last executing test programs: 7.743711713s ago: executing program 2 (id=1012): mkdir(0x0, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') 7.652874235s ago: executing program 2 (id=1013): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019440)=""/102400, 0x19000) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) 5.989542839s ago: executing program 2 (id=1038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd30, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)="03", 0x1}], 0x1}, 0x20004014) 5.833920993s ago: executing program 0 (id=1039): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2040400) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000000000)={0x77359400}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x1000000000000008, 0x3, 0x7, 0x7, 0x7, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xf, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x9, 0x400}, 0x8) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x2000000, 0x280, 0x1008}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x40, 0x107, 0x70ad2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, 0x0) 2.83375471s ago: executing program 0 (id=1042): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) read$alg(r1, &(0x7f0000000400)=""/8704, 0x2200) 2.762197096s ago: executing program 0 (id=1044): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x10, &(0x7f0000000940)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.694051536s ago: executing program 2 (id=1045): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, &(0x7f0000002a40)) 2.623001055s ago: executing program 2 (id=1046): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@var={0x6, 0x0, 0x0, 0xe, 0x1, 0x1}, @volatile={0x2, 0x0, 0x0, 0x9, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7922}}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x5}, @ptr={0x8, 0x0, 0x0, 0x2, 0x5}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x31, 0xb}, @ptr={0x2}]}, {0x0, [0x5f]}}, 0x0, 0x83, 0x0, 0x1, 0xc, 0x10000}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) 2.541464784s ago: executing program 2 (id=1049): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x5, 0x3d, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 2.541298828s ago: executing program 0 (id=1050): mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') 2.440372903s ago: executing program 0 (id=1053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd30, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)="03", 0x1}], 0x1}, 0x20004014) 2.392162285s ago: executing program 3 (id=1055): syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4008071}, 0x8c0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230001) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x0) socket$kcm(0x23, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014"], 0x100}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setuid(0xee00) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="2cb2"], 0x8) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r4, r9, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x3, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x920b, 0x2, 0x0, 0x2000008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x400, 0x0, 0x400216, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r8, '\x00', {0x3, 0xc8b, 0x0, 0x0}}, 0x0) 502.353868ms ago: executing program 1 (id=1058): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000001840)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000060000000400000002000093020000000200000009e7cd00090000000100efff1700000006000000005f2e6161"], 0x0, 0x42, 0x0, 0x1, 0x4}, 0x28) 501.865965ms ago: executing program 1 (id=1059): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)={0x54, 0x0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b674010d735d80e1cfc6b0b63bba115d1eb8facc8c94151"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x4000000, {}, [@common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000880), 0xf504, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x3, r0}, 0x38) 501.630782ms ago: executing program 0 (id=1060): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 389.562706ms ago: executing program 3 (id=1061): mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') 303.670387ms ago: executing program 3 (id=1062): syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x8000, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x5, @loopback, @local}}}}}}, 0x0) 252.105194ms ago: executing program 3 (id=1063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 183.538227ms ago: executing program 3 (id=1064): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="44067c7dbfe06c50379e4846bf9a0aecf1ee3a30528e7b9b355bbe4bbfb16a83fb8f38cfcd", 0x25, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 133.665791ms ago: executing program 1 (id=1065): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$sock(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000300)="5c4573fffe93b336d0f7a65844b18045f1cbf8305bafaf554024d9fe78d02f522b6a914e564e626c7401c4da8465", 0x2e}, {&(0x7f0000000440)="5b6c84100d3706e00923e57b7776114043360d2b8a6c27b8d252b882aa35b48a07c1c99761153fecaf1b5b622d9df0fec7973196fc5a88c0e98e479d1a838b5e0aac1a385c8cadd6bd149fec65108e46a278c5f452e8b6c9099b2ba1d7d25cdda35b80876613c646e16439b9421e7e39b20020c59d5b19", 0x77}, {&(0x7f0000000500)="e05f0781308df19cc6a29a7b202c74a60707818e78cdd07370d81b87b9499a880b7cf6c5f547e4c064f46a9e2fc26110c853f99bc5e81414c8c734c6f943ef9eeef6819eb79ae17b8e4770961eb2ac94dafbe1df3ec2b2b0d55f087ff55c1c41d40f185eabbe78", 0x67}, {&(0x7f00000005c0)="e3a1f8cd9d533a39b7f3ccfb5832361aa31f4c6e800ece680173484bb845dceb19e9fbc5a2fba035d593abc2ffbe46", 0x2f}, {&(0x7f0000000700)="72ca510ea102aa546918a3883152a6924eab9dde4acfb74fe016109e386aa2a529b700a21e8f10f980190db5457cf6d07740fd0d084c1ec58dd40405139ed1e7ed0494e9c6619cfbb20f213ad1b294585f0660a5b8674eb6a3d31cb4553acf49090464c2833a5acc4a10f78905c87d7413cffb2c597e58b8f5dd791c8d9940dbc4d6abf46a97198fcc62b6cb2518bb56a0507487d1cdc8ee91028225d3f5e17e2e6036f3e9f51ddf052787c81fe2dd68f98415", 0xb3}], 0x5}, 0x48040) 133.41553ms ago: executing program 3 (id=1066): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) 63.296648ms ago: executing program 1 (id=1067): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0xa, 0x3, 0xffffffff, 0x2}) io_uring_enter(0xffffffffffffffff, 0x7c65, 0xa334, 0x1, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0xa) 12.758852ms ago: executing program 1 (id=1068): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 0s ago: executing program 1 (id=1069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6800000004060500000000ac000000000000000a050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a31"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 0s ago: executing program 1 (id=1070): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}}, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) syz_80211_inject_frame(&(0x7f0000000f40)=@broadcast, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) syz_emit_ethernet(0xe2, &(0x7f0000002240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x30, 0xc2, 0x0, 0x0, 0x0, {[@nop, @eol, @mptcp=@remove_addr={0x1e, 0x88, 0x2, 0x0, "7e54ceff63411693105d43a5dce60b379c5d36facc8b7ac8d265d81e804508935373c469f99d43c81cb6ae61fbd2eb23affc8b87b082b6f9799e2440e65dd950ab43e5d1230cecd570624db5550a062fb171bee943b04111fde1cc0971469afd541e4d45a4744b06a1df96feba1082245bbb36d3d5e423c735159845fd5253a13498831c74"}, @md5sig={0x13, 0x12, "7c395733018c7bd5eb0b6d1fc194d870"}, @exp_fastopen={0xfe, 0x7, 0xf989, "465a9f"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) write(r3, &(0x7f0000000840)='\n', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:43084' (ED25519) to the list of known hosts. [ 41.834735][ T5656] cgroup: Unknown subsys name 'net' [ 41.963166][ T5656] cgroup: Unknown subsys name 'cpuset' [ 41.969745][ T5656] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.954601][ T5656] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.033367][ T5730] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.034486][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.038271][ T5730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.041717][ T5730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.043087][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.044297][ T5730] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.046770][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.049495][ T5730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.051411][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.053045][ T5730] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.056213][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.058936][ T5730] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.060255][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.062071][ T5730] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.065478][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.069152][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.069300][ T5730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.069882][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.074654][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.077992][ T5730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.630395][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.633413][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.635787][ T5737] bridge_slave_0: entered allmulticast mode [ 47.639366][ T5737] bridge_slave_0: entered promiscuous mode [ 47.652588][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.654883][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.657269][ T5737] bridge_slave_1: entered allmulticast mode [ 47.659923][ T5737] bridge_slave_1: entered promiscuous mode [ 47.738549][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.741586][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.745342][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.747988][ T5741] bridge_slave_0: entered allmulticast mode [ 47.751336][ T5741] bridge_slave_0: entered promiscuous mode [ 47.775964][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.779697][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.782017][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.784459][ T5741] bridge_slave_1: entered allmulticast mode [ 47.787466][ T5741] bridge_slave_1: entered promiscuous mode [ 47.790639][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.793409][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.796146][ T5729] bridge_slave_0: entered allmulticast mode [ 47.800285][ T5729] bridge_slave_0: entered promiscuous mode [ 47.828001][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.830304][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.832529][ T5729] bridge_slave_1: entered allmulticast mode [ 47.835325][ T5729] bridge_slave_1: entered promiscuous mode [ 47.845997][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.848371][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.850675][ T5728] bridge_slave_0: entered allmulticast mode [ 47.853325][ T5728] bridge_slave_0: entered promiscuous mode [ 47.880349][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.883440][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.887045][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.889803][ T5728] bridge_slave_1: entered allmulticast mode [ 47.893340][ T5728] bridge_slave_1: entered promiscuous mode [ 47.897926][ T5737] team0: Port device team_slave_0 added [ 47.901349][ T5737] team0: Port device team_slave_1 added [ 47.905586][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.910373][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.928916][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.954710][ T5729] team0: Port device team_slave_0 added [ 47.969081][ T5729] team0: Port device team_slave_1 added [ 47.972156][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.976488][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.979307][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.988511][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.008622][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.015404][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.020307][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.029905][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.045880][ T5741] team0: Port device team_slave_0 added [ 48.056124][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.059067][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.067383][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.088892][ T5741] team0: Port device team_slave_1 added [ 48.091406][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.093573][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.101716][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.112111][ T5728] team0: Port device team_slave_0 added [ 48.115344][ T5728] team0: Port device team_slave_1 added [ 48.141915][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.144480][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.154061][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.178156][ T5737] hsr_slave_0: entered promiscuous mode [ 48.181014][ T5737] hsr_slave_1: entered promiscuous mode [ 48.183630][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.186244][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.194238][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.199570][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.201910][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.210070][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.214360][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.216559][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.224431][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.264074][ T5729] hsr_slave_0: entered promiscuous mode [ 48.266950][ T5729] hsr_slave_1: entered promiscuous mode [ 48.270028][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 48.273003][ T5729] Cannot create hsr debugfs directory [ 48.322347][ T5741] hsr_slave_0: entered promiscuous mode [ 48.324693][ T5741] hsr_slave_1: entered promiscuous mode [ 48.326805][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 48.328844][ T5741] Cannot create hsr debugfs directory [ 48.344355][ T5728] hsr_slave_0: entered promiscuous mode [ 48.346671][ T5728] hsr_slave_1: entered promiscuous mode [ 48.349160][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 48.350961][ T5728] Cannot create hsr debugfs directory [ 48.596012][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.604708][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.607926][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.614637][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.618627][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.622971][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.625795][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.630234][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.673514][ T5729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.678547][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.681245][ T5729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.685736][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.694488][ T5729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.699165][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.701957][ T5729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.706264][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.749867][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.757524][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.760335][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.764195][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.771162][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.774946][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.778650][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.782971][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.834040][ T5728] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.838564][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.841616][ T5728] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.845435][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.848406][ T5728] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.852895][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.862551][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.866392][ T5728] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.870570][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.906409][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.918391][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.921049][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.934677][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.937065][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.985928][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.019849][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.027440][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.030515][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.036524][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.043448][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.056073][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.059372][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.076197][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.090755][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.093314][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.107809][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.114522][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.117665][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.129871][ T5743] Bluetooth: hci0: command tx timeout [ 49.137696][ T5743] Bluetooth: hci3: command tx timeout [ 49.140376][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.140469][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.140532][ T5730] Bluetooth: hci2: command tx timeout [ 49.140717][ T5730] Bluetooth: hci1: command tx timeout [ 49.163233][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.166207][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.451292][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.485499][ T5737] veth0_vlan: entered promiscuous mode [ 49.500331][ T5737] veth1_vlan: entered promiscuous mode [ 49.519355][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.526860][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.559495][ T5737] veth0_macvtap: entered promiscuous mode [ 49.579924][ T5737] veth1_macvtap: entered promiscuous mode [ 49.585043][ T5741] veth0_vlan: entered promiscuous mode [ 49.592280][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.608504][ T5729] veth0_vlan: entered promiscuous mode [ 49.612798][ T5741] veth1_vlan: entered promiscuous mode [ 49.619349][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.631158][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.634591][ T5729] veth1_vlan: entered promiscuous mode [ 49.668065][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.689042][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.696887][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.707853][ T5741] veth0_macvtap: entered promiscuous mode [ 49.710539][ T5728] veth0_vlan: entered promiscuous mode [ 49.716813][ T5729] veth0_macvtap: entered promiscuous mode [ 49.724468][ T5729] veth1_macvtap: entered promiscuous mode [ 49.735274][ T5741] veth1_macvtap: entered promiscuous mode [ 49.742129][ T5728] veth1_vlan: entered promiscuous mode [ 49.755653][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.759445][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.769201][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.793585][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.800121][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.802005][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.802879][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.808648][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.827221][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.838397][ T5728] veth0_macvtap: entered promiscuous mode [ 49.853477][ T5728] veth1_macvtap: entered promiscuous mode [ 49.854720][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.886477][ T5737] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.903413][ T5737] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.911538][ T5737] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.912630][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.925833][ T5737] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.948941][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.960078][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.962604][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.967522][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.970906][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.035598][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.040227][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.053723][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.060958][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.082329][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.085499][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.087694][ T5807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.092781][ T5807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.131319][ T5885] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5'. [ 50.151912][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.154566][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.157748][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.157879][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.237647][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.245747][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.269420][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.275017][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.281298][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.284697][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.288370][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.293254][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.344829][ T5903] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 50.350965][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.354662][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.361748][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.364063][ T5903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.366902][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.369277][ T5903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.374801][ T5903] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 50.388519][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 50.391663][ T5903] bridge_slave_1: left allmulticast mode [ 50.393577][ T5903] bridge_slave_1: left promiscuous mode [ 50.395592][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.402179][ T5903] bridge_slave_0: left allmulticast mode [ 50.404062][ T5903] bridge_slave_0: left promiscuous mode [ 50.409393][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.427335][ T5903] bond0: (slave bridge0): Releasing backup interface [ 50.435621][ T5910] jffs2: notice: (5910) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 50.557247][ T5880] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.717204][ T5880] usb 7-1: Using ep0 maxpacket: 8 [ 50.721629][ T5880] usb 7-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 50.728301][ T5880] usb 7-1: config 0 has no interfaces? [ 50.735459][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.738499][ T5880] usb 7-1: Product: syz [ 50.740340][ T5880] usb 7-1: Manufacturer: syz [ 50.742439][ T5880] usb 7-1: SerialNumber: syz [ 50.753817][ T5880] usb 7-1: config 0 descriptor?? [ 50.788095][ T29] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 50.940896][ T29] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 50.946421][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.950386][ T29] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 50.953425][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.963354][ T29] usb 8-1: config 0 descriptor?? [ 51.175980][ T5879] usb 8-1: USB disconnect, device number 2 [ 51.192423][ T5900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.205740][ T5900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.208553][ T5743] Bluetooth: hci3: command tx timeout [ 51.217360][ T5743] Bluetooth: hci0: command tx timeout [ 51.221780][ T5743] Bluetooth: hci1: command tx timeout [ 51.223396][ T5736] Bluetooth: hci2: command tx timeout [ 51.225437][ T5843] usb 7-1: USB disconnect, device number 2 [ 51.236147][ T5957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.243946][ T5961] jffs2: notice: (5961) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 51.597312][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.753777][ T29] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 51.760991][ T29] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 51.765601][ T29] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 51.769325][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 51.773386][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 51.781602][ T29] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 51.787951][ T29] usb 6-1: Product: syz [ 51.789762][ T29] usb 6-1: Manufacturer: syz [ 51.801261][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 51.803858][ T29] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 51.834453][ T5973] binder: BINDER_SET_CONTEXT_MGR already set [ 51.837056][ T5973] binder: 5972:5973 ioctl 4018620d 80004a80 returned -16 [ 51.967452][ T5829] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 52.004825][ T5843] usb 6-1: USB disconnect, device number 2 [ 52.117914][ T5829] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 52.121516][ T5829] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 52.126828][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.130289][ T5829] usb 8-1: Product: syz [ 52.132025][ T5829] usb 8-1: Manufacturer: syz [ 52.134013][ T5829] usb 8-1: SerialNumber: syz [ 52.141617][ T5829] usb 8-1: config 0 descriptor?? [ 52.349092][ T5880] usb 8-1: USB disconnect, device number 3 [ 52.747808][ T5957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.828967][ T5994] netlink: 'syz.2.31': attribute type 10 has an invalid length. [ 52.832417][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.834893][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.842511][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.845151][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.848776][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.851369][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.856568][ T5994] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 52.941674][ T5957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.944044][ T5999] Zero length message leads to an empty skb [ 53.030743][ T5957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.077416][ T5843] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.228037][ T5843] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 53.231800][ T5843] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 53.234653][ T5843] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 53.236870][ T5843] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 53.239775][ T5843] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.244679][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 53.249713][ T5843] usb 6-1: Product: syz [ 53.251017][ T5843] usb 6-1: Manufacturer: syz [ 53.255775][ T5843] cdc_wdm 6-1:1.0: skipping garbage [ 53.257695][ T5843] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 53.289190][ T5736] Bluetooth: hci1: command tx timeout [ 53.289249][ T5730] Bluetooth: hci0: command tx timeout [ 53.290982][ T5736] Bluetooth: hci3: command tx timeout [ 53.293414][ T5730] Bluetooth: hci2: command tx timeout [ 53.374037][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 53.458090][ T5829] usb 6-1: USB disconnect, device number 3 [ 53.477304][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 53.480069][ T5839] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 53.535301][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 53.614434][ T6052] jffs2: notice: (6052) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 53.627834][ T29] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 53.634508][ T29] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 53.639490][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.647256][ T29] usb 7-1: Product: syz [ 53.647818][ T5839] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 53.648920][ T29] usb 7-1: Manufacturer: syz [ 53.654093][ T29] usb 7-1: SerialNumber: syz [ 53.655793][ T5839] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.658203][ T29] usb 7-1: config 0 descriptor?? [ 53.662102][ T5839] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 53.665783][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.672086][ T5839] usb 5-1: config 0 descriptor?? [ 53.698924][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 53.872038][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 53.873417][ T29] usb 7-1: USB disconnect, device number 3 [ 53.903190][ T34] usb 5-1: USB disconnect, device number 2 [ 54.141264][ T6093] netlink: 136 bytes leftover after parsing attributes in process `syz.1.66'. [ 54.166727][ T6096] jffs2: notice: (6096) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 54.477782][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 54.649154][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 54.653539][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 54.656191][ T34] usb 8-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 54.659527][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 54.662374][ T34] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 54.671682][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 54.676538][ T34] usb 8-1: Product: syz [ 54.678910][ T34] usb 8-1: Manufacturer: syz [ 54.694163][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 54.696293][ T34] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 54.720523][ T6140] gadgetfs: bound to dummy_udc driver [ 54.732761][ T6142] netlink: 44 bytes leftover after parsing attributes in process `syz.2.77'. [ 54.832467][ T6151] netlink: 136 bytes leftover after parsing attributes in process `syz.0.81'. [ 54.893782][ T34] usb 8-1: USB disconnect, device number 4 [ 55.095620][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 55.198779][ T6189] gadgetfs: bound to dummy_udc driver [ 55.362664][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 55.375756][ T6208] bridge_slave_1: left allmulticast mode [ 55.378955][ T5730] Bluetooth: hci3: command tx timeout [ 55.379265][ T5736] Bluetooth: hci0: command tx timeout [ 55.380935][ T64] Bluetooth: hci1: command tx timeout [ 55.380937][ T5730] Bluetooth: hci2: command tx timeout [ 55.382795][ T6208] bridge_slave_1: left promiscuous mode [ 55.393869][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.402735][ T6208] bridge_slave_0: left allmulticast mode [ 55.405165][ T6208] bridge_slave_0: left promiscuous mode [ 55.410627][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.445124][ T6208] bond0: (slave bridge0): Releasing backup interface [ 55.503759][ T6218] netlink: 136 bytes leftover after parsing attributes in process `syz.3.102'. [ 55.524632][ T6222] netlink: 44 bytes leftover after parsing attributes in process `syz.0.100'. [ 55.857421][ T29] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 55.897217][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 56.008493][ T29] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 56.014639][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.020117][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 56.023940][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.032525][ T29] usb 7-1: config 0 descriptor?? [ 56.043210][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 56.046388][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 56.057837][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 56.062562][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 56.065952][ T29] usb 7-1: media controller created [ 56.067713][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 56.070211][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 56.072094][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 56.077272][ T10] usb 6-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 56.080460][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 56.083433][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 56.089041][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 56.089632][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 56.092159][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 56.098465][ T10] usb 6-1: Product: syz [ 56.099546][ T6265] jffs2: notice: (6265) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 56.099874][ T10] usb 6-1: Manufacturer: syz [ 56.107829][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input5 [ 56.114069][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 56.119316][ T10] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 56.119570][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 56.126269][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 56.233252][ T6279] Bluetooth: MGMT ver 1.23 [ 56.239377][ T6281] netlink: 44 bytes leftover after parsing attributes in process `syz.3.119'. [ 56.242016][ T6241] dvb-usb: bulk message failed: -22 (61/0) [ 56.245068][ T41] usb 7-1: USB disconnect, device number 4 [ 56.274908][ T41] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 56.279403][ T6283] netlink: 136 bytes leftover after parsing attributes in process `syz.0.120'. [ 56.319780][ T10] usb 6-1: USB disconnect, device number 4 [ 56.607312][ T5839] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.772426][ T5839] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 56.779548][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.787185][ T5839] usb 5-1: Product: syz [ 56.788727][ T5839] usb 5-1: Manufacturer: syz [ 56.790910][ T5839] usb 5-1: SerialNumber: syz [ 56.794990][ T5839] usb 5-1: config 0 descriptor?? [ 56.960154][ T6309] netlink: 44 bytes leftover after parsing attributes in process `syz.3.133'. [ 57.003105][ T5839] usb 5-1: USB disconnect, device number 3 [ 57.177375][ T5520] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 57.348078][ T5520] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 57.353273][ T5520] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.356730][ T5520] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 57.360243][ T5520] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.366653][ T5520] usb 6-1: config 0 descriptor?? [ 57.381317][ T5520] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 57.384058][ T5520] dvb-usb: bulk message failed: -22 (3/0) [ 57.388883][ T5520] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 57.393096][ T5520] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 57.396938][ T5520] usb 6-1: media controller created [ 57.400659][ T5520] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 57.417292][ T5520] dvb-usb: bulk message failed: -22 (6/0) [ 57.419831][ T5520] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 57.424471][ T5520] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input6 [ 57.431296][ T5520] dvb-usb: schedule remote query interval to 150 msecs. [ 57.434182][ T5520] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 57.542021][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 57.579215][ T6307] dibusb: i2c wr: len=88 is too big! [ 57.579215][ T6307] [ 57.585199][ T5520] usb 6-1: USB disconnect, device number 5 [ 57.615341][ T5520] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 57.711871][ T6356] netlink: 44 bytes leftover after parsing attributes in process `syz.3.156'. [ 57.814908][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 58.227550][ T41] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 58.347348][ T6405] No source specified [ 58.388793][ T41] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 58.391479][ T6409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.180'. [ 58.398851][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.404527][ T41] usb 7-1: Product: syz [ 58.406295][ T41] usb 7-1: Manufacturer: syz [ 58.409398][ T41] usb 7-1: SerialNumber: syz [ 58.418152][ T41] usb 7-1: config 0 descriptor?? [ 58.572541][ T6424] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.580342][ T6429] No source specified [ 58.641027][ T41] usb 7-1: USB disconnect, device number 5 [ 58.755029][ T6437] jffs2: notice: (6437) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 59.057211][ T5520] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 59.213616][ T5520] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 59.220456][ T5520] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.225005][ T5520] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 59.229971][ T5520] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.242342][ T5520] usb 6-1: config 0 descriptor?? [ 59.282301][ T6482] ======================================================= [ 59.282301][ T6482] WARNING: The mand mount option has been deprecated and [ 59.282301][ T6482] and is ignored by this kernel. Remove the mand [ 59.282301][ T6482] option from the mount to silence this warning. [ 59.282301][ T6482] ======================================================= [ 59.455823][ T41] usb 6-1: USB disconnect, device number 6 [ 59.486735][ T6492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.515548][ T6492] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 59.520263][ T6497] Bluetooth: hci0: unsupported parameter 255 [ 59.522136][ T6497] Bluetooth: hci0: unsupported parameter 255 [ 59.735370][ T6507] macvlan0: entered allmulticast mode [ 59.737885][ T6507] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 59.750456][ T6507] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 59.846424][ T6522] Bluetooth: hci0: unsupported parameter 255 [ 59.849144][ T6522] Bluetooth: hci0: unsupported parameter 255 [ 60.119273][ T6554] Bluetooth: hci0: unsupported parameter 255 [ 60.121776][ T6554] Bluetooth: hci0: unsupported parameter 255 [ 60.418462][ T1473] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 60.568882][ T1473] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 60.576172][ T1473] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.586546][ T1473] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 60.590559][ T1473] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.595956][ T1473] usb 8-1: config 0 descriptor?? [ 60.667602][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 60.724090][ T6609] __nla_validate_parse: 5 callbacks suppressed [ 60.724111][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 60.803524][ T1473] usb 8-1: USB disconnect, device number 5 [ 60.817201][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 60.819791][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.826869][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 60.831639][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 60.835254][ T29] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 60.840471][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 60.843951][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 60.847065][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.852063][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.059688][ T29] usb 6-1: GET_CAPABILITIES returned 0 [ 61.061468][ T29] usbtmc 6-1:16.0: can't read capabilities [ 61.266824][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.272773][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.276387][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.280034][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.283863][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.287438][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.291000][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.294605][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.298176][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.301726][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.305120][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.308588][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.312093][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.315539][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.319049][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.322525][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.330066][ T29] usb 6-1: USB disconnect, device number 7 [ 61.627990][ T41] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 61.788478][ T41] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 61.793543][ T41] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.797610][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 61.801032][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.806978][ T41] usb 8-1: config 0 descriptor?? [ 61.812031][ T41] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 61.814751][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 61.821777][ T41] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 61.826022][ T41] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 61.828681][ T41] usb 8-1: media controller created [ 61.830860][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 61.848216][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 61.850298][ T41] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 61.856508][ T41] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input7 [ 61.867740][ T41] dvb-usb: schedule remote query interval to 150 msecs. [ 61.870093][ T41] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 61.900011][ T6654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.288'. [ 61.957179][ T5520] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 62.013663][ T6631] dibusb: i2c wr: len=64 is too big! [ 62.013663][ T6631] [ 62.017968][ T41] usb 8-1: USB disconnect, device number 6 [ 62.039261][ T41] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 62.128405][ T5520] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 62.132554][ T5520] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.135684][ T5520] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 62.138603][ T5520] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.142549][ T5520] usb 7-1: config 0 descriptor?? [ 62.349818][ T41] usb 7-1: USB disconnect, device number 6 [ 63.092606][ T6697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.305'. [ 63.500487][ T6726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.314'. [ 63.866828][ T6752] jffs2: notice: (6752) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 63.909092][ T6759] comedi comedi3: fl512: I/O base address not correctly aligned [ 64.396023][ T6813] netlink: 48 bytes leftover after parsing attributes in process `syz.2.349'. [ 64.626704][ T851] IPVS: starting estimator thread 0... [ 64.717495][ T6819] IPVS: using max 44 ests per chain, 105600 per kthread [ 65.059312][ T6855] jffs2: notice: (6855) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 65.247203][ T41] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 65.409301][ T41] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 65.413487][ T41] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 65.417215][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.421171][ T41] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 65.424564][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.430344][ T41] usb 7-1: config 0 descriptor?? [ 65.557260][ T29] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 65.639866][ T41] usb 7-1: string descriptor 0 read error: -71 [ 65.644525][ T41] usb 7-1: USB disconnect, device number 7 [ 65.707972][ T29] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 65.713062][ T29] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 65.716619][ T29] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 65.720837][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 65.724539][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.731354][ T29] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 65.734787][ T29] usb 6-1: Product: syz [ 65.736599][ T29] usb 6-1: Manufacturer: syz [ 65.743236][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 65.744858][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 65.746347][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 65.747997][ T29] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 65.948481][ T5839] usb 6-1: USB disconnect, device number 8 [ 67.107227][ T851] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.261857][ T851] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 67.269376][ T851] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 67.273327][ T851] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 67.276931][ T851] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 67.281239][ T851] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 67.286032][ T851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 67.291830][ T851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 67.298666][ T851] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 67.302750][ T851] usb 5-1: Product: syz [ 67.304566][ T851] usb 5-1: Manufacturer: syz [ 67.315418][ T851] cdc_wdm 5-1:1.0: skipping garbage [ 67.317888][ T851] cdc_wdm 5-1:1.0: skipping garbage [ 67.320427][ T851] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 67.459931][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 67.518904][ T851] usb 5-1: USB disconnect, device number 4 [ 67.528343][ T6958] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 68.597255][ T5829] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 68.718313][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 68.747813][ T5829] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.752576][ T5829] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 68.755522][ T5829] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 68.758773][ T5829] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 68.761614][ T5829] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 68.765174][ T5829] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 68.768657][ T5829] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 68.773993][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 68.776570][ T5829] usb 7-1: Product: syz [ 68.777979][ T5829] usb 7-1: Manufacturer: syz [ 68.782725][ T5829] cdc_wdm 7-1:1.0: skipping garbage [ 68.784430][ T5829] cdc_wdm 7-1:1.0: skipping garbage [ 68.786155][ T5829] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 68.867632][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.871512][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.874698][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 68.880367][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.882954][ T29] usb 5-1: Product: syz [ 68.884239][ T29] usb 5-1: Manufacturer: syz [ 68.885672][ T29] usb 5-1: SerialNumber: syz [ 68.993538][ T5839] usb 7-1: USB disconnect, device number 8 [ 69.045319][ T7030] binder: 7029:7030 ioctl 4018620d 0 returned -22 [ 69.102589][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.105357][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.113771][ T29] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 69.126542][ T29] usb 5-1: USB disconnect, device number 5 [ 69.547976][ T5520] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 69.697603][ T5520] usb 5-1: Using ep0 maxpacket: 8 [ 69.702410][ T5520] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 69.707513][ T5520] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 69.712255][ T5520] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 69.716628][ T5520] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.720954][ T5520] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.724926][ T5520] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 69.729305][ T5520] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.733820][ T5520] usb 5-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.739257][ T5520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.952477][ T5520] usb 5-1: usb_control_msg returned -32 [ 69.954291][ T5520] usbtmc 5-1:16.0: can't read capabilities [ 69.956593][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.959427][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.961593][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.963612][ C2] usbtmc 5-1:16.0: invalid notification: 11 [ 69.967862][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.970408][ C2] usbtmc 5-1:16.0: invalid notification: 2 [ 69.972472][ C2] usbtmc 5-1:16.0: invalid notification: 5 [ 69.974534][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.977042][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.979051][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.981085][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.983141][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.985181][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.987264][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.989313][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.991987][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.994365][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.996440][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 69.998613][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.000751][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.003256][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.005319][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.007700][ C2] usbtmc 5-1:16.0: invalid notification: 2f [ 70.009875][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.011937][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.014850][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.016917][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.018973][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.021179][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.023287][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.025299][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.027327][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.029371][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.031407][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.033551][ C2] usbtmc 5-1:16.0: invalid notification: 2 [ 70.035555][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.037584][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.039625][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.041699][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.043711][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.045714][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.047746][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.049707][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.051702][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.053710][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.055709][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.058086][ C2] usbtmc 5-1:16.0: invalid notification: 73 [ 70.060359][ C2] usbtmc 5-1:16.0: invalid notification: 4e [ 70.062399][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.064484][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.066880][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.068951][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.071277][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.073298][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.075287][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.077396][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.079404][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.081428][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.083334][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.085268][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.087217][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.089136][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.091025][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.093490][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.096542][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.098843][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.101236][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.103502][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.105630][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.107993][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.110268][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.112533][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.114572][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.116594][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.118942][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.121251][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.123669][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.125715][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.127753][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.129859][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.132238][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.134356][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.136510][ C2] usbtmc 5-1:16.0: invalid notification: 38 [ 70.138891][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.140872][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.142863][ C2] usbtmc 5-1:16.0: invalid notification: 8 [ 70.145092][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.147290][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.150756][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.152947][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.154915][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.156910][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.159011][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.160996][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.163010][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.164973][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.166922][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.167609][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 70.169025][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.173145][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.175102][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.177164][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.179215][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.181271][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.183285][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.185304][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.187464][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.189507][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.191555][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.193528][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.195430][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.197462][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.199499][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.201556][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.203927][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.205941][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.207893][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.209922][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.211935][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.213926][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.215928][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.218068][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.220086][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.222128][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.224124][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.226114][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.228152][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.230162][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.232185][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.234174][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.236039][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.238136][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.240268][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.242346][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.244358][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.246362][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.249765][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.251788][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.253784][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.255755][ C2] usbtmc 5-1:16.0: invalid notification: 24 [ 70.257775][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.259826][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.262564][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.264855][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.267471][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.269548][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.271763][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.273765][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.275772][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.277872][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.280491][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.282729][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.284736][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.286722][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.288777][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.290772][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.292794][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.294784][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.296779][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.298664][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.300670][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.303530][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.305526][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.307533][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.309573][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.311603][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.313623][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.315652][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.318417][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.320395][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.322336][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.324344][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.326369][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.328552][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.330641][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.332685][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.334677][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.336804][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.337210][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 70.338895][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.341806][ T10] usb 6-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 70.343259][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.347278][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.349688][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.351643][ T10] usb 6-1: config 0 has no interfaces? [ 70.351788][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.355450][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.357387][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.359413][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.359554][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.362769][ T10] usb 6-1: Product: syz [ 70.364623][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.366383][ T10] usb 6-1: Manufacturer: syz [ 70.368593][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.370224][ T10] usb 6-1: SerialNumber: syz [ 70.372171][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.376152][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.378477][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.380532][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.382553][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.382976][ T10] usb 6-1: config 0 descriptor?? [ 70.384443][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.388889][ C2] usbtmc 5-1:16.0: invalid notification: 0 [ 70.454315][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 70.795675][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.801839][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.807256][ T5520] usb 6-1: USB disconnect, device number 9 [ 70.972578][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.975034][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.621929][ T5880] usb 5-1: USB disconnect, device number 6 [ 72.089053][ T7189] syzkaller0: entered promiscuous mode [ 72.091484][ T7189] syzkaller0: entered allmulticast mode [ 72.277267][ T851] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 72.428222][ T851] usb 6-1: Using ep0 maxpacket: 32 [ 72.438974][ T851] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 72.443124][ T851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.463440][ T851] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 72.554183][ T7208] jffs2: notice: (7208) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 72.582167][ T7211] syzkaller0: entered promiscuous mode [ 72.583982][ T7211] syzkaller0: entered allmulticast mode [ 72.863874][ T7234] process 'syz.0.528' launched './file0' with NULL argv: empty string added [ 73.042108][ T7241] syzkaller0: entered promiscuous mode [ 73.044595][ T7241] syzkaller0: entered allmulticast mode [ 73.459891][ T851] gspca_nw80x: reg_w err -71 [ 73.463672][ T851] nw80x 6-1:3.0: probe with driver nw80x failed with error -71 [ 73.468172][ T851] usb 6-1: USB disconnect, device number 10 [ 73.903843][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.538'. [ 74.272195][ T7280] Bluetooth: hci0: unsupported parameter 255 [ 74.274175][ T7280] Bluetooth: hci0: unsupported parameter 255 [ 74.347383][ T7284] jffs2: notice: (7284) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 74.657295][ T5839] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 74.822210][ T5839] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 74.826485][ T5839] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 74.829799][ T5839] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 74.833439][ T5839] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.842048][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 74.845258][ T5839] usb 5-1: Product: syz [ 74.846787][ T5839] usb 5-1: Manufacturer: syz [ 74.848953][ T5839] usb 5-1: SerialNumber: syz [ 74.851946][ T5839] usb 5-1: config 0 descriptor?? [ 74.861159][ T5839] hub 5-1:0.0: bad descriptor, ignoring hub [ 74.863678][ T5839] hub 5-1:0.0: probe with driver hub failed with error -5 [ 74.881229][ T5839] usb 5-1: selecting invalid altsetting 0 [ 75.066118][ T7304] Bluetooth: hci0: unsupported parameter 255 [ 75.069479][ T7304] Bluetooth: hci0: unsupported parameter 255 [ 75.372315][ T7322] jffs2: notice: (7322) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 75.703264][ T7346] block nbd2: NBD_DISCONNECT [ 75.783394][ T7353] input: syz0 as /devices/virtual/input/input8 [ 76.851609][ T7378] syzkaller0: entered promiscuous mode [ 76.853769][ T7378] syzkaller0: entered allmulticast mode [ 77.900113][ T7399] netlink: 96 bytes leftover after parsing attributes in process `syz.3.592'. [ 77.904679][ T7399] netlink: 32 bytes leftover after parsing attributes in process `syz.3.592'. [ 77.908490][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 77.914126][ T7399] netlink: 32 bytes leftover after parsing attributes in process `syz.3.592'. [ 77.918591][ T7399] netlink: 72 bytes leftover after parsing attributes in process `syz.3.592'. [ 78.122636][ T7407] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 78.241166][ T42] audit: type=1326 audit(1786255273.675:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.2.601" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x0 [ 78.491943][ T5829] usb 5-1: USB disconnect, device number 7 [ 79.463103][ T7453] jffs2: notice: (7453) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 79.791876][ T7478] syz_tun: entered allmulticast mode [ 79.796472][ T7478] lo: entered allmulticast mode [ 79.808221][ T7477] syz_tun: left allmulticast mode [ 79.935283][ T7483] jffs2: notice: (7483) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.489906][ T7504] jffs2: notice: (7504) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.583231][ T7514] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 80.646668][ T7514] bond1: entered promiscuous mode [ 80.657306][ T7514] bond1: entered allmulticast mode [ 80.660167][ T7514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.710346][ T7514] bridge1: entered promiscuous mode [ 80.712838][ T7514] bridge1: entered allmulticast mode [ 80.715807][ T7514] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 80.760281][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 80.842893][ T7524] program syz.1.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.877320][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 81.257865][ T7536] netlink: 96 bytes leftover after parsing attributes in process `syz.2.649'. [ 81.263302][ T7536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.649'. [ 81.266160][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 81.275492][ T7536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.649'. [ 81.281438][ T7536] netlink: 72 bytes leftover after parsing attributes in process `syz.2.649'. [ 81.321202][ T24] cfg80211: failed to load regulatory.db [ 81.353696][ T7542] sg_write: data in/out 462812/136 bytes for SCSI command 0x0-- guessing data in; [ 81.353696][ T7542] program syz.0.652 not setting count and/or reply_len properly [ 81.399656][ T7548] jffs2: notice: (7548) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 81.750928][ T7570] jffs2: notice: (7570) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 81.917611][ T5836] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 81.939118][ T5829] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 82.072381][ T5836] usb 8-1: Using ep0 maxpacket: 8 [ 82.074803][ T5836] usb 8-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 82.078880][ T5836] usb 8-1: config 0 has no interfaces? [ 82.087782][ T5829] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 82.096412][ T5836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.104777][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 82.109735][ T5836] usb 8-1: Product: syz [ 82.111149][ T5836] usb 8-1: Manufacturer: syz [ 82.114907][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.117699][ T5836] usb 8-1: SerialNumber: syz [ 82.121269][ T5829] usb 5-1: config 0 descriptor?? [ 82.123879][ T7568] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 82.132977][ T5836] usb 8-1: config 0 descriptor?? [ 82.190339][ T7595] jffs2: notice: (7595) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.363293][ T7606] capability: warning: `syz.2.680' uses deprecated v2 capabilities in a way that may be insecure [ 82.373446][ T7564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.388290][ T7564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.403695][ T5836] usb 8-1: USB disconnect, device number 7 [ 82.579989][ T5829] hid (null): unknown global tag 0xc [ 82.591836][ T5829] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 82.595698][ T5829] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 82.598071][ T5829] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 82.600204][ T5829] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 82.602403][ T5829] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 82.604535][ T5829] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 82.607026][ T5829] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 82.611763][ T5829] asus 0003:0B05:1ABE.0002: unknown main item tag 0x1 [ 82.614713][ T5829] asus 0003:0B05:1ABE.0002: unknown global tag 0xc [ 82.617917][ T5829] asus 0003:0B05:1ABE.0002: item 0 1 1 12 parsing failed [ 82.621700][ T5829] asus 0003:0B05:1ABE.0002: Asus hid parse failed: -22 [ 82.624595][ T5829] asus 0003:0B05:1ABE.0002: probe with driver asus failed with error -22 [ 82.783175][ T851] usb 5-1: USB disconnect, device number 8 [ 83.981778][ T7686] netlink: 44 bytes leftover after parsing attributes in process `syz.3.717'. [ 84.062925][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 84.101954][ T7692] macvlan1: entered allmulticast mode [ 84.103678][ T7692] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 84.118709][ T7692] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 84.208952][ T7699] faux_driver vgem: [drm] Unknown color mode 38; guessing buffer size. [ 84.218006][ T7699] input: syz0 as /devices/virtual/input/input9 [ 84.603213][ T7716] loop2: detected capacity change from 0 to 7 [ 84.614162][ T7716] Dev loop2: unable to read RDB block 7 [ 84.616219][ T7716] loop2: unable to read partition table [ 84.620267][ T7716] loop2: partition table beyond EOD, truncated [ 84.622544][ T7716] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.251029][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 85.275995][ T7731] No source specified [ 85.282287][ T7727] macvlan2: entered allmulticast mode [ 85.306230][ T7727] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.359734][ T7736] netlink: 44 bytes leftover after parsing attributes in process `syz.2.733'. [ 85.406039][ T7738] TCP: TCP_TX_DELAY enabled [ 86.817485][ T5836] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 86.832102][ T7791] netlink: 44 bytes leftover after parsing attributes in process `syz.0.749'. [ 86.971925][ T5836] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.981515][ T5836] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 86.988514][ T5836] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 86.992156][ T5836] usb 6-1: config 0 interface 0 has no altsetting 0 [ 86.996095][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 86.999440][ T5836] usb 6-1: Product: syz [ 87.001014][ T5836] usb 6-1: Manufacturer: syz [ 87.002743][ T5836] usb 6-1: SerialNumber: syz [ 87.005753][ T5836] usb 6-1: config 0 descriptor?? [ 87.012317][ T5836] hub 6-1:0.0: bad descriptor, ignoring hub [ 87.014508][ T5836] hub 6-1:0.0: probe with driver hub failed with error -5 [ 87.019033][ T5836] usb 6-1: selecting invalid altsetting 0 [ 87.327383][ T5836] usb 6-1: USB disconnect, device number 11 [ 87.502491][ T7807] loop2: detected capacity change from 0 to 7 [ 87.508296][ T7807] Dev loop2: unable to read RDB block 7 [ 87.510962][ T7807] loop2: unable to read partition table [ 87.512910][ T7807] loop2: partition table beyond EOD, truncated [ 87.516213][ T7807] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 87.837223][ T41] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 87.993562][ T41] usb 5-1: not running at top speed; connect to a high speed hub [ 87.996997][ T41] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 88.003520][ T41] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 88.007915][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.017966][ T41] gspca_main: spca501-2.14.0 probing 0000:0000 [ 88.239962][ T7826] netlink: 44 bytes leftover after parsing attributes in process `syz.1.761'. [ 88.531092][ T41] gspca_spca501: reg write: error -110 [ 88.532876][ T41] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 88.538281][ T41] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 88.550664][ T41] uvcvideo 5-1:1.0: Found UVC 1.00 device (0000:0000) [ 88.558865][ T41] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 88.562420][ T41] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 88.565283][ T41] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 88.576010][ T41] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -5 [ 88.904612][ T7845] input: syz0 as /devices/virtual/input/input10 [ 89.231936][ T5839] usb 5-1: USB disconnect, device number 9 [ 89.364292][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'. [ 89.411074][ T7880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.473987][ T7886] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.481691][ T7880] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 89.677750][ T5839] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 89.827454][ T5839] usb 7-1: Using ep0 maxpacket: 32 [ 89.833960][ T5839] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 89.846233][ T5839] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 89.854373][ T5839] usb 7-1: config 0 has no interface number 0 [ 89.865660][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.870405][ T5839] usb 7-1: Product: syz [ 89.874685][ T5839] usb 7-1: Manufacturer: syz [ 89.878225][ T5839] usb 7-1: SerialNumber: syz [ 89.888490][ T5839] usb 7-1: config 0 descriptor?? [ 89.895873][ T5839] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 89.968032][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.796'. [ 89.983436][ T7911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.032607][ T7911] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 90.046993][ T7914] syzkaller0: entered promiscuous mode [ 90.049360][ T7914] syzkaller0: entered allmulticast mode [ 90.111272][ T5839] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 90.122772][ T5839] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 90.507748][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 90.509145][ T41] usb 7-1: USB disconnect, device number 9 [ 90.558197][ T41] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 90.574051][ T41] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 90.582485][ T41] quatech2 7-1:0.51: device disconnected [ 90.850867][ T7947] netlink: 44 bytes leftover after parsing attributes in process `syz.3.808'. [ 90.996158][ T7953] syzkaller0: entered promiscuous mode [ 90.998562][ T7953] syzkaller0: entered allmulticast mode [ 91.095976][ T7958] input: syz0 as /devices/virtual/input/input11 [ 91.530506][ T7978] jffs2: notice: (7978) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.647548][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.822'. [ 91.657330][ T7992] netlink: 44 bytes leftover after parsing attributes in process `syz.3.824'. [ 91.673780][ T7988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.448332][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 92.467775][ T8022] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.577517][ T8040] jffs2: notice: (8040) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.661651][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'. [ 92.685661][ T8052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 92.971701][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.857'. [ 93.087216][ T5839] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 93.186568][ T8094] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 93.189477][ T8094] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 93.194725][ T8094] vhci_hcd vhci_hcd.0: Device attached [ 93.257955][ T5839] usb 7-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40 [ 93.260252][ T8095] vhci_hcd: connection closed [ 93.262942][ T13] vhci_hcd vhci_hcd.3: stop threads [ 93.263391][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.265443][ T13] vhci_hcd vhci_hcd.3: release socket [ 93.266598][ T5839] usb 7-1: Product: syz [ 93.269830][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 93.271856][ T5839] usb 7-1: Manufacturer: syz [ 93.276948][ T5839] usb 7-1: SerialNumber: syz [ 93.485039][ T5839] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 93.535030][ T5839] usb 7-1: USB disconnect, device number 10 [ 93.557207][ T5733] udevd[5733]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.726820][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 93.800923][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.869'. [ 93.821364][ T8115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.841995][ T8115] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 93.964788][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.876'. [ 93.978412][ T8128] macvlan3: entered allmulticast mode [ 93.984251][ T8128] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 95.117384][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 95.139116][ T8163] macvlan4: entered allmulticast mode [ 95.175231][ T8163] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 95.178714][ T8173] netlink: 44 bytes leftover after parsing attributes in process `syz.0.884'. [ 95.269384][ T8181] overlayfs: failed to resolve './file1': -2 [ 96.572414][ T8234] overlayfs: failed to resolve './file1': -2 [ 96.770904][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 96.849490][ T8241] macvlan5: entered allmulticast mode [ 96.856209][ T8241] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 96.915708][ T8252] netlink: 44 bytes leftover after parsing attributes in process `syz.3.904'. [ 97.093117][ T8267] overlayfs: failed to resolve './file1': -2 [ 98.232240][ T8315] netlink: 44 bytes leftover after parsing attributes in process `syz.1.923'. [ 98.357292][ T5839] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 98.527247][ T5839] usb 8-1: Using ep0 maxpacket: 16 [ 98.530428][ T5839] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 98.534508][ T5839] usb 8-1: too many configurations: 123, using maximum allowed: 8 [ 98.541239][ T5839] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.548982][ T5839] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.558110][ T5839] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.566539][ T5839] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.574352][ T5839] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.579778][ T5839] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.584849][ T5839] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.591038][ T5839] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.596191][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 98.598819][ T5839] usb 8-1: SerialNumber: syz [ 98.602507][ T5839] usb 8-1: config 0 descriptor?? [ 98.609439][ T5839] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input12 [ 98.826051][ T8301] input: syz0 as /devices/virtual/input/input13 [ 98.954979][ T5126] bcm5974 8-1:0.0: could not read from device [ 98.966853][ T5126] bcm5974 8-1:0.0: could not read from device [ 98.986498][ T5839] usb 8-1: USB disconnect, device number 8 [ 98.987902][ T5126] bcm5974 8-1:0.0: could not read from device [ 99.289481][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.943'. [ 99.308666][ T8381] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.222721][ T8427] input: syz0 as /devices/virtual/input/input14 [ 100.588805][ T8444] netlink: 48 bytes leftover after parsing attributes in process `syz.3.965'. [ 100.864724][ T8463] input: syz0 as /devices/virtual/input/input15 [ 101.099159][ T8480] dummy0: entered promiscuous mode [ 101.113876][ T8480] gretap0: entered promiscuous mode [ 101.135458][ T8480] hsr1: entered allmulticast mode [ 101.137327][ T8480] dummy0: entered allmulticast mode [ 101.148725][ T8480] gretap0: entered allmulticast mode [ 101.721102][ T5730] Bluetooth: hci3: link tx timeout [ 101.724806][ T5730] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.264301][ T8529] overlayfs: failed to resolve './file0': -2 [ 102.410360][ T8537] input: syz0 as /devices/virtual/input/input16 [ 102.489858][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'. [ 102.584045][ T8550] jffs2: notice: (8550) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 102.757249][ T1347] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 102.918844][ T1347] usb 6-1: Using ep0 maxpacket: 8 [ 102.921512][ T1347] usb 6-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 102.925043][ T1347] usb 6-1: config 0 has no interfaces? [ 102.928858][ T1347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.931471][ T1347] usb 6-1: Product: syz [ 102.932791][ T1347] usb 6-1: Manufacturer: syz [ 102.934289][ T1347] usb 6-1: SerialNumber: syz [ 102.940495][ T1347] usb 6-1: config 0 descriptor?? [ 103.029812][ T8562] fuse: Bad value for 'fd' [ 103.271548][ T8573] input: syz0 as /devices/virtual/input/input17 [ 103.346843][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.356687][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.368521][ T1347] usb 6-1: USB disconnect, device number 12 [ 103.444796][ T8579] overlayfs: failed to resolve './file0': -2 [ 103.777345][ T5736] Bluetooth: hci3: command 0x0406 tx timeout [ 103.906170][ T42] audit: type=1326 audit(1786255299.335:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.0.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 103.926427][ T42] audit: type=1326 audit(1786255299.345:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.0.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 103.948594][ T42] audit: type=1326 audit(1786255299.345:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.0.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 103.963654][ T42] audit: type=1326 audit(1786255299.355:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.0.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 103.977347][ T42] audit: type=1326 audit(1786255299.355:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.0.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=334 compat=1 ip=0xf703efec code=0x7ffc0000 [ 103.997739][ T42] audit: type=1326 audit(1786255299.355:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.0.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 104.016996][ T42] audit: type=1326 audit(1786255299.355:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.0.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 104.040071][ T42] audit: type=1326 audit(1786255299.355:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.0.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf703efec code=0x7ffc0000 [ 104.074287][ T42] audit: type=1326 audit(1786255299.355:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.0.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x7ffc0000 [ 104.095103][ T8604] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1021'. [ 104.110548][ T8604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1021'. [ 104.366107][ T8614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1026'. [ 104.671621][ T8625] syz.0.1030 uses obsolete (PF_INET,SOCK_PACKET) [ 104.980768][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 104.991330][ T8636] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1033'. [ 105.004788][ T8636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1033'. [ 105.186396][ T8644] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1037'. [ 105.316056][ T8649] syzkaller0: entered promiscuous mode [ 105.317942][ T8649] syzkaller0: entered allmulticast mode [ 105.815692][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 108.349050][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1041'. [ 108.418454][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'. [ 108.455018][ T8664] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.846633][ T8694] syzkaller0: entered promiscuous mode [ 108.849201][ T8694] syzkaller0: entered allmulticast mode [ 109.097447][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 109.247315][ T9] usb 7-1: device descriptor read/64, error -71 [ 109.497247][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 109.637526][ T9] usb 7-1: device descriptor read/64, error -71 [ 109.734336][ T8713] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1057'. [ 109.764270][ T9] usb usb7-port1: attempt power cycle [ 110.162204][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 110.197675][ T9] usb 7-1: device descriptor read/8, error -71 [ 110.450732][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 110.482418][ T9] usb 7-1: device descriptor read/8, error -71 [ 110.599404][ T9] usb usb7-port1: unable to enumerate USB device [ 110.937586][ T5843] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 111.086925][ T8750] capability: warning: `syz.1.1067' uses 32-bit capabilities (legacy support in use) [ 111.088055][ T5843] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 111.096248][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.102495][ T5843] usb 5-1: Product: syz [ 111.103794][ T5843] usb 5-1: Manufacturer: syz [ 111.105217][ T5843] usb 5-1: SerialNumber: syz [ 111.111012][ T5843] usb 5-1: config 0 descriptor?? [ 111.120629][ T5843] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 111.194855][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1069'. [ 111.256053][ T8760] ------------[ cut here ]------------ [ 111.258620][ T8760] err == -EMSGSIZE [ 111.258635][ T8760] WARNING: net/core/rtnetlink.c:4538 at rtmsg_ifinfo_build_skb+0x1c1/0x260, CPU#0: syz.1.1070/8760 [ 111.264998][ T8760] Modules linked in: [ 111.267046][ T8760] CPU: 0 UID: 0 PID: 8760 Comm: syz.1.1070 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.272491][ T8760] Tainted: [L]=SOFTLOCKUP [ 111.274361][ T8760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.280913][ T8760] RIP: 0010:rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 111.284162][ T8760] Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 00 00 00 45 8b 76 08 e9 3c ff ff ff e8 80 95 77 f8 90 <0f> 0b 90 ba 02 00 00 00 48 89 ee 31 ff bb a6 ff ff ff e8 58 8f f0 [ 111.292896][ T8760] RSP: 0018:ffffc9000cc86da8 EFLAGS: 00010283 [ 111.295601][ T8760] RAX: 000000000000bedf RBX: 00000000ffffffa6 RCX: ffffc90004421000 [ 111.301435][ T8760] RDX: 0000000000080000 RSI: ffffffff89923a20 RDI: ffff888028178000 [ 111.304919][ T8760] RBP: ffff88802a56d400 R08: 0000000000000005 R09: 0000000000000000 [ 111.309516][ T8760] R10: 00000000ffffffa6 R11: 0000000000000000 R12: 0000000000000002 [ 111.313433][ T8760] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88806f74c108 [ 111.316898][ T8760] FS: 0000000000000000(0000) GS:ffff888096bf3000(0063) knlGS:00000000f53ddb40 [ 111.317390][ T8762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.321164][ T8760] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 111.328118][ T8760] CR2: 00000000f720ea06 CR3: 0000000053018000 CR4: 0000000000352ef0 [ 111.328923][ T5843] gspca_stk1135: reg_w 0x2 err -71 [ 111.331589][ T8760] Call Trace: [ 111.331600][ T8760] [ 111.331615][ T8760] rtnetlink_event+0x137/0x1f0 [ 111.338715][ T8760] notifier_call_chain+0x99/0x3f0 [ 111.339448][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 111.340987][ T8760] call_netdevice_notifiers_info+0xbe/0x110 [ 111.341019][ T8760] netif_disable_lro+0x3e9/0x660 [ 111.343117][ T5843] gspca_stk1135: Sensor write failed [ 111.345733][ T8760] ? __pfx_netif_disable_lro+0x10/0x10 [ 111.347527][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 111.349707][ T8760] ? lockdep_hardirqs_on+0x78/0x100 [ 111.351495][ T5843] gspca_stk1135: Sensor write failed [ 111.354147][ T8760] ? __local_bh_enable_ip+0x9e/0x120 [ 111.354177][ T8760] ? neigh_parms_alloc+0x45f/0x5e0 [ 111.355838][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 111.358149][ T8760] ipv6_add_dev+0xde0/0x1520 [ 111.358183][ T8760] addrconf_notify+0x5db/0x1ba0 [ 111.358217][ T8760] ? __pfx_tls_dev_event+0x10/0x10 [ 111.358241][ T8760] ? __pfx_addrconf_notify+0x10/0x10 [ 111.358273][ T8760] ? ip6mr_device_event+0x1c4/0x230 [ 111.358313][ T8760] notifier_call_chain+0x99/0x3f0 [ 111.358347][ T8760] call_netdevice_notifiers_info+0xbe/0x110 [ 111.358372][ T8760] register_netdevice+0x1998/0x25a0 [ 111.358408][ T8760] ? __pfx_register_netdevice+0x10/0x10 [ 111.358447][ T8760] macsec_newlink+0x4fb/0x1c50 [ 111.358505][ T8760] ? __pfx_macsec_newlink+0x10/0x10 [ 111.358522][ T8760] ? __kasan_kmalloc+0xaa/0xb0 [ 111.358549][ T8760] ? __kvmalloc_node_noprof+0x36d/0x970 [ 111.358580][ T8760] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 111.358608][ T8760] ? validate_linkmsg+0x57c/0xba0 [ 111.358640][ T8760] ? __pfx_validate_linkmsg+0x10/0x10 [ 111.358669][ T8760] ? alloc_netdev_mqs+0x120a/0x15c0 [ 111.358703][ T8760] ? rtnl_create_link+0xa4b/0xf80 [ 111.358736][ T8760] ? __pfx_macsec_newlink+0x10/0x10 [ 111.358757][ T8760] rtnl_newlink+0x1499/0x2380 [ 111.358797][ T8760] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.358825][ T8760] ? rcu_is_watching+0x12/0xc0 [ 111.358850][ T8760] ? kasan_quarantine_put+0x104/0x240 [ 111.358880][ T8760] ? kfree_skbmem+0x19a/0x210 [ 111.358902][ T8760] ? kmem_cache_free+0x127/0x6b0 [ 111.358936][ T8760] ? find_held_lock+0x2b/0x80 [ 111.358971][ T8760] ? find_held_lock+0x2b/0x80 [ 111.358996][ T8760] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 111.359024][ T8760] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 111.359056][ T8760] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.359086][ T8760] rtnetlink_rcv_msg+0x95e/0xe90 [ 111.359118][ T8760] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.359155][ T8760] ? ref_tracker_free+0x37e/0x6c0 [ 111.359181][ T8760] netlink_rcv_skb+0x159/0x420 [ 111.359208][ T8760] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.359239][ T8760] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.359273][ T8760] ? netlink_deliver_tap+0x1ae/0xcc0 [ 111.359306][ T8760] netlink_unicast+0x585/0x850 [ 111.359334][ T8760] ? __pfx_netlink_unicast+0x10/0x10 [ 111.361157][ T5843] gspca_stk1135: Sensor read failed [ 111.363344][ T8760] netlink_sendmsg+0x8b0/0xda0 [ 111.365354][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 111.367452][ T8760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.372526][ T5843] gspca_stk1135: Sensor read failed [ 111.373544][ T8760] ? apparmor_socket_sendmsg+0x15b/0x270 [ 111.373576][ T8760] ____sys_sendmsg+0xa4d/0xbe0 [ 111.375229][ T5843] gspca_stk1135: Detected sensor type unknown (0x0) [ 111.377481][ T8760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.379736][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 111.381676][ T8760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.381715][ T8760] ___sys_sendmsg+0x190/0x1e0 [ 111.384030][ T5843] gspca_stk1135: Sensor read failed [ 111.385940][ T8760] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.385967][ T8760] ? futex_wait+0x11e/0x370 [ 111.388162][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 111.389799][ T8760] ? find_held_lock+0x2b/0x80 [ 111.391683][ T5843] gspca_stk1135: Sensor read failed [ 111.393874][ T8760] __sys_sendmsg+0x160/0x210 [ 111.395600][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 111.398013][ T8760] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.400090][ T5843] gspca_stk1135: Sensor write failed [ 111.401979][ T8760] __do_fast_syscall_32+0xe7/0x970 [ 111.403714][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 111.405788][ T8760] do_fast_syscall_32+0x32/0x70 [ 111.405821][ T8760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.407797][ T5843] gspca_stk1135: Sensor write failed [ 111.409592][ T8760] RIP: 0023:0xf6feefec [ 111.409622][ T8760] Code: Unable to access opcode bytes at 0xf6feefc2. [ 111.411391][ T5843] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 111.413402][ T8760] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 [ 111.417312][ T5843] usb 5-1: USB disconnect, device number 10 [ 111.419241][ T8760] ORIG_RAX: 0000000000000172 [ 111.419253][ T8760] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 111.419267][ T8760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.532109][ T8760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.535484][ T8760] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.539169][ T8760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.542664][ T8760] [ 111.544068][ T8760] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.547266][ T8760] CPU: 0 UID: 0 PID: 8760 Comm: syz.1.1070 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.551916][ T8760] Tainted: [L]=SOFTLOCKUP [ 111.553831][ T8760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.558197][ T8760] Call Trace: [ 111.559698][ T8760] [ 111.561045][ T8760] dump_stack_lvl+0x100/0x190 [ 111.563106][ T8760] vpanic+0x552/0x970 [ 111.564857][ T8760] ? __pfx_vpanic+0x10/0x10 [ 111.566779][ T8760] panic+0xd1/0xe0 [ 111.568362][ T8760] ? __pfx_panic+0x10/0x10 [ 111.570321][ T8760] check_panic_on_warn.cold+0x19/0x34 [ 111.572607][ T8760] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 111.575047][ T8760] __warn.cold+0x191/0x318 [ 111.577028][ T8760] __report_bug+0x30f/0x440 [ 111.579049][ T8760] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 111.581523][ T8760] ? __pfx___report_bug+0x10/0x10 [ 111.583741][ T8760] ? __pfx_rtnl_fill_ifinfo.isra.0+0x10/0x10 [ 111.586355][ T8760] ? trace_kmalloc+0xeb/0x110 [ 111.588428][ T8760] ? __kasan_kmalloc+0xaa/0xb0 [ 111.590551][ T8760] ? __kmalloc_node_track_caller_noprof+0x34f/0x830 [ 111.593441][ T8760] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 111.595861][ T8760] report_bug+0xb2/0x220 [ 111.597759][ T8760] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 111.600207][ T8760] handle_bug+0x16a/0x2a0 [ 111.602145][ T8760] exc_invalid_op+0x17/0x50 [ 111.604132][ T8760] asm_exc_invalid_op+0x1a/0x20 [ 111.606272][ T8760] RIP: 0010:rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 111.608815][ T8760] Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 00 00 00 45 8b 76 08 e9 3c ff ff ff e8 80 95 77 f8 90 <0f> 0b 90 ba 02 00 00 00 48 89 ee 31 ff bb a6 ff ff ff e8 58 8f f0 [ 111.617059][ T8760] RSP: 0018:ffffc9000cc86da8 EFLAGS: 00010283 [ 111.619699][ T8760] RAX: 000000000000bedf RBX: 00000000ffffffa6 RCX: ffffc90004421000 [ 111.623159][ T8760] RDX: 0000000000080000 RSI: ffffffff89923a20 RDI: ffff888028178000 [ 111.626590][ T8760] RBP: ffff88802a56d400 R08: 0000000000000005 R09: 0000000000000000 [ 111.629975][ T8760] R10: 00000000ffffffa6 R11: 0000000000000000 R12: 0000000000000002 [ 111.633436][ T8760] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88806f74c108 [ 111.636873][ T8760] ? rtmsg_ifinfo_build_skb+0x1c0/0x260 [ 111.639302][ T8760] ? rtmsg_ifinfo_build_skb+0x1c0/0x260 [ 111.641793][ T8760] rtnetlink_event+0x137/0x1f0 [ 111.643903][ T8760] notifier_call_chain+0x99/0x3f0 [ 111.646146][ T8760] call_netdevice_notifiers_info+0xbe/0x110 [ 111.648723][ T8760] netif_disable_lro+0x3e9/0x660 [ 111.650917][ T8760] ? __pfx_netif_disable_lro+0x10/0x10 [ 111.653313][ T8760] ? lockdep_hardirqs_on+0x78/0x100 [ 111.655594][ T8760] ? __local_bh_enable_ip+0x9e/0x120 [ 111.657929][ T8760] ? neigh_parms_alloc+0x45f/0x5e0 [ 111.660200][ T8760] ipv6_add_dev+0xde0/0x1520 [ 111.662289][ T8760] addrconf_notify+0x5db/0x1ba0 [ 111.664418][ T8760] ? __pfx_tls_dev_event+0x10/0x10 [ 111.666680][ T8760] ? __pfx_addrconf_notify+0x10/0x10 [ 111.669000][ T8760] ? ip6mr_device_event+0x1c4/0x230 [ 111.671298][ T8760] notifier_call_chain+0x99/0x3f0 [ 111.673497][ T8760] call_netdevice_notifiers_info+0xbe/0x110 [ 111.676061][ T8760] register_netdevice+0x1998/0x25a0 [ 111.678344][ T8760] ? __pfx_register_netdevice+0x10/0x10 [ 111.680778][ T8760] macsec_newlink+0x4fb/0x1c50 [ 111.682882][ T8760] ? __pfx_macsec_newlink+0x10/0x10 [ 111.685283][ T8760] ? __kasan_kmalloc+0xaa/0xb0 [ 111.687429][ T8760] ? __kvmalloc_node_noprof+0x36d/0x970 [ 111.689883][ T8760] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 111.692151][ T8760] ? validate_linkmsg+0x57c/0xba0 [ 111.694399][ T8760] ? __pfx_validate_linkmsg+0x10/0x10 [ 111.696773][ T8760] ? alloc_netdev_mqs+0x120a/0x15c0 [ 111.699108][ T8760] ? rtnl_create_link+0xa4b/0xf80 [ 111.701367][ T8760] ? __pfx_macsec_newlink+0x10/0x10 [ 111.703657][ T8760] rtnl_newlink+0x1499/0x2380 [ 111.705770][ T8760] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.707998][ T8760] ? rcu_is_watching+0x12/0xc0 [ 111.710111][ T8760] ? kasan_quarantine_put+0x104/0x240 [ 111.712470][ T8760] ? kfree_skbmem+0x19a/0x210 [ 111.714547][ T8760] ? kmem_cache_free+0x127/0x6b0 [ 111.716752][ T8760] ? find_held_lock+0x2b/0x80 [ 111.718862][ T8760] ? find_held_lock+0x2b/0x80 [ 111.720864][ T8760] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 111.723128][ T8760] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 111.725428][ T8760] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.727663][ T8760] rtnetlink_rcv_msg+0x95e/0xe90 [ 111.729708][ T8760] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.732074][ T8760] ? ref_tracker_free+0x37e/0x6c0 [ 111.734318][ T8760] netlink_rcv_skb+0x159/0x420 [ 111.736446][ T8760] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.738879][ T8760] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.741251][ T8760] ? netlink_deliver_tap+0x1ae/0xcc0 [ 111.743592][ T8760] netlink_unicast+0x585/0x850 [ 111.745736][ T8760] ? __pfx_netlink_unicast+0x10/0x10 [ 111.748077][ T8760] netlink_sendmsg+0x8b0/0xda0 [ 111.750195][ T8760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.752542][ T8760] ? apparmor_socket_sendmsg+0x15b/0x270 [ 111.755041][ T8760] ____sys_sendmsg+0xa4d/0xbe0 [ 111.757143][ T8760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.759463][ T8760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.761828][ T8760] ___sys_sendmsg+0x190/0x1e0 [ 111.763924][ T8760] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.766199][ T8760] ? futex_wait+0x11e/0x370 [ 111.768211][ T8760] ? find_held_lock+0x2b/0x80 [ 111.770274][ T8760] __sys_sendmsg+0x160/0x210 [ 111.772341][ T8760] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.774617][ T8760] __do_fast_syscall_32+0xe7/0x970 [ 111.776897][ T8760] do_fast_syscall_32+0x32/0x70 [ 111.779065][ T8760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.781874][ T8760] RIP: 0023:0xf6feefec [ 111.783693][ T8760] Code: Unable to access opcode bytes at 0xf6feefc2. [ 111.786613][ T8760] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 111.790254][ T8760] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 111.793698][ T8760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.797123][ T8760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.800567][ T8760] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.804062][ T8760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.807527][ T8760] [ 111.809661][ T8760] Kernel Offset: disabled [ 111.811580][ T8760] Rebooting in 86400 seconds..