last executing test programs: 9m44.380434349s ago: executing program 2 (id=1252): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x18, 0x52, 0x1, 0x70bd21, 0x2, {0x2}, [@typed={0x4, 0x4, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 9m44.24385993s ago: executing program 2 (id=1254): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) 9m42.320856344s ago: executing program 2 (id=1286): r0 = syz_usb_connect$hid(0x2, 0x66, &(0x7f0000000340)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x8240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x84, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000f80)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x0, '4'}, @main=@item_012={0x2, 0x0, 0xa, "b608"}, @global=@item_012={0x1, 0x1, 0x4, '\x00'}]}}, 0x0}, 0x0) 9m40.303101419s ago: executing program 2 (id=1328): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x11cfa, 0x0, 0x8000088, 0x3, 0x8a6f, 0x1, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x0, 0xe1d9, 0x1101, 0xff}) 9m40.063941729s ago: executing program 2 (id=1333): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9m39.928374898s ago: executing program 2 (id=1338): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x100008a5, 0x93, 0x77f6953e9013251d, 0x3, 0xd59f7d, 0x1019ef, 0xb, 0xfffffffe, 0xffffffff, 0x6, 0x3ff, 0x2802, 0x2, 0x4, 0x0, 0x0, {0x8, 0x400f7}, 0xd0, 0x3}}) 9m23.780625384s ago: executing program 32 (id=1338): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x100008a5, 0x93, 0x77f6953e9013251d, 0x3, 0xd59f7d, 0x1019ef, 0xb, 0xfffffffe, 0xffffffff, 0x6, 0x3ff, 0x2802, 0x2, 0x4, 0x0, 0x0, {0x8, 0x400f7}, 0xd0, 0x3}}) 8m6.895559357s ago: executing program 3 (id=2798): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0xa2831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 8m5.899778248s ago: executing program 3 (id=2811): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, ' \x00'}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x2, "0245"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 8m3.693701249s ago: executing program 3 (id=2844): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x7ffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xd, 0x1, 0x1, 0x0, 0x7}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0xfffffffd, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) 8m3.148008588s ago: executing program 3 (id=2854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) 8m2.888353603s ago: executing program 3 (id=2861): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 8m2.755949374s ago: executing program 3 (id=2865): r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0xffffffff, @local, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x2000000}, 0x1b, 0x0}, 0x5b4}], 0x43, 0x0) 7m46.64486636s ago: executing program 33 (id=2865): r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0xffffffff, @local, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x2000000}, 0x1b, 0x0}, 0x5b4}], 0x43, 0x0) 4m53.849570612s ago: executing program 4 (id=5963): r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000fed000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r1) 4m53.711169152s ago: executing program 4 (id=5965): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) 4m53.551968592s ago: executing program 4 (id=5967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10) 4m53.495443667s ago: executing program 4 (id=5968): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m53.362237172s ago: executing program 4 (id=5970): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 4m52.985993478s ago: executing program 4 (id=5975): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4m52.702591049s ago: executing program 34 (id=5975): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3m52.005818767s ago: executing program 7 (id=6896): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) mremap(&(0x7f0000b08000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00001e4000/0x2000)=nil) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) 3m51.764188754s ago: executing program 7 (id=6901): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0xc, 0x1}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 3m51.587972725s ago: executing program 7 (id=6904): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 3m51.371835725s ago: executing program 7 (id=6907): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 3m51.200307203s ago: executing program 7 (id=6911): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x1000) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 3m50.903980466s ago: executing program 7 (id=6915): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1, 0x2}}, 0x10, 0x0}, 0x20000001) 3m50.439244169s ago: executing program 35 (id=6915): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1, 0x2}}, 0x10, 0x0}, 0x20000001) 3.863212742s ago: executing program 8 (id=10050): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0) 3.79801024s ago: executing program 1 (id=10052): mlockall(0x1) mlockall(0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.519231097s ago: executing program 8 (id=10057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 3.470971556s ago: executing program 5 (id=10058): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 2.720672954s ago: executing program 8 (id=10060): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0xff00) 2.704792011s ago: executing program 5 (id=10061): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x40, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffff9}, @TCA_PIE_TARGET={0x8, 0x1, 0x80000001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.704254559s ago: executing program 6 (id=10062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x6f, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}, {"9b36bbe2d6e94c49786bf3a91a353dd47565311dff9f590031bbb0c369af27b2f1f1537f3cb7e336b5d1fc003c4840f96222f6381b2cd8a97f"}}}}}}, 0x0) 2.359607274s ago: executing program 0 (id=10063): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x149180, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x80) 2.359275267s ago: executing program 6 (id=10064): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) wait4(0x0, 0x0, 0x4000000a, 0x0) 2.079860097s ago: executing program 5 (id=10065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6100330080000000ffffffffffff080211000000505050505050200000000000000000006400011003010c"], 0x80}}, 0x0) 2.059566509s ago: executing program 1 (id=10066): syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 2.005786069s ago: executing program 0 (id=10067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x4}]}, 0x3c}}, 0x4000010) 1.704067707s ago: executing program 6 (id=10068): pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff}, 0x80) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) keyctl$chown(0xf, r1, 0x0, 0x0) 1.578925251s ago: executing program 0 (id=10069): r0 = io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], &(0x7f0000000080)=[0x400000000000], 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) 1.578684379s ago: executing program 5 (id=10071): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x0, 0x4, 0x2, 0x6}, {0x1, 0x5, 0x9, 0x7}, {0x3, 0x2, 0xc}], 0x10, 0x4f, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x3, 0xd}, {0x8, 0x2}}}, 0x24}}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 1.331545387s ago: executing program 6 (id=10072): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x1, 0x0, @time={0x4, 0xfffffff1}, {}, {0x1}, @raw32={[0x0, 0x0, 0x1]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) 1.232686775s ago: executing program 0 (id=10073): rt_sigreturn() syz_usb_connect(0x3, 0x73, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigreturn() 1.143998291s ago: executing program 5 (id=10074): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000005, 0x13, r0, 0xc3123000) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x40084504, &(0x7f0000ffcffc)) 1.137576886s ago: executing program 1 (id=10075): timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 929.637505ms ago: executing program 8 (id=10076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xa, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) 879.95543ms ago: executing program 6 (id=10077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) 807.21123ms ago: executing program 5 (id=10078): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYRESDEC=0x0], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) 788.04075ms ago: executing program 1 (id=10079): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trm\nD'], 0xa) 592.297489ms ago: executing program 6 (id=10080): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 591.359472ms ago: executing program 8 (id=10081): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r2}) 467.391389ms ago: executing program 1 (id=10082): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r1, 0x12, "a5e49c655b78596116de78f9bc1fb4a7c58e"}, &(0x7f0000000340)=0x1a) 356.5353ms ago: executing program 0 (id=10083): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x10001, r0}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x12, r2, 0x800000) 128.073827ms ago: executing program 8 (id=10084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 116.050872ms ago: executing program 1 (id=10085): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x7, 0x6, 0x17, 0x4, 0x4, 0x1}}, @TCA_RED_STAB={0x11f, 0x2, "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"}]}}]}, 0x148}}, 0x0) 0s ago: executing program 0 (id=10086): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) readv(r0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/149, 0x95}], 0x1) kernel console output (not intermixed with test programs): .100208][T23269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7575'. [ 585.388734][T23327] hsr0: entered promiscuous mode [ 585.770346][T23335] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7602'. [ 585.818086][T23339] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7604'. [ 586.522495][T23370] block nbd6: not configured, cannot reconfigure [ 587.333132][ T2957] Bluetooth: hci5: Frame reassembly failed (-84) [ 587.352916][T23398] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 587.398192][T23401] serio: Serial port ttyS3 [ 587.486954][ T5961] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 587.679357][ T5961] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 587.701642][ T5961] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 587.718515][ T5961] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 587.728791][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.740225][T23394] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 587.751392][ T5961] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 587.869700][T23414] netlink: 'syz.1.7636': attribute type 11 has an invalid length. [ 587.995067][ T5961] usb 6-1: USB disconnect, device number 49 [ 588.591030][ T917] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 588.772792][ T917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.802395][ T917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.823901][ T917] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 588.833081][ T917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.848789][ T917] usb 2-1: config 0 descriptor?? [ 588.900105][T23446] serio: Serial port ttyS3 [ 589.047505][T23451] mkiss: ax0: crc mode is auto. [ 589.297616][ T917] samsung 0003:0419:0600.0077: unknown main item tag 0x0 [ 589.313986][ T917] samsung 0003:0419:0600.0077: unknown main item tag 0x0 [ 589.329669][ T917] samsung 0003:0419:0600.0077: unknown main item tag 0x0 [ 589.338078][ T917] samsung 0003:0419:0600.0077: unknown main item tag 0x0 [ 589.345181][ T917] samsung 0003:0419:0600.0077: unknown main item tag 0x0 [ 589.358682][ T917] samsung 0003:0419:0600.0077: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 589.518836][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 589.519159][ T5145] Bluetooth: hci5: command 0x1003 tx timeout [ 589.535900][ T917] usb 2-1: USB disconnect, device number 77 [ 589.739791][T23464] dummy0: entered promiscuous mode [ 589.763539][T23464] macsec1: entered allmulticast mode [ 589.774281][T23464] dummy0: entered allmulticast mode [ 589.798776][T23464] dummy0: left allmulticast mode [ 589.804063][T23464] dummy0: left promiscuous mode [ 590.073993][ T5961] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 590.185659][T23476] netlink: 'syz.6.7665': attribute type 1 has an invalid length. [ 590.203835][T23476] netlink: 172 bytes leftover after parsing attributes in process `syz.6.7665'. [ 590.258285][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 590.301412][ T5961] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 590.320426][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.339470][ T5961] usb 6-1: Product: syz [ 590.361062][ T5961] usb 6-1: Manufacturer: syz [ 590.373685][ T5961] usb 6-1: SerialNumber: syz [ 590.393666][ T5961] usb 6-1: config 0 descriptor?? [ 590.427415][ T5961] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 590.445769][T23487] tap0: tun_chr_ioctl cmd 2147767507 [ 590.687821][ T5961] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 590.879310][ T917] usb 6-1: USB disconnect, device number 50 [ 590.908733][ T5959] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 591.068794][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 591.076715][ T5959] usb 2-1: config 0 has no interfaces? [ 591.086931][ T5959] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 591.097069][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.110335][ T5959] usb 2-1: Product: syz [ 591.115620][ T5959] usb 2-1: Manufacturer: syz [ 591.120655][ T5959] usb 2-1: SerialNumber: syz [ 591.140510][ T5959] usb 2-1: config 0 descriptor?? [ 591.218004][ T5953] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 591.374027][ T5959] usb 2-1: USB disconnect, device number 78 [ 591.395017][ T5953] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.414808][ T5953] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 591.428357][ T5953] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 591.455525][ T5953] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 591.467053][ T5953] usb 9-1: SerialNumber: syz [ 591.702650][ T5953] usb 9-1: 0:2 : does not exist [ 591.743066][ T5953] usb 9-1: USB disconnect, device number 7 [ 592.330898][ T5961] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 592.542313][ T5961] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 592.555623][ T5961] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 592.566231][ T5961] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 592.575323][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.587293][T23533] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 592.622324][ T5961] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 592.750399][T23546] vivid-006: disconnect [ 592.755567][T23544] vivid-006: reconnect [ 592.845061][T23551] netlink: 232 bytes leftover after parsing attributes in process `syz.5.7699'. [ 592.865996][T23551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7699'. [ 592.882453][ T5904] usb 2-1: USB disconnect, device number 79 [ 593.017855][T23559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7703'. [ 593.058042][T23561] netlink: 'syz.8.7704': attribute type 2 has an invalid length. [ 593.081981][T23561] ave_0: entered promiscuous mode [ 594.193552][ T30] audit: type=1326 audit(566.760:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23600 comm="syz.1.7722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa6578e929 code=0x0 [ 594.714017][T22601] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 594.906276][T22601] usb 6-1: Using ep0 maxpacket: 8 [ 594.919661][T22601] usb 6-1: unable to get BOS descriptor or descriptor too short [ 594.936969][T22601] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 594.963483][T22601] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 16129, setting to 1024 [ 594.990467][T22601] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 595.008188][T22601] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 595.019758][T22601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.032312][T22601] usb 6-1: Product: syz [ 595.040897][T22601] usb 6-1: Manufacturer: syz [ 595.047956][T22601] usb 6-1: SerialNumber: syz [ 595.212444][T23627] sp0: Synchronizing with TNC [ 595.291940][T22601] cdc_ncm 6-1:1.0: bind() failure [ 595.316494][T22601] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 595.337580][T22601] cdc_ncm 6-1:1.1: bind() failure [ 595.375296][T22601] usb 6-1: USB disconnect, device number 51 [ 595.580139][ T5904] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 595.597506][T23641] netlink: 'syz.1.7742': attribute type 6 has an invalid length. [ 595.782128][ T5904] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 595.791758][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.805094][ T5904] usb 9-1: Product: syz [ 595.809349][ T5904] usb 9-1: Manufacturer: syz [ 595.813990][ T5904] usb 9-1: SerialNumber: syz [ 595.831526][ T5904] usb 9-1: config 0 descriptor?? [ 595.862017][ T5904] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 008 [ 596.232399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 596.302280][ T5904] (null): failure reading functionality [ 596.333760][ T5904] i2c i2c-1: connected i2c-tiny-usb device [ 596.564417][ T5953] usb 9-1: USB disconnect, device number 8 [ 597.355521][ T2957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.477850][ T2957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.504663][ T5953] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 597.575707][ T2957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.689056][ T5953] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 597.704685][ T2957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.716312][ T5953] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.730685][ T5953] usb 9-1: config 0 descriptor?? [ 597.741076][ T5953] cp210x 9-1:0.0: cp210x converter detected [ 597.844778][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 597.859531][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 597.872753][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 597.894483][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 597.911017][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 597.918566][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 597.937993][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 597.945762][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 597.954160][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 597.962726][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 597.977299][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 598.055219][ T2957] bridge_slave_1: left allmulticast mode [ 598.072718][ T2957] bridge_slave_1: left promiscuous mode [ 598.094420][ T2957] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.110038][ T2957] bridge_slave_0: left allmulticast mode [ 598.124057][ T2957] bridge_slave_0: left promiscuous mode [ 598.129886][ T2957] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.196298][ T5953] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 598.230152][ T5953] usb 9-1: cp210x converter now attached to ttyUSB0 [ 598.452409][ T5961] usb 9-1: USB disconnect, device number 9 [ 598.463395][ T5961] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 598.496135][ T5961] cp210x 9-1:0.0: device disconnected [ 598.750154][ T2957] team0: Port device geneve0 removed [ 599.039009][ T2957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.091412][ T2957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.106977][ T2957] bond0 (unregistering): Released all slaves [ 599.610915][ T5959] usb 6-1: new low-speed USB device number 52 using dummy_hcd [ 599.748647][T23705] chnl_net:caif_netlink_parms(): no params data found [ 599.794810][ T5959] usb 6-1: config 0 has no interfaces? [ 599.804834][ T5959] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 599.815169][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.827535][ T5959] usb 6-1: config 0 descriptor?? [ 600.012737][T23705] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.020768][T23705] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.030335][T23705] bridge_slave_0: entered allmulticast mode [ 600.043423][T23705] bridge_slave_0: entered promiscuous mode [ 600.054846][T23705] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.062808][T23705] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.070825][T23705] bridge_slave_1: entered allmulticast mode [ 600.078784][T23705] bridge_slave_1: entered promiscuous mode [ 600.084100][T23733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7785'. [ 600.148783][T22601] usb 6-1: USB disconnect, device number 52 [ 600.209135][ T5145] Bluetooth: hci1: command tx timeout [ 600.231821][T23705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.281923][T23705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.387153][T23705] team0: Port device team_slave_0 added [ 600.398440][T23705] team0: Port device team_slave_1 added [ 600.491999][T23705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.499707][T23705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.526096][T23705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.540625][T23705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.547816][T23705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.597063][T23705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.719837][T23705] hsr_slave_0: entered promiscuous mode [ 600.746833][T23705] hsr_slave_1: entered promiscuous mode [ 600.763015][T23705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.792452][T23705] Cannot create hsr debugfs directory [ 600.965898][ T2957] : left promiscuous mode [ 601.083856][ T2957] tipc: Disabling bearer [ 601.109131][ T2957] tipc: Left network mode [ 601.636686][ T2957] hsr_slave_0: left promiscuous mode [ 601.645426][ T2957] hsr_slave_1: left promiscuous mode [ 601.651511][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.661126][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.685038][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.697776][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.761877][ T2957] veth1_vlan: left promiscuous mode [ 601.771450][ T2957] veth0_vlan: left promiscuous mode [ 602.443835][ T5145] Bluetooth: hci1: command tx timeout [ 602.867901][ T2957] team0 (unregistering): Port device team_slave_1 removed [ 602.944117][T23823] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7821'. [ 602.993269][ T2957] team0 (unregistering): Port device team_slave_0 removed [ 604.400681][T23705] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 604.477387][T23705] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 604.576951][T23705] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 604.656252][ T5145] Bluetooth: hci1: command tx timeout [ 604.664994][T23705] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 604.793469][ T2957] IPVS: stop unused estimator thread 0... [ 605.114667][T23874] program syz.5.7850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 605.553200][T23705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.642257][T23705] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.687545][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.694813][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.726254][ T30] audit: type=1800 audit(577.555:307): pid=23893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.7847" name="nullb0" dev="devtmpfs" ino=3920 res=0 errno=0 [ 605.738130][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.753342][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.392116][T23918] program syz.8.7858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 606.454223][T23705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.598722][T23705] veth0_vlan: entered promiscuous mode [ 606.632534][T23705] veth1_vlan: entered promiscuous mode [ 606.726371][T23705] veth0_macvtap: entered promiscuous mode [ 606.756370][T23705] veth1_macvtap: entered promiscuous mode [ 606.824000][T23705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.862450][T23705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.881255][ T5145] Bluetooth: hci1: command tx timeout [ 606.907765][T23705] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.934367][T23705] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.948122][T23705] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.965740][T23705] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.154202][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.176493][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.213439][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.232584][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.353225][T23966] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7875'. [ 608.780281][T23977] Falling back ldisc for ptm0. [ 608.993015][ T30] audit: type=1326 audit(580.604:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23986 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486738e929 code=0x7ffc0000 [ 609.068964][ T30] audit: type=1326 audit(580.604:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23986 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486738e929 code=0x7ffc0000 [ 609.089962][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.141677][ T30] audit: type=1326 audit(580.604:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23986 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f486738e929 code=0x7ffc0000 [ 609.231207][ T30] audit: type=1326 audit(580.604:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23986 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486738e929 code=0x7ffc0000 [ 609.292273][ T30] audit: type=1326 audit(580.604:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23986 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f48673858e7 code=0x7ffc0000 [ 609.371279][ T30] audit: type=1326 audit(580.604:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23986 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f486732ab19 code=0x7ffc0000 [ 609.392261][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.442489][ T30] audit: type=1326 audit(580.604:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23986 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f48673858e7 code=0x7ffc0000 [ 609.463409][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.546367][ T30] audit: type=1326 audit(580.604:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23986 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f486732ab19 code=0x7ffc0000 [ 609.609146][ T30] audit: type=1326 audit(580.604:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23986 comm="syz.0.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f486738e929 code=0x7ffc0000 [ 610.017083][T24013] netlink: 'syz.1.7898': attribute type 4 has an invalid length. [ 610.518724][T24030] tap0: tun_chr_ioctl cmd 35108 [ 611.005824][T24053] Falling back ldisc for ptm0. [ 611.316866][ T5953] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 611.488584][ T5953] usb 9-1: Using ep0 maxpacket: 16 [ 611.506886][ T5953] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 611.527668][ T5953] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 611.548482][ T5953] usb 9-1: Manufacturer: syz [ 611.581255][ T5953] usb 9-1: config 0 descriptor?? [ 611.843012][ T5953] usb 9-1: Limiting number of CPorts to U8_MAX [ 611.867470][ T5953] usb 9-1: Not enough endpoints found in device, aborting! [ 611.881663][T24079] netlink: 452 bytes leftover after parsing attributes in process `syz.6.7928'. [ 612.059052][ T5961] usb 9-1: USB disconnect, device number 10 [ 612.213339][T24089] mkiss: ax0: crc mode is auto. [ 612.225743][ T5959] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 612.402067][ T5959] usb 6-1: Using ep0 maxpacket: 16 [ 612.416012][ T5959] usb 6-1: config 0 has no interfaces? [ 612.440005][ T5959] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 612.458762][ T5959] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 612.467674][ T5959] usb 6-1: Manufacturer: syz [ 612.484497][ T5959] usb 6-1: config 0 descriptor?? [ 612.815650][ T5959] usb 6-1: USB disconnect, device number 53 [ 612.992387][T24105] netlink: 'syz.0.7938': attribute type 1 has an invalid length. [ 613.272638][T24116] QAT: Device 198 not found [ 613.565812][T24129] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7950'. [ 613.765597][T24134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.893219][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 613.893238][ T30] audit: type=1326 audit(585.178:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24106 comm="syz.1.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6578e929 code=0x7fc00000 [ 615.069344][ T5959] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 615.081512][T24190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7976'. [ 615.262246][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.283105][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.301340][ T5959] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 615.311431][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.327893][ T5959] usb 6-1: config 0 descriptor?? [ 615.699629][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 615.780062][ T5959] cp2112 0003:10C4:EA90.0078: unknown main item tag 0x0 [ 615.818648][ T5959] cp2112 0003:10C4:EA90.0078: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 615.977487][ T1212] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 615.987107][ T5959] cp2112 0003:10C4:EA90.0078: error requesting version [ 616.032200][ T5959] cp2112 0003:10C4:EA90.0078: probe with driver cp2112 failed with error -71 [ 616.063871][ T5959] usb 6-1: USB disconnect, device number 54 [ 616.171889][ T1212] usb 9-1: Using ep0 maxpacket: 16 [ 616.193276][ T1212] usb 9-1: config 0 has no interfaces? [ 616.201226][ T1212] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 616.221629][ T1212] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.230341][ T1212] usb 9-1: Product: syz [ 616.236054][ T1212] usb 9-1: Manufacturer: syz [ 616.240727][ T1212] usb 9-1: SerialNumber: syz [ 616.249975][ T1212] usb 9-1: config 0 descriptor?? [ 616.319707][ T5961] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 616.475374][ T1212] usb 9-1: USB disconnect, device number 11 [ 616.504084][ T5961] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 616.533222][ T5961] usb 2-1: config 0 interface 0 has no altsetting 0 [ 616.554834][ T5961] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 616.563936][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.597384][ T5961] usb 2-1: Product: syz [ 616.602068][ T5961] usb 2-1: Manufacturer: syz [ 616.607277][ T5961] usb 2-1: SerialNumber: syz [ 616.637726][ T5961] usb 2-1: config 0 descriptor?? [ 616.656703][ T5961] usb 2-1: selecting invalid altsetting 0 [ 616.931254][ T5959] usb 2-1: USB disconnect, device number 80 [ 617.178514][T24229] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input39 [ 617.629059][T24240] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 617.668906][T24240] syzkaller1: linktype set to 32 [ 619.071295][T24301] Falling back ldisc for ptm0. [ 619.557729][ T5961] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 619.799751][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.824849][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 619.843152][ T5961] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 619.891092][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.918051][ T5961] usb 6-1: config 0 descriptor?? [ 620.379059][ T5961] corsair-psu 0003:1B1C:1C07.0079: hidraw0: USB HID v0.00 Device [HID 1b1c:1c07] on usb-dummy_hcd.5-1/input0 [ 620.446666][ T5904] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 620.467848][ T5961] corsair-psu 0003:1B1C:1C07.0079: unable to initialize device (-38) [ 620.495619][ T5961] corsair-psu 0003:1B1C:1C07.0079: probe with driver corsair-psu failed with error -38 [ 620.614399][ T5904] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.628866][ T5953] usb 6-1: USB disconnect, device number 55 [ 620.638067][T24362] pim6reg: entered allmulticast mode [ 620.647353][ T5904] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.662397][T24362] pim6reg: left allmulticast mode [ 620.676313][ T5904] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 620.697879][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.711921][ T5904] usb 9-1: Product: syz [ 620.717827][ T5904] usb 9-1: Manufacturer: syz [ 620.722710][ T5904] usb 9-1: SerialNumber: syz [ 620.833154][T24370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8054'. [ 621.190607][ T5904] usb 9-1: 0:2 : does not exist [ 621.404547][T24392] program syz.5.8063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.656813][ T5961] usb 9-1: USB disconnect, device number 12 [ 622.375920][T24428] netlink: 'syz.8.8081': attribute type 12 has an invalid length. [ 622.383992][T24428] netlink: 'syz.8.8081': attribute type 29 has an invalid length. [ 622.396383][T24428] netlink: 'syz.8.8081': attribute type 2 has an invalid length. [ 622.404472][T24428] netlink: 260 bytes leftover after parsing attributes in process `syz.8.8081'. [ 622.589277][T24434] veth0_to_bridge: entered promiscuous mode [ 622.597764][T24433] veth0_to_bridge: left promiscuous mode [ 622.609928][T24436] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8085'. [ 623.350186][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 623.436250][T24469] vivid-000: disconnect [ 623.441555][T24468] vivid-000: reconnect [ 623.792950][T24484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8107'. [ 624.951998][T24531] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8129'. [ 625.524991][T24513] Bluetooth: hci5: command 0xfc11 tx timeout [ 625.525016][ T5145] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 626.019264][T24572] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 626.032200][T24572] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 626.042646][T24572] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 626.051343][T24572] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 626.064642][T24572] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 626.073428][T24572] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 626.082534][T24572] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 626.090504][T24572] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 626.465964][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 626.643844][T24586] binder: 24585:24586 ioctl c0306201 2000000003c0 returned -14 [ 626.703076][T24589] netlink: 'syz.1.8156': attribute type 2 has an invalid length. [ 626.717822][T24589] netlink: 'syz.1.8156': attribute type 8 has an invalid length. [ 626.726156][T24590] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 626.728257][T24589] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.8156'. [ 627.192744][T24609] kvm: kvm [24608]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0xaf [ 628.384257][T24669] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 630.286022][T24739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.063643][T24778] netlink: 428 bytes leftover after parsing attributes in process `syz.6.8241'. [ 631.083247][T24778] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8241'. [ 632.409113][ T5905] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 632.602866][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 632.610028][ T5905] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 632.620019][T24826] netlink: 'syz.5.8263': attribute type 2 has an invalid length. [ 632.630539][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.657145][ T5905] pvrusb2: Hardware description: Terratec Grabster AV400 [ 632.675335][ T5905] pvrusb2: ********** [ 632.681560][ T5905] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 632.702798][ T5905] pvrusb2: Important functionality might not be entirely working. [ 632.719091][ T5905] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 632.740202][ T5905] pvrusb2: ********** [ 632.896867][ T2346] pvrusb2: Invalid write control endpoint [ 633.033052][ T2346] pvrusb2: Invalid write control endpoint [ 633.057673][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 633.079404][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 633.113403][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 633.135418][ T2346] pvrusb2: Device being rendered inoperable [ 633.162247][ T5905] usb 2-1: USB disconnect, device number 81 [ 633.168671][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 633.168790][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 633.173698][ T2346] pvrusb2: Attached sub-driver cx25840 [ 633.229658][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 633.247610][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 633.309488][T24844] netlink: 596 bytes leftover after parsing attributes in process `syz.6.8273'. [ 633.539706][T24850] serio: Serial port ptm0 [ 635.736948][T24964] vlan0: entered promiscuous mode [ 635.756112][ T5905] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 635.770519][T24964] team0: Port device vlan0 added [ 635.942842][ T5905] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 635.958246][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.980731][ T5905] usb 6-1: config 0 descriptor?? [ 635.989927][ T5905] cp210x 6-1:0.0: cp210x converter detected [ 636.436891][ T5905] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 636.482594][ T5905] usb 6-1: cp210x converter now attached to ttyUSB0 [ 636.641830][T24992] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8338'. [ 636.679871][ T5904] usb 6-1: USB disconnect, device number 56 [ 636.710452][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 636.736549][ T5904] cp210x 6-1:0.0: device disconnected [ 636.895580][T25000] netdevsim netdevsim8: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 636.918992][T25000] netdevsim netdevsim8: Falling back to sysfs fallback for: ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 636.961680][T25002] netlink: 'syz.0.8343': attribute type 1 has an invalid length. [ 636.974363][T25002] netlink: 'syz.0.8343': attribute type 2 has an invalid length. [ 637.498845][T25024] netlink: 'syz.0.8353': attribute type 83 has an invalid length. [ 638.238195][ T30] audit: type=1400 audit(607.890:325): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=25041 comm="syz.0.8361" name="120" dev="tmpfs" ino=620 [ 638.727156][ T5905] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 638.899603][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 638.917218][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.941137][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.969851][ T5905] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 638.994048][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.033053][ T5905] usb 2-1: config 0 descriptor?? [ 639.059687][ T5905] hub 2-1:0.0: USB hub found [ 639.294059][ T5905] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 639.587454][T25101] netlink: 844 bytes leftover after parsing attributes in process `syz.5.8389'. [ 639.738452][ T5905] hid-generic 0003:046D:C31C.007A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 640.009032][T25122] netlink: 'syz.5.8398': attribute type 9 has an invalid length. [ 640.018156][T25122] netlink: 211988 bytes leftover after parsing attributes in process `syz.5.8398'. [ 640.029549][T25122] netlink: 'syz.5.8398': attribute type 1 has an invalid length. [ 640.075145][ T5905] usb 2-1: USB disconnect, device number 82 [ 640.935688][T25151] openvswitch: netlink: IPv4 tunnel dst address is zero [ 641.106426][ T30] audit: type=1400 audit(610.640:326): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=25154 comm="syz.0.8413" name="139" dev="tmpfs" ino=715 [ 642.000446][T25191] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8432'. [ 642.027413][T25191] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8432'. [ 643.612631][ T5905] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 643.956948][ T5905] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.001423][ T5905] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 644.022220][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.037804][ T5905] usb 6-1: Product: syz [ 644.048604][ T5905] usb 6-1: Manufacturer: syz [ 644.059407][ T5905] usb 6-1: SerialNumber: syz [ 644.321307][ T5905] cdc_ncm 6-1:1.0: bind() failure [ 644.344439][ T5905] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 644.368131][ T5905] cdc_ncm 6-1:1.1: bind() failure [ 644.404454][ T5905] usb 6-1: USB disconnect, device number 57 [ 644.809080][T25276] netlink: 'syz.0.8465': attribute type 83 has an invalid length. [ 645.735187][T25304] netlink: 'syz.8.8477': attribute type 1 has an invalid length. [ 645.762010][T25304] netlink: 224 bytes leftover after parsing attributes in process `syz.8.8477'. [ 646.160320][T25316] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8483'. [ 646.413823][ T5961] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 646.574199][ T5961] usb 6-1: Using ep0 maxpacket: 8 [ 646.590822][ T5961] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 646.613501][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.636336][ T5961] pvrusb2: Hardware description: Terratec Grabster AV400 [ 646.679700][ T5961] pvrusb2: ********** [ 646.688019][ T5961] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 646.715332][ T5961] pvrusb2: Important functionality might not be entirely working. [ 646.728230][ T5961] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 646.746163][ T5961] pvrusb2: ********** [ 646.865837][ T2346] pvrusb2: Invalid write control endpoint [ 647.040340][ T2346] pvrusb2: Invalid write control endpoint [ 647.049741][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 647.067865][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 647.087741][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 647.109050][ T2346] pvrusb2: Device being rendered inoperable [ 647.115182][T25314] pvrusb2: Attempted to execute control transfer when device not ok [ 647.130497][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 647.133969][ T5961] usb 6-1: USB disconnect, device number 58 [ 647.138023][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 647.195467][ T2346] pvrusb2: Attached sub-driver cx25840 [ 647.201052][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 647.240979][ T30] audit: type=1326 audit(616.383:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25335 comm="syz.6.8492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659c38e929 code=0x7ffc0000 [ 647.258947][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 647.308951][ T30] audit: type=1326 audit(616.383:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25335 comm="syz.6.8492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659c38e929 code=0x7ffc0000 [ 647.363556][ T30] audit: type=1326 audit(616.402:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25335 comm="syz.6.8492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f659c38e929 code=0x7ffc0000 [ 647.395228][ T30] audit: type=1326 audit(616.430:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25335 comm="syz.6.8492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659c38e929 code=0x7ffc0000 [ 647.437812][ T30] audit: type=1326 audit(616.430:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25335 comm="syz.6.8492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659c38e929 code=0x7ffc0000 [ 647.477738][ T30] audit: type=1326 audit(616.430:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25337 comm="syz.6.8492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f659c3c11e5 code=0x7ffc0000 [ 647.505175][ T30] audit: type=1326 audit(616.486:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25335 comm="syz.6.8492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f659c38e929 code=0x7ffc0000 [ 647.533786][ T30] audit: type=1326 audit(616.486:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25335 comm="syz.6.8492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659c38e929 code=0x7ffc0000 [ 647.569743][ T30] audit: type=1326 audit(616.486:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25335 comm="syz.6.8492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659c38e929 code=0x7ffc0000 [ 647.795421][T25346] gtp0: entered promiscuous mode [ 647.811548][T25346] gtp0: entered allmulticast mode [ 647.909310][T25350] netlink: 'syz.1.8498': attribute type 1 has an invalid length. [ 647.923404][T25350] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8498'. [ 647.966014][T25350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8498'. [ 648.289069][T25364] netlink: 'syz.8.8505': attribute type 12 has an invalid length. [ 648.315778][T25366] vcan1: entered promiscuous mode [ 648.790222][T25386] block nbd8: NBD_DISCONNECT [ 648.807075][T25390] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 649.016774][T25394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 649.027464][T25394] bond0: (slave bond1): Enslaving as an active interface with an up link [ 649.517487][T25417] netlink: 22 bytes leftover after parsing attributes in process `syz.0.8530'. [ 650.013356][T25443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8543'. [ 650.041380][T25443] macsec1: entered promiscuous mode [ 650.170403][ T30] audit: type=1800 audit(619.124:336): pid=25449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.8545" name="nullb0" dev="devtmpfs" ino=3920 res=0 errno=0 [ 650.519042][ T1212] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 650.562245][ T5961] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 650.592845][T25468] sctp: [Deprecated]: syz.8.8555 (pid 25468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 650.592845][T25468] Use struct sctp_sack_info instead [ 650.714687][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.737019][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.751616][ T5961] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 650.763358][ T1212] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 650.774454][ T5961] usb 6-1: config 0 has no interface number 0 [ 650.781537][ T5961] usb 6-1: config 0 interface 41 has no altsetting 0 [ 650.790000][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.803978][ T5961] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 650.816503][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.827959][ T1212] usb 2-1: config 0 descriptor?? [ 650.836718][ T5961] usb 6-1: Product: syz [ 650.843002][ T5961] usb 6-1: Manufacturer: syz [ 650.851172][ T5961] usb 6-1: SerialNumber: syz [ 650.863165][ T5961] usb 6-1: config 0 descriptor?? [ 651.010684][ T5905] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 651.186148][ T5905] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.201433][ T5905] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 651.212143][ T5905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.222394][T25489] netlink: 'syz.0.8565': attribute type 2 has an invalid length. [ 651.236257][ T5905] usb 9-1: config 0 descriptor?? [ 651.251818][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 651.288000][ T1212] cherry 0003:046A:0023.007B: unexpected long global item [ 651.297635][ T1212] cherry 0003:046A:0023.007B: probe with driver cherry failed with error -22 [ 651.527410][ T1212] usb 2-1: USB disconnect, device number 83 [ 651.758401][ T5961] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 651.790640][ T5961] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 651.821370][ T5961] usb 6-1: USB disconnect, device number 59 [ 651.898266][ T5905] pwc: recv_control_msg error -32 req 02 val 2700 [ 651.906482][ T5905] pwc: recv_control_msg error -71 req 02 val 2c00 [ 651.916521][ T5905] pwc: recv_control_msg error -71 req 04 val 1000 [ 651.923534][ T5905] pwc: recv_control_msg error -71 req 04 val 1300 [ 651.932059][ T5905] pwc: recv_control_msg error -71 req 04 val 1400 [ 651.938975][ T5905] pwc: recv_control_msg error -71 req 02 val 2000 [ 651.946350][ T5905] pwc: recv_control_msg error -71 req 02 val 2100 [ 651.957893][ T5905] pwc: recv_control_msg error -71 req 04 val 1500 [ 651.965141][ T5905] pwc: recv_control_msg error -71 req 02 val 2500 [ 651.972196][ T5905] pwc: recv_control_msg error -71 req 02 val 2400 [ 651.979528][ T5905] pwc: recv_control_msg error -71 req 02 val 2600 [ 651.986788][ T5905] pwc: recv_control_msg error -71 req 02 val 2900 [ 651.993714][ T5905] pwc: recv_control_msg error -71 req 02 val 2800 [ 652.001238][ T5905] pwc: recv_control_msg error -71 req 04 val 1100 [ 652.016166][ T5905] pwc: recv_control_msg error -71 req 04 val 1200 [ 652.031963][ T5905] pwc: Registered as video103. [ 652.043415][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input41 [ 652.065812][ T5905] usb 9-1: USB disconnect, device number 13 [ 652.229428][ T5961] kernel write not supported for file /input/event2 (pid: 5961 comm: kworker/0:6) [ 652.334559][T25528] input: syz0 as /devices/virtual/input/input42 [ 652.645054][T25541] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8588'. [ 652.664913][T25541] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8588'. [ 652.874492][T25552] sctp: [Deprecated]: syz.8.8593 (pid 25552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 652.874492][T25552] Use struct sctp_sack_info instead [ 652.903861][ T5905] kernel read not supported for file /dsp (pid: 5905 comm: kworker/0:4) [ 653.162100][ T5961] usb 6-1: new low-speed USB device number 60 using dummy_hcd [ 653.357255][ T5961] usb 6-1: unable to get BOS descriptor or descriptor too short [ 653.374032][ T5961] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 653.381761][ T5961] usb 6-1: can't read configurations, error -71 [ 654.239187][T25592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8611'. [ 654.254078][T25592] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8611'. [ 654.260033][T25594] vivid-000: disconnect [ 654.269241][T25592] netlink: 244 bytes leftover after parsing attributes in process `syz.5.8611'. [ 654.280499][T25592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8611'. [ 654.305974][T25593] vivid-000: reconnect [ 654.652816][T25614] netlink: 'syz.5.8622': attribute type 1 has an invalid length. [ 654.663249][T25614] netlink: 'syz.5.8622': attribute type 3 has an invalid length. [ 654.673707][T25614] netlink: 216 bytes leftover after parsing attributes in process `syz.5.8622'. [ 654.683927][T25614] NCSI netlink: No device for ifindex 813332851 [ 654.699158][ T5961] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 654.866261][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.879318][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.894741][ T5961] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 654.908057][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.921491][ T5961] usb 2-1: config 0 descriptor?? [ 655.181509][T25635] netlink: 'syz.8.8632': attribute type 34 has an invalid length. [ 655.377163][ T5961] apple 0003:05AC:0262.007C: bogus close delimiter [ 655.387874][ T5961] apple 0003:05AC:0262.007C: item 0 1 2 10 parsing failed [ 655.412391][ T5961] apple 0003:05AC:0262.007C: parse failed [ 655.422504][ T5961] apple 0003:05AC:0262.007C: probe with driver apple failed with error -22 [ 655.590304][ T5905] usb 2-1: USB disconnect, device number 84 [ 655.832305][ T5961] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 656.039368][ T5961] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 656.056780][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.101442][ T5961] usb 6-1: config 0 descriptor?? [ 656.351539][ T5961] kaweth 6-1:0.0: Firmware present in device. [ 656.388161][T25676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8649'. [ 656.543784][T25682] netlink: 'syz.0.8651': attribute type 1 has an invalid length. [ 656.564866][ T5961] kaweth 6-1:0.0: Statistics collection: 0 [ 656.570659][T25682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8651'. [ 656.580238][ T5961] kaweth 6-1:0.0: Multicast filter limit: 0 [ 656.603577][ T5961] kaweth 6-1:0.0: MTU: 0 [ 656.623879][ T5961] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 656.990398][ T5961] kaweth 6-1:0.0: Error setting SOFS wait [ 657.009463][ T5961] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 657.042186][ T5961] usb 6-1: USB disconnect, device number 62 [ 657.184687][ T5905] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 657.360927][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 657.373282][ T5905] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 177, changing to 11 [ 657.396037][ T5905] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 657.425646][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.433783][ T5905] usb 2-1: Product: syz [ 657.446279][ T5905] usb 2-1: Manufacturer: syz [ 657.462160][ T5905] usb 2-1: SerialNumber: syz [ 657.850642][T25723] netlink: 10 bytes leftover after parsing attributes in process `syz.5.8669'. [ 658.394485][ T5905] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 658.424768][ T5905] cdc_ncm 2-1:1.0: bind() failure [ 658.444492][ T5905] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 658.461355][T25742] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8677'. [ 658.472675][ T5905] cdc_ncm 2-1:1.1: bind() failure [ 658.489260][ T5905] usb 2-1: USB disconnect, device number 85 [ 659.351099][T25779] loop8: detected capacity change from 0 to 1 [ 659.389774][T25779] Dev loop8: unable to read RDB block 1 [ 659.407304][T25779] loop8: unable to read partition table [ 659.424706][T25779] loop8: partition table beyond EOD, truncated [ 659.430954][T25779] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 659.820742][T25793] autofs4:pid:25793:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189379) [ 659.874504][T25793] autofs4:pid:25793:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 660.760486][ C0] hrtimer: interrupt took 13906 ns [ 660.802008][T25823] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 661.614360][T25848] cgroup: fork rejected by pids controller in /syz5 [ 662.414990][ T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.597353][ T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.784132][ T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.064719][ T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.533019][ T56] bridge_slave_1: left allmulticast mode [ 663.538880][ T56] bridge_slave_1: left promiscuous mode [ 663.564216][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.590007][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 663.616463][T24513] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 663.639834][T24513] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 663.651293][T24513] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 663.680100][ T56] bridge_slave_0: left allmulticast mode [ 663.685816][ T56] bridge_slave_0: left promiscuous mode [ 663.699147][T24513] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 663.709114][T24513] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 663.715001][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.859571][T25926] netlink: 'syz.1.8762': attribute type 1 has an invalid length. [ 664.799129][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.811406][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.823303][ T56] bond0 (unregistering): (slave bond1): Releasing backup interface [ 664.843040][ T56] bond0 (unregistering): Released all slaves [ 665.024537][ T56] bond1 (unregistering): Released all slaves [ 665.054374][T25919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8759'. [ 665.166502][T25949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.188949][ T56] tipc: Disabling bearer [ 665.204239][ T56] tipc: Left network mode [ 665.569386][T25965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.828414][ T1212] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 665.851119][T25974] input: syz1 as /devices/virtual/input/input43 [ 665.888121][ T56] hsr_slave_0: left promiscuous mode [ 665.893453][ T51] Bluetooth: hci4: command tx timeout [ 665.954219][T25981] input: syz1 as /devices/virtual/input/input44 [ 665.963894][ T56] hsr_slave_1: left promiscuous mode [ 665.973637][ T56] batman_adv: batadv0: Interface deactivated: dummy0 [ 665.983361][ T56] batman_adv: batadv0: Removing interface: dummy0 [ 665.996412][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.013362][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.054508][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.062232][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.070622][ T1212] usb 2-1: config 241 has an invalid interface number: 0 but max is -1 [ 666.084323][ T1212] usb 2-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 666.093474][ T1212] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 666.129284][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.157223][T25986] netlink: 'syz.0.8790': attribute type 1 has an invalid length. [ 666.166271][ T56] veth1_macvtap: left promiscuous mode [ 666.169584][T25986] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8790'. [ 666.175748][ T1212] usbhid 2-1:241.0: couldn't find an input interrupt endpoint [ 666.190336][ T56] veth0_macvtap: left promiscuous mode [ 666.199477][ T56] veth1_vlan: left promiscuous mode [ 666.205608][ T56] veth0_vlan: left promiscuous mode [ 666.408524][ T1212] usb 2-1: USB disconnect, device number 86 [ 666.498700][T25995] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8794'. [ 667.477217][ T56] team0 (unregistering): Port device team_slave_1 removed [ 667.525093][ T56] team0 (unregistering): Port device team_slave_0 removed [ 667.927895][ T56] dummy0 (unregistering): left allmulticast mode [ 668.005312][T25983] netlink: 830 bytes leftover after parsing attributes in process `syz.6.8788'. [ 668.042111][T26017] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8803'. [ 668.112111][T25913] chnl_net:caif_netlink_parms(): no params data found [ 668.122253][ T51] Bluetooth: hci4: command tx timeout [ 668.307344][T26026] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8806'. [ 668.496234][T26036] sp0: Synchronizing with TNC [ 668.496425][T25913] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.515200][T25913] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.524828][T25913] bridge_slave_0: entered allmulticast mode [ 668.538274][T25913] bridge_slave_0: entered promiscuous mode [ 668.670012][T25913] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.689992][T25913] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.704598][T25913] bridge_slave_1: entered allmulticast mode [ 668.730012][T25913] bridge_slave_1: entered promiscuous mode [ 668.925157][T25913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.963431][ T56] IPVS: stop unused estimator thread 0... [ 668.978843][T25913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.123009][T25913] team0: Port device team_slave_0 added [ 669.145849][T25913] team0: Port device team_slave_1 added [ 669.253517][T25913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.263240][T25913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.292422][T25913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.327610][T25913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.337205][T25913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.363838][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.385343][T25913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.497550][T25913] hsr_slave_0: entered promiscuous mode [ 669.504382][T25913] hsr_slave_1: entered promiscuous mode [ 669.603256][ T30] audit: type=1326 audit(637.299:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26072 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6578e929 code=0x7ffc0000 [ 669.631447][ T30] audit: type=1326 audit(637.299:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26072 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6578e929 code=0x7ffc0000 [ 669.656401][ T30] audit: type=1326 audit(637.299:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26072 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7faa6578e929 code=0x7ffc0000 [ 669.734285][ T30] audit: type=1326 audit(637.299:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26072 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6578e929 code=0x7ffc0000 [ 669.789924][ T30] audit: type=1326 audit(637.299:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26072 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7faa6578e929 code=0x7ffc0000 [ 669.913451][T26079] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8830'. [ 669.934934][ T30] audit: type=1326 audit(637.299:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26072 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6578e929 code=0x7ffc0000 [ 670.008781][T26079] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8830'. [ 670.026997][ T30] audit: type=1326 audit(637.318:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26072 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6578e929 code=0x7ffc0000 [ 670.339798][ T51] Bluetooth: hci4: command tx timeout [ 670.757464][T25913] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 670.790482][T25913] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 670.817859][T25913] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 670.826249][T26112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.868207][T25913] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 671.492509][T25913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.544137][T25913] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.565627][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.572926][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.641169][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.648524][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.128026][T25913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.567737][ T51] Bluetooth: hci4: command tx timeout [ 672.713265][ T5961] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 672.920221][ T5961] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 672.930098][T25913] veth0_vlan: entered promiscuous mode [ 672.941070][T25913] veth1_vlan: entered promiscuous mode [ 673.036661][T25913] veth0_macvtap: entered promiscuous mode [ 673.056982][ T5961] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.082365][ T5961] usb 9-1: config 0 descriptor?? [ 673.090796][ T5961] cp210x 9-1:0.0: cp210x converter detected [ 673.111885][T25913] veth1_macvtap: entered promiscuous mode [ 673.185877][T25913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.223213][T25913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.245127][T25913] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.256582][T25913] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.267860][T25913] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.281883][T25913] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.412308][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.429704][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.480047][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.489553][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.525917][ T5961] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 673.539515][ T5961] usb 9-1: cp210x converter now attached to ttyUSB0 [ 673.753583][ T5961] usb 9-1: USB disconnect, device number 14 [ 673.767026][ T5961] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 673.799356][ T5961] cp210x 9-1:0.0: device disconnected [ 673.980200][T26214] input: syz1 as /devices/virtual/input/input45 [ 673.988295][T26212] netlink: 'syz.5.8886': attribute type 12 has an invalid length. [ 673.996994][T26212] netlink: 'syz.5.8886': attribute type 29 has an invalid length. [ 674.006536][T26212] netlink: 'syz.5.8886': attribute type 2 has an invalid length. [ 674.026756][T26212] netlink: 'syz.5.8886': attribute type 2 has an invalid length. [ 674.045709][T26212] netlink: 'syz.5.8886': attribute type 1 has an invalid length. [ 674.069835][T26212] netlink: 'syz.5.8886': attribute type 37 has an invalid length. [ 674.086657][T26212] netlink: 'syz.5.8886': attribute type 2 has an invalid length. [ 674.098651][T26212] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.652992][ T5905] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 675.834861][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 675.850415][ T5905] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 675.868270][ T5905] usb 6-1: config 4 has no interface number 0 [ 675.874572][ T5905] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.931462][ T5905] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.979184][ T5905] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 676.002071][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.049792][ T5905] hub 6-1:4.128: USB hub found [ 676.270936][ T5905] hub 6-1:4.128: 2 ports detected [ 676.279984][ T5905] hub 6-1:4.128: Using single TT (err -22) [ 676.411635][ T5953] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 676.584393][ T5953] usb 9-1: Using ep0 maxpacket: 16 [ 676.599011][ T5953] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.628870][ T5953] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.642285][ T5953] usb 9-1: config 0 interface 0 has no altsetting 0 [ 676.649880][ T5953] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 676.662689][ T5953] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.678382][ T5953] usb 9-1: config 0 descriptor?? [ 676.718416][ T5905] usb 6-1: USB disconnect, device number 63 [ 676.789590][T26286] netlink: 'syz.0.8917': attribute type 83 has an invalid length. [ 677.133394][ T5953] hid (null): report_id 989525964 is invalid [ 677.144708][ T5953] hid (null): bogus close delimiter [ 677.160801][ T5953] hid (null): report_id 0 is invalid [ 677.179125][ T5953] hid (null): nested delimiters [ 677.210266][ T5953] hid (null): report_id 24797 is invalid [ 677.218147][ T5953] hid (null): bogus close delimiter [ 677.223505][ T5953] hid (null): report_id 35037 is invalid [ 677.241731][ T5953] hid (null): bogus close delimiter [ 677.344757][ T5905] usb 9-1: USB disconnect, device number 15 [ 677.935949][T26319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8931'. [ 678.033646][T26322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8935'. [ 678.050833][T26322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8935'. [ 678.379231][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 678.379580][T24513] Bluetooth: hci5: command 0x1003 tx timeout [ 678.416281][T26339] program syz.0.8942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 678.767921][T26353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8949'. [ 678.806713][ T5953] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 678.984176][ T5953] usb 9-1: Using ep0 maxpacket: 8 [ 679.002489][ T5953] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 679.031426][ T5953] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.048658][ T5953] usb 9-1: config 0 descriptor?? [ 679.301571][T26380] netlink: 'syz.1.8961': attribute type 9 has an invalid length. [ 679.318637][T26380] netlink: 146708 bytes leftover after parsing attributes in process `syz.1.8961'. [ 679.371443][T26384] input: syz0 as /devices/virtual/input/input46 [ 679.674640][ T5904] kernel write not supported for file /dsp (pid: 5904 comm: kworker/1:5) [ 679.685846][ T5904] kernel write not supported for file /dsp (pid: 5904 comm: kworker/1:5) [ 679.786377][T26192] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 679.963720][ T5953] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 679.974797][T26192] usb 2-1: Using ep0 maxpacket: 8 [ 679.980237][ T5953] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 679.999542][T26192] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 680.020308][ T5953] asix 9-1:0.0: probe with driver asix failed with error -71 [ 680.028603][T26192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.057349][ T5953] usb 9-1: USB disconnect, device number 16 [ 680.077704][T26192] pvrusb2: Hardware description: Terratec Grabster AV400 [ 680.098845][T26192] pvrusb2: ********** [ 680.100853][T26403] nbd: socks must be embedded in a SOCK_ITEM attr [ 680.110945][T26192] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 680.133706][T26192] pvrusb2: Important functionality might not be entirely working. [ 680.141633][T26192] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 680.178325][T26192] pvrusb2: ********** [ 680.316846][ T2346] pvrusb2: Invalid write control endpoint [ 680.402852][ T2346] pvrusb2: Invalid write control endpoint [ 680.408683][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 680.440292][T26416] netlink: 27 bytes leftover after parsing attributes in process `syz.5.8977'. [ 680.453535][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 680.464808][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 680.538733][ T2346] pvrusb2: Device being rendered inoperable [ 680.544831][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 680.564546][T26389] pvrusb2: Attempted to execute control transfer when device not ok [ 680.599533][ T5904] usb 2-1: USB disconnect, device number 87 [ 680.610436][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 680.667397][ T2346] pvrusb2: Attached sub-driver cx25840 [ 680.672941][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 680.723564][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 681.019080][T26435] block nbd2: server does not support multiple connections per device. [ 681.040342][T26435] block nbd2: shutting down sockets [ 682.395766][T26485] netlink: 'syz.8.9006': attribute type 9 has an invalid length. [ 682.416003][T26485] netlink: 212260 bytes leftover after parsing attributes in process `syz.8.9006'. [ 682.504853][T26490] overlayfs: missing 'workdir' [ 684.253439][T26558] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9039'. [ 684.414523][T26566] loop9: detected capacity change from 0 to 8 [ 684.428035][T26566] Dev loop9: unable to read RDB block 8 [ 684.440742][T26566] loop9: unable to read partition table [ 684.447002][T26566] loop9: partition table beyond EOD, truncated [ 684.453912][T26566] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 685.271004][T26600] netlink: 164 bytes leftover after parsing attributes in process `syz.6.9058'. [ 685.487887][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.937432][ T1212] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 686.130377][ T1212] usb 9-1: Using ep0 maxpacket: 32 [ 686.145215][ T1212] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 686.154672][ T1212] usb 9-1: config 0 has no interface number 0 [ 686.172399][ T1212] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.272056][T26637] netlink: del zone limit has 4 unknown bytes [ 686.295565][ T1212] usb 9-1: config 0 interface 85 has no altsetting 0 [ 686.353679][ T1212] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 686.362800][ T1212] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.399627][ T1212] usb 9-1: Product: syz [ 686.403881][ T1212] usb 9-1: Manufacturer: syz [ 686.422396][ T1212] usb 9-1: SerialNumber: syz [ 686.453256][ T1212] usb 9-1: config 0 descriptor?? [ 687.241173][T26667] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9089'. [ 687.250338][T26667] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9089'. [ 687.313209][ T1212] appletouch 9-1:0.85: Geyser mode initialized. [ 687.340073][ T1212] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input47 [ 687.385044][ C0] appletouch 9-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 687.611050][T26192] usb 9-1: USB disconnect, device number 17 [ 687.684653][T26192] appletouch 9-1:0.85: input: appletouch disconnected [ 688.237219][T26688] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.9098'. [ 688.526694][T26705] loop6: detected capacity change from 0 to 8175 [ 688.764085][T26720] netlink: 72 bytes leftover after parsing attributes in process `syz.6.9111'. [ 688.855465][ T1212] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 689.041619][ T1212] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 689.075798][ T1212] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 689.103123][ T1212] usb 9-1: config 0 interface 0 has no altsetting 0 [ 689.118624][ T1212] usb 9-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 689.142377][ T1212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.161058][ T5961] hid-generic 0005:16C0:0009.007E: unknown main item tag 0x0 [ 689.185444][ T1212] usb 9-1: config 0 descriptor?? [ 689.191073][ T5961] hid-generic 0005:16C0:0009.007E: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 689.198583][T26738] netlink: 'syz.6.9120': attribute type 3 has an invalid length. [ 689.205899][T26707] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 689.236008][T26738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.544398][T26750] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9125'. [ 689.660145][ T1212] holtek_mouse 0003:04D9:A067.007F: unbalanced delimiter at end of report description [ 689.686344][ T1212] holtek_mouse 0003:04D9:A067.007F: hid parse failed: -22 [ 689.699824][ T1212] holtek_mouse 0003:04D9:A067.007F: probe with driver holtek_mouse failed with error -22 [ 689.739330][T26754] Falling back ldisc for ptm0. [ 689.870423][T26758] netlink: 'syz.6.9129': attribute type 1 has an invalid length. [ 689.874339][ T5961] usb 9-1: USB disconnect, device number 18 [ 689.878676][T26758] netlink: 212 bytes leftover after parsing attributes in process `syz.6.9129'. [ 689.897538][T26758] netlink: 'syz.6.9129': attribute type 1 has an invalid length. [ 690.724156][T26767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9134'. [ 690.735117][T26767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9134'. [ 690.930890][T26775] netlink: 'syz.0.9137': attribute type 1 has an invalid length. [ 690.943695][T26775] nbd: error processing sock list [ 690.952012][T26775] block nbd2: shutting down sockets [ 691.534827][T26806] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.544875][T26806] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.554873][T26806] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.564485][T26806] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.949736][ T30] audit: type=1326 audit(658.205:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26822 comm="syz.6.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f659c3858e7 code=0x7ffc0000 [ 691.950804][T26821] netlink: 'syz.0.9158': attribute type 1 has an invalid length. [ 691.971271][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.032113][ T30] audit: type=1326 audit(658.205:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26822 comm="syz.6.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f659c32ab19 code=0x7ffc0000 [ 692.116489][ T30] audit: type=1326 audit(658.205:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26822 comm="syz.6.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f659c3858e7 code=0x7ffc0000 [ 692.200291][ T30] audit: type=1326 audit(658.205:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26822 comm="syz.6.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f659c32ab19 code=0x7ffc0000 [ 692.300978][ T30] audit: type=1326 audit(658.205:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26822 comm="syz.6.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f659c3858e7 code=0x7ffc0000 [ 692.351259][ T30] audit: type=1326 audit(658.205:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26822 comm="syz.6.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f659c32ab19 code=0x7ffc0000 [ 692.418087][ T30] audit: type=1326 audit(658.205:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26822 comm="syz.6.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f659c3858e7 code=0x7ffc0000 [ 692.482572][ T30] audit: type=1326 audit(658.205:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26822 comm="syz.6.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f659c32ab19 code=0x7ffc0000 [ 692.525044][ T30] audit: type=1326 audit(658.205:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26822 comm="syz.6.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f659c3858e7 code=0x7ffc0000 [ 692.607870][ T30] audit: type=1326 audit(658.205:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26822 comm="syz.6.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f659c32ab19 code=0x7ffc0000 [ 692.670687][T26851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9173'. [ 693.305973][T26876] pimreg: entered allmulticast mode [ 693.325925][T26876] pimreg: left allmulticast mode [ 693.332213][T26881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 693.764077][T26902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9195'. [ 694.299329][T26922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9204'. [ 694.322648][T26924] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 694.650575][T26933] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9209'. [ 697.092952][T26990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.339037][T26996] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 697.380939][T26998] input: syz1 as /devices/virtual/input/input49 [ 697.451364][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 698.375190][T27033] netlink: 'syz.8.9253': attribute type 12 has an invalid length. [ 698.383610][T27033] netlink: 'syz.8.9253': attribute type 29 has an invalid length. [ 698.394200][T27033] netlink: 'syz.8.9253': attribute type 2 has an invalid length. [ 698.411118][T27033] netlink: 'syz.8.9253': attribute type 2 has an invalid length. [ 698.419715][T27033] netlink: 'syz.8.9253': attribute type 1 has an invalid length. [ 698.433362][T27033] netlink: 'syz.8.9253': attribute type 37 has an invalid length. [ 698.476334][T27033] netlink: 'syz.8.9253': attribute type 2 has an invalid length. [ 698.501138][T27033] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.777472][T27090] netlink: 'syz.8.9279': attribute type 83 has an invalid length. [ 700.134901][T27101] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x42474752, 6, 0, 5, 0) [ 700.380342][ T1212] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 700.581980][ T1212] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 700.605634][ T1212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.615482][ T1212] usb 6-1: Product: syz [ 700.620907][ T1212] usb 6-1: Manufacturer: syz [ 700.638437][ T1212] usb 6-1: SerialNumber: syz [ 700.658727][ T1212] usb 6-1: config 0 descriptor?? [ 700.676321][ T1212] ch341 6-1:0.0: ch341-uart converter detected [ 700.797415][T26192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.845193][T27121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9294'. [ 700.858883][T27121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9294'. [ 701.532343][T27143] mkiss: ax0: crc mode is auto. [ 701.555526][ T1212] usb 6-1: failed to send control message: -71 [ 701.561967][ T1212] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 701.596558][ T1212] usb 6-1: USB disconnect, device number 64 [ 701.621403][ T1212] ch341 6-1:0.0: device disconnected [ 701.723273][T27149] bridge0: port 3(veth0_to_bridge) entered blocking state [ 701.731975][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.736147][T27148] input: syz0 as /devices/virtual/input/input50 [ 701.741638][T27149] bridge0: port 3(veth0_to_bridge) entered disabled state [ 701.755133][T27149] veth0_to_bridge: entered allmulticast mode [ 701.763867][T27149] veth0_to_bridge: entered promiscuous mode [ 701.786485][T27149] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 701.811665][T27149] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 701.844124][T27149] bridge0: port 3(veth0_to_bridge) entered blocking state [ 701.851516][T27149] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 701.902026][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.912454][T26192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.921738][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.934112][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.182757][T27163] netlink: 5 bytes leftover after parsing attributes in process `syz.8.9313'. [ 702.367928][T22601] kernel read not supported for file /usbmon9 (pid: 22601 comm: kworker/0:3) [ 702.593367][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.697339][T27185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9324'. [ 702.774673][T22601] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 702.949376][T27193] netlink: 27 bytes leftover after parsing attributes in process `syz.8.9327'. [ 702.974954][T27196] loop8: detected capacity change from 0 to 1 [ 702.988194][T22601] usb 2-1: Using ep0 maxpacket: 32 [ 702.998092][T22601] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 703.010311][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.013975][T27196] Dev loop8: unable to read RDB block 1 [ 703.025185][T22601] usb 2-1: config 4 has no interface number 0 [ 703.033003][T22601] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.052052][T22601] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.053251][T27196] loop8: unable to read partition table [ 703.067016][T22601] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 703.081549][T22601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.083505][T27196] loop8: partition table beyond EOD, truncated [ 703.110372][T27196] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 703.122991][T22601] hub 2-1:4.128: USB hub found [ 703.340691][T22601] hub 2-1:4.128: 2 ports detected [ 703.349959][T22601] hub 2-1:4.128: Using single TT (err -22) [ 703.783097][T22601] usb 2-1: USB disconnect, device number 88 [ 704.122485][T26192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.340869][T27232] netlink: 'syz.5.9345': attribute type 1 has an invalid length. [ 704.492213][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 704.492234][ T30] audit: type=1326 audit(669.935:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27238 comm="syz.5.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8f58e929 code=0x7ffc0000 [ 704.534761][T27240] netlink: 'syz.1.9349': attribute type 6 has an invalid length. [ 704.545155][ T30] audit: type=1326 audit(669.935:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27238 comm="syz.5.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8f58e929 code=0x7ffc0000 [ 704.566812][T27240] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9349'. [ 704.586880][ T30] audit: type=1326 audit(669.972:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27238 comm="syz.5.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f2d8f58e929 code=0x7ffc0000 [ 704.612071][ T30] audit: type=1326 audit(669.972:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27238 comm="syz.5.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8f58e929 code=0x7ffc0000 [ 704.669705][ T30] audit: type=1326 audit(669.972:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27238 comm="syz.5.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8f58e929 code=0x7ffc0000 [ 704.692368][ T30] audit: type=1326 audit(670.010:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27238 comm="syz.5.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f2d8f58e929 code=0x7ffc0000 [ 704.713730][ T30] audit: type=1326 audit(670.010:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27238 comm="syz.5.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8f58e929 code=0x7ffc0000 [ 704.826302][ T30] audit: type=1326 audit(670.010:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27238 comm="syz.5.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8f58e929 code=0x7ffc0000 [ 704.867093][T27244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.869834][ T30] audit: type=1326 audit(670.019:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27238 comm="syz.5.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f2d8f58e929 code=0x7ffc0000 [ 704.966582][ T30] audit: type=1326 audit(670.019:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27238 comm="syz.5.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8f58e929 code=0x7ffc0000 [ 705.269792][T27269] netlink: 'syz.5.9360': attribute type 5 has an invalid length. [ 706.356473][ T5904] net_ratelimit: 3 callbacks suppressed [ 706.356492][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.855015][T27334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.387997][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.457800][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.932527][T27377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9411'. [ 707.943548][T27377] netem: invalid attributes len -6 [ 707.950414][T27377] netem: change failed [ 708.058799][T23887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.070838][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.227744][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.569872][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.586488][ T5904] kernel write not supported for file /sg0 (pid: 5904 comm: kworker/1:5) [ 708.741271][T23887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.131315][T27427] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9436'. [ 709.187554][T27427] netlink: 'syz.8.9436': attribute type 1 has an invalid length. [ 709.214366][T27427] netlink: 'syz.8.9436': attribute type 2 has an invalid length. [ 709.684107][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.230552][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 710.230576][ T30] audit: type=1400 audit(675.304:391): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=27459 comm="syz.1.9449" name="1966" dev="tmpfs" ino=9953 [ 711.046397][T27497] netlink: 124 bytes leftover after parsing attributes in process `syz.5.9467'. [ 711.557271][T27517] sp0: Synchronizing with TNC [ 711.905048][ T5904] net_ratelimit: 2 callbacks suppressed [ 711.905069][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.020396][T27533] input: syz0 as /devices/virtual/input/input51 [ 712.279639][T27545] loop8: detected capacity change from 0 to 1 [ 712.286845][T27545] Dev loop8: unable to read RDB block 1 [ 712.293275][T27545] loop8: unable to read partition table [ 712.299322][T27545] loop8: partition table beyond EOD, truncated [ 712.326318][T27545] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 712.798449][T27571] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9503'. [ 713.016907][T26192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.533983][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.848796][T27615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9524'. [ 713.890676][T27615] netlink: 'syz.0.9524': attribute type 7 has an invalid length. [ 713.912302][T27615] netlink: 'syz.0.9524': attribute type 8 has an invalid length. [ 713.936538][T27615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9524'. [ 714.129061][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.176703][T27627] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 714.215202][T23887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.727030][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.905530][ T2957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.952660][T27652] netlink: 52 bytes leftover after parsing attributes in process `syz.8.9540'. [ 714.995954][T27652] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9540'. [ 715.058789][T26192] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 715.240853][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.249382][T26192] usb 6-1: Using ep0 maxpacket: 16 [ 715.268928][T26192] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 715.315093][T26192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 715.335213][T26192] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 715.357835][T26192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.366041][T26192] usb 6-1: Product: syz [ 715.377246][T26192] usb 6-1: Manufacturer: syz [ 715.383021][T26192] usb 6-1: SerialNumber: syz [ 715.396257][T26192] usb 6-1: config 0 descriptor?? [ 715.426403][T26192] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 715.451522][T26192] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 715.820901][T27680] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.9562'. [ 715.991670][T27682] block nbd2: server does not support multiple connections per device. [ 716.000748][T27682] block nbd2: shutting down sockets [ 716.092639][T26192] em28xx 6-1:0.0: unknown em28xx chip ID (61) [ 716.259434][T27692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9568'. [ 716.320177][T26192] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 716.338447][T26192] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 716.352730][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.363285][T26192] em28xx 6-1:0.0: No AC97 audio processor [ 716.387601][T26192] usb 6-1: USB disconnect, device number 65 [ 716.406287][T26192] em28xx 6-1:0.0: Disconnecting em28xx [ 716.418147][T26192] em28xx 6-1:0.0: Freeing device [ 717.464702][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.721499][T27738] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9580'. [ 717.750985][T27738] gretap0: entered promiscuous mode [ 717.977374][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.576239][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.731819][T27763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.527111][T22601] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 719.600806][T27790] Invalid ELF header magic: != ELF [ 719.701637][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.710327][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.740830][T22601] usb 9-1: Using ep0 maxpacket: 32 [ 719.766973][T22601] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 719.796774][T22601] usb 9-1: config 0 has no interface number 0 [ 719.802960][T22601] usb 9-1: config 0 interface 184 has no altsetting 0 [ 719.839998][T22601] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 719.849498][T22601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.857654][T22601] usb 9-1: Product: syz [ 719.901639][T22601] usb 9-1: Manufacturer: syz [ 719.906578][T22601] usb 9-1: SerialNumber: syz [ 719.926982][T22601] usb 9-1: config 0 descriptor?? [ 719.935601][T22601] smsc75xx v1.0.0 [ 719.939448][T22601] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 719.952044][T22601] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -22 [ 720.059513][T27795] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 720.156718][T22601] usb 9-1: USB disconnect, device number 19 [ 720.371917][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.382563][T26192] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 720.558171][T26192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.569973][T26192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.580255][T26192] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 720.590707][T26192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.601620][T26192] usb 6-1: config 0 descriptor?? [ 720.799381][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.847204][T27817] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9615'. [ 721.048928][T26192] arvo 0003:1E7D:30D4.0080: unknown main item tag 0x0 [ 721.056561][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.067145][T26192] arvo 0003:1E7D:30D4.0080: unknown main item tag 0x0 [ 721.074034][T26192] arvo 0003:1E7D:30D4.0080: unknown main item tag 0x0 [ 721.081923][T26192] arvo 0003:1E7D:30D4.0080: unknown main item tag 0x0 [ 721.090195][T26192] arvo 0003:1E7D:30D4.0080: unknown main item tag 0x0 [ 721.099086][T26192] arvo 0003:1E7D:30D4.0080: unknown main item tag 0x0 [ 721.109499][T26192] arvo 0003:1E7D:30D4.0080: unknown main item tag 0x0 [ 721.120308][T26192] arvo 0003:1E7D:30D4.0080: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 721.206574][T27822] netlink: 'syz.8.9617': attribute type 1 has an invalid length. [ 721.214728][T27822] netlink: 144 bytes leftover after parsing attributes in process `syz.8.9617'. [ 721.227470][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.228690][T27822] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9617'. [ 721.478113][ T1212] usb 6-1: USB disconnect, device number 66 [ 721.784005][T27845] tap0: tun_chr_ioctl cmd 1074025677 [ 721.789833][T27845] tap0: linktype set to 6 [ 721.837106][ T5904] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 722.017191][ T5904] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 722.040439][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.048549][ T5904] usb 9-1: Product: syz [ 722.056937][ T5904] usb 9-1: Manufacturer: syz [ 722.065601][ T5904] usb 9-1: SerialNumber: syz [ 722.088404][ T5904] usb 9-1: config 0 descriptor?? [ 722.109303][ T5904] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 722.938114][T22601] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 722.992332][ T5904] gspca_sunplus: reg_r err -71 [ 722.997276][ T5904] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 723.025937][ T917] net_ratelimit: 3 callbacks suppressed [ 723.025958][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.046850][ T5904] usb 9-1: USB disconnect, device number 20 [ 723.106647][T27889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9647'. [ 723.140386][T22601] usb 6-1: Using ep0 maxpacket: 8 [ 723.158401][T22601] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 723.169626][T22601] usb 6-1: config 179 has no interface number 0 [ 723.178355][T22601] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 723.191937][T22601] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 723.206374][T22601] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 723.219443][T22601] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 723.231154][T22601] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 723.249463][T22601] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 723.260032][T22601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.275109][T27876] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 723.366423][ T5961] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 723.547132][ T5961] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 723.563765][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.573224][ T5961] usb 2-1: Product: syz [ 723.577596][ T5961] usb 2-1: Manufacturer: syz [ 723.582449][ T5961] usb 2-1: SerialNumber: syz [ 723.599826][ T5961] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 723.636350][T22601] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 724.138263][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.226004][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 724.234403][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 724.247424][T27911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.279087][T27911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.317840][ T5961] usb 6-1: USB disconnect, device number 67 [ 724.478844][ T1212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.733048][T22601] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 724.746411][T22601] ath9k_htc: Failed to initialize the device [ 724.847140][T22601] usb 2-1: ath9k_htc: USB layer deinitialized [ 724.882563][ T5904] usb 2-1: USB disconnect, device number 89 [ 725.254181][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.574708][T27946] dummy0: entered promiscuous mode [ 725.583349][T27946] macsec2: entered promiscuous mode [ 725.589603][T27946] macsec2: entered allmulticast mode [ 725.595190][T27946] dummy0: entered allmulticast mode [ 725.609638][T27946] dummy0: left allmulticast mode [ 725.617073][T27946] dummy0: left promiscuous mode [ 725.845630][T23887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.854724][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.246958][T27978] netlink: 'syz.8.9685': attribute type 6 has an invalid length. [ 726.271723][T27978] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.9685'. [ 726.361310][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.617429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 727.292297][ T2977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.470694][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.569685][ T1212] hid-generic 0005:16C0:0009.0081: unknown main item tag 0x0 [ 727.616226][ T1212] hid-generic 0005:16C0:0009.0081: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 727.726548][ T1212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.989629][T28012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9700'. [ 728.029703][T28012] netem: change failed [ 728.399867][ T1212] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 728.515988][T28023] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9705'. [ 728.583056][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.625124][ T1212] usb 9-1: Using ep0 maxpacket: 16 [ 728.651814][ T1212] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 728.672916][ T1212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.702053][ T1212] usb 9-1: config 0 descriptor?? [ 728.868553][T28030] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 729.096993][ T5961] hid-generic 0005:16C0:0009.0082: unknown main item tag 0x0 [ 729.108006][ T5961] hid-generic 0005:16C0:0009.0082: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 729.162264][ T1212] koneplus 0003:1E7D:2E22.0083: unknown main item tag 0x1 [ 729.183336][ T1212] koneplus 0003:1E7D:2E22.0083: hidraw1: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.8-1/input0 [ 729.306668][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 729.367709][T28040] netlink: 'syz.0.9710': attribute type 10 has an invalid length. [ 729.391531][ T917] usb 9-1: USB disconnect, device number 21 [ 729.698594][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.972441][T28054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9718'. [ 730.145659][T28064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.807168][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.977146][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.972678][ T2977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.029623][ T2977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.044424][ T2957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.554437][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.573926][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.593137][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.600636][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.623196][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.641813][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.657010][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.674625][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.694720][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.749347][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.764826][ T30] audit: type=1804 audit(696.379:392): pid=28116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.9747" name="/" dev="pidfs" ino=28115 res=1 errno=0 [ 732.792774][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.815642][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.823124][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.841843][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.858643][ T917] hid-generic 009C:0008:0003.0084: unknown main item tag 0x0 [ 732.873729][ T917] hid-generic 009C:0008:0003.0084: hidraw0: HID v0.05 Device [syz1] on syz0 [ 732.956191][T28120] macsec2: entered promiscuous mode [ 732.972471][T28120] dummy0: entered promiscuous mode [ 732.983466][T28120] macsec2: entered allmulticast mode [ 732.989703][T28120] dummy0: entered allmulticast mode [ 733.006289][T28120] dummy0: left allmulticast mode [ 733.011815][T28120] dummy0: left promiscuous mode [ 733.334946][T28126] loop6: detected capacity change from 0 to 8175 [ 733.374415][ T2957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.231795][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.407737][ T30] audit: type=1326 audit(698.848:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28177 comm="syz.5.9771" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d8f58e929 code=0x0 [ 735.535964][T28189] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 736.134717][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.164795][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.185687][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.203717][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.226017][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.233522][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.270346][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.288860][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.308663][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.328115][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.352922][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.393412][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.436968][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.470022][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.491857][ T917] hid-generic 009C:0008:0003.0085: unknown main item tag 0x0 [ 736.520327][ T917] hid-generic 009C:0008:0003.0085: hidraw0: HID v0.05 Device [syz1] on syz0 [ 736.634853][ T30] audit: type=1400 audit(699.989:394): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=28229 comm="syz.0.9797" name="408" dev="tmpfs" ino=2073 [ 736.996519][T28245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9803'. [ 737.479993][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.496785][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.505092][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.166712][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.189215][ T2977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.223962][T28286] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 738.426952][T28293] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9824'. [ 738.802543][T28310] input: syz0 as /devices/virtual/input/input52 [ 739.192347][T28325] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9837'. [ 739.530368][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.032067][ T30] audit: type=1326 audit(703.170:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28336 comm="syz.8.9841" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f597418e929 code=0x0 [ 740.738055][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.972153][ T5961] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 741.188893][ T5961] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 741.205486][ T5961] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 741.226756][ T5961] usb 6-1: config 0 interface 0 has no altsetting 0 [ 741.240362][ T5961] usb 6-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 741.249635][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.261827][ T5961] usb 6-1: config 0 descriptor?? [ 741.267946][T28353] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 741.734543][ T5961] holtek_mouse 0003:04D9:A067.0086: unknown main item tag 0x0 [ 741.752349][ T5961] holtek_mouse 0003:04D9:A067.0086: unknown main item tag 0x0 [ 741.760087][ T5961] holtek_mouse 0003:04D9:A067.0086: unknown main item tag 0x0 [ 741.795098][ T5961] holtek_mouse 0003:04D9:A067.0086: unknown main item tag 0x0 [ 741.802769][ T5961] holtek_mouse 0003:04D9:A067.0086: unknown main item tag 0x0 [ 741.834570][ T5961] holtek_mouse 0003:04D9:A067.0086: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.5-1/input0 [ 741.958371][ T5961] usb 6-1: USB disconnect, device number 68 [ 742.251397][ T30] audit: type=1326 audit(705.246:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28389 comm="syz.6.9863" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f659c38e929 code=0x0 [ 743.321501][ T30] audit: type=1326 audit(706.247:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28427 comm="syz.0.9890" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f486738e929 code=0x0 [ 743.652624][T23887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.987835][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.320391][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.330321][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.014660][T22601] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 745.226947][T22601] usb 9-1: Using ep0 maxpacket: 16 [ 745.229971][T22601] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 745.230001][T22601] usb 9-1: config 0 has no interface number 0 [ 745.230048][T22601] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 745.230074][T22601] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 745.234593][T22601] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 745.297407][T22601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.318728][T22601] usb 9-1: Product: syz [ 745.318754][T22601] usb 9-1: Manufacturer: syz [ 745.318772][T22601] usb 9-1: SerialNumber: syz [ 745.323966][T22601] usb 9-1: config 0 descriptor?? [ 745.324832][T28476] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 745.325000][T28476] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 745.548144][T28476] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 745.548307][T28476] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 745.699341][T23887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.990614][T22601] asix 9-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 746.024754][T22601] asix 9-1:0.251: probe with driver asix failed with error -524 [ 746.204329][T22601] usb 9-1: USB disconnect, device number 22 [ 746.334442][T28522] sp0: Synchronizing with TNC [ 747.132284][T28549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9927'. [ 747.144016][T28549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9927'. [ 747.236490][ T1212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.384233][T28558] sp0: Synchronizing with TNC [ 747.435387][T28561] Bluetooth: MGMT ver 1.23 [ 749.419480][T28612] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 749.819770][ T2977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.892886][ T2977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.477719][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.487737][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.032660][ T5959] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 751.150144][T26192] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 751.214448][ T5959] usb 6-1: Using ep0 maxpacket: 16 [ 751.259313][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.310719][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.363229][T26192] usb 9-1: Using ep0 maxpacket: 32 [ 751.368803][ T5959] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 751.443442][T26192] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 751.458599][ T5959] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 751.468544][T26192] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.477281][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.492198][T26192] usb 9-1: Product: syz [ 751.496520][T26192] usb 9-1: Manufacturer: syz [ 751.501153][T26192] usb 9-1: SerialNumber: syz [ 751.517995][ T5959] usb 6-1: config 0 descriptor?? [ 751.529507][T26192] usb 9-1: config 0 descriptor?? [ 751.846328][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.003770][T28659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.014309][ T5959] microsoft 0003:045E:07DA.0087: No inputs registered, leaving [ 752.040264][T28659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.051219][ T5959] microsoft 0003:045E:07DA.0087: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 752.051257][ T5959] microsoft 0003:045E:07DA.0087: no inputs found [ 752.051274][ T5959] microsoft 0003:045E:07DA.0087: could not initialize ff, continuing anyway [ 752.232061][T22601] usb 6-1: USB disconnect, device number 69 [ 752.257176][T26192] peak_usb 9-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 752.341706][T28688] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.380181][T26192] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71 [ 752.406896][T26192] usb 9-1: USB disconnect, device number 23 [ 752.529338][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.738741][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.014903][T28748] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10015'. [ 754.090461][T28748] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10015'. [ 754.158526][T28753] tap0: tun_chr_ioctl cmd 1074812118 [ 754.237687][T28757] IPVS: length: 4096 != 8 [ 754.346573][T28761] netlink: 'syz.1.10021': attribute type 3 has an invalid length. [ 754.365841][T28761] netlink: 'syz.1.10021': attribute type 3 has an invalid length. [ 754.986958][ T30] audit: type=1326 audit(717.163:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28788 comm="syz.5.10034" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d8f58e929 code=0x0 [ 755.253352][T28802] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10040'. [ 755.950980][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.959225][ T2977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.969199][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.895232][T28844] netlink: 27 bytes leftover after parsing attributes in process `syz.0.10059'. [ 756.976979][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.233260][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.553228][ T30] audit: type=1400 audit(719.549:399): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=28847 comm="syz.6.10062" saddr=100.1.1.1 daddr=172.20.20.170 dest=20002 [ 757.618094][T28852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.680929][T28852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.723624][T28852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.798749][T28852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.657987][T28892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.665016][T22601] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 759.886769][T22601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 759.943031][T22601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 760.031890][T22601] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 760.102782][T22601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.169869][T22601] usb 6-1: config 0 descriptor?? [ 760.178891][T28902] netlink: 260 bytes leftover after parsing attributes in process `syz.1.10085'. [ 816.866336][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 838.790835][ C0] net_ratelimit: 1021 callbacks suppressed [ 838.790874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.809279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.821815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.834340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.846806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.859380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.871845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.884317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.896759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.909196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.147474][ C0] net_ratelimit: 7831 callbacks suppressed [ 844.147502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.165921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.178446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.191080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.203741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.216377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.228892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.241410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.254102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.266717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.503351][ C0] net_ratelimit: 7818 callbacks suppressed [ 849.503377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.521859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.534621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.547190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.559889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.572501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.585036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.597590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.610326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.622917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.859170][ C0] net_ratelimit: 7808 callbacks suppressed [ 854.859196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.877729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.890291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.902806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.915301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.927854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.940386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.952975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.965481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.978314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.226065][ C0] net_ratelimit: 7829 callbacks suppressed [ 860.226090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.244498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.257027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.269662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.282376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.295516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.308027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.320573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.333102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.345642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 865.592563][ C0] net_ratelimit: 7834 callbacks suppressed [ 865.592590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 865.610998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 865.623642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 865.636271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 865.648797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 865.661421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 865.673950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 865.686439][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 865.698930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 865.711481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 870.959275][ C0] net_ratelimit: 7834 callbacks suppressed [ 870.959316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 870.977726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 870.990253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.002776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.015341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.027945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.040454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.052963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.065493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.078010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 872.370150][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 872.377179][ C0] rcu: 1-...!: (11 ticks this GP) idle=382c/1/0x4000000000000000 softirq=138544/138545 fqs=5 [ 872.388870][ C0] rcu: (detected by 0, t=10505 jiffies, g=131393, q=374 ncpus=2) [ 872.396730][ C0] Sending NMI from CPU 0 to CPUs 1: [ 872.396770][ C1] NMI backtrace for cpu 1 [ 872.396807][ C1] CPU: 1 UID: 0 PID: 917 Comm: kworker/1:2 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 872.396828][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 872.396842][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 872.396874][ C1] RIP: 0010:lock_acquire+0x9a/0x360 [ 872.396900][ C1] Code: 83 3d 39 f6 01 0e 00 0f 84 f0 00 00 00 48 8b b4 24 90 00 00 00 4c 89 ef e8 93 43 83 00 83 3d 1c f6 01 0e 00 0f 84 fa 00 00 00 <65> 8b 05 1f bc fb 10 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 a0 [ 872.396915][ C1] RSP: 0018:ffffc90000a07660 EFLAGS: 00000002 [ 872.396930][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: e3ae9658b3b96800 [ 872.396942][ C1] RDX: 0000000000000000 RSI: ffffffff8b614977 RDI: 1ffffffff339d654 [ 872.396954][ C1] RBP: ffffffff84c0409a R08: 0000000000000001 R09: 0000000000000000 [ 872.396966][ C1] R10: ffffc90000a077b0 R11: fffff52000140ef8 R12: 0000000000000000 [ 872.396978][ C1] R13: ffffffff99ceb2a0 R14: 0000000000000000 R15: 0000000000000001 [ 872.396990][ C1] FS: 0000000000000000(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 [ 872.397005][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 872.397017][ C1] CR2: 0000001b3191fffc CR3: 000000000df38000 CR4: 00000000003526f0 [ 872.397032][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 872.397043][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 872.397054][ C1] Call Trace: [ 872.397067][ C1] [ 872.397082][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 872.397106][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 872.397131][ C1] ? debug_object_deactivate+0x9a/0x250 [ 872.397152][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 872.397183][ C1] debug_object_deactivate+0x9a/0x250 [ 872.397209][ C1] debug_deactivate+0x1d/0x200 [ 872.397236][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 872.397274][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 872.397297][ C1] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 872.397326][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 872.397368][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 872.397397][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 872.397422][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 872.397441][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 872.397463][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 2b 7b fb 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 872.397478][ C1] RSP: 0018:ffffc90000a07bb8 EFLAGS: 00000206 [ 872.397492][ C1] RAX: e3ae9658b3b96800 RBX: 0000000000000000 RCX: e3ae9658b3b96800 [ 872.397505][ C1] RDX: 0000000000000000 RSI: ffffffff8db59968 RDI: ffffffff8be1afc0 [ 872.397517][ C1] RBP: ffffffff81728de5 R08: 0000000000000000 R09: ffffffff81728de5 [ 872.397530][ C1] R10: ffffc90000a07dd8 R11: fffff52000140fbd R12: 0000000000000002 [ 872.397542][ C1] R13: ffffffff8e13f060 R14: 0000000000000000 R15: 0000000000000246 [ 872.397562][ C1] ? unwind_next_frame+0xa5/0x2390 [ 872.397588][ C1] ? unwind_next_frame+0xa5/0x2390 [ 872.397624][ C1] ? unwind_next_frame+0xa5/0x2390 [ 872.397648][ C1] ? arch_stack_walk+0xe4/0x150 [ 872.397675][ C1] ? unwind_next_frame+0xa5/0x2390 [ 872.397699][ C1] unwind_next_frame+0xc2/0x2390 [ 872.397723][ C1] ? unwind_next_frame+0xa5/0x2390 [ 872.397751][ C1] ? unwind_next_frame+0xa5/0x2390 [ 872.397776][ C1] ? __unwind_start+0xf8/0x760 [ 872.397804][ C1] __unwind_start+0x5b9/0x760 [ 872.397832][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 872.397852][ C1] arch_stack_walk+0xe4/0x150 [ 872.397882][ C1] ? arch_stack_walk+0xe4/0x150 [ 872.397910][ C1] stack_trace_save+0x9c/0xe0 [ 872.397927][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 872.397952][ C1] kasan_save_track+0x3e/0x80 [ 872.398007][ C1] __kasan_slab_alloc+0x6c/0x80 [ 872.398029][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 872.398050][ C1] ? skb_clone+0x212/0x3a0 [ 872.398076][ C1] skb_clone+0x212/0x3a0 [ 872.398102][ C1] br_flood+0x414/0x6a0 [ 872.398126][ C1] br_handle_frame_finish+0x14b4/0x19b0 [ 872.398155][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 872.398182][ C1] ? ip6t_do_table+0x1db/0x1550 [ 872.398207][ C1] ? nf_hook_slow+0x176/0x220 [ 872.398229][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 872.398249][ C1] br_nf_hook_thresh+0x3c3/0x4a0 [ 872.398275][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 872.398296][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 872.398317][ C1] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 872.398341][ C1] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 872.398362][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 872.398388][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 872.398411][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 872.398435][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 872.398459][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 872.398481][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 872.398505][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 872.398525][ C1] br_handle_frame+0x982/0x14c0 [ 872.398551][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 872.398574][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 872.398595][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 872.398614][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 872.398645][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 872.398666][ C1] __netif_receive_skb_core+0x10e1/0x4180 [ 872.398692][ C1] ? ip6_mc_input+0x9c3/0xbe0 [ 872.398726][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 872.398742][ C1] ? ip6_rcv_finish+0x29a/0x2d0 [ 872.398768][ C1] ? NF_HOOK+0x309/0x3a0 [ 872.398789][ C1] ? skb_orphan+0xaf/0xd0 [ 872.398822][ C1] ? process_backlog+0x2d5/0x14f0 [ 872.398841][ C1] ? process_backlog+0x2d5/0x14f0 [ 872.398861][ C1] __netif_receive_skb+0x72/0x380 [ 872.398880][ C1] ? process_backlog+0x2d5/0x14f0 [ 872.398900][ C1] process_backlog+0x60e/0x14f0 [ 872.398918][ C1] ? __lock_acquire+0xab9/0xd20 [ 872.398948][ C1] ? __pfx_process_backlog+0x10/0x10 [ 872.398973][ C1] __napi_poll+0xc7/0x480 [ 872.398988][ C1] ? net_rx_action+0x46d/0xe30 [ 872.399008][ C1] net_rx_action+0x707/0xe30 [ 872.399026][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 872.399060][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 872.399102][ C1] handle_softirqs+0x286/0x870 [ 872.399129][ C1] ? do_softirq+0xec/0x180 [ 872.399157][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 872.399203][ C1] ? neigh_periodic_work+0xb41/0xd60 [ 872.399223][ C1] do_softirq+0xec/0x180 [ 872.399247][ C1] [ 872.399254][ C1] [ 872.399261][ C1] ? __pfx_do_softirq+0x10/0x10 [ 872.399284][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 872.399310][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 872.399340][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 872.399364][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 872.399389][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 872.399414][ C1] ? neigh_periodic_work+0xb41/0xd60 [ 872.399434][ C1] ? neigh_periodic_work+0xb41/0xd60 [ 872.399454][ C1] neigh_periodic_work+0xb41/0xd60 [ 872.399477][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 872.399505][ C1] process_scheduled_works+0xade/0x17b0 [ 872.399548][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 872.399589][ C1] worker_thread+0x8a0/0xda0 [ 872.399631][ C1] kthread+0x70e/0x8a0 [ 872.399652][ C1] ? __pfx_worker_thread+0x10/0x10 [ 872.399677][ C1] ? __pfx_kthread+0x10/0x10 [ 872.399696][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 872.399719][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 872.399743][ C1] ? __pfx_kthread+0x10/0x10 [ 872.399761][ C1] ret_from_fork+0x3f9/0x770 [ 872.399786][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 872.399813][ C1] ? __switch_to_asm+0x39/0x70 [ 872.399829][ C1] ? __switch_to_asm+0x33/0x70 [ 872.399844][ C1] ? __pfx_kthread+0x10/0x10 [ 872.399863][ C1] ret_from_fork_asm+0x1a/0x30 [ 872.399890][ C1] [ 872.400757][ C0] rcu: rcu_preempt kthread starved for 10494 jiffies! g131393 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 873.191951][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 873.201954][ C0] rcu: RCU grace-period kthread stack dump: [ 873.207955][ C0] task:rcu_preempt state:R running task stack:27192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 873.221495][ C0] Call Trace: [ 873.224800][ C0] [ 873.227821][ C0] __schedule+0x16a2/0x4cb0 [ 873.232383][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 873.237624][ C0] ? schedule+0x165/0x360 [ 873.241996][ C0] ? __lock_acquire+0xab9/0xd20 [ 873.246894][ C0] ? __pfx___schedule+0x10/0x10 [ 873.251806][ C0] ? schedule+0x91/0x360 [ 873.256178][ C0] schedule+0x165/0x360 [ 873.260380][ C0] schedule_timeout+0x12b/0x270 [ 873.265269][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 873.270679][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 873.276615][ C0] ? __pfx_process_timeout+0x10/0x10 [ 873.281939][ C0] ? prepare_to_swait_event+0x341/0x380 [ 873.287522][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 873.292425][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 873.298619][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 873.303934][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 873.309176][ C0] ? finish_swait+0xcd/0x1f0 [ 873.313808][ C0] rcu_gp_kthread+0x99/0x390 [ 873.318442][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 873.323690][ C0] ? __kthread_parkme+0x7b/0x200 [ 873.328671][ C0] ? __kthread_parkme+0x1a1/0x200 [ 873.333745][ C0] kthread+0x70e/0x8a0 [ 873.337862][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 873.343097][ C0] ? __pfx_kthread+0x10/0x10 [ 873.347820][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 873.353052][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 873.358290][ C0] ? __pfx_kthread+0x10/0x10 [ 873.362915][ C0] ret_from_fork+0x3f9/0x770 [ 873.367550][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 873.372707][ C0] ? __switch_to_asm+0x39/0x70 [ 873.377501][ C0] ? __switch_to_asm+0x33/0x70 [ 873.382288][ C0] ? __pfx_kthread+0x10/0x10 [ 873.386916][ C0] ret_from_fork_asm+0x1a/0x30 [ 873.391728][ C0] [ 873.394770][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 873.401118][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 873.412774][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 873.422866][ C0] Workqueue: events_unbound toggle_allocation_gate [ 873.429413][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 873.434733][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 bb 68 fb 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 873.454428][ C0] RSP: 0018:ffffc90000006be8 EFLAGS: 00000206 [ 873.460540][ C0] RAX: 9dc65f5ade6a8900 RBX: 0000000000000202 RCX: 9dc65f5ade6a8900 [ 873.468542][ C0] RDX: 0000000000000007 RSI: ffffffff8db59968 RDI: ffffffff8be1afc0 [ 873.476558][ C0] RBP: ffff88801d280c08 R08: 0000000000000000 R09: ffffffff8a4163fe [ 873.484771][ C0] R10: 0000000000000003 R11: ffffffff8a41cd20 R12: 0000000000000007 [ 873.493144][ C0] R13: 0000000000000007 R14: ffffffff8e13f060 R15: ffff88801d280000 [ 873.501156][ C0] FS: 0000000000000000(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 873.510204][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 873.516814][ C0] CR2: 0000001b2da1eff8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 873.524815][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 873.532812][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 873.540810][ C0] Call Trace: [ 873.544114][ C0] [ 873.546994][ C0] ? net_generic+0x1e/0x240 [ 873.551538][ C0] ? net_generic+0x1e/0x240 [ 873.556071][ C0] net_generic+0x1ef/0x240 [ 873.560526][ C0] br_nf_forward_finish+0x1cd/0xe60 [ 873.565769][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 873.571536][ C0] ? NF_HOOK+0x9e/0x6b0 [ 873.575723][ C0] ? NF_HOOK+0x9e/0x6b0 [ 873.579911][ C0] NF_HOOK+0x618/0x6b0 [ 873.584016][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 873.588639][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 873.594400][ C0] br_nf_forward_ip+0x647/0x7e0 [ 873.599374][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 873.605131][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 873.610277][ C0] nf_hook_slow+0xc5/0x220 [ 873.614742][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 873.620283][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 873.625767][ C0] NF_HOOK+0x215/0x3c0 [ 873.629871][ C0] ? NF_HOOK+0x9e/0x3c0 [ 873.634053][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 873.638673][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 873.644170][ C0] __br_forward+0x41e/0x600 [ 873.648703][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 873.654189][ C0] ? skb_clone+0x246/0x3a0 [ 873.658644][ C0] ? __pfx___br_forward+0x10/0x10 [ 873.663710][ C0] br_handle_frame_finish+0x14b4/0x19b0 [ 873.669314][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 873.675259][ C0] ? ip6t_do_table+0x1db/0x1550 [ 873.680167][ C0] ? nf_hook_slow+0x176/0x220 [ 873.684893][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 873.690842][ C0] br_nf_hook_thresh+0x3c3/0x4a0 [ 873.695936][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 873.701438][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 873.707372][ C0] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 873.712273][ C0] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 873.718295][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 873.724242][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 873.729856][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 873.735278][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 873.741216][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 873.747760][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 873.753006][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 873.758508][ C0] br_handle_frame+0x982/0x14c0 [ 873.763424][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 873.768848][ C0] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 873.775203][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 873.781135][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 873.787017][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 873.792361][ C0] __netif_receive_skb_core+0x10e1/0x4180 [ 873.798164][ C0] ? ip6_mc_input+0x9c3/0xbe0 [ 873.802910][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 873.809038][ C0] ? process_backlog+0x2d5/0x14f0 [ 873.814134][ C0] ? process_backlog+0x2d5/0x14f0 [ 873.819196][ C0] __netif_receive_skb+0x72/0x380 [ 873.824257][ C0] ? process_backlog+0x2d5/0x14f0 [ 873.829314][ C0] process_backlog+0x60e/0x14f0 [ 873.834212][ C0] ? __pfx_process_backlog+0x10/0x10 [ 873.839541][ C0] __napi_poll+0xc7/0x480 [ 873.843894][ C0] ? net_rx_action+0x46d/0xe30 [ 873.848698][ C0] net_rx_action+0x707/0xe30 [ 873.853355][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 873.858500][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 873.863751][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 873.869110][ C0] handle_softirqs+0x286/0x870 [ 873.873952][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 873.878778][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 873.884117][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 873.889358][ C0] __irq_exit_rcu+0xca/0x1f0 [ 873.893998][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 873.899245][ C0] ? __common_interrupt+0x163/0x250 [ 873.904485][ C0] irq_exit_rcu+0x9/0x30 [ 873.908767][ C0] common_interrupt+0xbb/0xe0 [ 873.913477][ C0] [ 873.916696][ C0] [ 873.919654][ C0] asm_common_interrupt+0x26/0x40 [ 873.924712][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 873.930903][ C0] Code: 08 a0 99 92 65 8b 15 48 55 d9 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c 8b 91 18 16 00 00 <83> fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c [ 873.950571][ C0] RSP: 0018:ffffc90000127698 EFLAGS: 00000246 [ 873.956681][ C0] RAX: ffffffff81b4d6f0 RBX: ffff8880b863c9c0 RCX: ffff88801d280000 [ 873.964684][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 873.972678][ C0] RBP: ffffc90000127800 R08: ffffffff8f9fe8f7 R09: 1ffffffff1f3fd1e [ 873.980792][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fd1f R12: 1ffff110170e825d [ 873.988815][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b87412e8 [ 873.996854][ C0] ? smp_call_function_many_cond+0xf80/0x12d0 [ 874.003067][ C0] smp_call_function_many_cond+0xf80/0x12d0 [ 874.009032][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 874.015526][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 874.020945][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 874.027786][ C0] ? __pfx___text_poke+0x10/0x10 [ 874.032767][ C0] ? rcu_is_watching+0x15/0xb0 [ 874.037574][ C0] ? trace_contention_end+0x39/0x120 [ 874.042904][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 874.047964][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 874.053123][ C0] smp_text_poke_batch_finish+0x5e0/0x1100 [ 874.058967][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 874.064025][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 874.070306][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 874.076592][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 874.082616][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 874.088552][ C0] static_key_enable+0x1a/0x20 [ 874.093433][ C0] toggle_allocation_gate+0xad/0x240 [ 874.098758][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 874.104687][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 874.110458][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 874.116480][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 874.122260][ C0] process_scheduled_works+0xade/0x17b0 [ 874.127965][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 874.135007][ C0] worker_thread+0x8a0/0xda0 [ 874.139692][ C0] kthread+0x70e/0x8a0 [ 874.143809][ C0] ? __pfx_worker_thread+0x10/0x10 [ 874.148967][ C0] ? __pfx_kthread+0x10/0x10 [ 874.153600][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 874.158842][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 874.164087][ C0] ? __pfx_kthread+0x10/0x10 [ 874.168715][ C0] ret_from_fork+0x3f9/0x770 [ 874.173352][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 874.178642][ C0] ? __switch_to_asm+0x39/0x70 [ 874.183819][ C0] ? __switch_to_asm+0x33/0x70 [ 874.188733][ C0] ? __pfx_kthread+0x10/0x10 [ 874.193371][ C0] ret_from_fork_asm+0x1a/0x30 [ 874.198211][ C0] [ 876.325837][ C0] net_ratelimit: 5100 callbacks suppressed [ 876.325863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.344375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.357029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.369553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.382105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.395403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.408085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.420622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.433160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.445720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.692881][ C0] net_ratelimit: 7831 callbacks suppressed [ 881.692907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.711680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.724177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.736712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.749208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.761839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.774331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.786822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.799379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.812082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)