promiscuous mode [ 1421.889220][T11079] netlink: 5 bytes leftover after parsing attributes in process `syz.8.24799'. [ 1421.907819][T11079] netlink: 5 bytes leftover after parsing attributes in process `syz.8.24799'. [ 1421.910608][T10574] veth0_macvtap: entered promiscuous mode [ 1421.958848][T10574] veth1_macvtap: entered promiscuous mode [ 1422.033896][T10574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.068965][T10574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.089836][ T6588] Bluetooth: hci3: command tx timeout [ 1422.091986][T10574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.148782][T10574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.180740][T10574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.192596][ T6208] cdc_ncm 10-1:1.0: bind() failure [ 1422.203384][ T6208] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1422.216520][ T6208] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1422.221313][T10574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.248295][ T6208] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1422.265846][ T6208] usb 10-1: USB disconnect, device number 13 [ 1422.272449][T10574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.272474][T10574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.272493][T10574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.272507][T10574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.272530][T10574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.272543][T10574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.272562][T10574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.272576][T10574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.277305][T10574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1422.521582][T10574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.543551][T10574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.556853][T10574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.597018][T10574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.624591][T10574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.637652][T10574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.648923][T10574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.668330][T10574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.696827][T10574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.708695][T10574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.754870][T10574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.780179][T10574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.793222][T10574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1422.841645][T10574] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.868475][T10574] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.908698][T10574] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.948193][T10574] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.215544][ T9302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.236605][ T9302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.295369][T11131] netlink: 284 bytes leftover after parsing attributes in process `syz.9.24813'. [ 1423.303841][ T5530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.319096][ T5530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.877408][T11150] netlink: 16 bytes leftover after parsing attributes in process `syz.5.24819'. [ 1423.885525][ T6162] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1423.888697][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24819'. [ 1424.058298][ T6162] usb 10-1: Using ep0 maxpacket: 32 [ 1424.065993][ T6162] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1424.077539][ T6162] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1424.097211][ T6162] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1424.107560][ T6162] usb 10-1: config 1 has no interface number 0 [ 1424.114124][ T6162] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1424.125597][ T6162] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1424.144082][ T6162] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1424.154538][ T6162] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.172329][ T6162] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1424.314350][ T6588] Bluetooth: hci3: command tx timeout [ 1424.768558][ T6162] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 1424.931594][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880698a2800: rx timeout, send abort [ 1424.946018][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880698a2800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1425.006263][ T6162] usb 10-1: USB disconnect, device number 14 [ 1425.014414][ T6162] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1425.591334][T11211] loop2: detected capacity change from 0 to 7 [ 1425.640917][T11211] Dev loop2: unable to read RDB block 7 [ 1425.657968][T11211] loop2: unable to read partition table [ 1425.668862][T11211] loop2: partition table beyond EOD, truncated [ 1425.679009][T11211] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1426.103646][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1426.103664][ T29] audit: type=1400 audit(2000000204.857:5858): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11232 comm="syz.5.24845" dest=2 [ 1426.536919][ T6588] Bluetooth: hci3: command tx timeout [ 1427.102686][ T9473] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1427.264586][ T9473] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.284746][ T9473] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.317357][ T9473] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1427.418849][ T9473] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1427.448960][ T9473] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.469118][ T9473] usb 10-1: config 0 descriptor?? [ 1427.912267][ T9473] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x2 [ 1427.945892][T11308] netlink: 32 bytes leftover after parsing attributes in process `syz.8.24871'. [ 1427.954120][ T9473] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x2 [ 1427.958354][T11308] erspan0: entered promiscuous mode [ 1427.982854][T11308] netlink: 32 bytes leftover after parsing attributes in process `syz.8.24871'. [ 1427.994204][ T9473] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x3 [ 1427.994830][ T9473] plantronics 0003:047F:FFFF.0084: No inputs registered, leaving [ 1428.017594][ T9473] plantronics 0003:047F:FFFF.0084: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1428.183810][ T6208] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1428.202161][ T6164] usb 10-1: USB disconnect, device number 15 [ 1428.367106][ T6208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.391206][ T6208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.407776][ T6208] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1428.418844][ T6208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.432195][ T6208] usb 6-1: config 0 descriptor?? [ 1428.891495][ T6208] aquacomputer_d5next 0003:0C70:F00D.0085: unknown main item tag 0x0 [ 1428.910542][ T6208] aquacomputer_d5next 0003:0C70:F00D.0085: unknown main item tag 0x0 [ 1428.932033][ T6208] aquacomputer_d5next 0003:0C70:F00D.0085: unknown main item tag 0x0 [ 1428.963964][ T6208] aquacomputer_d5next 0003:0C70:F00D.0085: unknown main item tag 0x0 [ 1428.974424][ T6208] aquacomputer_d5next 0003:0C70:F00D.0085: unknown main item tag 0x0 [ 1428.990468][ T6208] aquacomputer_d5next 0003:0C70:F00D.0085: hidraw0: USB HID v20.00 Device [HID 0c70:f00d] on usb-dummy_hcd.5-1/input0 [ 1429.065630][T11363] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 1429.085541][T11363] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1429.105231][T11363] syzkaller0: linktype set to 774 [ 1429.113790][ T6208] usb 6-1: USB disconnect, device number 80 [ 1429.540568][ T867] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1429.722171][ T867] usb 10-1: Using ep0 maxpacket: 32 [ 1429.729696][ T867] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1429.745693][ T867] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1429.767831][ T867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.784691][ T867] usb 10-1: Product: syz [ 1429.802736][ T29] audit: type=1400 audit(2000000208.318:5859): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11404 comm="syz.5.24893" dest=20000 [ 1429.816598][ T867] usb 10-1: Manufacturer: syz [ 1429.827426][ T867] usb 10-1: SerialNumber: syz [ 1429.862060][ T867] usb 10-1: config 0 descriptor?? [ 1430.330747][ T867] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 1430.738701][ T6164] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1430.910858][ T6164] usb 6-1: Using ep0 maxpacket: 8 [ 1430.921076][ T6164] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1430.963211][ T6164] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.986839][ T6208] usb 10-1: USB disconnect, device number 16 [ 1430.998251][ T6164] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1431.014630][ T6164] usb 6-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1431.047472][ T6164] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.074649][ T6164] usb 6-1: config 0 descriptor?? [ 1431.580538][ T6164] logitech 0003:046D:C298.0086: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.5-1/input0 [ 1431.610654][ T6164] logitech 0003:046D:C298.0086: no inputs found [ 1431.790553][ T6208] usb 6-1: USB disconnect, device number 81 [ 1432.247628][T14417] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1432.264138][T14417] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1432.275020][T14417] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1432.286113][T14417] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1432.294450][T14417] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1432.302040][T14417] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1432.319759][ T6110] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1432.408751][T11626] wlan0 speed is unknown, defaulting to 1000 [ 1432.416908][T11626] lo speed is unknown, defaulting to 1000 [ 1432.481794][ T6110] usb 10-1: Using ep0 maxpacket: 8 [ 1432.489560][ T6110] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.512557][ T6110] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.533587][ T6110] usb 10-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1432.554173][ T6110] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.579006][ T6110] usb 10-1: config 0 descriptor?? [ 1432.713897][T11626] chnl_net:caif_netlink_parms(): no params data found [ 1432.860637][T11626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.880762][T11626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.919344][T11626] bridge_slave_0: entered allmulticast mode [ 1432.941966][T11626] bridge_slave_0: entered promiscuous mode [ 1432.983749][T11626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.991407][T11626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.000899][T11626] bridge_slave_1: entered allmulticast mode [ 1433.009906][T11626] bridge_slave_1: entered promiscuous mode [ 1433.037670][ T6110] apple 0003:05AC:024B.0087: unbalanced delimiter at end of report description [ 1433.078138][ T6110] apple 0003:05AC:024B.0087: parse failed [ 1433.112193][ T6110] apple 0003:05AC:024B.0087: probe with driver apple failed with error -22 [ 1433.141473][T11626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1433.189095][T11626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1433.264154][ T6164] usb 10-1: USB disconnect, device number 17 [ 1433.348605][T11626] team0: Port device team_slave_0 added [ 1433.372172][T11626] team0: Port device team_slave_1 added [ 1433.456411][T11626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1433.485821][T11626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1433.550938][T11875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1433.560470][T11626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1433.583797][T11626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1433.607164][T11626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1433.688639][T11626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1433.887998][T11626] hsr_slave_0: entered promiscuous mode [ 1433.915581][T11626] hsr_slave_1: entered promiscuous mode [ 1433.922441][T11626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1433.956754][T11626] Cannot create hsr debugfs directory [ 1434.150320][ T867] kernel write not supported for file /5830/attr/exec (pid: 867 comm: kworker/1:4) [ 1434.255503][ T6164] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1434.428585][ T6164] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1434.442588][ T6164] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.479994][ T6164] usb 10-1: config 0 descriptor?? [ 1434.494452][ T6164] cp210x 10-1:0.0: cp210x converter detected [ 1434.577092][T14417] Bluetooth: hci2: command tx timeout [ 1434.965889][ T6164] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1434.993143][ T6164] cp210x 10-1:0.0: GPIO initialisation failed: -524 [ 1435.022866][ T6164] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1435.024733][ T29] audit: type=1400 audit(2000000213.201:5860): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=11996 comm="syz.5.24923" saddr=63.255.255.255 daddr=172.20.20.170 [ 1435.230013][ T6162] usb 10-1: USB disconnect, device number 18 [ 1435.270613][ T6162] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1435.282060][ T6162] cp210x 10-1:0.0: device disconnected [ 1435.474349][T11626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1435.498616][T11626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1435.531807][T11626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1435.563488][T11626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1435.715985][T11626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.742134][T11626] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.767749][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.775529][ T9301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.807579][ T9301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.816280][ T9301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1435.966187][ T6164] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1436.161545][ T6164] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.173622][ T6164] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1436.212527][ T6164] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1436.254835][ T6164] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1436.263084][ T6164] usb 6-1: SerialNumber: syz [ 1436.331291][T11626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1436.488289][T11626] veth0_vlan: entered promiscuous mode [ 1436.518230][ T6164] usb 6-1: 0:2 : does not exist [ 1436.546383][ T6164] usb 6-1: 0:0: failed to get current value for ch 0 (-22) [ 1436.558763][T11626] veth1_vlan: entered promiscuous mode [ 1436.621955][ T6164] usb 6-1: USB disconnect, device number 82 [ 1436.676230][T11626] veth0_macvtap: entered promiscuous mode [ 1436.691014][T11626] veth1_macvtap: entered promiscuous mode [ 1436.714876][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.727250][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.739241][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.752349][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.787347][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.800268][T14417] Bluetooth: hci2: command tx timeout [ 1436.807412][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.819002][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.830343][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.844487][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.878529][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.893883][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.907563][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.920615][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.933164][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.944434][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.956830][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.961928][ T6162] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1436.969025][T11626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1437.001298][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.035013][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.056175][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.078034][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.110370][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.122652][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.152375][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.153555][ T6162] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.173808][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.194509][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.217107][ T6162] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.226410][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.258876][ T6162] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1437.259461][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.280329][ T6162] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.291755][ T6162] usb 10-1: config 0 descriptor?? [ 1437.307267][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.321273][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.336971][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.359081][T11626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1437.433165][T11626] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.472313][T11626] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.482107][T11626] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.516114][T11626] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.763443][ T9303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.783386][ T9303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.864961][ T5530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.874117][ T5530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.193045][ T6162] hid-led 0003:27B8:01ED.0088: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.9-1/input0 [ 1438.251043][ T6162] hid-led 0003:27B8:01ED.0088: ThingM blink(1) initialized [ 1438.536073][ T9473] usb 10-1: USB disconnect, device number 19 [ 1439.024675][T14417] Bluetooth: hci2: command tx timeout [ 1439.514952][ T9473] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1439.696067][ T9473] usb 10-1: Using ep0 maxpacket: 32 [ 1439.704225][ T9473] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1439.728053][ T9473] usb 10-1: config 0 has no interface number 0 [ 1439.734566][ T9473] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1439.763958][ T9473] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1439.781714][ T9473] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.789850][ T9473] usb 10-1: Product: syz [ 1439.804647][ T9473] usb 10-1: Manufacturer: syz [ 1439.809414][ T9473] usb 10-1: SerialNumber: syz [ 1439.831577][ T9473] usb 10-1: config 0 descriptor?? [ 1439.841377][ T9473] smsc75xx v1.0.0 [ 1439.884381][T12176] Process accounting resumed [ 1440.463299][T12192] syzkaller1: entered promiscuous mode [ 1440.470178][T12192] syzkaller1: entered allmulticast mode [ 1440.495601][ T9473] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1440.511382][T12192] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 1440.524058][ T9473] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1440.541131][ T6110] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1440.755838][ T9473] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1440.771022][ T6110] usb 6-1: Using ep0 maxpacket: 16 [ 1440.778493][ T9473] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1440.797795][ T6110] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.835712][ T6110] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.849275][ T9473] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1440.864734][ T9473] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1440.879041][ T6110] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1440.897220][ T9473] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 1440.906924][ T6110] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1440.936230][ T6110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.960240][ T9473] usb 10-1: USB disconnect, device number 20 [ 1440.999875][ T6110] usb 6-1: config 0 descriptor?? [ 1441.247570][T14417] Bluetooth: hci2: command tx timeout [ 1441.466237][ T6110] microsoft 0003:045E:07DA.0089: unknown main item tag 0x1 [ 1441.500100][ T6110] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0089/input/input194 [ 1441.534323][T12217] netlink: 'syz.9.24962': attribute type 1 has an invalid length. [ 1441.619404][ T6110] microsoft 0003:045E:07DA.0089: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1441.741955][ T25] usb 6-1: USB disconnect, device number 83 [ 1445.275004][T12361] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.25007'. [ 1445.329117][T12356] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.25007'. [ 1445.939624][ T9473] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1446.134049][ T9473] usb 10-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1446.153605][ T9473] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.182720][ T9473] usb 10-1: config 0 descriptor?? [ 1446.199606][ T9473] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1446.230174][ T9473] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1446.336367][ T6162] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1446.442143][ T9473] usb 10-1: USB disconnect, device number 21 [ 1446.452845][ T9473] ftdi_sio 10-1:0.0: device disconnected [ 1446.507591][ T6162] usb 6-1: Using ep0 maxpacket: 16 [ 1446.518636][ T6162] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1446.550257][ T6162] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1446.575043][ T6162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.618200][ T6162] usb 6-1: config 0 descriptor?? [ 1446.641452][ T6162] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input195 [ 1446.868333][ T5183] bcm5974 6-1:0.0: could not read from device [ 1446.880835][ T5183] bcm5974 6-1:0.0: could not read from device [ 1446.883984][ T6162] usb 6-1: USB disconnect, device number 84 [ 1447.341251][ C1] vkms_vblank_simulate: vblank timer overrun [ 1447.609988][ T6588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1447.626699][ T6588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1447.644922][ T6588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1447.672199][ T6588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1447.685806][ T6588] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1447.694895][ T6588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1447.855939][ T9275] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.211125][ T9275] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.254210][T12449] wlan0 speed is unknown, defaulting to 1000 [ 1448.305152][T12449] lo speed is unknown, defaulting to 1000 [ 1448.405521][ T9275] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.564139][ T9275] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.216174][ T9275] bridge_slave_1: left allmulticast mode [ 1449.237599][ T9275] bridge_slave_1: left promiscuous mode [ 1449.274279][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.311303][ T9275] bridge_slave_0: left allmulticast mode [ 1449.329298][ T9275] bridge_slave_0: left promiscuous mode [ 1449.335970][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.598338][T12593] vivid-003: disconnect [ 1449.636443][T12592] vivid-003: reconnect [ 1449.887144][T14417] Bluetooth: hci3: command tx timeout [ 1450.187503][T12603] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1450.939163][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.991658][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.259312][ T9275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1451.272942][ T9275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1451.286175][ T9275] bond0 (unregistering): Released all slaves [ 1451.549005][T12449] chnl_net:caif_netlink_parms(): no params data found [ 1451.950924][ T9275] hsr_slave_0: left promiscuous mode [ 1451.984957][ T9275] hsr_slave_1: left promiscuous mode [ 1452.002335][ T9275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1452.010780][ T9275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1452.050170][ T9275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1452.076672][ T9275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1452.108160][T14417] Bluetooth: hci3: command tx timeout [ 1452.119675][ T9275] veth1_macvtap: left promiscuous mode [ 1452.127111][ T9275] veth0_macvtap: left promiscuous mode [ 1452.149149][ T9275] veth1_vlan: left promiscuous mode [ 1452.155833][ T9275] veth0_vlan: left promiscuous mode [ 1452.908121][ T29] audit: type=1400 audit(2000000229.907:5861): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12711 comm="syz.5.25067" [ 1453.213646][T12720] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1454.144677][ T9275] team0 (unregistering): Port device team_slave_1 removed [ 1454.342589][T14417] Bluetooth: hci3: command tx timeout [ 1454.397526][ T9275] team0 (unregistering): Port device team_slave_0 removed [ 1456.017871][T12449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.028737][T12449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.039361][T12449] bridge_slave_0: entered allmulticast mode [ 1456.094590][T12449] bridge_slave_0: entered promiscuous mode [ 1456.114698][T12449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.123600][T12449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.132375][T12449] bridge_slave_1: entered allmulticast mode [ 1456.165041][T12449] bridge_slave_1: entered promiscuous mode [ 1456.194905][T12778] netlink: 'syz.5.25081': attribute type 5 has an invalid length. [ 1456.269365][ T29] audit: type=1326 audit(2000000233.078:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.7.25084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f291c78cde9 code=0x0 [ 1456.514294][T12449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.549788][T12449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.559970][T14417] Bluetooth: hci3: command tx timeout [ 1456.785953][T12823] batadv2: entered promiscuous mode [ 1456.900314][T12449] team0: Port device team_slave_0 added [ 1456.943013][T12449] team0: Port device team_slave_1 added [ 1457.129883][T12449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.165123][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.229793][T12449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.308284][T12895] netlink: 92 bytes leftover after parsing attributes in process `syz.9.25093'. [ 1457.320439][T12449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.338325][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.370573][T12449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.687643][T12449] hsr_slave_0: entered promiscuous mode [ 1457.712618][T12449] hsr_slave_1: entered promiscuous mode [ 1457.724334][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.9.25098'. [ 1457.728199][T12449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1457.764097][T12449] Cannot create hsr debugfs directory [ 1458.347776][T12449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.382450][T12449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1458.624940][T12449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.680461][T12449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1458.986653][T12449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.008671][T12449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1459.126064][ T6588] Bluetooth: hci4: sending frame failed (-49) [ 1459.139446][T14417] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1459.374088][T12449] bond0: (slave netdevsim0): Releasing backup interface [ 1459.402108][T12449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.418390][T12449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1459.918181][T12449] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1459.937910][T12449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1460.034369][T12449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1460.052044][T12449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1460.262144][T12449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1460.314144][T12449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1460.332559][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.340440][ T9306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1460.358958][ T9296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.366624][ T9296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1460.478857][ T6162] psmouse serio12: Failed to reset mouse on : -5 [ 1460.700596][T12449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1460.776637][T12449] veth0_vlan: entered promiscuous mode [ 1460.801522][T12449] veth1_vlan: entered promiscuous mode [ 1460.840573][T12449] veth0_macvtap: entered promiscuous mode [ 1460.859247][T12449] veth1_macvtap: entered promiscuous mode [ 1460.887155][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.901401][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.913296][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.926112][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.939790][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.953064][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.966204][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.978166][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.992749][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.004495][ T25] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1461.013609][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.025838][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.037180][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.048490][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.060607][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.073339][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.089802][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.105249][T12449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1461.127149][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.142591][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.153169][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.165802][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.178351][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.189897][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 1461.196563][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.208861][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.222804][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.235509][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.247776][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.262215][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.262373][ T25] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1461.284699][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.295513][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.308336][ T25] usb 10-1: Product: syz [ 1461.313157][ T25] usb 10-1: Manufacturer: syz [ 1461.320082][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.332141][ T25] usb 10-1: SerialNumber: syz [ 1461.339238][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.352420][ T25] usb 10-1: config 0 descriptor?? [ 1461.360980][ T25] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1461.371822][T12449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1461.384022][ T25] usb 10-1: Detected FT232H [ 1461.408442][T12449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.419555][T12449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.432009][T12449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.444018][T12449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.583011][ T9301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.594481][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1461.603346][ T9301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.661929][ T9301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.671462][ T9301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.051893][ T25] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1462.285974][ T25] usb 10-1: USB disconnect, device number 22 [ 1462.304379][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1462.329575][ T25] ftdi_sio 10-1:0.0: device disconnected [ 1462.481465][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25139'. [ 1462.502731][T13171] netlink: 112 bytes leftover after parsing attributes in process `syz.1.25139'. [ 1462.515974][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25139'. [ 1463.782758][ T25] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1463.983080][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 1463.992833][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.005779][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1464.018113][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1464.026180][ T25] usb 10-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 1464.037602][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.063475][ T25] usb 10-1: config 0 descriptor?? [ 1464.469287][T13229] team_slave_0: left promiscuous mode [ 1464.476280][T13229] team_slave_1: left promiscuous mode [ 1464.522443][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.530579][ T6162] misc userio: Buffer overflowed, userio client isn't keeping up [ 1464.562859][ T25] hid-generic 0003:060B:430A.008A: unexpected long global item [ 1464.578050][ T25] hid-generic 0003:060B:430A.008A: probe with driver hid-generic failed with error -22 [ 1464.768910][ T832] usb 10-1: USB disconnect, device number 23 [ 1465.058201][T13229] team0 (unregistering): Port device team_slave_0 removed [ 1465.082545][T13229] team0 (unregistering): Port device team_slave_1 removed [ 1465.093593][T13229] syz_tun: left allmulticast mode [ 1465.102759][T13229] syz_tun: left promiscuous mode [ 1465.124774][T13229] team0 (unregistering): Port device vlan2 removed [ 1465.403688][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.9.25157'. [ 1465.450906][T13281] macvlan0: entered allmulticast mode [ 1465.457431][T13281] veth1_vlan: entered allmulticast mode [ 1465.467258][T13281] veth1_vlan: left allmulticast mode [ 1465.529869][T13281] macvlan0 (unregistering): left allmulticast mode [ 1465.667758][ T6162] input: PS/2 Generic Mouse as /devices/serio12/input/input196 [ 1465.720674][T13289] wlan0 speed is unknown, defaulting to 1000 [ 1465.739740][T13289] lo speed is unknown, defaulting to 1000 [ 1465.909497][ T6162] psmouse serio12: Failed to enable mouse on [ 1467.024506][ T6110] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1467.040997][ T6110] hid-generic 0000:0000:0000.008B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1467.217526][T13377] netlink: 'syz.9.25174': attribute type 9 has an invalid length. [ 1467.310102][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.9.25174'. [ 1467.435449][T13381] input: syz0 as /devices/virtual/input/input197 [ 1467.690170][ T29] audit: type=1400 audit(2000000243.760:5863): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13400 comm="syz.1.25179" daddr=::1c9a:e7ff:fe9a:6f34 [ 1467.770129][ T6162] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1467.802183][ T6110] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1467.932177][ T6162] usb 6-1: config 0 has an invalid interface number: 150 but max is 0 [ 1467.947172][ T6162] usb 6-1: config 0 has no interface number 0 [ 1467.965381][ T6110] usb 10-1: Using ep0 maxpacket: 16 [ 1467.975702][ T6162] usb 6-1: New USB device found, idVendor=2899, idProduct=012c, bcdDevice= 2.2c [ 1467.993448][ T6110] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1468.020037][ T6162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.028492][ T6110] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1468.039207][ T6162] usb 6-1: Product: syz [ 1468.043430][ T6162] usb 6-1: Manufacturer: syz [ 1468.058723][ T6162] usb 6-1: SerialNumber: syz [ 1468.069784][ T6110] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1468.081992][ T6162] usb 6-1: config 0 descriptor?? [ 1468.087386][ T6110] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.101875][ T6110] usb 10-1: config 0 descriptor?? [ 1468.327913][ T6162] gspca_main: spca500-2.14.0 probing 2899:012c [ 1468.347655][ T6162] usb 6-1: USB disconnect, device number 85 [ 1468.557647][ T6110] appleir 0003:05AC:8241.008C: unknown main item tag 0x0 [ 1468.565393][ T6110] appleir 0003:05AC:8241.008C: unknown main item tag 0x0 [ 1468.572868][ T6110] appleir 0003:05AC:8241.008C: unknown main item tag 0x0 [ 1468.580101][ T6110] appleir 0003:05AC:8241.008C: unknown main item tag 0x0 [ 1468.587700][ T6110] appleir 0003:05AC:8241.008C: unknown main item tag 0x0 [ 1468.596017][ T6110] appleir 0003:05AC:8241.008C: No inputs registered, leaving [ 1468.610944][ T6110] appleir 0003:05AC:8241.008C: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 1468.874690][ T6110] usb 10-1: USB disconnect, device number 24 [ 1469.087963][T13461] block nbd5: NBD_DISCONNECT [ 1469.093378][T13461] block nbd5: Send disconnect failed -22 [ 1469.113432][T13460] block nbd5: Disconnected due to user request. [ 1469.124097][T13460] block nbd5: shutting down sockets [ 1469.877836][T13488] vcan0: entered allmulticast mode [ 1469.911667][T13488] vcan0 (unregistering): left allmulticast mode [ 1582.575952][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1582.583354][ C0] rcu: (detected by 0, t=10502 jiffies, g=254473, q=241 ncpus=2) [ 1582.591254][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295086716-4295076214), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1582.604802][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g254473 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1582.616491][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1582.626645][ C0] rcu: RCU grace-period kthread stack dump: [ 1582.632795][ C0] task:rcu_preempt state:R running task stack:25784 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1582.646659][ C0] Call Trace: [ 1582.649947][ C0] [ 1582.652891][ C0] __schedule+0x18bc/0x4c40 [ 1582.657506][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1582.663471][ C0] ? __pfx___schedule+0x10/0x10 [ 1582.668714][ C0] ? __pfx_lock_release+0x10/0x10 [ 1582.673769][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1582.678721][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1582.685067][ C0] ? schedule+0x90/0x320 [ 1582.689429][ C0] schedule+0x14b/0x320 [ 1582.693637][ C0] schedule_timeout+0x15a/0x290 [ 1582.698598][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1582.703984][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1582.709293][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1582.714883][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1582.720181][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1582.725075][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1582.730315][ C0] ? rcu_gp_init+0x1256/0x1630 [ 1582.735118][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1582.740247][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1582.746157][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1582.751455][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1582.757365][ C0] ? finish_swait+0xd4/0x1e0 [ 1582.761969][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1582.767391][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1582.772008][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1582.777238][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1582.783332][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1582.788371][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1582.793608][ C0] kthread+0x7a9/0x920 [ 1582.797711][ C0] ? __pfx_kthread+0x10/0x10 [ 1582.802321][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1582.807534][ C0] ? __pfx_kthread+0x10/0x10 [ 1582.812142][ C0] ? __pfx_kthread+0x10/0x10 [ 1582.816749][ C0] ? __pfx_kthread+0x10/0x10 [ 1582.821348][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1582.826556][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1582.831937][ C0] ? __pfx_kthread+0x10/0x10 [ 1582.836564][ C0] ret_from_fork+0x4b/0x80 [ 1582.840990][ C0] ? __pfx_kthread+0x10/0x10 [ 1582.845590][ C0] ret_from_fork_asm+0x1a/0x30 [ 1582.850375][ C0] [ 1582.853413][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1582.859755][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1582.865195][ C1] NMI backtrace for cpu 1 [ 1582.865218][ C1] CPU: 1 UID: 0 PID: 13500 Comm: syz.0.25200 Not tainted 6.14.0-rc2-syzkaller #0 [ 1582.865235][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1582.865247][ C1] RIP: 0010:__hrtimer_run_queues+0x311/0xd30 [ 1582.865278][ C1] Code: 84 b3 04 00 00 e8 6f 9f 12 00 eb 05 e8 68 9f 12 00 48 8b 5c 24 28 4c 89 f7 e8 9b 33 00 00 48 89 d8 48 c1 e8 03 48 89 44 24 68 <42> 80 3c 28 00 74 08 48 89 df e8 10 b2 76 00 4c 89 33 48 8b 54 24 [ 1582.865292][ C1] RSP: 0018:ffffc90000a18d40 EFLAGS: 00000806 [ 1582.865308][ C1] RAX: 1ffff110170e58c9 RBX: ffff8880b872c648 RCX: ffff88802c94bc00 [ 1582.865320][ C1] RDX: 0000000000010000 RSI: ffffffff8c5fb720 RDI: ffffffff8c5fb6e0 [ 1582.865332][ C1] RBP: ffffc90000a18ea0 R08: ffffffff81ace403 R09: 1ffffffff203466e [ 1582.865343][ C1] R10: dffffc0000000000 R11: fffffbfff203466f R12: 1ffff110170e58cb [ 1582.865356][ C1] R13: dffffc0000000000 R14: ffff888059ef2340 R15: ffff8880b872c600 [ 1582.865368][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1582.865449][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1582.865461][ C1] CR2: 0000001b33b1dff8 CR3: 000000006770e000 CR4: 00000000003526f0 [ 1582.865476][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1582.865486][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1582.865497][ C1] Call Trace: [ 1582.865506][ C1] [ 1582.865518][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1582.865541][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1582.865564][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1582.865581][ C1] ? nmi_handle+0x2a/0x5a0 [ 1582.865611][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1582.865629][ C1] ? nmi_handle+0x14f/0x5a0 [ 1582.865649][ C1] ? nmi_handle+0x2a/0x5a0 [ 1582.865671][ C1] ? __hrtimer_run_queues+0x311/0xd30 [ 1582.865694][ C1] ? default_do_nmi+0x63/0x160 [ 1582.865711][ C1] ? exc_nmi+0x123/0x1f0 [ 1582.865726][ C1] ? end_repeat_nmi+0xf/0x53 [ 1582.865752][ C1] ? debug_deactivate+0x83/0x220 [ 1582.865779][ C1] ? __hrtimer_run_queues+0x311/0xd30 [ 1582.865803][ C1] ? __hrtimer_run_queues+0x311/0xd30 [ 1582.865827][ C1] ? __hrtimer_run_queues+0x311/0xd30 [ 1582.865851][ C1] [ 1582.865857][ C1] [ 1582.865873][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1582.865906][ C1] ? sched_clock+0x4a/0x70 [ 1582.865924][ C1] ? read_tsc+0x9/0x20 [ 1582.865940][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1582.865964][ C1] hrtimer_interrupt+0x403/0xa40 [ 1582.865999][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1582.866024][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1582.866046][ C1] [ 1582.866052][ C1] [ 1582.866059][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1582.866082][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 1582.866103][ C1] Code: 2b 00 74 08 4c 89 f7 e8 1a b6 88 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1582.866117][ C1] RSP: 0018:ffffc90004477300 EFLAGS: 00000206 [ 1582.866136][ C1] RAX: 0000000000000001 RBX: 1ffff9200088ee6c RCX: ffff88802c94c6e8 [ 1582.866148][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ab8c0 RDI: ffffffff8c5fb740 [ 1582.866161][ C1] RBP: ffffc90004477458 R08: ffffffff942c6847 R09: 1ffffffff2858d08 [ 1582.866173][ C1] R10: dffffc0000000000 R11: fffffbfff2858d09 R12: 1ffff9200088ee68 [ 1582.866184][ C1] R13: dffffc0000000000 R14: ffffc90004477360 R15: 0000000000000246 [ 1582.866209][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1582.866228][ C1] ? pfn_valid+0xf6/0x450 [ 1582.866247][ C1] ? __pfx_lock_release+0x10/0x10 [ 1582.866271][ C1] ? __pfx_lock_release+0x10/0x10 [ 1582.866292][ C1] ? page_ext_get+0x20/0x2a0 [ 1582.866310][ C1] page_ext_get+0x3d/0x2a0 [ 1582.866327][ C1] ? page_ext_get+0x20/0x2a0 [ 1582.866345][ C1] page_table_check_clear+0x4b/0x550 [ 1582.866365][ C1] unmap_page_range+0x376d/0x48d0 [ 1582.866395][ C1] ? validate_chain+0x11e/0x5920 [ 1582.866429][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1582.866457][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1582.866477][ C1] ? unmap_vmas+0x1f1/0x5f0 [ 1582.866495][ C1] ? __pfx_lock_release+0x10/0x10 [ 1582.866513][ C1] ? uprobe_munmap+0x183/0x460 [ 1582.866536][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 1582.866559][ C1] unmap_vmas+0x3cc/0x5f0 [ 1582.866582][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1582.866611][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 1582.866630][ C1] exit_mmap+0x283/0xd40 [ 1582.866658][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1582.866687][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1582.866708][ C1] ? uprobe_clear_state+0x271/0x290 [ 1582.866727][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 1582.866747][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1582.866765][ C1] __mmput+0x115/0x410 [ 1582.866790][ C1] exit_mm+0x220/0x310 [ 1582.866810][ C1] ? __pfx_exit_mm+0x10/0x10 [ 1582.866829][ C1] ? taskstats_exit+0x326/0xa60 [ 1582.866851][ C1] do_exit+0x9ad/0x28e0 [ 1582.866870][ C1] ? preempt_schedule_common+0x84/0xd0 [ 1582.866897][ C1] ? __pfx_do_exit+0x10/0x10 [ 1582.866914][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1582.866935][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1582.866958][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1582.866982][ C1] do_group_exit+0x207/0x2c0 [ 1582.867004][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1582.867024][ C1] x64_sys_call+0x26a8/0x26b0 [ 1582.867041][ C1] do_syscall_64+0xf3/0x230 [ 1582.867062][ C1] ? clear_bhb_loop+0x35/0x90 [ 1582.867085][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.867106][ C1] RIP: 0033:0x7f637cb8cde9 [ 1582.867136][ C1] Code: Unable to access opcode bytes at 0x7f637cb8cdbf. [ 1582.867145][ C1] RSP: 002b:00007ffc76aee238 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1582.867161][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f637cb8cde9 [ 1582.867173][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1582.867182][ C1] RBP: 00007ffc76aee29c R08: 0000000576aee32f R09: 000000000000003d [ 1582.867193][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000011 [ 1582.867202][ C1] R13: 000000000000003d R14: 0000000000152e44 R15: 00007ffc76aee2f0 [ 1582.867221][ C1]